last executing test programs: 23m56.912877393s ago: executing program 0 (id=23): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) setsockopt$sock_int(r3, 0x1, 0x3c, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x0, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000002080)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60f2a400000c2f00fe880000000000000000000000000001fe8000000000000000000000000000aa34"], 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/image_size', 0x169a82, 0x0) sendfile(r4, r4, 0x0, 0x30) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x418180, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000380)={0x2, @vbi={0x97, 0x3, 0x101, 0x56544943, [0x6, 0x3], [0x2, 0x10000], 0x1}}) socket(0x22, 0x2, 0x21) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 23m53.613246256s ago: executing program 0 (id=30): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r1, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd700205e1ffff040000000800090002"], 0x34}}, 0x4000000) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xe7ac4000) r8 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000000000000044d564b"]) r10 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r10, 0xc0045516, &(0x7f00000000c0)=0x81) readv(r10, &(0x7f00000006c0)=[{&(0x7f0000001480)=""/4082, 0x48}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r10, 0xc1105517, &(0x7f0000000340)={{0xffffffff, 0x5, 0x20000, 0xfffffffc, 'syz0\x00'}, 0x2, 0x2, 0x5, 0x0, 0x0, 0xff, 'syz0\x00', 0x0}) ioctl$SNDCTL_MIDI_PRETIME(r7, 0xc0046d00, &(0x7f0000000180)=0x9) 23m51.515333063s ago: executing program 0 (id=35): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000004500)='./file0\x00', &(0x7f0000004540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) sendmmsg$unix(r1, &(0x7f0000004800)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000440)="957ba0c86d0eee3b47fa1631181488469d10151f5133c5a3517e1477f7ba2790508b023311d1958335ba52311de9bd483ed304c467d9f5761807642c9b362e2cbbb1b5ec24b7b86a4747b7c20027ca4544a17593ce0bbcf129cf2bfc0134d1ccf1bad6f67ca3798f6329", 0x6a}], 0x1, &(0x7f00000006c0)=[@rights={{0x28, 0x1, 0x1, [r2, r5, r4, r4, r5, r2]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff, r2, r3, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, r4, r3]}}], 0xa0, 0x811}}, {{&(0x7f0000000780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000002900)="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", 0x1000}], 0x1, &(0x7f0000003ac0)=[@rights={{0x20, 0x1, 0x1, [r5, r3, r3, r4]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x24, 0x1, 0x1, [r5, 0xffffffffffffffff, r3, r3, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r3, 0xffffffffffffffff, r5, r5, r3]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r5, r2, r3, r3]}}], 0x108, 0x20040000}}, {{&(0x7f0000003c00)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004000)=[{&(0x7f0000003c80)="9159d8062e2bb07a71051cb22f7814ab3a8134de1ffb6f0ebd76e06cc2b7199a1ea66359a5b24a28af63761eb45b937ddab5ac5ec4551ef7de5861c0d8b63ad7f0f10d73fcd29e8b1883438137f13c9b0b09bd4d010f2f6e28f306850369d989f40be3d15977e8fdc255633a21b4589aaae00afb875cfabcf2abfbf25f6a8a71b0e1e91e5fba7054b6741de0e9127128c21e774a35280e53153ec1c99543b503b3b356971dd156764f75f7634ea7cdbc", 0xb0}, {&(0x7f0000003d40)}, {&(0x7f0000003d80)="a81e49cee1c87d38dd9af5120d67a204567666ad61fcf8644a9737bae139285d6ee3fc9fa176323cc7979e8ecd1cfc89ca307969621d7b2cb9f05cb62c045672b0ed1f838e94dd148ebc294d7fc5d70c1dac16c9ca34c9846e32b557fc40afa086f7ec67ebb9f59f06d5b67e049815d736f9a735af29faff4645b216fcba4218ca77a62e632c26ef113fdaf92c9fff66f029663006a23e046355f54759d7752b8e6092eee27f263c84a3e5e74ab6a7a4f5ab90081c7b51d71f3eb2aca535e85f8ef5dc30466b8cd915fba8798bb135e4d8efd012c2", 0xd5}, {&(0x7f0000003e80)="3d4194a29b36ea156c409cc2cd7744197a3f4ec1ab24d8a98d9af76847e0a837decaf28c04214a27c2297288894491bb611e02be55b1f23f3689f273d7226e35e5cbb42f9aaccaa6825664de91510a5631f40c3855126ff66899493a431c273c8cd23fcf4e8bb68c72a4", 0x6a}, {&(0x7f0000003f00)="c86e5f1adba098ded9107ee087f3f8d37dac59d2b3e7647eec368bcd1b8731ed2d42b19e0502632e064729286a8ba865610bb26b6920bb72d29f14bd92386c738baa7a929d5b13512a74ddbb6f002b4614b36d2cdfe76f4b324685fd004a4420f0ecc1b5f5aecd4e880326a5ff65afa012f73ae8be2419c669b216b2b2227074df336a723ee416054be832873d59524ffbc61f57f0b054d74f0653dbb64731d39ac884412d33a115970988a084c4e044046881b586490b0ead330817b58dfded4a4982c0d3d5d55e5e993224857ed6c2aaf8e9560bff0db9dd0eedfc2835ee65378cf8a695ad9e4df9673afb39ca82be7b63", 0xf2}], 0x5, &(0x7f0000004680)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @rights={{0x2c, 0x1, 0x1, [r2, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r4, r5]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r0, 0x0, r6}}}, @rights={{0x24, 0x1, 0x1, [r3, r1, r3, r5, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x1c, 0x1, 0x1, [r1, r2, r4]}}], 0x148, 0x801}}], 0x3, 0x8000) 23m49.576013128s ago: executing program 0 (id=39): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x8, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x4, 0x0, 0x9, 0x0, 0xa, 0x50, 0x10}]}, &(0x7f0000000080)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x4, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e21, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x40000000000000}, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x38}]}]}, 0xfc}}, 0x48880) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) umount2(&(0x7f0000000480)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x17, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000004073010500000000009500"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 23m49.156203517s ago: executing program 0 (id=42): syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a01010044140503", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f00000023c0)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f1068109e733e1a6876", 0x10, 0xfffffffffffffffe) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'tunl0\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x0, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x5e55b37311de6d89, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x6}}}}}) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c000078ac1414000a0101004414050300000000000000000a010101000000"], 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0.::/', 0x0) r2 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r2, r3, r2}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 23m48.200038858s ago: executing program 0 (id=45): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0xa6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x20c9, 0x0, 0x0, &(0x7f0000000140)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) futimesat(r0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)={{}, {0x77359400}}) 23m46.990016827s ago: executing program 32 (id=45): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0xa6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_setup(0x20c9, 0x0, 0x0, &(0x7f0000000140)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) futimesat(r0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)={{}, {0x77359400}}) 9m12.530230728s ago: executing program 2 (id=2388): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f0000000600)=[{&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f00000000c0)=""/229, 0xe5}, {&(0x7f00000001c0)=""/73, 0x49}, {&(0x7f00000002c0)=""/251, 0xfb}, {&(0x7f00000003c0)=""/197, 0xc5}, {&(0x7f00000004c0)=""/76, 0x4c}, {&(0x7f0000000540)=""/189, 0xbd}], 0x7, &(0x7f0000000680)=""/20, 0x14}, 0x9}], 0x1, 0x2, &(0x7f0000000700)) r1 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = dup2(r2, r2) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000300)={0x440, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x1}, 0x8) sendto$inet(r2, &(0x7f0000000100)="ab", 0xffe0, 0x40048c4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) write$FUSE_INIT(r1, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1}}, 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000900)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x6, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002680)=ANY=[@ANYBLOB="200000006900030500000000000000000000000000000000080001000200"], 0x20}}, 0x0) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r4, 0xc040565e, &(0x7f00000001c0)={0x4, 0x1, 0x7, {0x40, 0x10, 0xccf5, 0x2}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'erspan0\x00', &(0x7f0000000780)={'sit0\x00', 0x0, 0x20, 0x1, 0x2, 0x8, {{0x23, 0x4, 0x0, 0x1c, 0x8c, 0x67, 0x0, 0x40, 0x4, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x2f, 0x0, [{0x6, 0xb, "3509665fcc712ace5f"}, {0x5, 0x12, "ce2766968c5201523c512ed65a8ce60a"}, {0x1, 0xc, "eab4dbc0b84cb8795d8c"}]}, @ssrr={0x89, 0xf, 0x58, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0xe5, [@private=0xa010102]}, @noop, @timestamp={0x44, 0x70, 0xf9, 0x0, 0x4, [0x7f, 0x3, 0xfffffc01]}, @generic={0x94, 0xe, "684c15b75df96ed2989421ee"}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x3e, 0x3, 0x1, [{@multicast2, 0x1ff}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000880)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000009c0)={'syztnl0\x00', &(0x7f0000000cc0)={'erspan0\x00', r6, 0x7, 0x20, 0x0, 0x6, {{0x28, 0x4, 0x0, 0x1, 0xa0, 0x68, 0x0, 0xfa, 0x2f, 0x0, @loopback, @multicast2, {[@cipso={0x86, 0x44, 0x3, [{0x6, 0x8, "e494fc23e999"}, {0x7, 0x11, "df937ded7ad50729065ef8a7e8c69d"}, {0x7, 0x7, "53263f199f"}, {0x2, 0xd, "dc3b5f56cca9fb42e1fa60"}, {0x5, 0xa, "7ce40a275544b2a6"}, {0x2, 0x7, "9c2a270879"}]}, @timestamp_addr={0x44, 0x1c, 0x75, 0x1, 0x3, [{@private=0xa010102, 0x1}, {@local, 0x9}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x9}]}, @noop, @cipso={0x86, 0x28, 0xffffffffffffffff, [{0x0, 0x7, "6406000000"}, {0x4, 0x4, "0246"}, {0x7, 0xd, "563e4c70a6acdc3d28522d"}, {0x2, 0xa, "1fb39e7b9cf122a2"}]}]}}}}}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb000018"], &(0x7f0000000100)=""/189, 0x3c, 0xbd, 0x1, 0x0, 0x0, @void, @value}, 0x28) r10 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000440)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) write$smackfs_load(r10, &(0x7f0000000100)=ANY=[], 0x36) dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000c80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c40)={&(0x7f0000001080)=ANY=[@ANYBLOB="08020000", @ANYRES16=0x0, @ANYRES8=r9, @ANYRESOCT=r11, @ANYRESOCT=r6, @ANYRES32=0x0, @ANYBLOB="34000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000400040040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="b400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400ff030000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400000100003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRESHEX=r5, @ANYBLOB], 0x208}, 0x1, 0x0, 0x0, 0x800}, 0x4000080) 9m11.684533772s ago: executing program 2 (id=2391): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r2, 0x0, 0x10d00, 0xf) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet(0x2, 0x2, 0x1) bind$inet(r4, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r5 = socket(0x2, 0x2, 0x1) bind$unix(r5, &(0x7f0000000000)=@abs, 0x6e) syz_emit_ethernet(0x3e, &(0x7f0000000180)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00e1ff", 0x8, 0x3a, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, @local, {[], @echo_reply={0x81, 0x0, 0x0, 0xbc64, 0xf801}}}}}}, 0x0) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34c8, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000200)) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r6, 0x200, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x1c}}, 0x4004800) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x6}, 0xc) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x4, 0x0, 0x0, @broadcast=0x1000000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e210000}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev, 0xfffffff5}, {@private}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@dev={0xac, 0x14, 0x14, 0xfe}}]}]}}}}}}}, 0x0) 9m10.665126758s ago: executing program 2 (id=2393): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000440)) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000040)={0x0, 0xffff, 0x5c3e}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(0xffffffffffffffff, 0x0, 0x2000c000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_ADAP_G_LOG_ADDRS(r6, 0x805c6103, &(0x7f0000000680)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000003c0)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x90, &(0x7f0000000100)=""/144, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$TCPDIAG_GETSOCK(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012003b77"], 0x4c}}, 0x0) (fail_nth: 1) socket$inet_icmp(0x2, 0x2, 0x1) 9m8.634298604s ago: executing program 2 (id=2397): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000080), 0xfffffffffffffffc, 0x0) r1 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/186, 0xba}, {&(0x7f000001b700)=""/4096, 0x1000}, {&(0x7f0000000400)=""/194, 0xc2}, {&(0x7f0000000100)=""/66, 0x42}, {&(0x7f0000000280)=""/45, 0x2d}, {&(0x7f0000000300)=""/183, 0xb7}, {&(0x7f0000000500)=""/10, 0xa}], 0x7, &(0x7f00000005c0)=""/145, 0x91}, 0x400}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000680)=""/21, 0x15}, {&(0x7f00000006c0)=""/102, 0x66}, {&(0x7f0000000740)=""/208, 0xd0}, {&(0x7f0000000840)=""/139, 0x8b}, {&(0x7f0000000900)=""/254, 0xfe}, {&(0x7f0000000a00)=""/132, 0x84}, {&(0x7f0000000ac0)=""/211, 0xd3}, {&(0x7f0000000bc0)=""/154, 0x9a}], 0x8, &(0x7f0000000d00)=""/165, 0xa5}, 0x2}, {{&(0x7f0000000dc0)=@xdp, 0x80, &(0x7f0000000ec0)=[{&(0x7f0000000e40)}, {&(0x7f0000000e80)=""/53, 0x35}], 0x2, &(0x7f0000000f00)=""/71, 0x47}, 0xd7}, {{&(0x7f0000000f80)=@ax25={{0x3, @null}, [@remote, @default, @null, @rose, @remote, @rose]}, 0x80, &(0x7f0000001100)=[{&(0x7f0000001000)=""/219, 0xdb}], 0x1, &(0x7f0000001140)=""/197, 0xc5}, 0xd01}, {{&(0x7f0000001240)=@isdn, 0x80, &(0x7f00000012c0)=[{&(0x7f000001c700)=""/4096, 0x1000}], 0x1, &(0x7f000001d700)=""/4096, 0x1000}, 0xb}, {{&(0x7f0000001380)=@x25, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001400)=""/146, 0x92}, {&(0x7f0000001300)=""/27, 0x1b}], 0x2}, 0x6}, {{&(0x7f0000001500)=@caif=@dbg, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001580)=""/50, 0x32}, {&(0x7f00000015c0)=""/192, 0xc0}, {&(0x7f0000001680)=""/224, 0xe0}, {&(0x7f0000001780)=""/7, 0x7}, {&(0x7f00000017c0)=""/244, 0xf4}, {&(0x7f00000018c0)=""/89, 0x59}, {&(0x7f0000001940)=""/207, 0xcf}, {&(0x7f0000001a40)=""/55, 0x37}], 0x8, &(0x7f0000001b00)=""/31, 0x1f}, 0x1000}], 0x7, 0x2000, &(0x7f0000001d00)={0x77359400}) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000080)={0x8}) r3 = open(&(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000001c0)=0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x10) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 9m6.626489022s ago: executing program 2 (id=2403): openat$smackfs_ipv6host(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x9cb5, 0x2) syz_open_dev$vim2m(&(0x7f00000000c0), 0x9cb5, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@security={'security\x00', 0x4, 0x4, 0x3b8, 0xffffffff, 0xd0, 0x0, 0x1a8, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'ipvlan1\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'geneve1\x00', 'macvlan0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x3, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000200)={0x0, 0x20, 0x2, {0x1, @raw_data="ab4f50197556377c18ce2ac60148ff4159ec9f2626a3764c477053892bde648477f2412e4e45920efd9e4ed32463224f7c68ec76b27acb196ae1a9d4a2ae3bc8dd9959b57ccb8311438ecc503eceba88237db41267530b5c1a67025ffb48c5dc13f8a0d25774ce731e2ab75945cb7c708ed987e6821b128c6dcb4469b10f6a93e2aaccddf26d49ee6463a3568fe1f80288863c011b865892018f9f79eabbfae3c16db65f7f8ea37925df7c6e13aa93ef0d6523dc472739898e6a91df22e82edafda6a7930ad71aa2"}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x24, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @dev}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x2}]}]}]}, 0xb8}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x4) 9m5.933046997s ago: executing program 2 (id=2406): r0 = socket$inet6(0xa, 0x2, 0x40) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x85, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e23, 0x0, @empty}}, 0x1, 0xfffe, 0x550, 0x833, 0x0, 0x4}, &(0x7f00000001c0)=0x9c) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="03000000125afc24040000100a0000880000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x313306, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) connect$unix(r3, 0x0, 0x0) 9m4.730811372s ago: executing program 33 (id=2406): r0 = socket$inet6(0xa, 0x2, 0x40) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, 0x0, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x85, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e23, 0x0, @empty}}, 0x1, 0xfffe, 0x550, 0x833, 0x0, 0x4}, &(0x7f00000001c0)=0x9c) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="03000000125afc24040000100a0000880000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x313306, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) connect$unix(r3, 0x0, 0x0) 2m10.03259672s ago: executing program 6 (id=3302): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10000000202, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001380), r2) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01012bbd707c77f6bc70e467023900fcdbdf2527000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004880}, 0x8800) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bic\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)="93bffc", 0x3}], 0x1}}], 0x1, 0xc0) sendto$inet(r0, &(0x7f0000001a80)="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", 0x7f9e, 0x20000000, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r5, 0x1, 0x7, 0x0, &(0x7f0000000080)) r6 = socket$inet(0x2, 0x3, 0x37) getsockopt$inet_mreqsrc(r6, 0x0, 0x52, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00022dbd7020fedbdf250100"/26, @ANYRES32=r9, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000090) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r8) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 2m8.862518624s ago: executing program 6 (id=3308): close(0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00'}, 0x10) r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) keyctl$read(0xb, r0, &(0x7f0000000040)=""/117, 0x75) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340), &(0x7f0000000140)=0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x4004, @fd_index=0x3, 0x7f, 0x4, 0x3, 0x15, 0x1, {0x2}}) 2m6.979233902s ago: executing program 6 (id=3310): ioperm(0x284, 0x7f, 0xe3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000340)={r1}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000700)) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGABS20(r5, 0x40044591, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4820) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r6) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r6) recvmmsg(r6, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/196, 0xc4}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000440)=""/160, 0xa0}, {&(0x7f0000000100)=""/119, 0x77}, {&(0x7f0000003c40)=""/4087, 0xff7}, {&(0x7f0000001840)=""/105, 0x69}, {&(0x7f00000018c0)=""/147, 0x93}, {&(0x7f0000005c80)=""/4108, 0x100c}, {&(0x7f0000001640)=""/238, 0xee}], 0x8}, 0x80000000}], 0x3, 0x40008062, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0)=0x198, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0x4a93, &(0x7f0000000640)={0x0, 0xfb1d, 0x1888, 0x3, 0x22e, 0x0, r3}, &(0x7f00000001c0), &(0x7f00000006c0)) io_uring_enter(r7, 0x6259, 0x0, 0x8, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000080)=@unlock_all, 0xb) 2m2.351249407s ago: executing program 6 (id=3312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b0009008000", 0x2c}], 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000045c0)={0x0, 0x0}, &(0x7f0000004600)=0xc) sendmmsg$unix(r1, &(0x7f0000004800)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000440)="957ba0c86d0eee3b47fa1631181488469d10151f5133c5a3517e1477f7ba2790508b023311d1958335ba52311de9bd483ed304c467d9f5761807642c9b362e2cbbb1b5ec24b7b86a4747b7c20027ca4544a17593ce0bbcf129cf2bfc0134d1ccf1bad6f67ca3798f6329", 0x6a}], 0x1, &(0x7f00000006c0)=[@rights={{0x28, 0x1, 0x1, [r2, r5, r4, r4, r5, r2]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff, r2, r3, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, r4, r3]}}], 0xa0, 0x811}}, {{&(0x7f0000000780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000002900)="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", 0x1000}], 0x1, &(0x7f0000003ac0)=[@rights={{0x20, 0x1, 0x1, [r5, r3, r3, r4]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x24, 0x1, 0x1, [r5, 0xffffffffffffffff, r3, r3, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r3, 0xffffffffffffffff, r5, r5, r3]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r5, r2, r3, r3]}}], 0x108, 0x20040000}}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000003c80)="9159d8062e2bb07a71051cb22f7814ab3a8134de1ffb6f0ebd76e06cc2b7199a1ea66359a5b24a28af63761eb45b937ddab5ac5ec4551ef7de5861c0d8b63ad7f0f10d73fcd29e8b1883438137f13c9b0b09bd4d010f2f6e28f306850369d989f40be3d15977e8fdc255633a21b4589aaae00afb875cfabcf2abfbf25f6a8a71b0e1e91e5fba7054b6741de0e9127128c21e774a35280e53153e", 0x9a}, {&(0x7f0000003d40)}, {&(0x7f0000003d80)="a81e49cee1c87d38dd9af5120d67a204567666ad61fcf8644a9737bae139285d6ee3fc9fa176323cc7979e8ecd1cfc89ca307969621d7b2cb9f05cb62c045672b0ed1f838e94dd148ebc294d7fc5d70c1dac16c9ca34c9846e32b557fc40afa086f7ec67ebb9f59f06d5b67e049815d736f9a735af29faff4645b216fcba4218ca77a62e632c26ef113fdaf92c9fff66f029663006a23e046355f54759d7752b8e6092eee27f263c84a3e5e74ab6a7a4f5ab90081c7b51d71f3eb2aca535e85f8ef5dc30466b8cd915fba8798bb135", 0xcf}, {0x0}, {&(0x7f0000003f00)="c86e5f1adba098ded9107ee087f3f8d37dac59d2b3e7647eec368bcd1b8731ed2d42b19e0502632e064729286a8ba865610bb26b6920bb72d29f14bd92386c738baa7a929d5b13512a74ddbb6f002b4614b36d2cdfe76f4b324685fd004a4420f0ecc1b5f5aecd4e880326a5ff65afa012f73ae8be2419c669b216b2b2227074df336a723ee416054be832873d59524ffbc61f57f0b054d74f0653dbb64731d39ac884412d33a115970988a084c4e044046881b586490b0ead330817b58dfded4a4982c0d3d5d55e5e993224857ed6c2aaf8e9560bff0db9dd0eedfc2835ee65378cf8a695ad9e4df9673afb39ca82be7b63", 0xf2}], 0x5, &(0x7f0000004680)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @rights={{0x2c, 0x1, 0x1, [r2, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r4, r5]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x24, 0x1, 0x1, [r3, r1, r3, r5, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0, r6}}}, @rights={{0x1c, 0x1, 0x1, [r1, r2, r4]}}], 0x148, 0x801}}], 0x3, 0x8000) 2m0.549198802s ago: executing program 6 (id=3316): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) r2 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000980)="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", 0x5c1, 0xfffffffffffffffb) keyctl$update(0x2, r2, &(0x7f0000000000)="11868a", 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x1a, &(0x7f0000000100)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x6f8b, 0x0, 0x0, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xc9c}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @alu={0x4, 0x0, 0x6, 0x6, 0x9, 0xfffffffffffffff8, 0x1}, @map_val={0x18, 0x9, 0x2, 0x0, r1}], &(0x7f0000000200)='GPL\x00', 0x0, 0xab, &(0x7f0000000240)=""/171, 0x40f00, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x0, 0xd, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000380)=[r1, r1, 0x1, r1, r1, r1, r1, r1, r1, r1], 0x0, 0x10, 0x6, @void, @value}, 0x94) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000480)={@remote, @private}, &(0x7f00000004c0)=0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) socket(0x1e, 0x1, 0x0) connect$tipc(r1, &(0x7f0000000000)=@id={0x1e, 0x3, 0x3, {0x4e22, 0x3}}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m56.910243434s ago: executing program 6 (id=3321): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000001600)=ANY=[@ANYBLOB="12010000d972a440b72040155ab701020301090212000100000000"], 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_usb_control_io$printer(r0, &(0x7f00000013c0)={0x14, &(0x7f0000001340)={0x20, 0x21, 0x2d, {0x2d, 0x8, "9bd3045c4521325487fbf76ab15401e176541e5b078b8b06b5540d78ea590c3198c9d83d8b4afa15f509b4"}}, &(0x7f0000001380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf8ff}}}, &(0x7f00000015c0)={0x34, 0x0, 0x0, &(0x7f0000001480)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000014c0)={0x20, 0x0, 0x5d, {0x5b, "c06f7f99579be65d77d98f3dcc9527c3540b898850af70acb47f3faeab8525805167e03e3f043b804ff558b1fd03d61cbf7fd003bd65b667e0965a82368be09adf99949f8a8c5e5b254aaa77a758f937dfdd1d204a8a7041cd2f9d"}}, &(0x7f0000001540)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000001580)={0x20, 0x0, 0x1, 0x19}}) getsockopt$bt_hci(r1, 0x84, 0x7f, 0x0, &(0x7f0000000000)) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0x18, 0x1, "d9"}, 0x0, 0x0}) prlimit64(0x0, 0x3, &(0x7f0000001200)={0x3ff, 0x7b35}, &(0x7f0000001240)) io_setup(0x7, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) eventfd2(0xffffffff, 0x80000) io_submit(r2, 0x1, &(0x7f0000000180)=[&(0x7f0000001240)={0x0, 0x0, 0x0, 0x5, 0xff, r3, 0x0, 0x0, 0x6}]) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000001180)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000001640)=ANY=[], 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r6, 0xa, 0x12) dup2(r6, r7) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000580)={0x14, &(0x7f0000000680)={0x40, 0x9, 0xc0, {0xc0, 0x9, "9c69988bd1cdf2c7a073e79f09005eab5bebbe3273367e679f83a41780c11d22591f35f5296133cb829516295d6e0c2aef8300050607324d74f7b1e7231bcb9175cf4df71c2986c4d35a8b8ce61b58a9aa0181d7be030e0a963e5d7fec1c4959c82146929aff35395ac119cfaf3d29426a15209274bdc6a99c0b1048f0fe837cfb4ffaf801427b6097f78b59d912234078becda501f292631ed415fe8f261aef39b85104726e1475c0fe11ce6f998ac7d8f1170f60ddf50ffbd4988dca52"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000840)={0x1c, &(0x7f0000000780)={0x0, 0x6, 0x6c, "f9821298f5ee436cb7812c05ad447feb719a23369067a8bbf7e447204279201b9b1e137da6ce72ef533a9912789934257ecff085a3708239f1c510349e4ab6ba8612876630bb94c193109d731e00a19c02cb4b22641cc84a64d7446c5bfd0d405a5c541a9359560e6d1e93de"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x94}}) 1m56.556257696s ago: executing program 3 (id=3323): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180060206"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c91024002000050018021c0008000101fdff040003000077b7bbcf040d00050000809ccbe300faff"], 0x29) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) kexec_load(0x2, 0x0, 0x0, 0x2) gettid() mmap(&(0x7f00008c7000/0x3000)=nil, 0x3000, 0x0, 0x8031, 0xffffffffffffffff, 0x8000000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) open(&(0x7f0000000340)='./file0\x00', 0x80fd, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1997e358660e994000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056087d7200000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r7, &(0x7f00000000c0)='lp\x00', 0xfffffdef) 1m52.790202856s ago: executing program 3 (id=3328): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9494) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000100)={'syz0\x00', {0x0, 0x0, 0x80, 0xfffd}, 0x7, [0x0, 0x80000000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x400, 0x3], [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x200, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4aa, 0x0, 0x0, 0x200], [0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1000]}, 0x45c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r2, &(0x7f00000011c0)=""/4117, 0x200021d5) r3 = getpid() r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000200)={0x268, 0x0, 0x5, 0x401, 0x0, 0x0, {0x5, 0x0, 0x9}, [{{0x254, 0x1, {{0x0, 0x40}, 0x1, 0xe, 0x5, 0x1, 0xb, 'syz1\x00', "0f8cdcf7f2b060ccde97cfb8f25c5d6472cdebd250ecbcb1409ddf6760623856", "e8531bcc89bec319739adad00e5f8d860184e6cdb43680062f0839d5e3cb5b30", [{0x101, 0x1000, {0x1, 0x5}}, {0x3, 0x20, {0x0, 0xc}}, {0x2, 0x4, {0x0, 0x6}}, {0x1, 0x1, {0x1, 0xa}}, {0x6, 0xffff, {0x3, 0x3ff}}, {0x6, 0x9, {0x2, 0x3}}, {0x9, 0x10, {0x3, 0x9}}, {0x8, 0x5, {0x3}}, {0xa0, 0x8, {0x1, 0x7}}, {0x2, 0x6, {0x2, 0x101}}, {0x3, 0x56fd, {0x1, 0x31}}, {0x2, 0x37da, {0x1, 0xfffffffa}}, {0x6, 0x8, {0x6, 0x6}}, {0xabe6, 0xe, {0x1, 0x2}}, {0x7d0, 0xfc00, {0x3, 0x2}}, {0xfff, 0x8, {0x2, 0x7}}, {0x2000, 0xffff, {0x1, 0x7fffffff}}, {0xfff8, 0x3ff, {0x3, 0x3}}, {0x8, 0x7, {0x2, 0x9}}, {0xfff9, 0x6, {0x3, 0x6}}, {0x3, 0xf, {0x3, 0x6}}, {0x0, 0x5f1, {0x1, 0x6}}, {0x6, 0x5, {0x2, 0xffff}}, {0x9, 0x4, {0x3, 0x309}}, {0x38, 0xdfd, {0x2}}, {0x4, 0x7, {0x2, 0x1}}, {0xfffd, 0x5d, {0x2, 0x9}}, {0x6, 0xffff, {0x3, 0x4}}, {0x3, 0xec, {0x1, 0x8}}, {0x1, 0x101, {0x2, 0x4}}, {0x5b, 0x8, {0x0, 0x6bd}}, {0x9, 0x6a4f, {0x1, 0x3}}, {0xfff9, 0xc, {0x2, 0x7fffffff}}, {0x2, 0x8, {0x3, 0x3}}, {0x6, 0xfe01, {0x2, 0x8}}, {0x5, 0xfffa, {0x2, 0xffff0001}}, {0x6, 0x3, {0x3, 0x239}}, {0x6, 0x1, {0x2, 0x3}}, {0xa8e0, 0x2, {0x0, 0x2}}, {0x0, 0x200, {0x2, 0x74}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104000000000000000000040000", @ANYRES32=0x0, @ANYBLOB="80420000000000001400030076657468305f746f5f626f6e6400000008003a00", @ANYBLOB='\b\x00('], 0x44}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9ab46000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) 1m52.636921465s ago: executing program 5 (id=3329): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='b 1223'], 0xa) 1m52.115540045s ago: executing program 1 (id=3330): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ustat(0x1000000000003, &(0x7f0000000340)) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000280)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, {0x0, r4}}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00008d7000/0x2000)=nil) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) r6 = socket$inet6(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000380)='yeah\x00', 0x5) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x800, 0x0, 0x3, 0x1}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) munlock(&(0x7f0000462000/0x3000)=nil, 0x3000) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @private=0xa010100}}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000240)='snd_soc_jack_irq\x00', r9}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m51.404753003s ago: executing program 5 (id=3331): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001012010000000000000000000000000a50000000060a0b040000000000000000020000081c000480180001800e000100636f6e6e6c696d6974000000040002800900010073797a30000000000900020073797a320000000005000740bb000000140000001100010000000000000000000000000a"], 0x78}}, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wg0\x00'}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd95, 0x0, 0x1, 0x0, 0x0, 0x4009050}, 0x24008000) 1m49.812169236s ago: executing program 4 (id=3332): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_buf(r3, 0x1, 0x2b, &(0x7f00000001c0)=""/104, &(0x7f0000000040)=0x68) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1m45.777455037s ago: executing program 3 (id=3333): socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @remote, 0x218}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) io_uring_setup(0x7884, &(0x7f0000000a40)={0x0, 0x0, 0x2, 0xfffffffe, 0x3bd}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000280)={'sit0\x00', 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/xfrm_stat\x00') read$FUSE(r5, &(0x7f0000000340)={0x2020}, 0xcb0a) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="180000002400010300000000000000000100"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000063013d000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r6, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8001}, {{0x0, 0x0, 0x0}, 0x9}], 0x3, 0x2000, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000040)={r7, r2, r3, 0x0, 0x3, 0xddffffff}) 1m45.636847884s ago: executing program 4 (id=3334): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10000000202, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001380), r2) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01012bbd707c77f6bc70e467023900fcdbdf2527000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004880}, 0x8800) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bic\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)="93bffc", 0x3}], 0x1}}], 0x1, 0xc0) sendto$inet(r0, &(0x7f0000001a80)="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", 0x7f9e, 0x20000000, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r5, 0x1, 0x7, 0x0, &(0x7f0000000080)) r6 = socket$inet(0x2, 0x3, 0x37) getsockopt$inet_mreqsrc(r6, 0x0, 0x52, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00022dbd7020fedbdf250100"/26, @ANYRES32=r9, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000090) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r8) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 1m44.39065452s ago: executing program 5 (id=3335): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') (fail_nth: 5) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0}, 0x18) pipe2$9p(&(0x7f00000001c0), 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) 1m42.735164952s ago: executing program 1 (id=3336): ioperm(0x284, 0x7f, 0xe3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000340)={r1}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000700)) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGABS20(r5, 0x40044591, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4820) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r6) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r6) recvmmsg(r6, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/196, 0xc4}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000440)=""/160, 0xa0}, {&(0x7f0000000100)=""/119, 0x77}, {&(0x7f0000003c40)=""/4087, 0xff7}, {&(0x7f0000001840)=""/105, 0x69}, {&(0x7f00000018c0)=""/147, 0x93}, {&(0x7f0000005c80)=""/4108, 0x100c}, {&(0x7f0000001640)=""/238, 0xee}], 0x8}, 0x80000000}], 0x4, 0x40008062, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0x4a93, &(0x7f0000000640)={0x0, 0xfb1d, 0x1888, 0x3, 0x22e, 0x0, r3}, &(0x7f00000001c0), &(0x7f00000006c0)) io_uring_enter(r7, 0x6259, 0x0, 0x8, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000080)=@unlock_all, 0xb) 1m34.9934916s ago: executing program 34 (id=3321): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000001600)=ANY=[@ANYBLOB="12010000d972a440b72040155ab701020301090212000100000000"], 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_usb_control_io$printer(r0, &(0x7f00000013c0)={0x14, &(0x7f0000001340)={0x20, 0x21, 0x2d, {0x2d, 0x8, "9bd3045c4521325487fbf76ab15401e176541e5b078b8b06b5540d78ea590c3198c9d83d8b4afa15f509b4"}}, &(0x7f0000001380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf8ff}}}, &(0x7f00000015c0)={0x34, 0x0, 0x0, &(0x7f0000001480)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000014c0)={0x20, 0x0, 0x5d, {0x5b, "c06f7f99579be65d77d98f3dcc9527c3540b898850af70acb47f3faeab8525805167e03e3f043b804ff558b1fd03d61cbf7fd003bd65b667e0965a82368be09adf99949f8a8c5e5b254aaa77a758f937dfdd1d204a8a7041cd2f9d"}}, &(0x7f0000001540)={0x20, 0x1, 0x1, 0x9}, &(0x7f0000001580)={0x20, 0x0, 0x1, 0x19}}) getsockopt$bt_hci(r1, 0x84, 0x7f, 0x0, &(0x7f0000000000)) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f00000002c0)={0x0, 0x18, 0x1, "d9"}, 0x0, 0x0}) prlimit64(0x0, 0x3, &(0x7f0000001200)={0x3ff, 0x7b35}, &(0x7f0000001240)) io_setup(0x7, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r4, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) eventfd2(0xffffffff, 0x80000) io_submit(r2, 0x1, &(0x7f0000000180)=[&(0x7f0000001240)={0x0, 0x0, 0x0, 0x5, 0xff, r3, 0x0, 0x0, 0x6}]) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000600)={0x34, &(0x7f0000001180)={0x0, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000001640)=ANY=[], 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000004"], 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r6, 0xa, 0x12) dup2(r6, r7) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000580)={0x14, &(0x7f0000000680)={0x40, 0x9, 0xc0, {0xc0, 0x9, "9c69988bd1cdf2c7a073e79f09005eab5bebbe3273367e679f83a41780c11d22591f35f5296133cb829516295d6e0c2aef8300050607324d74f7b1e7231bcb9175cf4df71c2986c4d35a8b8ce61b58a9aa0181d7be030e0a963e5d7fec1c4959c82146929aff35395ac119cfaf3d29426a15209274bdc6a99c0b1048f0fe837cfb4ffaf801427b6097f78b59d912234078becda501f292631ed415fe8f261aef39b85104726e1475c0fe11ce6f998ac7d8f1170f60ddf50ffbd4988dca52"}}, &(0x7f0000000280)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000840)={0x1c, &(0x7f0000000780)={0x0, 0x6, 0x6c, "f9821298f5ee436cb7812c05ad447feb719a23369067a8bbf7e447204279201b9b1e137da6ce72ef533a9912789934257ecff085a3708239f1c510349e4ab6ba8612876630bb94c193109d731e00a19c02cb4b22641cc84a64d7446c5bfd0d405a5c541a9359560e6d1e93de"}, &(0x7f00000005c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x94}}) 1m34.972582758s ago: executing program 4 (id=3338): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000003c000701fcffffff00000000017c0000100036800c00020008000000007000000c000180060206"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c91024002000050018021c0008000101fdff040003000077b7bbcf040d00050000809ccbe300faff"], 0x29) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) kexec_load(0x2, 0x0, 0x0, 0x2) gettid() mmap(&(0x7f00008c7000/0x3000)=nil, 0x3000, 0x0, 0x8031, 0xffffffffffffffff, 0x8000000) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) open(&(0x7f0000000340)='./file0\x00', 0x80fd, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000f60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1997e358660e994000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000056087d7200000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r7, &(0x7f00000000c0)='lp\x00', 0xfffffdef) 1m34.971761532s ago: executing program 5 (id=3339): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000000}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000000000000a80013007b0009008000", 0x2c}], 0x1) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000045c0)={0x0, 0x0}, &(0x7f0000004600)=0xc) sendmmsg$unix(r1, &(0x7f0000004800)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000440)="957ba0c86d0eee3b47fa1631181488469d10151f5133c5a3517e1477f7ba2790508b023311d1958335ba52311de9bd483ed304c467d9f5761807642c9b362e2cbbb1b5ec24b7b86a4747b7c20027ca4544a17593ce0bbcf129cf2bfc0134d1ccf1bad6f67ca3798f6329", 0x6a}], 0x1, &(0x7f00000006c0)=[@rights={{0x28, 0x1, 0x1, [r2, r5, r4, r4, r5, r2]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, r5, 0xffffffffffffffff, r2, r3, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r3, r4, r3]}}], 0xa0, 0x811}}, {{&(0x7f0000000780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000002900)="29adef07305d2198391f1baa8591d872163c2be991b477c80b7ca7353453fb3eb855431871d365ca0de0496ba815e7ca4e6ddd5f3eb961552ec7a6fbc56c46711322f70473f8054086ec54d969df0f36a343ce7ad248ef2d932c92e0ff2e381910a14f222890c9515d4780edfd7624ab4958e536dd6f9db07748d5b31344a54dceaaede3810db9f9c1810c4461fcaeae743140c8556e0d69b2476d1c68636bfc15dcb32fa98ad4798f53838fb4a6862fc2c63cfa00a3c504816b3d8d403858ab7a1249aa19a1f6e531d104ea754b2b9fe0e60db7df3781e20ae6ec25a8c96ddc93d1f8a903591579d208d14fd454ae0fed2a80414bc5be31456aaa1d3024645748f55a1dd3c0167ae541311e8a044dca597544f9c0b2916b7eb76151ee8cde82637b729085499fd7f443b84ce31ec3d32ecc419de92bce520d36729b4fda5fa564f3dea0158c0b9ef63d2d03874bece10d8a12cae07e5faad14a7392c2cca2770fe204eaeb43bbf0e0710ab0ece14859824335b543ace81a9a85b28928485c5878e7fab5715d2d02e5eb3dcb69c4770b3799cef230397392324ddb5b5a4ecac19612367aa8d64d7e538886bc4b3d49db1cc5cb5361353fc49de5b9fe68ea4f3963ee58ad7b2ca5e8f92bc36e457bb2ed726e5da4e8b4b5c21f32c061461cdac53b4fcd60ff5f1ce2937ad31bef9442918ef74a0f80ef718d202790283ba11ca3c7e0c22878bdbb6dbbac855f542bb0b3bb2664b4e6a6b3d814d0c79319900dd97f0739c2ef1d411ef9f6f65b30c4ed2f2b6adbbe9a628767390b47e3244fa00f0164835d2c8ee26476c5591b81470000f71fb23c5427f3b8be83621d9d6a44168efd924328011698caecf5f9239b3fb9b43bcc969f620cc76c88a73f03e72001afc55ba789a977f5fbe4f05a9f0f13aac65547386fd3b25bca8be60238b0358b2e2f9d42eb3679f97e8627453a6a846e05658c09c39804e0abe56986eb84575a7c6be7f4e42b879d0c1dd2b6748d9599914824361c19dd1d30ceded7b3eac881985f51dfb1a2ad76442c77215df5cb4ff67b1723ce0cc9ce2901963b7f5a91576d4227f499546800e1a3b744cfc1d1df6a04dbc3cc3dc23dd9f83ac698acd62ac505d07d56dc8ce4aa18ba3ddf4430eec08dbf19f970004c04e51b9e259ea080012314de18b0db59700b5a1c38d25e8e3982a5cf23eac027cf21e38a3fe59f49f5523c86fc6aa2d9faefa2ec22ea359d8bd3f652f5ba6c954f2c3ee485011da23527cb52df3e3a010a25d48b5dc6ba4fcdf16345d358fc842c6e804035feb4779da4f55cc57b72a899f78f6d4e2491431541f97dc04ae04a44f218e911dde193510950774d7e88e552b695556834ded99db2212ba0cc462122bea7faffd0e60d818cfd96934a1cc2086e99489c2bf6001a665282182534e0c41f87d16f28b761612df6c0f91b8b1c57b0bee279c836ad1c38968829d81905e69aa21f2f1ffb34cdc2b157ef7125bb689c677f424a9a489922aab9320b9eac176a7a0159ba0a6b3e8dedbe79165393c7d8010b3367302f784b3294cd893dfb80003495be5475266ffcab1e8ddf577bd4548138b5f0985a6f5a06222db043b6a9c283bb7d30c4b4a5c595e57037d8668b46886fa87231480d10e566b467a6740c5108f9dafed6bcb4514f8fd3b5bc724a8689018836ffac9650e04a84b833312cfc152cd8923b2040a784227fd7e3ab373aeb3c84519796cf1e9fefda5a45f56df9f5983d88358d9ff859abd417c242051319460a127bac63c8c46d6a45a5e64eee70d2f8d1b6252fb8a83db8921fb366eb64c23bf497bcc6ee36b959fefc3601c036a967d023b318042d7ab3b0762522b85117adc5b98c7df1f9ce70cc8e568947741a6a0acc32a8ea015b5be082e2d88e8cd7f6250900e655b1bccb42e57d945e148065c5bf9e719f3fcce9368a1e9f384503578f33df2a4bc0775b4f1d31740f1b19e48c1b5e6040d85dffb994edcf63ff6200ad1e844264df8f567084dc4ca7e5ad0d49f3326c21eefe1690c0167f676e41cb398c0f3e5a21727a93dd8b942d10c9e6277ff5fed3d6ddb526912e20cee838170d30c6f337fa7adcec6c33d7751e713ea2f3ccbd9b707f2d145b501a4284535ff8d8037e023e2c03d09cefb086534e45be8a185058258ae9dcee3fdedd5cbef78915cb662936698899dc63a57fd576a01d88e8c516668438e1e34eed96159fde45a9c0653a2fcd47fad298e3c9b350e893d33b197b888c188c8f97c5238f1045610ae798fa6d1a818fc047026060fc00ad866a2ddd16aad8565f3c2d53408d499c72dcd7072769a4023c71b94258752352c401a2dba2b0e9810a85cddb8f5d647fd4b4800af90b689e66ac584964591c0a185c122f2358a5a9044bb54db219153e786b7e9fb6bc88538c4117b3fd2c95415ffb0ce978ae52d20fb2e01565c6b97f82ef5005f6038df8dc3bf0a48a6668dbc1d58c891c6bb1b452f8795fe4c6e46feb00dca30125e6d48868a1233b5f5135b48c55ce9211e2bf43e6753987db84446b216831a3a9431d0d1b3bf409355132aa5573eb4bb5406b44149d91bc5ac737b45706650640de7ed75148e22f522714d248b9bfe504e50a3cd8abfd10bd62633f3603dde8f2d2be73dd8635f587e1fb8639a0413825aca042273367239cf0976a4d5963966fa9d48d60fd64fda75d6c4f8be00481db1a1b285f2a0a59053adcdf41f39baa137c78d794cc41f5f96831b17c9f826654ebeb813f3ae4215b7e250affb2c3ecee9b8a2699a9c9ce18ded4dce90bbe6b9ff313722c795db754bcc9218946cc61d3fe6f0383c1fc2f4a52d5dee22f2962f5bd22e6ac9eef068b138760043a6b1873db35919e9f5e0df210d7a25822cba218b5a7ea07cf10640798de44f3e676400ca5c04bd71386036e03043a69f43f0e58cfd54b2eea242c204282f99d8c6d6528a2ad9e1c8abc03fbfcbb0371f377e4345439cef193cc368e4a0017514bf7ece8d481f9ec5eff4b557ced7c908f2868d1cfc0fd52bbe2f4ec11f6c7ed63d6aac0bf8904e8a708dec3b978802f64bfe8ce518c237af71203dbec072cb5c510d1c9d5edb30c29dd5a41980d17f8bc7b28c29f0c0f9cb85c523b5b72184a770c9ce7e3ab32839f9be02109059037dcc96ec445fac754ecea5617b450b0b3f1322810a230842b6ed1d2daa780cac365e97c4a5409f4d05e505a93c927895eed2834ca9323ce3ef5034923952ce472335dc3be1de08146ec52772230884321f7d8882a6b42e902bbcc3cfa48f7da51dc5e2592dfb5722ced794cbdee85f38a6eea429c50ac103bd3748a95fc04578526a9d816dcf4a5177c6e83e76be7bbe015f59dcb08dda27015cf2c87c3ff8c6d1fde09cfa818686e25e5dbd09ae70ee5c132d2abeedddc3946c517461fbb4c3ad8af8ceb2b049da17a6362a6fb6dd087956affc64d28de6b5d26652befbf50e675ab14b6d312c55f09399bbda5d8441bd6a56efa8013ea95d2ade33337e2acb88baf32498826d265ebc337d1b97352ea9b73391799d25bc4b9e992b48404dc91b7730e432bca8fae35c7d70cb787c2bd5f0ffcf9c22c9dc112544ac2c47ba428e1537c1fb614620923165ec749a02b9736204c5f4944792a10ba6a55f60d724ee062787b3dde6e625f7221f9c46a81211d3e322301e23833291cc39f92cc6822b3d0e0ffbe3758ae2bdaff9e1d5d0892f03f1db44c6e934576896193bf0d3fdeabb70d5372f3e5728079d6c46508f273e460eaae8ff4f07cf42954ded5d4510324cf8aa180390cc65d73e55ac81859d9a83ed72e98ca20275e7d5e5f61fedfc3fe799e54001b1a713793b5b02b07119cdd6294e838ccfe245e558e17ab2168d3443e763dbb7e65a578c79af52affcf108f3670f1d38c0f7a6ec986f14939a3b7a983428aa4bc4d53d7bcc47ebcb1baa2a1893ce430ded6b88b9009701acf807e3987d29c06d1c9551d6490a535ddc61b357e3b60cbe89802a4043867ccdad80861a4e592591098651567d21fa6a7c0638108731babc109dc34314cc9798f2de60a9a88862cf6b3978383b08dc61b2b554be89b73228d764eb274fd95ca01cf3cf0b4fd3a94ceb58097edac921c022f37b633e179955bf5a03ebd741fbc4059cfd209f3c9640121ddf541e64264c85fbfed666cdb4e9075df3be808e25e209d80828054b4233de19d96e165c9471ddff4b89b45a731a28b2f40641b78afb874317ae6313c00a03b240a392628ffb906290516ea651b97b7ab6a8f0db9b07739a8bf1b219bf6702e89ddd070825e19c03821a94a8fb28227ab7a3de8b43e0c97304db54010f6f63ee0f2274dae485feb5723a78152aff0669c030198c787e29552cb67c8c4869e4d84c5dbd5f1da1fc4737b9abc7e64b5d5524fa71b5624823878d7904c9ee63b6f3fa40c3e04513c4c8df607934ab3c9b8c6ebcd4674096b440ca9c708518885969964103b4735f599065c3d14467e0df9c53a0243a29f8e51109a2faf1f5703be551260b638893d61770d042cf5ac9c354bfab9e1790ecceb1390cd662a12a63fa0b93a86263f66b38ebf9f35a122b7835727f87424d787fb8aacc5eeb79a17140ca917288180a22c58916595c131f01c304d5e17fbfd50bc2bf990b86a9f275e151e50ead6d10950e1e6964ab96516988c073c2fd1813eddbfb1c0fd4aaaccf45f3e2fed13bb4fa97492e19d78ddf51b9c35813ff9d0b0322f969ae53dd11496de639df6c3c657f224883b599b509518bb4e4ccc1f2b7dd66ef7bd24613bb208ac0e1426d807de24d90213757d7dbcf3fbcfae7c59d3d2ba8614c8a39a1c7c1fd52a7b737b51cf87798be528d33a21873a9d9d7808210efdfaab41cf6d5617730e2c0d22ea4a60f2d3180d4a5ae160e0f3875f2a30c7b7246b12958a59eb5f33b9ceaa46a8943a2236fb2c4188b788f5f115b7d050280fa3a343bcdac96fd7371b45d38a902707beb2bd8e3f841390b753c91d36e5c1da71fe62852ff9c353ce127134a17cc45c10aa91656b06fa140799fd273248f66f89d3623b4a6df747b42f6d6c0677ef6033965bf6682fed36fb35c35aa79dcc2f80235bc41e9e19181925d55ba93eb2d6da384680ff00d488c0016e7057a63a0000b140aad74f0c7e1ff68cbece2b39ebb6f817414cd7e3625d82e9f6c864e59f0e728e42236b74bb9ce6231d5dc4b8be29de2d961b528a831822d7c343fa5de72152e053a9ae7288a54d16738e5327e681799467c034232c69c2b54863466d82d9c96365ac3096519f85ffc5647b6c14441a73a6e03d23a3251f87151e5013d847cbfe037eca0e4e21590250fe0545c115ffe0570259d7689c711d8976291f781758e26dad9687d2e5cab47f56c02323517f038f7adb96f99ec8cb53adb048af6fa178f7907ead3ab5c0d4834d72afa9fe497397dd6d247b9fdb27e291defeebeadf5c4aae02470142a54cecdb283ff8881288f085508f36486784ed57a68e6f01d3c9feea9e28329ddf51584729b08be1e6488a633d66a40b2633bc90506a16ab67b9158cf7a3d8c29cb1d70a83b48e13a1532cbb01608f58d26762162d75ebeebf7813d3ec6720617bc0cd870952500ca98e39eefa448a44f499e392b9d1fd547936b9c8fbe62cd978d7db206b25925bdbddd8e22aed894d6f337c1f374d269b59e31640fcba4279509afa90701f9a52d2b126d7b8eb9589bff77a59201443bcc041afc559704a76c97e4073c08a124b30662cc88ef768c56c2adeb01e77478e64", 0x1000}], 0x1, &(0x7f0000003ac0)=[@rights={{0x20, 0x1, 0x1, [r5, r3, r3, r4]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x24, 0x1, 0x1, [r5, 0xffffffffffffffff, r3, r3, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [r3, 0xffffffffffffffff, r5, r5, r3]}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r5, r2, r3, r3]}}], 0x108, 0x20040000}}, {{0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000003c80)="9159d8062e2bb07a71051cb22f7814ab3a8134de1ffb6f0ebd76e06cc2b7199a1ea66359a5b24a28af63761eb45b937ddab5ac5ec4551ef7de5861c0d8b63ad7f0f10d73fcd29e8b1883438137f13c9b0b09bd4d010f2f6e28f306850369d989f40be3d15977e8fdc255633a21b4589aaae00afb875cfabcf2abfbf25f6a8a71b0e1e91e5fba7054b6741de0e9127128c21e774a35280e53153ec1c99543b503b3b356971d", 0xa5}, {&(0x7f0000003d40)}, {&(0x7f0000003d80)="a81e49cee1c87d38dd9af5120d67a204567666ad61fcf8644a9737bae139285d6ee3fc9fa176323cc7979e8ecd1cfc89ca307969621d7b2cb9f05cb62c045672b0ed1f838e94dd148ebc294d7fc5d70c1dac16c9ca34c9846e32b557fc40afa086f7ec67ebb9f59f06d5b67e049815d736f9a735af29faff4645b216fcba4218ca77a62e632c26ef113fdaf92c9fff66f029663006a23e046355f54759d7752b8e6092eee27f263c84a3e5e74ab6a7a4f5ab90081c7b51d71f3eb2aca535e85f8ef5dc30466b8cd915fba8798bb135", 0xcf}, {0x0}, {&(0x7f0000003f00)="c86e5f1adba098ded9107ee087f3f8d37dac59d2b3e7647eec368bcd1b8731ed2d42b19e0502632e064729286a8ba865610bb26b6920bb72d29f14bd92386c738baa7a929d5b13512a74ddbb6f002b4614b36d2cdfe76f4b324685fd004a4420f0ecc1b5f5aecd4e880326a5ff65afa012f73ae8be2419c669b216b2b2227074df336a723ee416054be832873d59524ffbc61f57f0b054d74f0653dbb64731d39ac884412d33a115970988a084c4e044046881b586490b0ead330817b58dfded4a4982c0d3d5d55e5e993224857ed6c2aaf8e9560bff0db9dd0eedfc2835ee65378cf8a695ad9e4df9673afb39ca82be7b63", 0xf2}], 0x5, &(0x7f0000004680)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r1]}}, @rights={{0x2c, 0x1, 0x1, [r2, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r4, r5]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x24, 0x1, 0x1, [r3, r1, r3, r5, r1]}}, @cred={{0x1c, 0x1, 0x2, {r0, r6}}}, @rights={{0x1c, 0x1, 0x1, [r1, r2, r4]}}], 0x148, 0x801}}], 0x3, 0x8000) 1m34.956012384s ago: executing program 3 (id=3340): r0 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r4}, 0x18) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x8000) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x44, 0x6, 0x4c0, 0x258, 0xd0, 0xd0, 0x0, 0x258, 0x428, 0x428, 0x428, 0x428, 0x428, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {0xff}, {}, 0x11, 0x0, 0x69}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x1, 0x3, 0x0, 0xd}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@addrtype={{0x30}, {0x100, 0x1, 0x0, 0x1}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xf7}}}, {{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xe8, 0x110, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @TTL={0x28}}, {{@ip={@broadcast, @local, 0x0, 0x0, 'lo\x00', 'nr0\x00'}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) readv(0xffffffffffffffff, 0x0, 0x0) write$FUSE_STATFS(0xffffffffffffffff, 0x0, 0x0) getrandom(0x0, 0x0, 0x3) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x6, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027000000000008000a00a8"], 0x6c}}, 0x0) 1m32.616184857s ago: executing program 1 (id=3341): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mount(&(0x7f0000000040)=@nullb, 0x0, &(0x7f0000002280)='ext4\x00', 0x8000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1f00, 0x12) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000040)={0x8, 0xeb, 0xffffffff, 0x2000}) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000001680)={0x4}) epoll_pwait(0xffffffffffffffff, &(0x7f00000016c0)=[{}], 0x1, 0x4, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000140)=0x1, 0x4) bind$can_raw(r3, &(0x7f0000000200)={0x1d, r4}, 0x10) iopl(0x3) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000fef000/0x3000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000002c0)="30f912731ae08c38c66fe9d12e53c00e1340b8240551b3eb9e26a98e70deaf6e0a86492f7dadd1ae5ad91d290d567aa40227f2a0ac6d87a22d289cbbea9ae271c204fb7c4d3b6fb747af0df723f6a9bb4cbdef77b0cd581c5c01f1447cf7b313032bf9617d8fd5743931c1c4853ee559d66b4987466fcc1fb1336eaa54a30bdeff31c416c2114d225a577be156456d2ac646e1da7db6369e90c88a50ec8238069ce40ae30be9a3b4a48b0a24b3b61c08ed063ff72db90f3faefc43809ce5d6b1bdd966baba0a7eef3c0d3c323066a8dc7b4c4842af6698905f94591f164e59d2d99a893704df9b3c394a2f4d908d6b895da39bee81426d494d", 0xf9, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140000000800000000000000000200000214c000000000000000000000000000000000000a000000"], 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m23.654507565s ago: executing program 5 (id=3342): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6}]}, &(0x7f0000000180)='syzkaller\x00', 0xc, 0xd2, &(0x7f00000001c0)=""/210, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x40000}, 0x18) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_team\x00', 0x0}) bind$packet(r2, &(0x7f0000000040)={0x11, 0x19, r3, 0x1, 0x1, 0x6, @broadcast}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000140)={'veth1_to_team\x00', 0x0}) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000200)={r6, 0x1, 0x6, @broadcast}, 0x10) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r6], 0x20}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000e295f120460d7800d2820102030109021b00010200000009042d000145efe400090501", @ANYRES16], 0x0) 1m22.762268766s ago: executing program 3 (id=3343): socket$kcm(0x29, 0x2, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_uring_setup(0x52b4, &(0x7f0000000240)={0x0, 0x1332, 0x10000, 0x0, 0x1d}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x0, 0x34, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0xf) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xff2e) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000001c0)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) creat(&(0x7f00000002c0)='./file0\x00', 0x109) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x1, 0x2], 0x0, 0x0, 0x2, 0x1}}, 0x40) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) 1m22.57328046s ago: executing program 1 (id=3344): syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x80000) sendmsg$nl_netfilter(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={0x0, 0xffffff70}, 0x1, 0x0, 0x0, 0x200050c0}, 0x4000000) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r3, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r5, r4, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000200)={0x48, 0x1, r4, 0x0, 0x4000000000004, 0x7}) ioctl$IOMMU_DESTROY$hwpt(r3, 0x3b80, &(0x7f0000000340)={0x8, r6}) recvmmsg(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000900), 0x3}, 0x17ba}], 0x1e, 0x2000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1m22.563482302s ago: executing program 4 (id=3345): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001012010000000000000000000000000a50000000060a0b040000000000000000020000081c000480180001800e000100636f6e6e6c696d6974000000040002800900010073797a30000000000900020073797a320000000005000740bb000000140000001100010000000000000000000000000a"], 0x78}}, 0x0) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wg0\x00'}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffd95, 0x0, 0x1, 0x0, 0x0, 0x4009050}, 0x24008000) 1m17.008611653s ago: executing program 1 (id=3346): socket$nl_xfrm(0x10, 0x3, 0x6) timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x0) 1m16.719847076s ago: executing program 3 (id=3347): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ustat(0x1000000000003, &(0x7f0000000340)) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000280)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, {0x0, r4}}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00008d7000/0x2000)=nil) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) r6 = socket$inet6(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000380)='yeah\x00', 0x5) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x800, 0x0, 0x3, 0x1}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) munlock(&(0x7f0000462000/0x3000)=nil, 0x3000) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @private=0xa010100}}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000240)='snd_soc_jack_irq\x00', r9}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m10.969777501s ago: executing program 1 (id=3348): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10000000202, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$alg(0x26, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(0x0, r2) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01012bbd707c77f6bc70e467023900fcdbdf2527000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004880}, 0x8800) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bic\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000500)="93bffc", 0x3}], 0x1}}], 0x1, 0xc0) sendto$inet(r0, &(0x7f0000001a80)="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", 0x7f9e, 0x20000000, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_int(r5, 0x1, 0x7, 0x0, &(0x7f0000000080)) r6 = socket$inet(0x2, 0x3, 0x37) getsockopt$inet_mreqsrc(r6, 0x0, 0x52, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000240)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00022dbd7020fedbdf250100"/26, @ANYRES32=r9, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000090) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r8) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) 1m10.911501038s ago: executing program 4 (id=3349): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x54, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) 1m9.652700221s ago: executing program 4 (id=3350): ioperm(0x284, 0x7f, 0xe3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000340)={r1}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000700)) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGABS20(r5, 0x40044591, 0x0) ioctl$EVIOCGRAB(r5, 0x40044590, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4820) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r6) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r6) recvmmsg(r6, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/196, 0xc4}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000440)=""/160, 0xa0}, {&(0x7f0000000100)=""/119, 0x77}, {&(0x7f0000003c40)=""/4087, 0xff7}, {&(0x7f0000001840)=""/105, 0x69}, {&(0x7f00000018c0)=""/147, 0x93}, {&(0x7f0000005c80)=""/4108, 0x100c}, {&(0x7f0000001640)=""/238, 0xee}], 0x8}, 0x80000000}], 0x4, 0x40008062, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r7 = syz_io_uring_setup(0x4a93, &(0x7f0000000640)={0x0, 0xfb1d, 0x1888, 0x3, 0x22e, 0x0, r3}, &(0x7f00000001c0), &(0x7f00000006c0)) io_uring_enter(r7, 0x6259, 0x0, 0x8, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000080)=@unlock_all, 0xb) 1m9.085866867s ago: executing program 5 (id=3351): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448f0, &(0x7f0000000180)="aeb1417c28ba2b3445730097594124ce0eed106b4e5350397275efe94a9d33c8") r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x304}, "62cf08317cee0408", "54996d140c669c1c41c5f3688c8e4ae0", "91e6cd42", "7f561f7ab9bc864b"}, 0x28) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="34000000bfa558deefbc4240e071bd9a3e6339929ba409b12fb2d74c00648e9583ebdb384a79d90ceff6707f16bf546a03822d2135e43f605ef2e3896d03be3b4c2787f0fd51a8dce029108427765b41513cc05eba06cb428ac2384391e0209fb73c055eabdac5c6050bf242e1f3cf89ac09af0982e0a083a2458d0c32d61ef0ab8926c1db3f4284842be3a78eb092eed30768ed993f6c69e031dac424ba05c94253693348dda7a1ad35e7403d2f5f03756b772c67f06530668bb25ad1fb8d5d0d6a528a6a30d5d2f6ce3ea763abaa2ceebcc9bbd23828d3dcdaaf867b87f5954e226cd4e1bd76998a284e21a4b2c09c000000000000000000", @ANYRES16=r7, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r8, @ANYBLOB="18005a801400018005000100300000000500020000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f00000004c0)={@in6={{0xa, 0x4e21, 0x10000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, 0x0, 0x0, 0x1e, 0x0, "5d9ed5ab7ede1bcf73742bc36c0ea13d3dec33e0b7cc1ff724fe1906cf9f7945230bc5d9dfea4ffd1e48aaf9a42de2f58da594d5eb926f70f03d2d46f374a6b62ee9d04ac1bf0bef9600cbd8e4700616"}, 0xd8) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0x1000}, 0x1c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000021840)=[{&(0x7f00000207c0)=""/39, 0x27}], 0x1}, 0x10041) 0s ago: executing program 35 (id=3347): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ustat(0x1000000000003, &(0x7f0000000340)) r1 = syz_io_uring_setup(0x1e1e, &(0x7f0000000380)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000280)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RENAMEAT={0x23, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, {0x0, r4}}) io_uring_enter(r1, 0x48e9, 0x0, 0x2, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00008d7000/0x2000)=nil) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) r6 = socket$inet6(0x10, 0x2, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000380)='yeah\x00', 0x5) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x800, 0x0, 0x3, 0x1}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) munlock(&(0x7f0000462000/0x3000)=nil, 0x3000) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @private=0xa010100}}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000240)='snd_soc_jack_irq\x00', r9}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) kernel console output (not intermixed with test programs): stop unused estimator thread 0... [ 1246.701622][ T5871] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1246.981160][ T5871] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1246.990594][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.006251][ T5871] usb 4-1: Product: ⵉ诛ྫ븡沙苗猵溾捉➶箩뗑짔崩쉒㺽ഴ꜂碸聂耜掄퍯龒퇃ʀ⧴鉘쮭처㐇ꄓ䓄쩪庴㺎塥࡙談궡㓩藊໗稊꾭韏潕歔㎺Ͷ嗅ꗷ噮뛼遒拮긆湠밡﷢Ƶ港쉾䫘⪢汎袭൝砒겕낶짓̔٬ୗ꡶㦜엂耔᫪䮪瓳로Դ娌쒥捻䑍輏谚벞ࣲ譗㿈픅껫碤顁䪍㬑꛷㘧៬밲ꁤ疼㸰飐ퟍ [ 1247.042127][ C1] vkms_vblank_simulate: vblank timer overrun [ 1247.144087][T16976] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1247.184126][T16976] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2983'. [ 1247.623375][ T5871] usb 4-1: Manufacturer: ᕏ暴ٸ䁮尮泇흘⣴鸚軷㤎筃贝瑶黑п䉇꩗걑엡‷嶓푻䭙뒈选駰ꧢ轢衹뵹끾轊᠓嚺묤㨰烯⬸鏠I嫚䣯듘巗杠❜⪱첹啝ক㎱妇课ճ㬉哗촇悓봰ֆꢑᶶ᱗묎Ⱝ䮼꿖펄☩鳵뺈쌮ᭌ卵ᦓ쏖㔬训㫮盛弱뺲䂀ᷯ죫뒠꺤鋁컛貀흭敆 [ 1247.653838][ C1] vkms_vblank_simulate: vblank timer overrun [ 1248.039761][ T5871] usb 4-1: SerialNumber: 睊ⶽ險፾ꢰ㵳 [ 1248.936006][ T9] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1249.663328][ T9] usb 7-1: config 0 has an invalid interface number: 133 but max is 0 [ 1249.681157][ T9] usb 7-1: config 0 has no interface number 0 [ 1249.713430][ T9] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1249.737805][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1249.745934][ T9] usb 7-1: Product: syz [ 1249.752013][ T9] usb 7-1: Manufacturer: syz [ 1249.761680][ T9] usb 7-1: SerialNumber: syz [ 1249.847140][ T9] usb 7-1: config 0 descriptor?? [ 1250.517524][T16998] FAULT_INJECTION: forcing a failure. [ 1250.517524][T16998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1250.530789][T16998] CPU: 1 UID: 0 PID: 16998 Comm: syz.5.2990 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 1250.530820][T16998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1250.530834][T16998] Call Trace: [ 1250.530843][T16998] [ 1250.530852][T16998] dump_stack_lvl+0x189/0x250 [ 1250.530894][T16998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1250.530923][T16998] ? __pfx__printk+0x10/0x10 [ 1250.530970][T16998] should_fail_ex+0x414/0x560 [ 1250.531009][T16998] _copy_to_user+0x31/0xb0 [ 1250.531038][T16998] simple_read_from_buffer+0xe1/0x170 [ 1250.531080][T16998] proc_fail_nth_read+0x1df/0x250 [ 1250.531105][T16998] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1250.531130][T16998] ? rw_verify_area+0x258/0x650 [ 1250.531157][T16998] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1250.531179][T16998] vfs_read+0x1fd/0x980 [ 1250.531213][T16998] ? __pfx___mutex_lock+0x10/0x10 [ 1250.531239][T16998] ? __pfx_vfs_read+0x10/0x10 [ 1250.531268][T16998] ? __fget_files+0x2a/0x420 [ 1250.531315][T16998] ? __fget_files+0x3a0/0x420 [ 1250.531345][T16998] ? __fget_files+0x2a/0x420 [ 1250.531386][T16998] ksys_read+0x145/0x250 [ 1250.531413][T16998] ? __fget_files+0x2a/0x420 [ 1250.531444][T16998] ? __pfx_ksys_read+0x10/0x10 [ 1250.531476][T16998] ? do_syscall_64+0xba/0x210 [ 1250.531506][T16998] do_syscall_64+0xf6/0x210 [ 1250.531531][T16998] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1250.531552][T16998] ? clear_bhb_loop+0x45/0xa0 [ 1250.531578][T16998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.531598][T16998] RIP: 0033:0x7f07a9b8d37c [ 1250.531617][T16998] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1250.531636][T16998] RSP: 002b:00007f07aa9c8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1250.531660][T16998] RAX: ffffffffffffffda RBX: 00007f07a9db6080 RCX: 00007f07a9b8d37c [ 1250.531676][T16998] RDX: 000000000000000f RSI: 00007f07aa9c80a0 RDI: 0000000000000008 [ 1250.531689][T16998] RBP: 00007f07aa9c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1250.531702][T16998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1250.531715][T16998] R13: 0000000000000000 R14: 00007f07a9db6080 R15: 00007ffc57247698 [ 1250.531748][T16998] [ 1250.762685][ T9] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected [ 1250.769908][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1250.776986][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1250.801640][ T9] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81 [ 1250.811600][ T5871] usb 4-1: can't set config #1, error -71 [ 1250.819355][ T5871] usb 4-1: USB disconnect, device number 98 [ 1250.870990][ T9] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1 [ 1250.924675][ T9] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2 [ 1250.964266][T16804] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1250.985461][ T9] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1250.995830][T17001] netlink: 'syz.4.2992': attribute type 10 has an invalid length. [ 1251.005316][T17001] batman_adv: batadv0: Adding interface: wlan0 [ 1251.016381][T17001] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1251.044031][T17001] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active [ 1251.056542][T16804] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1251.069739][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 1251.069758][ T30] audit: type=1400 audit(1220.821:2538): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="B" object="_" requested=w pid=17004 comm="syz.5.2993" saddr=fc02:: daddr=fe80::aa dest=16385 netif=wpan0 [ 1251.077163][T16804] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1251.120159][T16804] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1251.233270][T16982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1251.243551][T16982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1251.279728][ T5912] usb 7-1: USB disconnect, device number 8 [ 1251.296395][ T5912] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1251.332058][ T5912] keyspan 7-1:0.133: device disconnected [ 1251.345287][T16804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1251.379702][T17013] netlink: 'syz.4.2994': attribute type 2 has an invalid length. [ 1251.411213][T16804] 8021q: adding VLAN 0 to HW filter on device team0 [ 1251.640280][ T6002] bridge0: port 1(bridge_slave_0) entered blocking state [ 1251.647580][ T6002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1251.804324][T17020] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1251.837793][T17020] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2995'. [ 1252.422564][ T6002] bridge0: port 2(bridge_slave_1) entered blocking state [ 1252.429814][ T6002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1252.820649][T17025] FAULT_INJECTION: forcing a failure. [ 1252.820649][T17025] name failslab, interval 1, probability 0, space 0, times 0 [ 1252.838611][T17025] CPU: 1 UID: 0 PID: 17025 Comm: syz.3.2996 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 1252.838638][T17025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1252.838649][T17025] Call Trace: [ 1252.838656][T17025] [ 1252.838664][T17025] dump_stack_lvl+0x189/0x250 [ 1252.838693][T17025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1252.838716][T17025] ? __pfx__printk+0x10/0x10 [ 1252.838746][T17025] ? ref_tracker_alloc+0x318/0x460 [ 1252.838766][T17025] should_fail_ex+0x414/0x560 [ 1252.838822][T17025] should_failslab+0xa8/0x100 [ 1252.838851][T17025] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1252.838874][T17025] ? skb_clone+0x212/0x3a0 [ 1252.838901][T17025] skb_clone+0x212/0x3a0 [ 1252.838927][T17025] __netlink_deliver_tap+0x404/0x850 [ 1252.838955][T17025] ? netlink_deliver_tap+0x2e/0x1b0 [ 1252.838974][T17025] netlink_deliver_tap+0x19c/0x1b0 [ 1252.838993][T17025] netlink_unicast+0x72f/0x8d0 [ 1252.839028][T17025] netlink_sendmsg+0x805/0xb30 [ 1252.839045][T17025] ? is_bpf_text_address+0x26/0x2b0 [ 1252.839076][T17025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1252.839101][T17025] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1252.839119][T17025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1252.839137][T17025] __sock_sendmsg+0x219/0x270 [ 1252.839166][T17025] ____sys_sendmsg+0x505/0x830 [ 1252.839197][T17025] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1252.839226][T17025] ? import_iovec+0x74/0xa0 [ 1252.839252][T17025] ___sys_sendmsg+0x21f/0x2a0 [ 1252.839275][T17025] ? __pfx____sys_sendmsg+0x10/0x10 [ 1252.839328][T17025] ? __fget_files+0x2a/0x420 [ 1252.839352][T17025] ? __fget_files+0x3a0/0x420 [ 1252.839386][T17025] __x64_sys_sendmsg+0x19b/0x260 [ 1252.839410][T17025] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1252.839446][T17025] ? do_syscall_64+0xba/0x210 [ 1252.839470][T17025] do_syscall_64+0xf6/0x210 [ 1252.839491][T17025] ? clear_bhb_loop+0x45/0xa0 [ 1252.839512][T17025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.839528][T17025] RIP: 0033:0x7fa54e38e969 [ 1252.839543][T17025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1252.839557][T17025] RSP: 002b:00007fa54f17b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1252.839575][T17025] RAX: ffffffffffffffda RBX: 00007fa54e5b5fa0 RCX: 00007fa54e38e969 [ 1252.839587][T17025] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1252.839597][T17025] RBP: 00007fa54f17b090 R08: 0000000000000000 R09: 0000000000000000 [ 1252.839607][T17025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1252.839617][T17025] R13: 0000000000000000 R14: 00007fa54e5b5fa0 R15: 00007ffec23e6c58 [ 1252.839642][T17025] [ 1253.390461][T16804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1253.456458][T17034] veth1_to_team: entered promiscuous mode [ 1253.559414][T17034] veth1_to_team (unregistering): left promiscuous mode [ 1254.343689][T17034] team0: Port device team_slave_1 removed [ 1254.373941][T17033] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2999'. [ 1254.417734][T17033] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2999'. [ 1254.447088][T17033] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2999'. [ 1254.457269][T17033] netlink: 108 bytes leftover after parsing attributes in process `syz.6.2999'. [ 1254.466449][T17033] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2999'. [ 1254.567984][ T5903] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 1254.662594][T16804] veth0_vlan: entered promiscuous mode [ 1254.681100][T16804] veth1_vlan: entered promiscuous mode [ 1254.740026][T16804] veth0_macvtap: entered promiscuous mode [ 1254.755873][T16804] veth1_macvtap: entered promiscuous mode [ 1254.885033][ T5903] usb 7-1: config 2 has an invalid interface number: 45 but max is 0 [ 1254.916191][ T5903] usb 7-1: config 2 has no interface number 0 [ 1254.923856][ T5865] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 1254.956718][ T5903] usb 7-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 1255.155642][ T5903] usb 7-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid maxpacket 255, setting to 64 [ 1255.161348][T16804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1255.167124][ T5865] usb 4-1: Using ep0 maxpacket: 16 [ 1255.186600][T16804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.194600][ T5903] usb 7-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.d2 [ 1255.212571][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.237619][T16804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1255.248112][ T5903] usb 7-1: Product: syz [ 1255.248135][ T5903] usb 7-1: Manufacturer: syz [ 1255.248152][ T5903] usb 7-1: SerialNumber: syz [ 1255.253002][T17037] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1255.299385][T16804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.311930][T16804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1255.578207][ T5903] kobil_sct 7-1:2.45: KOBIL USB smart card terminal converter detected [ 1255.597068][ T5865] usb 4-1: config 1 interface 0 altsetting 10 bulk endpoint 0x82 has invalid maxpacket 8 [ 1255.615898][ T5865] usb 4-1: config 1 interface 0 altsetting 10 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1255.630044][ T5903] usb 7-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1255.636891][T16804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.692760][ T5865] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1255.701102][ T5903] usb 7-1: USB disconnect, device number 9 [ 1255.717283][ T5865] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1255.722735][T16804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1255.738315][ T5903] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1255.752169][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.763698][ T5865] usb 4-1: Product: ⵉ诛ྫ븡沙苗猵溾捉➶箩뗑짔崩쉒㺽ഴ꜂碸聂耜掄퍯龒퇃ʀ⧴鉘쮭처㐇ꄓ䓄쩪庴㺎塥࡙談궡㓩藊໗稊꾭韏潕歔㎺Ͷ嗅ꗷ噮뛼遒拮긆湠밡﷢Ƶ港쉾䫘⪢汎袭൝砒겕낶짓̔٬ୗ꡶㦜엂耔᫪䮪瓳로Դ娌쒥捻䑍輏谚벞ࣲ譗㿈픅껫碤顁䪍㬑꛷㘧៬밲ꁤ疼㸰飐ퟍ [ 1255.773627][T16804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1255.846549][ T5903] kobil_sct 7-1:2.45: device disconnected [ 1255.849243][T16804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.862798][T16804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1255.891032][T16804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.911916][T16804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1255.937312][T16804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.953415][ T5865] usb 4-1: Manufacturer: ᕏ暴ٸ䁮尮泇흘⣴鸚軷㤎筃贝瑶黑п䉇꩗걑엡‷嶓푻䭙뒈选駰ꧢ轢衹뵹끾轊᠓嚺묤㨰烯⬸鏠I嫚䣯듘巗杠❜⪱첹啝ক㎱妇课ճ㬉哗촇悓봰ֆꢑᶶ᱗묎Ⱝ䮼꿖펄☩鳵뺈쌮ᭌ卵ᦓ쏖㔬训㫮盛弱뺲䂀ᷯ죫뒠꺤鋁컛貀흭敆 [ 1255.963606][T16804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1256.107778][T16804] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.134939][T16804] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.141316][ T5865] usb 4-1: SerialNumber: 睊ⶽ險፾ꢰ㵳 [ 1256.153242][T16804] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.171580][T16804] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1256.234992][T17042] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1256.395834][T17053] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3003'. [ 1256.526387][ T6002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1256.551495][ T6002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1256.614058][ T6002] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1256.640348][ T6002] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1261.199324][T17073] FAULT_INJECTION: forcing a failure. [ 1261.199324][T17073] name failslab, interval 1, probability 0, space 0, times 0 [ 1261.675905][ T5903] IPVS: starting estimator thread 0... [ 1262.365429][T17074] IPVS: using max 26 ests per chain, 62400 per kthread [ 1262.799203][T17073] CPU: 0 UID: 0 PID: 17073 Comm: syz.1.3006 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 1262.799235][T17073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1262.799248][T17073] Call Trace: [ 1262.799255][T17073] [ 1262.799264][T17073] dump_stack_lvl+0x189/0x250 [ 1262.799301][T17073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1262.799329][T17073] ? __pfx__printk+0x10/0x10 [ 1262.799367][T17073] ? ref_tracker_alloc+0x318/0x460 [ 1262.799391][T17073] should_fail_ex+0x414/0x560 [ 1262.799426][T17073] should_failslab+0xa8/0x100 [ 1262.799460][T17073] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1262.799492][T17073] ? skb_clone+0x212/0x3a0 [ 1262.799525][T17073] skb_clone+0x212/0x3a0 [ 1262.799556][T17073] __netlink_deliver_tap+0x404/0x850 [ 1262.799593][T17073] ? netlink_deliver_tap+0x2e/0x1b0 [ 1262.799617][T17073] netlink_deliver_tap+0x19c/0x1b0 [ 1262.799639][T17073] netlink_unicast+0x72f/0x8d0 [ 1262.799683][T17073] netlink_sendmsg+0x805/0xb30 [ 1262.799704][T17073] ? is_bpf_text_address+0x26/0x2b0 [ 1262.799740][T17073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1262.799769][T17073] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1262.799790][T17073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1262.799814][T17073] __sock_sendmsg+0x219/0x270 [ 1262.799849][T17073] ____sys_sendmsg+0x505/0x830 [ 1262.799889][T17073] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1262.799926][T17073] ? import_iovec+0x74/0xa0 [ 1262.799954][T17073] ___sys_sendmsg+0x21f/0x2a0 [ 1262.799977][T17073] ? __pfx____sys_sendmsg+0x10/0x10 [ 1262.800028][T17073] ? __fget_files+0x2a/0x420 [ 1262.800051][T17073] ? __fget_files+0x3a0/0x420 [ 1262.800084][T17073] __x64_sys_sendmsg+0x19b/0x260 [ 1262.800108][T17073] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1262.800144][T17073] ? do_syscall_64+0xba/0x210 [ 1262.800166][T17073] do_syscall_64+0xf6/0x210 [ 1262.800185][T17073] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1262.800201][T17073] ? clear_bhb_loop+0x45/0xa0 [ 1262.800221][T17073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.800237][T17073] RIP: 0033:0x7f7b1378e969 [ 1262.800252][T17073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1262.800267][T17073] RSP: 002b:00007f7b14669038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1262.800285][T17073] RAX: ffffffffffffffda RBX: 00007f7b139b6160 RCX: 00007f7b1378e969 [ 1262.800298][T17073] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 1262.800308][T17073] RBP: 00007f7b14669090 R08: 0000000000000000 R09: 0000000000000000 [ 1262.800318][T17073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1262.800328][T17073] R13: 0000000000000000 R14: 00007f7b139b6160 R15: 00007fffbceb0988 [ 1262.800353][T17073] [ 1263.296352][ T5865] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -32 [ 1263.826246][ T8428] usb 4-1: USB disconnect, device number 99 [ 1264.594979][ T5816] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1264.616291][ T5816] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1264.625191][ T5816] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1264.641911][ T5816] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1264.651888][ T5816] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1264.749713][T17082] netlink: 'syz.6.3010': attribute type 2 has an invalid length. [ 1264.817242][ T5831] Bluetooth: Unexpected continuation frame (len 36) [ 1265.175376][ T9] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 1265.392412][ T9] usb 4-1: too many configurations: 94, using maximum allowed: 8 [ 1265.591837][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1265.636718][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1265.678795][ T9] usb 4-1: Product: syz [ 1265.683396][ T9] usb 4-1: Manufacturer: syz [ 1265.703431][ T9] usb 4-1: SerialNumber: syz [ 1265.724191][ T9] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1265.767693][ T5912] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1266.906802][ T5831] Bluetooth: hci5: command tx timeout [ 1266.928484][ T5912] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1266.935805][ T5912] ath9k_htc: Failed to initialize the device [ 1267.027248][ T5912] usb 4-1: ath9k_htc: USB layer deinitialized [ 1268.028125][T17079] dummy0 speed is unknown, defaulting to 1000 [ 1268.060678][ T30] audit: type=1400 audit(1236.705:2539): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=17099 comm="syz.1.3014" daddr=fe80::aa dest=19999 [ 1269.292664][ T30] audit: type=1400 audit(1236.826:2540): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=17097 comm="syz.4.3015" daddr=::ffff:172.20.20.0 [ 1269.317102][ T5831] Bluetooth: hci5: command tx timeout [ 1269.393717][T17098] FAULT_INJECTION: forcing a failure. [ 1269.393717][T17098] name failslab, interval 1, probability 0, space 0, times 0 [ 1269.508119][T17098] CPU: 1 UID: 0 PID: 17098 Comm: syz.6.3013 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 1269.508152][T17098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1269.508165][T17098] Call Trace: [ 1269.508174][T17098] [ 1269.508185][T17098] dump_stack_lvl+0x189/0x250 [ 1269.508223][T17098] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1269.508251][T17098] ? __pfx__printk+0x10/0x10 [ 1269.508287][T17098] ? __pfx___might_resched+0x10/0x10 [ 1269.508318][T17098] ? fs_reclaim_acquire+0x7d/0x100 [ 1269.508346][T17098] should_fail_ex+0x414/0x560 [ 1269.508385][T17098] should_failslab+0xa8/0x100 [ 1269.508419][T17098] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1269.508449][T17098] ? vm_area_dup+0x2b/0x5c0 [ 1269.508483][T17098] vm_area_dup+0x2b/0x5c0 [ 1269.508526][T17098] __split_vma+0x1a0/0x9b0 [ 1269.508558][T17098] ? __pfx___schedule+0x10/0x10 [ 1269.508585][T17098] ? __pfx___split_vma+0x10/0x10 [ 1269.508626][T17098] ? rcu_is_watching+0x15/0xb0 [ 1269.508659][T17098] vms_gather_munmap_vmas+0x2de/0x12b0 [ 1269.508686][T17098] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1269.508724][T17098] ? mtree_range_walk+0x6a7/0x840 [ 1269.508749][T17098] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1269.508799][T17098] mmap_region+0x5f5/0x1e50 [ 1269.508832][T17098] ? trace_sched_exit_tp+0x38/0x120 [ 1269.508858][T17098] ? __schedule+0x16ad/0x4c70 [ 1269.508882][T17098] ? __pfx_mmap_region+0x10/0x10 [ 1269.508918][T17098] ? kvm_sched_clock_read+0x11/0x20 [ 1269.508983][T17098] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1269.509007][T17098] ? finish_task_switch+0x266/0x950 [ 1269.509033][T17098] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 1269.509070][T17098] ? mm_get_unmapped_area+0xa7/0xd0 [ 1269.509111][T17098] ? shmem_get_unmapped_area+0x2cd/0x910 [ 1269.509146][T17098] ? cap_mmap_addr+0xb0/0x100 [ 1269.509170][T17098] ? bpf_lsm_mmap_addr+0x9/0x20 [ 1269.509193][T17098] ? security_mmap_addr+0x71/0x270 [ 1269.509218][T17098] ? shmem_mapping+0xd/0x50 [ 1269.509242][T17098] ? memfd_check_seals_mmap+0x165/0x200 [ 1269.509268][T17098] do_mmap+0xc68/0x1100 [ 1269.509311][T17098] ? __pfx_do_mmap+0x10/0x10 [ 1269.509338][T17098] ? down_write_killable+0x178/0x230 [ 1269.509367][T17098] ? ksys_write+0x1cb/0x250 [ 1269.509394][T17098] ? __pfx_down_write_killable+0x10/0x10 [ 1269.509432][T17098] vm_mmap_pgoff+0x31b/0x4c0 [ 1269.509469][T17098] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1269.509504][T17098] ? __fget_files+0x2a/0x420 [ 1269.509538][T17098] ? __fget_files+0x2a/0x420 [ 1269.509570][T17098] ? __fget_files+0x2a/0x420 [ 1269.509606][T17098] ksys_mmap_pgoff+0x51f/0x760 [ 1269.509644][T17098] do_syscall_64+0xf6/0x210 [ 1269.509670][T17098] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1269.509690][T17098] ? clear_bhb_loop+0x45/0xa0 [ 1269.509716][T17098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.509736][T17098] RIP: 0033:0x7fa6f5b8e969 [ 1269.509756][T17098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1269.509774][T17098] RSP: 002b:00007fa6f6ab5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1269.509796][T17098] RAX: ffffffffffffffda RBX: 00007fa6f5db5fa0 RCX: 00007fa6f5b8e969 [ 1269.509812][T17098] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 0000200000ffc000 [ 1269.509825][T17098] RBP: 00007fa6f6ab5090 R08: 0000000000000007 R09: 0000000000000000 [ 1269.509838][T17098] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 1269.509851][T17098] R13: 0000000000000000 R14: 00007fa6f5db5fa0 R15: 00007ffd5b5225f8 [ 1269.509884][T17098] [ 1269.900302][ T5865] usb 4-1: USB disconnect, device number 100 [ 1270.544475][ T1088] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.114557][ T1088] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.602579][ T5816] Bluetooth: hci5: command tx timeout [ 1271.747335][ T1088] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.993433][T17122] netlink: 'syz.4.3022': attribute type 2 has an invalid length. [ 1272.357085][ T1088] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.770264][ T5816] Bluetooth: hci5: command tx timeout [ 1276.971139][ T1088] bridge_slave_1: left allmulticast mode [ 1276.976854][ T1088] bridge_slave_1: left promiscuous mode [ 1277.002533][T17157] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 1277.018925][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 1277.193753][ T1088] bridge_slave_0: left allmulticast mode [ 1277.206108][ T1088] bridge_slave_0: left promiscuous mode [ 1277.212042][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.737869][T17171] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1277.786186][T17171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3032'. [ 1278.124248][T17173] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3032'. [ 1278.251340][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 1278.280392][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 1278.316937][T17179] qnx6: unable to read the first superblock [ 1278.625858][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 1279.503096][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 1279.639794][T17174] ceph: No mds server is up or the cluster is laggy [ 1281.235884][T17199] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3039'. [ 1281.597657][ T5912] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1281.820382][ T5912] usb 7-1: Using ep0 maxpacket: 32 [ 1281.828332][ T5912] usb 7-1: config 0 has an invalid interface number: 85 but max is 0 [ 1281.828379][ T5912] usb 7-1: config 0 has no interface number 0 [ 1281.828573][ T5912] usb 7-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1281.828615][ T5912] usb 7-1: config 0 interface 85 has no altsetting 0 [ 1281.920599][ T5912] usb 7-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1281.958673][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.984364][ T5912] usb 7-1: Product: syz [ 1281.999261][ T5912] usb 7-1: Manufacturer: syz [ 1282.033511][ T5912] usb 7-1: SerialNumber: syz [ 1282.139976][ T5912] usb 7-1: config 0 descriptor?? [ 1282.481228][ T5912] appletouch 7-1:0.85: Failed to read mode from device. [ 1282.482417][ T5912] appletouch 7-1:0.85: probe with driver appletouch failed with error -5 [ 1282.792506][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1282.807265][ T1088] bond_slave_0: left allmulticast mode [ 1282.818677][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1282.830404][ T1088] bond_slave_1: left allmulticast mode [ 1282.840456][ T1088] bond0 (unregistering): Released all slaves [ 1282.865347][T17079] chnl_net:caif_netlink_parms(): no params data found [ 1282.952108][ T5912] usb 7-1: USB disconnect, device number 10 [ 1283.123847][ T1088] : left promiscuous mode [ 1283.260247][T17209] veth1_to_team: entered promiscuous mode [ 1284.003217][T17209] veth1_to_team (unregistering): left promiscuous mode [ 1284.047211][T17209] team0: Port device team_slave_1 removed [ 1284.066915][T17213] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3043'. [ 1284.078054][T17213] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3043'. [ 1284.090913][T17213] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3043'. [ 1284.100790][T17213] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3043'. [ 1284.111097][T17213] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3043'. [ 1284.350259][ T5871] usb 4-1: new full-speed USB device number 101 using dummy_hcd [ 1285.150353][T17079] bridge0: port 1(bridge_slave_0) entered blocking state [ 1285.230758][T17079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1285.264383][T17079] bridge_slave_0: entered allmulticast mode [ 1285.272977][T17079] bridge_slave_0: entered promiscuous mode [ 1285.321177][ T1088] hsr_slave_0: left promiscuous mode [ 1285.339384][ T1088] hsr_slave_1: left promiscuous mode [ 1285.345518][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1285.620487][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1285.633484][ T5871] usb 4-1: config 2 has an invalid interface number: 45 but max is 0 [ 1285.648074][ T5871] usb 4-1: config 2 has no interface number 0 [ 1285.654496][ T5871] usb 4-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 1285.666684][ T5871] usb 4-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid maxpacket 255, setting to 64 [ 1285.717791][ T8428] libceph: connect (1)[c::]:6789 error -101 [ 1285.740853][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1285.748680][ T8428] libceph: mon0 (1)[c::]:6789 connect error [ 1285.766219][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1285.812335][ T5871] usb 4-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.d2 [ 1285.823174][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.831821][ T5871] usb 4-1: Product: syz [ 1285.836337][ T5871] usb 4-1: Manufacturer: syz [ 1285.841399][ T5871] usb 4-1: SerialNumber: syz [ 1285.886972][T17216] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1286.047589][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 1286.094426][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 1286.112445][ T5871] kobil_sct 4-1:2.45: KOBIL USB smart card terminal converter detected [ 1286.112861][ T1088] veth1_macvtap: left promiscuous mode [ 1286.187274][ T5871] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1286.202523][ T1088] veth0_macvtap: left promiscuous mode [ 1286.225624][ T1088] veth1_vlan: left promiscuous mode [ 1286.378097][ T1088] veth0_vlan: left promiscuous mode [ 1286.563427][ T5871] usb 4-1: USB disconnect, device number 101 [ 1286.603669][ T5871] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1286.704652][ T8428] libceph: connect (1)[c::]:6789 error -101 [ 1286.713746][ T5871] kobil_sct 4-1:2.45: device disconnected [ 1286.726423][ T8428] libceph: mon0 (1)[c::]:6789 connect error [ 1286.754535][T17231] ceph: No mds server is up or the cluster is laggy [ 1287.753861][ T30] audit: type=1400 audit(1255.132:2541): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=17251 comm="syz.3.3051" daddr=::ffff:172.20.20.0 [ 1289.005624][ T1088] team0 (unregistering): Port device team_slave_0 removed [ 1290.027301][T17079] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.038595][T17079] bridge0: port 2(bridge_slave_1) entered disabled state [ 1290.045949][T17079] bridge_slave_1: entered allmulticast mode [ 1290.059623][T17079] bridge_slave_1: entered promiscuous mode [ 1290.309851][T17269] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3055'. [ 1290.341224][T17269] netlink: 'syz.3.3055': attribute type 7 has an invalid length. [ 1290.349092][T17269] netlink: 'syz.3.3055': attribute type 8 has an invalid length. [ 1290.386235][ T30] audit: type=1400 audit(1257.601:2542): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=17267 comm="syz.3.3055" daddr=fe80::aa [ 1290.397216][T17269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3055'. [ 1290.417502][T17079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1290.979859][T17079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1291.265704][T17079] team0: Port device team_slave_0 added [ 1291.317626][T17079] team0: Port device team_slave_1 added [ 1292.174211][T17079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1292.181661][T17079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1292.235359][T17079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1292.674987][ T1088] IPVS: stop unused estimator thread 0... [ 1292.697744][T17079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1292.729370][T17079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1292.857500][T17079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1293.127724][T17301] Invalid source name [ 1293.132197][T17301] UBIFS error (pid: 17301): cannot open "./file0", error -22 [ 1295.789881][T17079] hsr_slave_0: entered promiscuous mode [ 1295.806288][T17079] hsr_slave_1: entered promiscuous mode [ 1295.846507][T17079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1295.885251][T17079] Cannot create hsr debugfs directory [ 1297.258062][ T8428] usb 4-1: new full-speed USB device number 102 using dummy_hcd [ 1297.528288][ T8428] usb 4-1: not running at top speed; connect to a high speed hub [ 1297.570804][ T8428] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 1297.641714][ T8428] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1297.661778][ T8428] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.717353][ T8428] usb 4-1: Product: syz [ 1297.721677][ T8428] usb 4-1: Manufacturer: syz [ 1297.726406][ T8428] usb 4-1: SerialNumber: syz [ 1298.513445][ T30] audit: type=1400 audit(1265.197:2543): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=17320 comm="syz.3.3065" daddr=fe88::104 [ 1298.556580][ T30] audit: type=1400 audit(1265.197:2544): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=17320 comm="syz.3.3065" daddr=fe88::104 [ 1298.577047][ T8428] cdc_ncm 4-1:1.0: bind() failure [ 1298.597740][ T8428] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1298.607914][ T8428] cdc_ncm 4-1:1.1: bind() failure [ 1298.617406][ T8428] usb 4-1: USB disconnect, device number 102 [ 1298.637408][T17335] FAULT_INJECTION: forcing a failure. [ 1298.637408][T17335] name failslab, interval 1, probability 0, space 0, times 0 [ 1298.650625][T17335] CPU: 1 UID: 0 PID: 17335 Comm: syz.4.3070 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 1298.650656][T17335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1298.650669][T17335] Call Trace: [ 1298.650678][T17335] [ 1298.650688][T17335] dump_stack_lvl+0x189/0x250 [ 1298.650725][T17335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1298.650753][T17335] ? __pfx__printk+0x10/0x10 [ 1298.650787][T17335] ? __pfx___might_resched+0x10/0x10 [ 1298.650818][T17335] ? fs_reclaim_acquire+0x7d/0x100 [ 1298.650852][T17335] should_fail_ex+0x414/0x560 [ 1298.650889][T17335] should_failslab+0xa8/0x100 [ 1298.650921][T17335] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1298.650950][T17335] ? ep_ptable_queue_proc+0x5c/0x200 [ 1298.650985][T17335] ep_ptable_queue_proc+0x5c/0x200 [ 1298.651014][T17335] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 1298.651041][T17335] vga_arb_fpoll+0x5f/0xb0 [ 1298.651066][T17335] ? __pfx_vga_arb_fpoll+0x10/0x10 [ 1298.651091][T17335] ep_insert+0x115e/0x1a00 [ 1298.651132][T17335] ? __pfx_ep_insert+0x10/0x10 [ 1298.651157][T17335] ? __pfx___mutex_lock+0x10/0x10 [ 1298.651184][T17335] ? __fget_files+0x2a/0x420 [ 1298.651218][T17335] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 1298.651246][T17335] ? __fget_files+0x3a0/0x420 [ 1298.651275][T17335] ? __fget_files+0x2a/0x420 [ 1298.651315][T17335] do_epoll_ctl+0x80e/0xe80 [ 1298.651351][T17335] __x64_sys_epoll_ctl+0x163/0x1a0 [ 1298.651377][T17335] ? rcu_is_watching+0x15/0xb0 [ 1298.651406][T17335] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1298.651437][T17335] ? do_syscall_64+0xba/0x210 [ 1298.651466][T17335] do_syscall_64+0xf6/0x210 [ 1298.651491][T17335] ? clear_bhb_loop+0x45/0xa0 [ 1298.651516][T17335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.651536][T17335] RIP: 0033:0x7f38cb58e969 [ 1298.651554][T17335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1298.651573][T17335] RSP: 002b:00007f38c93f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1298.651595][T17335] RAX: ffffffffffffffda RBX: 00007f38cb7b5fa0 RCX: 00007f38cb58e969 [ 1298.651610][T17335] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000004 [ 1298.651622][T17335] RBP: 00007f38c93f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1298.651636][T17335] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 1298.651649][T17335] R13: 0000000000000000 R14: 00007f38cb7b5fa0 R15: 00007ffcd6e101b8 [ 1298.651681][T17335] [ 1299.878346][T17340] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1299.885030][T17340] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1299.923077][T17340] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1300.021938][T17340] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1300.326800][T17337] IPVS: set_ctl: invalid protocol: 47 172.20.20.170:20000 [ 1300.372948][T17340] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1300.383401][T17079] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1300.398227][T17079] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1300.409150][T17340] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1300.419982][T17340] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1300.436963][T17079] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1300.448056][T17340] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1300.460204][T17079] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1300.505705][ T30] audit: type=1326 audit(1267.058:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17351 comm="syz.3.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54e38e969 code=0x7ffc0000 [ 1300.599603][T17352] netlink: 'syz.3.3074': attribute type 10 has an invalid length. [ 1300.614795][ T30] audit: type=1326 audit(1267.058:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17351 comm="syz.3.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54e38e969 code=0x7ffc0000 [ 1300.635931][ C0] vkms_vblank_simulate: vblank timer overrun [ 1300.717386][ T30] audit: type=1326 audit(1267.058:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17351 comm="syz.3.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=136 compat=0 ip=0x7fa54e38e969 code=0x7ffc0000 [ 1300.768190][T17079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1300.801720][ T30] audit: type=1326 audit(1267.068:2548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17351 comm="syz.3.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54e38e969 code=0x7ffc0000 [ 1300.835928][T17079] 8021q: adding VLAN 0 to HW filter on device team0 [ 1300.870170][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1300.877388][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1300.893856][ T30] audit: type=1326 audit(1267.068:2549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17351 comm="syz.3.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fa54e38e969 code=0x7ffc0000 [ 1300.959490][T14335] bridge0: port 2(bridge_slave_1) entered blocking state [ 1300.966729][T14335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1300.979209][ T30] audit: type=1326 audit(1267.068:2550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17351 comm="syz.3.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa54e38e9a3 code=0x7ffc0000 [ 1301.039885][ T30] audit: type=1326 audit(1267.068:2551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17351 comm="syz.3.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa54e38e9a3 code=0x7ffc0000 [ 1301.079733][T17079] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1301.119432][ T30] audit: type=1326 audit(1267.068:2552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17351 comm="syz.3.3074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa54e38e969 code=0x7ffc0000 [ 1301.157659][T17079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1301.416298][ T9] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1301.993684][ T5816] Bluetooth: hci3: command 0x0406 tx timeout [ 1302.078893][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 1302.153903][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1302.273422][ T9] usb 2-1: config 4 has an invalid interface number: 128 but max is 0 [ 1302.410095][ T9] usb 2-1: config 4 has no interface number 0 [ 1302.466697][ T9] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1302.489221][ T9] usb 2-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1302.525612][T17369] netlink: 'syz.4.3078': attribute type 2 has an invalid length. [ 1302.539383][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1302.560982][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1302.592299][ T5816] Bluetooth: hci5: command 0x0c1a tx timeout [ 1303.290056][ T9] hub 2-1:4.128: USB hub found [ 1303.489080][ T9] hub 2-1:4.128: config failed, can't read hub descriptor (err -22) [ 1303.778118][ T9] usb 2-1: USB disconnect, device number 87 [ 1304.217321][ T5816] Bluetooth: hci3: command 0x0406 tx timeout [ 1304.302631][ T5816] Bluetooth: hci1: command 0x0c1a tx timeout [ 1304.822915][ T5816] Bluetooth: hci5: command 0x0c1a tx timeout [ 1306.526583][ T5816] Bluetooth: hci1: command 0x0c1a tx timeout [ 1307.051506][ T5816] Bluetooth: hci5: command 0x0c1a tx timeout [ 1307.092878][T17381] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3080'. [ 1307.233669][T17079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1307.260058][ T8428] libceph: connect (1)[c::]:6789 error -101 [ 1307.270479][ T8428] libceph: mon0 (1)[c::]:6789 connect error [ 1307.407382][T17376] ceph: No mds server is up or the cluster is laggy [ 1307.571545][ T8428] libceph: connect (1)[c::]:6789 error -101 [ 1307.593108][ T8428] libceph: mon0 (1)[c::]:6789 connect error [ 1308.753832][T17079] veth0_vlan: entered promiscuous mode [ 1308.778180][T17079] veth1_vlan: entered promiscuous mode [ 1309.195762][T17079] veth0_macvtap: entered promiscuous mode [ 1309.800350][T17079] veth1_macvtap: entered promiscuous mode [ 1309.825633][T17079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1309.838079][T17079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.849708][T17079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1309.860712][T17079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1310.009562][T17079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1310.057758][T17079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1310.268713][T17416] FAULT_INJECTION: forcing a failure. [ 1310.268713][T17416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1310.282440][T17416] CPU: 1 UID: 0 PID: 17416 Comm: syz.1.3086 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 1310.282478][T17416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1310.282492][T17416] Call Trace: [ 1310.282501][T17416] [ 1310.282510][T17416] dump_stack_lvl+0x189/0x250 [ 1310.282548][T17416] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1310.282577][T17416] ? __pfx__printk+0x10/0x10 [ 1310.282625][T17416] should_fail_ex+0x414/0x560 [ 1310.282662][T17416] _copy_from_user+0x2d/0xb0 [ 1310.282692][T17416] alg_setkey+0xb8/0x190 [ 1310.282728][T17416] alg_setsockopt+0x3da/0x4a0 [ 1310.282761][T17416] ? __pfx_alg_setsockopt+0x10/0x10 [ 1310.282794][T17416] do_sock_setsockopt+0x257/0x3e0 [ 1310.282823][T17416] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1310.282846][T17416] ? __fget_files+0x2a/0x420 [ 1310.282883][T17416] ? __fget_files+0x3a0/0x420 [ 1310.282913][T17416] ? __fget_files+0x2a/0x420 [ 1310.282953][T17416] __x64_sys_setsockopt+0x18b/0x220 [ 1310.282986][T17416] do_syscall_64+0xf6/0x210 [ 1310.283013][T17416] ? clear_bhb_loop+0x45/0xa0 [ 1310.283039][T17416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1310.283060][T17416] RIP: 0033:0x7f7b1378e969 [ 1310.283079][T17416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1310.283097][T17416] RSP: 002b:00007f7b14669038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1310.283120][T17416] RAX: ffffffffffffffda RBX: 00007f7b139b6160 RCX: 00007f7b1378e969 [ 1310.283135][T17416] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 1310.283149][T17416] RBP: 00007f7b14669090 R08: 0000000000000020 R09: 0000000000000000 [ 1310.283162][T17416] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 1310.283176][T17416] R13: 0000000000000000 R14: 00007f7b139b6160 R15: 00007fffbceb0988 [ 1310.283209][T17416] [ 1310.916313][T17079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1310.979917][T17079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1311.155263][T17079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1311.165646][T17079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1311.176783][T17079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1311.210829][T17079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1311.247940][T17079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1311.301061][T17428] FAULT_INJECTION: forcing a failure. [ 1311.301061][T17428] name failslab, interval 1, probability 0, space 0, times 0 [ 1311.314115][T17428] CPU: 1 UID: 0 PID: 17428 Comm: syz.1.3089 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 1311.314144][T17428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1311.314158][T17428] Call Trace: [ 1311.314168][T17428] [ 1311.314177][T17428] dump_stack_lvl+0x189/0x250 [ 1311.314218][T17428] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1311.314247][T17428] ? __pfx__printk+0x10/0x10 [ 1311.314281][T17428] ? __pfx___might_resched+0x10/0x10 [ 1311.314312][T17428] ? fs_reclaim_acquire+0x7d/0x100 [ 1311.314339][T17428] should_fail_ex+0x414/0x560 [ 1311.314377][T17428] should_failslab+0xa8/0x100 [ 1311.314410][T17428] __kmalloc_noprof+0xcb/0x4f0 [ 1311.314447][T17428] ? security_prepare_creds+0x52/0x390 [ 1311.314478][T17428] security_prepare_creds+0x52/0x390 [ 1311.314506][T17428] prepare_creds+0x497/0x6c0 [ 1311.314534][T17428] __se_sys_landlock_restrict_self+0x1a5/0x750 [ 1311.314565][T17428] ? do_syscall_64+0xba/0x210 [ 1311.314595][T17428] do_syscall_64+0xf6/0x210 [ 1311.314619][T17428] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1311.314640][T17428] ? clear_bhb_loop+0x45/0xa0 [ 1311.314665][T17428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.314686][T17428] RIP: 0033:0x7f7b1378e969 [ 1311.314705][T17428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1311.314722][T17428] RSP: 002b:00007f7b14669038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 1311.314744][T17428] RAX: ffffffffffffffda RBX: 00007f7b139b6160 RCX: 00007f7b1378e969 [ 1311.314760][T17428] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 1311.314772][T17428] RBP: 00007f7b14669090 R08: 0000000000000000 R09: 0000000000000000 [ 1311.314785][T17428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1311.314798][T17428] R13: 0000000000000000 R14: 00007f7b139b6160 R15: 00007fffbceb0988 [ 1311.314830][T17428] [ 1311.759424][T17079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1311.973272][T17079] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.982492][T17079] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.991427][T17079] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.000262][T17079] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.900873][T17439] FAULT_INJECTION: forcing a failure. [ 1312.900873][T17439] name failslab, interval 1, probability 0, space 0, times 0 [ 1312.914163][T17439] CPU: 1 UID: 0 PID: 17439 Comm: syz.3.3092 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 1312.914194][T17439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1312.914209][T17439] Call Trace: [ 1312.914218][T17439] [ 1312.914227][T17439] dump_stack_lvl+0x189/0x250 [ 1312.914265][T17439] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1312.914294][T17439] ? __pfx__printk+0x10/0x10 [ 1312.914333][T17439] ? __pfx___might_resched+0x10/0x10 [ 1312.914363][T17439] ? fs_reclaim_acquire+0x7d/0x100 [ 1312.914391][T17439] should_fail_ex+0x414/0x560 [ 1312.914429][T17439] should_failslab+0xa8/0x100 [ 1312.914470][T17439] __kmalloc_noprof+0xcb/0x4f0 [ 1312.914498][T17439] ? kfree+0x4d/0x440 [ 1312.914523][T17439] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1312.914555][T17439] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1312.914598][T17439] tomoyo_check_open_permission+0x1c1/0x3b0 [ 1312.914621][T17439] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 1312.914643][T17439] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1312.914709][T17439] ? tomoyo_file_open+0x166/0x220 [ 1312.914742][T17439] security_file_open+0xb1/0x270 [ 1312.914768][T17439] do_dentry_open+0x35e/0x1970 [ 1312.914791][T17439] ? devcgroup_check_permission+0x86d/0x980 [ 1312.914830][T17439] vfs_open+0x3b/0x340 [ 1312.914848][T17439] ? path_openat+0x2ecd/0x3830 [ 1312.914876][T17439] path_openat+0x2ee5/0x3830 [ 1312.914924][T17439] ? preempt_schedule_irq+0xb5/0x150 [ 1312.914961][T17439] ? __pfx_path_openat+0x10/0x10 [ 1312.914983][T17439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.915028][T17439] do_filp_open+0x1fa/0x410 [ 1312.915056][T17439] ? __pfx_do_filp_open+0x10/0x10 [ 1312.915111][T17439] ? _raw_spin_unlock+0x28/0x50 [ 1312.915131][T17439] ? alloc_fd+0x64c/0x6c0 [ 1312.915174][T17439] do_sys_openat2+0x121/0x1c0 [ 1312.915200][T17439] ? __pfx_do_sys_openat2+0x10/0x10 [ 1312.915227][T17439] ? ksys_write+0x1f0/0x250 [ 1312.915253][T17439] ? rcu_is_watching+0x15/0xb0 [ 1312.915291][T17439] __x64_sys_openat+0x138/0x170 [ 1312.915320][T17439] do_syscall_64+0xf6/0x210 [ 1312.915346][T17439] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1312.915367][T17439] ? clear_bhb_loop+0x45/0xa0 [ 1312.915393][T17439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.915414][T17439] RIP: 0033:0x7fa54e38e969 [ 1312.915434][T17439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1312.915461][T17439] RSP: 002b:00007fa54f139038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1312.915483][T17439] RAX: ffffffffffffffda RBX: 00007fa54e5b6160 RCX: 00007fa54e38e969 [ 1312.915499][T17439] RDX: 0000000000000802 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1312.915514][T17439] RBP: 00007fa54f139090 R08: 0000000000000000 R09: 0000000000000000 [ 1312.915527][T17439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1312.915540][T17439] R13: 0000000000000000 R14: 00007fa54e5b6160 R15: 00007ffec23e6c58 [ 1312.915574][T17439] [ 1312.915607][T17439] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1313.434137][T17442] FAULT_INJECTION: forcing a failure. [ 1313.434137][T17442] name failslab, interval 1, probability 0, space 0, times 0 [ 1313.478961][T17442] CPU: 1 UID: 0 PID: 17442 Comm: syz.4.3093 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 1313.478995][T17442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1313.479009][T17442] Call Trace: [ 1313.479018][T17442] [ 1313.479028][T17442] dump_stack_lvl+0x189/0x250 [ 1313.479065][T17442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1313.479094][T17442] ? __pfx__printk+0x10/0x10 [ 1313.479133][T17442] ? ref_tracker_alloc+0x318/0x460 [ 1313.479158][T17442] should_fail_ex+0x414/0x560 [ 1313.479197][T17442] should_failslab+0xa8/0x100 [ 1313.479239][T17442] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1313.479268][T17442] ? skb_clone+0x212/0x3a0 [ 1313.479301][T17442] skb_clone+0x212/0x3a0 [ 1313.479333][T17442] __netlink_deliver_tap+0x404/0x850 [ 1313.479371][T17442] ? netlink_deliver_tap+0x2e/0x1b0 [ 1313.479394][T17442] netlink_deliver_tap+0x19c/0x1b0 [ 1313.479418][T17442] netlink_unicast+0x72f/0x8d0 [ 1313.479462][T17442] netlink_sendmsg+0x805/0xb30 [ 1313.479496][T17442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1313.479528][T17442] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1313.479550][T17442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1313.479574][T17442] __sock_sendmsg+0x219/0x270 [ 1313.479610][T17442] ____sys_sendmsg+0x52d/0x830 [ 1313.479643][T17442] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1313.479680][T17442] ? import_iovec+0x74/0xa0 [ 1313.479711][T17442] ___sys_sendmsg+0x21f/0x2a0 [ 1313.479741][T17442] ? __pfx____sys_sendmsg+0x10/0x10 [ 1313.479808][T17442] ? __fget_files+0x2a/0x420 [ 1313.479838][T17442] ? __fget_files+0x3a0/0x420 [ 1313.479880][T17442] __sys_sendmmsg+0x227/0x430 [ 1313.479920][T17442] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1313.479958][T17442] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1313.480004][T17442] ? ksys_write+0x1f0/0x250 [ 1313.480029][T17442] ? rcu_is_watching+0x15/0xb0 [ 1313.480071][T17442] __x64_sys_sendmmsg+0xa0/0xc0 [ 1313.480101][T17442] do_syscall_64+0xf6/0x210 [ 1313.480127][T17442] ? clear_bhb_loop+0x45/0xa0 [ 1313.480151][T17442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.480171][T17442] RIP: 0033:0x7f38cb58e969 [ 1313.480189][T17442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1313.480214][T17442] RSP: 002b:00007f38c93f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1313.480236][T17442] RAX: ffffffffffffffda RBX: 00007f38cb7b5fa0 RCX: 00007f38cb58e969 [ 1313.480252][T17442] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1313.480266][T17442] RBP: 00007f38c93f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1313.480280][T17442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1313.480292][T17442] R13: 0000000000000000 R14: 00007f38cb7b5fa0 R15: 00007ffcd6e101b8 [ 1313.480325][T17442] [ 1313.482497][T17134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1313.521908][T17134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1313.596521][T17447] netlink: 'syz.3.3094': attribute type 2 has an invalid length. [ 1315.184394][T17134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1315.278241][T17134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1315.324797][ T5871] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1315.582012][ T5871] usb 5-1: Using ep0 maxpacket: 16 [ 1315.681301][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1315.808239][ T5871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1315.907304][ T5871] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1316.007932][ T5871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.175165][ T5871] usb 5-1: config 0 descriptor?? [ 1317.436296][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1317.442749][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1318.552892][ T5871] usbhid 5-1:0.0: can't add hid device: -71 [ 1318.609331][ T5871] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1318.713787][ T5871] usb 5-1: USB disconnect, device number 102 [ 1319.228142][T17479] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3104'. [ 1320.616220][T17491] FAULT_INJECTION: forcing a failure. [ 1320.616220][T17491] name failslab, interval 1, probability 0, space 0, times 0 [ 1320.639779][T17492] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3110'. [ 1320.663158][T17491] CPU: 0 UID: 0 PID: 17491 Comm: syz.5.3109 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 1320.663191][T17491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1320.663205][T17491] Call Trace: [ 1320.663212][T17491] [ 1320.663222][T17491] dump_stack_lvl+0x189/0x250 [ 1320.663258][T17491] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1320.663286][T17491] ? __pfx__printk+0x10/0x10 [ 1320.663320][T17491] ? __pfx___might_resched+0x10/0x10 [ 1320.663351][T17491] ? fs_reclaim_acquire+0x7d/0x100 [ 1320.663377][T17491] should_fail_ex+0x414/0x560 [ 1320.663413][T17491] should_failslab+0xa8/0x100 [ 1320.663446][T17491] __kmalloc_noprof+0xcb/0x4f0 [ 1320.663474][T17491] ? tomoyo_encode+0x28b/0x550 [ 1320.663505][T17491] tomoyo_encode+0x28b/0x550 [ 1320.663536][T17491] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1320.663577][T17491] ? tomoyo_domain+0xda/0x130 [ 1320.663610][T17491] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1320.663632][T17491] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1320.663657][T17491] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1320.663697][T17491] ? __lock_acquire+0xaac/0xd20 [ 1320.663744][T17491] ? __fget_files+0x2a/0x420 [ 1320.663781][T17491] ? __fget_files+0x3a0/0x420 [ 1320.663809][T17491] ? __fget_files+0x2a/0x420 [ 1320.663844][T17491] security_file_ioctl+0xcb/0x2d0 [ 1320.663870][T17491] __se_sys_ioctl+0x47/0x170 [ 1320.663898][T17491] do_syscall_64+0xf6/0x210 [ 1320.663924][T17491] ? clear_bhb_loop+0x45/0xa0 [ 1320.663950][T17491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1320.663970][T17491] RIP: 0033:0x7f1e1578e969 [ 1320.663989][T17491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1320.664007][T17491] RSP: 002b:00007f1e165b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1320.664030][T17491] RAX: ffffffffffffffda RBX: 00007f1e159b5fa0 RCX: 00007f1e1578e969 [ 1320.664045][T17491] RDX: 0000200000000000 RSI: 0000000000008b24 RDI: 0000000000000004 [ 1320.664059][T17491] RBP: 00007f1e165b4090 R08: 0000000000000000 R09: 0000000000000000 [ 1320.664072][T17491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1320.664085][T17491] R13: 0000000000000000 R14: 00007f1e159b5fa0 R15: 00007fff6e28f288 [ 1320.664118][T17491] [ 1320.664139][T17491] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1320.916501][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 1320.916520][ T30] audit: type=1400 audit(1286.150:2610): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="B" object="_" requested=w pid=17496 comm="syz.3.3111" saddr=fe80::bb daddr=fe80::aa dest=20002 netif=wpan0 [ 1320.984596][ T30] audit: type=1400 audit(1286.178:2611): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="B" object="_" requested=w pid=17496 comm="syz.3.3111" saddr=fe80::bb daddr=fe80::aa dest=20002 netif=wpan0 [ 1321.048555][T17497] dummy0 speed is unknown, defaulting to 1000 [ 1321.055053][ T30] audit: type=1400 audit(1286.178:2612): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="B" object="_" requested=w pid=17496 comm="syz.3.3111" saddr=fe80::bb daddr=fe80::aa dest=20002 netif=wpan0 [ 1321.270219][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1321.286065][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1321.304688][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1321.319727][ T5871] libceph: connect (1)[c::]:6789 error -101 [ 1321.328134][ T5871] libceph: mon0 (1)[c::]:6789 connect error [ 1321.384981][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1321.429445][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1321.776795][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 1322.623883][T17502] ceph: No mds server is up or the cluster is laggy [ 1322.655758][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 1322.959777][T17518] MPI: mpi too large (129928 bits) [ 1323.910210][ T9] IPVS: starting estimator thread 0... [ 1323.986914][ T5831] Bluetooth: hci0: command tx timeout [ 1324.623028][T17525] IPVS: using max 28 ests per chain, 67200 per kthread [ 1326.206689][ T5831] Bluetooth: hci0: command tx timeout [ 1326.269094][ T6428] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.627502][ T6428] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.461463][ T5831] Bluetooth: hci0: command tx timeout [ 1328.507229][T17501] dummy0 speed is unknown, defaulting to 1000 [ 1329.866186][ T6428] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.112939][T17551] 9pnet_fd: Insufficient options for proto=fd [ 1330.579021][T17501] chnl_net:caif_netlink_parms(): no params data found [ 1330.655412][ T5831] Bluetooth: hci0: command tx timeout [ 1331.745588][ T8428] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 1332.803654][ T8428] usb 4-1: Using ep0 maxpacket: 8 [ 1332.820480][ T8428] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1332.845160][ T8428] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1332.855892][ T8428] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.623461][ T8428] usb 4-1: config 0 descriptor?? [ 1333.640752][ T8428] iowarrior 4-1:0.0: no interrupt-in endpoint found [ 1333.832746][ T6428] batman_adv: batadv0: Interface deactivated: ipvlan1 [ 1334.014533][ T6428] batman_adv: batadv0: Removing interface: ipvlan1 [ 1334.040096][T17585] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3130'. [ 1334.235877][T17586] netlink: 'syz.3.3126': attribute type 1 has an invalid length. [ 1336.152220][ T6428] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1336.160978][ T6428] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 1336.245309][T17594] FAULT_INJECTION: forcing a failure. [ 1336.245309][T17594] name failslab, interval 1, probability 0, space 0, times 0 [ 1336.258906][T17594] CPU: 1 UID: 0 PID: 17594 Comm: syz.1.3132 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 1336.258936][T17594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1336.258950][T17594] Call Trace: [ 1336.258959][T17594] [ 1336.258969][T17594] dump_stack_lvl+0x189/0x250 [ 1336.259006][T17594] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1336.259035][T17594] ? __pfx__printk+0x10/0x10 [ 1336.259073][T17594] ? __pfx___might_resched+0x10/0x10 [ 1336.259114][T17594] ? fs_reclaim_acquire+0x7d/0x100 [ 1336.259141][T17594] should_fail_ex+0x414/0x560 [ 1336.259179][T17594] should_failslab+0xa8/0x100 [ 1336.259213][T17594] __kmalloc_cache_noprof+0x70/0x3d0 [ 1336.259243][T17594] ? mqueue_init_fs_context+0x57/0x370 [ 1336.259273][T17594] mqueue_init_fs_context+0x57/0x370 [ 1336.259303][T17594] alloc_fs_context+0x64e/0x7d0 [ 1336.259345][T17594] mq_init_ns+0x10a/0x510 [ 1336.259372][T17594] copy_ipcs+0x2f6/0x4f0 [ 1336.259401][T17594] create_new_namespaces+0x212/0x700 [ 1336.259446][T17594] unshare_nsproxy_namespaces+0x11c/0x170 [ 1336.259480][T17594] ksys_unshare+0x4c8/0x8c0 [ 1336.259510][T17594] ? __pfx_ksys_unshare+0x10/0x10 [ 1336.259550][T17594] __x64_sys_unshare+0x38/0x50 [ 1336.259572][T17594] do_syscall_64+0xf6/0x210 [ 1336.259598][T17594] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1336.259618][T17594] ? clear_bhb_loop+0x45/0xa0 [ 1336.259644][T17594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1336.259664][T17594] RIP: 0033:0x7f7b1378e969 [ 1336.259682][T17594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1336.259701][T17594] RSP: 002b:00007f7b14669038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1336.259723][T17594] RAX: ffffffffffffffda RBX: 00007f7b139b6160 RCX: 00007f7b1378e969 [ 1336.259738][T17594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040200 [ 1336.259752][T17594] RBP: 00007f7b14669090 R08: 0000000000000000 R09: 0000000000000000 [ 1336.259765][T17594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1336.259778][T17594] R13: 0000000000000000 R14: 00007f7b139b6160 R15: 00007fffbceb0988 [ 1336.259810][T17594] [ 1336.597174][ T6428] bond0 (unregistering): Released all slaves [ 1336.726387][ T9] usb 4-1: USB disconnect, device number 103 [ 1336.844862][ T6428] : left promiscuous mode [ 1337.476409][ T30] audit: type=1400 audit(1301.640:2613): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="B" object="_" requested=w pid=17601 comm="syz.1.3135" saddr=fe80::bb daddr=fe80::aa dest=20002 netif=wpan0 [ 1337.564966][ T30] audit: type=1400 audit(1301.677:2614): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="B" object="_" requested=w pid=17601 comm="syz.1.3135" saddr=fe80::bb daddr=fe80::aa dest=20002 netif=wpan0 [ 1337.650290][ T30] audit: type=1400 audit(1301.687:2615): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="B" object="_" requested=w pid=17601 comm="syz.1.3135" saddr=fe80::bb daddr=fe80::aa dest=20002 netif=wpan0 [ 1337.763339][T17610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3136'. [ 1338.600412][ T6428] batman_adv: batadv0: Removing interface: wlan0 [ 1338.618833][T17501] bridge0: port 1(bridge_slave_0) entered blocking state [ 1338.635913][T17501] bridge0: port 1(bridge_slave_0) entered disabled state [ 1338.657382][T17501] bridge_slave_0: entered allmulticast mode [ 1338.674841][T17501] bridge_slave_0: entered promiscuous mode [ 1338.705388][T17501] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.712583][T17501] bridge0: port 2(bridge_slave_1) entered disabled state [ 1338.747455][T17501] bridge_slave_1: entered allmulticast mode [ 1338.785636][T17501] bridge_slave_1: entered promiscuous mode [ 1338.944426][T17602] dummy0 speed is unknown, defaulting to 1000 [ 1339.709523][T17501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1339.725063][T17621] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3141'. [ 1339.762323][ T6428] hsr_slave_0: left promiscuous mode [ 1339.775890][ T6428] hsr_slave_1: left promiscuous mode [ 1339.822235][ T6428] veth1_macvtap: left promiscuous mode [ 1339.831785][ T6428] veth0_macvtap: left promiscuous mode [ 1339.841310][ T6428] veth1_vlan: left promiscuous mode [ 1339.846793][ T6428] veth0_vlan: left promiscuous mode [ 1340.415255][T17630] fuse: Bad value for 'fd' [ 1341.331870][ T30] audit: type=1400 audit(1305.251:2616): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=17631 comm="syz.6.3143" daddr=fe80::bb dest=3 [ 1341.790061][T17501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1342.427781][T17501] team0: Port device team_slave_0 added [ 1342.449550][T17501] team0: Port device team_slave_1 added [ 1343.152154][T17501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1343.210408][T17644] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3147'. [ 1343.221175][T17501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1343.259042][T17501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1343.318491][T17501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1343.318957][ T6428] IPVS: stop unused estimator thread 0... [ 1343.340989][T17501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1343.379190][T17501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1344.000570][T17501] hsr_slave_0: entered promiscuous mode [ 1344.021593][T17501] hsr_slave_1: entered promiscuous mode [ 1344.412572][T17665] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3152'. [ 1346.305386][T17684] FAULT_INJECTION: forcing a failure. [ 1346.305386][T17684] name failslab, interval 1, probability 0, space 0, times 0 [ 1346.347553][T17684] CPU: 0 UID: 0 PID: 17684 Comm: syz.6.3159 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 1346.347584][T17684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1346.347598][T17684] Call Trace: [ 1346.347606][T17684] [ 1346.347616][T17684] dump_stack_lvl+0x189/0x250 [ 1346.347651][T17684] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1346.347678][T17684] ? __pfx__printk+0x10/0x10 [ 1346.347712][T17684] ? __pfx___might_resched+0x10/0x10 [ 1346.347742][T17684] ? fs_reclaim_acquire+0x7d/0x100 [ 1346.347768][T17684] should_fail_ex+0x414/0x560 [ 1346.347802][T17684] should_failslab+0xa8/0x100 [ 1346.347831][T17684] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1346.347854][T17684] ? ep_ptable_queue_proc+0x5c/0x200 [ 1346.347885][T17684] ep_ptable_queue_proc+0x5c/0x200 [ 1346.347911][T17684] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 1346.347933][T17684] vga_arb_fpoll+0x5f/0xb0 [ 1346.347955][T17684] ? __pfx_vga_arb_fpoll+0x10/0x10 [ 1346.347974][T17684] ep_insert+0x115e/0x1a00 [ 1346.348009][T17684] ? __pfx_ep_insert+0x10/0x10 [ 1346.348030][T17684] ? __pfx___mutex_lock+0x10/0x10 [ 1346.348052][T17684] ? __fget_files+0x2a/0x420 [ 1346.348079][T17684] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 1346.348103][T17684] ? __fget_files+0x3a0/0x420 [ 1346.348127][T17684] ? __fget_files+0x2a/0x420 [ 1346.348172][T17684] do_epoll_ctl+0x80e/0xe80 [ 1346.348208][T17684] __x64_sys_epoll_ctl+0x163/0x1a0 [ 1346.348234][T17684] ? rcu_is_watching+0x15/0xb0 [ 1346.348262][T17684] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1346.348287][T17684] ? do_syscall_64+0xba/0x210 [ 1346.348314][T17684] do_syscall_64+0xf6/0x210 [ 1346.348338][T17684] ? clear_bhb_loop+0x45/0xa0 [ 1346.348361][T17684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.348378][T17684] RIP: 0033:0x7fa6f5b8e969 [ 1346.348395][T17684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1346.348410][T17684] RSP: 002b:00007fa6f6ab5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1346.348430][T17684] RAX: ffffffffffffffda RBX: 00007fa6f5db5fa0 RCX: 00007fa6f5b8e969 [ 1346.348442][T17684] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000004 [ 1346.348452][T17684] RBP: 00007fa6f6ab5090 R08: 0000000000000000 R09: 0000000000000000 [ 1346.348463][T17684] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 1346.348473][T17684] R13: 0000000000000000 R14: 00007fa6f5db5fa0 R15: 00007ffd5b5225f8 [ 1346.348498][T17684] [ 1346.653607][T17501] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1346.680193][T17501] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1346.721546][T17501] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1346.732589][ T30] audit: type=1400 audit(1310.283:2617): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="B" object="_" requested=w pid=17693 comm="syz.6.3162" saddr=fe80::bb daddr=fe80::aa dest=20002 netif=wpan0 [ 1346.790181][T17501] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1346.812261][T17694] dummy0 speed is unknown, defaulting to 1000 [ 1346.818630][ T30] audit: type=1400 audit(1310.302:2618): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="B" object="_" requested=w pid=17693 comm="syz.6.3162" saddr=fe80::bb daddr=fe80::aa dest=20002 netif=wpan0 [ 1346.881892][ T30] audit: type=1400 audit(1310.302:2619): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="B" object="_" requested=w pid=17693 comm="syz.6.3162" saddr=fe80::bb daddr=fe80::aa dest=20002 netif=wpan0 [ 1347.971882][T17501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1348.054292][T17501] 8021q: adding VLAN 0 to HW filter on device team0 [ 1348.092897][T17134] bridge0: port 1(bridge_slave_0) entered blocking state [ 1348.100069][T17134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1348.203395][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 1348.210604][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1348.924575][T17720] FAULT_INJECTION: forcing a failure. [ 1348.924575][T17720] name failslab, interval 1, probability 0, space 0, times 0 [ 1348.954534][T17720] CPU: 1 UID: 0 PID: 17720 Comm: syz.6.3169 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 1348.954565][T17720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1348.954579][T17720] Call Trace: [ 1348.954587][T17720] [ 1348.954596][T17720] dump_stack_lvl+0x189/0x250 [ 1348.954633][T17720] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1348.954661][T17720] ? __pfx__printk+0x10/0x10 [ 1348.954699][T17720] ? __pfx___might_resched+0x10/0x10 [ 1348.954727][T17720] ? fs_reclaim_acquire+0x7d/0x100 [ 1348.954753][T17720] should_fail_ex+0x414/0x560 [ 1348.954790][T17720] should_failslab+0xa8/0x100 [ 1348.954824][T17720] __kmalloc_cache_noprof+0x70/0x3d0 [ 1348.954853][T17720] ? resv_map_alloc+0x88/0x2c0 [ 1348.954885][T17720] resv_map_alloc+0x88/0x2c0 [ 1348.954914][T17720] hugetlbfs_get_inode+0x68/0x660 [ 1348.954939][T17720] ? fput+0xa0/0xd0 [ 1348.954963][T17720] hugetlb_file_setup+0x21d/0x630 [ 1348.954990][T17720] ksys_mmap_pgoff+0x22f/0x760 [ 1348.955028][T17720] do_syscall_64+0xf6/0x210 [ 1348.955054][T17720] ? clear_bhb_loop+0x45/0xa0 [ 1348.955080][T17720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.955107][T17720] RIP: 0033:0x7fa6f5b8e969 [ 1348.955126][T17720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1348.955144][T17720] RSP: 002b:00007fa6f6ab5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1348.955166][T17720] RAX: ffffffffffffffda RBX: 00007fa6f5db5fa0 RCX: 00007fa6f5b8e969 [ 1348.955182][T17720] RDX: 0000000002000003 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 1348.955196][T17720] RBP: 00007fa6f6ab5090 R08: ffffffffffffffff R09: 0000000000000000 [ 1348.955210][T17720] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 1348.955223][T17720] R13: 0000000000000000 R14: 00007fa6f5db5fa0 R15: 00007ffd5b5225f8 [ 1348.955255][T17720] [ 1351.336170][T17501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1351.947042][ T30] audit: type=1326 audit(1315.166:2620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17754 comm="syz.1.3178" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7b1378e969 code=0x0 [ 1352.042208][ T30] audit: type=1400 audit(1315.250:2621): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=17754 comm="syz.1.3178" daddr=::ffff:172.20.20.57 dest=20001 [ 1352.069866][T17756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3178'. [ 1352.124585][T17756] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3178'. [ 1352.169209][T17756] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3178'. [ 1353.382354][T17775] Bluetooth: MGMT ver 1.23 [ 1353.392216][T17773] x_tables: duplicate underflow at hook 1 [ 1353.599777][T17501] veth0_vlan: entered promiscuous mode [ 1353.853613][T17501] veth1_vlan: entered promiscuous mode [ 1353.882637][T17501] veth0_macvtap: entered promiscuous mode [ 1353.892109][T17501] veth1_macvtap: entered promiscuous mode [ 1353.912547][T17501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1353.942588][T17501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.005070][T17501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1354.039201][T17501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.057816][T17501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1354.078923][T17501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.089897][T17501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1354.107461][T17501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.158819][T17501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1354.245900][T17501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1354.420770][T17501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.431629][T17501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1354.442622][T17501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.453350][T17501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1354.464249][T17501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.475059][T17501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1355.515198][T17501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.529332][T17501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1356.829480][T17501] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.877272][T17501] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.922180][T17501] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.944515][T17794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3190'. [ 1357.020256][T17501] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1357.580575][T17802] blktrace: Concurrent blktraces are not allowed on sg0 [ 1357.617789][T17802] xt_hashlimit: size too large, truncated to 1048576 [ 1357.640594][T17802] fuse: Bad value for 'rootmode' [ 1357.787903][ T8428] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 1357.840830][T17794] ip6tnl1: entered allmulticast mode [ 1357.971100][ T8428] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1358.715518][ T8428] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.848677][ T8428] usb 2-1: config 0 descriptor?? [ 1358.863354][ T8428] pwc: Samsung MPC-C10 USB webcam detected. [ 1358.876655][T14337] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1358.885779][T14337] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1359.092389][ T8428] pwc: send_video_command error -71 [ 1359.099050][ T8428] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1359.113339][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1359.113355][ T8428] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1359.166675][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1359.184289][ T8428] usb 2-1: USB disconnect, device number 88 [ 1359.191422][T17823] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3194'. [ 1359.282198][T17823] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3194'. [ 1359.352091][T17823] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3194'. [ 1359.445020][T17823] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3194'. [ 1359.492660][T17823] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3194'. [ 1359.684707][ T5865] usb 4-1: new full-speed USB device number 104 using dummy_hcd [ 1359.713912][ T8428] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1360.022021][ T5865] usb 4-1: config 2 has an invalid interface number: 45 but max is 0 [ 1360.030856][ T5865] usb 4-1: config 2 has no interface number 0 [ 1360.037251][ T5865] usb 4-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 1360.050491][ T5865] usb 4-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid maxpacket 255, setting to 64 [ 1360.068767][ T8428] usb 2-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 1360.080308][ T5865] usb 4-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.d2 [ 1360.096878][ T8428] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.107505][ T5865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.115589][ T5865] usb 4-1: Product: syz [ 1360.131500][ T5865] usb 4-1: Manufacturer: syz [ 1360.136965][ T5865] usb 4-1: SerialNumber: syz [ 1360.142153][ T8428] usb 2-1: config 0 descriptor?? [ 1360.150788][ T8428] pwc: Samsung MPC-C10 USB webcam detected. [ 1360.161969][T17828] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1360.171902][ T5865] kobil_sct 4-1:2.45: KOBIL USB smart card terminal converter detected [ 1360.184208][ T5865] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1360.358734][T17842] MPI: mpi too large (129928 bits) [ 1361.164628][T17809] usb 4-1: USB disconnect, device number 104 [ 1361.455906][T17809] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1361.466876][ T8428] pwc: send_video_command error -71 [ 1361.472236][ T8428] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1361.514106][ T8428] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1361.536196][T17809] kobil_sct 4-1:2.45: device disconnected [ 1361.644115][ T8428] usb 2-1: USB disconnect, device number 89 [ 1361.894689][T17852] MPI: mpi too large (129928 bits) [ 1363.036953][ T30] audit: type=1326 audit(1325.409:2622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17848 comm="syz.5.3200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e1578e969 code=0x7fc00000 [ 1367.605980][T17875] 9pnet_fd: Insufficient options for proto=fd [ 1367.809784][T17882] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1367.872885][T17882] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3210'. [ 1367.928334][T17887] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3210'. [ 1367.975928][T17809] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1368.056678][T17889] qnx6: unable to read the first superblock [ 1368.428287][T17809] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1368.495908][T17809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.517835][T14335] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.575993][T17809] usb 5-1: config 0 descriptor?? [ 1368.614348][T17809] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1368.688337][ T5816] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1368.701523][ T5816] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1368.712083][ T5816] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1368.878507][T14335] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1368.920372][ T5816] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1368.946515][ T5816] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1369.426566][T17880] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1369.666287][T17809] gspca_stv06xx: I2C: Read error writing address: -71 [ 1369.681004][T14335] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1369.702065][T17809] usb 5-1: USB disconnect, device number 103 [ 1369.803470][T17897] dummy0 speed is unknown, defaulting to 1000 [ 1370.319224][T14335] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.465122][ T30] audit: type=1326 audit(1332.499:2623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17904 comm="syz.5.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e1578e969 code=0x7fc00000 [ 1370.570258][ T30] audit: type=1326 audit(1332.499:2624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17904 comm="syz.5.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f1e1578e969 code=0x7fc00000 [ 1370.696034][ T5912] hid-generic 009C:0008:0003.003E: unknown main item tag 0x0 [ 1370.713956][ T30] audit: type=1326 audit(1332.499:2625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17904 comm="syz.5.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e1578e969 code=0x7fc00000 [ 1370.735907][ T30] audit: type=1326 audit(1332.499:2626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17904 comm="syz.5.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e1578e969 code=0x7fc00000 [ 1370.885901][ T5912] hid-generic 009C:0008:0003.003E: unknown main item tag 0x0 [ 1370.916019][ T5912] hid-generic 009C:0008:0003.003E: unknown main item tag 0x0 [ 1371.844048][ T5912] hid-generic 009C:0008:0003.003E: unknown main item tag 0x0 [ 1371.948303][ T5912] hid-generic 009C:0008:0003.003E: unknown main item tag 0x0 [ 1371.960632][ T5816] Bluetooth: hci2: command tx timeout [ 1372.266260][ T30] audit: type=1326 audit(1332.499:2627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17904 comm="syz.5.3214" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e1578e969 code=0x7fc00000 [ 1372.687288][ T5912] hid-generic 009C:0008:0003.003E: unknown main item tag 0x0 [ 1372.909339][ T5912] hid-generic 009C:0008:0003.003E: unknown main item tag 0x0 [ 1373.077541][ T5912] hid-generic 009C:0008:0003.003E: unknown main item tag 0x0 [ 1373.124649][ T5912] hid-generic 009C:0008:0003.003E: unknown main item tag 0x0 [ 1373.174994][ T5912] hid-generic 009C:0008:0003.003E: unknown main item tag 0x0 [ 1373.488865][ T5912] hid-generic 009C:0008:0003.003E: unknown main item tag 0x0 [ 1373.998456][T17928] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3220'. [ 1374.009844][ T5912] hid-generic 009C:0008:0003.003E: unknown main item tag 0x0 [ 1374.018451][ T5912] hid-generic 009C:0008:0003.003E: unknown main item tag 0x0 [ 1374.026496][ T5912] hid-generic 009C:0008:0003.003E: unknown main item tag 0x0 [ 1374.034396][ T5912] hid-generic 009C:0008:0003.003E: unknown main item tag 0x0 [ 1374.212770][ T5816] Bluetooth: hci2: command tx timeout [ 1374.247645][ T5912] hid-generic 009C:0008:0003.003E: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1374.486338][T14335] bridge_slave_1: left allmulticast mode [ 1374.498464][T14335] bridge_slave_1: left promiscuous mode [ 1374.535589][T14335] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.640675][T14335] bridge_slave_0: left allmulticast mode [ 1374.673505][T14335] bridge_slave_0: left promiscuous mode [ 1374.686810][T14335] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.804082][T17933] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1374.848455][T17933] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3222'. [ 1374.909083][T17936] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3222'. [ 1375.787049][T17940] qnx6: unable to read the first superblock [ 1375.871902][ T30] audit: type=1326 audit(1337.559:2628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17941 comm="syz.5.3224" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1e1578e969 code=0x0 [ 1376.400068][ T5816] Bluetooth: hci2: command tx timeout [ 1376.437806][T17945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3224'. [ 1376.447950][T17945] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3224'. [ 1376.457176][ T30] audit: type=1400 audit(1338.083:2629): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=17941 comm="syz.5.3224" daddr=::ffff:172.20.20.57 dest=20001 [ 1376.497022][T17945] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3224'. [ 1377.667120][T14335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1377.676563][T14335] bond_slave_0: left allmulticast mode [ 1377.685838][T14335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1377.694990][T14335] bond_slave_1: left allmulticast mode [ 1377.702691][T14335] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1377.712629][T14335] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 1377.720527][T14335] bond0 (unregistering): Released all slaves [ 1377.944884][T14335] : left promiscuous mode [ 1378.011420][T17964] netlink: 'syz.1.3230': attribute type 2 has an invalid length. [ 1378.040777][T17964] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3230'. [ 1378.143593][T17897] chnl_net:caif_netlink_parms(): no params data found [ 1378.315632][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 1378.321865][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 1378.445922][T17978] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3233'. [ 1378.623698][ T5816] Bluetooth: hci2: command tx timeout [ 1378.719047][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 1378.742677][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 1378.790544][ T30] audit: type=1326 audit(1340.291:2630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17980 comm="syz.1.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1378e969 code=0x7ffc0000 [ 1378.827227][ T30] audit: type=1326 audit(1340.300:2631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17980 comm="syz.1.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f7b1378e969 code=0x7ffc0000 [ 1378.848649][ T30] audit: type=1326 audit(1340.300:2632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17980 comm="syz.1.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7b1378e9a3 code=0x7ffc0000 [ 1378.879754][ T30] audit: type=1326 audit(1340.300:2633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17980 comm="syz.1.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f7b1378e9a3 code=0x7ffc0000 [ 1378.901393][ T30] audit: type=1326 audit(1340.300:2634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17980 comm="syz.1.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1378e969 code=0x7ffc0000 [ 1378.923659][ T30] audit: type=1326 audit(1340.300:2635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17980 comm="syz.1.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f7b1378e969 code=0x7ffc0000 [ 1378.945179][ T30] audit: type=1326 audit(1340.300:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17980 comm="syz.1.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1378e969 code=0x7ffc0000 [ 1378.982759][ T30] audit: type=1326 audit(1340.300:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17980 comm="syz.1.3234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b1378e969 code=0x7ffc0000 [ 1379.027033][T17981] netlink: 'syz.1.3234': attribute type 10 has an invalid length. [ 1379.065533][T17971] ceph: No mds server is up or the cluster is laggy [ 1379.639692][T17990] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 1379.720487][T17981] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1379.849257][T17897] bridge0: port 1(bridge_slave_0) entered blocking state [ 1379.875028][T17897] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.882338][T17897] bridge_slave_0: entered allmulticast mode [ 1379.893923][T17897] bridge_slave_0: entered promiscuous mode [ 1379.953035][T14335] hsr_slave_0: left promiscuous mode [ 1379.977617][T14335] hsr_slave_1: left promiscuous mode [ 1379.996078][T14335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1380.024373][T14335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1380.034328][T14335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1380.060934][T14335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1380.110971][T14335] veth1_macvtap: left promiscuous mode [ 1380.116886][T14335] veth0_macvtap: left promiscuous mode [ 1380.124306][T14335] veth1_vlan: left promiscuous mode [ 1380.132022][ T5819] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1380.140264][T14335] veth0_vlan: left promiscuous mode [ 1380.323533][ T5819] usb 5-1: Using ep0 maxpacket: 32 [ 1380.337593][ T5819] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1380.360280][ T5819] usb 5-1: config 0 has no interface number 0 [ 1380.383443][ T5819] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1380.397493][ T5819] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1380.408935][ T5819] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1380.428949][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1380.446748][ T5819] usb 5-1: Product: syz [ 1380.460718][ T5819] usb 5-1: Manufacturer: syz [ 1380.467306][ T5819] usb 5-1: SerialNumber: syz [ 1380.492480][ T5819] usb 5-1: config 0 descriptor?? [ 1380.737612][ T5819] appletouch 5-1:0.85: Failed to read mode from device. [ 1380.752159][ T5819] appletouch 5-1:0.85: probe with driver appletouch failed with error -5 [ 1381.050098][T14335] team0 (unregistering): Port device team_slave_0 removed [ 1381.180987][ T5819] usb 5-1: USB disconnect, device number 104 [ 1381.597249][T17897] bridge0: port 2(bridge_slave_1) entered blocking state [ 1381.604760][T17897] bridge0: port 2(bridge_slave_1) entered disabled state [ 1381.628407][T17897] bridge_slave_1: entered allmulticast mode [ 1381.642567][T17897] bridge_slave_1: entered promiscuous mode [ 1382.083241][ T30] kauditd_printk_skb: 76 callbacks suppressed [ 1382.083261][ T30] audit: type=1400 audit(1343.368:2714): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="B" object="_" requested=w pid=18011 comm="syz.4.3243" saddr=fe80::bb daddr=fe80::aa dest=20002 netif=wpan0 [ 1382.161972][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1382.169151][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1382.288188][ T30] audit: type=1400 audit(1343.406:2715): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="B" object="_" requested=w pid=18011 comm="syz.4.3243" saddr=fe80::bb daddr=fe80::aa dest=20002 netif=wpan0 [ 1382.425123][ T30] audit: type=1400 audit(1343.424:2716): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="B" object="_" requested=w pid=18011 comm="syz.4.3243" saddr=fe80::bb daddr=fe80::aa dest=20002 netif=wpan0 [ 1382.773305][T17897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1382.908182][T17897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1383.027791][ T5912] libceph: connect (1)[c::]:6789 error -101 [ 1383.053521][ T5912] libceph: mon0 (1)[c::]:6789 connect error [ 1383.104147][ T5912] libceph: connect (1)[c::]:6789 error -101 [ 1383.137065][ T5912] libceph: mon0 (1)[c::]:6789 connect error [ 1383.233798][T17897] team0: Port device team_slave_0 added [ 1383.284998][T17897] team0: Port device team_slave_1 added [ 1383.291484][T18009] dummy0 speed is unknown, defaulting to 1000 [ 1383.430874][T17897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1383.442177][T17897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1383.476080][T17897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1383.481602][ T5912] libceph: connect (1)[c::]:6789 error -101 [ 1383.506065][T17897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1383.517505][T17897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1383.541470][ T5912] libceph: mon0 (1)[c::]:6789 connect error [ 1383.553694][T17897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1383.929476][T17897] hsr_slave_0: entered promiscuous mode [ 1383.967722][ T30] audit: type=1326 audit(1345.127:2717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18019 comm="syz.5.3244" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e1578e969 code=0x7fc00000 [ 1383.990598][T17897] hsr_slave_1: entered promiscuous mode [ 1384.000408][T17897] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1384.008783][T17897] Cannot create hsr debugfs directory [ 1384.012134][T18016] ceph: No mds server is up or the cluster is laggy [ 1384.109012][ T5912] libceph: connect (1)[c::]:6789 error -101 [ 1384.139138][ T5912] libceph: mon0 (1)[c::]:6789 connect error [ 1385.297213][T18033] bridge_slave_0: left allmulticast mode [ 1385.303553][T18033] bridge_slave_0: left promiscuous mode [ 1385.314468][T18033] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.334950][T18033] bridge_slave_1: left allmulticast mode [ 1385.341960][T18033] bridge_slave_1: left promiscuous mode [ 1385.351064][T18033] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.372804][T18033] bond0: (slave bond_slave_0): Releasing backup interface [ 1385.542368][T18033] bond0: (slave bond_slave_1): Releasing backup interface [ 1385.597498][T18033] team0: Port device team_slave_0 removed [ 1385.623565][T18033] team0: Port device team_slave_1 removed [ 1385.645246][T18033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1385.674680][T18033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1385.685608][T18033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1385.694751][T18033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1385.776998][T18037] team0: Mode changed to "loadbalance" [ 1387.230473][T18048] dummy0 speed is unknown, defaulting to 1000 [ 1388.255968][T18059] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1388.276307][T18059] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3255'. [ 1388.332158][T18061] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3255'. [ 1388.361576][ T5865] libceph: connect (1)[c::]:6789 error -101 [ 1388.373010][ T5865] libceph: mon0 (1)[c::]:6789 connect error [ 1388.498414][T18059] qnx6: unable to read the first superblock [ 1388.613225][T18054] ceph: No mds server is up or the cluster is laggy [ 1388.832213][T17897] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1388.872238][T17897] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1388.890612][T17897] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1388.906294][T17897] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1389.259691][T17897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1389.424307][T17897] 8021q: adding VLAN 0 to HW filter on device team0 [ 1389.470800][T14337] bridge0: port 1(bridge_slave_0) entered blocking state [ 1389.478026][T14337] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1389.565633][ T6042] bridge0: port 2(bridge_slave_1) entered blocking state [ 1389.572856][ T6042] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1389.773204][T17897] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1389.998853][ T5819] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1390.729015][ T976] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1390.780654][ T5819] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1390.800325][ T5819] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.842157][ T5819] usb 7-1: config 0 descriptor?? [ 1390.899825][ T5819] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1390.935111][ T976] usb 5-1: Using ep0 maxpacket: 32 [ 1390.964025][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1390.985755][ T976] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1391.012202][ T976] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1391.071262][ T976] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.216267][T18077] dummy0 speed is unknown, defaulting to 1000 [ 1391.230528][T17897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1391.307305][ T976] usb 5-1: config 0 descriptor?? [ 1391.371987][ T976] hub 5-1:0.0: USB hub found [ 1392.010399][ T976] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 1392.087454][ T976] usbhid 5-1:0.0: can't add hid device: -71 [ 1392.093583][ T976] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1392.153128][ T976] usb 5-1: USB disconnect, device number 105 [ 1392.166854][T18080] dvmrp6: entered allmulticast mode [ 1392.205879][T17897] veth0_vlan: entered promiscuous mode [ 1392.227658][T18100] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3266'. [ 1392.248197][ T30] audit: type=1400 audit(1352.881:2718): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=18099 comm="syz.5.3266" [ 1392.300587][T17897] veth1_vlan: entered promiscuous mode [ 1392.386142][T17897] veth0_macvtap: entered promiscuous mode [ 1392.408770][T17897] veth1_macvtap: entered promiscuous mode [ 1392.445790][T17897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1392.456997][T17897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1392.474747][T17897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1392.487019][T17897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1392.498445][T17897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1392.509369][T17897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1392.522441][T17897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1392.545012][T17897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1392.556738][T17897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1392.568872][T17897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1392.579831][T17897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1392.597661][T17897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1392.610877][T17897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1392.624592][T17897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1392.642387][T17897] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.651862][T17897] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.661772][T17897] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1392.670882][T17897] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1393.356945][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1393.364862][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1393.737257][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1393.745644][ T5819] usb 7-1: USB disconnect, device number 11 [ 1393.756801][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1393.892944][T18122] veth1_to_team: entered promiscuous mode [ 1393.980075][T18122] veth1_to_team (unregistering): left promiscuous mode [ 1394.062143][T18122] team0: Port device team_slave_1 removed [ 1394.328287][ T5912] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 1394.661566][ T5912] usb 2-1: config 2 has an invalid interface number: 45 but max is 0 [ 1394.727511][ T5912] usb 2-1: config 2 has no interface number 0 [ 1394.787412][T18125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3272'. [ 1395.008869][ T5912] usb 2-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 1395.031007][ T30] audit: type=1326 audit(1355.444:2719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18120 comm="syz.5.3273" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e1578e969 code=0x7fc00000 [ 1395.052973][T18125] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3272'. [ 1395.055151][T18125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3272'. [ 1395.076660][ T5912] usb 2-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid maxpacket 255, setting to 64 [ 1395.128768][ T5912] usb 2-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.d2 [ 1395.138336][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.146549][ T5912] usb 2-1: Product: syz [ 1395.162039][ T5912] usb 2-1: Manufacturer: syz [ 1395.166278][T18125] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3272'. [ 1395.166701][ T5912] usb 2-1: SerialNumber: syz [ 1395.183751][T18125] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3272'. [ 1395.221831][T18137] netlink: 'syz.6.3275': attribute type 2 has an invalid length. [ 1395.271992][T18129] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1395.273753][T18139] FAULT_INJECTION: forcing a failure. [ 1395.273753][T18139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1395.294583][T18139] CPU: 1 UID: 0 PID: 18139 Comm: syz.3.3276 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 1395.294613][T18139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1395.294627][T18139] Call Trace: [ 1395.294636][T18139] [ 1395.294646][T18139] dump_stack_lvl+0x189/0x250 [ 1395.294676][T18139] ? __lock_acquire+0xaac/0xd20 [ 1395.294706][T18139] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1395.294734][T18139] ? __pfx__printk+0x10/0x10 [ 1395.294765][T18139] ? __might_fault+0xb0/0x130 [ 1395.294816][T18139] should_fail_ex+0x414/0x560 [ 1395.294856][T18139] _copy_from_user+0x2d/0xb0 [ 1395.294883][T18139] __sys_bpf+0x1ed/0x860 [ 1395.294910][T18139] ? __pfx___sys_bpf+0x10/0x10 [ 1395.294945][T18139] ? ksys_write+0x1f0/0x250 [ 1395.294970][T18139] ? rcu_is_watching+0x15/0xb0 [ 1395.295010][T18139] __x64_sys_bpf+0x7c/0x90 [ 1395.295033][T18139] do_syscall_64+0xf6/0x210 [ 1395.295058][T18139] ? clear_bhb_loop+0x45/0xa0 [ 1395.295083][T18139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.295103][T18139] RIP: 0033:0x7fd3a8d8e969 [ 1395.295122][T18139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1395.295140][T18139] RSP: 002b:00007fd3a9ce0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1395.295161][T18139] RAX: ffffffffffffffda RBX: 00007fd3a8fb5fa0 RCX: 00007fd3a8d8e969 [ 1395.295176][T18139] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 1395.295190][T18139] RBP: 00007fd3a9ce0090 R08: 0000000000000000 R09: 0000000000000000 [ 1395.295204][T18139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1395.295216][T18139] R13: 0000000000000000 R14: 00007fd3a8fb5fa0 R15: 00007ffeb6f8f5d8 [ 1395.295247][T18139] [ 1395.476737][ C1] vkms_vblank_simulate: vblank timer overrun [ 1395.488225][ T5816] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1395.495499][ T5912] kobil_sct 2-1:2.45: KOBIL USB smart card terminal converter detected [ 1395.594257][ T5912] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1398.934162][ T5912] usb 2-1: USB disconnect, device number 90 [ 1401.212631][ T5912] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1401.382574][ T5912] kobil_sct 2-1:2.45: device disconnected [ 1401.520006][ T30] audit: type=1326 audit(1361.534:2720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18151 comm="syz.4.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130bb8e969 code=0x7ffc0000 [ 1401.658838][T18158] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1402.315965][ T30] audit: type=1326 audit(1361.552:2721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18151 comm="syz.4.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130bb8e969 code=0x7ffc0000 [ 1402.337682][ T30] audit: type=1326 audit(1361.552:2722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18151 comm="syz.4.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f130bb8e969 code=0x7ffc0000 [ 1402.339929][T18158] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3282'. [ 1402.360325][ T30] audit: type=1326 audit(1361.552:2723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18151 comm="syz.4.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f130bb8e9a3 code=0x7ffc0000 [ 1402.407338][T18154] netlink: 'syz.4.3280': attribute type 10 has an invalid length. [ 1402.420414][ T30] audit: type=1326 audit(1361.552:2724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18151 comm="syz.4.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f130bb8e9a3 code=0x7ffc0000 [ 1402.457348][T18163] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3282'. [ 1402.522869][ T30] audit: type=1326 audit(1361.552:2725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18151 comm="syz.4.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130bb8e969 code=0x7ffc0000 [ 1402.555289][ T30] audit: type=1326 audit(1361.552:2726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18151 comm="syz.4.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130bb8e969 code=0x7ffc0000 [ 1402.653779][T18167] qnx6: unable to read the first superblock [ 1402.677485][ T30] audit: type=1326 audit(1361.590:2727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18151 comm="syz.4.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f130bb8e969 code=0x7ffc0000 [ 1402.700996][T18154] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1402.895046][ T30] audit: type=1326 audit(1361.590:2728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18151 comm="syz.4.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130bb8e969 code=0x7ffc0000 [ 1402.916425][ T30] audit: type=1326 audit(1361.590:2729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18151 comm="syz.4.3280" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130bb8e969 code=0x7ffc0000 [ 1404.301623][T18177] MPI: mpi too large (129928 bits) [ 1404.951911][ T5819] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 1405.834607][T18195] veth1_to_team: entered promiscuous mode [ 1405.865306][T18197] netlink: 'syz.4.3293': attribute type 2 has an invalid length. [ 1405.904178][T18195] veth1_to_team (unregistering): left promiscuous mode [ 1405.913637][ T5819] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1405.934798][ T5819] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1405.936604][ T5816] Bluetooth: Unexpected continuation frame (len 36) [ 1408.376110][ T5819] usb 7-1: string descriptor 0 read error: -71 [ 1408.382495][ T5819] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1408.618876][ T5819] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1408.630359][T18195] team0: Port device team_slave_1 removed [ 1408.639697][ T5819] usb 7-1: config 0 descriptor?? [ 1408.649443][ T5819] usb 7-1: can't set config #0, error -71 [ 1408.658141][ T5819] usb 7-1: USB disconnect, device number 12 [ 1410.039349][T18197] : entered promiscuous mode [ 1410.104580][T18201] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3292'. [ 1410.121697][T18201] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3292'. [ 1410.152210][T18201] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3292'. [ 1410.173761][T18201] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3292'. [ 1410.207267][T18201] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3292'. [ 1411.751119][T18229] geneve2: entered promiscuous mode [ 1411.776418][T18229] geneve2: entered allmulticast mode [ 1411.785464][T18233] MPI: mpi too large (129928 bits) [ 1412.556430][T18246] netlink: 'syz.4.3307': attribute type 2 has an invalid length. [ 1412.575714][ T5816] Bluetooth: Unexpected continuation frame (len 36) [ 1412.776828][ T8428] usb 4-1: new full-speed USB device number 105 using dummy_hcd [ 1413.044632][ T8428] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1413.224520][ T8428] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1413.572025][ T8428] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1413.646192][T17809] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1413.843872][ T8428] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.923722][ T8428] usb 4-1: Product: syz [ 1413.964622][ T8428] usb 4-1: Manufacturer: syz [ 1414.002820][ T8428] usb 4-1: SerialNumber: syz [ 1414.044451][T17809] usb 6-1: Using ep0 maxpacket: 16 [ 1414.164808][T17809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1414.194738][ T8428] usb 4-1: config 0 descriptor?? [ 1414.287214][T17809] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1414.381690][T17809] usb 6-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1414.482045][T17809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1414.664976][T17809] usb 6-1: config 0 descriptor?? [ 1416.555393][ T5819] usb 4-1: USB disconnect, device number 105 [ 1416.807724][T17809] usbhid 6-1:0.0: can't add hid device: -71 [ 1416.833300][T17809] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1416.885825][T17809] usb 6-1: USB disconnect, device number 70 [ 1419.663150][T18276] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1419.727511][T18275] MPI: mpi too large (129928 bits) [ 1419.773651][T18279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3313'. [ 1420.819577][T18276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3313'. [ 1420.858121][T18279] qnx6: unable to read the first superblock [ 1424.716912][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 1424.716935][ T30] audit: type=1326 audit(1383.235:2764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18293 comm="syz.4.3319" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f130bb8e969 code=0x7fc00000 [ 1424.967436][ T5903] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 1425.005895][T18309] netlink: 'syz.3.3323': attribute type 2 has an invalid length. [ 1425.259569][ T5816] Bluetooth: Unexpected continuation frame (len 36) [ 1425.276377][T18309] : entered promiscuous mode [ 1425.682448][ T5903] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1426.786425][ T5903] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1426.813726][ T5903] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1426.823707][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1426.854309][ T5903] usb 7-1: Product: syz [ 1426.858891][ T5903] usb 7-1: Manufacturer: syz [ 1426.875256][ T5903] usb 7-1: SerialNumber: syz [ 1426.895992][ T5903] usb 7-1: config 0 descriptor?? [ 1427.330628][T17809] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1427.501173][T17809] usb 2-1: Using ep0 maxpacket: 16 [ 1427.522231][T17809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1427.943546][T17809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1427.954019][T17809] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 1428.001553][T17809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.039990][T17809] usb 2-1: config 0 descriptor?? [ 1428.269316][T17809] usbhid 2-1:0.0: can't add hid device: -71 [ 1428.304570][T17809] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1428.371316][T17809] usb 2-1: USB disconnect, device number 91 [ 1428.789832][T18326] MPI: mpi too large (129928 bits) [ 1429.427928][T18329] dummy0 speed is unknown, defaulting to 1000 [ 1430.369845][T18336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3328'. [ 1431.697417][ T30] audit: type=1400 audit(1389.773:2765): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=18334 comm="syz.1.3330" daddr=fe80:: [ 1431.735810][T18339] netlink: 'syz.1.3330': attribute type 10 has an invalid length. [ 1434.289541][ C0] sched: DL replenish lagged too much [ 1440.354176][T18366] FAULT_INJECTION: forcing a failure. [ 1440.354176][T18366] name failslab, interval 1, probability 0, space 0, times 0 [ 1440.367540][T18366] CPU: 1 UID: 0 PID: 18366 Comm: syz.5.3335 Not tainted 6.15.0-rc5-syzkaller-00277-g345030986df8 #0 PREEMPT(full) [ 1440.367569][T18366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1440.367583][T18366] Call Trace: [ 1440.367591][T18366] [ 1440.367601][T18366] dump_stack_lvl+0x189/0x250 [ 1440.367638][T18366] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1440.367684][T18366] ? __pfx__printk+0x10/0x10 [ 1440.367723][T18366] ? __pfx___might_resched+0x10/0x10 [ 1440.367753][T18366] ? fs_reclaim_acquire+0x7d/0x100 [ 1440.367780][T18366] should_fail_ex+0x414/0x560 [ 1440.367819][T18366] should_failslab+0xa8/0x100 [ 1440.367853][T18366] __kmalloc_noprof+0xcb/0x4f0 [ 1440.367882][T18366] ? ovl_lookup+0x5d8/0x1cd0 [ 1440.367918][T18366] ovl_lookup+0x5d8/0x1cd0 [ 1440.367963][T18366] ? d_alloc_parallel+0x13d0/0x14e0 [ 1440.368006][T18366] ? __pfx_ovl_lookup+0x10/0x10 [ 1440.368036][T18366] ? __lock_acquire+0xaac/0xd20 [ 1440.368063][T18366] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1440.368093][T18366] ? __raw_spin_lock_init+0x45/0x100 [ 1440.368117][T18366] ? __init_waitqueue_head+0xa9/0x150 [ 1440.368147][T18366] __lookup_slow+0x294/0x3d0 [ 1440.368173][T18366] ? __pfx___lookup_slow+0x10/0x10 [ 1440.368204][T18366] ? leave_rcu+0xef/0x160 [ 1440.368229][T18366] ? down_read+0x1ad/0x2e0 [ 1440.368260][T18366] lookup_slow+0x53/0x70 [ 1440.368284][T18366] link_path_walk+0x925/0xe50 [ 1440.368348][T18366] __filename_parentat+0x246/0x670 [ 1440.368371][T18366] ? kasan_save_track+0x4f/0x80 [ 1440.368408][T18366] ? __pfx___filename_parentat+0x10/0x10 [ 1440.368473][T18366] ? __might_fault+0xb0/0x130 [ 1440.368512][T18366] do_rmdir+0xcc/0x630 [ 1440.368542][T18366] ? __pfx_do_rmdir+0x10/0x10 [ 1440.368569][T18366] ? strncpy_from_user+0x150/0x290 [ 1440.368604][T18366] ? getname_flags+0x1e5/0x540 [ 1440.368627][T18366] __x64_sys_rmdir+0x47/0x50 [ 1440.368652][T18366] do_syscall_64+0xf6/0x210 [ 1440.368678][T18366] ? clear_bhb_loop+0x45/0xa0 [ 1440.368702][T18366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.368721][T18366] RIP: 0033:0x7f1e1578e969 [ 1440.368741][T18366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1440.368759][T18366] RSP: 002b:00007f1e16572038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 1440.368780][T18366] RAX: ffffffffffffffda RBX: 00007f1e159b6160 RCX: 00007f1e1578e969 [ 1440.368795][T18366] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000380 [ 1440.368808][T18366] RBP: 00007f1e16572090 R08: 0000000000000000 R09: 0000000000000000 [ 1440.368820][T18366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1440.368832][T18366] R13: 0000000000000000 R14: 00007f1e159b6160 R15: 00007fff6e28f288 [ 1440.368864][T18366] [ 1447.822778][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1447.829260][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1448.422250][T18373] netlink: 'syz.4.3338': attribute type 2 has an invalid length. [ 1448.484089][ T5816] Bluetooth: Unexpected continuation frame (len 36) [ 1452.635502][T18384] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1453.802958][T18384] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3340'. [ 1457.478069][ T5831] Bluetooth: hci0: command 0x0406 tx timeout [ 1457.611004][T17899] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1457.621011][T17899] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1457.630367][T17899] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1457.639993][T17899] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1457.647883][T17899] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1458.652409][T18385] dummy0 speed is unknown, defaulting to 1000 [ 1458.709935][T18389] veth1_to_team: entered promiscuous mode [ 1459.223119][T18388] veth1_to_team (unregistering): left promiscuous mode [ 1460.793033][T17899] Bluetooth: hci4: command tx timeout [ 1462.407667][ T5903] usb 6-1: new full-speed USB device number 71 using dummy_hcd [ 1462.829499][T18399] uprobe: syz.3.3343:18399 failed to unregister, leaking uprobe [ 1462.953748][T17899] Bluetooth: hci4: command tx timeout [ 1464.492092][T18388] team0: Port device team_slave_1 removed [ 1465.174992][T17899] Bluetooth: hci4: command tx timeout [ 1467.402097][T17899] Bluetooth: hci4: command tx timeout [ 1470.156195][T18389] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3342'. [ 1470.202128][T18389] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3342'. [ 1470.231574][ T5903] usb 6-1: device descriptor read/64, error -110 [ 1470.468829][T18389] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3342'. [ 1470.544741][T18389] netlink: 108 bytes leftover after parsing attributes in process `syz.5.3342'. [ 1470.645817][T18389] netlink: 84 bytes leftover after parsing attributes in process `syz.5.3342'. [ 1470.669765][ T5903] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 1470.740280][ T30] audit: type=1400 audit(1426.301:2766): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=18407 comm="syz.3.3347" daddr=fe80:: [ 1470.838202][T18408] netlink: 'syz.3.3347': attribute type 10 has an invalid length. [ 1470.858019][ T30] audit: type=1400 audit(1426.376:2767): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=18411 comm="syz.4.3349" daddr=fe80::aa dest=3 [ 1470.941129][ T5903] usb 6-1: device descriptor read/64, error -32 [ 1471.365294][ T5903] usb usb6-port1: attempt power cycle [ 1489.513241][ T9] usb 7-1: USB disconnect, device number 13 [ 1508.271055][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 1514.782591][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1514.831317][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1579.321605][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1579.336449][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1594.826730][ T5831] Bluetooth: hci4: command 0x0406 tx timeout [ 1609.925556][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1609.932570][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P38/1:b..l [ 1609.940944][ C0] rcu: (detected by 0, t=10503 jiffies, g=99881, q=522851 ncpus=2) [ 1609.948964][ C0] task:khugepaged state:R running task stack:26440 pid:38 tgid:38 ppid:2 task_flags:0x200040 flags:0x00004000 [ 1609.963800][ C0] Call Trace: [ 1609.967122][ C0] [ 1609.970084][ C0] __schedule+0x168f/0x4c70 [ 1609.974667][ C0] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 1609.980440][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 1609.985756][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1609.990817][ C0] ? __pfx___schedule+0x10/0x10 [ 1609.995714][ C0] ? rcu_is_watching+0x15/0xb0 [ 1610.000537][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 1610.005871][ C0] preempt_schedule_irq+0xb5/0x150 [ 1610.011026][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1610.016782][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1610.022636][ C0] irqentry_exit+0x6f/0x90 [ 1610.027083][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1610.033093][ C0] RIP: 0010:copy_mc_enhanced_fast_string+0x6/0xf [ 1610.039465][ C0] Code: 89 ca e9 7d fd ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 f8 48 89 d1 a4 31 c0 c3 cc cc cc cc 48 89 c8 c3 cc cc cc cc cc cc cc cc cc [ 1610.059107][ C0] RSP: 0018:ffffc90000af7858 EFLAGS: 00010246 [ 1610.065213][ C0] RAX: ffff888043c8a000 RBX: 0000000000000450 RCX: 0000000000000fc0 [ 1610.073215][ C0] RDX: 0000000000001000 RSI: ffff888010e8a040 RDI: ffff888043c8a040 [ 1610.081215][ C0] RBP: ffffc90000af7b50 R08: ffff888010e8afff R09: 1ffff110021d15ff [ 1610.089307][ C0] R10: dffffc0000000000 R11: ffffed10021d1600 R12: ffff888010e8a000 [ 1610.097310][ C0] R13: 000000000001275e R14: 1ffffffff1efb5d1 R15: ffff888043c8a000 [ 1610.105337][ C0] hpage_collapse_scan_pmd+0x2389/0x3aa0 [ 1610.111014][ C0] ? hpage_collapse_scan_pmd+0x119d/0x3aa0 [ 1610.116935][ C0] ? hpage_collapse_scan_pmd+0x631/0x3aa0 [ 1610.122711][ C0] ? __pfx_hpage_collapse_scan_pmd+0x10/0x10 [ 1610.128718][ C0] ? __lock_acquire+0xaac/0xd20 [ 1610.133653][ C0] khugepaged+0x986/0x1690 [ 1610.138126][ C0] ? __pfx_khugepaged+0x10/0x10 [ 1610.143020][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1610.148076][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1610.154187][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1610.160285][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1610.166211][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1610.171441][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1610.177362][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1610.184349][ C0] ? __kthread_parkme+0x7b/0x200 [ 1610.189319][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1610.194387][ C0] kthread+0x70e/0x8a0 [ 1610.198503][ C0] ? __pfx_khugepaged+0x10/0x10 [ 1610.203393][ C0] ? __pfx_kthread+0x10/0x10 [ 1610.208016][ C0] ? __pfx_kthread+0x10/0x10 [ 1610.212641][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1610.217874][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1610.223107][ C0] ? __pfx_kthread+0x10/0x10 [ 1610.227734][ C0] ret_from_fork+0x4b/0x80 [ 1610.232179][ C0] ? __pfx_kthread+0x10/0x10 [ 1610.236801][ C0] ret_from_fork_asm+0x1a/0x30 [ 1610.241694][ C0]