last executing test programs: 35m14.865573466s ago: executing program 32 (id=1024): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xffffffffffffffff) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) recvmmsg(r1, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x12023, 0x0) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0], 0x0) syz_usb_connect$printer(0x6, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x100, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6a, 0x70, 0x7f, [{{0x9, 0x4, 0x0, 0x3, 0x0, 0x7, 0x1, 0x2, 0xff, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x4, 0x10, 0x40}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x4, 0x3, 0x9, 0x10, 0x9}, 0x40, &(0x7f0000000140)={0x5, 0xf, 0x40, 0x6, [@ext_cap={0x7, 0x10, 0x2, 0x4, 0x4, 0x3, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x13, 0x7, 0x4, 0x6, 0xaa}, @wireless={0xb, 0x10, 0x1, 0xc, 0x90, 0x4, 0x80, 0x9, 0x10}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0xd, 0xb, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x9, 0x2, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0xc1, 0x2, 0x87}]}, 0x2, [{0x79, &(0x7f0000000180)=@string={0x79, 0x3, "65077740ac01a035d99e3eea2d13c388aa584b01307da6eca30878c0ebd66353e80099342c0d9ab06a277aa5e926916b65682b4f08dbb932627fc7c4bc91fb46df31187aa815f0f248075bf5ddfc674c69b0df57eab313a57beaf34fcc4d4304091e632a154333ba0ade57998adcca3a8dd4ee7b337e39"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x240a}}]}) io_uring_enter(r0, 0x5bd5, 0x6e8f, 0x1, &(0x7f0000000080)={[0x3]}, 0x8) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000087d1eed2c000000000001090224000100000000090400000103000000092100000001220500090581030000000040"], 0x0) mkdirat(r0, &(0x7f0000000000)='./file0\x00', 0x101) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000300)={0x4008, 0x40, 0x1, 0x4, 0x872, 0x10000}) syz_usb_control_io$hid(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000780)={0x24, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0022050000009b7ad953d0cb62583aa7c2bbf2cac637220b6dd8f4ba47a4e093df41de1c5d90961de7e5f57d357412c219daf3e193bac922180dfedc6b058091b3cf658dc1024cce7029f6dd7c3901e65c907653257060a22d2f2c6bba49ecf1f9f13c7cec375d7465dfc9ac2a2c9f702cb0b1d14f5caf5114193197116579041445b4254f9faa60391a15e15b6cbc21c769b39990b5a153296d0c8bccb4f205"], 0x0}, 0x0) 35m14.636485141s ago: executing program 33 (id=1018): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000600)="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", 0x163}, {&(0x7f0000003bc0)="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", 0xde7}], 0x2}, 0x9cdc2384056b48b8) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002640), 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0xe}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='signal_generate\x00', r4}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB='Q?'], 0x0) 29m51.220899469s ago: executing program 34 (id=1934): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) preadv2(r1, &(0x7f0000002500)=[{&(0x7f0000001580)=""/193, 0xc1}], 0x1, 0x80ffff, 0x0, 0x1c) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000007a0000007a000000030000000a00000000000007000000000600000000000008030000000d0000000500000f0200000002000000010100000000000004000000f300000001010000050000000700000003000001010000000700000000000080040000000000010008000000a7fd050059effb47204ed3f9c02e3e8cbf6300000000000b00000000030000000000000a020000000000006100"], &(0x7f0000000300), 0x97, 0x0, 0x0, 0x80000000, 0x0, @void, @value}, 0x28) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000440)={0xffffffffffffffff}, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) rename(0x0, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="120000000c0000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000180), &(0x7f0000000300)=r4}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x34, 0xfffffffffffffffa) add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) 29m18.579778347s ago: executing program 35 (id=2024): openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r2, r2, r2) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000001300)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r4, 0x84, 0x15, 0x0, 0x0) setfsuid(0x0) r5 = dup(r0) mmap(&(0x7f0000731000/0x4000)=nil, 0x4000, 0x1000002, 0x2c011, r5, 0x23af3000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) landlock_create_ruleset(&(0x7f0000000040)={0x13, 0x3, 0x1}, 0x18, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x801, 0x2000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}]}}}]}, 0x3c}}, 0x0) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@my=0x0}) r8 = socket(0x10, 0x80003, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800000016000119"], 0x78}, 0x1, 0x0, 0x0, 0x44010}, 0xc0) recvmmsg(r8, &(0x7f0000001140)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r9 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x0, 0x13100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r9, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r7, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1, 0x80000000}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r7, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x67) 28m57.401793988s ago: executing program 36 (id=2079): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x2c58, 0x0, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r4, 0x0) ioctl$BLKRRPART(r4, 0x125f, 0x0) (async) ioctl$BLKRRPART(r4, 0x125f, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f00000001c0)={0x87, 0x3, 0x7ff, "7bbf49dd95135f5a52acd339523692041489c4d6d80e280b01a2988ebbb27ed22db8dca77e9b48212b1f0c9710bbb5c25878caf6798631eca84c7af5e2ac206ad8ba9ce3bdba4e04ebdc63868b39e927fcc0f49aead00a592f05623b02f555920bcb7e4a912c5f8bd933699ca33bce872dcfccd33f424652937323e80f40355fa8be5aeb9d1607"}) (async) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) (async) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 25m50.203552656s ago: executing program 37 (id=2663): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r0], 0x1c94}, 0x1, 0x0, 0x0, 0x10}, 0x0) 25m50.123779851s ago: executing program 38 (id=2625): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket(0x1a, 0xa, 0x2) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) splice(r6, 0x0, r7, 0x0, 0x10500, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001b80)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, {0xfff3, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_bpf={{0x8}, {0x50, 0x2, [@TCA_BPF_OPS={{0x6}, {0x4}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7, 0x2000000b, 0x5, 0xb, 0x8, {0x9, 0x0, 0x8, 0x4, 0xa, 0xc}, {0x7f, 0x0, 0x10, 0xf3f, 0x2}, 0x5, 0x5, 0xffffffff}}]}]}}]}, 0x7c}}, 0x20000000) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000200)={r5, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x7}}, 0x10) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000080)={0x5}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f4, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) r9 = socket(0x2b, 0x80801, 0x1) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x8, 0x1, @empty}, 0x1c) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r9, 0x29, 0x41, 0x0, 0x78) r10 = socket$igmp6(0xa, 0x3, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_int(r11, &(0x7f00000000c0)='blkio.throttle.read_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000200)=ANY=[], 0x31) r13 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x40c0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r9, 0x84, 0x74, &(0x7f0000000140)=""/66, &(0x7f00000001c0)=0x42) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/syz1\x00', 0x1ff) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r13, 0x54a3) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) socket$nl_netfilter(0x10, 0x3, 0xc) 25m40.887627461s ago: executing program 39 (id=2652): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000000)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@ifindex, r2, 0x36, 0x0, 0x0, @void, @value}, 0x20) ioctl$BLKRRPART(r1, 0x125f, 0x0) 23m29.290025271s ago: executing program 40 (id=2999): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x1a3c40, 0x0) r2 = dup(r1) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x400, 0x0) ioctl$SNDCTL_MIDI_INFO(r3, 0xc074510c, &(0x7f0000000280)={"4b2c029dad154f5e56c6a710ef3fad810cfc0482035057db0d2b5f2a0023", 0x1, 0x7547, 0x40, [0x6, 0xfffffffa, 0xd3c, 0x2, 0x8, 0x9, 0x9, 0x4, 0xb8, 0x6, 0x36bc, 0x1, 0xa, 0x4, 0x7, 0x0, 0x8, 0xfffff06e]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, r2, 0x0) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000040)=0x37) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) syz_emit_ethernet(0xb0, &(0x7f00000003c0)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x7a, 0x2f, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, [], "9613f1304bb6323f0de1373516f7040d410cd837773f72c5d38b6872cf09a0f1fa1ca7ac63931507edf7ba97955b0def8a146c3f9c40"}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1}}}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x1c3802, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x7101}) socket$isdn(0x22, 0x3, 0x25) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) fallocate(r8, 0x0, 0x0, 0x10fff9) unshare(0x2040400) r9 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_SUBMITURB(r9, 0x802c550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lseek(r8, 0x0, 0x3) syz_usb_connect(0x3, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b02810000000009040000018ea4430009058591f759d56211bc10ebb46df09d8c8a1c68a1ac3f4e41f8ef6c6221d8f0091d4a8bc1ba554755aa0a56"], 0x0) 19m23.013506849s ago: executing program 41 (id=3711): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, 0x0, 0x0) 18m29.738543689s ago: executing program 42 (id=3797): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="780000000002010400000900000000000a0000003c0003800c00028005000100000000002c00018014000300fe80000000000000000000000000040000000000000000000000000000000000240002801400018008000100ffffffff08000200640101010c000280050001000000000004000180"], 0x78}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326600080079000f300f0f1c9a65660ff3b20618baa000ec66b9670200000f320f285473f6132e660f3880833fc80f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x4f}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5, 0x12, r5, 0x4c054000) syz_open_dev$vbi(&(0x7f0000001ec0), 0x0, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1e, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r7, 0x5, 0x0, 0x0, {{0x2c}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) 16m47.287533052s ago: executing program 43 (id=4044): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f000048c000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3aaea000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000f7ff0000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file2\x00', 0x67) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x346}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r5 = mmap$IORING_OFF_SQES(&(0x7f0000950000/0x4000)=nil, 0x4000, 0x200000b, 0x4010, 0xffffffffffffffff, 0x10000000) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r5, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x20, 0x0, 0x0, 0x3, &(0x7f0000000240)={r6, r7+10000000}, 0x1, 0x0, 0x1, {0x0, r8}}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r10 = dup(r9) write$FUSE_BMAP(r10, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r10, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r10, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r10, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x29, 0x1, 0x122008, 0x6, 0x800, 0x1, 0xfffffff7, 0x0, 0x0, 0x10, 0xe}}, 0x50) 13m50.745848838s ago: executing program 44 (id=4502): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='timers\x00') preadv(r0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/50, 0x32}], 0x1, 0xfffffff9, 0x9) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000140)={0x2, 0x6, 0x9, 0x6, 0x1a, "c2333a6179f13abe1698e2e7499a3127928f18"}) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000045c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r2, 0xc6f33000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0x1, @win={{0x6, 0x2, 0x9, 0x8133}, 0x6, 0x7f, &(0x7f00000001c0)={{0x1ff, 0x5, 0x0, 0x5}}, 0x8, &(0x7f0000000400)="b5f66462434b97913698d33a8d90112272183d035d353be29dab26df608222d17687ac2cf5f451deff174a081282e06ba8c98d04b2527a74b06e105c0efd0775392626031d498ddb93b4199efb49f44409a7052bc147fdd1108ce7a9703421ab3a7b91798d179cc5e22250ccd253b1145ab35b51d2387384022eb54a60725e84c155488ae7bcd2a427d1d7ba4481985aba7ceca47e28396f503ced26fb4a3dd1c5bdab5854ffcb6aa2d50453d7d0794e0e1a65f55bde5079d8ca119491671141e91ea1c62bd804921d8a34ad006dea21e29066186e4aa3b1c8d075ecf38a", 0x1}}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000380)={0x401, 0x1, 0x0, "eee98fa706178749cb4dfd93e33c9b6b7bd152f35ed734fc70157dcb4f1891e2"}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) keyctl$reject(0x13, 0x0, 0x8c1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4010, r3}, 0x18) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0xd0}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}}, 0x0) 12m40.746082962s ago: executing program 45 (id=4716): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x402, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r1, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000180)=0x3f) 9m4.012650883s ago: executing program 46 (id=5303): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x0, 0xfff0}, 'syz1\x00', 0xd}) (async) ioctl$UI_DEV_CREATE(r2, 0x5501) (async) write$input_event(r1, &(0x7f0000000000)={{0x77359400}, 0x4}, 0x18) ioctl$BLKRRPART(r1, 0x125f, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) ioctl$BLKRRPART(r1, 0x125f, 0x0) 8m39.323063415s ago: executing program 8 (id=5398): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) getpid() ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f00000000c0)={'macvlan1\x00', 0xff}) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff, 0x48b03) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000000)={0x3, 0x9a090a, 0x1}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x3, 0x9a0001}) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff0414"], 0x528}}, 0xc000) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r1, 0x4020565b, &(0x7f00000001c0)={0x4, 0x7ff, 0x2}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x20, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x4, 0x0, 0x300, 0x20}}, 0x20}}, 0x0) 8m38.847750351s ago: executing program 8 (id=5400): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x4, 0x88900) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1200000008000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRESHEX], 0x118) write$proc_mixer(r4, &(0x7f0000000480)=[{'BASS', @val={' \'', 'Mic'}}, {'PCM', @void}, {'MONITOR', @val={' \'', 'Capture Switch'}}, {'PCM', @void}], 0x56) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) process_vm_writev(0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@gettfilter={0x4c, 0x2e, 0x200, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x3, 0xa}, {0xe, 0x3}, {0x10, 0xfff2}}, [{0x8, 0xb, 0xfffffffd}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xd0f}, {0x8, 0xb, 0x40}, {0x8, 0xb, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10044000}, 0x40080) write$P9_RWALK(r5, &(0x7f0000000440)={0x16, 0x6f, 0x1, {0x1, [{0x8, 0x3, 0x2}]}}, 0x16) 8m37.836189694s ago: executing program 8 (id=5405): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, 0x0, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x6bc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x11002, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @value}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={0xffffffffffffffff, r5}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b40)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x596b, 0x8f, &(0x7f0000000540)=""/143, 0x40f00, 0x28, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x0, 0x10, 0x101, 0x1}, 0x10, 0x1fa28, 0xffffffffffffffff, 0x1, &(0x7f0000000300)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, r5, r5, 0xffffffffffffffff, r5, 0xffffffffffffffff], &(0x7f0000000900)=[{0x2, 0x4, 0x1, 0x9}], 0x10, 0xe, @void, @value}, 0x94) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/1) 8m36.832422645s ago: executing program 8 (id=5406): socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x80102, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x40000) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b4cd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) inotify_init1(0x800) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x2c, 0x1, 0xfffffffa, 0x0, "", [@generic="06"]}, 0x14}], 0x1}, 0x0) getxattr(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r6, &(0x7f0000004e80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="3001000000000000", @ANYRES64=r7, @ANYBLOB='\a\x00\x00\x00\x00\x00 '], 0x130) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$swradio(&(0x7f00000000c0), 0x1, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x54, r9, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0) 8m35.628946707s ago: executing program 8 (id=5410): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000003100)=@newtaction={0x2c0, 0x30, 0x800, 0x70b52d, 0x25dfdbff, {}, [{0x2ac, 0x1, [@m_gact={0x54, 0x3, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0xc, 0x3, {0x0, 0xc8a}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x254b, 0x3}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0x517, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_nat={0x254, 0x4, 0x0, 0x0, {{0x8}, {0x144, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x1000, 0x3ff, 0x20000000, 0x5, 0x9f0}, @multicast2, @multicast2, 0xdaea4271aefa1414, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x4, 0xffffffffffffffff, 0x1, 0x8001}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x41}, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x4ec, 0x0, 0x7, 0x4}, @empty, @local, 0xffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x8, 0x10, 0x6, 0x5, 0x10}, @multicast1, @private=0xa010101, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x8, 0x6, 0x3, 0x6314}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x7, 0xffffffffffffffff, 0x811, 0x6}, @broadcast, @loopback, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1000, 0x0, 0x1, 0x3, 0xbc60}, @local, @broadcast, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x7, 0x42, 0x10000000, 0x7ff, 0x4}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0xff000000, 0x1}}]}, {0xea, 0x6, "84442914a600de9345a662a2b73c7215af959e41e1a6989a7cc69491d0ad3656ba5caa43b89d07949d4e6bea09ae1f67c3d5a23340df82efcd396ddaf51f00bb835bf10d53499ccc5d7719d6fdbe1da6c0b05af1c526dc52fd281d591f6563b5b9e609a282b492b867c37a9e59a1aedfb2e4cf49e5658ea6f8d7a7d184166f7fb8d8237a49136d330dc40cfc54d63b62ca4fc852da84436a129f8730b78bf648631a66e9aa3b8b889fa511d58182577518658e39813dd6c7e2a6326f0a6314a20547342ff5293bd29c54758fee1f9c47eaecee9d1534865de4233e9b9642b80cfcb26cad45c6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x2c0}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xa6ff}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 8m35.400620921s ago: executing program 8 (id=5414): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000440)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x80800, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x3}}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x4}}, {@allow_other}, {@default_permissions}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1a00}}, {@blksize={'blksize', 0x3d, 0x800}}], [{@dont_appraise}, {@euid_eq}]}}) userfaultfd(0x801) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='ufs\x00', 0x18642, 0x0) (fail_nth: 10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)=@rc={0x1f, @any, 0x2}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="0bc2a715c4db66f6bf13813dc43910f57f643d2eccd3f81376013fced3515fc408ea19fb316e1969a9b34d85ea858b6383cde8fc9be3fabc447d7f1e61c7a9d4e9aa6e79108bc0875f4023c4d9ea1847e9be4e9f", 0x54}], 0x1, &(0x7f0000000240)=[@txtime={{0x14, 0x1, 0x3d, 0x81}}, @timestamping={{0x10, 0x1, 0x25, 0x8}}], 0x24}, 0x40) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000001080)={0x0, 0x3}, &(0x7f00000010c0)=0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) socket$inet6_udp(0xa, 0x2, 0x0) 8m20.214003581s ago: executing program 47 (id=5414): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000440)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x7}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x80800, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x3}}, {@blksize={'blksize', 0x3d, 0x800}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x4}}, {@allow_other}, {@default_permissions}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1a00}}, {@blksize={'blksize', 0x3d, 0x800}}], [{@dont_appraise}, {@euid_eq}]}}) userfaultfd(0x801) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)='ufs\x00', 0x18642, 0x0) (fail_nth: 10) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)=@rc={0x1f, @any, 0x2}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="0bc2a715c4db66f6bf13813dc43910f57f643d2eccd3f81376013fced3515fc408ea19fb316e1969a9b34d85ea858b6383cde8fc9be3fabc447d7f1e61c7a9d4e9aa6e79108bc0875f4023c4d9ea1847e9be4e9f", 0x54}], 0x1, &(0x7f0000000240)=[@txtime={{0x14, 0x1, 0x3d, 0x81}}, @timestamping={{0x10, 0x1, 0x25, 0x8}}], 0x24}, 0x40) r5 = socket$inet(0xa, 0x801, 0x84) listen(r5, 0x8) r6 = accept4(r5, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000001080)={0x0, 0x3}, &(0x7f00000010c0)=0x8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) socket$inet6_udp(0xa, 0x2, 0x0) 4m47.979714668s ago: executing program 6 (id=5981): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xc) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) ioperm(0x83, 0x6, 0x8) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x1001, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r7, 0xae9a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)={0x28, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x4}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x6000000}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x6}]}, 0x28}}, 0x0) 4m46.79155479s ago: executing program 6 (id=5984): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x1b0000019}) epoll_pwait2(r1, &(0x7f0000000180)=[{}], 0x1, 0x0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @empty, 0xd}, 0x1c) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@ipv4_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2e00}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_DST={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xb}}}]}, 0x30}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) dup(0xffffffffffffffff) truncate(0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000340), 0x4) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_opts(r2, 0x29, 0x35, &(0x7f0000000000)=@dstopts={0x87}, 0x8) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffdfd) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r7, 0xaf01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000600142603600e1208000f0000000401a80016000900014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x810) 4m45.670088412s ago: executing program 6 (id=5985): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f00000000c0)=0x14, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x52, 0x10, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$packet(0x11, 0x3, 0x300) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="02120902070000002bbd7000fddbdf2505004e20ac141418000000001d00000002004e24e00000010000000000000000"], 0x38}}, 0x2000c800) 4m44.27151556s ago: executing program 6 (id=5991): rt_sigaction(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f00000002c0)) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) copy_file_range(r0, 0x0, r0, &(0x7f0000000080)=0x8800000, 0x1, 0x0) syz_clone3(&(0x7f00000001c0)={0x100001200, &(0x7f0000000040), 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4m43.943987044s ago: executing program 6 (id=5996): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000008c0)={{{@in6, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@empty}}, &(0x7f0000000240)=0xe8) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r5}}) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000740)="93378e66cf9b48cb59638401fcd1730172853a9fa8952799f76b0c92cb770e3b6c6b606c1e7b27d18568a0a1f80c39ff", 0x30) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001540)=""/68, 0x44}], 0x1}}], 0x1, 0x0, 0x0) 4m41.488099139s ago: executing program 6 (id=6004): ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) preadv(r1, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/190, 0xbe}], 0x1, 0x0, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(&(0x7f0000000100)=[{r2, 0x10c4}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80) r3 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r5}, 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7}, 0x18) connect$can_j1939(r6, &(0x7f0000000140)={0x1d, r7}, 0x18) sendmsg$can_j1939(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='data', 0x4}}, 0x0) recvmsg$can_j1939(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4, 0x4}], 0x1}, 0x0) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000040)=0xf0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000100000000000000000001801", @ANYRES64=0x0, @ANYBLOB="0000000000000000b702000014000000b7030000000003808500000008000000bc0900000000000055090100000000007200000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) 4m40.169263117s ago: executing program 48 (id=6004): ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) preadv(r1, &(0x7f00000014c0)=[{&(0x7f00000001c0)=""/190, 0xbe}], 0x1, 0x0, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(&(0x7f0000000100)=[{r2, 0x10c4}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80) r3 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r5}, 0x18) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000100)={0x1d, r7}, 0x18) connect$can_j1939(r6, &(0x7f0000000140)={0x1d, r7}, 0x18) sendmsg$can_j1939(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='data', 0x4}}, 0x0) recvmsg$can_j1939(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4, 0x4}], 0x1}, 0x0) ioctl$CEC_S_MODE(r3, 0x40046109, &(0x7f0000000040)=0xf0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000100000000000000000001801", @ANYRES64=0x0, @ANYBLOB="0000000000000000b702000014000000b7030000000003808500000008000000bc0900000000000055090100000000007200000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0xa, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) 3m42.437325213s ago: executing program 5 (id=6188): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/37, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x80000) 3m40.378096125s ago: executing program 5 (id=6193): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)={[&(0x7f00000006c0)=' \x87N\x10\x86A.\x8fF\xa1\x1c\xf9\a\x00\x00\x00\x1c$}\xfb\xebP\xd7\xfa\xce\xf7\xad\x0f\xe6\xc4I\xfa\x83\x85B\x11\x14h\t\x00\xb3\xc9\x1c\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcb\xe0v\xe8Z\xa3\x8dBER\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000600)='$\x00\xf0\xc7~C\x88)}\xab\xb9\xf2\x1f\aD\t_\x96\x9c\xcd\xfc/\xc6\xa9\x1d$t\xc3\xe5R\xa3_\x9d\x1c=u\x1a\xf4\x06\xa2g\x05\xf3\x140a\xdb\x1f\x01~\xbc\x8d\x06\xef\xfd\xc7\xed\x15\x03O0A\x18\xea\xd1\x02\xe4\x198\xe8M*\xb8\xa3z\xfc(\xfc\xd1\x99\xef\x98\x15\a\f7s\xda\xfbrO70b\xa1\xde\xe0o\xc1\xc0\xd0\xe7\xe2\x04\xe98\xb7\xe8T\xba\xdd\x96v', &(0x7f0000000240)='*/\x00']}) 3m39.703482322s ago: executing program 5 (id=6194): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x5}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x4c}, @IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x5c}}, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746de0061f000000000030383030303030303030303069643dfea577afb8ac96356db18c2f2597d2a9e575375297b35261883d7d5c4e0243bac59e239d7befb1105b1f9e28525127dd68aa211c453ca7827901f32577b7df2cd4ff59d2ec5cb9859b9c4f847c2118701e000000000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 3m37.819782242s ago: executing program 5 (id=6198): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, '\b'}]}], {0x14, 0x11, 0x1, 0x4}}, 0xa4}, 0x1, 0x0, 0x0, 0x2004c899}, 0x0) 3m37.520059917s ago: executing program 5 (id=6200): ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x102e}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x200000, 0x186) close(0xffffffffffffffff) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e900232b8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000200)="c67f0d7df9", 0x28}], 0x2) read$FUSE(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0/../file0\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) setxattr$security_ima(0x0, &(0x7f0000000000), &(0x7f00000003c0)=ANY=[@ANYBLOB="66742cc0ca2225dcd12021e56d0cc923e6e30f63fc60cb6f0264615c4d92f661aaf7413db49ed538befe81ad85e008995c5ab9e69406f735b51bb2af2903345e80bf06ace1101c6ef15318a663928c8cd43e2fb9fb1a7ce60dea5b2c610c8b57db52750b94b81ece471c32b624845b32a849fd9af7"], 0x2, 0x0) 3m34.299652814s ago: executing program 5 (id=6209): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x5}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x4c}, @IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x5c}}, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746de0061f000000000030383030303030303030303069643dfea577afb8ac96356db18c2f2597d2a9e575375297b35261883d7d5c4e0243bac59e239d7befb1105b1f9e28525127dd68aa211c453ca7827901f32577b7df2cd4ff59d2ec5cb9859b9c4f847c2118701e000000000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 3m19.203403901s ago: executing program 49 (id=6209): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x5c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x5}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x4c}, @IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x5c}}, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB="2c726f6f746de0061f000000000030383030303030303030303069643dfea577afb8ac96356db18c2f2597d2a9e575375297b35261883d7d5c4e0243bac59e239d7befb1105b1f9e28525127dd68aa211c453ca7827901f32577b7df2cd4ff59d2ec5cb9859b9c4f847c2118701e000000000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) 3m10.193266627s ago: executing program 7 (id=6282): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() fanotify_init(0xf00, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x30, r3, 0x135, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x40, 0x8}, {0xc, 0x3}, {0x5}, {0x1, 0x4}], "7ecbad144922f925"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 3m6.619568088s ago: executing program 7 (id=6287): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setpriority(0x1, 0x0, 0x0) 3m6.406880692s ago: executing program 7 (id=6290): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) sendfile(r1, r1, 0x0, 0x9) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r2) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_io_uring_setup(0x2a20, &(0x7f0000000080)={0x0, 0x3726, 0x4, 0x0, 0x3bf}, 0x0, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r6, 0xc0905664, &(0x7f00000002c0)={0x0, 0x0, '\x00', @bt={0x1, 0x5, 0x3, 0x7, 0x4, 0x7, 0xd, 0x5}}) creat(&(0x7f00000000c0)='./file0\x00', 0x80) ioctl$VIDIOC_S_HW_FREQ_SEEK(r6, 0x40305652, &(0x7f0000000000)={0x1, 0x3, 0x9, 0xffffffca, 0x5, 0xffffff2b, 0x6}) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x1, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r8, 0x0, 0x20001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x2}]}}}]}, 0x3c}, 0x1, 0x2, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=@newtclass={0x38, 0x28, 0x4, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xfff2, 0x8}, {0x5, 0xf}, {0xfff1, 0xfff2}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x401}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x10084) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0xc10800, 0xc8) 3m4.474911083s ago: executing program 7 (id=6294): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x884) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x2b93089, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000100)) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r7 = dup3(r6, r5, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x100000}, @ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x14}}, &(0x7f0000001280)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000380)) socket$inet6_udplite(0xa, 0x2, 0x88) r9 = syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2) ioctl$VIDIOC_QUERYCTRL(r9, 0xc0445624, &(0x7f0000000080)={0x8000003, 0x0, "000097cba2760700000000000000000000000001390d3af6d74de96f48ff089c"}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000680)={'ip6_vti0\x00', 0x0, 0x4, 0x7, 0x40, 0x401, 0x21, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x7, 0x7800, 0x7f, 0x5}}) 3m3.864484223s ago: executing program 7 (id=6295): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r1, 0x2, &(0x7f0000000300)=[0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)={0x10, 0x3f2, 0x4}, 0x10}}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 2m57.359433854s ago: executing program 7 (id=6317): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x28, r0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c805}, 0x0) 2m56.514405433s ago: executing program 50 (id=6317): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x28, r0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x8, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c805}, 0x0) 2m39.774542108s ago: executing program 1 (id=6356): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a00000000000800"], 0x184}}, 0x0) 2m39.537680377s ago: executing program 1 (id=6359): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x30, r2, 0x135, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x40, 0x8}, {0xc, 0x3}, {0x5}, {0x1, 0x4}], "7ecbad144922f925"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 2m39.267970019s ago: executing program 1 (id=6361): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x59}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() fanotify_init(0xf00, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000004c0)={0x30, r3, 0x135, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_QOS_MAP={0x14, 0xc7, {[{0x40, 0x8}, {0xc, 0x3}, {0x5}, {0x1, 0x4}], "7ecbad144922f925"}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 2m39.200213874s ago: executing program 1 (id=6363): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @dev}, @address_request}}}}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x368, 0xffffffff, 0xffffffff, 0x368, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "87aad0a2179e532f3840941744e54b2515aedd62db671c1889442e73ca48"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2e8) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000340)={0x2, 0x5, 0x0, 0x1000, &(0x7f000000d000/0x1000)=nil}) 2m38.077039321s ago: executing program 1 (id=6366): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x13000a1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40880) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x36, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000700), 0x8, 0x9f, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000580)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xd, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r3) sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r4, 0x20, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x21}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0xf9}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x4000) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0x4}}}]}]}], {0x14}}, 0xd4}}, 0x0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r7 = socket$igmp6(0xa, 0x3, 0x2) recvfrom$rose(0xffffffffffffffff, &(0x7f0000000280)=""/123, 0x7b, 0x40000040, &(0x7f0000000300)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x40) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929590c"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m37.838384432s ago: executing program 1 (id=6367): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x162682, 0x0) r4 = dup(r3) fallocate(r4, 0x3, 0x0, 0x180000000004) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000240)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in6=@private1, 0x4e20, 0xffc0, 0x4e24, 0x735, 0x2, 0x0, 0xa0, 0x2, r2, r5}, {0xa, 0x51, 0x1803, 0x9, 0xe51e, 0xec, 0x4, 0xfc6}, {0x7294, 0x7ff, 0x3, 0x897}, 0x5, 0x6e6bb9, 0x2, 0x0, 0x2, 0x1}, {{@in=@multicast2, 0x4d2, 0x33}, 0x2, @in=@multicast1, 0x34ff, 0x1, 0x3, 0x4, 0x1ff, 0x4, 0x2e17}}, 0xe8) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x94, r6, 0x100, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x14) setsockopt$MRT6_PIM(r1, 0x29, 0xcf, &(0x7f0000000000)=0x3, 0x4) write$P9_RREMOVE(r4, &(0x7f0000000540)={0x7, 0x7b, 0x1}, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0xfffffffc, 0x0, 0x401f}) 2m22.684188274s ago: executing program 51 (id=6367): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x162682, 0x0) r4 = dup(r3) fallocate(r4, 0x3, 0x0, 0x180000000004) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000140)={{{@in6, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000240)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in6=@private1, 0x4e20, 0xffc0, 0x4e24, 0x735, 0x2, 0x0, 0xa0, 0x2, r2, r5}, {0xa, 0x51, 0x1803, 0x9, 0xe51e, 0xec, 0x4, 0xfc6}, {0x7294, 0x7ff, 0x3, 0x897}, 0x5, 0x6e6bb9, 0x2, 0x0, 0x2, 0x1}, {{@in=@multicast2, 0x4d2, 0x33}, 0x2, @in=@multicast1, 0x34ff, 0x1, 0x3, 0x4, 0x1ff, 0x4, 0x2e17}}, 0xe8) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x94, r6, 0x100, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x14) setsockopt$MRT6_PIM(r1, 0x29, 0xcf, &(0x7f0000000000)=0x3, 0x4) write$P9_RREMOVE(r4, &(0x7f0000000540)={0x7, 0x7b, 0x1}, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000100)={0xffffffffffffffff, 0xfffffffc, 0x0, 0x401f}) 23.179582675s ago: executing program 2 (id=6780): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2820e800", @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf250800000008000300", @ANYRES32=r3, @ANYBLOB="4aff99000e0000007e000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40) (async) io_setup(0x3ff, &(0x7f0000000500)=0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_destroy(r4) (async, rerun: 64) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0xfff0) (rerun: 64) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x2000000) (async) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) io_pgetevents(0x0, 0xe0, 0x2, &(0x7f0000000000)=[{}, {}], &(0x7f0000000100)={r5, r6+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8}) 22.255417283s ago: executing program 4 (id=6782): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0x0) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, r4) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r4, 0x0, r5, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x5, 0x0, 0xd, 0x0}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x5, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r10 = syz_open_pts(r9, 0x0) ioctl$TIOCVHANGUP(r10, 0x5437, 0x0) close(r9) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111, 0x9}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)) chdir(0x0) 20.698842481s ago: executing program 2 (id=6783): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x90) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000740)=r1) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000140)={0x3, 0x40}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000200)={0x1, r1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0xdd, &(0x7f0000000780)=""/221}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r2, 0x0, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0xbb6}]}, 0x28}}, 0x0) 19.292335083s ago: executing program 2 (id=6787): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x8000, 0x0) 17.376204852s ago: executing program 2 (id=6793): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x0, 0x0, 0x5}, {0x3}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000064640d17fba5951764737431e5f90000000000000000c9956a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xf, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000080000000000000000018110000", @ANYRES32=r4, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) readv(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="9f000000050000000200c177841f68377d9f00000000619b9900e8d1be35aeda4a3618d49ce50000000000000000e3b7f90e6bcc1a96da6131494d79380e00000000000000"], 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r5, @ANYRES8], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x0, @loopback}}) ioctl$sock_inet_SIOCSIFADDR(r6, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) 16.616112818s ago: executing program 2 (id=6795): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)}, 0x20000801) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r4, 0x407, 0x0) write$FUSE_INIT(r4, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r4, 0x407, 0x2000000) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r3}, 0x4) fsetxattr$smack_xattr_label(r0, 0x0, &(0x7f0000000200)={'-*^#!\'{@'}, 0x9, 0x2) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d80), r6) sendmsg$IEEE802154_ASSOCIATE_RESP(r7, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x30}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = fanotify_init(0x4, 0x2) r11 = dup(r9) fanotify_mark(r10, 0x1, 0x12, r11, 0x0) fsetxattr$smack_xattr_label(r5, &(0x7f0000000380)='security.SMACK64IPOUT\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB=':'], 0xc, 0x0) r12 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r12, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 15.191067889s ago: executing program 4 (id=6801): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={r0, 0x2000000, 0xd, 0x0, &(0x7f00000001c0)="5cdd3086ddffff6633c9bbac88", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000080000085000000d0000000a50000009700000095"], &(0x7f0000000a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) dup2(r1, r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) r3 = epoll_create1(0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000002c0)={0xc}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) 14.924784413s ago: executing program 4 (id=6802): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a3000000000a4000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002168001180040001"], 0xec}}, 0x0) 14.640827359s ago: executing program 4 (id=6803): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x8000, 0x0) 13.866957335s ago: executing program 2 (id=6808): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x402, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r1, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000180)=0x8) (fail_nth: 11) 11.363971297s ago: executing program 9 (id=6811): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0x30}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x19}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000080), 0x4) open(0x0, 0x143042, 0x0) lsetxattr$system_posix_acl(&(0x7f00000003c0)='.\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000080)=ANY=[@ANYRESOCT=r0], 0x24, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@cred={{0x1c}}], 0x20, 0x44}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='4\x00', 0xfffffffffffffe12) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb932"], 0xfdef) getxattr(&(0x7f0000000140)='./bus\x00', &(0x7f00000001c0)=@known='system.posix_acl_access\x00', 0x0, 0x15) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 10.919852764s ago: executing program 9 (id=6814): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r4, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000240)={'sit0\x00', r4, 0x7800, 0x1, 0x8, 0x2, {{0x10, 0x4, 0x1, 0x6, 0x40, 0x68, 0x0, 0x20, 0x2f, 0x0, @multicast1, @broadcast, {[@generic={0x7, 0x8, "725475ced946"}, @timestamp_prespec={0x44, 0x1c, 0xf8, 0x3, 0x5, [{@dev={0xac, 0x14, 0x14, 0x2c}, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@rand_addr=0x64010101, 0x4}]}, @noop, @ra={0x94, 0x4}]}}}}}) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000580)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x48}}, 0x0) add_key$user(&(0x7f0000002100), &(0x7f0000002180)={'syz', 0x1}, &(0x7f00000021c0)='b', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000002300), &(0x7f0000002340)={'syz', 0x3}, &(0x7f0000000100)="370c099069effa43de3e1404db09b4ce1ef77bde4b371532dd16447c1b13403656c86711f6e750026f23029a50d44299c7bf5c78dc5efae2d041016160e8bef7b30c05e298aa9572540dd950307987eef2115e1bcf512bea3410ca5a9e9f827e4b13490dbbd4fc5a45e0738b959acafd2c12863045265bcbc2c9426ac3f614746b436fe86a72dc642dd67d970604a69b4f22cd0076beedc18056ab4bea4c825b69a7a77adcd5488684872b1bb9eb84586549e11b080468668e8fd0e52ce0705a", 0xc0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000000c0)={@in6={{0xa, 0x0, 0x1, @local, 0xcf}}, 0x0, 0x0, 0x6, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa158f35f7519d5f73b4f5d80eb4881a5b98cb9fb96d225d602392f816d09dcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) sendto$inet6(r5, 0x0, 0x0, 0x20000045, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000012006bab9e3fe3d86e6c1d0000147ea64e21160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r8 = socket(0x840000000002, 0x3, 0xff) connect$inet(r8, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0xfffffffe}, @TCA_CAKE_FWMARK={0x8, 0x12, 0x2}]}}]}, 0x44}}, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000340)="09ad5d873acf7aeb27d471ea6e1f90f3fb87941b39f0d6b64d48c843ea0b15821566d1a8a0ab23dd4fc0efbcf9ba700a04ad90139bebd84c4a234ca7aa7c3ecf815ce43499aaffd06726e47053651acf10628f381d0ca09e029951e710f6f5b9cdc081e1cb16e780e2ea587e0b6637acd6b8cdd6564652c9828894a0d942aca91b9a7ffc0e786dba2755e02f6922691f8286c805b32f398c5466e050fecc3eeecb349f3ef95efdbf241da08358d807eb28e0d773b2d36f1b7a29e56265868f3e531b385428ef", 0xc6, 0xc0, 0x0, 0x0) r9 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r9, &(0x7f0000000780)={0x2a, 0x1, 0xfffffffe}, 0xc) sendmmsg$inet(r8, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 10.376464054s ago: executing program 9 (id=6815): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000740)="93378e66cf9b48cb59638401fcd1730172853a9fa8952799f76b0c92cb770e3b6c6b606c1e7b27d18568a0a1f80c39ff", 0x30) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg$unix(r3, &(0x7f0000002a80)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001540)=""/68, 0x44}], 0x1}}], 0x1, 0x0, 0x0) 8.65318863s ago: executing program 4 (id=6820): r0 = socket$packet(0x11, 0x1, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x8000}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10147, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, 0x0, 0x0) shutdown(r5, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000fdff01000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000300c0009800800014044"], 0x90}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0xfd) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000a80)=0xfd) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x688602, 0x0) 8.53213246s ago: executing program 3 (id=6821): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/37, @ANYRES32=0x41424344], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x80000) 7.524406566s ago: executing program 4 (id=6822): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000002980)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402000000e8fe55a11800152c280014", 0x1f}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x33fe0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)=""/223, 0x105, 0xdf, 0x0, 0x4, 0x0, @void, @value}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r1}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0200000004000000480000000100000480000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000002d00000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, &(0x7f00000041c0)="6766c7442400b42f8b366766c7442402e90000006766c744240600000000670f0114240f01c9670f0059fc66b9800000c00f326635004000000f30bad004ec0f796d77f30f102c66f30fbd48e766b91f02000066b80078000066ba000000000f30f30f01f6", 0x65}], 0x1, 0xe8, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000140), 0x12) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f0000000000)) recvmmsg(r1, &(0x7f00000094c0)=[{{&(0x7f0000000080)=@alg, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000440)=""/43, 0x2b}, {&(0x7f0000000480)=""/115, 0x73}, {&(0x7f0000000500)=""/3, 0xfffffffffffffd48}, {&(0x7f0000000e00)=""/104, 0x5d}, {&(0x7f0000000980)=""/232, 0xe8}, {&(0x7f0000000b40)=""/199, 0xc7}, {&(0x7f0000002fc0)=""/66, 0x42}, {&(0x7f0000000c40)=""/245, 0xf5}, {&(0x7f0000000a80)=""/95, 0x5f}], 0x9}, 0xd8}, {{&(0x7f0000002a40)=@alg, 0x80, &(0x7f0000001040)=[{&(0x7f0000000e80)=""/142, 0x8e}, {&(0x7f00000012c0)=""/109, 0x6d}, {&(0x7f0000000fc0)=""/125, 0x7d}, {&(0x7f0000000540)=""/5, 0x5}], 0x4, &(0x7f0000001080)=""/57, 0x39}, 0x7}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000010c0)=""/112, 0x70}, {&(0x7f0000001140)=""/147, 0x93}, {&(0x7f0000001200)=""/3, 0x3}, {&(0x7f0000001240)=""/97, 0x61}, {&(0x7f00000008c0)=""/107, 0x6b}], 0x5, &(0x7f0000001400)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000002400)=@l2, 0x80, &(0x7f00000026c0)=[{&(0x7f0000002480)=""/251, 0xfb}, {&(0x7f0000002580)=""/124, 0x7c}, {&(0x7f0000002600)=""/93, 0x5d}, {&(0x7f0000002680)=""/63, 0x3f}], 0x4, &(0x7f0000002700)=""/6, 0x6}, 0x401}, {{&(0x7f0000002740)=@ieee802154, 0x80, &(0x7f0000002bc0)=[{&(0x7f00000027c0)=""/135, 0x87}, {&(0x7f0000002880)=""/123, 0x7b}, {&(0x7f0000002900)=""/128, 0x80}, {&(0x7f0000000f40)=""/106, 0x6a}, {&(0x7f0000009800)=""/179, 0xb3}, {&(0x7f0000002b00)=""/174, 0xae}], 0x6, &(0x7f0000002c40)=""/113, 0x71}, 0x100}, {{&(0x7f0000002cc0), 0x80, &(0x7f0000002e00)=[{&(0x7f0000002d40)=""/155, 0x9b}], 0x1}, 0xd}, {{&(0x7f0000002e40)=@qipcrtr, 0x80, &(0x7f0000002f80)=[{&(0x7f0000009700)=""/199, 0xc7}], 0x1, &(0x7f0000002f00)=""/68, 0x44}, 0x7}, {{0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000003040)=""/73, 0x42}, {&(0x7f00000030c0)=""/4096, 0x1000}], 0x2, &(0x7f0000004100)=""/148, 0x94}, 0x1}, {{&(0x7f00000029c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f00000093c0)=[{&(0x7f0000004240)=""/4096, 0x1000}, {&(0x7f0000005240)=""/122, 0x7a}, {&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/4096, 0x1000}, {&(0x7f00000072c0)=""/199, 0xc7}, {&(0x7f00000073c0)=""/4096, 0x1000}, {&(0x7f00000083c0)=""/4088, 0xff8}], 0x7, &(0x7f0000009440)=""/105, 0x69}, 0x9}], 0x9, 0x12002, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000000c000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.280365082s ago: executing program 3 (id=6823): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) recvmsg(r5, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000063c0)=""/4097, 0x1001}], 0x1}, 0x102) 6.195182998s ago: executing program 3 (id=6824): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) r1 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80800, 0x4) io_uring_setup(0x172e, &(0x7f0000000280)={0x0, 0x3059, 0x2, 0x0, 0x2ee}) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) eventfd2(0x2, 0x800) syz_emit_ethernet(0x70, &(0x7f0000000980)=ANY=[@ANYRES16=r0, @ANYRES16=r1], 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x2, 0xdc, &(0x7f00000009c0)=ANY=[@ANYRESDEC=r3, @ANYRES32=r3, @ANYRES32=r3, @ANYRES64=r4, @ANYRES16=r0, @ANYBLOB="bf14ce85388062ea100bd65013cc97b315eb075d5b49b778f001b44e0916699bb28c6d1f02da39b7360f59cf346fef8cbfc13fe347c79a1e070ef0f079602a4b5b3022f855e5f5475f2779aaa3fc33b8422a9386f6c007c170a5138c64b9de6f94b09c9bfc859ff69fb7157b6c43a7a565f044d8a83b109eb32c1d90220c77a6da5d3fd34187a7f71098c88029f70cb4eeea554a7e214a2801565bf98e3e689a4e639edd01219773678415ceee3d9bbe6f6e4bf2d451820aa3387b08e4094986a913a010f1a66034f9a3a2d14f6742d5e1807faf29970161ef1d437a68ccb3c142aa9dfc8c3c07b968f1d5be50f83434ab"], 0x0) r5 = syz_io_uring_setup(0x1114, &(0x7f0000000300)={0x0, 0x10aa, 0x400, 0x1}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_usb_connect(0x0, 0x359, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000940)={0xa, &(0x7f0000000880)={0xa, 0x6, 0x300, 0x7f, 0x5, 0x9, 0x40, 0xd}, 0x2c, &(0x7f00000008c0)=ANY=[@ANYBLOB="050f2c000503100b0a10030009001101040003100b03100b14100401111d117ac48be89001b7c5e9e161c97d"], 0x1, [{0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x2001}}]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x10, 0x0, 0x7, 0x0, 0x0}) io_uring_enter(r5, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x18, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000bc0)=[0xffffffffffffffff, 0xffffffffffffffff, r2]}, 0x3) timer_create(0x6, &(0x7f0000000100)={0x0, 0x41, 0x1, @thr={0x0, 0x0}}, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000000c0)={0xb, @vbi={0x38305343}}) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x84, 0xcb, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000abc000000140a0102000000000000000007000000a800080039d515fc3fadcf1c5f66df3509bd7ad9314027ad5d9e5e2aeaf8c7b433d165d335665954cc32e0f6064c3b94085b0515b1477f99902b29c2aca87072d9bca1ee853ee113e5214d3f6b3925db218a7b91bf745ed7e520a105af26db87af4dfa85f5cb5832688ec0eaf2640d9723b3c15dad34968b34d2e7106c75f41656d178d12ba7f664ae6abb9ed588bba5da08f343edac10b3cbc4373818f07ad7e2a9674fc0326687ea340000000e0a03000000000000000000020000040900020073797a310000000008000440000000000900020073797a31000000001400000011000100"/280], 0x118}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) r9 = syz_open_procfs(0x0, &(0x7f00000001c0)='task\x00') lseek(r1, 0x6, 0x1) getdents64(r9, 0xffffffffffffffff, 0x43) 3.92023463s ago: executing program 0 (id=6827): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x9b090d, 0x0, '\x00', @value64}}) (async) r1 = socket(0x10, 0x3, 0x0) (async) r2 = syz_io_uring_setup(0x24fb, &(0x7f0000000000)={0x0, 0x200000, 0x10100, 0x0, 0xe5}, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) finit_module(r5, &(0x7f0000000140)='**:^\\o\xd5\x00', 0x1) (async) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0xa}}]}, 0x40}}, 0x0) io_uring_register$IORING_REGISTER_IOWQ_AFF(r2, 0x11, &(0x7f0000000100)="72b2f2c90bd9f19576715930c8411d437108e6b762296d833f1dfc141bd923f890753f5f12371401fee6e2483e2ad9928a60a83c", 0x34) 3.608244679s ago: executing program 0 (id=6828): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_QOS_MAP(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) 3.420600185s ago: executing program 0 (id=6829): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x383881, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000100)) r4 = socket(0x10, 0x803, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)={0x3, 0x0, [{0x80e, 0x0, 0x46}, {0xda0, 0x0, 0x7}, {0x1a6, 0x0, 0x480}]}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r8 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r8, 0x4020565a, &(0x7f0000000140)={0x3, 0x8000000, 0x3}) read$FUSE(r7, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000000380)={0x50, 0x0, r9, {0x7, 0x27, 0x0, 0x30000, 0x0, 0x0, 0x8, 0x10000}}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') syz_fuse_handle_req(r7, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffd, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x8000, 0x0, 0x0, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r10, @ANYBLOB="00011000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x400000, {}, [@IFLA_MASTER={0x8, 0xa, r10}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB="200000001100010028bd7010fbdbdf2500000000", @ANYRES32=r10], 0x20}}, 0x0) 2.913245331s ago: executing program 3 (id=6830): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff}) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) splice(r2, 0x0, r1, 0x0, 0x8000, 0x0) 2.340747575s ago: executing program 9 (id=6831): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0xd) 1.843603992s ago: executing program 9 (id=6832): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) lstat(0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040055}, 0x0) ioctl$int_out(r3, 0x2, &(0x7f0000000380)) ioctl$KVM_RUN(r4, 0xae80, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b00000005000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000cc0d1ebee1b3ae076d2a6a24e535b27c1545b3b8a34bf525e22bc77bdfbf1578664b6996846094938bb45ad0c2318946969638987b853cc051f7e4ba5fb4523b07091abd6dd391103d07fa399b07102a643b62983e30a6a9f2d4439d8b5e205075903b72"], 0x50) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r5, 0x800000000010d, 0x8000000011, &(0x7f00001c9fff), 0xc5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)=""/145, 0x91) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r6, 0x0, 0x1200}, 0x10) syz_io_uring_setup(0x644d, &(0x7f0000000080)={0x0, 0x1, 0x13100, 0x0, 0x7b}, &(0x7f0000000180)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) r9 = open(&(0x7f0000000300)='./file0/file0\x00', 0x800, 0x3) r10 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), r9) keyctl$dh_compute(0x17, &(0x7f0000000040)={r10, r10, r10}, &(0x7f0000000100)=""/101, 0x65, &(0x7f0000000000)={&(0x7f00000000c0)={'hmac(sha256)\x00'}}) r11 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000400)={'syz', 0x3}, 0x0, 0x0, 0x0) keyctl$reject(0x13, r10, 0x80000000, 0x7, r11) 1.831980062s ago: executing program 0 (id=6833): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xd}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x74}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/37, @ANYRES32=0x41424344], 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x80000) 1.464037082s ago: executing program 0 (id=6834): ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_io_uring_setup(0x6c3e, &(0x7f0000000200)={0x0, 0x9469, 0x4, 0x0, 0x2e4}, &(0x7f0000000280), &(0x7f00000003c0)) syz_io_uring_setup(0x4e57, &(0x7f0000000400)={0x0, 0x14fa, 0x1c, 0x2, 0x13e, 0x0, r0}, &(0x7f0000000580), &(0x7f00000004c0)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x185) mknodat$loop(r2, 0x0, 0xc000, 0x0) close(0xffffffffffffffff) read$FUSE(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a3000000000a4000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002168001180040001"], 0xec}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '&(]!:[-+'}}]}) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f00000002c0)='./bus\x00', 0x0) setxattr$security_ima(0x0, &(0x7f0000000000), &(0x7f0000000380)=@ng={0x4, 0x14}, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000bdb000/0x3000)=nil, 0x3000, &(0x7f0000000040)='&\x00') 1.200343634s ago: executing program 3 (id=6835): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f40), r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x80, 0x100008b}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) getrlimit(0x2, &(0x7f0000000140)) add_key$user(0x0, &(0x7f0000000000), &(0x7f00000002c0)='X', 0x1, 0xfffffffffffffffe) add_key$user(&(0x7f0000000640), 0x0, 0x0, 0x0, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x3, &(0x7f0000000180)) syz_usb_connect(0x0, 0x0, 0x0, 0x0) gettid() r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4}, 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4, 0x0, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r1, 0x1, 0x7ffffc, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x100000000000000}}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}}, 0x0) 547.045152ms ago: executing program 0 (id=6836): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, r2, 0x3, 0x0, @val=@perf_event={0x1}}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000e400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0xa68d7c519ec00fe1, 0x0, 0x0, 0x3}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, &(0x7f00000005c0)={0x18, 0x0, 0x0, {0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101401, 0x0) poll(&(0x7f00000001c0)=[{r6}], 0x1, 0x8) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x19, &(0x7f0000000400)=0xa4, 0x4) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xff}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "828bf7", 0x38, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast2, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x3a, 0x0, @private2, @private2, [], "1e520b4c951ee12e"}}}}}}}, 0x0) recvmmsg(r7, &(0x7f0000002780)=[{{0x0, 0xfffffffffffffde1, 0x0}}], 0x1, 0x2140, 0x0) listen(r3, 0x3) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x106, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @tipc={{0x32, 0x4, 0x0, 0x3f, 0xf8, 0x65, 0x0, 0x3, 0x6, 0x0, @empty, @multicast1, {[@rr={0x7, 0x7, 0x5d, [@rand_addr=0x64010100]}, @rr={0x7, 0x7, 0xa1, [@private=0xa010100]}, @timestamp_prespec={0x44, 0x2c, 0x40, 0x3, 0x6, [{@private=0xa010102, 0xce}, {@empty, 0x4}, {@private=0xa010102, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x1f}, 0xfff}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x3}]}, @timestamp_prespec={0x44, 0x4c, 0xb0, 0x3, 0xa, [{@empty, 0x5ba1}, {@private=0xa010101, 0x81}, {@multicast1, 0xe867}, {@local, 0xd44}, {@empty}, {@remote}, {@private=0xa010102, 0x4}, {@rand_addr=0x64010102}, {@local, 0x1}]}, @timestamp_prespec={0x44, 0x4, 0x41, 0x3, 0x1}, @ssrr={0x89, 0x1b, 0xb4, [@private=0xa010101, @loopback, @broadcast, @remote, @broadcast, @empty]}, @timestamp={0x44, 0xc, 0xdb, 0x0, 0x3, [0x0, 0x4]}]}}, @payload_mcast={{{{{{0x30, 0x0, 0x1, 0x1, 0x1, 0xb, 0x1, 0x2, 0xf468, 0x0, 0x3, 0xa, 0x0, 0x1, 0xffff, 0x1, 0x1, 0x104e23, 0x4e23}, 0x2, 0x1}, 0x3}, 0x2}}, [0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) 478.780189ms ago: executing program 9 (id=6837): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_dev$vim2m(&(0x7f0000000140), 0x10001, 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x19, 0x0, 0x0) bind$inet(r0, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) unshare(0x22020600) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x6, 0xffff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x3, 0x0, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, r6}, 0x38) 0s ago: executing program 3 (id=6838): r0 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000c80)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902950003010040000904000000010100000a240100000002010213240600000600009b340000000000000000000009240300000000000009247e1e00f8211cfd092403050000000400073005040191591b48c283296150ece01cd5401233a8e9bc8272410f97290336807a6423463047ce5048561efb0026b27f09a1bd14320269fe8f72b8a11f3d741752f63c9fd3e2d05f53a309985199c14ac20aeb014cf9fb5df36ccc611bb6acd31d962f5c2c373da4c497e83c6d9622d4730bff0f831db6a1a2559aeb2085cc"], 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$phonet(0x23, 0x2, 0x1) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000040)) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000031b0000000"]}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000340)=""/71}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x6, 0x0) listen(r3, 0x101) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000130081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c1f01400b080c00bdad01409bbc7a46e3988285dcdf12176679df069163ce955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0xd3, 0x1a, 0xd2, 0x40, 0x3f0, 0x581d, 0xbb42, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc5, 0x0, 0x3, 0xff, 0x1, 0x7, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x8, 0x0, 0x3, 0x1}}, {{0x9, 0x5, 0xc, 0x0, 0x3ff, 0x2, 0x86, 0x3}}, {{0x9, 0x5, 0x87, 0x2, 0x400, 0xb, 0x7f, 0x14}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x10) r10 = syz_open_procfs(0x0, &(0x7f0000000400)='syscall\x00') lseek(r10, 0x8, 0x0) syz_usb_control_io$cdc_ncm(r5, &(0x7f00000009c0)={0x14, &(0x7f00000008c0)={0x40, 0x5, 0x97, {0x97, 0x22, "61d7abd77f649ec9f519f953f49a30fe8f436fc0f9cf9a847fd616475f9c020b6b04471a7122b12bbb1bb61951eb18947b2f573c312507bebf6503fe0a4ef771d472b0e0e9d25056cf9687e276337c45e45856420acd8cdb038b9a15d88dd3eb38df620319d9788599f9886517779309907e51d4e1f3b49309e43a78f476219c80278e1b63c90e83b99135efe0f324fd8ad9fd2dd3"}}, &(0x7f0000000980)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000c00)={0x44, &(0x7f0000000a00)={0x40, 0x7, 0xe, "b40f241c674751fdda1b96dd446d"}, &(0x7f0000000a40)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000a80)={0x0, 0x8, 0x1, 0x77}, &(0x7f0000000ac0)={0x20, 0x80, 0x1c, {0x15, 0x3, 0xdf, 0xdfa, 0x1ff, 0x8, 0x2, 0x9, 0x6, 0x6, 0x2, 0x4}}, &(0x7f0000000b00)={0x20, 0x85, 0x4, 0x1}, &(0x7f0000000b40)={0x20, 0x83, 0x2}, &(0x7f0000000b80)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000bc0)={0x20, 0x89, 0x2, 0x1}}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r2) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000d80)={0x40, 0x4, 0x4d, {0x4d, 0x5, "c748c0b31a89351d222bc44192dfe82ac5187472c08590921f13ec6eb26c9a2280bb200c583afa9d28b9a9ebf97fd22670a921b78a4c28a14869ae74f623b8885b0e772136d2667fac52c9"}}, &(0x7f0000000140)={0x0, 0x3, 0x9f, @string={0x9f, 0x3, "4420281774d95e144e9a559348d994b8fbefd28cb50122a350c2623609e480dd640601d108696ab78e781dd3c3237ecd8ac70880fa39214bb5adb06e5fe706b493dd52a728f31b846a304086782685a2045467730f6dc32c7d6bd5b1420aa3b4014a287a05ffaac28f876003f51bf13c1f75baa65a8bedefbcdf25b66905fa0dd1ff6f41172af691f6b29d72405dc517229f630dcb339555da5c08ad7d"}}, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x60, 0x3, 0x7, "7154056d", "58a8ec43"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x2, 0xfc, 0x7, 0x4, 0x7, 0x800}}}, &(0x7f0000000800)={0x84, &(0x7f00000003c0)={0x20, 0x0, 0xa8, "b2d4259bf9a106ef51691be85f494f09981c16bb2a896b764515aa6cfce9822f612fab1c2e2a23187f3eb82c072c0c0f166cfaf6cdf1d25988b7d81f6f1c523432f8d84af1406c91edc7ba9221d08fec3a11e9d11dd8fc9349447d2585ba374beb3ef7e1d7e958fdc9b98840673eb544fb1db9212624bddd1267a4615bf3e4cab71af61dd52337a815cbaef802d52224637d8daa1f0a1c9639935e2b5826c02a82741eb6d845441d"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0xf}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x1c00, 0x80, [0xf0f0]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x6}, &(0x7f00000005c0)={0x40, 0xb, 0x2, "a263"}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0x8}, &(0x7f0000000640)={0x40, 0x13, 0x6}, &(0x7f0000000680)={0x40, 0x17, 0x6}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "3691"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x4}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x3}}) kernel console output (not intermixed with test programs): .153013][T31494] FAULT_INJECTION: forcing a failure. [ 2251.153013][T31494] name failslab, interval 1, probability 0, space 0, times 0 [ 2251.185019][T31494] CPU: 1 UID: 0 PID: 31494 Comm: syz.1.6035 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 2251.195850][T31494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2251.205933][T31494] Call Trace: [ 2251.209224][T31494] [ 2251.212155][T31494] dump_stack_lvl+0x241/0x360 [ 2251.216855][T31494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2251.222061][T31494] ? __pfx__printk+0x10/0x10 [ 2251.226652][T31494] ? __kmalloc_cache_noprof+0x48/0x390 [ 2251.232106][T31494] ? __pfx___might_resched+0x10/0x10 [ 2251.237394][T31494] ? arch_stack_walk+0xfd/0x150 [ 2251.242251][T31494] should_fail_ex+0x3b0/0x4e0 [ 2251.246936][T31494] should_failslab+0xac/0x100 [ 2251.251618][T31494] __kmalloc_cache_noprof+0x70/0x390 [ 2251.256900][T31494] ? rtnl_newlink+0x12e/0x2210 [ 2251.261665][T31494] rtnl_newlink+0x12e/0x2210 [ 2251.266259][T31494] ? kasan_save_track+0x51/0x80 [ 2251.271107][T31494] ? kasan_save_free_info+0x40/0x50 [ 2251.276302][T31494] ? __kasan_slab_free+0x59/0x70 [ 2251.281237][T31494] ? kmem_cache_free+0x195/0x410 [ 2251.286170][T31494] ? __pfx_rtnl_newlink+0x10/0x10 [ 2251.291198][T31494] ? __netlink_deliver_tap+0x56b/0x7f0 [ 2251.296652][T31494] ? __pfx_validate_chain+0x10/0x10 [ 2251.301845][T31494] ? __sock_sendmsg+0x221/0x270 [ 2251.306696][T31494] ? ____sys_sendmsg+0x52a/0x7e0 [ 2251.311628][T31494] ? __sys_sendmsg+0x269/0x350 [ 2251.316387][T31494] ? do_syscall_64+0xf3/0x230 [ 2251.321066][T31494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2251.327148][T31494] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2251.333136][T31494] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2251.339466][T31494] ? mark_lock+0x9a/0x360 [ 2251.343799][T31494] ? __lock_acquire+0x1397/0x2100 [ 2251.348840][T31494] ? rcu_read_unlock+0x87/0xa0 [ 2251.353597][T31494] ? __dev_queue_xmit+0x1775/0x3f50 [ 2251.358794][T31494] ? __pfx_lock_release+0x10/0x10 [ 2251.363813][T31494] ? cap_capable+0x1b4/0x250 [ 2251.368400][T31494] ? safesetid_security_capable+0xb2/0x1d0 [ 2251.374208][T31494] ? __pfx_rtnl_newlink+0x10/0x10 [ 2251.379238][T31494] rtnetlink_rcv_msg+0x791/0xcf0 [ 2251.384177][T31494] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 2251.389288][T31494] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2251.394752][T31494] ? ref_tracker_free+0x643/0x7e0 [ 2251.399783][T31494] netlink_rcv_skb+0x1e3/0x430 [ 2251.404545][T31494] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 2251.410003][T31494] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2251.415308][T31494] ? netlink_deliver_tap+0x2e/0x1b0 [ 2251.420506][T31494] netlink_unicast+0x7f6/0x990 [ 2251.425284][T31494] ? __pfx_netlink_unicast+0x10/0x10 [ 2251.430569][T31494] ? __virt_addr_valid+0x45f/0x530 [ 2251.435681][T31494] ? __phys_addr_symbol+0x2f/0x70 [ 2251.440701][T31494] ? __check_object_size+0x47a/0x730 [ 2251.445991][T31494] netlink_sendmsg+0x8e4/0xcb0 [ 2251.450757][T31494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2251.456049][T31494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2251.461328][T31494] __sock_sendmsg+0x221/0x270 [ 2251.466006][T31494] ____sys_sendmsg+0x52a/0x7e0 [ 2251.470780][T31494] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2251.476060][T31494] ? __fget_files+0x2a/0x410 [ 2251.480736][T31494] ? __fget_files+0x2a/0x410 [ 2251.485329][T31494] __sys_sendmsg+0x269/0x350 [ 2251.489920][T31494] ? __pfx___sys_sendmsg+0x10/0x10 [ 2251.495047][T31494] ? __might_fault+0xaa/0x120 [ 2251.499722][T31494] ? __pfx_lock_release+0x10/0x10 [ 2251.504750][T31494] ? rcu_is_watching+0x15/0xb0 [ 2251.509513][T31494] ? trace_sys_enter+0x25/0x120 [ 2251.514368][T31494] do_syscall_64+0xf3/0x230 [ 2251.518875][T31494] ? clear_bhb_loop+0x35/0x90 [ 2251.523555][T31494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2251.529453][T31494] RIP: 0033:0x7fc86f585d29 [ 2251.533870][T31494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2251.553488][T31494] RSP: 002b:00007fc87049a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2251.561904][T31494] RAX: ffffffffffffffda RBX: 00007fc86f775fa0 RCX: 00007fc86f585d29 [ 2251.569905][T31494] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 2251.577875][T31494] RBP: 00007fc87049a090 R08: 0000000000000000 R09: 0000000000000000 [ 2251.585841][T31494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2251.593812][T31494] R13: 0000000000000000 R14: 00007fc86f775fa0 R15: 00007fffbc9949c8 [ 2251.601975][T31494] [ 2252.380320][T16767] . (unregistering): left promiscuous mode [ 2252.400515][T16767] . (unregistering): Released all slaves [ 2252.860913][T31509] overlayfs: failed to resolve './file0': -2 [ 2253.383459][T31510] overlayfs: failed to resolve './file0': -2 [ 2253.456595][T16767] bond0 (unregistering): Released all slaves [ 2253.464192][ T5871] usb 2-1: new full-speed USB device number 69 using dummy_hcd [ 2253.676476][ T5871] usb 2-1: config 0 has no interfaces? [ 2253.699656][ T5871] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=71.2b [ 2253.722518][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2253.731104][ T5871] usb 2-1: Product: syz [ 2253.735446][ T5871] usb 2-1: Manufacturer: syz [ 2253.740063][ T5871] usb 2-1: SerialNumber: syz [ 2253.761172][ T5871] usb 2-1: config 0 descriptor?? [ 2253.906606][T16767] bond1 (unregistering): Released all slaves [ 2254.044799][T31512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2254.053360][T31512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2254.417174][T25113] usb 2-1: USB disconnect, device number 69 [ 2254.426202][T16767] bond2 (unregistering): Released all slaves [ 2254.775768][T16767] bond3 (unregistering): Released all slaves [ 2255.255033][T16767] bond4 (unregistering): Released all slaves [ 2255.557745][T16767] tipc: Left network mode [ 2255.562692][T31415] chnl_net:caif_netlink_parms(): no params data found [ 2255.729510][T22271] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2255.885126][T27346] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 2256.045846][T27346] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2256.054592][T27346] usb 2-1: not running at top speed; connect to a high speed hub [ 2256.063592][T27346] usb 2-1: config 163 has an invalid descriptor of length 0, skipping remainder of the config [ 2256.076702][T27346] usb 2-1: config 163 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2256.094495][T27346] usb 2-1: config 163 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2256.113225][T27346] usb 2-1: config 163 interface 0 has no altsetting 0 [ 2256.138813][T27346] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2256.151197][T27346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2256.160136][T27346] usb 2-1: Product: syz [ 2256.165303][T27346] usb 2-1: Manufacturer: syz [ 2256.169998][T27346] usb 2-1: SerialNumber: syz [ 2256.261771][T31415] bridge0: port 1(bridge_slave_0) entered blocking state [ 2256.269297][T31415] bridge0: port 1(bridge_slave_0) entered disabled state [ 2256.283028][T31415] bridge_slave_0: entered allmulticast mode [ 2256.290796][T31415] bridge_slave_0: entered promiscuous mode [ 2256.319587][T31415] bridge0: port 2(bridge_slave_1) entered blocking state [ 2256.337778][T31415] bridge0: port 2(bridge_slave_1) entered disabled state [ 2256.355224][T31415] bridge_slave_1: entered allmulticast mode [ 2256.371152][T31415] bridge_slave_1: entered promiscuous mode [ 2256.438808][T16767] dummy0: left promiscuous mode [ 2256.455119][T27346] usb 2-1: bad CDC descriptors [ 2256.550740][T27346] usb 2-1: USB disconnect, device number 70 [ 2256.599026][T16767] hsr_slave_0: left promiscuous mode [ 2256.667834][T16767] hsr_slave_1: left promiscuous mode [ 2256.884629][T16767] veth1_macvtap: left promiscuous mode [ 2256.890540][T16767] veth0_macvtap: left promiscuous mode [ 2256.896938][T16767] veth1_vlan: left promiscuous mode [ 2256.902654][T16767] veth0_vlan: left promiscuous mode [ 2258.981618][T31581] tmpfs: Unknown parameter 'usrquota—Ÿéńnœµ' [ 2258.989397][T31582] tmpfs: Unknown parameter 'usrquota—Ÿéńnœµ' [ 2259.970201][T31587] netlink: 'syz.0.6058': attribute type 10 has an invalid length. [ 2260.084311][T31589] xt_l2tp: v2 sid > 0xffff: 262144 [ 2263.219705][T31580] IPv6: Can't replace route, no match found [ 2263.409629][T31415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2263.648317][T31610] overlay: filesystem on ./file1 not supported as upperdir [ 2263.682279][T31415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2263.842859][T31612] No source specified [ 2264.384364][T31415] team0: Port device team_slave_0 added [ 2265.012577][T31415] team0: Port device team_slave_1 added [ 2265.556400][T31415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2265.724279][T31415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2265.799232][T31415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2265.831581][T31415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2265.853910][T31415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2265.885085][T30921] Bluetooth: hci2: command tx timeout [ 2265.919040][T31415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2267.975597][T16767] IPVS: stop unused estimator thread 0... [ 2268.003492][T31415] hsr_slave_0: entered promiscuous mode [ 2268.072565][T31415] hsr_slave_1: entered promiscuous mode [ 2268.494192][T31415] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2268.501982][T31415] Cannot create hsr debugfs directory [ 2268.625745][ T29] audit: type=1800 audit(1735031843.222:1435): pid=31663 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.6085" name="bus" dev="overlay" ino=858 res=0 errno=0 [ 2268.733908][ T29] audit: type=1804 audit(1735031843.312:1436): pid=31665 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.6085" name="/newroot/151/bus/file0/bus" dev="overlay" ino=858 res=1 errno=0 [ 2269.480391][ T29] audit: type=1804 audit(1735031843.312:1437): pid=31665 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.6085" name="/newroot/151/bus/file0/bus" dev="overlay" ino=858 res=1 errno=0 [ 2270.802681][T31680] netlink: 'syz.0.6090': attribute type 1 has an invalid length. [ 2270.833275][T31680] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2270.898633][T31684] fuse: Bad value for 'fd' [ 2273.519995][T31415] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2273.777713][T31415] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2274.025913][T31415] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2274.121646][T31415] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2274.722788][T31415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2274.751956][T31415] 8021q: adding VLAN 0 to HW filter on device team0 [ 2274.809163][T22278] bridge0: port 1(bridge_slave_0) entered blocking state [ 2274.816347][T22278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2274.878597][T22293] bridge0: port 2(bridge_slave_1) entered blocking state [ 2274.885785][T22293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2274.927673][T31736] FAULT_INJECTION: forcing a failure. [ 2274.927673][T31736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2274.969264][T31736] CPU: 0 UID: 0 PID: 31736 Comm: syz.0.6108 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 2274.980093][T31736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2274.990180][T31736] Call Trace: [ 2274.993479][T31736] [ 2274.996427][T31736] dump_stack_lvl+0x241/0x360 [ 2275.001151][T31736] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2275.006387][T31736] ? __pfx__printk+0x10/0x10 [ 2275.011008][T31736] ? snprintf+0xda/0x120 [ 2275.015278][T31736] should_fail_ex+0x3b0/0x4e0 [ 2275.019988][T31736] _copy_to_user+0x31/0xb0 [ 2275.024434][T31736] simple_read_from_buffer+0xca/0x150 [ 2275.029842][T31736] proc_fail_nth_read+0x1e9/0x250 [ 2275.034900][T31736] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2275.040480][T31736] ? rw_verify_area+0x55e/0x6f0 [ 2275.045360][T31736] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2275.048972][T31415] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2275.050919][T31736] vfs_read+0x1fc/0xb70 [ 2275.065411][T31736] ? __pfx___mutex_lock+0x10/0x10 [ 2275.070465][T31736] ? __pfx_vfs_read+0x10/0x10 [ 2275.075182][T31736] ? __fget_files+0x2a/0x410 [ 2275.079802][T31736] ? __fget_files+0x395/0x410 [ 2275.084480][T31736] ? __fget_files+0x2a/0x410 [ 2275.089072][T31736] ksys_read+0x18f/0x2b0 [ 2275.093323][T31736] ? __pfx_ksys_read+0x10/0x10 [ 2275.098097][T31736] ? do_syscall_64+0x100/0x230 [ 2275.102863][T31736] ? do_syscall_64+0xb6/0x230 [ 2275.107543][T31736] do_syscall_64+0xf3/0x230 [ 2275.112046][T31736] ? clear_bhb_loop+0x35/0x90 [ 2275.116723][T31736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2275.122615][T31736] RIP: 0033:0x7f45fa98473c [ 2275.127033][T31736] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2275.146640][T31736] RSP: 002b:00007f45fb7c0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2275.155055][T31736] RAX: ffffffffffffffda RBX: 00007f45fab75fa0 RCX: 00007f45fa98473c [ 2275.163030][T31736] RDX: 000000000000000f RSI: 00007f45fb7c00a0 RDI: 0000000000000004 [ 2275.171016][T31736] RBP: 00007f45fb7c0090 R08: 0000000000000000 R09: 0000000000000000 [ 2275.178991][T31736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2275.186962][T31736] R13: 0000000000000000 R14: 00007f45fab75fa0 R15: 00007ffcc9b71a08 [ 2275.194973][T31736] [ 2275.198068][T31415] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2275.916362][T31753] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6113'. [ 2276.034633][T31415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2276.295530][T31763] 9pnet_fd: Insufficient options for proto=fd [ 2276.662111][T31769] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6116'. [ 2277.465607][T31415] veth0_vlan: entered promiscuous mode [ 2277.486604][T31415] veth1_vlan: entered promiscuous mode [ 2277.587626][T31415] veth0_macvtap: entered promiscuous mode [ 2277.602344][T31415] veth1_macvtap: entered promiscuous mode [ 2277.630320][T31415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2277.652265][T31415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2277.666873][T31415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2277.683485][T31415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2277.746286][T31415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2277.772334][T31415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2277.796411][T31415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2277.838476][T31415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2277.890148][T31415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2277.930837][T31415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2277.970175][T31415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2278.004061][T31415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2278.043366][T31415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2278.089870][T31415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2278.162580][T31415] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2278.205692][T31415] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2278.231435][T31415] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2278.243077][T30921] Bluetooth: hci5: unexpected event for opcode 0x0c1c [ 2278.252411][T31798] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 2278.258978][T31798] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 2278.267783][T31415] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2278.363986][T31798] vhci_hcd vhci_hcd.0: Device attached [ 2278.477971][T16780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2278.501903][T16780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2278.533921][ T5872] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 2278.553966][T16780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2278.574155][T16780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2279.036569][T31799] vhci_hcd: connection reset by peer [ 2279.045172][T16789] vhci_hcd: stop threads [ 2279.054152][T16789] vhci_hcd: release socket [ 2279.098364][T16789] vhci_hcd: disconnect device [ 2279.427338][T31813] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6126'. [ 2279.488113][T31819] netlink: 'syz.0.6128': attribute type 10 has an invalid length. [ 2281.564562][T31826] team0 (unregistering): Port device team_slave_0 removed [ 2281.623578][T31826] team0 (unregistering): Port device team_slave_1 removed [ 2282.392290][T31865] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6143'. [ 2283.165490][T31871] netlink: 'syz.5.6144': attribute type 10 has an invalid length. [ 2283.625498][ T5872] vhci_hcd: vhci_device speed not set [ 2284.053954][ T8] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 2284.225857][ T8] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2284.261745][ T8] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2284.321675][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2284.381051][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2284.449474][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2284.554934][ T8] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2284.590538][ T8] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2284.625543][ T8] usb 2-1: Product: syz [ 2284.629761][ T8] usb 2-1: Manufacturer: syz [ 2284.664411][ T8] cdc_wdm 2-1:1.0: skipping garbage [ 2284.706141][ T8] cdc_wdm 2-1:1.0: skipping garbage [ 2284.731208][ T8] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 2284.792476][ T8] cdc_wdm 2-1:1.0: Unknown control protocol [ 2284.906207][T31898] veth0_to_bridge: entered promiscuous mode [ 2285.072234][T31896] veth0_to_bridge: left promiscuous mode [ 2285.765164][T31912] random: crng reseeded on system resumption [ 2286.748491][T16767] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2287.522177][T31938] xt_l2tp: v2 sid > 0xffff: 262144 [ 2287.652188][T31942] netlink: 'syz.0.6164': attribute type 10 has an invalid length. [ 2288.019651][ T47] usb 2-1: USB disconnect, device number 71 [ 2288.710908][T31948] 9pnet_fd: Insufficient options for proto=fd [ 2293.261948][T31991] netlink: 'syz.7.6179': attribute type 1 has an invalid length. [ 2293.292150][T31991] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2293.305795][T31991] fuse: Bad value for 'fd' [ 2293.756549][T31998] overlay: filesystem on ./file1 not supported as upperdir [ 2294.399117][T32006] overlay: filesystem on ./file1 not supported as upperdir [ 2296.938612][T32018] overlay: filesystem on ./bus not supported as upperdir [ 2300.022228][T32055] netlink: 'syz.1.6195': attribute type 10 has an invalid length. [ 2300.094168][T32058] netlink: 'syz.5.6194': attribute type 1 has an invalid length. [ 2300.212065][T32058] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2300.268489][T32058] fuse: Bad value for 'fd' [ 2302.162897][T32075] netlink: 'syz.0.6191': attribute type 1 has an invalid length. [ 2302.278091][T32077] fuse: Unknown parameter 'rootmą' [ 2302.428118][T32075] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 2303.234917][T32083] .: renamed from bond0 (while UP) [ 2304.040425][T32085] overlay: filesystem on ./bus not supported as upperdir [ 2305.418166][T32106] serio: Serial port ttynull [ 2305.569973][T32118] netlink: 'syz.5.6209': attribute type 1 has an invalid length. [ 2305.611383][T32118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2305.694999][T32118] fuse: Bad value for 'fd' [ 2305.799269][T32125] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6214'. [ 2306.335094][T32132] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6216'. [ 2307.505060][T32143] overlay: filesystem on ./bus not supported as upperdir [ 2310.533581][T32172] 9pnet_fd: Insufficient options for proto=fd [ 2315.632191][T32225] 9pnet_fd: Insufficient options for proto=fd [ 2315.804086][T32229] 9pnet_fd: Insufficient options for proto=fd [ 2317.128458][T32239] netlink: 'syz.3.6246': attribute type 10 has an invalid length. [ 2317.186773][T32239] team0: Port device netdevsim0 added [ 2317.525561][T12189] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 2317.760706][T12189] usb 2-1: Using ep0 maxpacket: 8 [ 2317.886141][T22292] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2317.913996][T12189] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2317.946407][T12189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2317.979433][T12189] usb 2-1: Product: syz [ 2318.012261][T12189] usb 2-1: Manufacturer: syz [ 2318.027730][T12189] usb 2-1: SerialNumber: syz [ 2318.055203][T12189] usb 2-1: config 0 descriptor?? [ 2318.419167][T12189] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2320.161227][T12189] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2320.213263][T12189] usb 2-1: USB disconnect, device number 72 [ 2320.319842][T32266] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6255'. [ 2321.487368][T32275] syz.3.6258 (32275): drop_caches: 2 [ 2322.495052][T14221] IPVS: starting estimator thread 0... [ 2322.623976][T32286] IPVS: using max 39 ests per chain, 93600 per kthread [ 2322.770903][T32289] netlink: 'syz.1.6262': attribute type 10 has an invalid length. [ 2323.039953][ T5827] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2323.106520][ T5827] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2323.142204][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2323.172924][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2323.182618][ T5827] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2323.190128][ T5827] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2324.099722][T22292] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2325.319582][T32308] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6267'. [ 2325.340634][T30921] Bluetooth: hci3: command tx timeout [ 2325.750114][T32313] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 2325.964130][T22292] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2326.258610][T22292] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2326.341094][T32287] chnl_net:caif_netlink_parms(): no params data found [ 2326.419519][T32323] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6272'. [ 2326.510765][T22292] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2326.567465][T32323] batadv0: entered promiscuous mode [ 2326.577056][T32330] netlink: 'syz.7.6275': attribute type 10 has an invalid length. [ 2326.604587][T32323] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2326.630475][T32323] batadv0: left promiscuous mode [ 2326.759152][T32330] team0: Port device netdevsim0 added [ 2326.769666][T32331] netlink: 'syz.1.6273': attribute type 15 has an invalid length. [ 2326.944061][ T25] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 2327.032508][T32287] bridge0: port 1(bridge_slave_0) entered blocking state [ 2327.040200][T32287] bridge0: port 1(bridge_slave_0) entered disabled state [ 2327.047973][T32287] bridge_slave_0: entered allmulticast mode [ 2327.055959][T32287] bridge_slave_0: entered promiscuous mode [ 2327.064300][T32287] bridge0: port 2(bridge_slave_1) entered blocking state [ 2327.071619][T32287] bridge0: port 2(bridge_slave_1) entered disabled state [ 2327.092965][T32287] bridge_slave_1: entered allmulticast mode [ 2327.110592][T32287] bridge_slave_1: entered promiscuous mode [ 2327.134388][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 2327.156114][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 2327.196775][ T25] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 2327.314153][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 2327.327496][ T25] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 2327.350713][ T25] usb 2-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=8f.af [ 2327.382782][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2327.405643][T30921] Bluetooth: hci3: command tx timeout [ 2327.424892][ T25] usb 2-1: Product: syz [ 2327.429179][ T25] usb 2-1: Manufacturer: syz [ 2328.415491][ T25] usb 2-1: SerialNumber: syz [ 2328.422707][ T25] usb 2-1: config 0 descriptor?? [ 2328.433216][ T25] iuu_phoenix 2-1:0.0: iuu_phoenix converter detected [ 2329.011143][T32287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2329.181530][ T25] usb 2-1: iuu_phoenix converter now attached to ttyUSB0 [ 2329.191588][ T25] usb 2-1: USB disconnect, device number 73 [ 2329.227713][ T25] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 2329.266242][T32355] xt_l2tp: v2 sid > 0xffff: 262144 [ 2329.333225][T32287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2329.371017][ T25] iuu_phoenix 2-1:0.0: device disconnected [ 2329.484865][T30921] Bluetooth: hci3: command tx timeout [ 2329.497667][T22292] bridge_slave_1: left allmulticast mode [ 2329.503374][T22292] bridge_slave_1: left promiscuous mode [ 2329.538395][T22292] bridge0: port 2(bridge_slave_1) entered disabled state [ 2329.727594][T22292] bridge_slave_0: left allmulticast mode [ 2329.746941][T22292] bridge_slave_0: left promiscuous mode [ 2329.766739][T22292] bridge0: port 1(bridge_slave_0) entered disabled state [ 2330.874319][T12189] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 2331.072842][T12189] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2331.094689][T12189] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2331.114533][T12189] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2331.123644][T12189] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2331.144104][T12189] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2331.166893][T32374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6284'. [ 2331.167993][T12189] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2331.199336][T12189] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2331.223865][T12189] usb 4-1: Product: syz [ 2331.228086][T12189] usb 4-1: Manufacturer: syz [ 2331.256758][T12189] cdc_wdm 4-1:1.0: skipping garbage [ 2331.262040][T12189] cdc_wdm 4-1:1.0: skipping garbage [ 2331.289281][T12189] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 2331.309094][T12189] cdc_wdm 4-1:1.0: Unknown control protocol [ 2331.480103][T10023] usb 4-1: USB disconnect, device number 61 [ 2331.554017][T30921] Bluetooth: hci3: command tx timeout [ 2331.715927][T22292] . (unregistering): (slave bond_slave_0): Releasing backup interface [ 2331.741549][T22292] . (unregistering): (slave bond_slave_1): Releasing backup interface [ 2331.752434][T22292] . (unregistering): Released all slaves [ 2332.148114][T22292] bond1 (unregistering): Released all slaves [ 2332.153957][T10023] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 2332.306617][T10023] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2332.324031][T10023] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2332.343921][T10023] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2332.355732][T10023] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2332.383765][T10023] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2332.411851][T10023] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2332.423272][T10023] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2332.431977][T10023] usb 4-1: Product: syz [ 2332.442120][T10023] usb 4-1: Manufacturer: syz [ 2332.450832][T10023] cdc_wdm 4-1:1.0: skipping garbage [ 2332.456632][T10023] cdc_wdm 4-1:1.0: skipping garbage [ 2332.462962][T10023] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 2332.470540][T10023] cdc_wdm 4-1:1.0: Unknown control protocol [ 2332.668694][T32371] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6283'. [ 2332.680556][T22292] bond0 (unregistering): Released all slaves [ 2332.760624][T32287] team0: Port device team_slave_0 added [ 2332.776317][T32287] team0: Port device team_slave_1 added [ 2332.857056][T32371] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 2332.885019][T32371] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 2332.928210][T32371] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 2332.944031][T32377] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:20000 [ 2332.967149][T32371] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 2333.053283][T32371] geneve2: entered allmulticast mode [ 2333.177878][T32064] usb 4-1: USB disconnect, device number 62 [ 2333.939487][T32287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2334.442162][T32287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2334.653082][T32287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2334.885901][T32287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2334.892901][T32287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2334.932493][T32400] overlay: filesystem on ./file1 not supported as upperdir [ 2334.978573][T32287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2335.256683][T32405] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6294'. [ 2335.651517][T32287] hsr_slave_0: entered promiscuous mode [ 2335.708720][T32287] hsr_slave_1: entered promiscuous mode [ 2335.766538][T32287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2335.784549][T32287] Cannot create hsr debugfs directory [ 2335.821555][T22292] hsr_slave_0: left promiscuous mode [ 2335.837728][T22292] hsr_slave_1: left promiscuous mode [ 2335.887045][T22292] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2335.909706][T22292] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2335.964621][T22292] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2335.994238][T22292] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2336.113599][T22292] veth1_macvtap: left promiscuous mode [ 2336.119464][T22292] veth0_macvtap: left promiscuous mode [ 2336.125452][T22292] veth1_vlan: left promiscuous mode [ 2336.130937][T22292] veth0_vlan: left promiscuous mode [ 2337.431781][T32433] netlink: 'syz.3.6304': attribute type 1 has an invalid length. [ 2337.443964][T32433] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6304'. [ 2338.475562][T32441] xt_l2tp: v2 sid > 0xffff: 262144 [ 2339.136832][T32445] FAULT_INJECTION: forcing a failure. [ 2339.136832][T32445] name failslab, interval 1, probability 0, space 0, times 0 [ 2339.153742][T32445] CPU: 1 UID: 0 PID: 32445 Comm: syz.3.6307 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 2339.164565][T32445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2339.174647][T32445] Call Trace: [ 2339.177950][T32445] [ 2339.180902][T32445] dump_stack_lvl+0x241/0x360 [ 2339.185618][T32445] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2339.190858][T32445] ? __pfx__printk+0x10/0x10 [ 2339.195485][T32445] ? __kmalloc_noprof+0xb5/0x4c0 [ 2339.200449][T32445] ? __pfx___might_resched+0x10/0x10 [ 2339.205775][T32445] ? __asan_memset+0x23/0x50 [ 2339.210394][T32445] should_fail_ex+0x3b0/0x4e0 [ 2339.215106][T32445] should_failslab+0xac/0x100 [ 2339.219813][T32445] __kmalloc_noprof+0xdd/0x4c0 [ 2339.224611][T32445] ? security_key_alloc+0x50/0x390 [ 2339.229753][T32445] security_key_alloc+0x50/0x390 [ 2339.234724][T32445] key_alloc+0x883/0xff0 [ 2339.239008][T32445] keyring_alloc+0x44/0xb0 [ 2339.243453][T32445] join_session_keyring+0x152/0x470 [ 2339.248687][T32445] lookup_user_key+0x595/0x1500 [ 2339.253558][T32445] ? __pfx_lookup_user_key+0x10/0x10 [ 2339.258866][T32445] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 2339.265038][T32445] ? __might_fault+0xc6/0x120 [ 2339.269722][T32445] ? _copy_from_user+0x99/0xc0 [ 2339.274504][T32445] ? memdup_user+0x9f/0xc0 [ 2339.278938][T32445] __se_sys_add_key+0x2fa/0x490 [ 2339.283802][T32445] ? __pfx___se_sys_add_key+0x10/0x10 [ 2339.289205][T32445] ? do_syscall_64+0x100/0x230 [ 2339.293991][T32445] ? __x64_sys_add_key+0x20/0xc0 [ 2339.299016][T32445] do_syscall_64+0xf3/0x230 [ 2339.303524][T32445] ? clear_bhb_loop+0x35/0x90 [ 2339.308204][T32445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2339.314105][T32445] RIP: 0033:0x7fd48bf85d29 [ 2339.318522][T32445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2339.338133][T32445] RSP: 002b:00007fd48cdc6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 2339.346552][T32445] RAX: ffffffffffffffda RBX: 00007fd48c175fa0 RCX: 00007fd48bf85d29 [ 2339.354523][T32445] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000020000000 [ 2339.362489][T32445] RBP: 00007fd48cdc6090 R08: fffffffffffffffd R09: 0000000000000000 [ 2339.370457][T32445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2339.378424][T32445] R13: 0000000000000000 R14: 00007fd48c175fa0 R15: 00007ffd9759be48 [ 2339.386408][T32445] [ 2339.724856][T32450] overlay: filesystem on ./file1 not supported as upperdir [ 2340.427052][T32457] overlayfs: failed to resolve './file0': -2 [ 2340.911394][T32455] overlayfs: failed to resolve './file0': -2 [ 2340.992607][T32463] 9pnet_fd: Insufficient options for proto=fd [ 2342.054477][T32456] .: renamed from bond0 (while UP) [ 2343.514070][ T5872] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 2343.674978][ T5872] usb 4-1: Using ep0 maxpacket: 8 [ 2343.677599][T22292] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2343.699095][ T5872] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60 [ 2343.728353][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2343.756569][ T5872] usb 4-1: Product: syz [ 2343.769004][ T5872] usb 4-1: Manufacturer: syz [ 2343.789893][ T5872] usb 4-1: SerialNumber: syz [ 2343.816859][ T5872] r8152-cfgselector 4-1: Unknown version 0x0000 [ 2343.839033][ T5872] r8152-cfgselector 4-1: config 0 descriptor?? [ 2343.900656][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2343.920853][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2343.932198][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2343.954433][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2343.962152][ T5827] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2343.972117][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2344.104520][T22292] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2344.312045][T22292] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2344.397031][T32483] FAULT_INJECTION: forcing a failure. [ 2344.397031][T32483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2344.432528][T32483] CPU: 0 UID: 0 PID: 32483 Comm: syz.3.6321 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 2344.443359][T32483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2344.453447][T32483] Call Trace: [ 2344.456729][T32483] [ 2344.459656][T32483] dump_stack_lvl+0x241/0x360 [ 2344.464343][T32483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2344.469542][T32483] ? __pfx__printk+0x10/0x10 [ 2344.474129][T32483] ? arch_stack_walk+0xfd/0x150 [ 2344.478977][T32483] ? __pfx_lock_release+0x10/0x10 [ 2344.484009][T32483] should_fail_ex+0x3b0/0x4e0 [ 2344.488706][T32483] _copy_from_user+0x2f/0xc0 [ 2344.493298][T32483] snd_ctl_ioctl+0x360/0x1880 [ 2344.497981][T32483] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 2344.503100][T32483] ? kasan_save_track+0x51/0x80 [ 2344.507980][T32483] ? kasan_save_track+0x3f/0x80 [ 2344.512832][T32483] ? kasan_save_free_info+0x40/0x50 [ 2344.518031][T32483] ? __kasan_slab_free+0x59/0x70 [ 2344.522969][T32483] ? kfree+0x196/0x430 [ 2344.527037][T32483] ? tomoyo_path_number_perm+0x679/0x860 [ 2344.532664][T32483] ? security_file_ioctl+0xc6/0x2a0 [ 2344.537859][T32483] ? __se_sys_ioctl+0x46/0x170 [ 2344.542623][T32483] ? do_syscall_64+0xf3/0x230 [ 2344.547297][T32483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2344.553367][T32483] ? do_vfs_ioctl+0xf07/0x2e40 [ 2344.558132][T32483] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 2344.563159][T32483] ? mark_lock+0x9a/0x360 [ 2344.567511][T32483] ? tomoyo_path_number_perm+0x6f9/0x860 [ 2344.573136][T32483] ? __lock_acquire+0x1397/0x2100 [ 2344.578158][T32483] ? tomoyo_path_number_perm+0x206/0x860 [ 2344.583788][T32483] ? smack_log+0x123/0x540 [ 2344.588209][T32483] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2344.594193][T32483] ? __pfx_smack_log+0x10/0x10 [ 2344.598961][T32483] ? smk_access+0x4ab/0x4e0 [ 2344.603469][T32483] ? smk_tskacc+0x300/0x370 [ 2344.607990][T32483] ? smack_file_ioctl+0x2f7/0x3a0 [ 2344.613019][T32483] ? __pfx_smack_file_ioctl+0x10/0x10 [ 2344.618397][T32483] ? __fget_files+0x2a/0x410 [ 2344.623022][T32483] ? __fget_files+0x2a/0x410 [ 2344.627614][T32483] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 2344.632732][T32483] __se_sys_ioctl+0xf5/0x170 [ 2344.637334][T32483] do_syscall_64+0xf3/0x230 [ 2344.641843][T32483] ? clear_bhb_loop+0x35/0x90 [ 2344.646518][T32483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2344.652409][T32483] RIP: 0033:0x7fd48bf85d29 [ 2344.656821][T32483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2344.676426][T32483] RSP: 002b:00007fd48cdc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2344.684840][T32483] RAX: ffffffffffffffda RBX: 00007fd48c175fa0 RCX: 00007fd48bf85d29 [ 2344.692810][T32483] RDX: 0000000020000240 RSI: 00000000c1105517 RDI: 0000000000000004 [ 2344.700782][T32483] RBP: 00007fd48cdc6090 R08: 0000000000000000 R09: 0000000000000000 [ 2344.708749][T32483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2344.716721][T32483] R13: 0000000000000000 R14: 00007fd48c175fa0 R15: 00007ffd9759be48 [ 2344.724702][T32483] [ 2344.847320][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2344.991859][T22292] team0: Port device netdevsim0 removed [ 2345.002196][T22292] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2345.097141][T32287] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2345.147461][T32287] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2345.202852][T32287] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2345.274442][T32287] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2346.050802][T30921] Bluetooth: hci0: command tx timeout [ 2346.379956][T32513] overlayfs: failed to resolve './file1': -2 [ 2346.478245][T22292] bond0 (unregistering): (slave gretap1): Releasing active interface [ 2346.611205][ T8] r8152-cfgselector 4-1: USB disconnect, device number 63 [ 2346.739386][T32519] netlink: 256 bytes leftover after parsing attributes in process `syz.0.6327'. [ 2347.093954][T30921] Bluetooth: hci2: command 0x0406 tx timeout [ 2347.446248][T32519] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6327'. [ 2348.114459][ T5827] Bluetooth: hci0: command tx timeout [ 2348.468158][T22292] . (unregistering): Released all slaves [ 2349.372641][T22292] bond0 (unregistering): Released all slaves [ 2350.202772][T30921] Bluetooth: hci0: command tx timeout [ 2350.235518][T26805] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2350.672603][T22292] bond1 (unregistering): Released all slaves [ 2351.596888][T22292] bond2 (unregistering): Released all slaves [ 2351.889985][T32493] chnl_net:caif_netlink_parms(): no params data found [ 2352.273925][T30921] Bluetooth: hci0: command tx timeout [ 2353.161589][T32556] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6337'. [ 2353.273762][T32556] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6337'. [ 2353.669272][T32562] sctp: [Deprecated]: syz.0.6339 (pid 32562) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2353.669272][T32562] Use struct sctp_sack_info instead [ 2354.021088][T22292] hsr_slave_0: left promiscuous mode [ 2354.052422][T22292] hsr_slave_1: left promiscuous mode [ 2354.188909][T22292] veth1_macvtap: left promiscuous mode [ 2354.216386][T22292] veth0_macvtap: left promiscuous mode [ 2354.222043][T22292] veth1_vlan: left promiscuous mode [ 2354.249274][T22292] veth0_vlan: left promiscuous mode [ 2354.853794][T10023] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 2355.013933][T10023] usb 2-1: Using ep0 maxpacket: 32 [ 2355.024405][T10023] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2355.035910][T10023] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2355.053809][T10023] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 2355.068088][T10023] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2355.107582][T10023] usb 2-1: config 0 descriptor?? [ 2355.518169][T10023] kye 0003:0458:5016.0020: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 2355.547303][T10023] kye 0003:0458:5016.0020: hidraw0: USB HID v0.00 Device [HID 0458:5016] on usb-dummy_hcd.1-1/input0 [ 2355.577351][T10023] kye 0003:0458:5016.0020: tablet-enabling feature report not found [ 2355.602235][T10023] kye 0003:0458:5016.0020: tablet enabling failed [ 2356.914682][T32593] 9pnet_fd: Insufficient options for proto=fd [ 2357.869390][T32596] 9pnet_fd: Insufficient options for proto=fd [ 2359.093269][T32493] bridge0: port 1(bridge_slave_0) entered blocking state [ 2359.114493][ T25] usb 2-1: USB disconnect, device number 74 [ 2359.123303][T32493] bridge0: port 1(bridge_slave_0) entered disabled state [ 2359.137473][T32493] bridge_slave_0: entered allmulticast mode [ 2359.161675][T32493] bridge_slave_0: entered promiscuous mode [ 2359.189439][T32605] FAULT_INJECTION: forcing a failure. [ 2359.189439][T32605] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2359.220669][T32493] bridge0: port 2(bridge_slave_1) entered blocking state [ 2359.238260][T32605] CPU: 0 UID: 0 PID: 32605 Comm: syz.1.6351 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 2359.249052][T32605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2359.259098][T32605] Call Trace: [ 2359.262367][T32605] [ 2359.265290][T32605] dump_stack_lvl+0x241/0x360 [ 2359.269979][T32605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2359.275190][T32605] ? __pfx__printk+0x10/0x10 [ 2359.279785][T32605] ? __pfx_lock_release+0x10/0x10 [ 2359.284838][T32605] should_fail_ex+0x3b0/0x4e0 [ 2359.289538][T32605] _copy_from_user+0x2f/0xc0 [ 2359.294124][T32605] copy_msghdr_from_user+0xae/0x680 [ 2359.299336][T32605] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2359.305162][T32605] ? __fget_files+0x2a/0x410 [ 2359.309755][T32605] ? __fget_files+0x2a/0x410 [ 2359.314342][T32605] __sys_sendmsg+0x209/0x350 [ 2359.318933][T32605] ? __pfx_lock_release+0x10/0x10 [ 2359.323967][T32605] ? __pfx___sys_sendmsg+0x10/0x10 [ 2359.329075][T32605] ? __pfx_vfs_write+0x10/0x10 [ 2359.333858][T32605] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2359.340202][T32605] ? do_syscall_64+0x100/0x230 [ 2359.344999][T32605] ? do_syscall_64+0xb6/0x230 [ 2359.349676][T32605] do_syscall_64+0xf3/0x230 [ 2359.354177][T32605] ? clear_bhb_loop+0x35/0x90 [ 2359.358840][T32605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2359.364728][T32605] RIP: 0033:0x7fc86f585d29 [ 2359.369139][T32605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2359.388739][T32605] RSP: 002b:00007fc87049a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2359.397147][T32605] RAX: ffffffffffffffda RBX: 00007fc86f775fa0 RCX: 00007fc86f585d29 [ 2359.405113][T32605] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 2359.413075][T32605] RBP: 00007fc87049a090 R08: 0000000000000000 R09: 0000000000000000 [ 2359.421057][T32605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2359.429033][T32605] R13: 0000000000000000 R14: 00007fc86f775fa0 R15: 00007fffbc9949c8 [ 2359.437012][T32605] [ 2359.441496][T32493] bridge0: port 2(bridge_slave_1) entered disabled state [ 2359.449748][T32493] bridge_slave_1: entered allmulticast mode [ 2359.463536][T32493] bridge_slave_1: entered promiscuous mode [ 2359.527612][T32287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2359.544972][T30921] Bluetooth: hci2: unexpected event 0x30 length: 9 > 3 [ 2359.736875][T32493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2359.800120][T32493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2359.912547][T32619] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6356'. [ 2359.933205][T32619] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6356'. [ 2360.016326][T32493] team0: Port device team_slave_0 added [ 2360.072384][T32493] team0: Port device team_slave_1 added [ 2360.129959][T32625] netlink: 1264 bytes leftover after parsing attributes in process `syz.0.6357'. [ 2360.179275][T32287] 8021q: adding VLAN 0 to HW filter on device team0 [ 2360.186935][T32629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6360'. [ 2360.244481][T32493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2360.251587][T32493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2360.300890][T32493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2360.331582][T22292] IPVS: stop unused estimator thread 0... [ 2360.339067][T30165] bridge0: port 1(bridge_slave_0) entered blocking state [ 2360.346254][T30165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2360.356689][T30165] bridge0: port 2(bridge_slave_1) entered blocking state [ 2360.363835][T30165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2360.407831][T32493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2360.434487][T32493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2360.523932][T32493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2360.635794][T32493] hsr_slave_0: entered promiscuous mode [ 2360.651776][T32493] hsr_slave_1: entered promiscuous mode [ 2360.668818][T32493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2360.688860][T32493] Cannot create hsr debugfs directory [ 2360.998055][T32645] overlayfs: failed to resolve './file1': -2 [ 2361.861511][T32493] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2361.883951][T32493] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2362.040054][T32493] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2362.064027][T32493] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2362.121073][T32287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2362.217321][T32493] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2362.288228][T32493] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2362.426833][T32666] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6368'. [ 2362.446418][T32666] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6368'. [ 2362.476154][T32493] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2362.508519][T32493] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2362.816537][T32493] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2362.853503][T32493] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2362.878967][T32493] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2362.909193][T32493] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2362.972262][T32287] veth0_vlan: entered promiscuous mode [ 2363.004681][T32287] veth1_vlan: entered promiscuous mode [ 2363.106290][T32287] veth0_macvtap: entered promiscuous mode [ 2363.144403][T32287] veth1_macvtap: entered promiscuous mode [ 2363.166750][T32493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2363.206883][T32493] 8021q: adding VLAN 0 to HW filter on device team0 [ 2363.235057][T22273] bridge0: port 1(bridge_slave_0) entered blocking state [ 2363.242229][T22273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2363.274475][T32287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2363.293842][T32287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2363.304001][T32287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2363.322511][T32287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2363.332803][T32287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2363.354343][T32287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2363.366003][T32287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2363.378948][T22273] bridge0: port 2(bridge_slave_1) entered blocking state [ 2363.386102][T22273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2363.414076][ T8] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 2363.429198][T32287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2363.440331][T32287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2363.461027][T32287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2363.474069][T32287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2363.494097][T32287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2363.504858][T32287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2363.525760][T32287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2363.547784][T32287] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2363.557390][T32287] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2363.568000][T32287] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2363.576890][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 2363.583055][T32287] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2363.596085][ T8] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=73.60 [ 2363.605679][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2363.630467][ T8] usb 4-1: Product: syz [ 2363.651658][ T8] usb 4-1: Manufacturer: syz [ 2363.664166][ T8] usb 4-1: SerialNumber: syz [ 2363.678121][ T8] r8152-cfgselector 4-1: Unknown version 0x0000 [ 2363.688356][ T8] r8152-cfgselector 4-1: config 0 descriptor?? [ 2363.800982][T16780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2363.820004][T16780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2363.890200][T16789] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2363.923953][T16789] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2364.030808][T32493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2364.112981][T32493] veth0_vlan: entered promiscuous mode [ 2364.145904][T32493] veth1_vlan: entered promiscuous mode [ 2364.270545][T32493] veth0_macvtap: entered promiscuous mode [ 2364.301106][T32690] snd_dummy snd_dummy.0: control 0:0:64:syz0:0 is already present [ 2364.843031][T32493] veth1_macvtap: entered promiscuous mode [ 2365.165864][T32493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2365.221870][T32493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2365.288463][T32493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2365.324465][T32493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2365.367891][T32493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2365.409348][T32493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2365.470906][T32493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2365.534611][T32493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2365.569849][T32493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2365.649978][T32493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2365.700196][T32493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2365.753313][T32493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2365.810045][T32493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2365.851814][T32493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2365.892887][T32493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2365.946134][T32493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2365.984514][T32493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2366.033180][T32493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2366.113204][T32493] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2366.158076][T32493] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2366.203871][T32493] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2366.213550][T32493] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2366.270218][T32682] r8152-cfgselector 4-1: USB disconnect, device number 64 [ 2366.660596][T22292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2366.673256][T22292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2366.771609][T30165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2366.802447][T30165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2368.043304][T32713] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6318'. [ 2368.107151][T32713] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6318'. [ 2368.328548][T32715] netlink: 256 bytes leftover after parsing attributes in process `syz.3.6377'. [ 2368.353899][T32715] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6377'. [ 2368.614324][T32723] 9pnet_fd: Insufficient options for proto=fd [ 2368.849665][T32728] nfs: Bad value for 'source' [ 2373.469329][T32749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6387'. [ 2374.055014][T32757] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6390'. [ 2374.094353][T32757] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6390'. [ 2374.344962][T32762] netlink: 'syz.3.6392': attribute type 1 has an invalid length. [ 2374.464749][T32762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2374.518480][T32764] bond0: (slave geneve3): making interface the new active one [ 2374.575794][T32764] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 2374.610821][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2375.884672][ T323] FAULT_INJECTION: forcing a failure. [ 2375.884672][ T323] name failslab, interval 1, probability 0, space 0, times 0 [ 2375.920805][ T323] CPU: 0 UID: 0 PID: 323 Comm: syz.2.6400 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 2375.931464][ T323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2375.941632][ T323] Call Trace: [ 2375.944924][ T323] [ 2375.947859][ T323] dump_stack_lvl+0x241/0x360 [ 2375.952558][ T323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2375.957758][ T323] ? __pfx__printk+0x10/0x10 [ 2375.962383][ T323] should_fail_ex+0x3b0/0x4e0 [ 2375.967081][ T323] should_failslab+0xac/0x100 [ 2375.971760][ T323] ? skb_clone+0x20c/0x390 [ 2375.976181][ T323] kmem_cache_alloc_noprof+0x70/0x380 [ 2375.981593][ T323] skb_clone+0x20c/0x390 [ 2375.985851][ T323] __netlink_deliver_tap+0x3cc/0x7f0 [ 2375.991149][ T323] ? netlink_deliver_tap+0x2e/0x1b0 [ 2375.996353][ T323] netlink_deliver_tap+0x19d/0x1b0 [ 2376.001472][ T323] netlink_unicast+0x7c4/0x990 [ 2376.006256][ T323] ? __pfx_netlink_unicast+0x10/0x10 [ 2376.011540][ T323] ? __virt_addr_valid+0x45f/0x530 [ 2376.016657][ T323] ? __phys_addr_symbol+0x2f/0x70 [ 2376.021676][ T323] ? __check_object_size+0x47a/0x730 [ 2376.026965][ T323] netlink_sendmsg+0x8e4/0xcb0 [ 2376.031737][ T323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2376.037039][ T323] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2376.042335][ T323] __sock_sendmsg+0x221/0x270 [ 2376.047033][ T323] ____sys_sendmsg+0x52a/0x7e0 [ 2376.051813][ T323] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2376.057116][ T323] ? __fget_files+0x2a/0x410 [ 2376.061718][ T323] ? __sys_sendmmsg+0x392/0x720 [ 2376.066573][ T323] ? __might_fault+0xaa/0x120 [ 2376.071268][ T323] __sys_sendmmsg+0x36a/0x720 [ 2376.075986][ T323] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2376.081222][ T323] ? __pfx_lock_release+0x10/0x10 [ 2376.086264][ T323] ? kstrtouint_from_user+0x128/0x190 [ 2376.091680][ T323] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 2376.097587][ T323] ? ksys_write+0x22a/0x2b0 [ 2376.102106][ T323] ? __pfx_lock_release+0x10/0x10 [ 2376.107164][ T323] ? vfs_write+0x730/0xd30 [ 2376.111598][ T323] ? __mutex_unlock_slowpath+0x21e/0x790 [ 2376.117251][ T323] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2376.123233][ T323] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2376.129566][ T323] ? do_syscall_64+0x100/0x230 [ 2376.134348][ T323] __x64_sys_sendmmsg+0xa0/0xb0 [ 2376.139203][ T323] do_syscall_64+0xf3/0x230 [ 2376.143715][ T323] ? clear_bhb_loop+0x35/0x90 [ 2376.148485][ T323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2376.154379][ T323] RIP: 0033:0x7f37e5f85d29 [ 2376.158794][ T323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2376.178412][ T323] RSP: 002b:00007f37e6d5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2376.186839][ T323] RAX: ffffffffffffffda RBX: 00007f37e6175fa0 RCX: 00007f37e5f85d29 [ 2376.194818][ T323] RDX: 04000000000001f2 RSI: 0000000020000000 RDI: 0000000000000003 [ 2376.202787][ T323] RBP: 00007f37e6d5e090 R08: 0000000000000000 R09: 0000000000000000 [ 2376.210755][ T323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2376.218723][ T323] R13: 0000000000000000 R14: 00007f37e6175fa0 R15: 00007fff07a85c38 [ 2376.226712][ T323] [ 2379.623893][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2379.642355][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2379.652156][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2379.663232][ T5827] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2379.683051][ T5827] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2379.692320][ T5827] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2380.225856][ T358] chnl_net:caif_netlink_parms(): no params data found [ 2380.696153][ T358] bridge0: port 1(bridge_slave_0) entered blocking state [ 2380.955733][ T358] bridge0: port 1(bridge_slave_0) entered disabled state [ 2381.020457][ T358] bridge_slave_0: entered allmulticast mode [ 2381.046570][ T358] bridge_slave_0: entered promiscuous mode [ 2381.125592][ T358] bridge0: port 2(bridge_slave_1) entered blocking state [ 2381.134020][ T358] bridge0: port 2(bridge_slave_1) entered disabled state [ 2381.141424][ T358] bridge_slave_1: entered allmulticast mode [ 2381.149143][ T358] bridge_slave_1: entered promiscuous mode [ 2381.265016][T22271] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2381.349752][ T358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2381.405973][ T358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2381.739397][ T358] team0: Port device team_slave_0 added [ 2381.775485][ T25] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 2381.787860][ T358] team0: Port device team_slave_1 added [ 2381.793880][T30921] Bluetooth: hci1: command tx timeout [ 2381.943795][ T25] usb 10-1: Using ep0 maxpacket: 16 [ 2381.968182][ T25] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 2381.980258][ T358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2381.991334][ T25] usb 10-1: config 0 has no interface number 0 [ 2382.004273][ T358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2382.015762][ T25] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 2382.091250][ T358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2382.108609][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2382.143342][ T25] usb 10-1: Product: syz [ 2382.145745][ T358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2382.156618][ T25] usb 10-1: Manufacturer: syz [ 2382.171460][ T25] usb 10-1: SerialNumber: syz [ 2382.187742][ T25] usb 10-1: config 0 descriptor?? [ 2382.203656][ T358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2382.207010][ T25] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 2382.238168][ T403] 9pnet_fd: Insufficient options for proto=fd [ 2382.324275][ T358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2382.658400][ T25] gspca_spca1528: reg_w err -71 [ 2382.683838][ T25] spca1528 10-1:0.1: probe with driver spca1528 failed with error -71 [ 2382.695850][ T25] usb 10-1: USB disconnect, device number 38 [ 2382.883600][ T358] hsr_slave_0: entered promiscuous mode [ 2383.006964][ T399] netlink: ct family unspecified [ 2383.050754][ T399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 2383.064252][ T358] hsr_slave_1: entered promiscuous mode [ 2383.094173][ T358] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2383.104109][ T358] Cannot create hsr debugfs directory [ 2383.415389][T27346] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 2384.616852][T30921] Bluetooth: hci1: command tx timeout [ 2384.865511][T27346] usb 4-1: Using ep0 maxpacket: 8 [ 2385.504132][T27346] usb 4-1: device descriptor read/all, error -71 [ 2386.534404][ T5827] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 2386.544400][ T5827] Bluetooth: hci2: Injecting HCI hardware error event [ 2386.557278][ T5827] Bluetooth: hci2: hardware error 0x00 [ 2386.708712][T30921] Bluetooth: hci1: command tx timeout [ 2387.837066][ T358] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2387.879121][ T358] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2387.942005][ T358] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2388.024715][ T358] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2388.476566][ T358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2388.761433][T30921] Bluetooth: hci1: command tx timeout [ 2389.032044][ T5827] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2389.066527][ T358] 8021q: adding VLAN 0 to HW filter on device team0 [ 2389.190262][T16789] bridge0: port 1(bridge_slave_0) entered blocking state [ 2389.197382][T16789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2389.224933][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2389.240211][T26805] bridge0: port 2(bridge_slave_1) entered blocking state [ 2389.247406][T26805] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2389.385663][ T476] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6441'. [ 2389.883199][ T490] overlay: filesystem on ./bus not supported as upperdir [ 2390.015035][ T358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2390.268277][ T498] FAULT_INJECTION: forcing a failure. [ 2390.268277][ T498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2390.305314][ T498] CPU: 1 UID: 0 PID: 498 Comm: syz.9.6447 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 2390.315974][ T498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2390.326064][ T498] Call Trace: [ 2390.329375][ T498] [ 2390.332334][ T498] dump_stack_lvl+0x241/0x360 [ 2390.337055][ T498] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2390.342302][ T498] ? __pfx__printk+0x10/0x10 [ 2390.346937][ T498] ? __pfx_lock_release+0x10/0x10 [ 2390.352007][ T498] should_fail_ex+0x3b0/0x4e0 [ 2390.356735][ T498] _copy_from_iter+0x1e9/0x1c20 [ 2390.361627][ T498] ? __virt_addr_valid+0x183/0x530 [ 2390.366791][ T498] ? __alloc_skb+0x28f/0x440 [ 2390.371427][ T498] ? __pfx__copy_from_iter+0x10/0x10 [ 2390.376757][ T498] ? __virt_addr_valid+0x183/0x530 [ 2390.381897][ T498] ? __virt_addr_valid+0x183/0x530 [ 2390.387030][ T498] ? __virt_addr_valid+0x45f/0x530 [ 2390.392173][ T498] ? __phys_addr_symbol+0x2f/0x70 [ 2390.397405][ T498] ? __check_object_size+0x47a/0x730 [ 2390.402740][ T498] netlink_sendmsg+0x73d/0xcb0 [ 2390.407526][ T498] ? mark_lock+0x9a/0x360 [ 2390.411872][ T498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2390.417164][ T498] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2390.422448][ T498] __sock_sendmsg+0x221/0x270 [ 2390.427131][ T498] sock_write_iter+0x2d7/0x3f0 [ 2390.431895][ T498] ? __pfx_sock_write_iter+0x10/0x10 [ 2390.437193][ T498] do_iter_readv_writev+0x600/0x880 [ 2390.442401][ T498] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 2390.448129][ T498] ? bpf_lsm_file_permission+0x9/0x10 [ 2390.453503][ T498] ? security_file_permission+0x74/0x280 [ 2390.459139][ T498] ? rw_verify_area+0x1c3/0x6f0 [ 2390.463994][ T498] vfs_writev+0x376/0xba0 [ 2390.468334][ T498] ? __pfx_lock_acquire+0x10/0x10 [ 2390.473362][ T498] ? __pfx_vfs_writev+0x10/0x10 [ 2390.478221][ T498] ? __pfx_vfs_write+0x10/0x10 [ 2390.482987][ T498] ? __fget_files+0x2a/0x410 [ 2390.487581][ T498] ? __fget_files+0x395/0x410 [ 2390.492255][ T498] ? __fget_files+0x2a/0x410 [ 2390.496852][ T498] do_writev+0x1b6/0x360 [ 2390.501104][ T498] ? __pfx_do_writev+0x10/0x10 [ 2390.505864][ T498] ? do_syscall_64+0x100/0x230 [ 2390.510642][ T498] ? do_syscall_64+0xb6/0x230 [ 2390.515321][ T498] do_syscall_64+0xf3/0x230 [ 2390.519827][ T498] ? clear_bhb_loop+0x35/0x90 [ 2390.524506][ T498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2390.530398][ T498] RIP: 0033:0x7f3f30b85d29 [ 2390.534809][ T498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2390.554506][ T498] RSP: 002b:00007f3f318d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 2390.562921][ T498] RAX: ffffffffffffffda RBX: 00007f3f30d75fa0 RCX: 00007f3f30b85d29 [ 2390.570888][ T498] RDX: 0000000000000001 RSI: 0000000020000100 RDI: 0000000000000003 [ 2390.578856][ T498] RBP: 00007f3f318d3090 R08: 0000000000000000 R09: 0000000000000000 [ 2390.586840][ T498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2390.594810][ T498] R13: 0000000000000000 R14: 00007f3f30d75fa0 R15: 00007ffe69427c88 [ 2390.602795][ T498] [ 2391.109354][ T507] FAULT_INJECTION: forcing a failure. [ 2391.109354][ T507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2391.122920][ T507] CPU: 0 UID: 0 PID: 507 Comm: syz.2.6448 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 2391.133538][ T507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2391.143618][ T507] Call Trace: [ 2391.146933][ T507] [ 2391.149898][ T507] dump_stack_lvl+0x241/0x360 [ 2391.154607][ T507] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2391.159834][ T507] ? __pfx__printk+0x10/0x10 [ 2391.164456][ T507] ? snprintf+0xda/0x120 [ 2391.168715][ T507] should_fail_ex+0x3b0/0x4e0 [ 2391.173418][ T507] _copy_to_user+0x31/0xb0 [ 2391.177860][ T507] simple_read_from_buffer+0xca/0x150 [ 2391.183264][ T507] proc_fail_nth_read+0x1e9/0x250 [ 2391.188308][ T507] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2391.193876][ T507] ? rw_verify_area+0x55e/0x6f0 [ 2391.198750][ T507] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2391.204323][ T507] vfs_read+0x1fc/0xb70 [ 2391.208502][ T507] ? __pfx___mutex_lock+0x10/0x10 [ 2391.213555][ T507] ? __pfx_vfs_read+0x10/0x10 [ 2391.218249][ T507] ? __fget_files+0x2a/0x410 [ 2391.222854][ T507] ? __fget_files+0x395/0x410 [ 2391.227551][ T507] ? __fget_files+0x2a/0x410 [ 2391.232159][ T507] ksys_read+0x18f/0x2b0 [ 2391.236419][ T507] ? __pfx_ksys_read+0x10/0x10 [ 2391.241214][ T507] do_syscall_64+0xf3/0x230 [ 2391.245738][ T507] ? clear_bhb_loop+0x35/0x90 [ 2391.250433][ T507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2391.256343][ T507] RIP: 0033:0x7f37e5f8473c [ 2391.260772][ T507] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2391.280419][ T507] RSP: 002b:00007f37e6d1c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2391.288864][ T507] RAX: ffffffffffffffda RBX: 00007f37e6176160 RCX: 00007f37e5f8473c [ 2391.296850][ T507] RDX: 000000000000000f RSI: 00007f37e6d1c0a0 RDI: 0000000000000006 [ 2391.304837][ T507] RBP: 00007f37e6d1c090 R08: 0000000000000000 R09: 0000000000000000 [ 2391.312826][ T507] R10: 0000000020000380 R11: 0000000000000246 R12: 0000000000000001 [ 2391.320808][ T507] R13: 0000000000000000 R14: 00007f37e6176160 R15: 00007fff07a85c38 [ 2391.328809][ T507] [ 2391.331897][ C0] vkms_vblank_simulate: vblank timer overrun [ 2391.528414][ T358] veth0_vlan: entered promiscuous mode [ 2391.550259][ T358] veth1_vlan: entered promiscuous mode [ 2392.152194][ T358] veth0_macvtap: entered promiscuous mode [ 2392.163114][ T358] veth1_macvtap: entered promiscuous mode [ 2392.182780][ T358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2392.194593][ T358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2392.649692][ T358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2392.694396][ T358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2392.713505][ T358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2392.747493][ T358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2392.771050][ T358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2392.793713][ T358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2392.816008][ T358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2392.847995][ T358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2392.864363][ T358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2392.891452][ T528] FAULT_INJECTION: forcing a failure. [ 2392.891452][ T528] name failslab, interval 1, probability 0, space 0, times 0 [ 2392.918256][ T358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2392.943945][ T528] CPU: 1 UID: 0 PID: 528 Comm: syz.0.6455 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 2392.954599][ T528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2392.965075][ T528] Call Trace: [ 2392.968398][ T528] [ 2392.971324][ T528] dump_stack_lvl+0x241/0x360 [ 2392.976006][ T528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2392.981229][ T528] ? __pfx__printk+0x10/0x10 [ 2392.985843][ T528] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 2392.991845][ T528] ? __pfx___might_resched+0x10/0x10 [ 2392.997248][ T528] should_fail_ex+0x3b0/0x4e0 [ 2393.001944][ T528] should_failslab+0xac/0x100 [ 2393.006650][ T528] kmem_cache_alloc_node_noprof+0x77/0x380 [ 2393.012481][ T528] ? __alloc_skb+0x1c3/0x440 [ 2393.017089][ T528] __alloc_skb+0x1c3/0x440 [ 2393.021518][ T528] ? __pfx___alloc_skb+0x10/0x10 [ 2393.026457][ T528] ? smack_socket_getpeersec_dgram+0x210/0x410 [ 2393.032613][ T528] netlink_sendmsg+0x638/0xcb0 [ 2393.037414][ T528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2393.042731][ T528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2393.048019][ T528] __sock_sendmsg+0x221/0x270 [ 2393.052700][ T528] ____sys_sendmsg+0x52a/0x7e0 [ 2393.057480][ T528] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2393.062762][ T528] ? __fget_files+0x2a/0x410 [ 2393.067378][ T528] ? __sys_sendmmsg+0x392/0x720 [ 2393.072233][ T528] ? __might_fault+0xaa/0x120 [ 2393.076929][ T528] __sys_sendmmsg+0x36a/0x720 [ 2393.081622][ T528] ? __pfx___sys_sendmmsg+0x10/0x10 [ 2393.086835][ T528] ? __pfx_lock_release+0x10/0x10 [ 2393.091866][ T528] ? kstrtouint_from_user+0x128/0x190 [ 2393.097262][ T528] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 2393.103168][ T528] ? ksys_write+0x22a/0x2b0 [ 2393.107675][ T528] ? __pfx_lock_release+0x10/0x10 [ 2393.112721][ T528] ? vfs_write+0x730/0xd30 [ 2393.117139][ T528] ? __mutex_unlock_slowpath+0x21e/0x790 [ 2393.122790][ T528] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2393.128769][ T528] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2393.135093][ T528] ? do_syscall_64+0x100/0x230 [ 2393.139873][ T528] __x64_sys_sendmmsg+0xa0/0xb0 [ 2393.144753][ T528] do_syscall_64+0xf3/0x230 [ 2393.149349][ T528] ? clear_bhb_loop+0x35/0x90 [ 2393.154029][ T528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2393.159924][ T528] RIP: 0033:0x7f45fa985d29 [ 2393.164346][ T528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2393.183952][ T528] RSP: 002b:00007f45fb7c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 2393.192373][ T528] RAX: ffffffffffffffda RBX: 00007f45fab75fa0 RCX: 00007f45fa985d29 [ 2393.200370][ T528] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 2393.208351][ T528] RBP: 00007f45fb7c0090 R08: 0000000000000000 R09: 0000000000000000 [ 2393.216328][ T528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2393.224307][ T528] R13: 0000000000000000 R14: 00007f45fab75fa0 R15: 00007ffcc9b71a08 [ 2393.232464][ T528] [ 2393.241861][ T358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2393.262665][ T358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2393.292927][ T358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2393.374841][ T358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2393.405535][ T358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2393.438782][ T358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2393.634244][ T358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2393.699783][ T358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2394.115942][ T358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2394.363084][ T358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2394.378964][ T358] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2394.387776][ T358] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2394.396894][ T358] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2394.424195][ T358] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2394.545225][ T542] infiniband syz0: set active [ 2394.549977][ T542] infiniband syz0: added bond0 [ 2394.556350][ T542] syz0: rxe_create_cq: returned err = -12 [ 2394.562223][ T542] infiniband syz0: Couldn't create ib_mad CQ [ 2394.568481][ T542] infiniband syz0: Couldn't open port 1 [ 2394.585233][ T542] RDS/IB: syz0: added [ 2394.589326][ T542] smc: adding ib device syz0 with port count 1 [ 2394.595784][ T542] smc: ib device syz0 port 1 has pnetid [ 2395.204000][T30165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2395.244035][T30165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2395.348580][T30165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2395.377615][T30165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2395.434853][ T551] openvswitch: netlink: Tunnel attr 191 out of range max 16 [ 2395.820782][ T559] netlink: 256 bytes leftover after parsing attributes in process `syz.4.6405'. [ 2395.850739][ T559] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6405'. [ 2400.184304][ T5872] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 2401.523902][ T8] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 2401.718258][ T8] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 2401.761735][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2401.770739][ T610] netlink: 256 bytes leftover after parsing attributes in process `syz.9.6475'. [ 2401.805813][ T8] usb 3-1: config 0 descriptor?? [ 2401.810958][ T610] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6475'. [ 2401.846865][ T8] ums-realtek 3-1:0.0: USB Mass Storage device detected [ 2402.680895][ T629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2402.787291][ T629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2402.797707][ T8] usb 3-1: USB disconnect, device number 45 [ 2408.049719][ T688] 9pnet_fd: Insufficient options for proto=fd [ 2410.352699][ T709] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6503'. [ 2410.380158][ T709] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6503'. [ 2410.749522][ T716] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 2412.290212][T22278] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2413.746477][ T743] bond0: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 2413.778976][ T744] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6513'. [ 2413.825461][ T740] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2413.831537][ T740] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 2413.837647][ T740] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2413.843589][ T740] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 2413.875213][ T744] vlan2: entered promiscuous mode [ 2413.894741][ T740] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2413.900719][ T740] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2413.925345][ T744] veth0_to_bridge: entered promiscuous mode [ 2413.946937][ T740] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 2413.982102][ T740] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2413.988194][ T740] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2414.020602][ T740] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 2414.062348][ T740] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2414.068620][ T740] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2414.079219][ T740] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 2414.101085][ T747] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6515'. [ 2415.658866][ T5872] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 2415.875622][T30921] Bluetooth: hci5: command 0x0406 tx timeout [ 2415.875640][ T5834] Bluetooth: hci7: command 0x0c1a tx timeout [ 2415.881787][ T5834] Bluetooth: hci4: command 0x0406 tx timeout [ 2415.900299][ T5872] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2415.954680][ T776] Bluetooth: hci3: command 0x0c1a tx timeout [ 2415.965973][T12189] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2415.984504][ T5872] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2416.034217][ T776] Bluetooth: hci0: command 0x0c1a tx timeout [ 2416.040160][ T5872] usb 10-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 2416.105765][ T5872] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2416.114066][ T776] Bluetooth: hci1: command 0x0405 tx timeout [ 2416.120504][ T781] syz.3.6526: attempt to access beyond end of device [ 2416.120504][ T781] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 2416.163949][T12189] usb 3-1: Using ep0 maxpacket: 32 [ 2416.189638][T12189] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 2416.210718][T12189] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2416.231392][ T5872] usb 10-1: config 0 descriptor?? [ 2416.252408][T12189] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2416.291098][T12189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2416.313839][T12189] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2416.341873][T12189] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2416.386742][T12189] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 2416.420644][T12189] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2416.474101][T12189] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2416.484398][ T762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2416.513963][ T762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2416.518229][T12189] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2416.577270][T12189] usb 3-1: config 0 descriptor?? [ 2416.854307][ T5872] a4tech 0003:09DA:022B.0021: unknown main item tag 0x0 [ 2416.869774][ T770] netlink: 830 bytes leftover after parsing attributes in process `syz.2.6523'. [ 2417.063048][ T5872] a4tech 0003:09DA:022B.0021: unknown main item tag 0x0 [ 2417.089045][ T5872] a4tech 0003:09DA:022B.0021: item fetching failed at offset 2/4 [ 2417.116685][ T5872] a4tech 0003:09DA:022B.0021: parse failed [ 2417.130389][ T5872] a4tech 0003:09DA:022B.0021: probe with driver a4tech failed with error -22 [ 2417.210413][T12189] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 46 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2417.954048][ T776] Bluetooth: hci5: command 0x0406 tx timeout [ 2418.044386][ T776] Bluetooth: hci3: command 0x0c1a tx timeout [ 2418.131747][ T776] Bluetooth: hci0: command 0x0c1a tx timeout [ 2418.206140][ T776] Bluetooth: hci1: command 0x0405 tx timeout [ 2419.074538][ T47] usb 10-1: USB disconnect, device number 39 [ 2419.225056][ T6689] usb 3-1: USB disconnect, device number 46 [ 2419.261883][ T6689] usblp0: removed [ 2419.792512][ T824] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6540'. [ 2419.830254][ T824] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6540'. [ 2420.008205][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2420.164218][ T776] Bluetooth: hci3: command 0x0c1a tx timeout [ 2420.194997][ T776] Bluetooth: hci0: command 0x0c1a tx timeout [ 2420.274027][ T776] Bluetooth: hci1: command 0x0405 tx timeout [ 2420.473812][T12189] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 2420.614035][T12189] usb 10-1: device descriptor read/64, error -71 [ 2420.995521][T12189] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 2421.214980][T12189] usb 10-1: device descriptor read/64, error -71 [ 2421.324239][T12189] usb usb10-port1: attempt power cycle [ 2421.664412][T12189] usb 10-1: new high-speed USB device number 42 using dummy_hcd [ 2421.684986][T12189] usb 10-1: device descriptor read/8, error -71 [ 2421.857864][ T849] netlink: 'syz.3.6546': attribute type 1 has an invalid length. [ 2421.888677][ T849] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2421.906381][ T849] bond1: (slave gretap1): making interface the new active one [ 2421.917637][ T849] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 2421.929615][ T849] fuse: Unknown parameter 'rootmą' [ 2421.994161][T12189] usb 10-1: new high-speed USB device number 43 using dummy_hcd [ 2422.026428][T12189] usb 10-1: device descriptor read/8, error -71 [ 2422.154337][T12189] usb usb10-port1: unable to enumerate USB device [ 2425.901928][ T906] netlink: 'syz.4.6564': attribute type 10 has an invalid length. [ 2425.969507][ T906] team0: Port device netdevsim0 added [ 2426.446546][ T893] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 2426.453323][ T893] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 2426.461198][ T893] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 2426.470934][ T893] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 2426.480338][ T893] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 2426.490694][ T893] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 2427.794521][ T776] Bluetooth: hci4: command 0x0406 tx timeout [ 2427.923556][ T29] audit: type=1326 audit(1735032002.512:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=947 comm="syz.0.6573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fa985d29 code=0x7ffc0000 [ 2428.008928][ T29] audit: type=1326 audit(1735032002.512:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=947 comm="syz.0.6573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fa985d29 code=0x7ffc0000 [ 2428.103774][ T29] audit: type=1326 audit(1735032002.512:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=947 comm="syz.0.6573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f45fa985d29 code=0x7ffc0000 [ 2428.324120][ T25] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 2428.465782][ T29] audit: type=1326 audit(1735032002.512:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=947 comm="syz.0.6573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fa985d29 code=0x7ffc0000 [ 2428.551852][ T776] Bluetooth: hci1: command 0x0405 tx timeout [ 2428.562160][ T776] Bluetooth: hci0: command 0x0c1a tx timeout [ 2428.568882][ T5827] Bluetooth: hci3: command 0x0c1a tx timeout [ 2428.583933][ T5834] Bluetooth: hci5: command 0x0406 tx timeout [ 2428.591658][ T5834] Bluetooth: hci7: command 0x0c1a tx timeout [ 2428.725827][ T25] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2428.796794][ T29] audit: type=1326 audit(1735032002.512:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=947 comm="syz.0.6573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fa985d29 code=0x7ffc0000 [ 2428.818950][ T25] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2428.884278][ T25] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 2428.993895][ T29] audit: type=1326 audit(1735032002.512:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=947 comm="syz.0.6573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f45fa985d29 code=0x7ffc0000 [ 2429.018775][ T25] usb 10-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 2429.082882][ T25] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2429.144035][ T29] audit: type=1326 audit(1735032002.512:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=947 comm="syz.0.6573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fa985d29 code=0x7ffc0000 [ 2429.214944][ T25] usb 10-1: config 0 descriptor?? [ 2429.331788][ T966] netlink: 'syz.4.6578': attribute type 10 has an invalid length. [ 2429.373130][ T29] audit: type=1326 audit(1735032002.512:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=947 comm="syz.0.6573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fa985d29 code=0x7ffc0000 [ 2429.543880][ T29] audit: type=1326 audit(1735032002.512:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=947 comm="syz.0.6573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f45fa985d29 code=0x7ffc0000 [ 2429.637317][ T25] wacom 0003:056A:0000.0022: unknown main item tag 0x0 [ 2429.690542][ T25] wacom 0003:056A:0000.0022: unknown main item tag 0x0 [ 2429.720493][ T29] audit: type=1326 audit(1735032002.512:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=947 comm="syz.0.6573" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45fa985d29 code=0x7ffc0000 [ 2429.741566][ T25] wacom 0003:056A:0000.0022: item fetching failed at offset 2/5 [ 2429.795963][ T25] wacom 0003:056A:0000.0022: parse failed [ 2429.829622][ T25] wacom 0003:056A:0000.0022: probe with driver wacom failed with error -22 [ 2431.649869][ T981] infiniband syz!: set active [ 2431.670341][ T981] infiniband syz!: added team_slave_0 [ 2431.785204][ T981] RDS/IB: syz!: added [ 2431.811316][ T981] smc: adding ib device syz! with port count 1 [ 2431.858428][ T981] smc: ib device syz! port 1 has pnetid [ 2431.913534][ T6689] usb 10-1: USB disconnect, device number 44 [ 2432.057057][ T1003] FAULT_INJECTION: forcing a failure. [ 2432.057057][ T1003] name failslab, interval 1, probability 0, space 0, times 0 [ 2432.100058][ T1003] CPU: 0 UID: 0 PID: 1003 Comm: syz.9.6589 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 2432.110801][ T1003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2432.120898][ T1003] Call Trace: [ 2432.124287][ T1003] [ 2432.127236][ T1003] dump_stack_lvl+0x241/0x360 [ 2432.131955][ T1003] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2432.137193][ T1003] ? __pfx__printk+0x10/0x10 [ 2432.141823][ T1003] ? kmem_cache_alloc_noprof+0x48/0x380 [ 2432.147409][ T1003] ? __pfx___might_resched+0x10/0x10 [ 2432.152735][ T1003] should_fail_ex+0x3b0/0x4e0 [ 2432.157456][ T1003] should_failslab+0xac/0x100 [ 2432.162170][ T1003] ? ptlock_alloc+0x20/0x70 [ 2432.166699][ T1003] kmem_cache_alloc_noprof+0x70/0x380 [ 2432.172118][ T1003] ptlock_alloc+0x20/0x70 [ 2432.176495][ T1003] pte_alloc_one+0xd3/0x510 [ 2432.181042][ T1003] ? __pfx_pte_alloc_one+0x10/0x10 [ 2432.186185][ T1003] ? __lock_acquire+0x1397/0x2100 [ 2432.191243][ T1003] ? cgroup_rstat_updated+0x13b/0xc30 [ 2432.196670][ T1003] __pte_alloc+0x79/0x3c0 [ 2432.201046][ T1003] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 2432.206798][ T1003] ? __pfx___pte_alloc+0x10/0x10 [ 2432.211751][ T1003] handle_pte_fault+0x4d3e/0x5ed0 [ 2432.216798][ T1003] ? __pfx_handle_pte_fault+0x10/0x10 [ 2432.222178][ T1003] ? __pfx_lock_acquire+0x10/0x10 [ 2432.227203][ T1003] ? __pmd_alloc+0x54c/0x670 [ 2432.231790][ T1003] ? __pfx_lock_release+0x10/0x10 [ 2432.236811][ T1003] ? do_raw_spin_lock+0x14f/0x370 [ 2432.241842][ T1003] ? do_raw_spin_unlock+0x13c/0x8b0 [ 2432.247052][ T1003] ? _raw_spin_unlock+0x28/0x50 [ 2432.251903][ T1003] ? __pmd_alloc+0x54c/0x670 [ 2432.256504][ T1003] ? __pfx___pmd_alloc+0x10/0x10 [ 2432.261457][ T1003] ? __pfx_lock_release+0x10/0x10 [ 2432.266508][ T1003] handle_mm_fault+0x1053/0x1ad0 [ 2432.271493][ T1003] ? __pfx_handle_mm_fault+0x10/0x10 [ 2432.276804][ T1003] ? __pfx_find_vma+0x10/0x10 [ 2432.281573][ T1003] ? vma_is_secretmem+0xd/0x50 [ 2432.286339][ T1003] ? check_vma_flags+0x52b/0x5a0 [ 2432.291277][ T1003] __get_user_pages+0x1c82/0x49e0 [ 2432.296352][ T1003] ? __pfx___get_user_pages+0x10/0x10 [ 2432.301742][ T1003] ? __pfx_mt_find+0x10/0x10 [ 2432.306369][ T1003] populate_vma_page_range+0x264/0x330 [ 2432.311846][ T1003] ? __pfx_populate_vma_page_range+0x10/0x10 [ 2432.317827][ T1003] ? apply_vma_lock_flags+0x42a/0x510 [ 2432.323207][ T1003] __mm_populate+0x27a/0x460 [ 2432.327804][ T1003] ? __pfx___mm_populate+0x10/0x10 [ 2432.332921][ T1003] do_mlock+0x61f/0x7e0 [ 2432.337085][ T1003] ? __fget_files+0x2a/0x410 [ 2432.341672][ T1003] ? __pfx_do_mlock+0x10/0x10 [ 2432.346355][ T1003] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2432.352336][ T1003] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2432.358674][ T1003] ? do_syscall_64+0x100/0x230 [ 2432.363453][ T1003] __x64_sys_mlock+0x60/0x70 [ 2432.368057][ T1003] do_syscall_64+0xf3/0x230 [ 2432.372565][ T1003] ? clear_bhb_loop+0x35/0x90 [ 2432.377244][ T1003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2432.383141][ T1003] RIP: 0033:0x7f3f30b85d29 [ 2432.387556][ T1003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2432.407158][ T1003] RSP: 002b:00007f3f318d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 2432.415586][ T1003] RAX: ffffffffffffffda RBX: 00007f3f30d75fa0 RCX: 00007f3f30b85d29 [ 2432.423551][ T1003] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000000020ffd000 [ 2432.431517][ T1003] RBP: 00007f3f318d3090 R08: 0000000000000000 R09: 0000000000000000 [ 2432.439482][ T1003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2432.447447][ T1003] R13: 0000000000000000 R14: 00007f3f30d75fa0 R15: 00007ffe69427c88 [ 2432.455429][ T1003] [ 2432.480141][ T1005] Bluetooth: MGMT ver 1.23 [ 2434.090787][ T1031] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6595'. [ 2434.475164][ T1035] .: renamed from bond0 (while UP) [ 2434.519871][ T1035] overlay: filesystem on ./bus not supported as upperdir [ 2435.154320][ T5872] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 2435.340364][ T5872] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2435.772439][ T5872] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2435.795307][ T1064] loop9: detected capacity change from 0 to 6 [ 2435.869891][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 2435.869903][ T29] audit: type=1326 audit(1735032010.462:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1065 comm="syz.2.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e5f85d29 code=0x7ffc0000 [ 2435.908328][ T5872] usb 5-1: New USB device found, idVendor=b5c7, idProduct=5746, bcdDevice=a6.21 [ 2435.934028][ T5872] usb 5-1: New USB device strings: Mfr=127, Product=212, SerialNumber=3 [ 2435.969304][ T5872] usb 5-1: Product: syz [ 2435.984113][ T5872] usb 5-1: Manufacturer: syz [ 2436.000374][ T5872] usb 5-1: SerialNumber: syz [ 2436.009244][ T29] audit: type=1326 audit(1735032010.492:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1065 comm="syz.2.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e5f85d29 code=0x7ffc0000 [ 2436.052205][ T5872] cdc_acm 5-1:1.0: skipping garbage [ 2436.067539][ T5872] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22 [ 2436.129496][ T29] audit: type=1326 audit(1735032010.512:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1065 comm="syz.2.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f37e5f85d29 code=0x7ffc0000 [ 2436.151091][ C1] vkms_vblank_simulate: vblank timer overrun [ 2436.231318][ T29] audit: type=1326 audit(1735032010.512:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1065 comm="syz.2.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e5f85d29 code=0x7ffc0000 [ 2436.252925][ C1] vkms_vblank_simulate: vblank timer overrun [ 2436.274963][ T1053] tmpfs: Bad value for 'mpol' [ 2436.282707][ T29] audit: type=1326 audit(1735032010.512:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1065 comm="syz.2.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37e5f85d29 code=0x7ffc0000 [ 2436.304380][ C1] vkms_vblank_simulate: vblank timer overrun [ 2436.334048][ T6689] usb 5-1: USB disconnect, device number 60 [ 2436.380318][ T1072] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6607'. [ 2436.394752][ T29] audit: type=1326 audit(1735032010.512:1471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1065 comm="syz.2.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f37e5f87c47 code=0x7ffc0000 [ 2436.423004][ T29] audit: type=1326 audit(1735032010.512:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1065 comm="syz.2.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f37e5f87bbc code=0x7ffc0000 [ 2436.483203][ T29] audit: type=1326 audit(1735032010.512:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1065 comm="syz.2.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f37e5f87af4 code=0x7ffc0000 [ 2436.504723][ C1] vkms_vblank_simulate: vblank timer overrun [ 2436.521573][ T29] audit: type=1326 audit(1735032010.512:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1065 comm="syz.2.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f37e5f87af4 code=0x7ffc0000 [ 2436.583985][ T29] audit: type=1326 audit(1735032010.512:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1065 comm="syz.2.6605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f37e5f8498a code=0x7ffc0000 [ 2438.818251][ T1087] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2439.563102][ T1101] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2441.672595][T32064] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 2442.695387][T32064] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 2442.745444][T32064] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2442.794504][T32064] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2442.868663][T32064] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2442.911372][T32064] usb 3-1: config 0 descriptor?? [ 2442.943158][T32064] hub 3-1:0.0: USB hub found [ 2443.211849][T32064] hub 3-1:0.0: 1 port detected [ 2443.417758][ T1109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2443.455636][ T1109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2443.847188][T22275] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2444.820688][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 2444.827405][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 2444.858536][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 2444.872052][T32064] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 2444.904371][ T6689] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 2444.922431][T32064] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 2445.002927][T32064] usbhid 3-1:0.0: can't add hid device: -71 [ 2445.024418][T32064] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2445.071324][T32064] usb 3-1: USB disconnect, device number 47 [ 2445.265203][ T6689] usb 4-1: config 0 has an invalid interface number: 255 but max is 0 [ 2445.273495][ T6689] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 2445.284047][ T6689] usb 4-1: config 0 has no interface number 0 [ 2445.290165][ T6689] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 2445.307808][ T6689] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 2445.321758][ T6689] usb 4-1: config 0 interface 255 has no altsetting 0 [ 2445.328786][ T6689] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 2445.338010][ T6689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2445.584103][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88803ed81800: rx timeout, send abort [ 2446.092556][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88803ed81800: abort rx timeout. Force session deactivation [ 2446.661047][ T6689] usb 4-1: config 0 descriptor?? [ 2447.601807][ T6689] usb 4-1: can't set config #0, error -71 [ 2447.649467][ T6689] usb 4-1: USB disconnect, device number 68 [ 2449.799446][ T1179] overlayfs: failed to resolve './file1': -2 [ 2449.824752][T32064] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 2450.215497][T32064] usb 4-1: Using ep0 maxpacket: 32 [ 2450.225751][T32064] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2450.266049][T32064] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice=55.01 [ 2450.473957][T32064] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2450.482515][T32064] usb 4-1: Product: syz [ 2450.487754][T32064] usb 4-1: Manufacturer: syz [ 2450.492390][T32064] usb 4-1: SerialNumber: syz [ 2450.499290][T32064] usb 4-1: config 0 descriptor?? [ 2451.059713][T32064] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 2451.907849][T27346] usb 4-1: USB disconnect, device number 69 [ 2452.479787][ T1214] 9pnet_fd: Insufficient options for proto=fd [ 2452.799516][ T29] kauditd_printk_skb: 42 callbacks suppressed [ 2452.799535][ T29] audit: type=1326 audit(1735032027.392:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1218 comm="syz.3.6643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd48bf85d29 code=0x7ffc0000 [ 2452.860343][ T29] audit: type=1326 audit(1735032027.422:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1218 comm="syz.3.6643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd48bf85d29 code=0x7ffc0000 [ 2452.908514][ T29] audit: type=1326 audit(1735032027.432:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1218 comm="syz.3.6643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd48bf87c47 code=0x7ffc0000 [ 2453.004253][ T29] audit: type=1326 audit(1735032027.432:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1218 comm="syz.3.6643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fd48bf87bbc code=0x7ffc0000 [ 2453.056315][ T29] audit: type=1326 audit(1735032027.432:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1218 comm="syz.3.6643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd48bf87af4 code=0x7ffc0000 [ 2453.441840][ T29] audit: type=1326 audit(1735032027.432:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1218 comm="syz.3.6643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fd48bf87af4 code=0x7ffc0000 [ 2455.008878][ T29] audit: type=1326 audit(1735032027.432:1524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1218 comm="syz.3.6643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd48bf8498a code=0x7ffc0000 [ 2455.149678][ T29] audit: type=1326 audit(1735032027.432:1525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1218 comm="syz.3.6643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd48bf85d29 code=0x7ffc0000 [ 2455.256915][ T29] audit: type=1326 audit(1735032027.432:1526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1218 comm="syz.3.6643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd48bf85d29 code=0x7ffc0000 [ 2455.279184][ T29] audit: type=1326 audit(1735032027.442:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=1218 comm="syz.3.6643" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd48bf84690 code=0x7ffc0000 [ 2455.770356][ T1240] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6649'. [ 2456.069688][ T1246] overlay: filesystem on ./bus not supported as upperdir [ 2456.084520][ T1248] FAULT_INJECTION: forcing a failure. [ 2456.084520][ T1248] name failslab, interval 1, probability 0, space 0, times 0 [ 2456.138520][ T1248] CPU: 1 UID: 0 PID: 1248 Comm: syz.0.6652 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 2456.149262][ T1248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2456.159326][ T1248] Call Trace: [ 2456.162626][ T1248] [ 2456.165573][ T1248] dump_stack_lvl+0x241/0x360 [ 2456.170269][ T1248] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2456.175491][ T1248] ? __pfx__printk+0x10/0x10 [ 2456.180178][ T1248] ? __kmalloc_cache_noprof+0x48/0x390 [ 2456.185737][ T1248] ? __pfx___might_resched+0x10/0x10 [ 2456.191028][ T1248] should_fail_ex+0x3b0/0x4e0 [ 2456.195720][ T1248] should_failslab+0xac/0x100 [ 2456.200407][ T1248] __kmalloc_cache_noprof+0x70/0x390 [ 2456.205692][ T1248] ? raw_open+0x89/0x4d0 [ 2456.209939][ T1248] raw_open+0x89/0x4d0 [ 2456.214008][ T1248] ? __pfx_raw_open+0x10/0x10 [ 2456.218691][ T1248] misc_open+0x2cc/0x340 [ 2456.222937][ T1248] chrdev_open+0x521/0x600 [ 2456.227366][ T1248] ? __pfx_chrdev_open+0x10/0x10 [ 2456.232311][ T1248] ? do_raw_spin_unlock+0x13c/0x8b0 [ 2456.237518][ T1248] ? __pfx_chrdev_open+0x10/0x10 [ 2456.242460][ T1248] do_dentry_open+0xbe1/0x1b70 [ 2456.247235][ T1248] vfs_open+0x3e/0x330 [ 2456.251331][ T1248] path_openat+0x2c84/0x3590 [ 2456.255942][ T1248] ? __pfx_path_openat+0x10/0x10 [ 2456.260898][ T1248] do_filp_open+0x27f/0x4e0 [ 2456.265406][ T1248] ? __pfx_do_filp_open+0x10/0x10 [ 2456.270427][ T1248] ? do_raw_spin_lock+0x14f/0x370 [ 2456.275483][ T1248] do_sys_openat2+0x13e/0x1d0 [ 2456.280159][ T1248] ? __pfx_do_sys_openat2+0x10/0x10 [ 2456.285368][ T1248] __x64_sys_openat+0x247/0x2a0 [ 2456.290216][ T1248] ? __pfx___x64_sys_openat+0x10/0x10 [ 2456.295607][ T1248] ? exc_page_fault+0x590/0x8b0 [ 2456.300475][ T1248] ? do_syscall_64+0xb6/0x230 [ 2456.305168][ T1248] do_syscall_64+0xf3/0x230 [ 2456.309683][ T1248] ? clear_bhb_loop+0x35/0x90 [ 2456.314367][ T1248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2456.320264][ T1248] RIP: 0033:0x7f45fa984690 [ 2456.324687][ T1248] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 2456.344298][ T1248] RSP: 002b:00007f45fb7bdef0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2456.352715][ T1248] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f45fa984690 [ 2456.360704][ T1248] RDX: 0000000000000002 RSI: 00007f45faa0178c RDI: 00000000ffffff9c [ 2456.368676][ T1248] RBP: 00007f45faa0178c R08: 0000000000000000 R09: 0000000000000000 [ 2456.376645][ T1248] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2456.384614][ T1248] R13: 0000000000000036 R14: 0000000020000240 R15: 00007ffcc9b71a08 [ 2456.392598][ T1248] [ 2456.395720][ C1] vkms_vblank_simulate: vblank timer overrun [ 2457.177076][ T1267] 9pnet_fd: Insufficient options for proto=fd [ 2459.778413][ T1311] overlay: filesystem on ./file1 not supported as upperdir [ 2460.114182][T10023] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 2460.293914][T10023] usb 4-1: Using ep0 maxpacket: 32 [ 2460.302795][T10023] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 2460.321792][T10023] usb 4-1: config 0 has no interface number 0 [ 2460.343254][T10023] usb 4-1: config 0 interface 184 has no altsetting 0 [ 2460.384409][T10023] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 2460.408061][T10023] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2460.437057][T10023] usb 4-1: Product: syz [ 2460.449873][T10023] usb 4-1: Manufacturer: syz [ 2460.464407][T10023] usb 4-1: SerialNumber: syz [ 2460.488933][T10023] usb 4-1: config 0 descriptor?? [ 2460.508639][T10023] smsc75xx v1.0.0 [ 2460.930851][ T1325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6671'. [ 2460.952877][ T1329] 9pnet_fd: Insufficient options for proto=fd [ 2461.072960][ T1325] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 2461.131079][ T1331] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6673'. [ 2461.144625][ T1318] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2461.265396][T10023] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 2461.281735][T10023] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 2461.503954][T10023] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 2461.543711][T10023] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 2461.553544][T10023] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 2461.594168][T10023] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 2461.612539][T10023] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 2461.642405][T10023] usb 4-1: USB disconnect, device number 70 [ 2462.852419][T32064] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 2463.305921][ T1351] loop9: detected capacity change from 0 to 6 [ 2463.324000][ T1350] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6679'. [ 2463.343870][T32064] usb 10-1: Using ep0 maxpacket: 8 [ 2463.361281][T32064] usb 10-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 255, changing to 11 [ 2463.441412][T32064] usb 10-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 59391, setting to 1024 [ 2463.490531][T32064] usb 10-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 2463.501716][T32064] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2463.524462][ T1341] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2466.213299][T32064] usb 10-1: string descriptor 0 read error: -71 [ 2466.280703][T32064] hub 10-1:32.0: USB hub found [ 2466.320521][ T1384] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6689'. [ 2466.403850][T32064] hub 10-1:32.0: config failed, can't read hub descriptor (err -22) [ 2466.444826][ T1384] FAULT_INJECTION: forcing a failure. [ 2466.444826][ T1384] name failslab, interval 1, probability 0, space 0, times 0 [ 2466.459488][ T1384] CPU: 0 UID: 0 PID: 1384 Comm: syz.9.6689 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 2466.470176][ T1384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2466.480238][ T1384] Call Trace: [ 2466.483514][ T1384] [ 2466.486460][ T1384] dump_stack_lvl+0x241/0x360 [ 2466.491155][ T1384] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2466.496360][ T1384] ? __pfx__printk+0x10/0x10 [ 2466.500947][ T1384] ? kmem_cache_alloc_noprof+0x48/0x380 [ 2466.506489][ T1384] ? __pfx___might_resched+0x10/0x10 [ 2466.511782][ T1384] should_fail_ex+0x3b0/0x4e0 [ 2466.516462][ T1384] should_failslab+0xac/0x100 [ 2466.521134][ T1384] ? key_alloc+0x341/0xff0 [ 2466.525536][ T1384] kmem_cache_alloc_noprof+0x70/0x380 [ 2466.530899][ T1384] ? key_user_lookup+0x1b2/0x450 [ 2466.535826][ T1384] key_alloc+0x341/0xff0 [ 2466.540064][ T1384] request_key_and_link+0xace/0x19c0 [ 2466.545367][ T1384] ? request_key_and_link+0x49a/0x19c0 [ 2466.550815][ T1384] ? __pfx_request_key_and_link+0x10/0x10 [ 2466.556520][ T1384] ? __might_fault+0xaa/0x120 [ 2466.561204][ T1384] ? __pfx_down_read+0x10/0x10 [ 2466.565995][ T1384] ? __pfx_key_default_cmp+0x10/0x10 [ 2466.571276][ T1384] ? __pfx_keyring_search_iterator+0x10/0x10 [ 2466.577331][ T1384] ? __might_fault+0xc6/0x120 [ 2466.581996][ T1384] ? _copy_from_user+0x99/0xc0 [ 2466.586755][ T1384] __se_sys_request_key+0x271/0x3b0 [ 2466.591945][ T1384] ? __pfx___se_sys_request_key+0x10/0x10 [ 2466.597653][ T1384] ? do_syscall_64+0x100/0x230 [ 2466.602410][ T1384] ? do_syscall_64+0xb6/0x230 [ 2466.607080][ T1384] do_syscall_64+0xf3/0x230 [ 2466.611580][ T1384] ? clear_bhb_loop+0x35/0x90 [ 2466.616252][ T1384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2466.622139][ T1384] RIP: 0033:0x7f3f30b85d29 [ 2466.626544][ T1384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2466.646151][ T1384] RSP: 002b:00007f3f318d3038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 2466.654554][ T1384] RAX: ffffffffffffffda RBX: 00007f3f30d75fa0 RCX: 00007f3f30b85d29 [ 2466.662507][ T1384] RDX: 0000000020000080 RSI: 0000000020000040 RDI: 0000000020000000 [ 2466.670475][ T1384] RBP: 00007f3f318d3090 R08: 0000000000000000 R09: 0000000000000000 [ 2466.678437][ T1384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2466.686417][ T1384] R13: 0000000000000000 R14: 00007f3f30d75fa0 R15: 00007ffe69427c88 [ 2466.694388][ T1384] [ 2466.801598][ T1382] overlay: filesystem on ./file1 not supported as upperdir [ 2467.001138][T32064] usb 10-1: USB disconnect, device number 45 [ 2469.841935][ T1417] netlink: 'syz.0.6696': attribute type 1 has an invalid length. [ 2470.021615][ T1420] fuse: Unknown parameter 'rootmą' [ 2470.394966][ T1417] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 2471.322321][ T1416] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2472.257983][ T1445] overlayfs: failed to resolve './file1': -2 [ 2472.683913][T32064] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 2472.755615][ T1441] overlay: Unknown parameter 'fscontext' [ 2473.021467][T32064] usb 4-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=75.3e [ 2473.033838][T32064] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2473.041893][T32064] usb 4-1: Product: syz [ 2473.057128][T32064] usb 4-1: Manufacturer: syz [ 2473.089656][T32064] usb 4-1: SerialNumber: syz [ 2473.104623][T32064] usb 4-1: config 0 descriptor?? [ 2473.128063][T32064] gspca_main: etoms-2.14.0 probing 102c:6251 [ 2473.230882][ T1457] syz.2.6708 (1457): /proc/1456/oom_adj is deprecated, please use /proc/1456/oom_score_adj instead. [ 2473.908566][ T1468] netlink: 'syz.4.6709': attribute type 1 has an invalid length. [ 2474.060470][ T1470] fuse: Unknown parameter 'rootmą' [ 2474.232624][ T1468] 8021q: adding VLAN 0 to HW filter on device bond1 [ 2474.305384][ T1469] bond1: (slave gretap1): making interface the new active one [ 2474.319076][ T1469] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 2475.421417][T32064] usb 4-1: USB disconnect, device number 71 [ 2475.426128][T16789] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2475.736468][ T1476] 9pnet_fd: Insufficient options for proto=fd [ 2477.764547][ T5872] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 2477.865190][ T1491] can: request_module (can-proto-0) failed. [ 2477.949585][ T5872] usb 4-1: device descriptor read/64, error -71 [ 2478.036178][ T47] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2478.217458][ T47] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2478.237453][ T47] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2478.254105][ T5872] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 2478.259881][ T47] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2478.282252][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2478.317049][ T47] usb 3-1: SerialNumber: syz [ 2478.394038][ T5872] usb 4-1: device descriptor read/64, error -71 [ 2478.505065][ T5872] usb usb4-port1: attempt power cycle [ 2478.843985][ T5872] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 2478.874645][ T5872] usb 4-1: device descriptor read/8, error -71 [ 2479.052182][ T1519] overlayfs: failed to resolve './file1': -2 [ 2479.234529][ T5872] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 2479.444025][ T5872] usb 4-1: device not accepting address 75, error -71 [ 2479.804349][ T5872] usb usb4-port1: unable to enumerate USB device [ 2479.871506][ T47] usb 3-1: 0:2 : does not exist [ 2479.892276][ T47] usb 3-1: USB disconnect, device number 48 [ 2480.723978][ T5872] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 2480.773794][T12189] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2480.884064][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 2480.903235][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2480.934013][T12189] usb 3-1: Using ep0 maxpacket: 32 [ 2480.960160][T12189] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 2480.975787][ T5872] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2481.006416][T12189] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2481.031431][ T5872] usb 4-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 2481.052924][T12189] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2481.070150][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2481.082083][T12189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2481.110158][ T5872] usb 4-1: config 0 descriptor?? [ 2481.117727][T12189] usb 3-1: Product: syz [ 2481.127440][T12189] usb 3-1: Manufacturer: syz [ 2481.145575][T12189] usb 3-1: SerialNumber: syz [ 2481.447141][T12189] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 2481.473494][T12189] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 2481.526248][T12189] usb 3-1: USB disconnect, device number 49 [ 2481.919519][ T5872] cypress 0003:04B4:BCA1.0023: unknown main item tag 0x0 [ 2481.929180][ T5872] cypress 0003:04B4:BCA1.0023: unknown main item tag 0x0 [ 2481.940532][ T5872] cypress 0003:04B4:BCA1.0023: hidraw0: USB HID v0.00 Device [HID 04b4:bca1] on usb-dummy_hcd.3-1/input0 [ 2482.795721][ T1577] overlayfs: failed to resolve './file1': -2 [ 2483.174195][ T1579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6740'. [ 2484.339845][ T1586] binder: BINDER_SET_CONTEXT_MGR already set [ 2484.375497][ T1586] binder: 1585:1586 ioctl 4018620d 20000540 returned -16 [ 2486.224145][ T5872] usb 4-1: USB disconnect, device number 76 [ 2488.304739][ T1629] overlayfs: failed to resolve './file1': -2 [ 2491.308401][ T1646] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2491.386966][ T1646] devpts: called with bogus options [ 2491.463175][ T1654] bridge0: port 2(bridge_slave_1) entered disabled state [ 2491.471083][ T1654] bridge0: port 1(bridge_slave_0) entered disabled state [ 2491.686790][ T1668] overlayfs: failed to resolve './file1': -2 [ 2496.584300][ T1727] overlay: filesystem on ./file1 not supported as upperdir [ 2502.209861][ T1781] netlink: 'syz.2.6793': attribute type 10 has an invalid length. [ 2502.218227][ T1781] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 2502.229048][ T1781] team0: Port device netdevsim0 added [ 2503.678804][ T25] usb 10-1: new full-speed USB device number 46 using dummy_hcd [ 2504.125867][ T25] usb 10-1: config 1 interface 0 altsetting 245 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 2504.137305][ T25] usb 10-1: config 1 interface 0 altsetting 245 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2504.151275][ T25] usb 10-1: config 1 interface 0 has no altsetting 0 [ 2504.163534][ T25] usb 10-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 2504.172961][ T25] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2504.181181][ T25] usb 10-1: Product: syz [ 2504.203804][ T25] usb 10-1: Manufacturer: syz [ 2504.208548][ T25] usb 10-1: SerialNumber: syz [ 2504.264472][ T1794] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 2504.757117][ T1794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2504.776358][ T1794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2504.830400][ T1794] 9pnet_fd: Insufficient options for proto=fd [ 2504.883484][ T25] input: bcm5974 as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/input/input68 [ 2504.962889][ T25] usb 10-1: USB disconnect, device number 46 [ 2505.422218][ T1828] loop9: detected capacity change from 0 to 8 [ 2505.449568][ T1828] Dev loop9: unable to read RDB block 8 [ 2505.475576][ T1828] loop9: unable to read partition table [ 2505.508710][ T1828] loop9: partition table beyond EOD, truncated [ 2505.538189][ T1828] loop_reread_partitions: partition scan of loop9 (žč¢«xü—ŸŃą– ) failed (rc=-5) [ 2506.355951][ T1840] netlink: 'syz.3.6809': attribute type 1 has an invalid length. [ 2506.534764][ T1843] fuse: Unknown parameter 'rootmą' [ 2506.758729][ T1840] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2508.342187][T16789] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2512.307721][ T1889] netlink: 148 bytes leftover after parsing attributes in process `syz.4.6822'. [ 2513.753802][ T5872] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 2513.912864][ T5872] usb 4-1: device descriptor read/64, error -71 [ 2514.036637][ T1903] overlayfs: failed to resolve './file1': -2 [ 2514.352679][ T1903] overlay: Unknown parameter 'fscontext' [ 2514.533743][ T5872] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 2514.724155][ T5872] usb 4-1: device descriptor read/64, error -71 [ 2514.845060][ T5872] usb usb4-port1: attempt power cycle [ 2515.273931][ T5872] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 2515.305837][ T5872] usb 4-1: device descriptor read/8, error -71 [ 2515.554239][ T5872] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 2515.584443][ T5872] usb 4-1: device descriptor read/8, error -71 [ 2515.694194][ T5872] usb usb4-port1: unable to enumerate USB device [ 2515.722093][ T1912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6827'. [ 2516.433046][ T1920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6829'. [ 2516.459956][ T1920] bond0: entered promiscuous mode [ 2516.566191][ T1920] gretap2: entered promiscuous mode [ 2516.566605][ T1920] bond0: (slave gretap2): Enslaving as an active interface with an up link [ 2516.607147][ T1922] bond0 (unregistering): (slave gretap2): Releasing backup interface [ 2516.607669][ T1922] gretap2: left promiscuous mode [ 2516.624033][ T1922] bond0 (unregistering): Released all slaves [ 2518.546963][ T1940] overlayfs: failed to resolve './file1': -2 [ 2518.968279][ T1937] overlay: Unknown parameter 'fscontext' [ 2519.634301][ T30] INFO: task syz.1.6367:32658 blocked for more than 143 seconds. [ 2519.642100][ T30] Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 2519.663684][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2519.672903][ T30] task:syz.1.6367 state:D stack:27360 pid:32658 tgid:32657 ppid:26602 flags:0x00000004 [ 2519.702233][ T30] Call Trace: [ 2519.710591][ T30] [ 2519.723899][ T30] __schedule+0x17fb/0x4be0 [ 2519.738650][ T30] ? __pfx___schedule+0x10/0x10 [ 2519.764028][ T30] ? __pfx_lock_release+0x10/0x10 [ 2519.769149][ T30] ? schedule+0x90/0x320 [ 2519.773432][ T30] schedule+0x14b/0x320 [ 2519.804125][ T30] schedule_preempt_disabled+0x13/0x30 [ 2519.810802][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 2519.824779][ T47] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 2519.843665][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 2519.849648][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 2519.874162][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 2519.879276][ T30] down_write+0x1d7/0x220 [ 2519.893692][ T30] ? __pfx_down_write+0x10/0x10 [ 2519.898624][ T30] blkdev_fallocate+0x20e/0x490 [ 2519.903518][ T30] vfs_fallocate+0x569/0x6e0 [ 2519.923724][ T30] __x64_sys_fallocate+0xbc/0x110 [ 2519.928833][ T30] do_syscall_64+0xf3/0x230 [ 2519.933364][ T30] ? clear_bhb_loop+0x35/0x90 [ 2519.956956][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2519.962939][ T30] RIP: 0033:0x7fc86f585d29 [ 2520.005829][ T47] usb 4-1: config index 0 descriptor too short (expected 149, got 148) [ 2520.013983][ T30] RSP: 002b:00007fc87049a038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 2520.019088][ T47] usb 4-1: config 1 has an invalid descriptor of length 253, skipping remainder of the config [ 2520.022548][ T30] RAX: ffffffffffffffda RBX: 00007fc86f775fa0 RCX: 00007fc86f585d29 [ 2520.022571][ T30] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000006 [ 2520.022586][ T30] RBP: 00007fc86f601aa8 R08: 0000000000000000 R09: 0000000000000000 [ 2520.062927][ T47] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2520.097421][ T47] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 2520.114098][ T30] R10: 0000180000000004 R11: 0000000000000246 R12: 0000000000000000 [ 2520.114825][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2520.123346][ T30] R13: 0000000000000000 R14: 00007fc86f775fa0 R15: 00007fffbc9949c8 [ 2520.153320][ T47] usb 4-1: SerialNumber: syz [ 2520.163753][ T30] [ 2520.169827][ T30] [ 2520.169827][ T30] Showing all locks held in the system: [ 2520.175298][ T47] usb 4-1: 0:2 : does not exist [ 2520.200073][ T30] 1 lock held by khungtaskd/30: [ 2520.214013][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 2520.243968][ T30] 2 locks held by getty/5577: [ 2520.253736][ T30] #0: ffff888034cca0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2520.276408][ T30] #1: ffffc90002fd62f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 2520.303964][ T30] 4 locks held by syz.0.3797/22377: [ 2520.319502][ T30] 1 lock held by syz.0.3797/22382: [ 2520.329645][ T30] 1 lock held by syz.1.6367/32658: [ 2520.339764][ T30] #0: ffff888148ca3740 (mapping.invalidate_lock#2){++++}-{4:4}, at: blkdev_fallocate+0x20e/0x490 [ 2520.363938][ T30] 3 locks held by kworker/u8:8/1679: [ 2520.369279][ T30] #0: ffff8880b873e758 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 2520.404786][ T30] #1: ffff88802c71e418 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0xc2/0x1470 [ 2520.442483][ T30] #2: ffff8880b872a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 2520.463742][ T30] 1 lock held by syz.2.6808/1832: [ 2520.471167][ T30] #0: ffff888148ca3740 (mapping.invalidate_lock#2){++++}-{4:4}, at: page_cache_ra_unbounded+0x142/0x720 [ 2520.503808][ T30] [ 2520.506202][ T30] ============================================= [ 2520.506202][ T30] [ 2520.533961][ T30] NMI backtrace for cpu 1 [ 2520.538341][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 2520.548867][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2520.558947][ T30] Call Trace: [ 2520.562245][ T30] [ 2520.565202][ T30] dump_stack_lvl+0x241/0x360 [ 2520.569935][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2520.575154][ T30] ? __pfx__printk+0x10/0x10 [ 2520.579778][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 2520.584745][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2520.590228][ T30] ? _printk+0xd5/0x120 [ 2520.594415][ T30] ? __pfx__printk+0x10/0x10 [ 2520.599030][ T30] ? __wake_up_klogd+0xcc/0x110 [ 2520.603908][ T30] ? __pfx__printk+0x10/0x10 [ 2520.608525][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 2520.613575][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2520.619591][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 2520.625609][ T30] watchdog+0xff6/0x1040 [ 2520.629890][ T30] ? watchdog+0x1ea/0x1040 [ 2520.634342][ T30] ? __pfx_watchdog+0x10/0x10 [ 2520.639049][ T30] kthread+0x2f0/0x390 [ 2520.643140][ T30] ? __pfx_watchdog+0x10/0x10 [ 2520.647839][ T30] ? __pfx_kthread+0x10/0x10 [ 2520.652454][ T30] ret_from_fork+0x4b/0x80 [ 2520.656906][ T30] ? __pfx_kthread+0x10/0x10 [ 2520.661526][ T30] ret_from_fork_asm+0x1a/0x30 [ 2520.666333][ T30] [ 2520.669415][ C1] vkms_vblank_simulate: vblank timer overrun [ 2520.676346][ T30] Sending NMI from CPU 1 to CPUs 0: [ 2520.682133][ C0] NMI backtrace for cpu 0 [ 2520.682148][ C0] CPU: 0 UID: 0 PID: 16767 Comm: kworker/u8:3 Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 2520.682169][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2520.682180][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 2520.682202][ C0] RIP: 0010:debug_object_assert_init+0x1d3/0x4b0 [ 2520.682231][ C0] Code: ff c7 4d 85 ed 74 3b 49 8d 5d 18 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 06 84 42 fd 4c 39 33 0f 84 f8 00 00 00 <4c> 89 e8 48 c1 e8 03 42 80 3c 20 00 74 c3 4c 89 ef e8 e7 83 42 fd [ 2520.682246][ C0] RSP: 0018:ffffc9000484f740 EFLAGS: 00000012 [ 2520.682260][ C0] RAX: 1ffff11008585ffb RBX: ffff888042c2ffd8 RCX: 0000000000000001 [ 2520.682273][ C0] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc9000484f620 [ 2520.682286][ C0] RBP: ffffc9000484f850 R08: 0000000000000003 R09: fffff52000909ec4 [ 2520.682298][ C0] R10: dffffc0000000000 R11: fffff52000909ec4 R12: dffffc0000000000 [ 2520.682312][ C0] R13: ffff888042c2ffc0 R14: ffff88806aafdb28 R15: 0000000000000001 [ 2520.682324][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 2520.682339][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2520.682351][ C0] CR2: 0000000020000280 CR3: 000000000e736000 CR4: 00000000003526f0 [ 2520.682375][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2520.682386][ C0] DR3: 0000000000000016 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2520.682398][ C0] Call Trace: [ 2520.682404][ C0] [ 2520.682412][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 2520.682432][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 2520.682452][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2520.682471][ C0] ? nmi_handle+0x2a/0x5a0 [ 2520.682497][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2520.682521][ C0] ? nmi_handle+0x14f/0x5a0 [ 2520.682539][ C0] ? nmi_handle+0x2a/0x5a0 [ 2520.682558][ C0] ? debug_object_assert_init+0x1d3/0x4b0 [ 2520.682582][ C0] ? default_do_nmi+0x63/0x160 [ 2520.682601][ C0] ? exc_nmi+0x123/0x1f0 [ 2520.682618][ C0] ? end_repeat_nmi+0xf/0x53 [ 2520.682640][ C0] ? debug_object_assert_init+0x1d3/0x4b0 [ 2520.682665][ C0] ? debug_object_assert_init+0x1d3/0x4b0 [ 2520.682690][ C0] ? debug_object_assert_init+0x1d3/0x4b0 [ 2520.682715][ C0] [ 2520.682721][ C0] [ 2520.682727][ C0] ? __lock_acquire+0x1397/0x2100 [ 2520.682746][ C0] ? __pfx_debug_object_assert_init+0x10/0x10 [ 2520.682774][ C0] ? mark_lock+0x9a/0x360 [ 2520.682795][ C0] __mod_timer+0x10d/0xeb0 [ 2520.682819][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 2520.682840][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 2520.682864][ C0] ? __pfx___mod_timer+0x10/0x10 [ 2520.682886][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 2520.682908][ C0] ? ieee80211_ibss_work+0x303/0x14c0 [ 2520.682927][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2520.682954][ C0] ieee80211_ibss_work+0x4f0/0x14c0 [ 2520.682972][ C0] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 2520.682992][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 2520.683014][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 2520.683035][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2520.683055][ C0] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 2520.683071][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 2520.683095][ C0] ? skb_dequeue+0x113/0x150 [ 2520.683117][ C0] ? ieee80211_iface_work+0xc06/0xf20 [ 2520.683141][ C0] ? ieee80211_iface_work+0xe6b/0xf20 [ 2520.683163][ C0] cfg80211_wiphy_work+0x2db/0x480 [ 2520.683180][ C0] ? process_scheduled_works+0x976/0x1840 [ 2520.683205][ C0] process_scheduled_works+0xa66/0x1840 [ 2520.683242][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 2520.683270][ C0] ? assign_work+0x364/0x3d0 [ 2520.683296][ C0] worker_thread+0x870/0xd30 [ 2520.683319][ C0] ? __kthread_parkme+0x169/0x1d0 [ 2520.683337][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2520.683353][ C0] kthread+0x2f0/0x390 [ 2520.683377][ C0] ? __pfx_worker_thread+0x10/0x10 [ 2520.683392][ C0] ? __pfx_kthread+0x10/0x10 [ 2520.683411][ C0] ret_from_fork+0x4b/0x80 [ 2520.683426][ C0] ? __pfx_kthread+0x10/0x10 [ 2520.683444][ C0] ret_from_fork_asm+0x1a/0x30 [ 2520.683474][ C0] [ 2520.743758][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2520.743778][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc4-syzkaller-00004-gf07044dd0df0 #0 [ 2520.743801][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2520.743813][ T30] Call Trace: [ 2520.743821][ T30] [ 2520.743830][ T30] dump_stack_lvl+0x241/0x360 [ 2520.743860][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2520.743883][ T30] ? __pfx__printk+0x10/0x10 [ 2520.743901][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 2520.743927][ T30] ? vscnprintf+0x5d/0x90 [ 2520.743950][ T30] panic+0x349/0x880 [ 2520.743972][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2520.743994][ T30] ? __pfx_panic+0x10/0x10 [ 2520.744013][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 2520.744038][ T30] ? __irq_work_queue_local+0x137/0x410 [ 2520.744059][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 2520.744078][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 2520.744099][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 2520.744122][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 2520.744146][ T30] watchdog+0x1035/0x1040 [ 2520.744167][ T30] ? watchdog+0x1ea/0x1040 [ 2520.744191][ T30] ? __pfx_watchdog+0x10/0x10 [ 2520.744210][ T30] kthread+0x2f0/0x390 [ 2520.744229][ T30] ? __pfx_watchdog+0x10/0x10 [ 2520.744247][ T30] ? __pfx_kthread+0x10/0x10 [ 2520.744267][ T30] ret_from_fork+0x4b/0x80 [ 2520.744284][ T30] ? __pfx_kthread+0x10/0x10 [ 2520.744304][ T30] ret_from_fork_asm+0x1a/0x30 [ 2520.744339][ T30] [ 2521.238288][ T30] Kernel Offset: disabled [ 2521.242617][ T30] Rebooting in 86400 seconds..