last executing test programs: 4m58.620605545s ago: executing program 32 (id=170): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) (async) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) (async) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r3, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4}, 0x50) write$FUSE_DIRENT(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="01040000000000009fed2788c5532994414b47034801d524faf4166382", @ANYRES64=r4], 0x58) (async) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 3m47.644750288s ago: executing program 33 (id=438): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0xfd6893aced4ab15c, 0x3, 0x1, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0xff, &(0x7f0000000100)) r2 = inotify_init() r3 = inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x400017e) inotify_rm_watch(r2, r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x14, 0x13, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) 3m42.145897982s ago: executing program 34 (id=450): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f00000002c0)=""/126, 0x7e}, {0x0}], 0x2, 0x80, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r3}, 0x18) (async) times(0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) socket(0x10, 0x803, 0x0) (async) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) readv(r9, &(0x7f0000000000)=[{&(0x7f0000001380)=""/140, 0x8c}], 0x1) ioctl$TCSETS(r9, 0x5402, &(0x7f00000014c0)={0x0, 0xffffffff, 0x0, 0x0, 0xd, "076a1400"}) (async) ioctl$TCSETS(r9, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) r10 = syz_open_pts(r9, 0x42) dup3(r10, r9, 0x0) 3m37.78852121s ago: executing program 35 (id=459): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) io_setup(0x3, &(0x7f0000000180)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x4e, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000540), r2) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02f4ff"], 0x48}}, 0x40884) syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = epoll_create1(0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r9, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r9, 0xc01064c2, &(0x7f00000000c0)={0x0, 0x0, r10}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r8, 0xc01864cb, &(0x7f0000000200)={&(0x7f0000000180)=[r11, r12], &(0x7f00000001c0)=[0xb, 0x1, 0x9e, 0x36e0, 0x5, 0x0], 0x2, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000280)={&(0x7f0000000080)=[r11], &(0x7f00000001c0)=[0x2, 0x7, 0x5, 0x0], 0x1}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r13, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r14, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r13, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r15 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r14, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r15, 0x1, r7, &(0x7f0000000000)={0xa0000001}) epoll_wait(r15, &(0x7f0000000040)=[{}], 0x1, 0x400) 3m36.670912976s ago: executing program 36 (id=463): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 64) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x4, 0x20000000, 0x4) (async, rerun: 32) syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) (async, rerun: 32) socket$xdp(0x2c, 0x3, 0x0) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) (async, rerun: 32) io_uring_enter(r5, 0x2d37, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='cachefiles_write\x00', r9, 0x0, 0x4bf}, 0x18) (async) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x10007f}) (async) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x54e7}, [@TCA_NETEM_SLOT={0x23, 0xc, {0x0, 0x2}}]}}}]}, 0x78}}, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r10, 0xc048aeca, &(0x7f0000000080)) 3m34.267683025s ago: executing program 37 (id=464): r0 = syz_usb_connect$hid(0x0, 0x51, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004019040100000000000001090224000100000000090400004c3a000000092100000001220700090581030000000000"], 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x4, 0xfffffff9, 0x0, 0x10, r1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1, 0x5, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000a00)=ANY=[@ANYRES64=r2, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0x0, 0x60000, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x105, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r4}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r5, 0x7a9, &(0x7f0000000ec0)={{@my=0x0, 0x2}, 0xfffffffffffffffd, 0x5d, 0x1, 0x6, 0x13, 0x8627, 0x74, 0x8001}) r6 = syz_usb_connect$cdc_ecm(0x4, 0x138, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x250, 0xa0, 0x9, 0x7, 0x40, 0xf9}, 0xb3, &(0x7f0000000940)=ANY=[@ANYBLOB="050fb300060b1001080500030609007b731001e2021303363d614ded45ca37d116a2e79a949a7e5cb116d0925165d4917d93edb857ce72ee18ed8c818f01b17c2af8740676d51c7ba11e567c192361d947ca69f5ff6b5641ce2b46ee088ccf561ba557e1dfa2aae46616c51f9b141590549faedb65685b6ac2d8b811e80a49b2f75bbbd4d6fdb33d949a8570a3a30a100302080006f8070014100abb0262010000f00300c0ffff0000c000000b100104db00fa0705000000000000000000"]}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000000c0), 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r7, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) syz_usb_control_io$cdc_ecm(r6, &(0x7f00000007c0)={0x14, &(0x7f00000006c0)={0x20, 0x23, 0x7f, {0x7f, 0x9, "5c85c10a8777f16742ad24abef2123c79acaf88d5f39c099a9a7f76f789f422e4d30f25dac5ccb10e93f33e7c6ebf0b6ebcb83b92bb75b1a700551fd45b90e4a6eb485fafbe95945cd860570b4bb0881a939d8ecb148f787f01e58517d5d63a47d9b7d47cb5c485ff91f40b5c3b87627b9adb7650a665e848981615aac"}}, &(0x7f0000000780)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000900)={0x1c, &(0x7f0000000800)={0x40, 0x17, 0x4f, "5b6037c972f18140a37d65783e47697611c4b68edf027a29d931f1142955af3ef20cf78b7579323ab1860937c247ebcfb09d9c04d2a365a082050211d37c751fea8fcd04a6c0b0ce8db5a041e0c8e6"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0xad}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x7}}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\n'], 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x81) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'vxcan0\x00', 0x0}) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b00)=0xffffffffffffffff, 0x4) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000440)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000c40), &(0x7f0000000c80)=r4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x18, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000b5000000000000006b000000851000000600a33ef5bfb5ebafc31f95"], &(0x7f0000000540)='syzkaller\x00', 0x8000, 0xec, &(0x7f00000005c0)=""/236, 0x41000, 0x4c, '\x00', r8, 0x0, r9, 0x8, &(0x7f0000000b40)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000b80)={0x2, 0x10, 0x1ff, 0xb}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000d00)=[r10, r11], &(0x7f0000000d40)=[{0x3, 0x4, 0xa, 0x6}, {0x0, 0x4, 0xe, 0x3}, {0x4, 0x5, 0x4, 0xb}, {0x3, 0x1, 0x10, 0x7}, {0x5, 0x5, 0xb, 0xb}], 0x10, 0x1, @void, @value}, 0x94) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x100000, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) llistxattr(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r12 = userfaultfd(0x80001) ioctl$UFFDIO_API(r12, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x1}) 3m16.131930343s ago: executing program 38 (id=474): syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x200488d4) (async) r1 = socket$netlink(0x10, 0x3, 0xe) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x2, 0x2ff7afedf}, 0xc) (async) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000100)=0x9, 0x4) (async) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000000)={0x8, 0x1, 0x6}, &(0x7f00000009c0)=[{}, {}, {}, {}, {}, {}]) (async) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local, 0x1}}}, 0x32) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r4, &(0x7f00000000c0), 0x2) (async) userfaultfd(0x1) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioperm(0x4, 0x7fff, 0x6) (async) umount2(0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7}, 0x18) (async) sendmsg$NFNL_MSG_ACCT_GET(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={0x0, 0x90}, 0x1, 0x0, 0x0, 0x4c000}, 0x20002080) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@newtfilter={0x34, 0x2c, 0x400, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x4000) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x31d}) (async) read(r4, 0x0, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000080)={'batadv0\x00', 0x401}) 2m47.078088608s ago: executing program 3 (id=522): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x6c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x30, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_LIMIT_UNIT={0xc}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf0}}, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000200)=0x2000, 0x4) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000000)=0xb2, 0x4) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000280)=0x181, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000480)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000100)=0x6, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000480)='./file0\x00', 0x103680, 0x20) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f00000000c0)='.\x00', 0x4000000e) ftruncate(r6, 0x2000009) sendfile(r5, r6, 0x0, 0x6) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r8 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r9 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) tee(r8, r9, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'vlan0\x00'}) 2m46.72504473s ago: executing program 3 (id=525): ioctl$TCSETSW(0xffffffffffffffff, 0x5403, &(0x7f0000000000)={0x0, 0xfff7fffc, 0x0, 0xffffffff, 0x0, "fb0000000004906f020c000200000001000010"}) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) (async) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, &(0x7f0000002000)={{&(0x7f00002a6000/0x1000)=nil, 0x1000}, 0x1}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) mkdir(0x0, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0xfffffd0c) (async) recvfrom$inet6(r4, &(0x7f0000000000)=""/20, 0xfffffd56, 0x0, 0x0, 0x0) (async) write$binfmt_misc(r3, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x400000, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) socket$kcm(0x29, 0x5, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0xc048aec8, &(0x7f0000000740)={0x0, 0x0, @ioapic={0xd000, 0x3, 0x1, 0xfffffff5, 0x0, [{0x9, 0x46, 0x40, '\x00', 0x4}, {0x5, 0x2, 0x3, '\x00', 0xd9}, {0x3, 0x2, 0x1}, {0x40, 0x0, 0x6, '\x00', 0x7}, {0x9, 0xff, 0x7, '\x00', 0x1}, {0x4, 0xc, 0x5, '\x00', 0x9}, {0x0, 0x6, 0x8, '\x00', 0xe}, {0x5, 0x8, 0x4, '\x00', 0x8}, {0xa, 0x7f, 0x7, '\x00', 0x8}, {0x4, 0x9}, {0x1, 0x9, 0x5, '\x00', 0x7}, {0xfa, 0x4, 0x80, '\x00', 0x80}, {0x1, 0xe, 0x3}, {0x0, 0x8, 0x9, '\x00', 0x3}, {0x2, 0xf8, 0xf, '\x00', 0x4}, {0xf, 0x7, 0x0, '\x00', 0x5a}, {0x6, 0x8, 0xa, '\x00', 0x3}, {0x9, 0x8, 0x5, '\x00', 0x4}, {0x5b, 0x8, 0x2, '\x00', 0xc0}, {0x1, 0x81, 0x4, '\x00', 0xc}, {0x4, 0xa8, 0xd, '\x00', 0x5}, {0xb, 0xe, 0x3, '\x00', 0x7}, {0xc1, 0x7, 0x4e, '\x00', 0x6b}, {0x2a, 0xd, 0x8, '\x00', 0xb}]}}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) (async) r8 = io_uring_setup(0x6abd, &(0x7f0000000140)={0x0, 0xfffffffe, 0x80}) r9 = dup3(r7, r8, 0x0) ioctl$USBDEVFS_REAPURB(r9, 0x4004550c, 0x0) socket(0x1, 0x803, 0x0) 2m45.795248804s ago: executing program 3 (id=526): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="1643f9", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xeea390}}, 0x50) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0/file0/file0/file0\x00', 0x0, 0x6000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='xprtrdma_post_send_err\x00', r2, 0x0, 0x3}, 0x18) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@private0, @in, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) socket$key(0xf, 0x3, 0x2) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000040e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0xb2, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000480)=ANY=[], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r7, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r7, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="d7675c680000000000000000e2ffffff17110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_fuse_handle_req(r0, &(0x7f00000066c0)="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", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0xfffffffffffffffe, 0x0, {0x3, 0x0, 0xc, 0x0, 0x4, 0x0, {0x3, 0x0, 0x0, 0x0, 0x130c00e1, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 2m45.434508858s ago: executing program 3 (id=528): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000340)) write$binfmt_aout(r0, 0x0, 0xfce1) r1 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) write$cgroup_type(r2, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x80000000) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r3, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_PROPBIT(r3, 0x5501, 0x0) write$input_event(r3, &(0x7f00000005c0), 0x200005d8) r4 = io_uring_setup(0x104c, &(0x7f0000001440)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000095000000f8ff000011005443"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='netlink_extack\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, &(0x7f0000000040)={0x7fffffff, 0x80000000, 0xffffaf7c, 0x100}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84}, {@in=@rand_addr=0x64010100, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @algo_aead={0x4c, 0x12, {{'ccm(aes-arm)\x00'}, 0x0, 0x80}}]}, 0x184}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001500010000000000000000000a"], 0x1c}}, 0x0) r8 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2240, 0x0) r9 = dup(r8) ioctl$PTP_EXTTS_REQUEST2(r9, 0x40603d07, &(0x7f0000000040)) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r11, 0x4020aeb2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, 0x0) close(r4) r12 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) dup3(r1, r12, 0x80000) read$dsp(r12, &(0x7f0000000080)=""/132, 0x84) 2m42.42845577s ago: executing program 9 (id=540): ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565b, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x4c, r1, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x2e, 0x33, @mgmt_frame=@reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @broadcast, @from_mac=@device_b, {0x2, 0x2}, @value=@ver_80211n={0x0, 0x4, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}}, 0x4042, 0x0, @device_b, {}, @val, @void}}]}, 0x4c}, 0x1, 0x300}, 0x20040040) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x400000000000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) semctl$SETALL(0x0, 0x0, 0x11, 0x0) semop(0x0, 0x0, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xa4ffffff, @rand_addr=' \x01\x00'}}}, 0x15a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 2m41.221763945s ago: executing program 9 (id=541): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYBLOB, @ANYRES32], 0x44}}, 0x240048c0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="ffffff8d00"}) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x6) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x400, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) 2m39.136621594s ago: executing program 9 (id=546): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2m38.840163181s ago: executing program 9 (id=549): r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x7fff}, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r1) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048804}, 0x20000010) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x40, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6}, @device_b, @device_a, @initial, {0x6}, @value=@ver_80211n={0x0, 0x6, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x32, @void}}]}, 0x40}}, 0x0) r5 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x40}, {0x20, 0x0, 0x0, 0xfffff010}, {0x16}]}, 0x10) sendmmsg(r6, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c00)="26f2d136", 0x4}], 0x1}}], 0x1, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 2m37.795382532s ago: executing program 9 (id=551): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000004c0)={0x28, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1}]}, 0x28}}, 0x10) 2m37.537138697s ago: executing program 3 (id=555): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406d0494c200000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000015c0)={0x6, 0x25, &(0x7f0000001300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x10000}, {}, {}, [@generic={0x6, 0x7, 0x5, 0xfc3f, 0x7fffffff}, @generic={0x6, 0x2, 0x7, 0x9, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @tail_call, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x401}}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001100)='GPL\x00', 0xd05, 0x8b, &(0x7f0000001440)=""/139, 0x41100, 0x74, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001500)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000001540)={0x1, 0x2, 0x0, 0xac}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001580)=[0x1], 0x0, 0x10, 0x8, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000001740), 0x8) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x14, 0xb, &(0x7f0000001840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008020000b703000000000083850000007100000095b22b611c663d02be12ff9b59576ed3f9288f3deca8dbf52f783ebf54bf7a7c840077892935bc64b4351ade7085bf71c44872b59d7ad8e654a7f10c77448f90cfd60e4fb98ca9590f343ea9a4889cb89ec01334c3e55abe36392710b9e015bd806ec61f3f742b898dcfc94a1b7cdf9f271e7ff70b62c6343d7a781fc9605cce56e4bafbbdbb9a979ac52e74a48e7c34a17924804b58e033df290e1b050fc4a5bc2a29896b00"/261], &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r2}, 0x18) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 64) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001080), r4) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f0000001180)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="80000000e1c87b9858b4d1c0e5f63d8d8ba57e81143c5beb129f881a9f3084ca891e13a36ebd9eab4ca07cd99c5d53e963ddd6b9e86794ad597c65e8a78c8dd1f8cf1fb7dcec1cddf188cb3416d0326bfd337711d4f4afe40f59c88ebb05e9416a437b2d0455e6f81306dd2d06e4ca0c5c3f94d2bfb7c4a0a9fe701536789e4a72b630fe6ecfc58023fbb85aca65a23cb42869e64605fc23b141c0714cf55172e399d1d51d620000000000000000", @ANYRES16=r5, @ANYBLOB="00022dbd7000fddbdf25150000000c002b800800010002000000050029000100000014002b800800040000000000050002000000000030002b800c0005000800000000000000180003800c000400000000000000000006000300a2aa000008000400800000000c00060002000000020000000500290000000000"], 0x80}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) (async) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) (async) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008"], 0x184}}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="002207000000a1b4279aad077930732f02f35c78985a00000000dfeabb65e40c10c32b703e2340fcfb"], 0x0}, 0x0) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000100)=0xfff, 0x12) 2m37.536390769s ago: executing program 9 (id=556): sync() r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='ext4_sync_fs\x00', r1, 0x0, 0x8}, 0x18) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f0000000000)) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000200)={0x11, 0xf, '\x00', [@generic={0x9, 0x7a, "89d51cf64442a80bf3341a6ad52f65e534ffccfe9822b9c4abb23b3b1aee007a2d9c385815e18be1cc046736f9855e204bb3f6bda4bd349aa9362d9edbcab8f208a501573f6da1e675d7475d8742ed4c146e9c4a9619e3c40185483b3e093e986cdfe573acb40390f2f822282b75e44df9bad4ddde08ccc9ee00"}]}, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m34.889901884s ago: executing program 3 (id=565): ioperm(0x0, 0x9, 0x1f) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f0000000100)=0x1, 0xd, 0x0, &(0x7f0000000180), &(0x7f0000000300), 0x0) 2m21.690071565s ago: executing program 39 (id=556): sync() r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='ext4_sync_fs\x00', r1, 0x0, 0x8}, 0x18) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r4, 0x40045402, &(0x7f0000000000)) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000200)={0x11, 0xf, '\x00', [@generic={0x9, 0x7a, "89d51cf64442a80bf3341a6ad52f65e534ffccfe9822b9c4abb23b3b1aee007a2d9c385815e18be1cc046736f9855e204bb3f6bda4bd349aa9362d9edbcab8f208a501573f6da1e675d7475d8742ed4c146e9c4a9619e3c40185483b3e093e986cdfe573acb40390f2f822282b75e44df9bad4ddde08ccc9ee00"}]}, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m19.711093585s ago: executing program 40 (id=565): ioperm(0x0, 0x9, 0x1f) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(&(0x7f0000000100)=0x1, 0xd, 0x0, &(0x7f0000000180), &(0x7f0000000300), 0x0) 2m5.913793368s ago: executing program 5 (id=643): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) io_setup(0x4, &(0x7f0000000140)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060500000000000000000000e8ffff0b000780050015002600000005000100060000000500050002000000050004000000000011000300686173683a69702c706f727400000000090002"], 0x58}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b000000f1c120ae0200000022bf000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x1e, 0x20000002, r3) get_mempolicy(0x0, 0x0, 0x8, &(0x7f0000ffb000/0x2000)=nil, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) mkdir(&(0x7f00000002c0)='./file0\x00', 0x62) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2m5.095926416s ago: executing program 5 (id=646): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@verity_on}, {@verity_off}, {@index_off}, {@lowerdir={'lowerdir', 0x3d, './file2'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000000900010073797a300000000050000000060a090400000000000000000100000008000b40000000000900010073797a300000000028000480240001800b0001"], 0xd8}}, 0x0) chdir(&(0x7f0000000140)='./bus\x00') syz_usb_connect(0x3, 0x24, &(0x7f00000014c0)={{0x12, 0x1, 0x0, 0xf9, 0xde, 0x50, 0x8, 0x1b3d, 0x1cd, 0x800, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0xc, 0x190, 0x6, [{{0x9, 0x4, 0x48, 0xfa, 0x0, 0xcc, 0x6a, 0xec, 0x61}}]}}]}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000001500)="58cbb2cd0344f2e5dd735a07d4d4b06141c194d7568aef752463eb7151a8c20a17a14a310e9930d7d266d81775518205f15db0c59388898b988728a1d737801b0dc8d51e2320815b125f1620f7db343e2b7dcd6046ce81da7351729d3058ec6e6944b2cf14c937a3132aee1e24e87604e99c1d66a0bf10f3400626f0ed13bc338bff3ca610c541cab3c3a613e0218e64283705b0aab4663d874bc8d75981683c8f30a2314939d392ed82b52128640da2d8ac630dbde7a5248e365a6a87fd2488e7e7399519d311e1b0bd09d06443c701863ad9427810e15a9cf341e5c7ce0e8b3bb820c5c5b5446238733eeda5883f91755d2119a5ce564cb5cec80e0d252ae7537fed8bdac4841a60c859d3e3da12b26e4bde37524ca39ee4ebac6069c4271101278fb7c6c4bd4c5434d8aa8ab25ff582991ab62dd6b923cb57e37ab4b4ccbfb8293b9ec65593946db48da2f8c67f9890e498eae2c94a9e28a6373e2bf7c5f8cfcd4f1245e81f1ef80296f030f368fb8ece7e07b3a32cc90fbbb8f7bbe61ace38b3422a248f5efe0fa2e683cc88926232df7276df9b11f0186c4fa3aa78ebd4fb25903aed43e740cff4151dd7e9d71e17c9d57759f05f3a79c323599eb0045dd975656177e2338ceee5551be724ff7f59450036a503edef2bb2208972a528f15f9507b495781597d91c30b1a2a8f278a226af0c4937d0bff7ab31fa86a26c3a82087117a00e2f6631a394699533f6486a07e05d7e6b356b7c145cb67dcf27e554cc750b78d318fcc6a0ea9838f3a0467b644d733f205d86b2d66a27ee7b0505f39d75898befc249fc3da8856471c07f77cac626d74eb4f8c861949a7a5cf5d76443b29b2ed5ae281282ad0c12db5806b964a4a69d345d4382e474e798f3fd7f9dd8008da0e47afe30e7d22e483eeb0c2ce978d5b3ae1bf6863743bdbb4da3a02b08fd959661f723502e8c467fdeb61752c886d6086e1d5a9142914676c4574163c999e9419094736568e1484215b5edfaf6dc052087d6749314d5432fa4588b7e95ec10fce7cea0b2d1c600ab010a50286545b169fcb59ce2a2f48a330ae581a84558f9451dcabd42adcc595f944545e6e5152fff4533be9d8c0e1b66babbdd30a39cfa308f4ce52885e5c0fa44d1ad202d0fee1c592eb5ef0786b167477fdcfe9c2a1329838395faf0c410b02e0d7b6314b71b57e23c7717c44cb5aa8e5914ff6455a1ea5c6814c0213578748d0f6423427a04e8d1739313bee317d03aec5a2e491b6a6a5a81b1785b8ffe9af8e87f18b78f2d645a074656136287e215fda43567883f2b464389aa13d93b833ae63484c3f2e05fe10020c9876cb73d44d786e4a1dbccbe288d165d2833c239dec0e510e1d14c8c6d5aa32f1e5f9d2e5ce3eea03c2101957e85e5177998a2cbc2068b6af00cccac0dd7e60c0175707897d60576b89f33f4513c8591f7bfcb730b29fd4b7ebcb1eaa558448065076b0a63f11eba4c478c1233d221a3f2a7f6406639152330da42fe1d7e7798490f58662235304227e2a46731f007d120b9285a59bf2202aea9744bf9437b402beb4bb31c688f84d52b572a86486e1bab2de1e8a0d6c31be0c2d40c20c7e4291dd7b2479b726331994df2d701ce3934fe571c0b708068be7cbd5a8bc8e13388e2837d7aa0fedb1d8e401b1d26a30383ff99c6f8a295746efc8d5f8ddf3f0bea3fad539879124b77365f21b50d0912a277947f93964b91ea884779011c6c10fad210cbb5375d5dbe106f7231076b8a8b014ca7dc1a680fd81912d4afb0740b1d5a3653ef6f6231936886a32da43028149947f44f2fae28cefd8fa8a212accec8223e3590ca4c8cc6e467fd427e18beac62ae4980c051ec1597526713e8a765367836d79a98f2b7ab0f40d62accbe31485e49ba5970735e9688d94ba11dced3a9c5aaec3340db68685ba8ee9215b686280d844adff8614f7599042b9d5d44e5fa2ac7949ba47e0666b8daf2635906ef6a0fded1f7184992904087694c05b6bd40bab0be638a4d7f05e98fe6de0f5edb244df333ab871c61efd5a998fe5a9dbbc7cfb4435552b694d9c49d78bbf6f4002c20b721e0a7dd368df23a48f328a11dd0868e64b980f07ada06f3b2d382cde46b8ad0aac49eb775154d3ed3cc384dc29eed892ebdd9be9e7660593d1bf2391f1ff696ba8dd6a4e7f58649e5842ec4fab08151853826b592caaaca4ed1302909f6fbe5781350b05c6e9831f46a9c2147dc0b00dda664aef2283698e8e599cebfdece1a0199a1235ca8b7dbede301b2ca32bdcfc2512f76ea1636bbce9cdda35fcb69911ef85c3d26e6240c9293ea5a37ec2f788faed1161c9cbc25165e6f7fe8d8a12007fbd5b9a13741fbd910e2d19e38796844f32d498bba73e5ef9b3d0d88defae20b1723ad502eae5ddae0228a9e071098a6501417a0361b2cd31f46c8b966f5b19de42c15d2749b98aa9882da1d1d03d2ffbd530b0fcfdbe41249c162d51c27a29ad539e8aff698617f7ab5b656c7ef074b4ac279d50356695bf9703bd0c137b481d1524e2d9b04c0e71d5afd245ecc4a2f349f211b1e55a7fef38e4066724400e41b84b8a01b1223cb6a3d4024db06c79aaf71ae6e6ddd0a62fbd626ac4928b3dcf70f73870c3a0b47985aa5eb1915210a71fcd3b7c52e5a0991142ac7647ab21ef2005845e7a6de5ee149ab6b82099e21e844e8040a4e224e11aca8069a9a79f94fffbd2cb3ee2439ff06d4b5600e79ba9fed8c64b0781725a5ce141afd8234c2b4668be01393be860c6910b74e89e6154bf28c15abd69deff097a8b2ac8c5b779eb1648d3a3a47c930642cc2e32d894d4162327c8a4f8efc039e72442dfbd5ca1806e59b4f57453118007fa38fcce5052522b9ee98867e3f8ed991dba3ba22b3d3672369aaadee67b5972b03a0767b09d488e728f2397c7cdd115b2a4416ee2bd711d5af0e599e9a2794ac11ec01a9b9640cfe92a60ec5f74d3822acaeacb08b3967e7c3bcabb1d79a4999c59ad25771b5b6adeae865782739d279c4e2b0cfafe115e3c93d0e14df37550fda48b5ffeb45a79223f0b1f4af8e0a52a2676781b27298a1579c3b428deb33f485129a771f5dfef2e5634bd60ad3cdc5b3847b10125cc34a351b8c65fa27589946d8cd4586f12b50a216cf615b64afc9db20dfa7de728818733ab76931da4ace94e2251b0a48b5ce004a6051a639b04c056403358522fa046abd85289fdfd53dabbe9540c9f76292a00f3546e16e26895d9d72d7fd29d272e79cf5615f62187898ec3b6072c8eb075a85d7800dae7d5192f851136035e95a5cc38ae315ffb72f782e1715ac7ee220a58af26be75c8a69c8388f9b7ff34dbbf52b078d40ad048eea9bb6f8fb4db23deb1a2507aa48d61a5afc4e5429c304e449efa84c958237f6d8912ce0034e0231021ee50d086d78bc811e489a1b6ffd47ad35137d5fedce2e2ea82f02312321070f34a79d3e6312df3eadc5766f2ed185fe206e936f6479b9dfc8a586810f2f7a0f647695f60e5120fdc18aeb37864a703848f42e43a40f1b4be5bf018f235b8d23c15c067bdd8251682e5c1e6a0905e181ee6e9950ac0e66ad14ddbed472af5fb4e2d4abce6ef3ef3b2df357f5308242a633cdbb524a7fddd7e6848823efb5e81dbe3ae552f60acb242447b3ff242c784195cca1b171db4034bf829e54c26866e5ab5287e7b471fc5c7403e12db3647e70fcd02384e8db2df9951e94c0a1ac3b547caa471c193edf32a4be69cc62711ce798088dbd4273d9bad0785828b2ab2cd6826b2429a7dd613bee8057b81524b13f5bbc7f359c1a89a983c702fe276e90edbcfa0bcb970f7bdcdb59bb3b980ae4c4bae57e3887fcd77a1105372c26dcbc6d649995cc41de3e9b9098546796f3f8b81e7955cd4c1e2b68b3c17631de196d60ea3da4bc4df7b283b366717428c5b2295f04eaf1aed2086303a67b7c68fceb44cdc5786d1e72c1ea2924f01a98bce47b4147cfd227073ac709737949208024587695291f02135bfdb68d63faac082822d5286bbf9cc49fae4a4051fcb4f22cc3a1e672da61bee0a438f507c14fc6d2246bd4f167bdf21dbbf2b4ccd88f45048da542b192aa7139ca6b6d1bbd931494d84add09a93591d7cb6e053032b76acba1bf18163b3b9305d20ce3d88e120d07f061668123e1d7558f52032cd69a36c93c31c6a4dcbf06e3c2381e47f54ce364bbf54a3bb8cf26f91692d45408eed5f5fee9c290c60ea157d4c9662ffb300a25ab16b02f170438b6cfc8719ca36ac7f5179d2b81c345099f4ab14ddce52e26c7a374679c918b7b265ab2b597959530d4e7d1fd434e038e10b5297915aa4deefa0cb26034dde6d752898fafa6ff4913cc48f1d63ede234705fb52f5aa009391b96d4da4d8ce2f1d5f40bcb81d8655392cea7fdca34842ee2dcd0a69aa5b0295741b313b361fe8c76bf582f6c97a70ae7bb5f916a35f5aac2e4aae49a9fc5bd1ec385b6195fc118748204ef3900b737b3253122f2fffb400b5fc132204555f30ac606d60c988167bc7c554ab389bf679f2b342e94e3595de34ca933431e03b18a7c60c554b8db7ecff78e0cddfe8a28737e0653d6654f7ae589ed4fca0b77a0abd8e07777fd23ae85c284c218ee1a65de1a8163adad6f46574a5502029b2c71b0750d41c611dddcfb22311b44c0454bf14849e7f3233a1065802b36df130a07af48fcd5035ca4bda0821bb60a53b860a5c5ea5482d76bb2473e322e4173df242cbeac146a48afc4fb0b8bdc826881a01f1a3aaf26026c6e1a112a72e2d464c08638bee69cd511b4a52317486e51358edd942e0aaa85592a9b1941a721062365529bcfcc8e9cb67957437bd2893ca7d7f2a62cd858198106c84ffaeb1ee3c149b9e087b7deeccc453afff3c651eb8488bf34e46df3b2b47f720ffba5c6c8762c99d5e8833500b27b299267e600dc0253fa64d09bee8f5fef1b76ae5fc8b72fd366081bd6fe69be5ce7ac7a4052e582245ab7ca61eb2ba6540ba680c25afa1eeae4d430e985ebcae4af5c7a87cf6c3e89158381779f92024c091eb4159a998e7b87b09ced93801599a1dead60876e0069679de515d17446ca2afd187ea5cd646acb5720fd45f31af72f43b54be878105e85968164309e9939c99620699ae55afe1a5660b4683eca1ed3c53c83fc3c27720ef348832b7d1df2b007caa8930330252fa8ca315878f2ce4334144c0725a75039e1b933ba70c136c91c62c6828275b37ec7806a653b0b56fad41b8cc38437540851de41ec630bbf221ba68e7c0204ebda725897dff23f2b2eca2f684d6dd36de7e97752c93abb855fd4770285c6892117701ae9ebaf97c4711055e7608feee2f8972b0ed6e9a9c9aca8de9a85b8d88cea519dd70a7c8352d060f1444c0a61ae1618f2c5dcdf39ae21488fbda5c31dc9058658e6206b00d233971b821414c201f98e146352d2fb0b239f2e777c0f0eac3248155d030512cc8cafbf216cb02332854ccadeaab54972317445b7d704f9d0c382e857860e7b846bfab16529e0214c36544e63e7a25f3faeff0c1ba6f633d6bafbc84bdfc02ace84dbbdc50c5b73d5eb1a0d4d08b43b39fc755255bfd659d40ee606137c5a35bc4254e8e52f142294ddb976a67cc1a925782546fe512844cd8cb7487b270e17a0d2395404efa190e27ff87d032d291cda447061407e70d33609a7b605ef7fa402c8cba6f03f3dae8bd7445862f37ca660146bfb74cb21d998c3805f09fba33ee4c9a06f30761a3197c1cec", 0x1000, 0xffffffff) linkat(r1, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) 2m1.845954937s ago: executing program 5 (id=658): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./cgroup/cgroup.procs\x00', 0x230001, 0x100) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_emit_ethernet(0x42, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaff92aaaa000800460000180000000000019078ac1414bbac1e1901440400000400907800000000450000000000000000000000ac1414bb7f000001"], 0x0) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) 2m1.728522951s ago: executing program 5 (id=659): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000004c0)={0x28, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x1}]}, 0x28}}, 0x10) 2m0.627487562s ago: executing program 5 (id=661): r0 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r0, &(0x7f0000000040)={0x2a, 0x1, 0x7fff}, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6}, @device_b, @device_a, @initial, {0x6}, @value=@ver_80211n={0x0, 0x6, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x32, @void}}]}, 0x40}}, 0x0) r5 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x40}, {0x20, 0x0, 0x0, 0xfffff010}, {0x16}]}, 0x10) sendmmsg(r6, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c00)="26f2d136", 0x4}], 0x1}}], 0x1, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 2m0.197435426s ago: executing program 5 (id=665): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe}}, 0xbb, 0xff, 0x5, 0x6, 0x0, 0xfffffffd, 0x8}, &(0x7f0000000340)=0x9c) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prctl$PR_CAPBSET_READ(0x59616d61, 0xffffffff) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x92, 0xea, 0x8, 0x545, 0x800c, 0x30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x79, 0xe6, 0x1}}]}}]}}, 0x0) 1m45.019199883s ago: executing program 41 (id=665): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESOCT=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x1}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e20, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xe}}, 0xbb, 0xff, 0x5, 0x6, 0x0, 0xfffffffd, 0x8}, &(0x7f0000000340)=0x9c) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prctl$PR_CAPBSET_READ(0x59616d61, 0xffffffff) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x21, 0x92, 0xea, 0x8, 0x545, 0x800c, 0x30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x79, 0xe6, 0x1}}]}}]}}, 0x0) 1m24.564147075s ago: executing program 8 (id=769): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fanotify_init(0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) fanotify_mark(r4, 0x180, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0x3}, 0x18) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e1d19fdc0dff34ac9000a51b02f700603070007010810000600050000000000000000"], 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_procfs(0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) ioctl$FS_IOC_GETFSLABEL(r7, 0x81009431, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd0f000040", 0x6}], 0x1, 0x0, 0x80000) 1m22.650771445s ago: executing program 8 (id=772): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000001200)=[{&(0x7f0000000040)="745021aa07d5baac8527c01923fbef8a1ec030f7faa5367e95af7b5f29c7064b3634ebbe", 0x24}, {&(0x7f0000000080)="e817b51b5d72e67a71376d0b4fc1e502238369d9692784f8b02ef569ab8d50acd0506ead5e5b72b59f3f8b862c22e028c72fb494efeec97b56f0d87f652d389035375c28d79b55f0c8e3bf50a5003699bd21c73650bad3c863d86e50ad7a176ef07fabbbfb147fd164", 0x69}, {&(0x7f0000000100)="0b277d7abed627e7c96f512e7127fff366bd3390150443e3fbf1ae2099b5103838278e43c0e9a790c6", 0x29}, {&(0x7f0000000140)="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", 0x1000}, {&(0x7f0000001140)="33df10aa61980eaa4c47f12689fd737a6e8c3fe1638fa2b19094effb624af1f14b934858275709f659ea65d183061ac4987d38d254e884e66602f7b864cb1331202c8f5b52fa7f851c4d091096baf1ce7d8531e9bf", 0x55}, {&(0x7f00000011c0)="ecff3e81deeb", 0x6}], 0x6, &(0x7f0000001280)=[@ip_retopts={{0xc0, 0x0, 0x7, {[@rr={0x7, 0x7, 0x11, [@remote]}, @timestamp_prespec={0x44, 0x24, 0x39, 0x3, 0x8, [{@rand_addr=0x64010101, 0xaae31f73}, {@local, 0x8001}, {@multicast2, 0xffffbfe5}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x5}]}, @timestamp_addr={0x44, 0x14, 0x46, 0x1, 0x2, [{@remote, 0x45d}, {@multicast1, 0xfffffff2}]}, @cipso={0x86, 0x6f, 0x0, [{0x0, 0xe, "0aa7c6fe8ede7f12ba51b26e"}, {0x0, 0x6, "8095af5f"}, {0x6, 0xe, "ba4ee1587574fa43fb1d6e71"}, {0x6, 0x7, "53b138ff4f"}, {0x5, 0x2}, {0x0, 0x10, "1f4532e7f36652cf3808927a347a"}, {0x5, 0x12, "39bb4f1bd45cf7bad3902d95cfdc51e7"}, {0x2, 0xf, "abb1daab2b0b7b7f1ee184b625"}, {0x2, 0x4, "3198"}, {0x5, 0x9, "c43c83c12d1251"}]}]}}}], 0xc0}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x14, 0x5, 0x1, 0xa05, 0x0, 0x0, {0x0, 0x0, 0x4}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001480), 0x88000, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000014c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000001500)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000001540)={0x28, 0x0, r2, r3, 0x8, 0xf4c, 0x7ff}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001580), 0x1210c1, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x4161, 0x0) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000015c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x348, &(0x7f0000001640)={[{0x3c, 0x4e00, "336e266e3cb95b26f31c31057c925bf24264737419e916afd021937681bb4c8da9b81c64dbcb236b3b47e484b5ec14c54985aee857249651dff0a641"}, {0xc3, 0x4e00, "6511e0bf1cb0d057e98a18769e0cdfed438dfb7be0af51b54255e1f68e7844d5a57c3b75a234ba1e27127333a127a735dff457c7cde6187e2299e588fceba917d61d3dd96bc310f1d598cf07a5af05b50ee79e2d08503e0256eac392fce557775dfc71b46a2d27d6e9174232135d488872893f2cd56108e46143ab6902af01e528cd84ac6617002b04755a843e023d600178b5fd0a3148ab9527213a5bea761a67fb6809c1ff6a789e54c13acca069cad7c5d71cb25f31f7ec7305c25441cfb23e3d48"}, {0xeb, 0x4e00, "0452bedce1b1fe44c2f8f6c48ac60a38cdc1eef25a76b555851eda42f52bcdad993f865a35f4030886ddd38b85953c3250de21f66e8f0f6e56be713c2f9aa67d68bbe8512b20bb418d659418c48cec63c761ab02159594f6bded63a3691f0c05271470f174edf62d58d387eb154077f96461cc6f082474e27376d4012cd0eb366d96025b1a87c248ad1f9acb05de9aae43277ebb4326452ca024152b58de8e22a78ca7e40ef85deca703396c7053c3f977bae3680ef337adbfcef2533a543c732c64fdab92070f170b9d4f51b4b28ac1e5833adc6dd34165cdde8c3735fcf79cbf5e7b98befe5680b5acf9"}, {0x4e, 0x4e00, "eb3d8999f45bedb5749d18cc77b0026818e8951216f394baabdcb5596c8bac0a382e695fe8fa2e1df859fac9f96ba9c43f314fb4efb8639b3cc222c7271bb46d37187dd48526e5afc060f8cbaa22"}, {0xf8, 0x4e00, "d8ce211b7bf580cdfbe583abef27f41eccbca0c6d0a35655517442d9afded04c32b35a9f81bcd2f531c79973504855e5ce93811f102a1fc295806daf14201495cd5ddbd4308538ab4f09f897608a994bb17fd38e912c543a0a2d03d47085ababc5fa4a7f9a1108d4bac5510b8d68a326d3bf3d735dcffdc60587d6307ca9b6a8e6f6f7b496e1f5db41955e54f4aee6aa0222238bab8696911a04fac123746d8f8e1e4ed1d659d3ac7579f06a82ec74d5630447dbc2b5665b50fa3cd82d0af6fd03556ab16fdd7230e787fa6055e9394295ed4a9df778374024ad8bb63e955930b79f466a8bed6f89a1375b3829fbe45fc14a63976084df85"}]}) connect$inet(r4, &(0x7f00000019c0)={0x2, 0x4e22, @multicast2}, 0x10) 1m19.088201076s ago: executing program 8 (id=779): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000540), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r1, 0x301, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4) (fail_nth: 1) 1m18.477487024s ago: executing program 8 (id=783): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) migrate_pages(0x0, 0x3, 0x0, &(0x7f0000000300)=0xa) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x161090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x21adc51, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x75, 0x1c, 0x1, 0x10, 0xfe6, 0x9800, 0xd19a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x29, 0x2, 0x2, 0xb4, 0x8c, 0xbb, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000c80)={0x1c, &(0x7f0000000100)={0x0, 0x0, 0x6, "cc17fc47a9ae"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = accept4(r3, 0x0, 0x0, 0x0) write(r4, &(0x7f0000000040)="cb", 0xfffffdef) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) setns(r1, 0x24020000) syz_clone(0xfdba2180, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0x16, &(0x7f0000000380)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0x1}, @ldst={0x0, 0x3, 0x0, 0x6d7f701f7305fc15, 0x6, 0xfffffffffffffff4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0x12}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @jmp={0x5, 0x1, 0x8, 0x7, 0x1, 0x0, 0x4}, @generic={0x10, 0x6, 0x4, 0x6ea, 0x8}, @ldst={0x1, 0x0, 0x6, 0x0, 0x7, 0xfffffffffffffffc}, @map_val={0x18, 0x5, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x7}], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x8c, &(0x7f0000000500)=""/140, 0x82200, 0x8, '\x00', 0x0, @fallback=0x1d, r5, 0x8, &(0x7f0000000180)={0xa, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, r5, 0x0, &(0x7f0000000200)=[r5, r5, r5, r5, r5, r5, r5, r5], 0x0, 0x10, 0x7, @void, @value}, 0x94) rseq(&(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x4, 0x200, 0x6}}, 0x20, 0x1, 0x0) 1m13.421532235s ago: executing program 8 (id=799): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @broadcast, 'macvlan1\x00'}}, 0x1e) write$binfmt_aout(r0, 0x0, 0x5ea) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{}, &(0x7f0000000880), &(0x7f00000008c0)='%-5lx \x00'}, 0x20) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60040, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000002e9d0000000000cbf4de3d9500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000180)='contention_end\x00', r2, 0x0, 0x81}, 0x18) r3 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x0, 0x3, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x3, 0xfffffffffffffffc, 0xe, 0x0, 0x3, 0x3ffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x400000000, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x5c6ab90f]}) fcntl$setlease(r1, 0x400, 0x0) syz_usb_connect(0x2, 0xb7, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0xcf, 0x7e, 0x8f, 0x40, 0x2040, 0x721f, 0xf262, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa5, 0x1, 0x81, 0x4, 0x0, 0x4f, [{{0x9, 0x4, 0x87, 0x6, 0x9, 0xa9, 0x7a, 0x37, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0xb0a, 0x6}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x307, 0x2, 0x4, 0x96}, @mixer_unit={0x6, 0x24, 0x4, 0x2, 0x9c, "fe"}]}], [{{0x9, 0x5, 0xb, 0x0, 0x40, 0x80, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xf7, 0x9}]}}, {{0x9, 0x5, 0xd, 0x0, 0x400, 0x64, 0x4, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x0, 0xbbbf}]}}, {{0x9, 0x5, 0x2, 0x2, 0x400, 0xa, 0x41, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0xc}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x4}]}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x3, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x2}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0x27, 0x3, 0x8}}, {{0x9, 0x5, 0x1, 0xc, 0x200, 0x4e, 0x9, 0x7}}, {{0x9, 0x5, 0xa, 0xc, 0x20, 0x5, 0x1, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xd0}]}}, {{0x9, 0x5, 0x80, 0x8, 0x20, 0x0, 0xb4, 0xac}}, {{0x9, 0x5, 0x7, 0x1, 0x3ff, 0x4, 0x3b, 0x10}}]}}]}}]}}, 0x0) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x2, 0x4, 0x1}}, 0x30) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@bridge_dellink={0x40, 0x11, 0x200, 0x70bd25, 0x25dfdbfc, {0x7, 0x0, 0x0, 0x0, 0x45048, 0x1a102}, [@IFLA_AF_SPEC={0x4}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x8}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x40008084}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) 1m12.199138253s ago: executing program 8 (id=803): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e0000007f000000c1ffffff000000002e2200", @ANYRES32], 0x48) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r0, &(0x7f0000000100)={{0x3, @bcast, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESDEC], 0xc8}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESDEC], 0xc8}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001000000000000000000060100800c0001"], 0x114}], 0x1}, 0x0) 1m11.508247391s ago: executing program 42 (id=803): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1e0000007f000000c1ffffff000000002e2200", @ANYRES32], 0x48) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r0, &(0x7f0000000100)={{0x3, @bcast, 0x4}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESDEC], 0xc8}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESDEC], 0xc8}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001000000000000000000060100800c0001"], 0x114}], 0x1}, 0x0) 50.545861088s ago: executing program 7 (id=863): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="feffffff000000000000000000", @ANYRES32, @ANYBLOB="0000ca6b885e5e6b97af6651efda1c00"], 0x50) getrusage(0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x4000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x20008040) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_mptcp(0x2, 0x1, 0x106) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) 49.258909339s ago: executing program 7 (id=867): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000180)={0x81, 0x1}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x28, 0x0, 0x2, 0xfffff034}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x80000400000bce) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001400), 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000007e00), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, 0x0, 0x0, 0x1fc, 0x0) io_submit(0x0, 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000003980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r3, &(0x7f0000000240)={0x78, 0x0, r4, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xa000, 0x0, 0x0, 0x0, 0x40}}}, 0x78) futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x0) r5 = semget$private(0x0, 0x4000, 0x0) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000000)=""/174) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000080), 0x4) shmget$private(0x0, 0x1000, 0x40, &(0x7f000010e000/0x1000)=nil) 47.683928323s ago: executing program 7 (id=873): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r1, &(0x7f0000000100)=[{{&(0x7f0000000180)=@tipc=@id, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000080)=@un=@file={0x1, './file0\x00'}, 0x80, 0x0}}], 0x2, 0x0) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000540), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, r2, 0x301, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4) socket$inet(0x2, 0xa, 0x7) 47.485873078s ago: executing program 7 (id=875): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x200000, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x2, 0xff}}, './bus\x00'}) accept4(r1, &(0x7f0000000240)=@sco={0x1f, @fixed}, &(0x7f0000000340)=0x80, 0x800) r2 = fanotify_init(0x200, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6000000003803afffe800000000000000000000000000000ff02000000000000000000000000000186009078000000000000000000000000000aa741e54006598080a8030000004023493b87aafaff0500ffffffe723732472eefa45ad9657"], 0x0) fsopen(&(0x7f0000000080)='pipefs\x00', 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) read$msr(r5, &(0x7f0000019680)=""/102384, 0x18ff0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) gettid() socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}]}]}, 0x7c}}, 0x4000010) fanotify_mark(r2, 0x1, 0x4800003e, r0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) 45.772124474s ago: executing program 7 (id=876): socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) socket$caif_stream(0x25, 0x1, 0x5) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x14000084}, 0x2400c080) 40.013864469s ago: executing program 7 (id=888): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r1 = syz_open_pts(r0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000003, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x7955, &(0x7f0000000500)={0x0, 0x8007ffd, 0x1, 0x0, 0xf5fffffd}, &(0x7f0000000040), &(0x7f0000000000)) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f0000000180)={0x200000000000001f, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000080)=[0x4, 0x9]}, 0x20) dup3(r1, r0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x298, 0x5802, 0x294, 0x0, 0x294, 0x3b0, 0x325, 0x378, 0x3b0, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'macvtap0\x00', 'macsec0\x00'}, 0x0, 0x1f8, 0x260, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x7fffffff}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, "9b5c49840af1fa47a964238f259b3c5a1d2900368cf3205b20e30e9ab14af5e8d982e899c853fa77c236d1e982bfd274b6f14caf6af1961c67b2212bdf53463b"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) madvise(&(0x7f00004bd000/0x2000)=nil, 0x2000, 0x17) sendmmsg(r4, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=ANY=[], 0x210}}], 0x1, 0x40884) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r4}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r4, 0x0, 0x1, 0xe, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x0}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x1, 0x0) brk(0x20ffc004) close(r6) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[], 0x20) socket$igmp6(0xa, 0x3, 0x2) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) openat$iommufd(0xffffffffffffff9c, 0x0, 0x4000, 0x0) 40.013575658s ago: executing program 43 (id=888): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r1 = syz_open_pts(r0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000003, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x7955, &(0x7f0000000500)={0x0, 0x8007ffd, 0x1, 0x0, 0xf5fffffd}, &(0x7f0000000040), &(0x7f0000000000)) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f0000000180)={0x200000000000001f, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000080)=[0x4, 0x9]}, 0x20) dup3(r1, r0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000009c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x448, 0x298, 0x5802, 0x294, 0x0, 0x294, 0x3b0, 0x325, 0x378, 0x3b0, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'macvtap0\x00', 'macsec0\x00'}, 0x0, 0x1f8, 0x260, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'gre0\x00', {0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x7fffffff}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x3, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, "9b5c49840af1fa47a964238f259b3c5a1d2900368cf3205b20e30e9ab14af5e8d982e899c853fa77c236d1e982bfd274b6f14caf6af1961c67b2212bdf53463b"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a8) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) madvise(&(0x7f00004bd000/0x2000)=nil, 0x2000, 0x17) sendmmsg(r4, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=ANY=[], 0x210}}], 0x1, 0x40884) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x10, r4}, 0x18) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r4, 0x0, 0x1, 0xe, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x0}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x48, 0x30, 0xb, 0x0, 0x0, {}, [{0x34, 0x1, [@m_vlan={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x1, 0x0) brk(0x20ffc004) close(r6) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[], 0x20) socket$igmp6(0xa, 0x3, 0x2) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) openat$iommufd(0xffffffffffffff9c, 0x0, 0x4000, 0x0) 6.402086201s ago: executing program 0 (id=977): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@metacopy_off, 0x3a}], [], 0x2f}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000040)="660fc77200f34998f3410fc736460f1a6086f2360f211e0f20c035020000000f22c0400f21ee66470f3880649d05b9800000c00f3235004000000f30430f92c6", 0x40}], 0x1, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000140)={0x800000008, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listen(0xffffffffffffffff, 0x0) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r3, 0x40046f41, 0x20000502) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x29, 0x14, 0x0, 0x0) socket(0x10, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) getitimer(0x0, &(0x7f0000000380)) syz_open_dev$usbfs(&(0x7f0000000000), 0x1fc, 0xc0043) 5.677879639s ago: executing program 2 (id=984): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fanotify_init(0x8, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xa8}, [@ldst={0x6}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) fanotify_mark(r4, 0x180, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1814000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6, 0x0, 0x3}, 0x18) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e1d19fdc0dff34ac9000a51b02f700603070007010810000600050000000000000000"], 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_procfs(0x0, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) ioctl$FS_IOC_GETFSLABEL(r7, 0x81009431, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x10, 0x0, 0x57, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd0f000040", 0x6}], 0x1, 0x0, 0x80000) 5.082896776s ago: executing program 0 (id=989): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_nanosleep(0x9, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) syz_open_procfs(0x0, &(0x7f0000000380)='mounts\x00') syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x5}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000340)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x4004743a, 0x0) write$binfmt_aout(r2, 0x0, 0x0) ioctl$TCFLSH(r3, 0x80047456, 0x2) io_uring_enter(0xffffffffffffffff, 0x2def, 0x4000, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) 4.843367889s ago: executing program 4 (id=992): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x300, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xffffffbd, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x0) 4.642767646s ago: executing program 1 (id=995): io_uring_setup(0x253d, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xfffffdef}, 0x1, 0x0, 0x0, 0x45}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x4) sendto$inet(r1, &(0x7f0000001240)="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", 0xffffffffffffff95, 0x8040841, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) r5 = openat$kvm(0x0, 0x0, 0x2382, 0x0) io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x5732, 0x100, 0x2, 0x164}) openat(0xffffffffffffffff, &(0x7f00000019c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x167481, 0x20) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r7, r8, 0x0) io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) 4.469724558s ago: executing program 4 (id=996): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x219b, 0x4) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x12}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62042712590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2c0048d4}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00') r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000180)=0xffffbff7, 0x4) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private2}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x4b, &(0x7f00000009c0)=0x8, 0x4) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) preadv(r6, &(0x7f0000000280)=[{&(0x7f0000000380)=""/218, 0xda}], 0x1, 0x14a, 0x0) r9 = dup(r5) write$FUSE_BMAP(r9, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r9, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000002c0), 0x10410, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB="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"]) chmod(&(0x7f0000000140)='./file0\x00', 0x0) open(&(0x7f0000000040)='./file0\x00', 0x4000, 0x50) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 4.19501755s ago: executing program 0 (id=998): syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000000), 0xa, 0x2c01) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086410, &(0x7f0000000080)) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000f000000050030000000000008000300", @ANYRES32=r3, @ANYBLOB="05002f00d2"], 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000540)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz2\xc3O6\x91\x93\xf00\x83\x1c\xac\x19\xa8\xffj\x8b\xc2\xeb\xd9\x8f\xbf40\x1f\xde\x1e\xcd\x18L\x0eC\xd7\xafe\x81?\r\xf1\x0e\x8e5fC?\xfa+#\xe7\xb6\x1f\xde!\xf1\x97\xd5@N\xb4\xee(\xa3\x1a\xe5\xc2\x83\xf6\x18U\x86\xea\xc7\xccR\x11\xf9\xa7f\xca\x93\x17\x85\x96\xb3c\xdc\xc4\xdcz\xeb\xd0\x14\x92\x13\x8dg\x11\xa0\xbe\xa2Xj\x97\x83\xeby\xa4;S\x04\xc7\xd37\xd24\x98@\x8cD\x92', 0x20, 0x100ffd}, 0xffffffffffffffb0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000140)=0xb, 0x4) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c090}, 0x8044) 4.183602343s ago: executing program 1 (id=999): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000180)={0x81, 0x1}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x28, 0x0, 0x2, 0xfffff034}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001400), 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000007e00), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0xb, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, 0x0, 0x0, 0x1fc, 0x0) io_submit(0x0, 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r3, &(0x7f0000003980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r3, &(0x7f0000000240)={0x78, 0x0, r4, {0x2000000007, 0x0, 0x0, {0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xa000, 0x0, 0x0, 0x0, 0x40}}}, 0x78) futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x0) r5 = semget$private(0x0, 0x4000, 0x0) semctl$GETALL(r5, 0x0, 0xd, &(0x7f0000000000)=""/174) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xc, &(0x7f0000000080), 0x4) shmget$private(0x0, 0x1000, 0x40, &(0x7f000010e000/0x1000)=nil) 4.065859505s ago: executing program 4 (id=1000): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x0}) close(r1) socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x10e, 0xb, &(0x7f0000000180), 0x4) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="6000000068007f089e", 0x9}, {&(0x7f0000000640)="68cabf2dfb58fc021d6b689866f05d48000800000000000000258f2e6400b8f9e6aaeb88bea123dc2c6726e89b0ce24f89a565ee52dcd729cd3909bc510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={"e58b0f5f9483b6623103130250df2c17", 0x0, 0x0, {0xfffffffffffffffa, 0xf}, {0x2, 0x9}, 0xf, [0x3ff, 0x5, 0x0, 0x7, 0xc15, 0x7, 0xdca, 0x7470, 0xc8df, 0x5, 0x2, 0x40, 0x8e, 0xff, 0x5, 0x4]}) ioctl$BTRFS_IOC_WAIT_SYNC(0xffffffffffffffff, 0x40089416, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xfffffffffffffffe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x40, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x40}}, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0fe104", 0x16, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{}]}}}}}}, 0x0) syz_emit_ethernet(0x76, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000002", 0x40, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x8, 0x2, 0x0, 0x0, {0x0, 0x6, "000810", 0x0, 0x11, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @private2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x88, 0x1}]}]}}}}}}}, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) 3.929988966s ago: executing program 0 (id=1001): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000380), &(0x7f0000000580)=r0}, 0x20) r1 = socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000002c0)={"d81ba738", 0x368, 0x2, 0xa, 0x4, 0x1, "33d04181d0bae94d71af8b6409b9f9", "ab392b7f", "c993d614", "e1517a22", ["cb59b27aa0560fe9fa7ae2fd", "164ab740c3144227849013ae", "e13dec1953795ae7e4e589fa", "3fd7bb4138d8e332e9556e1b"]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000000c0)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="200e25000000255f"], 0x0, 0x0, 0x0, 0x0}, 0x0) keyctl$link(0x8, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000940)={0x40, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x6}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 3.110625895s ago: executing program 1 (id=1002): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000ac0)={0x3, &(0x7f0000000a80)=[{0x40}, {0x20, 0x0, 0x0, 0xfffff010}, {0x16}]}, 0x10) sendmmsg(r3, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000c00)="26f2d136", 0x4}], 0x1}}], 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x25dfdbfd, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 2.974560291s ago: executing program 2 (id=1003): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x6, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000400)=ANY=[], 0x1df) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x1, 0x40000000000000, 0x0, 0x0, 0x12, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000000000000000000000000000000000000000efff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0x80000001]}}) 2.928900244s ago: executing program 4 (id=1004): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000240)={0x2, 0x0, [{0x8, 0x0, 0x8000000000000001}, {0x8b3, 0x0, 0x7fffffff}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000, @void, @value}, 0x94) 2.746727339s ago: executing program 1 (id=1005): creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = syz_io_uring_setup(0x7da4, &(0x7f0000000500)={0x0, 0x3a4f, 0xc00, 0x0, 0x149}, &(0x7f0000000080)=0x0, &(0x7f00000004c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x23ec, 0x986f, 0x20, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000240)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0xfc, 0x0, 0x0}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r7 = dup(r6) write$P9_RLERRORu(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="5300000007000046009d40"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7, @ANYBLOB="2c89"]) 2.690197286s ago: executing program 2 (id=1006): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x500, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xffffffbd, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8c"]}]}, 0x114}], 0x1}, 0x0) 2.591910616s ago: executing program 4 (id=1007): ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f00000000c0)={r1}) (async) r3 = fsopen(&(0x7f0000000100)='jfs\x00', 0x0) (async) r4 = syz_usb_connect$cdc_ncm(0x4, 0x82, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x70, 0x2, 0x1, 0x5, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "4c3c07c4be"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x5, 0x4, 0x2}, {0x6, 0x24, 0x1a, 0x8, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x40, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0xed, 0xf9, 0xd1, 0x6}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0x9b, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x6, 0xe5, 0x3}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0x4, 0xa, 0x5, 0x8, 0x7}, 0x34, &(0x7f0000000240)={0x5, 0xf, 0x34, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0x5, 0x2, 0x1, 0x0, 0x9, [0x3f00, 0x0]}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x0, 0x3, 0x2, 0xf00f, 0xb, [0x3ff0, 0x3f00, 0x0]}]}, 0x6, [{0x86, &(0x7f0000000280)=@string={0x86, 0x3, "2b1c70d0a14f84d6892dba1b5d12244d0c20627a296f670b43f8ff722693b8b0a78a0e85c8d2eca2367ef5970b95f3c8aaa2212a4ab405ae5c489668e73061e538c5966ce0d83e1bcb91a2b393a1d9f64f7c5f19215935ec171f8a07d77b4de0752eb2f0724519e718a85b0013fb8839d66beeb1ece93386c2ee01443c8ee6e1faf7dcaa"}}, {0x3e, &(0x7f0000000340)=@string={0x3e, 0x3, "53374eecdd0f77d9f68b5dacffa7480c1fb55e2a81da95dfd709d2321fd053dbdea699d1576ce76cd405df5f24ae1a71fcecde5338a3e95c1b53fa9f"}}, {0x4d, &(0x7f0000000380)=@string={0x4d, 0x3, "f28b6af322b3a388c1785c1136e9f1ab56b20af32d4c2bcee81cad98c412ac5a1d2e4d58013df82918b6d8abc23c83c6de669105e87def7fd434158dc1da81d22935b50bbec91aa7f6b1b3"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x455}}, {0xa1, &(0x7f0000000440)=@string={0xa1, 0x3, "8666321c853015f8a0c3ea544948edf878878435a7c6506417caab5269ac1668215fff9160746290919aa10dbdb13eaeb5233826a4c16dda79d3ae4e4549b3c6c9dceb9da43feadfd821204ee4846b5ebe13e3da88ee9bafddddbf9a6fcd25b3583bf972dd7d100b14e2ae58c7dca07e9820af74a4902d02b28d059e4d9f83e4c28dde906edb3b622facdbcd3447963f5888898ccf6f8d1e65f0a58937628e"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x419}}]}) syz_usb_disconnect(r4) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x14, 0x6, 0x1, 0x401, 0x0, 0x0, {0xa}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4048881) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000700)=@o_path={&(0x7f00000006c0)='./file0\x00', r2, 0x4000, r3}, 0x18) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000780)={&(0x7f0000000740)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f00000007c0)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000800)=[0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000880)={r5, r6, r7, 0x48012925, 0x81, 0x4, 0x6cf, 0x928, 0x10, 0x7, 0x9, 0xe}) mknod(&(0x7f00000008c0)='./file0\x00', 0x0, 0x3) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000900)=0x11) (async) r8 = syz_usb_connect(0x3, 0x8ef, &(0x7f0000000940)={{0x12, 0x1, 0x300, 0x53, 0xc5, 0x8f, 0x40, 0x489, 0xe0db, 0x84c8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8dd, 0x2, 0x3, 0x7, 0x80, 0x6, [{{0x9, 0x4, 0xef, 0x0, 0x1, 0xff, 0x74, 0x46, 0x9, [@hid_hid={0x9, 0x21, 0x6, 0x10, 0x1, {0x22, 0x81c}}, @cdc_ncm={{0x6, 0x24, 0x6, 0x0, 0x1, '@'}, {0x5, 0x24, 0x0, 0xc5db}, {0xd, 0x24, 0xf, 0x1, 0x7fffffff, 0x26, 0x992, 0x9}, {0x6, 0x24, 0x1a, 0x29, 0x24}, [@country_functional={0x8, 0x24, 0x7, 0x3, 0x8, [0x5]}, @mdlm_detail={0x5, 0x24, 0x13, 0x1, '7'}, @call_mgmt={0x5, 0x24, 0x1, 0x2, 0x7}, @mdlm={0x15, 0x24, 0x12, 0x6}, @country_functional={0x12, 0x24, 0x7, 0x2, 0x5, [0x7, 0x4, 0x5, 0x5, 0xf1, 0x5]}, @dmm={0x7, 0x24, 0x14, 0x101, 0xca30}]}], [{{0x9, 0x5, 0x2, 0x10, 0x10, 0xf, 0x0, 0x4, [@generic={0xf1, 0x11, "80d23fbd81fff5371dc64ede534117b3d4db178bdeffce9528d3214713117ab5320f3e5580415a9f4a85ca8baba102a7cabb34634b81aacb4dc4df05ccaad8cd48e5f2d292f4cca5d3b52e4112d62ce981a8180e72ccaad42ae902be4b04bbcdc19b2211f9207a091aa25fd85aaf1cee9d51d7c6247f64d4703785353951063beef78bb42ddad3d3d99da7c9ea9ecf93bc8fbafdd774eec920e10e1afb94dc012a32dfa6890c2b685a3ff387b80cf8cc1ddf58b813ac977834c65375dff3e73546dc4bba6052e7dde9c485914224cc81075374d0df306a026b2a55724a63bf3ab63e758bc1baec7ff48f0a1c69f72e"}, @generic={0xe5, 0x34, "e68861bab4075d1a32adf0899007e1259ed18afd40ecd0c8225d3abfccc054c68d7b14c1b0ccc05b0eef21abae70a57521de6f11ee74d7486dffa90e052b3389662363a62e3a0c217d140e6ed6dbd36a5e1f952a560d29eb2993fbd30294cbc898a7557407e7ca3d840fbb68936da55cc4d49b5f3c4e2f25032ba74a1bc1316b755b72325b13210e613e9bf8e8dbaa019675f67c6ae1e296e20d8f468f21887742b86a7fef289282f446cc02363da1a236820d2447d7531fd20045d57789c98081bcdb35796db1b61b11114573a761ebfe130fdc1542d124fa1aeaff21ab04667080c1"}]}}]}}, {{0x9, 0x4, 0x5f, 0x4, 0xd, 0xff, 0xff, 0xff, 0x5, [@uac_as={[@format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x3, 0x0, 0x2, "a121ed2c3fde"}]}, @cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "7a9b"}, {0x5, 0x24, 0x0, 0xc8}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x86d, 0x8, 0x3}, {0x6, 0x24, 0x1a, 0x2581, 0x4}, [@dmm={0x7, 0x24, 0x14, 0x1ff, 0xf10}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xf}, @country_functional={0x12, 0x24, 0x7, 0x4, 0x8, [0xffc0, 0x6, 0x1, 0x9, 0x3, 0x92]}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x0, 0x1}, @obex={0x5, 0x24, 0x15, 0x1fe0}]}], [{{0x9, 0x5, 0xa, 0x2, 0x3ff, 0x8, 0x7, 0xe, [@generic={0xad, 0xb, "9c70592d0c3f91311bf08248cba9e0b2f13a020768c96fabf7cdf488a7eb95a236033d50666e71f5c45c0f7315da5fed0d60846f2fe1b9a5bc549e4d5ef25221c35fe70dd999494db86661053279652498b0e26038a443772d9a4a3ffdac1b0712bf1eb538c4814589886c948cddfd44bfaaebcd002dfbc59af5e53447bb89a1fc092388493b0c20b62eb02c3ad5cd92aed8770aa8e16d86029e60ead12d7e0277d7ffdf5439dcb1861b1f"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0xe}]}}, {{0x9, 0x5, 0x9, 0x10, 0x20, 0x2, 0x4, 0x7, [@generic={0x80, 0xa, "06f89f42f9623b1e6fe9310523a9514d7af96280f7777dd5a0412635a965bc59d40ea2b5412e4ef270b7e96b2476aa7728e8b66ce94b6052b8871483a93062d85ba0832d79f8f0663b905e45b1b67c956f1b84cb4783018ca6022916d72772d4dd9f94617a8b50655fcaabd5ad93656338a78cf7a209c93d91189a6cea01"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x9a, 0x3, 0x10}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x4, 0x8, 0x84, [@generic={0xfd, 0x22, "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"}, @generic={0xa3, 0xb, "2f4455c532bc1428dfbc877c378ed4b703afe1ea1f84de682da935c096e57fde62cd955aab93b11e904bfa3bdda9cc56cd6780c9b3b91917ec971d7f07571b291542cb2d13fd62153aa2ca7e08f42b31042948241e98a4f46b37d56c27af2678c492e573fd8d78ec2f46f46f5375c475ee0358262a90c8840cea2efc3950a47e577c89cfbb5f536db4d241f369f9adbed0fb8c22357ca6caeea896fea3d7ac7e66"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x0, 0xd1, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x80, 0xa000}]}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0xc8, 0x94, 0xf9, [@generic={0xfa, 0x31, "c684073507ce6dd66e5f9ea7163b6b455be8c6dd8d5117e3fd794d7cc2768a4731bbbde3199d49d73ebbfc620ea4acb724c5e268b7b3c7b476d7676b839d33c550446743e8513f2948448ec1178af7bca31afb76958967dc3976a8c9096a81e2edecd8162e722a5844dd609323eb610015f26e360b3f8806e6056cafcdf3b3797a6f80f86047e62f9b60a31bf3bf5bda56ca61212680d9f9a744b240681867c11927cead6baaac6b6d801d910d6bb44e5779fc48822b9e66ae4ccad2aafa4e8b7058f262ada1f61e283b01a703baade05302794ff662e43e0616a85f2600bf5c959c2e1eb2230c56973530c27ab75f85f6fa0e12cba6a5ac"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x4, 0xe7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x5}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x0, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x8}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x4, 0x0, 0x7f}}, {{0x9, 0x5, 0x6, 0x2, 0x200, 0x3, 0x3, 0x9, [@generic={0xe7, 0x10, "12144399c3b856958ad9e24af6922550c9fe1740e8a6ab9fedd4e9c94d4672fe901f68fbf80ac1536024a1cd3e72368583c5903e154fde94284bc4c1fd70b92a2ac6d9888f6e5bd5fba14a4db03720f1ee077382bd734dcf96beff6d48ac85e5ea13b7489f3d4e018e33812bb651b3b93e833b9cfb854a9efde1227ec47f44bbd77f04c62b722b3c88286ba90db9e9ac2ad997665812af81ba6d0eff1f87b1c6269e56afce78dac1d7c989594f93d0df3e97ea3f0161f67ae6d636bf0c186fe086a834e81cea27fcdb82afdc18493ce0031564faac6ef10d1a6c5dba107b03902867cb493a"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x20, 0x0, 0x55, 0x9}}, {{0x9, 0x5, 0x3, 0x1c, 0x670, 0x6, 0x40, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xb, 0x3ff}, @generic={0xdd, 0x7, "b7f9eb964b26c2258bb490b0e5ce1bb45731505893d4daada8034fe6ad7d74387c521fedd0066ea58098296e3a14e172203bda00ba066d2e2cd91ddc2be5f9031bceeb31ef40c57e136ede500a3c1ed1aabd1dbdd4877248303947cdc3976c1b3a768be4ffad668ae9bbb5788de714cac4caa5fe9bb8ea53041013def829a56106cc595f2305efd529760826ed187eafb7b2184ef4e99e0eac1ac8656ee3fd51de6e47547abb40bf2812f731668c40996540f28caa40b68cb5ddfbff44ba5689a1a353295fb188fcb054c2465fe19039d086de29c0c9d200a4b06f"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x200, 0xa, 0x8, 0x1a}}]}}]}}]}}, &(0x7f00000016c0)={0xa, &(0x7f0000001240)={0xa, 0x6, 0x110, 0x5, 0x4, 0xc, 0x40, 0x4}, 0x20, &(0x7f0000001280)={0x5, 0xf, 0x20, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x88, 0x27, 0x2, 0x7, 0x5}, @ssp_cap={0x10, 0x10, 0xa, 0x8, 0x1, 0x0, 0xf00f, 0x5, [0xff0000]}]}, 0x9, [{0x48, &(0x7f00000012c0)=@string={0x48, 0x3, "9dd8f7516659859b49aac5c72a16908c387f8705e38f0e31a5f0c67c179e56e4e416250c9f2f76dd516efdc26178d083e351bfbd77cd311d0532947b1d37390ee92ef172a5af"}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x341d}}, {0x4, &(0x7f0000001380)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f00000013c0)=@lang_id={0x4, 0x3, 0x402}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x100c}}, {0xff, &(0x7f0000001440)=@string={0xff, 0x3, "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"}}, {0xc1, &(0x7f0000001540)=@string={0xc1, 0x3, "f012f0ae387e1f1546e247e29311098d744905f0512fb5913c62a0821d9ca5537f7be34cb033f4b38dc371537c1da1417f5471f8f6ce135c8e6af784c0f7b776cc0cb046650097c0e0ff7d433596e0cc8f0a430176b4b127914b6368dcca9533b08088b315d4bdf2147c9074cb2da40feba3d7c1e522b39707f19471136529e55b1147174b512bd9550be3775752e497b75158d345c266b92927c041f0897d2376ec895805361970678ba592ae223bd95c2c3f850f71735fd29513254e25fc"}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x41e}}]}) (async) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) (async) close_range(r2, r3, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000017c0), r2) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f00000018c0)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001880)={&(0x7f0000001800)={0x64, r9, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x42}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x49}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x14}, @NL80211_ATTR_MAC={0xa, 0x6, @random="3718e596a57b"}, @NL80211_ATTR_PMK={0x14, 0xfe, "f88957cefd819fe04f4b9f0eca652cff"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x44) (async) syz_usb_control_io$printer(r8, &(0x7f0000001ac0)={0x14, &(0x7f0000001900)={0x0, 0x21, 0x94, {0x94, 0x8, "a5aeaf57e4be43531bc97dadfa522929f156aedfaa56dd8c142267262e4cc0cb487dbd9dcc221481bc26f5eef63927b9d338bfa2910650729fc7f3804367b4568a04f322a1c87ae241626559258a817868b66fc59e99e4575300bf6c62c37c5a9a229b298dbe45b5b0873cf163ff84f0867b41a3b147742e0441c6cfe8dfc0dafcbf5d8d8afcc94534d7e9c74138d3cf1305"}}, &(0x7f00000019c0)={0x0, 0x3, 0xbf, @string={0xbf, 0x3, "2e722a62d3313c6430d5d8da4400b03d0148a465ab7001caa51bbabe2e131bca5af559b693c8e355ae0315af524a1135162a984e51f297d71d5ffc9d355db1c0fbe450aa800088fbb80bfa8b4caa1cad3e384ac08b220d1148dd1c23db264e520cb9cc0ebe01a7405ece2dec004b46397f5085a5bef86ab095243cb6a1eb56d1a97d00258ef5119e7a54cbacb9c322ad3071acdab97e0292823202a7e55e0e129dffdf9ce2784f3f5ed3439f4a4723b572ae782420bfc97726caead788"}}}, &(0x7f0000001cc0)={0x34, &(0x7f0000001b00)={0x20, 0x14, 0x6f, "68bfa31db3dbc7f79bd5f97f5504b842300159932e59ffe606d85bd2ae20573c34a67e27354688d9322f569766a63d38bfc422573a48d4bbdf940fe438978be0df41c2f5d27cb4e0a95837fc47f83cde6bcb72954556338b22b5bd4635af94a3026900c34719052ed5bb1f3d9da2ab"}, &(0x7f0000001b80)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000001bc0)={0x0, 0x8, 0x1, 0xbe}, &(0x7f0000001c00)={0x20, 0x0, 0x22, {0x20, "fee4577842a16da59138acb23ebe4c6db35af69b5ac32e9ab5d10499723acbaa"}}, &(0x7f0000001c40)={0x20, 0x1, 0x1, 0x34}, &(0x7f0000001c80)={0x20, 0x0, 0x1, 0x88}}) (async) write$UHID_CREATE(r2, &(0x7f0000001dc0)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000001d00)=""/171, 0xab, 0xffff, 0xffffffff, 0x8, 0xffffffff, 0x4}}, 0x120) (async) read$msr(r2, &(0x7f0000001f00)=""/4096, 0x1000) syz_usb_connect$uac1(0x3, 0x106, &(0x7f0000002f00)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf4, 0x3, 0x1, 0xfa, 0x10, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd, 0x7}, [@selector_unit={0x5, 0x24, 0x5, 0x5, 0x4}, @feature_unit={0xb, 0x24, 0x6, 0x3, 0x3, 0x2, [0x3, 0xa], 0xa3}, @feature_unit={0xb, 0x24, 0x6, 0x2, 0x2, 0x2, [0x8, 0xa], 0x68}, @selector_unit={0x5, 0x24, 0x5, 0x2, 0x8}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x204, 0x4, 0x0, 0x2, 0x3, 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x5, 0x9, 0xd, "657b88b92bbab730"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x1, 0x3, 0x0, "9461eb66fc3271"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xb6, 0x1, 0x0, 0x7, "", "fa5a"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x7c}]}, {{0x9, 0x5, 0x1, 0x9, 0x640, 0x7, 0x2, 0x6, {0x7, 0x25, 0x1, 0x80, 0x5, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x3a, 0x2, 0x5, 0x81, "f1", "69c3"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0xd5c, 0x7f, 0x5, "8adae10d"}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x7e, 0x400, 0x3, "a63bb0"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x4, 0x1, 0xcd, 0x8d, 'lN', "9a46"}, @as_header={0x7, 0x24, 0x1, 0x6, 0x0, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7, 0xd0, 0x9d, {0x7, 0x25, 0x1, 0x82, 0xb}}}}}}}]}}, &(0x7f00000033c0)={0xa, &(0x7f0000003040)={0xa, 0x6, 0x0, 0x8, 0xe, 0x4, 0xff, 0x7}, 0xc, &(0x7f0000003080)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0x7, 0x9}]}, 0x9, [{0x4, &(0x7f00000030c0)=@lang_id={0x4, 0x3, 0x410}}, {0x16, &(0x7f0000003100)=@string={0x16, 0x3, "a427aa6c533461d717156a41cd0e3b41eb4e52cb"}}, {0x4, &(0x7f0000003140)=@lang_id={0x4, 0x3, 0x448}}, {0x20, &(0x7f0000003180)=@string={0x20, 0x3, "171ff841daa5765347015ed5fc934835da5aaff61541521dc384af6beebf"}}, {0x2, &(0x7f00000031c0)=@string={0x2}}, {0x4, &(0x7f0000003200)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f0000003240)=@lang_id={0x4, 0x3, 0x457}}, {0x9f, &(0x7f0000003280)=@string={0x9f, 0x3, "b9e030d0b25d41ede745f773101d03e80a87c8d77ddc3f95fc2895f511517901a36794fdf13f86f95aee0054a02774e002eeacffad3b14bacb21f36823f0da360d5681b972c63579d2d5610d9f630c1319a18fc8cfad2caa7af1f64780646d40311648cb211e14502cb11f8bce288450df2fe64174d9b1391618dc9f096c9152c74f86f395b18fd7cb7c110bbbeb23a5381603a9a71339fe8900e683ab"}}, {0x5c, &(0x7f0000003340)=@string={0x5c, 0x3, "40053bab71fb031d08fbc1ddfad5e530f0076de9c4232d8820b94bb121d69dd1af40060fb60045f07af9b34be5a98b18d3aaf8b1eb7e5aeed04c18e9a68b79776dd5add21c8ce715b7e16869478de5d75488a4cafebbf897eb86"}}]}) (async) r10 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000003480), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r10, 0x84, 0x1e, &(0x7f00000034c0)=0x8000, 0x4) (async) r11 = syz_open_dev$vim2m(&(0x7f0000003500), 0x6, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000003580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r10, &(0x7f0000003680)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003640)={&(0x7f00000035c0)={0x58, r9, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMKID={0x14, 0x55, "c0d773f7327780046426bd1dae4ab268"}, @NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x3}, @NL80211_ATTR_PMK={0x14, 0xfe, "c1d6136a247f70cc50d340ce01eabee4"}]}, 0x58}}, 0xc005) (async) add_key$user(&(0x7f00000036c0), &(0x7f0000003700)={'syz', 0x2}, &(0x7f0000003740)="bef86ab7defb43817a08b634a77ffd0be37037bbd000cb676865d822a941d7a97bda626bec5f57185b718d5f2356a932fe6b7a2aebfb04c1c91b709cb2b10d8c191a56d0e31347e3fddfc6fe3d84a1167389466dcac5e51b9c934050526b8deb0b3374ed6a215863c52494dc155e220861b91ca2ebb9a1e122508977553c600c77f6fb917a19cea02eba2b4166151147c1d4a6ce60feb9cfe7975a1c6595bbabb8dbde78ffca12d6b92db8773235761828053dcf5ed433e8064b2ae3d5913f1925e0a3f53e5dca733004242fb86d0e0123", 0xd1, 0x0) 2.517291135s ago: executing program 0 (id=1008): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) io_setup(0x4, &(0x7f0000000140)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060500000000000000000000e8ffff0b000780050015002600000005000100060000000500050002000000050004000000000011000300686173683a69702c706f727400000000090002"], 0x58}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b000000f1c120ae0200000022bf000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x1e, 0x20000002, r3) get_mempolicy(0x0, 0x0, 0x8, &(0x7f0000ffb000/0x2000)=nil, 0x2) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x20000, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2.437900909s ago: executing program 2 (id=1009): unlink(&(0x7f0000000280)='.\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={r2, 0x24, 0x10}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRES32], 0x48}}, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}}}, 0x14) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.threads\x00', 0x2, 0x0) r4 = syz_io_uring_setup(0x6e8c, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000001680)=0x0) unshare(0x22020600) syz_io_uring_submit(r5, r6, &(0x7f0000000480)=@IORING_OP_LINKAT={0x27, 0x0, 0x0, 0xffffffffffffffff, &(0x7f00000012c0)='./file0\x00', &(0x7f0000001300)='./file0\x00'}) io_uring_enter(r4, 0x6ed3, 0x0, 0x0, 0x0, 0x0) 2.410857931s ago: executing program 4 (id=1010): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000540), r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000440)=ANY=[], 0x0, 0x96, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x13}]}}, 0x0, 0x26, 0x0, 0x100000, 0xffffffff, 0x0, @void, @value}, 0x28) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="280000003d0009000000000000000000010000000c000180080010800400070008000200", @ANYRES32=0x0, @ANYBLOB="6079ad3a674c8b75d14ca3895808c83a6e6c75c5c05a2080ede157899bb0c7da"], 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1f00}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="0000547241d4a3809b518683381577b1000004000000000000000000010000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = fanotify_init(0x2, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r6, 0x71, 0x40000009, r7, 0x0) fanotify_mark(r6, 0x80, 0x20, 0xffffffffffffffff, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e00000524060001050ef0a2cb2727c9c5240000000d240f0100000000000000000006241a0000000c241b4800050000050080050905810300020000000904010000020d00000904010102020d0000090582020004"], 0x0) r8 = dup3(r4, r3, 0x0) sendmmsg$inet(r8, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000500)}}], 0x1, 0x20000000) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x24, 0x0, &(0x7f0000000080)=[@acquire={0x40046305, 0x80000}, @acquire_done, @decrefs], 0x0, 0x0, 0x0}) setsockopt$IP_VS_SO_SET_FLUSH(r8, 0x0, 0x485, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/cgroup', 0x0, 0x0) getdents(r11, &(0x7f0000000300)=""/222, 0xde) getdents(r11, 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_COALESCE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={0x14, r10, 0x1, 0x0, 0x0, {{0x2}, {@void, @void}}}, 0x14}, 0x1, 0x6c00, 0x0, 0x10}, 0x0) 2.314570294s ago: executing program 2 (id=1011): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) io_setup(0x4, &(0x7f0000000140)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060500000000000000000000e8ffff0b000780050015002600000005000100060000000500050002000000050004000000000011000300686173683a69702c706f727400000000090002"], 0x58}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b000000f1c120ae0200000022bf000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) get_mempolicy(0x0, 0x0, 0x8, &(0x7f0000ffb000/0x2000)=nil, 0x2) mkdir(&(0x7f00000002c0)='./file0\x00', 0x62) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x20000, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.482839328s ago: executing program 6 (id=1013): socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)='u', 0x1, 0x24000010, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x61a2fbc4, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000f6ff00000000000000020000009500000085fa0000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, 0x0, 0x0) listen(r3, 0x9) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c000000000b0500000000000000000003000009ec0001007533320008000240000000010800034000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20004045}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 1.401913827s ago: executing program 1 (id=1014): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000500)={0x0, 0x4, 0xf}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000e40)={r1, 0x1ff, 0x0, [0x5fac, 0x5d9, 0x66e5, 0x1, 0xf], [0x2, 0x4, 0x2, 0x3, 0x9, 0x6, 0xa, 0x9, 0x3, 0x9, 0x3, 0x435b5e84, 0x5, 0x1f97, 0x3, 0x4, 0x25f, 0x2, 0x6, 0x3, 0x3ff, 0x0, 0x5, 0x8, 0x1, 0x6, 0x4, 0xe, 0x7, 0x7fffffffffffffff, 0x100, 0x0, 0x6, 0x0, 0xc3f, 0x5, 0x7, 0xc30c, 0x5, 0x9, 0x100000000, 0xe7, 0x10001, 0x7, 0x7, 0x1000, 0x9, 0xffffffff, 0xff, 0x2, 0x5, 0x7, 0x3, 0x200, 0xb, 0xfffffffffffffffe, 0x3, 0x81, 0x4, 0x1, 0x0, 0x2, 0x7, 0x3, 0x6, 0x9, 0x6, 0xff, 0x7, 0x1800000000000, 0x107, 0x1, 0x2e7, 0xfffffffffffffff8, 0x3, 0x1, 0x1, 0x6, 0xfffffffffffffff5, 0x401, 0x10000, 0xfff, 0x5, 0x7, 0x6, 0x8, 0x4, 0x1, 0x401, 0x1, 0x8, 0x60, 0x5, 0x4, 0x9, 0x9, 0x8, 0xfceb, 0x8eb, 0x101, 0x100, 0x40, 0x100, 0x6, 0xd324, 0x5, 0x6, 0x30b4, 0xd04, 0x4, 0x9, 0x4, 0x6, 0x10000, 0x9, 0x5, 0x100, 0x8001, 0x13, 0x3, 0x2]}) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000cc0), r0) r3 = socket(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000180), &(0x7f0000000140)) syz_open_dev$vcsa(&(0x7f0000000240), 0x5, 0x80400) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18fe704e1543adfc5764cca62ae100000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0xfff}, 0x10) write(r5, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000040)={0x3ff}, 0x0, 0x0) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfc, {0x1d, 0x1, 0x3}, [@CGW_SRC_IF={0x8, 0x9, r7}, @CGW_DST_IF={0x8, 0xa, r7}]}, 0x27}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f00000004c0)={0x20, r2, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x10) 1.125346276s ago: executing program 6 (id=1015): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) io_setup(0x4, &(0x7f0000000140)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000002060500000000000000000000e8ffff0b000780050015002600000005000100060000000500050002000000050004000000000011000300686173683a69702c706f727400000000090002"], 0x58}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b000000f1c120ae0200000022bf000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x1e, 0x20000002, r3) get_mempolicy(0x0, 0x0, 0x8, &(0x7f0000ffb000/0x2000)=nil, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000', @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYRESDEC=0x0]) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x20000, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 767.826539ms ago: executing program 0 (id=1016): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000480)={0x9, 0x0, [{0x7, 0xffffffff, 0x1, 0x7, 0x6, 0x6, 0x2}, {0x1, 0x4, 0x0, 0x7fff, 0x27, 0x7, 0x5}, {0xb, 0x8, 0x0, 0x3, 0x7fffffff, 0x5, 0xffff}, {0xb, 0xe5f, 0x1, 0x7, 0xdf4, 0x6, 0x80000001}, {0xd, 0x2bb, 0x1, 0xd, 0x1, 0x7ff, 0x400}, {0x80000000, 0x100, 0x4, 0x6, 0x3, 0x1, 0x3}, {0x80000001, 0x2, 0x3, 0xfffffff7, 0xfffffff9, 0xff}, {0xb, 0x3, 0x4, 0x2, 0xfff, 0x122b4f22, 0x6}, {0x0, 0x1a3, 0x1, 0x1, 0xa4, 0x80000000, 0x7f}]}) syz_open_dev$vim2m(&(0x7f0000000040), 0x80000000, 0x2) r3 = syz_usb_connect(0x3, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1001}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1}) syz_usb_control_io(r3, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x414}}, 0x0, 0x0, 0x0}, 0x0) r6 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$tcp_congestion(r6, &(0x7f0000000100)='bic\x00', 0x4) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r8, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) getgroups(0x3, &(0x7f0000000c80)=[0xee01, 0xee00, 0xffffffffffffffff]) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001d000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r13, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setresgid(r11, r9, r10) setresgid(r11, r11, 0x0) syz_usb_control_io(r3, &(0x7f00000010c0)={0x2c, 0x0, &(0x7f0000000fc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x83e}}, 0x0, 0x0, 0x0}, 0x0) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0900000004000000060000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000d4fd22040000"], 0x48) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r14}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r15}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r14}, &(0x7f0000000440), &(0x7f0000000540)}, 0x20) 755.764708ms ago: executing program 2 (id=1017): fsopen(&(0x7f0000000000)='affs\x00', 0x1) syz_usb_connect(0x0, 0x81, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000a7420040ab0501030001010203010902240001000000000904000002aad45c0009058e02000000000009050a06"], 0x0) 476.536933ms ago: executing program 6 (id=1018): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000001c0)) 361.081687ms ago: executing program 1 (id=1019): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYRES8=0x0], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x13, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f00003b6000/0x1000)=nil, 0x1000, 0x0, 0x8031, r1, 0xa0f32000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4, 0xfffeffff) r5 = socket$inet(0x2, 0x1, 0x4) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={'veth1_to_bond\x00', {0x2, 0x4e26, @rand_addr=0xdffffc13}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, &(0x7f0000000080)={r7, 0xffffffffffffffff, 0x5, 0x2}) writev(r6, &(0x7f00000002c0)=[{&(0x7f00000004c0)="dac4f9fdd39ffefcf40ef0236ad459af16f7b766aab331421de22fca150e8f8b731de05f7dd2558700004de4fa42bf414e790addb998eacc3b1c6df3d11818fbc7981691d3c086f624a5f398157ca27ff44c58f4fc1ff5bb0000870272d1d99eda5a95650846daa78b2858d96dce5c42b2a5c61d7a540f5b58b9b2dff09d911cabdd53ead4", 0x85}], 0x1) r8 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff) socket$packet(0x11, 0x2, 0x300) 313.203601ms ago: executing program 6 (id=1020): r0 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r0, 0x0, 0x9, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf09000000000000550901"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async) ptrace(0x10, r1) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) socket$inet(0x2, 0x2, 0x73) (async) r2 = socket$inet(0x2, 0x2, 0x73) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) (async) setsockopt$inet_opts(r2, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) (async) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x202, 0x0) write$sequencer(r4, &(0x7f00000001c0)=[@t={0x81, 0x5, 0x0, 0x0, @generic}, @raw={0xc, 0x2, "edc839543536"}], 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x2, 0x100000001, 0xfffffffffffffc00, 0x2, 0x86f, 0x2, 0xb08e, 0x3, 0x7fff, 0x9, 0x1, 0x10, 0x6, 0x7f, 0x4, 0x7fff], 0xeeef0000, 0x900}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000840)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000fedbdf250200000008000300", @ANYRES32=r6, @ANYBLOB="0800a1000200000008009f000a000000080026008009"], 0x34}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) 165.91117ms ago: executing program 6 (id=1021): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000000)) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a200000001a0a05000000000000000000070000000c0004"], 0x48}}, 0x0) r3 = accept(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) r4 = signalfd4(0xffffffffffffffff, &(0x7f00000001c0)={[0xffffffffffffffff]}, 0x8, 0x80800) read$FUSE(r4, &(0x7f0000001a00)={0x2020}, 0x2020) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000180)={0x40000, 0x0, [0x298, 0x13f2, 0x100000000, 0x7, 0x3, 0xfffffffffffffff4, 0xfffffffffffffff5, 0xa]}) 0s ago: executing program 6 (id=1022): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000140)=0x2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x8, r4, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x16}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) r7 = geteuid() quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000200, r7, &(0x7f0000000200)='./file0\x00') ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xc000) kernel console output (not intermixed with test programs): 6.859104][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.912943][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.938230][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 326.968195][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 326.996079][ T9597] netlink: 36 bytes leftover after parsing attributes in process `syz.8.745'. [ 327.010739][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.029688][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.066931][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.084240][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.097866][ T29] audit: type=1326 audit(2000000158.658:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9616 comm="syz.7.747" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47c9b85d29 code=0x0 [ 327.120799][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.130807][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.141642][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.173880][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.201335][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.225378][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.239539][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.250256][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.270443][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.284457][ T9365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.299144][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.446386][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.456379][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.468356][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.479845][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.491218][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.541379][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.591592][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.608205][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.654509][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.737999][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.797333][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.846126][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.899400][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.955114][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.006618][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.060578][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.062427][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.090668][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.108480][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.119394][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.140931][ T9365] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.158430][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.181024][ T9365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.233241][ T9] usb 9-1: USB disconnect, device number 22 [ 328.260614][ T9365] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.316541][ T9365] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.325383][ T9365] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.334641][ T9365] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.392060][ T117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.575632][ T9365] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 328.591990][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.602462][ T9365] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 328.613437][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.623620][ T9365] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 328.633682][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.643937][ T9365] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 328.653881][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.664538][ T9365] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan3 [ 328.737924][ T9365] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.788407][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.801451][ T6727] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 328.836686][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.953409][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.981823][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.984946][ T6727] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 329.152144][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 329.158432][ T5828] Bluetooth: hci7: command 0x0406 tx timeout [ 329.196530][ T7131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.249447][ T6727] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.322583][ T9666] o2cb: This node has not been configured. [ 329.328700][ T9666] o2cb: Cluster check failed. Fix errors before retrying. [ 329.335941][ T9666] (syz.7.754,9666,1):user_dlm_register:674 ERROR: status = -22 [ 329.343553][ T9666] (syz.7.754,9666,1):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "file1" [ 329.371908][ T29] audit: type=1400 audit(2000000160.869:798): avc: denied { write } for pid=9663 comm="syz.7.754" name="/" dev="ocfs2_dlmfs" ino=27406 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 329.394615][ T6727] usb 1-1: Product: syz [ 329.398953][ T6727] usb 1-1: Manufacturer: syz [ 329.403639][ T6727] usb 1-1: SerialNumber: syz [ 329.417541][ T29] audit: type=1400 audit(2000000160.869:799): avc: denied { add_name } for pid=9663 comm="syz.7.754" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 329.438762][ T29] audit: type=1400 audit(2000000160.879:800): avc: denied { create } for pid=9663 comm="syz.7.754" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 329.459363][ T29] audit: type=1400 audit(2000000160.879:801): avc: denied { associate } for pid=9663 comm="syz.7.754" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 329.526965][ T6727] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 329.559122][ T5877] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 330.057796][ T117] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 330.299549][ T6727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 330.399733][ T9] usb 1-1: USB disconnect, device number 23 [ 330.413067][ T29] audit: type=1400 audit(2000000161.969:802): avc: denied { accept } for pid=9677 comm="syz.7.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 330.540223][ T117] usb 3-1: Using ep0 maxpacket: 8 [ 330.581772][ T117] usb 3-1: unable to get BOS descriptor or descriptor too short [ 330.614271][ T117] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 330.748990][ T5877] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 330.768042][ T5877] ath9k_htc: Failed to initialize the device [ 330.788946][ T9] usb 1-1: ath9k_htc: USB layer deinitialized [ 330.821290][ T117] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 330.847087][ T117] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 330.873747][ T117] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 330.891924][ T117] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.921154][ T117] usb 3-1: Product: syz [ 330.955947][ T117] usb 3-1: Manufacturer: syz [ 330.970461][ T117] usb 3-1: SerialNumber: syz [ 331.541183][ T29] audit: type=1326 audit(2000000162.979:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9700 comm="syz.8.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda8d85d29 code=0x7ffc0000 [ 331.819350][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.833682][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.901646][ T9714] nbd: must specify at least one socket [ 331.936778][ T29] audit: type=1326 audit(2000000162.979:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9700 comm="syz.8.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda8d85d29 code=0x7ffc0000 [ 332.268540][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.354611][ T29] audit: type=1326 audit(2000000162.979:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9700 comm="syz.8.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feda8d85d29 code=0x7ffc0000 [ 332.373090][ T117] usb 3-1: 0:2 : does not exist [ 332.378643][ T29] audit: type=1326 audit(2000000162.979:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9700 comm="syz.8.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda8d85d29 code=0x7ffc0000 [ 332.408697][ T29] audit: type=1326 audit(2000000162.979:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9700 comm="syz.8.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda8d85d29 code=0x7ffc0000 [ 332.443222][ T29] audit: type=1326 audit(2000000162.979:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9700 comm="syz.8.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feda8d84690 code=0x7ffc0000 [ 332.462439][ T117] usb 3-1: USB disconnect, device number 27 [ 332.601121][ T5877] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 332.800824][ T5877] usb 5-1: New USB device found, idVendor=0c45, idProduct=8001, bcdDevice=90.0a [ 332.821260][ T29] audit: type=1326 audit(2000000162.989:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9700 comm="syz.8.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda8d85d29 code=0x7ffc0000 [ 333.005088][ T29] audit: type=1326 audit(2000000162.989:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9700 comm="syz.8.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda8d85d29 code=0x7ffc0000 [ 333.071153][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.139524][ T7131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.387652][ T5877] usb 5-1: config 0 descriptor?? [ 333.404673][ T29] audit: type=1326 audit(2000000162.989:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9700 comm="syz.8.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7feda8d85d29 code=0x7ffc0000 [ 333.405845][ T5877] gspca_main: sn9c2028-2.14.0 probing 0c45:8001 [ 333.428205][ T29] audit: type=1326 audit(2000000162.989:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9700 comm="syz.8.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda8d85d29 code=0x7ffc0000 [ 333.428247][ T29] audit: type=1326 audit(2000000162.989:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9700 comm="syz.8.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda8d85d29 code=0x7ffc0000 [ 333.428278][ T29] audit: type=1326 audit(2000000162.989:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9700 comm="syz.8.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feda8d85d29 code=0x7ffc0000 [ 333.711178][ T5877] gspca_sn9c2028: read1 error -32 [ 333.725537][ T5877] gspca_sn9c2028: read1 error -32 [ 333.732100][ T5877] videodev: could not get a free minor [ 333.737600][ T5877] gspca_main: video_register_device err -23 [ 333.755882][ T5877] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -23 [ 334.083875][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.094381][ T9740] fuse: Bad value for 'fd' [ 334.389816][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.886579][ T117] usb 5-1: USB disconnect, device number 23 [ 335.103740][ T54] Bluetooth: hci5: Unable to find connection with handle 0xdfc0 [ 335.208015][ T5877] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 335.592300][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.678008][ T7131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.860866][ T5877] usb 3-1: Using ep0 maxpacket: 32 [ 335.867503][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 335.933895][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.945647][ T5877] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 335.961123][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.975187][ T5877] usb 3-1: config 0 descriptor?? [ 336.017582][ T5877] hub 3-1:0.0: USB hub found [ 336.219361][ T5877] hub 3-1:0.0: 1 port detected [ 336.351817][ T7131] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 336.359917][ T1208] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 336.552615][ T7131] usb 5-1: Using ep0 maxpacket: 16 [ 336.704798][ T1208] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 336.734093][ T1208] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.744835][ T7131] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.764084][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.789235][ T7131] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 336.816696][ T1208] usb 9-1: Product: syz [ 336.830808][ T1208] usb 9-1: Manufacturer: syz [ 336.835461][ T1208] usb 9-1: SerialNumber: syz [ 336.851316][ T7131] usb 5-1: config 0 interface 0 has no altsetting 0 [ 336.857941][ T7131] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 336.910386][ T1208] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 336.941939][ T25] hub 3-1:0.0: activate --> -90 [ 336.953183][ T6727] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 336.969047][ T7131] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.015285][ T7131] usb 5-1: config 0 descriptor?? [ 337.338724][ T9791] /dev/nullb0: Can't open blockdev [ 337.521313][ T5821] Bluetooth: hci2: Unable to find connection with handle 0xdfc0 [ 338.378987][ T6727] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 339.228341][ T117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.242241][ T9] usb 9-1: USB disconnect, device number 23 [ 339.261075][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.280719][ T6727] ath9k_htc: Failed to initialize the device [ 339.296977][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.306559][ T9] usb 9-1: ath9k_htc: USB layer deinitialized [ 339.443935][ T25] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 339.504203][ T25] usb 3-1-port1: cannot disable (err = -32) [ 339.715191][ T9802] FAULT_INJECTION: forcing a failure. [ 339.715191][ T9802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.725589][ T8] usb 3-1: USB disconnect, device number 28 [ 339.805591][ T7131] usbhid 5-1:0.0: can't add hid device: -71 [ 339.818008][ T7131] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 339.856584][ T7131] usb 5-1: USB disconnect, device number 24 [ 339.866674][ T9802] CPU: 1 UID: 0 PID: 9802 Comm: syz.8.779 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 339.877311][ T9802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 339.887382][ T9802] Call Trace: [ 339.890672][ T9802] [ 339.893605][ T9802] dump_stack_lvl+0x16c/0x1f0 [ 339.898302][ T9802] should_fail_ex+0x497/0x5b0 [ 339.902995][ T9802] _copy_from_user+0x2e/0xd0 [ 339.907597][ T9802] copy_msghdr_from_user+0x99/0x160 [ 339.912809][ T9802] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 339.918646][ T9802] ___sys_sendmsg+0xff/0x1e0 [ 339.923254][ T9802] ? __pfx____sys_sendmsg+0x10/0x10 [ 339.928480][ T9802] ? __pfx_lock_release+0x10/0x10 [ 339.933522][ T9802] ? trace_lock_acquire+0x14e/0x1f0 [ 339.938760][ T9802] ? __fget_files+0x206/0x3a0 [ 339.943470][ T9802] __sys_sendmsg+0x16e/0x220 [ 339.948055][ T9802] ? __pfx___sys_sendmsg+0x10/0x10 [ 339.953171][ T9802] do_syscall_64+0xcd/0x250 [ 339.957699][ T9802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.963612][ T9802] RIP: 0033:0x7feda8d85d29 [ 339.968035][ T9802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.987657][ T9802] RSP: 002b:00007feda9b5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 339.996075][ T9802] RAX: ffffffffffffffda RBX: 00007feda8f75fa0 RCX: 00007feda8d85d29 [ 340.004043][ T9802] RDX: 0000000000000004 RSI: 0000000020000600 RDI: 0000000000000003 [ 340.012024][ T9802] RBP: 00007feda9b5c090 R08: 0000000000000000 R09: 0000000000000000 [ 340.020001][ T9802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.027963][ T9802] R13: 0000000000000000 R14: 00007feda8f75fa0 R15: 00007ffe14ad1e78 [ 340.035932][ T9802] [ 340.134019][ T9809] 9pnet_fd: Insufficient options for proto=fd [ 340.572452][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.340801][ T9] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 341.614017][ T6727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.634322][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 341.646480][ T9] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 341.655210][ T9] usb 9-1: config 0 has no interface number 0 [ 341.676662][ T9] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 341.707340][ T9] usb 9-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 341.727917][ T9] usb 9-1: config 0 interface 41 has no altsetting 0 [ 341.806629][ T9] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 341.826401][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.880593][ T9] usb 9-1: Product: syz [ 341.884815][ T9] usb 9-1: Manufacturer: syz [ 341.891458][ T117] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 341.963359][ T9] usb 9-1: SerialNumber: syz [ 341.978999][ T9] usb 9-1: config 0 descriptor?? [ 342.021164][ T9819] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 342.031052][ T9819] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 342.062922][ T9840] overlayfs: failed to resolve './file0': -2 [ 342.076221][ T117] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 342.085719][ T117] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.094310][ T117] usb 5-1: Product: syz [ 342.098752][ T117] usb 5-1: Manufacturer: syz [ 342.119319][ T117] usb 5-1: SerialNumber: syz [ 342.126563][ T9844] loop9: detected capacity change from 0 to 8 [ 342.149271][ T117] usb 5-1: config 0 descriptor?? [ 342.163384][ T9844] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 342.194463][ T9844] loop9: partition table partially beyond EOD, truncated [ 342.240682][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.250272][ T9818] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 342.275548][ T9818] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 342.334240][ T9844] loop9: p1 size 81768186 extends beyond EOD, truncated [ 342.501563][ T9849] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 342.539451][ T9849] loop9: partition table partially beyond EOD, truncated [ 342.560451][ T9849] loop9: p1 size 81768186 extends beyond EOD, truncated [ 342.635890][ T7131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.685123][ T7131] usb 5-1: USB disconnect, device number 25 [ 342.945794][ T9] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 342.982287][ T9858] trusted_key: encrypted_key: master key parameter is missing [ 343.051922][ T9858] netlink: 'syz.2.789': attribute type 1 has an invalid length. [ 343.300423][ T9864] loop9: detected capacity change from 0 to 7 [ 343.308377][ T9864] Dev loop9: unable to read RDB block 7 [ 343.314711][ T9864] loop9: unable to read partition table [ 343.320828][ T9864] loop9: partition table beyond EOD, truncated [ 343.327020][ T9864] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 343.671697][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.686169][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.710554][ T5893] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 343.880716][ T5893] usb 5-1: Using ep0 maxpacket: 16 [ 343.887818][ T5893] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.899833][ T5893] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 343.928444][ T5893] usb 5-1: config 0 interface 0 has no altsetting 0 [ 343.945154][ T5893] usb 5-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 343.986172][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.020115][ T5893] usb 5-1: config 0 descriptor?? [ 344.411620][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 344.411636][ T29] audit: type=1326 audit(2000000175.969:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.7.796" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f47c9b85d29 code=0x0 [ 344.604706][ T9888] fuse: Bad value for 'fd' [ 344.871014][ T6727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.038647][ T9891] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 345.045578][ T9891] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 345.103634][ T9891] vhci_hcd vhci_hcd.0: Device attached [ 345.107815][ T9] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 345.122703][ T9] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 345.132297][ T9] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -71 [ 345.151002][ T9] usb 9-1: USB disconnect, device number 24 [ 345.285490][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.340281][ T51] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 345.372566][ T9892] vhci_hcd: connection reset by peer [ 345.400037][ T1305] vhci_hcd: stop threads [ 345.417172][ T1305] vhci_hcd: release socket [ 345.442614][ T1305] vhci_hcd: disconnect device [ 345.917046][ T6727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 345.979972][ T1305] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.362746][ T1305] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.579288][ T5893] usbhid 5-1:0.0: can't add hid device: -71 [ 346.802369][ T5893] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 346.957472][ T7131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.970420][ T5893] usb 5-1: USB disconnect, device number 26 [ 346.995496][ T1305] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.209769][ T29] audit: type=1400 audit(2000000178.750:843): avc: denied { map } for pid=9914 comm="syz.2.807" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 347.351369][ T1305] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.496446][ T29] audit: type=1400 audit(2000000179.030:844): avc: denied { ioctl } for pid=9919 comm="syz.2.809" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 347.650903][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.976168][ T5828] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 347.980617][ T9930] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 348.017477][ T5828] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 348.031114][ T5828] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 348.034669][ T7131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.054103][ T5828] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 348.064651][ T5828] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 348.075740][ T5828] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 348.319711][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.382772][ T9937] cgroup: Need name or subsystem set [ 348.862740][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.810'. [ 348.878464][ T1305] bridge_slave_1: left allmulticast mode [ 348.891083][ T1305] bridge_slave_1: left promiscuous mode [ 348.930427][ T1305] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.052188][ T1305] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.053576][ T9940] 9pnet_fd: Insufficient options for proto=fd [ 349.464319][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.043848][ T54] Bluetooth: hci8: command 0x0406 tx timeout [ 350.151585][ T5821] Bluetooth: hci5: command tx timeout [ 350.478395][ T5859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.511430][ T51] vhci_hcd: vhci_device speed not set [ 350.571663][ T6727] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 350.729525][ T9966] CUSE: unknown device info "" [ 350.734744][ T9966] CUSE: zero length info key specified [ 350.770632][ T6727] usb 3-1: Using ep0 maxpacket: 16 [ 350.786209][ T6727] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.830052][ T6727] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.900864][ T6727] usb 3-1: config 0 interface 0 has no altsetting 0 [ 350.930468][ T6727] usb 3-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 350.956805][ T6727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.035501][ T6727] usb 3-1: config 0 descriptor?? [ 351.354352][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.496282][ T9970] binder: 9968:9970 ioctl c0306201 200001c0 returned -14 [ 351.510820][ T7131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.579358][ T1305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.592719][ T1305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.614118][ T1305] bond0 (unregistering): Released all slaves [ 351.700563][ T9969] netlink: 16 bytes leftover after parsing attributes in process `syz.0.821'. [ 352.097740][ T1305] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 352.227702][ T1305] batman_adv: batadv0: Removing interface: ipvlan2 [ 352.235496][ T5821] Bluetooth: hci5: command tx timeout [ 352.380337][ T1305] hsr_slave_0: left promiscuous mode [ 352.400853][ T1305] hsr_slave_1: left promiscuous mode [ 352.413234][ T1305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.420930][ T1305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.432686][ T1305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.441375][ T1305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.506425][ T1305] veth1_macvtap: left promiscuous mode [ 352.525702][ T1305] veth0_macvtap: left promiscuous mode [ 352.547907][ T1305] veth1_vlan: left promiscuous mode [ 352.576407][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.581223][ T1305] veth0_vlan: left promiscuous mode [ 352.865705][ T6727] usbhid 3-1:0.0: can't add hid device: -71 [ 352.905379][ T6727] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 352.976088][ T6727] usb 3-1: USB disconnect, device number 29 [ 353.411555][T10005] cgroup: Need name or subsystem set [ 353.836277][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.166776][ T29] audit: type=1400 audit(2000000185.660:845): avc: denied { bind } for pid=10006 comm="syz.0.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 354.526085][ T5821] Bluetooth: hci5: command tx timeout [ 354.585145][ T9996] 9pnet_fd: Insufficient options for proto=fd [ 354.639943][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.279146][ T54] Bluetooth: hci7: Malformed MSFT vendor event: 0x02 [ 355.301328][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.123520][ T5821] Bluetooth: hci2: Unable to find connection with handle 0xdfc0 [ 356.251783][ T8] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 356.311069][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.518910][ T1305] team0 (unregistering): Port device team_slave_1 removed [ 356.543851][ T8] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 356.563932][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.673450][ T5821] Bluetooth: hci5: command tx timeout [ 356.679093][ T8] usb 8-1: Product: syz [ 356.683533][ T8] usb 8-1: Manufacturer: syz [ 356.688225][ T8] usb 8-1: SerialNumber: syz [ 356.737105][ T8] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 357.038474][ T5826] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 357.065851][ T1305] team0 (unregistering): Port device team_slave_0 removed [ 357.120699][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.456095][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.060348][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.592634][ T6727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.780252][ T8] usb 8-1: USB disconnect, device number 12 [ 358.790219][ T5826] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 358.798438][ T5826] ath9k_htc: Failed to initialize the device [ 358.804971][ T8] usb 8-1: ath9k_htc: USB layer deinitialized [ 358.957478][T10016] netlink: 28 bytes leftover after parsing attributes in process `syz.4.828'. [ 358.968714][T10016] netlink: 28 bytes leftover after parsing attributes in process `syz.4.828'. [ 359.131858][ T9922] chnl_net:caif_netlink_parms(): no params data found [ 359.523467][ T9922] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.596596][ T9922] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.653279][ T9922] bridge_slave_0: entered allmulticast mode [ 359.670653][ T6727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.712235][ T9922] bridge_slave_0: entered promiscuous mode [ 359.859596][ T9922] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.900075][ T9922] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.950031][ T9922] bridge_slave_1: entered allmulticast mode [ 359.972979][ T9922] bridge_slave_1: entered promiscuous mode [ 360.043344][T10076] netlink: 'syz.2.838': attribute type 2 has an invalid length. [ 360.065893][T10076] netlink: 'syz.2.838': attribute type 2 has an invalid length. [ 360.101014][T10076] netlink: 'syz.2.838': attribute type 1 has an invalid length. [ 360.163704][ T9922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.210419][ T9922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.485283][ T9922] team0: Port device team_slave_0 added [ 360.639690][ T9922] team0: Port device team_slave_1 added [ 360.828076][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.190496][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.224333][T10090] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 361.251296][ T9922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.285317][ T9922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.330941][ T9922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.343383][ T9922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.350683][ T9922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.377693][ T9922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.888607][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.126405][ T9922] hsr_slave_0: entered promiscuous mode [ 362.442654][ T9922] hsr_slave_1: entered promiscuous mode [ 362.697833][ T9922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.729690][ T9922] Cannot create hsr debugfs directory [ 362.881533][T10110] CUSE: unknown device info "" [ 362.886532][T10110] CUSE: zero length info key specified [ 362.903864][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.950298][ T7131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 363.369261][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 363.463112][ T9922] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.555089][ T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 363.595867][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.664452][ T9] usb 5-1: Product: syz [ 363.699217][ T9] usb 5-1: Manufacturer: syz [ 363.719496][ T9] usb 5-1: SerialNumber: syz [ 363.754295][ T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 363.828881][ T9922] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.981393][ T8] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 364.029436][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.074479][ T9922] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.249266][ T7131] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 364.259664][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 364.300670][ T9922] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.402529][ T7131] usb 8-1: config 0 has an invalid interface number: 100 but max is 0 [ 364.419164][ T7131] usb 8-1: config 0 has no interface number 0 [ 364.436475][ T7131] usb 8-1: config 0 interface 100 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 32 [ 364.476777][ T7131] usb 8-1: config 0 interface 100 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 364.514455][ T7131] usb 8-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=3c.ad [ 364.534246][ T7131] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.559059][ T7131] usb 8-1: Product: syz [ 364.568704][ T7131] usb 8-1: Manufacturer: syz [ 364.594894][ T7131] usb 8-1: SerialNumber: syz [ 364.669635][ T5893] usb 5-1: USB disconnect, device number 27 [ 364.673180][ T7131] usb 8-1: config 0 descriptor?? [ 364.683528][T10129] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 364.776202][ T7131] port100 8-1:0.100: NFC: Could not find bulk-in or bulk-out endpoint [ 364.951862][T10146] fuse: Bad value for 'fd' [ 365.191886][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.202230][ T8] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 365.209300][ T8] ath9k_htc: Failed to initialize the device [ 365.216309][ T5893] usb 5-1: ath9k_htc: USB layer deinitialized [ 365.230078][T10129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.241121][T10129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.666476][ T1208] usb 8-1: USB disconnect, device number 13 [ 365.741295][ T9922] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 365.770471][T10152] FAULT_INJECTION: forcing a failure. [ 365.770471][T10152] name failslab, interval 1, probability 0, space 0, times 0 [ 365.809368][T10152] CPU: 1 UID: 0 PID: 10152 Comm: syz.4.852 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 365.820073][T10152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 365.830136][T10152] Call Trace: [ 365.833420][T10152] [ 365.836353][T10152] dump_stack_lvl+0x16c/0x1f0 [ 365.841043][T10152] should_fail_ex+0x497/0x5b0 [ 365.845732][T10152] ? fs_reclaim_acquire+0xae/0x150 [ 365.850854][T10152] should_failslab+0xc2/0x120 [ 365.855545][T10152] __kmalloc_cache_noprof+0x68/0x410 [ 365.861017][T10152] ? __pfx_seg6_genl_dumphmac_start+0x10/0x10 [ 365.867110][T10152] seg6_genl_dumphmac_start+0x13a/0x1c0 [ 365.872678][T10152] genl_start+0x5fa/0x960 [ 365.877019][T10152] __netlink_dump_start+0x607/0x970 [ 365.882234][T10152] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 365.887956][T10152] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 365.894204][T10152] ? __pfx_genl_get_cmd+0x10/0x10 [ 365.899239][T10152] ? __pfx_genl_start+0x10/0x10 [ 365.904088][T10152] ? __pfx_genl_dumpit+0x10/0x10 [ 365.909028][T10152] ? __pfx_genl_done+0x10/0x10 [ 365.913798][T10152] ? bpf_lsm_capable+0x9/0x10 [ 365.918473][T10152] ? security_capable+0x7e/0x260 [ 365.923419][T10152] genl_rcv_msg+0x470/0x800 [ 365.927925][T10152] ? __pfx_genl_rcv_msg+0x10/0x10 [ 365.932952][T10152] ? __pfx_seg6_genl_dumphmac_start+0x10/0x10 [ 365.939028][T10152] ? __pfx_seg6_genl_dumphmac+0x10/0x10 [ 365.944588][T10152] ? __pfx_seg6_genl_dumphmac_done+0x10/0x10 [ 365.950597][T10152] netlink_rcv_skb+0x16b/0x440 [ 365.955373][T10152] ? __pfx_genl_rcv_msg+0x10/0x10 [ 365.960404][T10152] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 365.965715][T10152] ? down_read+0xc9/0x330 [ 365.970057][T10152] ? __pfx_down_read+0x10/0x10 [ 365.974830][T10152] ? netlink_deliver_tap+0x1ae/0xd30 [ 365.980128][T10152] genl_rcv+0x28/0x40 [ 365.984113][T10152] netlink_unicast+0x53c/0x7f0 [ 365.988894][T10152] ? __pfx_netlink_unicast+0x10/0x10 [ 365.994199][T10152] netlink_sendmsg+0x8b8/0xd70 [ 365.998982][T10152] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.004286][T10152] ____sys_sendmsg+0xaaf/0xc90 [ 366.009061][T10152] ? copy_msghdr_from_user+0x10b/0x160 [ 366.014529][T10152] ? __pfx_____sys_sendmsg+0x10/0x10 [ 366.019838][T10152] ___sys_sendmsg+0x135/0x1e0 [ 366.024521][T10152] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.029732][T10152] ? __pfx_lock_release+0x10/0x10 [ 366.034760][T10152] ? trace_lock_acquire+0x14e/0x1f0 [ 366.039983][T10152] ? __fget_files+0x206/0x3a0 [ 366.044677][T10152] __sys_sendmsg+0x16e/0x220 [ 366.049275][T10152] ? __pfx___sys_sendmsg+0x10/0x10 [ 366.054411][T10152] do_syscall_64+0xcd/0x250 [ 366.058927][T10152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.064830][T10152] RIP: 0033:0x7f054dd85d29 [ 366.069248][T10152] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.088865][T10152] RSP: 002b:00007f054ec4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.097291][T10152] RAX: ffffffffffffffda RBX: 00007f054df75fa0 RCX: 00007f054dd85d29 [ 366.105268][T10152] RDX: 0000000000000004 RSI: 0000000020000600 RDI: 0000000000000003 [ 366.113238][T10152] RBP: 00007f054ec4a090 R08: 0000000000000000 R09: 0000000000000000 [ 366.121219][T10152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.129193][T10152] R13: 0000000000000000 R14: 00007f054df75fa0 R15: 00007ffc0e629238 [ 366.137185][T10152] [ 366.146721][ T9922] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 366.154979][T10165] sd 0:0:1:0: PR command failed: 1026 [ 366.169194][T10167] sd 0:0:1:0: PR command failed: 1026 [ 366.174749][T10167] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 366.181707][T10165] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 366.200420][T10165] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 366.236547][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.246830][ T9922] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 366.256867][T10167] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 366.271215][ T9922] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 366.536112][T10177] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 366.546042][T10177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.556109][T10177] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 366.565998][T10177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.576646][T10177] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 366.587235][T10177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.597444][T10177] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan3 [ 366.607656][T10177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.621687][T10177] ipvlan2: entered allmulticast mode [ 366.627048][T10177] mac80211_hwsim hwsim31 wlan0: entered allmulticast mode [ 366.673718][T10177] batman_adv: batadv0: Adding interface: ipvlan2 [ 366.680816][T10177] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.707221][T10177] batman_adv: batadv0: Interface activated: ipvlan2 [ 366.872656][T10174] 9pnet: Could not find request transport: xen [ 367.353712][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.399680][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.491992][ T9922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.565639][ T29] audit: type=1800 audit(2000000199.121:846): pid=10186 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.858" name="bus" dev="overlay" ino=131 res=0 errno=0 [ 367.569352][ T9922] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.587202][ C0] vkms_vblank_simulate: vblank timer overrun [ 367.669974][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.677110][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.735439][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.742584][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.495475][ T5821] Bluetooth: hci7: ISO packet for unknown connection handle 0 [ 368.528185][ T9922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.578464][ T7131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.725586][T10218] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 368.736247][T10218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.746616][T10218] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 368.756802][T10218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.766857][T10218] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 368.776737][T10218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.786630][T10218] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan3 [ 368.796597][T10218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.806531][T10218] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 368.851867][T10218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.865691][T10218] ipvlan4: entered allmulticast mode [ 368.877055][T10218] batman_adv: batadv0: Adding interface: ipvlan4 [ 368.883495][T10218] batman_adv: batadv0: The MTU of interface ipvlan4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.908951][T10218] batman_adv: batadv0: Interface activated: ipvlan4 [ 369.093200][T10208] netlink: 40 bytes leftover after parsing attributes in process `syz.0.862'. [ 369.169847][ T9922] veth0_vlan: entered promiscuous mode [ 369.179572][ T9922] veth1_vlan: entered promiscuous mode [ 369.205751][ T29] audit: type=1400 audit(2000000200.761:847): avc: denied { map } for pid=10222 comm="syz.4.865" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 369.303991][ T9922] veth0_macvtap: entered promiscuous mode [ 369.312063][ T9922] veth1_macvtap: entered promiscuous mode [ 369.318913][ T8] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 369.332652][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.343480][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.353668][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.364456][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.374619][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.385160][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.395010][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.405470][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.415438][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.425900][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.435858][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.446756][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.456997][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.467875][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.478175][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.489501][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.499396][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.509941][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.519792][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.530241][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.540104][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.551001][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.562831][ T9922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.572133][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.582614][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.589313][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 369.592495][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.610995][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.620883][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.631318][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.641161][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.651950][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.662321][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.673055][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.683223][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.693681][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.703521][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.713973][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.723827][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.734401][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.744374][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.755354][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.765730][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.776541][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.786830][ T9922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.797456][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.810980][ T9922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.853088][ T9922] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.868895][ T9922] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.877598][ T9922] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.898832][ T9922] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.968314][T10242] netlink: 28 bytes leftover after parsing attributes in process `syz.0.870'. [ 369.985576][T10242] netlink: 'syz.0.870': attribute type 1 has an invalid length. [ 370.409251][T10244] CUSE: unknown device info "" [ 370.414287][T10244] CUSE: zero length info key specified [ 370.488437][ T117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.632706][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.056242][ T9922] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 371.087466][ T8] usb 3-1: device not accepting address 30, error -71 [ 372.067680][ T7131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.075879][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.085779][ T9922] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 372.095645][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.105868][ T9922] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 372.701746][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.701750][ T5893] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.753641][ T9922] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan3 [ 372.764530][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.774399][ T9922] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 372.784249][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.794092][ T9922] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan4 [ 372.803955][ T9922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.849729][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.857573][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.955793][ T29] audit: type=1400 audit(2000000204.491:848): avc: denied { map } for pid=10264 comm="syz.0.871" path="/dev/sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 373.191394][ T7131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.200194][ T29] audit: type=1400 audit(2000000204.491:849): avc: denied { execute } for pid=10264 comm="syz.0.871" path="/dev/sg0" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 373.334150][ T117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.361096][ T6908] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.378926][ T6908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.509430][ T117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 374.313611][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.389553][ T7131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.117374][T10311] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 376.127254][T10311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.137142][T10311] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 376.146971][T10311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.156915][T10311] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 376.166769][T10311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.176652][T10311] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan3 [ 376.186522][T10311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.196456][T10311] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 376.207937][T10311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.231819][T10311] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan4 [ 376.242067][T10311] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.253789][T10311] ipvlan2: entered allmulticast mode [ 376.259166][T10311] mac80211_hwsim hwsim33 wlan0: entered allmulticast mode [ 376.270491][T10311] batman_adv: batadv0: Adding interface: ipvlan2 [ 376.276880][T10311] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.302904][T10311] batman_adv: batadv0: Interface activated: ipvlan2 [ 376.926494][ T117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.025911][ T6727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.070834][T10302] netlink: 'syz.0.882': attribute type 4 has an invalid length. [ 377.348748][ T29] audit: type=1326 audit(2000000208.601:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054dd85d29 code=0x7ffc0000 [ 377.467291][ T29] audit: type=1326 audit(2000000208.601:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054dd85d29 code=0x7ffc0000 [ 377.601704][ T29] audit: type=1326 audit(2000000208.601:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f054dd85d29 code=0x7ffc0000 [ 377.678486][ T117] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 377.688626][ T29] audit: type=1326 audit(2000000208.601:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054dd85d29 code=0x7ffc0000 [ 377.742828][ T29] audit: type=1326 audit(2000000208.601:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054dd85d29 code=0x7ffc0000 [ 377.928518][ T29] audit: type=1326 audit(2000000208.601:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f054dd84690 code=0x7ffc0000 [ 377.988688][ T29] audit: type=1326 audit(2000000208.601:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054dd85d29 code=0x7ffc0000 [ 378.152358][ T29] audit: type=1326 audit(2000000208.601:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054dd85d29 code=0x7ffc0000 [ 378.406048][ T29] audit: type=1326 audit(2000000208.601:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f054dd85d29 code=0x7ffc0000 [ 378.435343][ T8] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 378.447671][ T117] usb 5-1: Using ep0 maxpacket: 16 [ 378.480236][ T7131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.503373][ T117] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.504805][ T29] audit: type=1326 audit(2000000208.601:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054dd85d29 code=0x7ffc0000 [ 378.542033][ T117] usb 5-1: config 0 interface 0 has no altsetting 0 [ 378.551510][ T117] usb 5-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 378.561467][ T117] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.598479][ T29] audit: type=1326 audit(2000000208.601:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054dd85d29 code=0x7ffc0000 [ 378.648374][ T29] audit: type=1326 audit(2000000208.601:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f054dd85d29 code=0x7ffc0000 [ 378.679627][ T117] usb 5-1: config 0 descriptor?? [ 378.685831][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.697348][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.698374][ T29] audit: type=1326 audit(2000000208.601:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054dd85d29 code=0x7ffc0000 [ 378.758382][ T29] audit: type=1326 audit(2000000208.601:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054dd85d29 code=0x7ffc0000 [ 378.808413][ T29] audit: type=1326 audit(2000000208.601:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f054dd85d29 code=0x7ffc0000 [ 378.858364][ T29] audit: type=1326 audit(2000000208.601:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.4.883" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054dd85d29 code=0x7ffc0000 [ 378.919730][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.930824][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.996360][ T8] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 379.029659][T10333] tmpfs: Bad value for 'mpol' [ 379.048321][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.087415][ T8] usb 2-1: config 0 descriptor?? [ 379.124205][T10317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.139139][ T117] hid (null): global environment stack underflow [ 379.179824][ T117] hid (null): report_id 0 is invalid [ 379.206725][T10317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.251118][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.301715][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.338320][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.355855][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.373073][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.399062][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.418321][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.436660][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.446753][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.466860][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.486485][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.510045][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.510542][ T6727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.533587][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.544390][ T8] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0 [ 379.588643][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.596083][ T8] hid-steam 0003:28DE:1142.000B: unknown main item tag 0x0 [ 379.606904][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.616030][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.623039][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.630022][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.636969][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.643941][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.650908][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.657850][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.664844][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.671823][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.678901][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.686646][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.693684][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.700986][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.708336][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.715286][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.722333][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.729317][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.736271][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.743446][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.750653][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.757591][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.765191][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.772378][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.779575][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.779854][T10320] netlink: 20 bytes leftover after parsing attributes in process `syz.1.886'. [ 379.787579][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.803615][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.811100][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.818071][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.825079][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.832314][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.839357][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.846307][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.853580][ T8] hid-steam 0003:28DE:1142.000B: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 379.865099][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.872263][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.881067][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.888571][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.895521][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.902995][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.910451][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.917401][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.924742][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.931729][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.938717][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.945673][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x1 [ 379.948191][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 379.953338][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.970432][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.977469][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 379.984488][ T117] cougar 0003:060B:500A.000A: unknown main item tag 0x4 [ 379.992535][ T117] cougar 0003:060B:500A.000A: global environment stack underflow [ 380.000727][ T117] cougar 0003:060B:500A.000A: item 0 0 1 11 parsing failed [ 380.008715][ T117] cougar 0003:060B:500A.000A: parse failed [ 380.014567][ T117] cougar 0003:060B:500A.000A: probe with driver cougar failed with error -22 [ 380.026837][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.068882][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 380.077427][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 380.124730][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 380.135523][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 380.144045][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 380.543822][ T117] usb 5-1: USB disconnect, device number 28 [ 380.574090][ T6215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.885655][ T5821] Bluetooth: hci6: Unable to find connection with handle 0xdfc0 [ 380.915879][T10363] FAULT_INJECTION: forcing a failure. [ 380.915879][T10363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.080693][T10363] CPU: 1 UID: 0 PID: 10363 Comm: syz.0.893 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 381.091412][T10363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 381.101476][T10363] Call Trace: [ 381.104754][T10363] [ 381.107686][T10363] dump_stack_lvl+0x16c/0x1f0 [ 381.112376][T10363] should_fail_ex+0x497/0x5b0 [ 381.117072][T10363] _copy_from_user+0x2e/0xd0 [ 381.121665][T10363] copy_msghdr_from_user+0x99/0x160 [ 381.126950][T10363] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 381.132773][T10363] ___sys_sendmsg+0xff/0x1e0 [ 381.137372][T10363] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.142581][T10363] ? __pfx_lock_release+0x10/0x10 [ 381.147604][T10363] ? trace_lock_acquire+0x14e/0x1f0 [ 381.152818][T10363] ? __fget_files+0x206/0x3a0 [ 381.157502][T10363] __sys_sendmsg+0x16e/0x220 [ 381.162095][T10363] ? __pfx___sys_sendmsg+0x10/0x10 [ 381.167655][T10363] do_syscall_64+0xcd/0x250 [ 381.172166][T10363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.178065][T10363] RIP: 0033:0x7f2466f85d29 [ 381.182479][T10363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.202090][T10363] RSP: 002b:00007f2467e6b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 381.210505][T10363] RAX: ffffffffffffffda RBX: 00007f2467175fa0 RCX: 00007f2466f85d29 [ 381.218482][T10363] RDX: 0000000000000010 RSI: 0000000020000e00 RDI: 0000000000000004 [ 381.226439][T10363] RBP: 00007f2467e6b090 R08: 0000000000000000 R09: 0000000000000000 [ 381.234393][T10363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.242348][T10363] R13: 0000000000000000 R14: 00007f2467175fa0 R15: 00007ffdb424b418 [ 381.250314][T10363] [ 381.449066][T10346] chnl_net:caif_netlink_parms(): no params data found [ 381.484598][ T5826] usb 2-1: USB disconnect, device number 21 [ 381.721435][ T6215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.956535][T10346] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.965815][T10346] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.973148][T10346] bridge_slave_0: entered allmulticast mode [ 381.992896][T10346] bridge_slave_0: entered promiscuous mode [ 382.011248][T10346] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.026084][T10346] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.045042][ T54] Bluetooth: hci0: command tx timeout [ 383.069951][T10346] bridge_slave_1: entered allmulticast mode [ 383.076790][T10346] bridge_slave_1: entered promiscuous mode [ 383.158932][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.167075][ T6215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.175846][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.658805][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 383.658822][ T29] audit: type=1400 audit(2000000215.212:890): avc: denied { write } for pid=10405 comm="syz.1.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 383.735165][T10399] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 383.745176][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.755048][T10399] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 383.764872][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.774724][T10399] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 383.785314][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.795723][T10399] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan3 [ 383.805566][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.815504][T10399] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 383.825325][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.835249][T10399] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan4 [ 383.845089][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.854916][T10399] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 383.864752][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.875249][T10399] ipvlan2: entered allmulticast mode [ 383.881306][T10399] mac80211_hwsim hwsim17 wlan0: entered allmulticast mode [ 383.889940][T10399] batman_adv: batadv0: Adding interface: ipvlan2 [ 383.896831][T10399] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.922162][T10399] batman_adv: batadv0: Interface activated: ipvlan2 [ 384.228213][T10411] CUSE: unknown device info "" [ 384.233181][T10411] CUSE: zero length info key specified [ 384.501921][ T7131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.667183][T10346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 384.690231][T10346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.119184][ T54] Bluetooth: hci0: command tx timeout [ 385.519591][T10423] CUSE: unknown device info "" [ 385.524690][T10423] CUSE: zero length info key specified [ 385.701613][ T6215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.218487][T10346] team0: Port device team_slave_0 added [ 386.229459][T10346] team0: Port device team_slave_1 added [ 386.263226][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.689583][T10346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.696555][T10346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.791097][ T6215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.959485][T10346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.190081][ T54] Bluetooth: hci0: command tx timeout [ 387.455211][T10346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.467917][T10346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.548047][T10346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.799193][T10346] hsr_slave_0: entered promiscuous mode [ 387.815768][T10346] hsr_slave_1: entered promiscuous mode [ 387.835224][ T6215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.848531][T10346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 387.852263][T10465] netlink: 16 bytes leftover after parsing attributes in process `syz.4.911'. [ 387.877868][T10346] Cannot create hsr debugfs directory [ 387.968116][T10464] ALSA: mixer_oss: invalid OSS volume '' [ 387.973809][T10464] ALSA: mixer_oss: invalid OSS volume '#YH~cͼ1#&~!IZz' [ 388.014339][T10464] ALSA: mixer_oss: invalid OSS volume '\UjiwIlˌ;z:8F' [ 388.117887][T10464] ALSA: mixer_oss: invalid OSS volume '$iyM,.1@P' [ 388.183401][T10464] ALSA: mixer_oss: invalid OSS volume 'Id2څD[gм]E' [ 388.192346][T10464] ALSA: mixer_oss: invalid OSS volume 'hf9\4԰ZkJO' [ 388.200216][T10464] ALSA: mixer_oss: invalid OSS volume 'l~:-7gX2W' [ 388.207895][T10464] ALSA: mixer_oss: invalid OSS volume 'JlF5p0' [ 388.214438][T10464] ALSA: mixer_oss: invalid OSS volume '}(8=3U.' [ 388.221948][T10464] ALSA: mixer_oss: invalid OSS volume 'C/bhą./صi,tQc;Z' [ 388.233414][T10464] ALSA: mixer_oss: invalid OSS volume 'FyU{Bd*' [ 388.240003][T10464] ALSA: mixer_oss: invalid OSS volume '5EIpOSn{~gi}@' [ 388.875170][ T6215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.187827][ T117] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 389.278363][ T54] Bluetooth: hci0: command tx timeout [ 389.291703][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.339759][ T117] usb 2-1: Using ep0 maxpacket: 16 [ 389.346453][ T117] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.358736][ T117] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 389.414454][ T117] usb 2-1: config 0 interface 0 has no altsetting 0 [ 389.452502][ T117] usb 2-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 389.488954][ T117] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.529278][ T117] usb 2-1: config 0 descriptor?? [ 389.905755][T10346] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 389.934155][ T6215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.958980][T10346] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 390.243051][T10346] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 390.258026][ T29] audit: type=1400 audit(2000000221.772:891): avc: denied { create } for pid=10510 comm="syz.2.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 390.292452][ T29] audit: type=1400 audit(2000000221.832:892): avc: denied { sys_admin } for pid=10510 comm="syz.2.916" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 390.487374][T10346] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 390.798837][ T29] audit: type=1400 audit(2000000221.962:893): avc: denied { listen } for pid=10513 comm="syz.4.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 391.028555][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.190681][ T29] audit: type=1400 audit(2000000221.962:894): avc: denied { accept } for pid=10513 comm="syz.4.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 391.287665][ T29] audit: type=1400 audit(2000000222.382:895): avc: denied { execmem } for pid=10513 comm="syz.4.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 391.313940][T10346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.329552][T10346] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.366613][T10346] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 391.377833][T10346] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 391.419268][ T4790] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.426342][ T4790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.492620][ T4790] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.499751][ T4790] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.653988][ T117] usbhid 2-1:0.0: can't add hid device: -71 [ 391.660081][ T117] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 391.674017][ T117] usb 2-1: USB disconnect, device number 22 [ 391.844731][T10346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.957585][ T29] audit: type=1400 audit(2000000223.512:896): avc: denied { create } for pid=10556 comm="syz.1.924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 391.965261][T10557] Invalid logical block size (768) [ 392.028801][ T29] audit: type=1400 audit(2000000223.522:897): avc: denied { ioctl } for pid=10556 comm="syz.1.924" path="socket:[31222]" dev="sockfs" ino=31222 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 392.118958][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.128668][ T117] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 392.141948][T10559] fuse: Bad value for 'fd' [ 392.346285][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.355282][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.521366][ T29] audit: type=1400 audit(2000000224.052:898): avc: denied { watch } for pid=10566 comm="syz.4.926" path="/proc/136/task" dev="proc" ino=32052 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 392.754540][ T117] usb 1-1: Invalid ep0 maxpacket: 64 [ 392.861713][T10577] cgroup: Need name or subsystem set [ 392.902300][ T117] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 393.311906][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.539246][ T117] usb 1-1: Invalid ep0 maxpacket: 64 [ 393.598333][T10346] veth0_vlan: entered promiscuous mode [ 393.635486][T10346] veth1_vlan: entered promiscuous mode [ 393.695553][ T117] usb usb1-port1: attempt power cycle [ 393.730637][T10346] veth0_macvtap: entered promiscuous mode [ 393.780428][T10346] veth1_macvtap: entered promiscuous mode [ 393.819540][T10346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 393.956829][ T1208] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 393.965177][ T54] Bluetooth: hci6: Unable to find connection with handle 0xdfc0 [ 394.493662][ T6215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.499466][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.512223][ T117] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 394.547662][ T1208] usb 2-1: Using ep0 maxpacket: 32 [ 394.552038][T10346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.555004][ T1208] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.574023][ T117] usb 1-1: Invalid ep0 maxpacket: 64 [ 394.590843][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.607584][T10346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.627749][ T1208] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.632355][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.657941][ T1208] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 394.667187][T10600] netlink: 40 bytes leftover after parsing attributes in process `syz.2.930'. [ 394.676281][ T1208] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 394.677744][T10346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.694802][ T1208] usb 2-1: Product: syz [ 394.699700][ T1208] usb 2-1: Manufacturer: syz [ 394.709296][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.719325][ T117] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 394.722965][ T1208] hub 2-1:4.0: USB hub found [ 394.730877][T10346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.847508][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.859283][T10346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.888668][ T117] usb 1-1: device descriptor read/8, error -71 [ 394.907443][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.927435][T10346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.931597][ T1208] hub 2-1:4.0: 7 ports detected [ 395.132466][T10586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.188313][ T1208] hub 2-1:4.0: insufficient power available to use all downstream ports [ 395.320718][T10586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.354898][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.427324][ T117] usb usb1-port1: unable to enumerate USB device [ 395.435251][T10346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.446216][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.458253][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.466509][T10346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.478345][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.488370][T10346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.501011][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.512880][T10346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.516587][ T6727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.523714][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.562268][T10346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.573813][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.593886][T10346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.643240][T10346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.676165][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.686265][T10346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.792264][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.867797][ T117] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 395.871094][T10346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.939377][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.949729][T10346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.960556][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.975914][T10346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.037989][ T117] usb 1-1: Using ep0 maxpacket: 16 [ 396.055108][ T117] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 396.078102][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.088407][T10346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.101424][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.111802][T10346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.121432][ T117] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 396.122359][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.177376][T10346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.305164][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.331315][T10632] CUSE: unknown device info "" [ 396.336259][T10632] CUSE: zero length info key specified [ 396.380123][ T117] usb 1-1: config 0 interface 0 has no altsetting 0 [ 396.398610][T10346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.411737][ T117] usb 1-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 396.424484][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.438098][ T117] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.446547][T10346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.490416][ T117] usb 1-1: config 0 descriptor?? [ 396.499472][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.563876][T10346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.571076][ T6727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.784653][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.810300][T10346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.833285][ T1208] hub 2-1:4.0: set hub depth failed [ 396.859012][ T1208] usb 2-1: USB disconnect, device number 23 [ 396.905251][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.947101][T10346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.975584][T10622] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 397.007835][T10622] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 397.052639][T10346] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.080259][T10346] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.114225][T10346] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.157955][T10346] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.205341][ T29] audit: type=1400 audit(2000000228.762:899): avc: denied { append } for pid=10646 comm="syz.4.937" name="001" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 397.333288][T10346] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 397.345540][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.356457][T10346] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 397.366928][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.376978][T10346] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 397.399574][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.417360][ T1208] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 397.429015][T10346] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan3 [ 397.440052][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.450102][T10346] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 397.460130][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.470271][T10346] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan4 [ 397.483332][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.496975][T10346] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 397.513355][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.527651][ T5826] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 397.537281][T10346] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 397.547098][T10346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.578430][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.586275][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.595334][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.619648][ T1208] usb 2-1: config 1 interface 0 has no altsetting 0 [ 397.647928][ T1208] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 397.657160][ T1208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.668448][ T5826] usb 5-1: device descriptor read/64, error -71 [ 397.677314][ T1208] usb 2-1: Product: syz [ 397.689294][ T1208] usb 2-1: Manufacturer: syz [ 397.699761][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.716566][ T1208] usb 2-1: SerialNumber: syz [ 397.728043][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.950896][ T5826] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 398.108325][ T5826] usb 5-1: device descriptor read/64, error -71 [ 398.155305][T10648] input: syz0 as /devices/virtual/input/input21 [ 398.232035][T10648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.247263][ T5826] usb usb5-port1: attempt power cycle [ 398.288706][T10683] netlink: 1284 bytes leftover after parsing attributes in process `syz.6.939'. [ 398.323846][T10648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.450705][T10648] Cannot find del_set index 136 as target [ 398.486229][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.666145][ T5826] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 398.731003][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.747618][ T117] usbhid 1-1:0.0: can't add hid device: -71 [ 398.753668][ T5826] usb 5-1: device descriptor read/8, error -71 [ 398.799127][ T117] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 398.855467][ T117] usb 1-1: USB disconnect, device number 28 [ 399.270309][ T29] audit: type=1326 audit(2000000230.712:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2466f85d29 code=0x7ffc0000 [ 399.565148][ T5826] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 399.611456][ T5826] usb 5-1: device descriptor read/8, error -71 [ 399.616492][ T29] audit: type=1326 audit(2000000230.722:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2466f85d29 code=0x7ffc0000 [ 399.627182][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 399.737918][ T5826] usb usb5-port1: unable to enumerate USB device [ 399.757539][ T6727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.766361][ T29] audit: type=1326 audit(2000000230.722:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2466f85d29 code=0x7ffc0000 [ 399.794273][ T29] audit: type=1326 audit(2000000230.722:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2466f85d29 code=0x7ffc0000 [ 399.837780][ T29] audit: type=1326 audit(2000000230.722:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2466f85d29 code=0x7ffc0000 [ 399.852121][T10705] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=29487 sclass=netlink_xfrm_socket pid=10705 comm=syz.0.942 [ 399.894558][ T29] audit: type=1326 audit(2000000230.732:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2466f84690 code=0x7ffc0000 [ 399.896881][ T9] usb 7-1: config 0 has an invalid interface number: 100 but max is 0 [ 399.950972][ T9] usb 7-1: config 0 has no interface number 0 [ 399.961175][ T29] audit: type=1326 audit(2000000230.732:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2466f85d29 code=0x7ffc0000 [ 399.971021][ T9] usb 7-1: config 0 interface 100 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 32 [ 400.031102][ T29] audit: type=1326 audit(2000000230.732:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2466f85d29 code=0x7ffc0000 [ 400.050359][ T9] usb 7-1: config 0 interface 100 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 400.062697][ T29] audit: type=1326 audit(2000000230.732:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10693 comm="syz.0.940" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f2466f85d29 code=0x7ffc0000 [ 400.119575][ T9] usb 7-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=3c.ad [ 400.132267][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.164406][ T9] usb 7-1: Product: syz [ 400.195400][ T9] usb 7-1: Manufacturer: syz [ 400.205232][ T1208] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 400.226616][ T9] usb 7-1: SerialNumber: syz [ 400.256846][ T9] usb 7-1: config 0 descriptor?? [ 400.272743][ T1208] usb 2-1: USB disconnect, device number 24 [ 400.299997][ T1208] usblp0: removed [ 400.300325][T10697] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 400.323806][ T9] port100 7-1:0.100: NFC: Could not find bulk-in or bulk-out endpoint [ 400.452004][T10715] Bluetooth: MGMT ver 1.23 [ 400.490549][T10726] vim2m vim2m.0: vidioc_s_fmt queue busy [ 400.656278][ T5821] Bluetooth: hci3: command 0x0c1a tx timeout [ 400.664333][ T8] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 400.671205][ T8] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 400.762045][T10697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.770654][T10697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.787345][ T6727] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 400.872151][ T5821] Bluetooth: hci1: command 0x0406 tx timeout [ 401.007271][ T6727] usb 3-1: Using ep0 maxpacket: 16 [ 401.368069][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.691255][ T117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.238798][ T117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.293252][ T6727] usb 3-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=e8.cf [ 402.302581][ T6727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.311580][ T6727] usb 3-1: Product: syz [ 402.315768][ T6727] usb 3-1: Manufacturer: syz [ 402.321832][ T6727] usb 3-1: SerialNumber: syz [ 402.346476][ T6727] usb 3-1: config 0 descriptor?? [ 402.378606][ T6727] cypress_cy7c63 3-1:0.0: Cypress CY7C63xxx device now attached [ 402.415039][ T5877] usb 7-1: USB disconnect, device number 2 [ 402.497104][ T6727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.584871][T10725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.600320][T10725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.694036][ T5877] usb 3-1: USB disconnect, device number 32 [ 402.700662][ T5877] cypress_cy7c63 3-1:0.0: Cypress CY7C63xxx device now disconnected [ 402.847355][ T1208] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 403.007632][ T1208] usb 1-1: Using ep0 maxpacket: 16 [ 403.014382][ T1208] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.087002][ T1208] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 403.116619][ T1208] usb 1-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 403.121971][T10760] FAULT_INJECTION: forcing a failure. [ 403.121971][T10760] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 403.126062][ T1208] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.157781][ T1208] usb 1-1: config 0 descriptor?? [ 403.206948][T10760] CPU: 0 UID: 0 PID: 10760 Comm: syz.6.953 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 403.217674][T10760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 403.227740][T10760] Call Trace: [ 403.231023][T10760] [ 403.233955][T10760] dump_stack_lvl+0x16c/0x1f0 [ 403.238647][T10760] should_fail_ex+0x497/0x5b0 [ 403.243344][T10760] _copy_from_user+0x2e/0xd0 [ 403.247941][T10760] copy_msghdr_from_user+0x99/0x160 [ 403.253145][T10760] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 403.258969][T10760] ___sys_sendmsg+0xff/0x1e0 [ 403.263565][T10760] ? __pfx____sys_sendmsg+0x10/0x10 [ 403.268774][T10760] ? __pfx_lock_release+0x10/0x10 [ 403.273801][T10760] ? trace_lock_acquire+0x14e/0x1f0 [ 403.279018][T10760] ? __fget_files+0x206/0x3a0 [ 403.283709][T10760] __sys_sendmsg+0x16e/0x220 [ 403.288307][T10760] ? __pfx___sys_sendmsg+0x10/0x10 [ 403.293443][T10760] do_syscall_64+0xcd/0x250 [ 403.297955][T10760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.303854][T10760] RIP: 0033:0x7ff65bd85d29 [ 403.308273][T10760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.327893][T10760] RSP: 002b:00007ff65cbd2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.336319][T10760] RAX: ffffffffffffffda RBX: 00007ff65bf75fa0 RCX: 00007ff65bd85d29 [ 403.344297][T10760] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 403.352375][T10760] RBP: 00007ff65cbd2090 R08: 0000000000000000 R09: 0000000000000000 [ 403.360353][T10760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.368329][T10760] R13: 0000000000000000 R14: 00007ff65bf75fa0 R15: 00007ffd562c2f88 [ 403.376318][T10760] [ 403.507657][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.750380][ T1208] asus 0003:0B05:17E0.000C: unknown main item tag 0x0 [ 403.768114][ T1208] asus 0003:0B05:17E0.000C: unknown main item tag 0x0 [ 403.898118][T10775] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 403.908104][T10775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.918057][T10775] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 403.927975][T10775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.937913][T10775] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 403.947891][T10775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.959980][T10775] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan3 [ 403.969996][T10775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.979996][T10775] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 404.004796][T10775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.014837][T10775] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan4 [ 404.024859][T10775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.034828][T10775] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 404.044845][T10775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.056092][T10775] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: ipvlan2 [ 404.066096][T10775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.077863][T10775] ipvlan3: entered allmulticast mode [ 404.086819][T10775] batman_adv: batadv0: Adding interface: ipvlan3 [ 404.093316][T10775] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 404.119572][T10775] batman_adv: batadv0: Interface activated: ipvlan3 [ 404.697107][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.697897][T10752] netlink: 160 bytes leftover after parsing attributes in process `syz.0.951'. [ 404.705695][ T1208] asus 0003:0B05:17E0.000C: unknown main item tag 0x0 [ 404.721385][ T1208] asus 0003:0B05:17E0.000C: unknown main item tag 0x0 [ 404.728368][ T1208] asus 0003:0B05:17E0.000C: unknown main item tag 0x0 [ 404.765186][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.153570][T10779] binder: Bad value for 'context' [ 405.172775][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 405.172809][ T29] audit: type=1400 audit(2000000236.713:942): avc: denied { remount } for pid=10769 comm="syz.6.958" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 405.500602][T10769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 405.656842][ T1208] asus 0003:0B05:17E0.000C: hidraw0: USB HID v0.05 Device [HID 0b05:17e0] on usb-dummy_hcd.0-1/input0 [ 405.667981][ T1208] asus 0003:0B05:17E0.000C: Asus input not registered [ 405.677021][ T5821] Bluetooth: hci4: command 0x0406 tx timeout [ 405.678126][ T1208] asus 0003:0B05:17E0.000C: probe with driver asus failed with error -12 [ 405.683443][ T8] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 405.700891][ T8] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 405.744654][ T1208] usb 1-1: USB disconnect, device number 29 [ 405.933741][ T6215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 405.964344][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.803743][ T6215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.821316][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.255109][ T5821] Bluetooth: hci2: command 0x0405 tx timeout [ 407.596239][T10803] ebt_limit: overflow, try lower: 570423552/2483027968 [ 407.663780][ T29] audit: type=1400 audit(2000000239.223:943): avc: denied { ioctl } for pid=10810 comm="syz.0.966" path="/dev/input/mouse0" dev="devtmpfs" ino=1024 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 407.827100][ T6215] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 407.837544][ T117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.853703][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 407.868457][T10825] FAULT_INJECTION: forcing a failure. [ 407.868457][T10825] name failslab, interval 1, probability 0, space 0, times 0 [ 407.881408][T10825] CPU: 0 UID: 0 PID: 10825 Comm: syz.2.967 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 407.892096][T10825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 407.902164][T10825] Call Trace: [ 407.905455][T10825] [ 407.908399][T10825] dump_stack_lvl+0x16c/0x1f0 [ 407.913100][T10825] should_fail_ex+0x497/0x5b0 [ 407.917803][T10825] ? fs_reclaim_acquire+0xae/0x150 [ 407.922933][T10825] should_failslab+0xc2/0x120 [ 407.927631][T10825] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 407.933461][T10825] ? __alloc_skb+0x2b1/0x380 [ 407.938080][T10825] __alloc_skb+0x2b1/0x380 [ 407.942517][T10825] ? __pfx___alloc_skb+0x10/0x10 [ 407.947475][T10825] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 407.953476][T10825] netlink_alloc_large_skb+0x69/0x130 [ 407.958867][T10825] netlink_sendmsg+0x689/0xd70 [ 407.963655][T10825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.968968][T10825] ____sys_sendmsg+0xaaf/0xc90 [ 407.973742][T10825] ? copy_msghdr_from_user+0x10b/0x160 [ 407.979197][T10825] ? __pfx_____sys_sendmsg+0x10/0x10 [ 407.984480][T10825] ___sys_sendmsg+0x135/0x1e0 [ 407.989145][T10825] ? __pfx____sys_sendmsg+0x10/0x10 [ 407.994333][T10825] ? __pfx_lock_release+0x10/0x10 [ 407.999342][T10825] ? trace_lock_acquire+0x14e/0x1f0 [ 408.004537][T10825] ? __fget_files+0x206/0x3a0 [ 408.009206][T10825] __sys_sendmsg+0x16e/0x220 [ 408.013781][T10825] ? __pfx___sys_sendmsg+0x10/0x10 [ 408.018886][T10825] do_syscall_64+0xcd/0x250 [ 408.023384][T10825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.029266][T10825] RIP: 0033:0x7f9595185d29 [ 408.033664][T10825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.053264][T10825] RSP: 002b:00007f9596050038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.061664][T10825] RAX: ffffffffffffffda RBX: 00007f9595375fa0 RCX: 00007f9595185d29 [ 408.069619][T10825] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000004 [ 408.077573][T10825] RBP: 00007f9596050090 R08: 0000000000000000 R09: 0000000000000000 [ 408.085540][T10825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.093504][T10825] R13: 0000000000000000 R14: 00007f9595375fa0 R15: 00007fff45760f28 [ 408.101471][T10825] [ 408.197127][ T6215] usb 5-1: Using ep0 maxpacket: 16 [ 408.203655][ T6215] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 408.212122][ T6215] usb 5-1: config 0 has no interface number 0 [ 408.227127][ T6215] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.246749][ T5877] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 408.255923][ T6215] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.267794][ T6215] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 408.277292][ T6215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.294374][ T6215] usb 5-1: config 0 descriptor?? [ 408.426825][ T5877] usb 7-1: Using ep0 maxpacket: 16 [ 408.434536][ T5877] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.527184][ T117] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 408.741288][ T117] usb 1-1: unable to get BOS descriptor or descriptor too short [ 408.778562][ T117] usb 1-1: not running at top speed; connect to a high speed hub [ 408.914175][ T117] usb 1-1: config 129 has an invalid interface number: 135 but max is 0 [ 409.070868][ T5877] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 409.080924][ T5877] usb 7-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 409.090842][ T5877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.100152][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.142563][ T5877] usb 7-1: config 0 descriptor?? [ 409.161441][ T117] usb 1-1: config 129 has an invalid interface number: 5 but max is 0 [ 409.194019][ T117] usb 1-1: config 129 descriptor has 1 excess byte, ignoring [ 409.215292][ T117] usb 1-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 409.226653][ T117] usb 1-1: config 129 has no interface number 0 [ 409.237893][ T117] usb 1-1: config 129 has no interface number 1 [ 409.244207][ T117] usb 1-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 409.257516][ T117] usb 1-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 409.268456][ T117] usb 1-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 409.281967][ T117] usb 1-1: config 129 interface 135 has no altsetting 0 [ 409.289346][ T117] usb 1-1: config 129 interface 5 has no altsetting 0 [ 409.373709][T10849] fuse: Bad value for 'fd' [ 409.597093][ T54] Bluetooth: hci7: command 0x0406 tx timeout [ 409.626730][ T8] Bluetooth: hci7: Opcode 0x0c1a failed: -110 [ 409.643375][ T8] Bluetooth: hci7: Error when powering off device on rfkill (-110) [ 409.657710][ T6215] uclogic 0003:28BD:0071.000D: pen parameters not found [ 409.664790][ T6215] uclogic 0003:28BD:0071.000D: interface is invalid, ignoring [ 409.886222][T10852] fuse: Bad value for 'fd' [ 410.133053][ T117] usb 1-1: string descriptor 0 read error: -22 [ 410.139553][ T117] usb 1-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 410.191587][ T1208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.199964][ T117] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.206624][ T6215] usb 5-1: USB disconnect, device number 33 [ 410.295264][ T117] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 410.340946][ T117] usb 1-1: MIDIStreaming interface descriptor not found [ 410.673209][ T117] usb 1-1: USB disconnect, device number 30 [ 410.868151][ T5826] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.617230][T10869] fuse: Bad value for 'fd' [ 411.617976][ T6727] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.630967][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.201838][ T5877] usbhid 7-1:0.0: can't add hid device: -71 [ 412.201899][ T5877] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 412.206039][T10875] overlay: Bad value for 'metacopy' [ 412.209700][ T5877] usb 7-1: USB disconnect, device number 3 [ 412.465530][T10884] netlink: 4 bytes leftover after parsing attributes in process `syz.2.979'. [ 412.477817][ T8] Bluetooth: hci8: Opcode 0x0c1a failed: -110 [ 412.477839][ T8] Bluetooth: hci8: Error when powering off device on rfkill (-110) [ 412.488876][T10887] netlink: 256 bytes leftover after parsing attributes in process `syz.6.980'. [ 412.497136][ T29] audit: type=1400 audit(2000000244.033:944): avc: denied { accept } for pid=10883 comm="syz.2.979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 412.513305][ T54] Bluetooth: hci8: command 0x0406 tx timeout [ 412.627802][ T6215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.938763][ T29] audit: type=1400 audit(2000000244.503:945): avc: denied { watch } for pid=10903 comm="syz.6.983" path="/11" dev="tmpfs" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 413.445601][ T29] audit: type=1400 audit(2000000245.003:946): avc: denied { ioctl } for pid=10927 comm="syz.4.988" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 413.571861][T10934] loop9: detected capacity change from 0 to 7 [ 413.617253][T10934] Dev loop9: unable to read RDB block 7 [ 413.622970][T10934] loop9: unable to read partition table [ 413.628887][T10934] loop9: partition table beyond EOD, truncated [ 413.635143][T10934] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 413.678105][ T7131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.780137][T10950] netlink: 256 bytes leftover after parsing attributes in process `syz.4.992'. [ 413.907338][ T117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.976086][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.985941][ T6215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 413.994763][ T117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.032340][T10964] netlink: 36 bytes leftover after parsing attributes in process `syz.1.995'. [ 414.097882][T10964] netlink: 16 bytes leftover after parsing attributes in process `syz.1.995'. [ 414.143895][T10964] netlink: 36 bytes leftover after parsing attributes in process `syz.1.995'. [ 414.170799][T10964] netlink: 36 bytes leftover after parsing attributes in process `syz.1.995'. [ 414.396536][ T6215] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 414.534186][T10980] CUSE: unknown device info "" [ 414.539124][T10980] CUSE: zero length info key specified [ 414.545604][ T29] audit: type=1400 audit(2000000246.053:947): avc: denied { append } for pid=10978 comm="syz.0.998" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 414.568555][ C1] vkms_vblank_simulate: vblank timer overrun [ 414.620754][ T6215] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 414.645308][ T6215] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.707171][ T7131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 414.760357][ T6215] usb 7-1: Product: syz [ 414.787692][ T6215] usb 7-1: Manufacturer: syz [ 414.792983][ T6215] usb 7-1: SerialNumber: syz [ 415.015511][ T6215] usb 7-1: config 0 descriptor?? [ 415.426566][ T5821] Bluetooth: hci1: command 0x0406 tx timeout [ 415.432701][ T8] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 415.438850][ T8] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 415.688639][ T6215] usb 7-1: USB disconnect, device number 4 [ 415.696540][T11005] loop9: detected capacity change from 0 to 7 [ 415.747463][ T7131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.767462][T11005] Dev loop9: unable to read RDB block 7 [ 415.773099][T11005] loop9: unable to read partition table [ 415.779540][T11005] loop9: partition table beyond EOD, truncated [ 415.785776][T11005] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 415.807131][T11009] binder: 11008:11009 ioctl c0306201 0 returned -14 [ 415.932304][T11015] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1006'. [ 415.968889][T11012] binder: 11008:11012 ioctl c0306201 20000480 returned -14 [ 415.993606][T11012] 9pnet: p9_errstr2errno: server reported unknown error @binder0 [ 416.668900][T11036] fuse: Bad value for 'fd' [ 416.935538][T11035] openvswitch: netlink: Flow key attr not present in new flow. [ 416.954518][ T7131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.955834][ T29] audit: type=1400 audit(2000000248.513:948): avc: denied { watch_mount } for pid=11034 comm="syz.4.1010" path="/53" dev="tmpfs" ino=308 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 417.049793][T11040] 9pnet_fd: Insufficient options for proto=fd [ 417.252080][T11046] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1013'. [ 417.511362][ T8] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 417.535361][ T8] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 417.578979][ T5821] Bluetooth: hci2: command 0x0405 tx timeout [ 417.911847][ T7131] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 417.987288][ T6215] net_ratelimit: 1 callbacks suppressed [ 417.987302][ T6215] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.154607][ T7131] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 418.163580][ T7131] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.174827][ T7131] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 418.195644][ T7131] usb 5-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 418.216338][ T5877] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 418.235787][ T7131] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 418.255130][ T7131] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.287678][ T7131] usb 5-1: Product: syz [ 418.292278][ T7131] usb 5-1: Manufacturer: syz [ 418.307236][ T5826] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 418.315980][ T7131] usb 5-1: SerialNumber: syz [ 418.336355][ T7131] cdc_mbim 5-1:1.0: skipping garbage [ 418.348090][ T7131] cdc_mbim 5-1:1.0: skipping garbage [ 418.366253][ T7131] cdc_mbim 5-1:1.0: MBIM functional descriptor missing [ 418.396677][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 418.407827][ T5877] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 418.418067][ T7131] cdc_mbim 5-1:1.0: bind() failure [ 418.441836][ T7131] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 418.450794][ T5877] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 418.474495][ T7131] cdc_ncm 5-1:1.1: bind() failure [ 418.482297][ T5877] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 418.496442][ T5826] usb 1-1: Using ep0 maxpacket: 8 [ 418.507982][ T5877] usb 3-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 418.511093][ T5826] usb 1-1: unable to get BOS descriptor or descriptor too short [ 418.526144][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.529133][ T5826] usb 1-1: config 4 interface 0 has no altsetting 0 [ 418.546504][ T30] INFO: task syz.9.556:8378 blocked for more than 143 seconds. [ 418.551111][ T5877] usb 3-1: Product: syz [ 418.560352][ T30] Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 418.576274][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 418.584990][ T30] task:syz.9.556 state:D stack:28592 pid:8378 tgid:8376 ppid:7774 flags:0x00004004 [ 418.588547][ T7131] usb 5-1: USB disconnect, device number 34 [ 418.611361][ T30] Call Trace: [ 418.614671][ T30] [ 418.617675][ T30] __schedule+0xe58/0x5ad0 [ 418.622127][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 418.627447][ T30] ? __pfx___schedule+0x10/0x10 [ 418.627659][ T5877] usb 3-1: Manufacturer: syz [ 418.632314][ T30] ? schedule+0x298/0x350 [ 418.641290][ T30] ? __pfx_lock_release+0x10/0x10 [ 418.646399][ T30] ? lock_acquire+0x2f/0xb0 [ 418.650927][ T30] ? schedule+0x1fd/0x350 [ 418.655277][ T30] schedule+0xe7/0x350 [ 418.658544][ T5877] usb 3-1: SerialNumber: syz [ 418.659415][ T30] super_lock+0x2bb/0x3f0 [ 418.668311][ T30] ? __pfx_super_lock+0x10/0x10 [ 418.672275][ T5877] usb 3-1: config 0 descriptor?? [ 418.673185][ T30] ? __pfx_var_wake_function+0x10/0x10 [ 418.683168][ T5877] ums-isd200 3-1:0.0: USB Mass Storage device detected [ 418.683707][ T30] ? lock_acquire+0x2f/0xb0 [ 418.695270][ T30] ? iterate_supers+0x11d/0x240 [ 418.700348][ T30] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 418.705922][ T30] iterate_supers+0xb9/0x240 [ 418.710742][ T30] ksys_sync+0x8a/0x150 [ 418.714910][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 418.719708][ T30] ? do_user_addr_fault+0x83d/0x13f0 [ 418.725006][ T30] ? do_syscall_64+0x91/0x250 [ 418.729762][ T30] __do_sys_sync+0xe/0x20 [ 418.734105][ T30] do_syscall_64+0xcd/0x250 [ 418.738818][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.744730][ T30] RIP: 0033:0x7f6e07785d29 [ 418.749206][ T30] RSP: 002b:00007f6e085de038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 418.757657][ T30] RAX: ffffffffffffffda RBX: 00007f6e07975fa0 RCX: 00007f6e07785d29 [ 418.765635][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 418.773650][ T30] RBP: 00007f6e07975fa0 R08: 0000000000000000 R09: 0000000000000000 [ 418.781666][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.789691][ T30] R13: 0000000000000001 R14: 00007f6e07975fa0 R15: 00007ffc45504f58 [ 418.797877][ T30] [ 418.801064][ T30] INFO: task syz.3.565:8447 blocked for more than 143 seconds. [ 418.808741][ T30] Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 418.816422][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 418.825095][ T30] task:syz.3.565 state:D stack:27648 pid:8447 tgid:8446 ppid:7848 flags:0x00404004 [ 418.835345][ T30] Call Trace: [ 418.838691][ T30] [ 418.841637][ T30] __schedule+0xe58/0x5ad0 [ 418.846131][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 418.851349][ T30] ? __pfx___schedule+0x10/0x10 [ 418.856289][ T30] ? schedule+0x298/0x350 [ 418.860644][ T30] ? __pfx_lock_release+0x10/0x10 [ 418.865698][ T30] ? lock_acquire+0x2f/0xb0 [ 418.870308][ T30] ? schedule+0x1fd/0x350 [ 418.874657][ T30] schedule+0xe7/0x350 [ 418.878796][ T30] super_lock+0x2bb/0x3f0 [ 418.883142][ T30] ? __pfx_super_lock+0x10/0x10 [ 418.888074][ T30] ? __pfx_var_wake_function+0x10/0x10 [ 418.893552][ T30] ? lock_acquire+0x2f/0xb0 [ 418.898139][ T30] ? iterate_supers+0x11d/0x240 [ 418.903026][ T30] ? __pfx_quota_sync_one+0x10/0x10 [ 418.908415][ T30] iterate_supers+0xb9/0x240 [ 418.913028][ T30] __x64_sys_quotactl+0x2b5/0x440 [ 418.918642][ T30] ? __pfx___x64_sys_quotactl+0x10/0x10 [ 418.924232][ T30] do_syscall_64+0xcd/0x250 [ 418.928820][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.930625][T11100] kvm: kvm [11099]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x86 [ 418.934718][ T30] RIP: 0033:0x7f293b185d29 [ 418.934740][ T30] RSP: 002b:00007f293c029038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 418.934765][ T30] RAX: ffffffffffffffda RBX: 00007f293b375fa0 RCX: 00007f293b185d29 [ 418.934779][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000102 [ 418.934791][ T30] RBP: 00007f293b201b08 R08: 0000000000000000 R09: 0000000000000000 [ 418.934803][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.934815][ T30] R13: 0000000000000000 R14: 00007f293b375fa0 R15: 00007ffd6fbb57f8 [ 418.934837][ T30] [ 418.934895][ T30] [ 418.934895][ T30] Showing all locks held in the system: [ 418.966524][T11100] kvm: kvm [11099]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xe8 [ 418.972554][ T30] 4 locks held by kworker/0:0/8: [ 419.021349][ T30] #0: ffff88801b078948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 419.026846][ T7131] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.032153][ T30] #1: ffffc900000d7d80 ((rfkill_op_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 419.050827][ T30] #2: ffffffff9036d008 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_epo+0x55/0x1d0 [ 419.060531][ T30] #3: ffff8880292d8d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_rfkill_set_block+0x1a7/0x360 [ 419.071703][ T30] 1 lock held by khungtaskd/30: [ 419.076594][ T30] #0: ffffffff8e1bb900 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 419.086544][ T30] 2 locks held by getty/5586: [ 419.091222][ T30] #0: ffff888036b000a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 419.101051][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 419.111471][ T30] 3 locks held by kworker/0:3/5826: [ 419.111690][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 419.116841][ T30] 3 locks held by kworker/0:6/5865: [ 419.129985][ T30] #0: ffff88801b078948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 419.140486][ T30] #1: ffffc9000390fd80 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 419.153424][ T30] #2: ffffffff9036d008 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x1b/0x160 [ 419.164913][ T30] 6 locks held by kworker/1:4/5877: [ 419.170134][ T30] #0: ffff888020ec3148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 419.180996][ T30] #1: ffffc90003a7fd80 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 419.193963][ T30] #2: ffff88802927f190 (&dev->mutex){....}-{4:4}, at: hub_event+0x1c1/0x4e10 [ 419.203445][ T30] #3: ffff8880335ea190 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7f/0x4b0 [ 419.212874][ T30] #4: ffff88806234c160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7f/0x4b0 [ 419.222287][ T30] #5: ffffffff9042dc08 (uevent_sock_mutex){+.+.}-{4:4}, at: kobject_uevent_env+0xb35/0x1870 [ 419.232645][ T30] 1 lock held by syz.2.170/6553: [ 419.237607][ T30] #0: ffff888061faa0e0 (&type->s_umount_key#70/1){+.+.}-{4:4}, at: alloc_super+0x23d/0xbd0 [ 419.247818][ T30] 2 locks held by syz.1.1019/11077: [ 419.253021][ T30] #0: ffff8880344ac408 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: __sock_release+0x86/0x270 [ 419.263650][ T30] #1: ffffffff8e1c7238 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x282/0x3b0 [ 419.273808][ T30] [ 419.276163][ T30] ============================================= [ 419.276163][ T30] [ 419.284575][ T30] NMI backtrace for cpu 0 [ 419.288896][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 419.299406][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 419.309446][ T30] Call Trace: [ 419.312711][ T30] [ 419.315625][ T30] dump_stack_lvl+0x116/0x1f0 [ 419.320312][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 419.325264][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 419.331244][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 419.337221][ T30] watchdog+0xf14/0x1240 [ 419.341457][ T30] ? __pfx_watchdog+0x10/0x10 [ 419.346126][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 419.351317][ T30] ? __kthread_parkme+0x148/0x220 [ 419.356332][ T30] ? __pfx_watchdog+0x10/0x10 [ 419.360998][ T30] kthread+0x2c1/0x3a0 [ 419.365054][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 419.370248][ T30] ? __pfx_kthread+0x10/0x10 [ 419.374829][ T30] ret_from_fork+0x45/0x80 [ 419.379229][ T30] ? __pfx_kthread+0x10/0x10 [ 419.383809][ T30] ret_from_fork_asm+0x1a/0x30 [ 419.388575][ T30] [ 419.391938][ T30] Sending NMI from CPU 0 to CPUs 1: [ 419.397333][ C1] NMI backtrace for cpu 1 [ 419.397343][ C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 419.397360][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 419.397369][ C1] RIP: 0010:__kasan_check_read+0xa/0x20 [ 419.397390][ C1] Code: c7 c7 90 88 7c 8d 5b 5d 41 5c e9 01 85 7c ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 0c 24 89 f6 <31> d2 e9 1f f1 ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 [ 419.397404][ C1] RSP: 0018:ffffc900001e7a78 EFLAGS: 00000007 [ 419.397418][ C1] RAX: 0000000000000003 RBX: 00000000000000ea RCX: ffffffff8175e32e [ 419.397428][ C1] RDX: 1ffff11003add160 RSI: 0000000000000008 RDI: ffffffff96e53cd8 [ 419.397437][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: fffffbfff2dca79b [ 419.397446][ C1] R10: ffffffff96e53cdf R11: 0000000000000000 R12: 0000000000000000 [ 419.397456][ C1] R13: ffff88801d6e8000 R14: 00000000000000ea R15: ffff88801d6e8ae0 [ 419.397466][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 419.397482][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 419.397492][ C1] CR2: 0000560012e2f300 CR3: 000000000df7e000 CR4: 00000000003526f0 [ 419.397502][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 419.397511][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 419.397520][ C1] Call Trace: [ 419.397525][ C1] [ 419.397532][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 419.397549][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 419.397564][ C1] ? nmi_handle+0x1ac/0x5d0 [ 419.397580][ C1] ? __kasan_check_read+0xa/0x20 [ 419.397594][ C1] ? default_do_nmi+0x6a/0x160 [ 419.397610][ C1] ? exc_nmi+0x170/0x1e0 [ 419.397623][ C1] ? end_repeat_nmi+0xf/0x53 [ 419.397645][ C1] ? hlock_class+0x4e/0x130 [ 419.397665][ C1] ? __kasan_check_read+0xa/0x20 [ 419.397679][ C1] ? __kasan_check_read+0xa/0x20 [ 419.397694][ C1] ? __kasan_check_read+0xa/0x20 [ 419.397707][ C1] [ 419.397712][ C1] [ 419.397717][ C1] hlock_class+0x4e/0x130 [ 419.397740][ C1] __lock_acquire+0x44d/0x3c40 [ 419.397759][ C1] ? debug_object_deactivate+0x1ef/0x370 [ 419.397776][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 419.397794][ C1] lock_acquire.part.0+0x11b/0x380 [ 419.397809][ C1] ? rcu_core+0x741/0x14d0 [ 419.397828][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 419.397844][ C1] ? rcu_is_watching+0x12/0xc0 [ 419.397863][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 419.397882][ C1] ? rcu_core+0x741/0x14d0 [ 419.397900][ C1] ? lock_acquire+0x2f/0xb0 [ 419.397914][ C1] ? rcu_core+0x741/0x14d0 [ 419.397932][ C1] rcu_core+0x755/0x14d0 [ 419.397949][ C1] ? rcu_core+0x741/0x14d0 [ 419.397969][ C1] ? __pfx_rcu_core+0x10/0x10 [ 419.397990][ C1] handle_softirqs+0x213/0x8f0 [ 419.398009][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 419.398026][ C1] ? rcu_is_watching+0x12/0xc0 [ 419.398045][ C1] ? __pfx_run_ksoftirqd+0x10/0x10 [ 419.398061][ C1] ? smpboot_thread_fn+0x59d/0xa30 [ 419.398079][ C1] run_ksoftirqd+0x3a/0x60 [ 419.398095][ C1] smpboot_thread_fn+0x661/0xa30 [ 419.398112][ C1] ? __kthread_parkme+0x148/0x220 [ 419.398131][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 419.398150][ C1] kthread+0x2c1/0x3a0 [ 419.398166][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 419.398182][ C1] ? __pfx_kthread+0x10/0x10 [ 419.398200][ C1] ret_from_fork+0x45/0x80 [ 419.398214][ C1] ? __pfx_kthread+0x10/0x10 [ 419.398231][ C1] ret_from_fork_asm+0x1a/0x30 [ 419.398255][ C1] [ 419.398333][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 419.750995][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 419.761479][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 419.771518][ T30] Call Trace: [ 419.774779][ T30] [ 419.777694][ T30] dump_stack_lvl+0x3d/0x1f0 [ 419.782283][ T30] panic+0x71d/0x800 [ 419.786161][ T30] ? __pfx_panic+0x10/0x10 [ 419.790567][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 419.795923][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 419.801884][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 419.807239][ T30] ? watchdog+0xd7e/0x1240 [ 419.811639][ T30] ? watchdog+0xd71/0x1240 [ 419.816045][ T30] watchdog+0xd8f/0x1240 [ 419.820278][ T30] ? __pfx_watchdog+0x10/0x10 [ 419.824949][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 419.830139][ T30] ? __kthread_parkme+0x148/0x220 [ 419.835154][ T30] ? __pfx_watchdog+0x10/0x10 [ 419.839832][ T30] kthread+0x2c1/0x3a0 [ 419.843889][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 419.849071][ T30] ? __pfx_kthread+0x10/0x10 [ 419.853651][ T30] ret_from_fork+0x45/0x80 [ 419.858051][ T30] ? __pfx_kthread+0x10/0x10 [ 419.862631][ T30] ret_from_fork_asm+0x1a/0x30 [ 419.867393][ T30] [ 419.870610][ T30] Kernel Offset: disabled [ 419.874909][ T30] Rebooting in 86400 seconds..