last executing test programs: 52m18.194281749s ago: executing program 32 (id=1324): socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) r1 = syz_io_uring_setup(0x6165, &(0x7f0000000300)={0x0, 0xd191, 0x10100, 0x0, 0xa4}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}}, 0x4000) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x402}}) io_uring_enter(r1, 0x2d3e, 0x0, 0x700000000000000, 0x0, 0x0) 52m13.845419759s ago: executing program 33 (id=1340): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) mlock2(&(0x7f00006cf000/0x4000)=nil, 0x4000, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) r1 = socket(0x2, 0x80805, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={r3}, 0x8) mkdir(0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_smc(0x2b, 0x1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) 48m51.983918226s ago: executing program 34 (id=1981): bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/stat\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f000000ac40)={0x2020}, 0x2020) 42m4.499670923s ago: executing program 35 (id=3266): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-pclmul\x00'}, 0x58) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, &(0x7f0000000240)) timer_getoverrun(0x0) sendmmsg$sock(r6, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000440)}], 0x1, &(0x7f0000000580)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffff8}}, @mark={{0x14, 0x1, 0x24, 0xd54f}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}], 0x78}}, {{&(0x7f0000000e00)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0x2, {0xa, 0x4e21, 0x10000, @private2, 0x80}}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001080)="e5d25f522238fbe629390589d827819ebeab124ce4a5e77ecb61bfdc89a3a6b46130c7886bb2fe8d42d2922b392826a16a387bd132fbb785da24828e5658db", 0x3f}], 0x1}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000002dc0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0xffff, 0x1, 0x0, 0x1, {0xa, 0x4e20, 0x2, @empty, 0x1}}}, 0x80, 0x0}}], 0x5, 0x0) r7 = socket(0x1000000000000010, 0x80802, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r9], 0x68}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 40m56.232382988s ago: executing program 36 (id=3482): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x29) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) r2 = accept$alg(r1, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904000000"], 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x4c, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x4c}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r9 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d100090507000000000000090589"], 0x0) syz_usb_control_io$printer(r9, 0x0, 0x0) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000080)="29000300010003", 0x7) socket(0x22, 0x5, 0x200) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001) 37m39.647525261s ago: executing program 37 (id=4159): r0 = socket(0x9, 0x3, 0x40001) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340), 0x11000) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000001780), 0x0, &(0x7f0000001c00)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) write$tun(r3, &(0x7f0000000240)={@void, @void, @ipv6=@dccp_packet={0x8, 0x6, "aa1b68", 0x2b7, 0x21, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, @rand_addr=' \x01\x00', {[@fragment={0x2e, 0x0, 0x1, 0x1, 0x0, 0x1c, 0x68}, @routing={0x3a, 0xa, 0x2, 0x7, 0x0, [@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @hopopts={0x3a, 0x9, '\x00', [@ra={0x5, 0x2, 0x7}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @calipso={0x7, 0x30, {0x3, 0xa, 0x4, 0x2, [0x8, 0x10001, 0x0, 0x7fff, 0x0]}}]}, @routing={0xc, 0xc, 0x1, 0x8, 0x0, [@mcast1, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @dev={0xfe, 0x80, '\x00', 0x39}, @loopback]}, @routing={0x1d, 0x6, 0x0, 0x80, 0x0, [@loopback, @private1, @mcast1]}, @srh={0x0, 0x6, 0x4, 0x3, 0x61, 0x40, 0x2, [@private1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}]}, @routing={0xbaf129c2aa2dcfcf, 0x2, 0x3, 0x7, 0x0, [@remote]}, @routing={0xca, 0x14, 0x0, 0x2a, 0x0, [@loopback, @loopback, @private1, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @local, @remote]}], {{0x4e23, 0x4e21, 0x4, 0x1, 0xa, 0x0, 0x0, 0x8, 0x2, "974856", 0x72, "a00cda"}, "efa622d36c8d50568e57c0100efc2d72f653ba0d8b6de2928ca0adb23ba4dafb992034098f48d9053dca514b9bda36fee81d9ff10f3c2d5947818f003d6bf85edc1cb11ddfa8dc1d0908c5a0c8fdfa28513d8ccdc7a20d82261e27a851a8eb"}}}}, 0x2df) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x3, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_ecred_conn_req={{0x17, 0x4, 0x8}, {0x6, 0xff, 0x6ef0}}}}, 0x15) openat$cgroup(r3, &(0x7f0000000700)='syz1\x00', 0x200002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f00000001c0)={0x3c, r7, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x4}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1a}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xc0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x18f9b0c9df85e8d7}, 0x4006040) sched_setaffinity(0x0, 0x0, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) socket$inet(0x2, 0x5, 0x80040000) r9 = accept4(r8, 0x0, 0x0, 0x0) recvmsg(r9, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x2043) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000080)="059f80f3ea7b119fe93daaa7c808d49a", 0x10) 33m51.27426241s ago: executing program 38 (id=4910): socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) timer_create(0x2, 0x0, &(0x7f0000000040)=0x0) timer_settime(r1, 0x1, &(0x7f0000000140)={{0x77359400}, {0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000000)) 31m38.822957922s ago: executing program 39 (id=5407): syz_io_uring_setup(0x5e2, &(0x7f0000000000)={0x0, 0x2568, 0x14}, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x300, @none, 0x1000}, 0xe) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = epoll_create(0x8) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001600010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="1400"], 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 28m5.008581748s ago: executing program 40 (id=6217): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xbb}]}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$dri(0x0, 0x1f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000200), 0x4, 0x0) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000240)) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x21c000, 0x0) read$msr(r2, &(0x7f0000032680)=""/102378, 0xfffffc36) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000140)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0x9) ioctl$TUNSETLINK(r3, 0x400454cd, 0x335) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$afs(&(0x7f0000000380)=ANY=[@ANYBLOB="2373797a313a6f6e6c79f6c9048631fb27651ad5e823cf2e9e15006bffb171c7d2f81b1d85f597"], &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) setsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) 28m0.901280407s ago: executing program 41 (id=6222): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wg0\x00'}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$packet(0x11, 0x2, 0x300) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='smbus_result\x00', r3, 0x0, 0x6}, 0x18) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f00000000c0)={0x0, 0x0, 0x3, &(0x7f0000000080)={0xfc, "90f50000000000000000e5f144d76e44c7b2986eb5e56814e7cb83930000000040"}}) socket$pppl2tp(0x18, 0x1, 0x1) 27m55.121775784s ago: executing program 42 (id=6225): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r1, 0x0) lchown(&(0x7f0000000440)='./file0\x00', r1, 0xee01) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x5, 0x4, 0x6, 0x0, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r6, 0x0, &(0x7f0000000280)=@udp6=r5}, 0x20) 27m43.371261093s ago: executing program 43 (id=6226): landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x1, 0x1}, 0x18, 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000040)={0x24, @short={0x2, 0x0, 0xfffe}}, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000840)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000100)={0x72c, r1, 0x800, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x51, 0x80, [@ibss={0x6, 0x2, 0x7ff}, @cf={0x4, 0x6, {0x7, 0xa, 0x4b9c, 0x1}}, @dsss={0x3, 0x1, 0x55}, @ht={0x2d, 0x1a, {0x2, 0x0, 0x1, 0x0, {0x800, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}, 0x1, 0x3, 0x6}}, @chsw_timing={0x68, 0x4, {0x2, 0xf8ba}}, @tim={0x5, 0xa, {0x3c, 0xfc, 0x2, "b8443a4c3191e6"}}, @cf={0x4, 0x6, {0x5, 0x40, 0x7fff, 0x8000}}, @gcr_ga={0xbd, 0x6, @device_b}]}, @NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x14b, 0x80, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x61}}, @mesh_chsw={0x76, 0x6, {0x65, 0x1, 0x1c, 0x8}}, @fast_bss_trans={0x37, 0x134, {0x7, 0xa, "73782c4a9498b02418c670fbaacaaee3", "711d69d4d7122c3b0f291469f140312c1d58c1fd97de0da575f682793a3d3e35", "412a3d9bf9ff586ca41bb25bd7f99e97c3328cd1527513893026437295224483", [{0x3, 0x25, "dcd731dde96d2ffba171a41e8feedd33831416f5e858c714676b64b5eb5e79fb4611e09b58"}, {0x4, 0x10, "7a2164810ae049feb08b1a1ccff85401"}, {0x2, 0xe, "c60cfead99de2c48f5175af33fa2"}, {0x4, 0x9, "aab49fef247d8e5ed0"}, {0x4, 0xe, "b37947065136ad3c3d46709141df"}, {0x1, 0x1b, "52f0d9571ae1e0f2470a06f5f17dfb89f8bb6d84b242e4671282d5"}, {0x1, 0x26, "4e586f2184c9019253a9a7aa862bfdb08589cf5d0d7534640e9238f539990439363c6810c8d6"}, {0x1, 0x26, "8a627cf51eeddbdff0f5d49fa4a917d4eefb8cf03b6aa75243e622d5b37f9fcc2652ae0f7ce2"}, {0x1, 0x9, "99260dd77e0ff6e5cf"}, {0x4, 0x4, "3dac3cba"}]}}]}, @NL80211_ATTR_BEACON_TAIL={0x28, 0xf, [@rann={0x7e, 0x15, {{0x0, 0x7}, 0x3, 0x9d, @device_b, 0xb8, 0xe740, 0xfff}}, @channel_switch={0x25, 0x3, {0x1, 0xa5, 0x1}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE={0x194, 0x2a, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x0, 0x64, 0x5}}, @random={0xf6, 0x6c, "6ddb1813ca6e419db23d84a28ddb9abca2c6a27f009dffc851283b98d690f711e0e946af8acea0b36df3c1cdba7c3c578dd16e809b492370841b3e15e277cf2455b69f05002541103b18135cc24af8756715c6c5fd028ec689b79dfff8b766cf496e57fb38fed4fd0ea53e7f"}, @tim={0x5, 0xb1, {0xc9, 0x9c, 0x2, "820ece40db83c0393481c9ab9b9c1239b1c56abddb4200dec98b045d2bc1897b722c0d7c42435a46d700948ff0b6ce03cc38988799925b7c8d436ef06c3dd76db508e82d5614eaef9cecca4ee776a8d3500b8ff436d7b391e359c67e6b4aed3e8a3a00311c7a29e805bdb0fc0bd0e5b9590435f8625dfe9b72958fff5aca880d5c81746d30748fd3c818a803d9a7287175bdd4730f212a2e562dcabe393125727e0b33d7344d685db294885b3494"}}, @random={0x6, 0x33, "3a325efc5cf4fd58491ef38428fa0a935fbb68d351273e3796924d0a2c3702b9149c547db87d28a9fa2ed77fd897bc654ca069"}, @random_vendor={0xdd, 0xb, "99bdb06b59829dfea1f9e8"}, @prep={0x83, 0x1f, {{}, 0x3e, 0x8, @device_a, 0x6615, @void, 0x800, 0x7, @broadcast, 0x111}}, @erp={0x2a, 0x1, {0x1}}, @dsss={0x3, 0x1, 0x7c}]}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_TAIL={0x10a, 0xf, [@peer_mgmt={0x75, 0x6, {0x1, 0xf6cc, @val=0xae, @void, @void}}, @mic={0x8c, 0x10, {0xc1b, "71e039cce987", @short="9da50604c59676f4"}}, @challenge={0x10, 0x1, 0xbf}, @peer_mgmt={0x75, 0x18, {0x1, 0xc76d, @val=0x8b, @val=0x13, @val="31e5cb3406497f1171dc10fe143e251e"}}, @ibss={0x6, 0x2, 0xf6a}, @tim={0x5, 0xc9, {0xd6, 0x71, 0xe8, "564a61008ea8de75865ba177ee395b44ca29faccd74729c0f8fe22306154b9fe1349477e0c0cf091c06eb3656367841e9d2fe9bc84dbeb0f3ee12fea1ec24b569692f8fd65a412bdf63c08393a683866699023a02af4433f48b51ba83a6d74165e3ece764bfc2cee2569fa0d4e2cd50ff821904ed447af534a2d03c6e3fcf46eaea705b5d41cf1426d9f3f5188f4ca97ce4028d7cfd1227d32c1dcfa47289cc0603cedd5c4617b02cb2610cd7e171c9e08ca6ade9f8c5e28d2700b557cb1fc658fa646bda934"}}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x9a, 0x80, [@ext_channel_switch={0x3c, 0x4, {0x1, 0x4, 0x8c, 0x3}}, @preq={0x82, 0x4c, {{0x0, 0x1, 0x1, 0x0, 0x1}, 0x7, 0x0, 0x3, @device_b, 0xffffff0d, @value=@device_b, 0x1, 0x8, 0x4, [{{}, @device_a, 0x9}, {{0x0, 0x0, 0x1}, @device_b, 0x37}, {{0x0, 0x0, 0x1}, @device_b, 0x540}, {{0x1}, @device_a, 0x4}]}}, @mic={0x8c, 0x10, {0x247, "cbd1939085f2", @short="9868a378c2b1a88c"}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0x7, 0xb3, 0x40}}, @challenge={0x10, 0x1, 0x7b}, @gcr_ga={0xbd, 0x6, @broadcast}, @challenge={0x10, 0x1, 0x6c}, @gcr_ga={0xbd, 0x6}, @link_id={0x65, 0x12, {@initial, @device_a, @device_b}}]}, @NL80211_ATTR_IE_PROBE_RESP={0x2b, 0x7f, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x1, 0x9, @device_a, 0x7b, @value=@broadcast, 0x63, 0x2, @broadcast, 0xf}}]}, @NL80211_ATTR_IE={0x1d2, 0x2a, [@perr={0x84, 0xce, {0x5, 0xc, [{{0x0, 0x1}, @device_a, 0x2, @value=@broadcast, 0x36}, {{}, @device_b, 0x6, @void, 0x27}, {{0x0, 0x1}, @device_a, 0xfad, @value=@device_b, 0x1f}, {{0x0, 0x1}, @device_b, 0x0, @value=@broadcast, 0x2c}, {{}, @device_b, 0x4, @void, 0x24}, {{0x0, 0x1}, @device_a, 0x36000, @value=@broadcast, 0xb}, {{0x0, 0x1}, @broadcast, 0x3, @value, 0x38}, {{0x0, 0x1}, @device_a, 0x5, @value=@broadcast, 0x3f}, {{}, @device_a, 0x1, @void, 0x3a}, {{0x0, 0x1}, @broadcast, 0x800, @value=@broadcast, 0x39}, {{0x0, 0x1}, @device_b, 0xfffffff8, @value, 0x34}, {{}, @broadcast, 0xef2, @void, 0x41}]}}, @prep={0x83, 0x1f, {{}, 0xd, 0xae, @device_a, 0x5, @void, 0xc, 0x1c36, @broadcast, 0x3f9a}}, @fast_bss_trans={0x37, 0xc1, {0x6, 0x5, "6d6d919ae788c3d087cacf2f4c7cbb92", "a9fe014af4141301d38da32a0d436115e1473cb2188f7edf3ab6e9831e68a506", "50a0b1774d7b699d17d6797b78adba61a5e8aa63fa1841cdda877e6ec6ff11ec", [{0x1, 0xb, "08ee80918a5c49fd4d5e95"}, {0x4, 0x12, "232595b00339484c8fece0c56173208d6cfe"}, {0x4, 0x1, 'f'}, {0x1, 0x20, "d33f3b87aff0573f1010318646af0a4b344bd56622b5d7b40e86bc1f4780a7d1"}, {0x3, 0x27, "cce36908899f1688d22b3ca199908384c9fc7d24aeaf194d2022a7da9cc84e47e9e4ece47c619b"}]}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @rann={0x7e, 0x15, {{0x1, 0x56}, 0x9, 0x9, @device_a, 0x781, 0x43e, 0x2}}]}]}, 0x72c}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000804) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000880), 0x2800, 0x0) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f00000008c0)={0xc, @output={0x1000, 0x0, {0x7, 0xfffffff9}, 0x7, 0x4}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000b00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x68, r4, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x4, @media='udp\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r3, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xbd, 0x2d}}}}, ["", "", "", "", "", ""]}, 0x20}}, 0x404c000) bind$unix(r2, &(0x7f0000000c40)=@abs={0x1, 0x0, 0x4e24}, 0x6e) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000d00)={0x5, &(0x7f0000000cc0)=[{0x5, 0xdd, 0x3b, 0xd}, {0xfae4, 0x6, 0xf4, 0xc404fd0c}, {0x8, 0x5, 0xa, 0x9}, {0x7, 0x3, 0xf}, {0x9, 0x3, 0x55, 0x8}]}, 0x10) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x600000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x54, r1, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x3b}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x243}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}]]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080) syz_init_net_socket$ax25(0x3, 0x5, 0xf0) preadv(r3, &(0x7f0000000f80)=[{&(0x7f0000000e80)=""/255, 0xff}], 0x1, 0xd75d, 0x900000) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) dup2(r5, r3) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000fc0)=')]-$!^\',-*$)&.\x00', 0xf) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001000)={0xffffffffffffffff}) r7 = accept$unix(r6, &(0x7f0000001040), &(0x7f00000010c0)=0x6e) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001100), 0x20000, 0x0) r8 = add_key$keyring(&(0x7f00000012c0), &(0x7f0000001300)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000001140)='syzkaller\x00', &(0x7f0000001180)={'syz', 0x1}, &(0x7f00000011c0)="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", 0xfb, r8) clock_gettime(0x0, &(0x7f00000022c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001340)=""/188, 0xbc}], 0x1, &(0x7f0000001440)=""/104, 0x68}, 0xfd}, {{&(0x7f00000014c0)=@caif=@dbg, 0x80, &(0x7f0000001740)=[{&(0x7f0000001540)=""/236, 0xec}, {&(0x7f0000001640)=""/229, 0xe5}], 0x2, &(0x7f0000001780)=""/245, 0xf5}, 0x2a}, {{&(0x7f0000001880)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001900)=""/243, 0xf3}, {&(0x7f0000001a00)=""/163, 0xa3}, {&(0x7f0000001ac0)=""/104, 0x68}, {&(0x7f0000001b40)=""/25, 0x19}, {&(0x7f0000001b80)=""/224, 0xe0}, {&(0x7f0000001c80)=""/172, 0xac}, {&(0x7f0000001d40)=""/201, 0xc9}, {&(0x7f0000001e40)=""/30, 0x1e}], 0x8, &(0x7f0000001f00)=""/24, 0x18}, 0x3}, {{&(0x7f0000001f40)=@ax25={{0x3, @null}, [@remote, @remote, @remote, @rose, @remote, @bcast, @rose, @bcast]}, 0x80, &(0x7f0000002180)=[{&(0x7f0000001fc0)=""/127, 0x7f}, {&(0x7f0000002040)=""/74, 0x4a}, {&(0x7f00000020c0)=""/87, 0x57}, {&(0x7f0000002140)=""/35, 0x23}], 0x4}, 0x9}], 0x4, 0x40013023, &(0x7f0000002300)={r9, r10+10000000}) ioctl$SYNC_IOC_FILE_INFO(r5, 0xc0383e04, &(0x7f0000002440)={""/32, 0x0, 0x0, 0x3, 0x0, &(0x7f0000002340)=[{}, {}, {}]}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000002480)={'wpan1\x00'}) openat$cgroup_ro(r7, &(0x7f00000024c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) 27m42.662835218s ago: executing program 44 (id=6227): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x32}}}, 0xb8}}, 0x0) 25m59.838763007s ago: executing program 45 (id=6288): ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000000)={'veth0_macvtap\x00', 0x481}) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x101002, 0x0) read$dsp(r0, &(0x7f0000000080)=""/37, 0x25) r1 = socket$nl_audit(0x10, 0x3, 0x9) clock_gettime(0x0, &(0x7f0000005100)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000004f40)=[{{&(0x7f00000000c0)=@llc, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)=""/2, 0x2}, {&(0x7f0000000180)=""/90, 0x5a}, {&(0x7f0000000200)=""/68, 0x44}, {&(0x7f0000000280)=""/84, 0x54}, {&(0x7f0000000300)=""/39, 0x27}], 0x5, &(0x7f00000003c0)=""/219, 0xdb}, 0x9}, {{&(0x7f00000004c0)=@ieee802154, 0x80, &(0x7f0000000700)=[{&(0x7f0000000540)=""/216, 0xd8}, {&(0x7f0000000640)=""/140, 0x8c}], 0x2}, 0xb}, {{&(0x7f0000000740)=@pptp={0x18, 0x2, {0x0, @loopback}}, 0x80, &(0x7f0000001d00)=[{&(0x7f00000007c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/4096, 0x1000}, {&(0x7f00000018c0)=""/146, 0x92}, {&(0x7f0000001980)=""/120, 0x78}, {&(0x7f0000001a00)=""/110, 0x6e}, {&(0x7f0000001a80)=""/254, 0xfe}, {&(0x7f0000001b80)=""/86, 0x56}, {&(0x7f0000001c00)=""/202, 0xca}], 0x8, &(0x7f0000001d80)=""/220, 0xdc}, 0x6}, {{&(0x7f0000001e80)=@xdp, 0x80, &(0x7f0000002340)=[{&(0x7f0000001f00)=""/135, 0x87}, {&(0x7f0000001fc0)=""/76, 0x4c}, {&(0x7f0000002040)=""/214, 0xd6}, {&(0x7f0000002140)=""/215, 0xd7}, {&(0x7f0000002240)=""/230, 0xe6}], 0x5, &(0x7f00000023c0)=""/81, 0x51}, 0x9}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/46, 0x2e}, {&(0x7f0000003480)=""/97, 0x61}, {&(0x7f0000003500)=""/164, 0xa4}], 0x4, &(0x7f0000003600)=""/4096, 0x1000}, 0xffff6ddb}, {{&(0x7f0000004600)=@qipcrtr, 0x80, &(0x7f0000004bc0)=[{&(0x7f0000004680)=""/189, 0xbd}, {&(0x7f0000004740)=""/219, 0xdb}, {&(0x7f0000004840)=""/33, 0x21}, {&(0x7f0000004880)=""/227, 0xe3}, {&(0x7f0000004980)=""/19, 0x13}, {&(0x7f00000049c0)=""/88, 0x58}, {&(0x7f0000004a40)=""/100, 0x64}, {&(0x7f0000004ac0)=""/123, 0x7b}, {&(0x7f0000004b40)=""/86, 0x56}], 0x9, &(0x7f0000004c80)=""/247, 0xf7}, 0x61}, {{&(0x7f0000004d80)=@ieee802154, 0x80, &(0x7f0000004f00)=[{&(0x7f0000004e00)=""/199, 0xc7}], 0x1}, 0x7}], 0x7, 0x40000002, &(0x7f0000005140)={r2, r3+10000000}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r4, &(0x7f0000005180)={0x2, 0x4e24, @empty}, 0x10) r5 = syz_open_dev$vcsa(&(0x7f00000051c0), 0x7, 0x400000) r6 = open(&(0x7f0000005200)='./file0\x00', 0x258002, 0x10) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r5, 0x3ba0, &(0x7f0000005240)={0x48, 0x7, r6, 0x0, 0x1, 0x0, 0xc, 0x5}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$DRM_IOCTL_MODE_GETGAMMA(r6, 0xc02064a4, &(0x7f0000005380)={0x0, 0x1, &(0x7f00000052c0)=[0xd], &(0x7f0000005300)=[0x0, 0x0, 0x3f3], &(0x7f0000005340)=[0x9, 0x0]}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r5, 0x6430) r7 = syz_open_dev$MSR(&(0x7f00000053c0), 0x7, 0x0) clock_getres(0x2, &(0x7f0000005400)) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000005440), 0x4000, 0x0) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000005480), 0x2, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f00000054c0)=0x3) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000005500)='./file0\x00', 0x208000, 0x17b) faccessat2(r10, &(0x7f0000005540)='./file0\x00', 0x109, 0x1200) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000005580)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x9, 0x2, 0x0, 0x2, 0x100, 0x6}, &(0x7f00000055c0)=0x20) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000005640), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f0000005700)={&(0x7f0000005600)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000056c0)={&(0x7f0000005680)={0x38, r11, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x1c, 0x17, {0x4, 0x0, @l2={'ib', 0x3a, 'syzkaller0\x00'}}}}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x44044}, 0x11) r12 = openat$nci(0xffffffffffffff9c, &(0x7f0000005740), 0x2, 0x0) connect$unix(r6, &(0x7f0000005780)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000005800)={0x3b, 0x3, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @hao={0xc9, 0x10, @local}, @enc_lim={0x4, 0x1, 0xb}, @pad1, @ra={0x5, 0x2, 0xa}]}, 0x28) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000006900)={&(0x7f0000005840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8c, 0x8c, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x5, 0x1ff}}, @func={0x9, 0x0, 0x0, 0xc, 0x2}, @ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @const={0xc, 0x0, 0x0, 0xa, 0x2}, @fwd={0x4}, @enum={0x3, 0x7, 0x0, 0x6, 0x4, [{0x1, 0x4}, {0xa, 0x401}, {0x5, 0x5}, {0x0, 0x1}, {0x6, 0x3}, {0xc, 0x6}, {0x1, 0x3}]}]}, {0x0, [0x30, 0x0]}}, &(0x7f0000005900)=""/4096, 0xa8, 0x1000, 0x1, 0xfffffff8, 0x10000, @value=r6}, 0x28) r14 = fcntl$getown(r8, 0x9) sendmmsg$unix(r6, &(0x7f000000d580)=[{{&(0x7f0000006940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006a00)=[{&(0x7f00000069c0)="7b3a7403d1afb1da53dfe69846f260eaebda7afce707ad21303c4e0739456e3bbd531b0feb", 0x25}], 0x1, &(0x7f0000006c80)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r14}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r10, r13, r1, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [r9, r8, r6, r4, r1, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [r1, r6, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r9, r6, r12, r7]}}], 0xd8, 0x4004}}, {{&(0x7f0000006d80)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000007140)=[{&(0x7f0000006e00)="6f571fc56ea3e47a", 0x8}, {&(0x7f0000006e40)="0b81203bcf84713836aa454d8626e73842c3150f3d9c7a1f3acfc787eca74db5450d4afbc1a7f4da43530b23547484e1d59a772586aaa35e38608b98653229d3c59b9cf2b17d69257dfd798dfb88d3ffc3280abc33903fa50546f0ffa0df0917cfe92d44fe2cc911e84fefe7ad02c5518542e7627d818b18a66f3ec0cbfcd3478ea1544f306ba8bddeb31f955be298ed36d9c8e36c1cfd440eb4edc9dd4e721705c83e80a754086a23c73e213838d2fbd66e81b4813b19cb90cf1c76c7735987802d732e2dff3b7b8e64762c214490890a", 0xd1}, {&(0x7f0000006f40)="38735d34aaaf2eeb8e6ef0b924dc11c4539039998992d31895315a58a6cff286bb6855b9bff2d23ac940edb386c5b17d04cc662d6a57235a907252ccc30f0b3ffc0695fa29cab10006c13146479c37fba64a47d26fe13cadf24788814a925a1cc61f66821502343b3c84d236128efd36379928ae7ff7d05c4532c0f0fa6c7b35bfe9c3d4ba2170ca2677a38e7a077c83f7df35139786333a0aa33dce843e9ee40ae27ec15680", 0xa6}, {&(0x7f0000007000)="adf4", 0x2}, {&(0x7f0000007040)="18eb86df08fa91568f51a613b12cb8f98c8895d8d84aba0e5f95996f", 0x1c}, {&(0x7f0000007080)="63a1b1276cba1e6480b968011ce2d74ace486354ff7ee3ed46fea0d67780abefe058a867b7c1b4cc5de89f0dfe0d22fc1aed99f2dec6e2e43642c898cf8dd540128e0238ce7f6845e21acd35345be2fb86c330a14c036b183c7b820d8b16b2fc9abfc7ce9dfaebd33953d8279438ebec24c44f10f4ff4ee35e0f7fc49e42f4259897cdc2ded15e90cd66bf06d50b935b24e91a1310", 0x95}], 0x6, 0x0, 0x0, 0x20004000}}, {{&(0x7f00000071c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000008300)=[{&(0x7f0000007240)="8fb8ed1d23dc4ae57503cc721ba84ab93021fa7f006ef7f00db0e5518f16ba2071ff70e25e0d20e1575882dccf395f8cfebdc21462a37d24868fc9dcde419e962a3e415b1deef583d0e776c854ec3d05fffd5548349c5a1e6c6e99d79f1fd5416712c065547f59480a33b1c17812468f1d116732dc2daca39cc806eed643d629f3d068240b1eb39be1469cc3516a1d059a9ca59603cc9eaa31bdc4ae08f6fb1e36128d1c33ac", 0xa6}, {&(0x7f0000007300)="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", 0x1000}], 0x2, &(0x7f0000008580)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x40}}, {{&(0x7f00000085c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000009bc0)=[{&(0x7f0000008640)="f22c22143dc7b7302418d1ad21129d79c3a1c18e585b1b4f60b44bc7fb0570bdb4335148e622d6014b465f85217ec827492146b56e750a9169984279cf60fee0c9bf0810206e6780af428416e392f94cfca2c7e416f599d4e07c14a1b473f917daae8ee3525d7d3f17cfb26b8b3c1ebbc000114a801455691a12a859a15c4dcbfc01b283a217bddef6306e2d87740d67a8baf10572530799513496d45bdb8ee434ac9a391fb60d47aac4820f5d440b0c508b4251476cd00edc07396e69d5258e6a25f2ecc521682c626c768c08265c5f52372a640591673d1ccca302ce807b9260a15cd97482e095ae71fa38b7afca7a6ace9ffb07", 0xf5}, {&(0x7f0000008740)="473943258dd04e84c2bc6171c30dc55019ae282ecab7f4e0b4eb29acd1ea138f1d60014b097a48da6bf1cd2e3db21d4b0f339dfb0ac2b1b52e78a2818f1360a533c8edea43bd077af8e53c7a4b7d4d555ae2366844fb3b63cc66df832f067b29f75af66c5a26f8f98542bdd542fd244e", 0x70}, {&(0x7f00000087c0)="8b038ab37bf23915cbad750c88406aeadc739dd7cbeafce353a2a0c16c87d855b56f20a9b3d0902936cdc72fef55c0de83aa6274d86d2c5695a4a9a13a5f35dd98c08bf0eb60b4ac7116a38dc5609dea8a6f829814eaf9ccc0b62f1efe34a52f8e58c1f3e317f25ac82924196397c81cdb667fa023083f3cc11f9504b9", 0x7d}, {&(0x7f0000008840)="bfe37a866dfed9863ca65a5767f8eddf44e07a63f4a857614ac9c72287523305ca1d984faceb65ac04eed2e9a09d57071d36", 0x32}, {&(0x7f0000008880)="277bc3bb61a9d7d6377538187ffeccafd0b7d131633bbd38e6222221a20e2a6381dcffbce460f879f5670f21f77e29cd2b06ae1a9e2a7d11f52736ab3b75f02e8fef7a1d4ae6379f41c807177ef89fbc9a47d116305d4c8502cf7a7990744767ae4382fcee847658cf9fef0b5b3cc421ed31b252c9ad312b04c95124156e017273d9a149a53548df32dad7c215a3ae717a34106c8b3e7d81b673d6920bb9a3cb99ee98ffcf93e3a4", 0xa8}, {&(0x7f0000008940)="75c78d3d5815fb434d", 0x9}, {&(0x7f0000008980)="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", 0x1000}, {&(0x7f0000009980)="3ce30a8840317ff0779659c961e183fb2889fae8de67c7dbe5c91df2931ce2bffc69055a6df6da9c2c2e44c8458dc9168108463f740e6c34c718b0bf99a7e7308d5a14a4cefe523b1a2805f2f23e8bb915ece9621c5a0fe2096c84dfeb5a253712b746d79e93100368713cee163ffb82687829cbfe6207e33c30f8e62bd7c664fab32ac9", 0x84}, {&(0x7f0000009a40)="02698c4d3ca91907f3adf6ea582f1cbbc60abd7f6be2bad08f096be14a2c3a57d584ceabdfb175b5b7a32a25c44e930727f745027374bec37747078850d47abf8e4cc983df147d0eb346db3ebe98c9ccac55bd34a3690dfaf19012ba48a383c2feedd0784d9aeb6236a69bcf6d3fefb25606a6833b78031e52d2eae4a1cd367d8adc6180", 0x84}, {&(0x7f0000009b00)="2c7bc3162430d557c79228c954a144a045e246eaf7ceccc2b900146dac67057b8533f35a1d5061bc82680a5eb8dde4ad668100f698a63c928584fd7f1c93c4fbc0188fb7e1541281eb81f95e12825e4df74b2ef0c7b9e1958034b9e05df7268b0782d4fc474f977f9082fd6952e440480aabed41ac1ca912d86d1e4403c74c26712567d1824ac1a3995de9a9b4ec5578ddf8042ec5345c910815a01956565f3eb9a482e899aa84a41d67a7f7f2f929467caef30fbcb7d6", 0xb7}], 0xa, &(0x7f000000be40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x40, 0x40}}, {{&(0x7f000000be80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000d3c0)=[{&(0x7f000000bf00)="cb5cc9bf373d94a785d8e3e6083924c8e4271cdbbb1adddb16c62d1d056adfe6e84c5e4fb739058de8bf683637bb5f7c9d22e8d781033ca0691eefe52ae5265df60e876da14433f897ce4829c69f378a7529c6c013a44bddc7b34beff44605f35f67f4d7b3f443524e70d675b3ef11fa6399fdb37e44", 0x76}, {&(0x7f000000bf80)="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", 0x1000}, {&(0x7f000000cf80)="59661ff0a8048b6b1eefbec38fa766e2a0a361ff90ce3f7d39b2147290b6d9516e830b4e7fedbb2c82781c5ccf1ce009740598c5eb5e544b4da93c2d50e9bfb4cb8d1035974cf08bb5140bf535251bb5ffb7a8776122288a04787a69527af2f6f3a5483580382dbbd149a166fce74f1e30759920b91ef7b96c6f3fa4cb95ee30e8ef4d3e049a393330", 0x89}, {&(0x7f000000d040)="fc431f5026763e35784f1d04e892ad01470548fc2e4c5aa70990e5fb9a627ceacd07c8fcbe406a691823022f34b008492d3bec3b295f859c18c4a9976f6355a5995f97f3b1a7c0c63f629f89877b909d3938b8f07822145cd1fce5ebcd330ebf56c634730d0e28f9de1779900b0a1501f43a93da9e632f45ef7cfb89146e7494417866248a217256471496fe68cc4e3b23b549e39e1d66f2a0b8732ac407e25cc6d60b378607aa19d10b7cdd3eb068973cc00e1651", 0xb5}, {&(0x7f000000d100)="4eea5b9c59f03fd8d8c419b401239adfee4f52b926842b8b4c9d48cbca6301fce667cb89da91613356f67396ad73d0a56deb20b9f07e4dcd286d02a966f845cc4a2cabce485a4579b9b8841f5638e4c2ffab9cefeb40be4d84de75d9169b3c245ae6690366bfc5ab023c8dccc5869e940527792506871eef9f6d47c307b0528ad66635a172f1fda304b42d65", 0x8c}, {&(0x7f000000d1c0)="944c65160ac6c34849cb549390f878efafdfe681ff", 0x15}, {&(0x7f000000d200)="0e889c89231b04ce68f27986cf47e5f8be9cc9029685652d7894f4f28cdcc2642adc9772894927fbe6f595136321a72a31fa789173dc816cb6fcaf5c84578558dbd7bdf90b78a62ee9029d1640f22d75e4f5fd2c51359bc7eb70399f11b90673bcec624ce75daa9d18acf263a2cf8b762fcb024d731a201443e47aba71a8e447bb32b27fe96f2c6291ca25e5053bee04f2e92f47e21ab8c250922918a2320dda1cea087777affebe302a9f77f87885879562786c4fac666d7c0ff0375204f736f372a0947490be139e", 0xc9}, {&(0x7f000000d300)="6d7ce1281825f53281710dbc1ecc33e24a6ea8ee1ad6ef8c7839a1d10ca9ce1fa111b295c838f2e516559485192f859847a08078448ceaa5ba0636ad68fefcea6a92ddc41013d198b76f75acd8f8d7752132c4d0c6c664c5c1d6f0ce459b9723273de40c9265c9d39ce8cfc413ab9f2d83", 0x71}, {&(0x7f000000d380)}], 0x9, &(0x7f000000d540)=[@rights={{0x28, 0x1, 0x1, [r5, r7, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [r12]}}], 0x40, 0x20000040}}], 0x5, 0x20008800) 25m29.281668287s ago: executing program 46 (id=6343): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) lgetxattr(0x0, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r3, 0x800448d3, &(0x7f0000000100)) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000b00)=0x6) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r5, 0x0, &(0x7f0000000080)) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0xfffffffc}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0xdfc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x73) 25m28.383711215s ago: executing program 47 (id=6347): r0 = socket$nl_route(0x10, 0x3, 0x0) fremovexattr(r0, &(0x7f00000001c0)=@random={'trusted.', '\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x34, r2, 0x1, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x34}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0x7, {"a2e3ad21ed0d52f91b5d310987f70e06d038e7ff7fc6e5539b0d47078b089b34073b68090890e0878f0e1ac6e7049b334a959b669a240d5d67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07670936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70fe98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf1a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a97370614060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69b15c9f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaab1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106d26658b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c110000a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3f3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51090840517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4e004a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6ce1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c817e9177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d543902113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafcc009fc074bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5dc4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9f07b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e3ebb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4cddd5d0fc5a752f9000", 0x1000}}, 0x1006) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x648081, 0x82) fsync(r6) r7 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x2}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r7, 0x2, &(0x7f0000000000)={0x2}, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) close(r8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) close_range(r3, 0xffffffffffffffff, 0x0) 25m28.222869108s ago: executing program 48 (id=6348): syz_open_procfs(0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000001c0)="2400ffa61e005f0214f6fffffffffff807000000000000080000210008000104d100000004", 0x25) 22m2.339991756s ago: executing program 9 (id=6995): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000340)=0x3fffd) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x81, 0x4d}]}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000080)=0x9) write$ppp(r1, &(0x7f0000000300)="5ad9", 0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x874, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x31, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000600)=0x6, 0x42) sendto$inet(r2, &(0x7f0000000700)="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", 0xfe6a, 0x40040, 0x0, 0xfffffffffffffe93) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x8c) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)=0x7) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffe8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="40000000020201080000000000000000020000002c0002"], 0x40}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5800f1de2ddb18709ec700000000000000000000100001800c0002800500010000000000300003"], 0x58}}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000010007"], 0x24d8}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x5000) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003400), 0x5a, 0x0) 22m1.365022326s ago: executing program 9 (id=7000): syz_emit_ethernet(0x52, &(0x7f0000000380)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x1c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, {[@exp_fastopen={0xfe, 0x8, 0xf989, "fe2e80ee"}]}}}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a0000000600010016000000a2"], 0x1c}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r0) 22m1.352826853s ago: executing program 9 (id=7001): r0 = memfd_create(&(0x7f0000000080)='\xf3e\t\xa9\xff\vty\x01senux\x00', 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x20012, r0, 0xbb205000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000200)=@framed={{}, [@printk={@s, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x7, 0x1, 0xb, 0x0}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0xfed, &(0x7f0000001e00)=""/4077, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@flushpolicy={0x38, 0x12, 0xcdf625c385892729, 0x70bd2c, 0x0, "", [@address_filter={0x28, 0x21, {@in6=@mcast2, @in6=@dev}}]}, 0x38}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 21m46.228632468s ago: executing program 49 (id=7001): r0 = memfd_create(&(0x7f0000000080)='\xf3e\t\xa9\xff\vty\x01senux\x00', 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x20012, r0, 0xbb205000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000200)=@framed={{}, [@printk={@s, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x7, 0x1, 0xb, 0x0}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0xfed, &(0x7f0000001e00)=""/4077, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000580)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@flushpolicy={0x38, 0x12, 0xcdf625c385892729, 0x70bd2c, 0x0, "", [@address_filter={0x28, 0x21, {@in6=@mcast2, @in6=@dev}}]}, 0x38}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 15m17.220815941s ago: executing program 50 (id=8257): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x40, 0xfe, 0x6, "195847a0aa45de6ba8eae3efc81b99ff0129f7cf", "39e8599818f836f17fc62ac05f77a36d35695c8b"}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) ioctl$AUTOFS_IOC_FAIL(0xffffffffffffffff, 0x9361, 0x4) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000980)={0x1, @pix_mp={0x8d2, 0x0, 0x48524742, 0x0, 0x4, [{0x0, 0xfffffffd}, {0x0, 0x5}, {0x0, 0x80000}, {0xffff7fff}, {0x8}, {}, {0x0, 0x1}]}}) r1 = syz_open_dev$sg(&(0x7f0000001900), 0x8, 0x40) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001a40)={&(0x7f0000001480)=@proc={0x10, 0x0, 0x25dfdbfe, 0x40000}, 0xc, &(0x7f0000001600), 0x0, &(0x7f0000001940)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r0, r0, r0, r0, r1, r0, r0]}}], 0xc8, 0x4}, 0x80) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket(0x1e, 0x4, 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) sync() setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7fffffff, 0x400, 0x1, 0xd, 0x1, 0x6, 0x6}, 0x1c) recvmmsg$unix(r3, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x588, 0x1a0, 0x2a8, 0x378, 0x1a0, 0x1a0, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x4b8, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x2a8}}, {{@uncond, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="48000000090601020000000000000000020000020900020073797a3100000000050001000700000020000880100007800c00018008000140060000010c0007800800094000000005"], 0x48}, 0x1, 0x0, 0x0, 0x30008092}, 0x4000080) dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x319, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x2000, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) process_vm_readv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 15m5.792246545s ago: executing program 51 (id=8283): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000b00)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x20, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x9}]}, &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_open_dev$vim2m(&(0x7f0000000380), 0x8, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f00000003c0)={0xfffffff9, 0x0, 0x3, {0x2, @vbi={0x5, 0x2, 0x8, 0x50565559, [0xda, 0x3], [0x0, 0x7ff], 0x2}}, 0x7}) socket$kcm(0x2, 0x1000000000000002, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4397a5c0115f3542, 0x4008032, 0xffffffffffffffff, 0x3ae84000) syz_open_dev$ndb(0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000700000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(0xffffffffffffffff, 0x0) pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000540)=0x10) 14m44.523430418s ago: executing program 52 (id=8374): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000003e80)=[{{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x1, 0x0) 13m35.942409146s ago: executing program 53 (id=8548): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_freeze_timeout', 0x10100, 0x86) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x25, "e7ad4d6288184d9b75246a57407ed33ca017437ced2be04796afe5bbf1cfef84df47fcf219"}, &(0x7f0000000280)=0x2d) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e21, @rand_addr=0x64010101}}, 0x5, 0x80000001, 0x8, 0xff, 0x7f}, &(0x7f0000000380)=0x98) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x1, 0x3, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x22, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x2) move_pages(r4, 0x20000098, &(0x7f0000000080)=[&(0x7f0000a96000/0x3000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) 9m7.593089714s ago: executing program 7 (id=9508): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000055be9de96aa92271d8750e0015000000002b0000000000000000000000005edf31a13de3cabb5f843ced46db680652253257bfed5f8ede710c4246d14e66ec3caa6bd9cd3ff6c1a74df4e2eb5ca9f59dda88c4208df76b3b21b8679927c8e951c1c85944f60e8cada98cc6de1e2725d703057d1767b8564e9577fa5dc164452c871a2c7c0676fbd10f806eeee5b19070c0faf0c01e4f346d844717346c20a299abf5db8302a2b70c0e2c4c80b9eac7e5427cac5841a356e95a8a6a42d3211cdfedfde55ebd2fdbe5526b983b84f6512b4752ac2418f71e67978883ffec387b0fd7193b5c94631ab762de"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000220000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) 9m6.487895424s ago: executing program 7 (id=9510): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x2, 0x3, 0x0, 0x1000, &(0x7f0000ff9000/0x1000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000340)={0x2, 0x2, 0x0, 0x1000, &(0x7f0000ff9000/0x1000)=nil}) fsetxattr$security_smack_transmute(r0, &(0x7f0000000400), 0x0, 0x0, 0x3) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r3, &(0x7f00000010c0)=ANY=[], 0x1a3) write$binfmt_misc(r3, &(0x7f0000000040)="0db723740d6678af6874bb74fb7875012c7de0568a8315a6736b7635e00126b713064871082ef63a291542a0bbb266ec7c61a508716f1b1ea80046ef", 0xe5c) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x2180) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x48}, 0xc, &(0x7f0000000100)={&(0x7f0000000800)={0x1018, r5, 0x300, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TESTDATA={0x1004, 0x45, "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"}]}, 0x1018}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 9m4.008188798s ago: executing program 7 (id=9519): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="2c0000001400b59501000004f2ffffff0a400400", @ANYRES32=r5, @ANYBLOB="1400020000000000000000000000ffff"], 0x2c}}, 0x4000) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r7}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, 0x1, 0x2}, 0x6) 9m3.916617727s ago: executing program 7 (id=9521): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x7, 0x0, 0x0, 0x8000, 0x8012, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, @value, @void, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085200000430000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000000)={@dev, 0x78, r3}) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8916, &(0x7f0000000000)) ioctl(r4, 0x8936, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000180)='./file0/../file0/../file0/../file0\x00') creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000004c0), 0x10400, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',cache=mmap']) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r9 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r10, 0x2000009) sendfile(r9, r10, 0x0, 0x7ffff000) 9m1.964310485s ago: executing program 7 (id=9528): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002b00), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000002b40)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000600ecff070004000000000008000500ac1414bb270007"], 0x4c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x80) r3 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@empty, @in=@dev}}, {{@in6=@private0}, 0x0, @in6=@mcast1}}, &(0x7f0000000300)=0xffffffffffffffb8) creat(&(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r2, 0x40106410, &(0x7f0000000340)={0xe7, &(0x7f0000000540)="85c55d1f36bd2755aff93e5e2c71a2ed010598f0c931c2246cfcc4cb511a6043c93cd75cbc1aa6c7ee625cbe865854ee8264bafe6e8bdd7fb3a618cdc594e9dd64ab76656bc5a468f4d3daa4e225927b1f48c80d6aa01f3d5e9d607249a905a4f8b6b06e6a318c0ea06ff684b547ec0fc9730943a1d6431c4e19233ab566b6ab7f331b1c990b372d14917d842a9799a9ff937f70f481e8ab90deaba94afbe30b0c4dcb83b1a096df59b5d60981f6386af3c42a4991454de6c7db9f863e8c1d95f37c7896a5d9d8b0e03f826ef4a66c6394c0fdf99b26fa994db5d8d18ea35265e457897a334f6a"}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c850000005a000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x61f285}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) ioctl$TUNATTACHFILTER(r6, 0xc0046686, &(0x7f0000000300)={0x0, 0x0}) r7 = add_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000640)="17f9d0fa59053a827754674e859a0c205f31acd77a88dc4ba6d67cf8681d0982f78492aa74a9e4c82420890352c7dabb1d98363678605c64e15eea08882aba6a3b84a829040806d140e36a42cc87b6de48f7791b22930c706abf1635b1ae1d8e1fe88684beda77e5bbeabc407aaacf262db0c04e01d55a01f6ca64da741300bcfd57369f1d027cb192c7d70d2d997e1fdc12c9a6585c651ed1ca3c1c9ecb42244bac9ee157f95620f121bd74b1de379e38362756ceb6dcb4a146b27c6dbf99dad78d1d363340cd88d56b6fc29144cee8b63c49b326f4f2cc058d2999589cdcec63da63b50663c523148a39e5d5a1c51e96d079492687319405cb870fc0208e54450f9a485503c966f97fa84cecefacb3a2b1f9367e6d479fb69d70d787d30ef7a11d66c25202a913d797c95cbb4003724dbdbdfe99a1fc3b9788ee978e484c6c5cfa2745d1309e371a8f9596df226623406ec552b9070446fa43cd355412d2fef7c0897c1d", 0x165, 0xfffffffffffffffe) r8 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$instantiate(0xc, r7, 0x0, 0x0, r8) r9 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$binfmt_script(r9, &(0x7f0000000400)={'#! ', './file1', [{0x20, 'ARB\xab^|\xd2F\xce\xe8\xdf\xe7\xb8\xc39*8m\xcc<\xdeb\xff\xed\xe0\x80\x98\xf3\xc0\xef\xd0lcG!\xa8\x7f\xee\x0e\xad{\x1c\x82\b\"\x03\xcc\xd1\x1ao\xba\x19\xdeS2\x94\xd7Y\xad\x9c\x9e\x1a\xda\x875\xf3\xb8\xac0\xb0S\xd9\rB\x82\xcaav\x15h\x1dm\xa6\xa8\xbc\xb2J\xb0\x82\\\x98\x02p\xae\x9eD=\x9do\x9d\xcb\x85\xed\x15|\x9e\x8f\x9c\x94\xf0\xb4\xc5,Q\xf6\xd3\f\xd35\xe3?a\xc0*\xe6\x96\x9b:V\"\xe0(%G\xf1\x02\xdf-\x88\xa5\xf5#W\xcc\x8aq\x9e\xa3\x9a\xac\x95\xba\xc4c\a\x02\xc4'}]}, 0xa9) 9m1.43682683s ago: executing program 7 (id=9530): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000ac0)='/sys/power/sync_on_suspend', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, r3, 0x1}, 0x14}}, 0x0) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x6a) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x44, r5, 0x1, 0x0, 0x8000, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x84, r5, 0x300, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x800}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4044}, 0x8080) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}]}, 0x5c}}, 0x0) syz_open_dev$audion(&(0x7f0000000040), 0x1, 0x0) (async) syz_open_dev$audion(&(0x7f0000000040), 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc0}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc0}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 9m0.729397665s ago: executing program 54 (id=9530): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000ac0)='/sys/power/sync_on_suspend', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) (async) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, r3, 0x1}, 0x14}}, 0x0) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYRESOCT], 0x6a) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x44, r5, 0x1, 0x0, 0x8000, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000440)={0x84, r5, 0x300, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x800}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4044}, 0x8080) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}]}, 0x5c}}, 0x0) syz_open_dev$audion(&(0x7f0000000040), 0x1, 0x0) (async) syz_open_dev$audion(&(0x7f0000000040), 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc0}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x3, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc0}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 8m34.259899871s ago: executing program 9 (id=9532): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x19}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) flock(r1, 0x600f8a8f91d2f287) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0xbc1880, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r4, &(0x7f0000000100)={0xf, 0x8}, 0x10) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r3, 0x0, 0xffffffffffffffff, 0x1}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000002f00)={0x0, 0x10, &(0x7f0000002ec0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000002f40)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) syz_usb_connect(0x1, 0xe4, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r2, @ANYRES16=r0, @ANYRESDEC=r5, @ANYRESDEC=r5, @ANYRESOCT=r6], 0x0) 8m31.097802714s ago: executing program 9 (id=9638): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x70, 0x4, 0x3, 0x3d7, 0x4, 0x1, "3e94ed13d82620b564f495805644786d6674f15a62bdc7d1a327a6e0f569b9e3f91a15d43bf999e3e6f730ae4c38aeefb612394c8be268ce84197fd31c18da1ae3bf9ba2e6b5c16031291a18fa401f7ec41ee2efae728d2ecdd5360049a93d8f0154da29e0a12402dbe0794945b71be9"}}, 0x188) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000200)={0x3, 0xfffffff9, 0xc2b, 0x900, 0xffffffffffffffff}) syz_io_uring_setup(0x4abf, &(0x7f0000000240)={0x0, 0x386b, 0x40, 0x3, 0x32a}, &(0x7f00000002c0)=0x0, &(0x7f0000000300)) r3 = syz_io_uring_setup(0x12f4, &(0x7f0000000340)={0x0, 0xef41, 0x2, 0x1, 0x177}, &(0x7f00000003c0), &(0x7f0000000400)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r4, &(0x7f0000000440)=@IORING_OP_WRITE_FIXED={0x5, 0x30, 0x6000, @fd=r1, 0x6, 0x4, 0x401, 0x1f, 0x0, {0x0, r5}}) r6 = open$dir(&(0x7f0000000480)='./file0\x00', 0x400801, 0x100) r7 = fspick(r6, &(0x7f00000004c0)='./file0\x00', 0x1) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r1, 0xf505, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) io_uring_enter(r3, 0x3712, 0x2535, 0x4, &(0x7f0000000540)={[0x7fff]}, 0x8) ioctl$sock_SIOCGPGRP(r8, 0x8904, &(0x7f0000000580)=0x0) prlimit64(r9, 0xe, &(0x7f00000005c0)={0x1, 0x5}, 0x0) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x41, &(0x7f0000000600)=0x6a10, 0x4) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r8, 0x80489439, &(0x7f0000000640)) r10 = memfd_secret(0x80000) r11 = geteuid() sendmsg$nl_generic(r10, &(0x7f0000001a80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001a40)={&(0x7f0000000700)={0x1340, 0x1b, 0x300, 0x70bd29, 0x25dfdbfb, {0x1}, [@nested={0x18, 0x8d, 0x0, 0x1, [@typed={0x8, 0xe0, 0x0, 0x0, @fd=r0}, @typed={0x8, 0xf, 0x0, 0x0, @uid=r11}, @typed={0x4, 0x83}]}, @generic="c49ed21776d4ae5e3533221adeeb428bbb66f1364d866be6fa59dcef4ae763aa783ec3db9a9a502b7dcc8b55da36b3a2aaf270ec43309b5cc1181a5105e565230ca354d412988bb2fcf0c2561ffd8f2bf3b3d1984c564b852355370a70ddde7e", @nested={0x11c9, 0x125, 0x0, 0x1, [@typed={0x14, 0x44, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x8, 0x28, 0x0, 0x0, @u32=0x1}, @typed={0xb2, 0x3b, 0x0, 0x0, @binary="7e670855859e87a0e6bd94285c5adf43fc0597434b18213939530925cc35d11e2e21843ed3111ec654f9e497abc9d8842fdbb75c54f9f1ce74b135404edfd69d6bf7dd657bf445ac54fee8d260716c92933da17e7009c74c1fbcd8ce11a27496ac2118d8150e635eabfb936fde26add387c3da841d6a7e08a8f6c2030b62c0e462f15dcd7adbf6482e2169fe1961864c6c3d240d589c48169e6410a3c693a73b235fa0173305fa5eeb3c5d5689c5"}, @generic="da71ebf36e79e5ab352d8997ced77cd2e4493c1a40b4e338aeab4140a1929469aac03d9d144adea643f6ca87371c48a3919aee1d1764e4dd0fe09b3b86350634cafe1a32f5e03586a997e743b7733f469e91bddcf5bf1455e842619a3d13513ffb3ced97a50effee2aca36036dc970f4032c78a014a93e8421b20cd1ba01c6950a50b6f04ac143bc5c039c4aed65657dc989803f9035f6c77260d6527a722869ef11bb2fd45a73a90b9fff84346881d4c7b00bee0d06ae49c87310f0b2415a7fb72e5ab3a669c228cdf366390092f0f7886ca1e3ddd233eb7c1e8af992cceea9bf868aa949c6cfa063c44b997713ad65445413a76b", @generic="bdf60f85829eb2a6a4b758a54e5867014000e406ecf8986bc8f1e8c0a2cdae18cd4f0b75da5993e2c41a96c38526ae3d149df629a34c0bd22d855ad8ed40c8ab3198d1013bd9c73b147ddd1eb97425fdf860e681a0aa41aa899e10b2bea7dc2648ffb6e4d3e267f31836de13277ae26a8df2b33f79bc7871ff093a2c0de6e7bc3c89febe9d81e48796c0217ffe0add98649ea380567cb2ebfb462be82e092c95ef846c9176423dc7a938adc9c5395d3932aa0f54ba82c8ae0876b1a2ec6882cf03ebe3fc89cbabccede8ea4441162b7b7e9a923e11377f2d91d6f4afac8b016df2a5779514b8ee45f1793a1695121382ca52bbf6f070316a9d0432dea831982f11d057dfd718911d6e0ca032644455ff0e328cbba79a77c7b5081603a1e2c84527edd36bc9c67cb5d646fa90b764d0ba7b8e346d6638270ebeba62c4e4ef25c89e9be96266c75a636e759bf93dfee38e3ed9d4f560dbf1fa400fdbc85a16caafc341e87e556d9f1b1b75927e2ca3531253d19785bc4fb54b3c54501ec70ab39016ce3255d10d2622313da64f77eb8c2ab3071136dbe525752184dd38e3e3e7ec7800d92ab65db17ce9157820c9648fd52cd7c82404b689db596614a289da8e457b94454d680cc1c3eaf60d56b0eb57ad9939ee51c5fac0aef96588feed7f9b4d2e8a6b4c3fd8cd897d48c63e71ef475e718fef65fb7935b7cf72b9cb4b8bd986e3a1a5356819da217b593307391bdaa4ce11548b4859ed58ce7afbad39128d1e721e223ffc011a2ff510bbbc6d630a95398d27d4feb9be05227729d763ea504cd80687c73a55e1e6954864ab8ab38f898dea356175142d9fb7821c07802a6aa1854d5f5693128296b298b42a20c2180bb0a747d477edd8670d0335354cdbbc21625f4771df4f327a66d218d6457648c82d0cf7d5a1dddf53a78c15948f3f97bec385084c10a22039f2ffa297ad09e1e04d5f817ad4f7073a1bfac837c8a58ad7d5e3bb9b076ca9a11237793c1d6b451b372ed3be0ae07dc0cd24231b3d97a8933698f88bd2a981566e1ae58708cb1800ebd10bc2c9f2c4c8cfa830f5489d8437e3dd2066a83841dff07c3c7f04a8c40c31f3f65fb731c7e3972dfb2070bcebde8fb10ddd57f326da41b9be3cc4648e0cb9045d34777c2eab05eabf68476fd1fd3bb1233b8cecffb07e5c8dbeea766d1b9f94fc78386cbf7febc8270cdd23e2a159e4ca0d7907329cab58b4804cd62a78d4120906f10bda389ec89c550ce9073ff98413109bf4a3aeae0794ec991c9537af97ccadaa065ef034c897fdc56b3fe663176e5e9dfb414ec84386539273ced598977a6828019d6148cec7fdae78b9a42136ddd7e7741323afae79f4da1cb8dea96d6878ebbdb7e6f662564147d0fb5bea6983a5cc3003affe74739b06cac25b9a47cfd471f81ea3db4c53c96bf0b79100c4fcc11f7a6faede48c9f95ad773b10eab02251c31149a46041fc55a92ed40a076405e6b79f4b1d9a584ab0cc76985187e03d3d717a21f40c9b7acbc60b1bc9724519d0d4505abf4cb2830578ece428c2a161eb5c2a4ce223728d94ac4fd50bc44c96591128d3ad81fcf6128b8c7b1b2ae70126666600116a706ed93daf49c97f65106080b3acf485a850ab9177e41cd205811ca5af9c526d7dff7d7ea686e3d375f07028bedf339987422b055f5ccd19878e472ca9bf9d1e54a067dfc155423f8ee0e7bab9750fafdf8e8bfc683694c690a55c5c0dc2126e5e3c5d0963d1b3df0df48c81d371eb90e399bb78f982968e23f2583ac83ab3b140903db9e8985e1a294df77923111a27ee400d24dd005f0823fd1b927b48ba8a67f919fe5af4994ca470991c6d226d2c0413c309fae256e74354a3fe93ac2d6fdc0c143b45ba01e1109d57d596e113a2551c077d5609d8ea3e71a8fd10dd55425c171cedcc5b120ac91bf57f6a2944b5eb72c810ed12e43b2a4819658f52568d43f3f1d13965663bf8cc7058c41a1bad4e3cb5222e6ada1f42bc98236b73fb907c2cc7a8a14b9f2f15ce5fec90a7822b396ca6e4405080239af9773c20bd9bb61a5524593f64fb19ba5f2eca5664751856696dca775e9662cffdf1955e33618965205d1c7067ced6079a649686f8a28bbd27de166cdedb20a9e894f260e6be6500bff07f675fc41d740dd21c4fb4ceec1679b77a973211d5b0bbce015f37ae06a7b92798bf1f13bce592746cd4a6439219b5aad58c359b6fd4232c649adc8892801880d2cfb998ef21a017a439838364a98c78b0510f5e8ede57bce9cfc495e8deebcb02f6660628a650794ff80ec1e1d1f1c49428dd45c22d1adf06c91e8996a2411bf6f4e72a4841110fb8b0acfcaec804c078798aed4669363dfa8ab816b7181a02b04de7ed2f292390e88e2ac0be2381a5b48cca0e4091011a7a3982db04a8ce18e6b95c24dcc9e40a901fde3f88bc2cd0a0c45a8fd21ad0c594ca67dee5873fa70d1440ce0b73207ea54252b909ea10c1c5009d39c45724400432e956208b3a9674ad40b241111a1153c1a48045b72bc54fcc34795babbb3a8bcbdcc3139c8e4988cfe971a0b6a87677865ed77d9533b58fcf53e5a46231ee722ee71491ce66cf0eb73004a96450a4ffd6766d6c3c4b817a656637bce179dadfeeed44c3f4e7365158af1987ccc5d0e00ad9fc7428ec10a803456e3a15b1e2e498a28939eafbf01f98b229ea32c6374c29263a8daa755b06e94bde6dace51f9354de1cc8aadc3006228b6bfde3c10bd4dbae6a6bc32f8758ca26c21ba0c210b1c5e36d1cd5306f621f9ed4d75c868084a38e38b67770eef5f9ad975f14d35999f2665b838cae0e0a162a86889e9b3989aee6052d223c61c577fe6010b81b53da293de33536a1b96310afbc5f82a700e0bbb5149f9d221ee6c52d645d4a885632015d5a9aaadb7504a4b74e23bada8590e030e5197d0a58c0e7564c319ea84dd4bae7d84cade25035e78e29ed4ec6d8757ad172c1b99c8d2bed8260ae81f94315d694eb6e2c2cbaf8da2983abcab3861a84adc95b3dbc51dd936a74da339ad72017a8e0a43d4074dfb726f243cc8a2ec78adc3492ff85d17c452421fe1d5f3ac218b1c8ca963b581ac0723af01db4994926e842c655239c8115710a3a55a0aacba9618739579e227dced04f786c1a1208b087c54f0e99c4884f555101e23b9d49932d24eb078367d3ed13e5d860248c0a46ef0513884d267794f370efbedc85c441c59d2d3734ecbfbd551d993458f3d204e9fc16c6dc66363d2ee05d50ad213a6386b9cd5da608d842e9fa3e314528661040e616b77b8c495f34996904707f4ff8cf167c5914176d11b551cf620d4d802773f1b25d6fb750c3215281019edb0b5ec101fdfc50012a6c9fd371c8a35d14ba66eaa299f17c872d43753f67053f51e757c165e9874511b7050b3b82ba125d7eff1675d7f2d03423acdb5485ab0c4dae9f7e0309be9488bc59dd865eb25f1138862df50627a5bd80f82f1c79e89478266bbc47ad8b74e5303f08c7002680a5a595e5a025783635b33d0a553a5efeaabb39b1b04afea96d4a694f93c81987c67fddbacf60529a411fcb8182bd8fc7e0e853b7bfffc853490300f164a0caa16162ac31604cce8db6d68f70be5b550ab9b561f6c147364e75d501f63cd3d121c4c8ac4d313e3cac0275da491f019aef1acc6bc462c4c5859273d5bd28043dfa2e260dec48a8cae99f5b71c609dab5e776ce1ab9286416c2d7f08f80e528127f96c07350af201b46d647d0ed1e0a1ee56e7214f1858e1ef6213e7b772009ec962f82dc713e7032582c67f336a9d3c09ecd35573bc4683838c7c25d8a2a2b5e10772f2161379f86da821b1d086f8f91c835b623f44a21c1208fd714a3f9d00ff32925ffb6ea03ff69085fb5194c61d746a84e864a22f09a57fd6cb570c6ef59168986efdcb1461c7afe816c576cf302eba0783898510ab87d5ac34acb9f4756c8eed92b1a0ce38c4968ca0d4b57055b865ad2e9e5890e7f3c5c8715f7ecd87d6dbb418ab1056b1bbe8ddb2603e878712ab4f1ed9744b4961099266bb2b9339d952609d18f5cafeb4d2a95e4c57c049a024be3c32b137d957a96f4791b0a62ce87ec50ca217004ca5d0ff6d0dcd182595ce31d8a30be5538e389c0420f2e633274f5af582bb9010a584555c7e47b90793c9eeea948ca52879f69d1b9c2a8a72150b631371999242f88fbf924de9bb906697f38311f5d87a0b13711ee8ec102dcb6829c90c68e3bae484dc35c441aff0f51ea70e76590714901101d6ae09bf67424c59764fc2215d0de7b9a481a0671eba6b52904f2e66fdaa527586ef2b61f42142426963dae78a075fe52e2673577dbdeff4a8572c788587189a7c2d44b7d95f12bf0b89a0b0134a4ff89817b323bd71828f5033afc04047908e72ac9dc01f0379a92acbcf7975ee73054b7fe70390b8e8d89b1917f150334402b97597636b5fb64f8152377d20b4c41166537766f6d884d5e479b78a653402211ed1db0b2a41e159f6abb6efaf13b6964096110c9424d415173cae07e86accc2b12ffe8b99a97529cdae1f1853c16faeba7c39d5e9e982ed0fa5f8dbff6f7898b7a09f6ae389d29e298d04f68de7709180efc98efe83b28978e26449d31cf86c94a8c4df7953ee4c6e225d5d2c97579134404c46c85416a1cc329645a4e98a0c9246245549262c5d68a3c827d3a5cc03450ce7257e777ca481ae06f6fa9304d0306ec37457b04f4ff017f76b6f160c13eb11f3612c43e4fa23adb9aa5593201b50a585a8b4250af08d1b471187f030a754e87bcdeed90afc33afdb7b004b9aa7b104735c701ea57b8a3be74fb6e6c0e4d66ee5ec1cd00ce5eddae21e71e57c3670e420fe3dd18c9c81f5cf69464d12b5825d59621dd690ff326af70050b9a61c516b2a4ae6e784712d0d07adbbba142b0f09ef472cbe68b15b7ee5f870fd30b73f6b2266be67ae8e9026a64480cf6ee6a585b8c400b2baaa4234725785c58474b173d6fcb64edea80b347275ef587255eadc62cc724242d9e0fbc885d72334722d5fcbbe5cd4b7291266c5d83d34a81c5a7c02b4bce019af6f5e7c4332e717eaec321c15f0e6a146b0e992c0da7e703a95711db46a76575ec54a1e0bfc8117e3c2f5d05aa4799c5b4ae5cf16b83d4dc49cf00ca46220789a40bb8145bcd965b6967f4a6fef301b74600d9766826030c9ce255cf11960124dd2b6b46dd7ce803d111b26bf4c2e8f186f8e8bf668c1dd154d2308dd70bf61dcd030b510b1d6dc8461201d78659680baca02e46ceec3bef19c386fba03cebf208b45fe57e000bdcda0a76d5ba7e20dea0493fc05ad350e970ab6d1183e433d930847b00b7983f18db78190e306e10bb156f823226b3b5bc40bc37f6a218a64f6e4ba3b5bdfbb1b2484e868fc76e86b0f88ff141b4746d2eeef6735b5a7dec2c7cf0a41c447b5cd60bcf9e7e53d8e7f433d7455092aa27998dab5c01b98a2701a28153366dcd3eb04e25951970858c2c68123a74ba254134c230e3b99aeba1a698ee02b7400424adf0bc04655ca8f7ee03e08e255ea88ddabc27ea4c8e76bd49d23660391f9873161379199b4a269af0365c9222383e3e16c4e047c53023129b3c62838e08a89dc2dbad3ccbd037aafeef817423c01e17e316ddded0b517093b36aa57ee5b7886b70f61094dfd8a8494a5b7295b53da0e4933c8693892bb3c8fac4e6b16eeb296c7f7c2ab50eeacbe0be88d8b0f6598b3973ea10e3aeb997e03e1b4df874db1158ac3035"]}, @typed={0xc, 0x25, 0x0, 0x0, @u64=0x6}, @nested={0xda, 0xe, 0x0, 0x1, [@typed={0x14, 0x12b, 0x0, 0x0, @ipv6=@private1}, @generic="77afcbdacfaf172a0cb0b27769774a7c4e9b8a22be4f28d5e04526c3d94a32a3c149a97e6ed7c641acefcc986e66e42dcf53b868a9a95fa45c0d740236e43fee3fba4b153c0272c9dddf9395af89b18587b626de1069c2c6d25546032af9c8754d83d51fa49bc7a4611e5f21cc9f8c7498953ff11ed74e791ec6782fdd7b15efaa795cfe16669814b1b74ddc3c6de5f4c0010c0045e8523a955301ae3febf61b010fdf6c83beddf6af6345e0b8bbcb37894fdd1a2fc83fbaa3840825cd4ca8b0ef3e"]}]}, 0x1340}, 0x1, 0x0, 0x0, 0x20000800}, 0x4040814) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000001ac0), r12) ioctl$AUTOFS_IOC_SETTIMEOUT(r7, 0x80049367, &(0x7f0000001b00)) setfsuid(r11) write$binfmt_misc(r10, &(0x7f0000001b40)="d665f0c540c6b6a8e1a47477302db4381117ff1e76091c9e43f3b291b6277c6294c476b7b59b4d7f9efb2c381fa3da9aba1c03b1fb6ea52023ec4e5cedc04998f5cf7873b8e8eab29db80ddce7081a54c30a403468b75a39641c42bf5c5b54f88dce4786f3115b9356803548110b085ac4930588774989cb2e07a317efef5be524336350652a2bfb2cb74811e26e9260c13067a30cf6f98d6f410ba07d3ba0c8317a", 0xa2) fsconfig$FSCONFIG_CMD_CREATE(r10, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000001c00)='syz_tun\x00', 0x10) io_uring_register$IORING_REGISTER_PBUF_STATUS(r10, 0x1a, &(0x7f0000001c40)={0xffffffff}, 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000001c80)={r7}) 8m30.693097365s ago: executing program 9 (id=9642): getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xb, 0x0, &(0x7f0000000040)) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001e00)={'vlan1\x00'}) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0200120f0a001100000007dd8378626c5e43c93e7b1e469e0000000000", 0x27) 8m30.47819036s ago: executing program 55 (id=9642): getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xb, 0x0, &(0x7f0000000040)) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001e00)={'vlan1\x00'}) setsockopt$packet_add_memb(r0, 0x107, 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0200120f0a001100000007dd8378626c5e43c93e7b1e469e0000000000", 0x27) 7m31.338914913s ago: executing program 2 (id=9843): syz_open_dev$dri(&(0x7f0000000040), 0x1fd, 0x202) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x33}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = dup(r0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r1, 0xffffffffffffffff, 0x0, 0x0, @void}, 0x10) setpriority(0x1, 0x0, 0x6c) 7m29.676850636s ago: executing program 2 (id=9848): r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$evdev(&(0x7f0000000340), 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$EVIOCGVERSION(r1, 0x5452, &(0x7f0000002200)=""/188) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$key(r0, 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x25, &(0x7f00000000c0)={r6, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f00000002c0)={0x3}) syz_open_dev$dri(&(0x7f0000000180), 0x7, 0x101082) r8 = dup(r2) r9 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_FLUSHABLE(r10, 0x112, 0x8, &(0x7f0000000000)=0x1, 0x4) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r9]) ioctl$KVM_GET_VCPU_EVENTS(r11, 0x4048aecb, &(0x7f0000000080)) 7m27.465211102s ago: executing program 2 (id=9856): sendmsg$NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, 0x0, 0xc810) execve(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x150c0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80840, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000cf"]) creat(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000740)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)='hfsplus\x00', 0xe01, &(0x7f0000001080)='\x00\x00\x84\xc5\x9bI\xf1\xfb\xa4\xfc\x1dA\xcc\xbd\x98#') 7m24.653423928s ago: executing program 2 (id=9859): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009c9abc0825105f0029fe0102030109021200caa70000000904"], 0x0) syz_usb_disconnect(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f00006a6000/0x3000)=nil, 0x3000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_procfs$namespace(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x38}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) fstat(0xffffffffffffffff, 0x0) r4 = socket(0x10, 0x800, 0x10001) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0x0, 0xb8e, 0x0, 0x0, 0x0, 0xfffffff8]}}, 0x5c) r5 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x905891, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000), 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14}}}}]}, 0x48}}, 0x0) 7m20.398202853s ago: executing program 2 (id=9869): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x1c, 0x4002}, 0x8, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0}) (fail_nth: 5) 7m20.044915532s ago: executing program 2 (id=9870): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0xe2, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c218000000000000000009004b4900d40066000007069078e0000002ac1414aa441ce7f100000000000000050a01010100007fffe000000200000002861100000000000b37c4a59cdbf6f3d41bf935ba4718355a900000000500880cfe8d03bebf1b09d49125441ca313ffffffff00000001e0000001000000047f00000100000004442cf2810a010102000000090000000000000007ffffffff00000006ac141433000000097f0000010000023c440885400000000900000000000000000000000000000000000200004e2300004e220000000200"/226], 0x0) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_vlan\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800038008000200080000003e"], 0x44}}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000827bd7000fcdbdf2508000000080002000600000008000400ffff00001c0006800600010002000000060005004e2000000500020080000000"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4044000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_emit_ethernet(0xe2, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c218000000000000000009004b4900d40066000007069078e0000002ac1414aa441ce7f100000000000000050a01010100007fffe000000200000002861100000000000b37c4a59cdbf6f3d41bf935ba4718355a900000000500880cfe8d03bebf1b09d49125441ca313ffffffff00000001e0000001000000047f00000100000004442cf2810a010102000000090000000000000007ffffffff00000006ac141433000000097f0000010000023c440885400000000900000000000000000000000000000000000200004e2300004e220000000200"/226], 0x0) (async) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_vlan\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800038008000200080000003e"], 0x44}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000827bd7000fcdbdf2508000000080002000600000008000400ffff00001c0006800600010002000000060005004e2000000500020080000000"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4044000) (async) 7m19.503546489s ago: executing program 56 (id=9870): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0xe2, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c218000000000000000009004b4900d40066000007069078e0000002ac1414aa441ce7f100000000000000050a01010100007fffe000000200000002861100000000000b37c4a59cdbf6f3d41bf935ba4718355a900000000500880cfe8d03bebf1b09d49125441ca313ffffffff00000001e0000001000000047f00000100000004442cf2810a010102000000090000000000000007ffffffff00000006ac141433000000097f0000010000023c440885400000000900000000000000000000000000000000000200004e2300004e220000000200"/226], 0x0) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_vlan\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800038008000200080000003e"], 0x44}}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000827bd7000fcdbdf2508000000080002000600000008000400ffff00001c0006800600010002000000060005004e2000000500020080000000"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4044000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) syz_emit_ethernet(0xe2, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c218000000000000000009004b4900d40066000007069078e0000002ac1414aa441ce7f100000000000000050a01010100007fffe000000200000002861100000000000b37c4a59cdbf6f3d41bf935ba4718355a900000000500880cfe8d03bebf1b09d49125441ca313ffffffff00000001e0000001000000047f00000100000004442cf2810a010102000000090000000000000007ffffffff00000006ac141433000000097f0000010000023c440885400000000900000000000000000000000000000000000200004e2300004e220000000200"/226], 0x0) (async) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000100)={'bond0\x00', @ifru_names='veth0_vlan\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800038008000200080000003e"], 0x44}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000827bd7000fcdbdf2508000000080002000600000008000400ffff00001c0006800600010002000000060005004e2000000500020080000000"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4044000) (async) 6m43.312110377s ago: executing program 5 (id=10013): r0 = syz_open_dev$vim2m(&(0x7f0000000340), 0x5, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000240)={0x1, @raw_data="a425e2f1a54d24f16252413860608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa194c092730319"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="54000000010201010000000000000000020000003c0001800c00028005000100000000002c0001"], 0x54}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@random="9b43a409aa81", @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @address_reply}}}}, 0x0) 6m42.720969356s ago: executing program 5 (id=10017): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000007c0)={0x54, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @disassoc={{{}, {0xc}, @device_b, @device_a, @from_mac=@broadcast}, 0x0, @val={0x8c, 0x18, {0x0, "7949ea3c21c3", @long="5601f5f04ef706287517224b9d6d386c"}}}}]}, 0x54}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x5, 0xe12, 0x4, {0x0, 0x2710}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "645b6048a2e4931133f6d9919fd48557d76811cd874f3c107bbfc1c8831026d40798a2be4cc414e02216198977dc3d41ed0880c64c39e5f4059bae641ed15112"}}, 0x80}}, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000001b00)={'syz_tun\x00', &(0x7f0000000240)=@ethtool_link_settings={0x4d, 0xfffffffe, 0x6, 0xfa, 0x7, 0x3, 0x7f, 0xff, 0x7, 0x3, [0xfffffffd, 0x5, 0x5, 0x0, 0x5, 0x3, 0x8, 0x8]}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="160a000000000000611086000000000005000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x44) 6m41.124544585s ago: executing program 5 (id=10022): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r0, 0x26, &(0x7f00000031c0)) r1 = socket(0x40000000015, 0x5, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0xc054) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x0, 0x0, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) close(r4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 6m38.238439812s ago: executing program 5 (id=10037): mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)='usrquota') quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x980, 0x101000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000028c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ad30c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b82614b2550bae878ec65a6fe5f7ee415af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd7fe926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846b3e578af7dc7d5e87d44ff828de453f7edf34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd353646000000000000000000000000000000000000000000000000eeffffff000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37c53cb57ff9d57ac41afb92a9d13e5de7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489a261f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db55474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1386f58c5eeab6dac2877225e90995554e92cb5d2f6af1f70188027773d82e5f43d0dbc60fd3dc8763c3aa884e7a3d06496384e179be004e56176dfc64fe5b1b0e6ede32527d6bed6225d9b6efe63b3798f8606ab2e5b50a15fd66f54d49ac9eaeb79dd87ec000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000e1e, 0x0, 0x8b, &(0x7f0000000000), &(0x7f0000001840)="f99d8552bc1905aa97ce38c39a1f88d4c15e54b715947daca81dc6b6d54e92f41026d7b2d40b1887009ab8802786d4c413db9b16f76742daf51f0d5da53f3dde64f7a890df359843e0c3aff9a44024f3c6bea9dacd74ff379ed06ccfcf7124f2d03effbcdecf6b9a82a437927ae7206f0fdd462c5762a7f23d279d8575ad13a2563c6d1aa869fad7000000"}, 0x50) r4 = socket$packet(0x11, 0x2, 0x300) r5 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x10, 0x0) landlock_restrict_self(r5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r3, 0x0, 0xf0, 0x1000, &(0x7f00000004c0)="499dac21de3a83ace85870c09b4c3e490448cc46d8107a616936c617e946aa2838fbe0bcbff16d610ca2582705df36f3c97186e9a13003017cef039dfaa10e5935abdd20845fca64ec0de5df94fd46c73649341b86912734771983aa285bcb64ddea560f5b27124b5d9c536544075e28ba465d67adab4b29fcbdced7f5d998fe2d6a116e6db67c27ed24738a7deee0f190786520d33b996094cf808008217969abd95513b314dcba07aca4e7d88cac688b4bf28eb6d7948102561deec74172e824a28c490990630639c35ab49ceeb9fb34e2afa9ae755f7ca861d7a7022820246a3325d291beb4c40b39f1c2e0540441", &(0x7f0000000680)=""/4096, 0x40, 0x0, 0xe9, 0xa4, &(0x7f0000001680)="e518aa3f6f0faefe072e7df444a492caa6c82958a2c68f42df0a24a361cce50fad7856ccbfde974838580fbd4bb6ab5dae5a9ae18a0a2060cd55790f21b7336725a86ecd3666b087faf74240343b2a9e64c14863f515da4498e7d5c7ba3b6a4b24050e66ad8e1706b2b153f3c1addb1b67f30506a90fe8ed39afcd1757ac5391e748b77cc12b1be7ce9a1868428628a3517fae9193d492891c840ee81eb49a397baac0eddab3730c5e1d448bfcddac6592efda2b3e6d50810b7b5838fa2daf08c8ae008dadb1da554f8e8469b8fccf3a429ce88c55d46c3fa2e56f81ccb3607617b70066cf7770a52a", &(0x7f0000001780)="7fb696aff3652497cede1d292302d623c7b2aa178a2aee9c2de05806b2aa540b8a0376e62a9c510b87584dac09146fa59f238d0d721a932aec131bbe62b2657dca144da0b815bae5e0d7061083ff8ee5791605730c6ec518165c56794bbd98c03559ff7ed68b04d9245493de803a417b5d2490b062d9b19201a237b97e1b94be202afb0597634f13ae79d4f0172c12bc2a88c4c561121b3d028acba8dea711d9b9afd358", 0x6, 0x0, 0x8}, 0x50) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00') setsockopt$packet_int(r4, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r4, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r2]) 6m37.739067628s ago: executing program 5 (id=10039): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="0800db00", @ANYRES32=r3], 0x24}}, 0x0) 6m37.345644753s ago: executing program 5 (id=10040): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f00000004c0)={0x5, @raw_data="3dad6ae0a71bb097ea30e5e3fb5aeb4e83acbeba0efe4ba1aeb4932865c0162a48e872e9bd7896cc6843d433bb50cf8f7895fa75fde6440d72df7fbf74bd85c4a9f4729eb53a3f449b092b900e4973f12ed33d132458a114fac0d85edfcdcd16f3319967fd4e6d9fca8cdeb6ec6525ed2ffc11113dfdde7282adc4cf74ff6686c8ce1d074243b24e2816ed26fbb9d4f8eb14c8f74afcf3c4bd70bf86526baf51032de734d9fb174c1716e540f6a78084cd0eb67561c5cd1ee88a84f24b8833f7a395258c3c865579"}) (async) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4}) unshare(0x22020600) (async, rerun: 64) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000000)=@o_path={0x0}, 0x18) (async, rerun: 64) r3 = socket$packet(0x11, 0x2, 0x300) capset(&(0x7f0000000200)={0x20071026}, &(0x7f0000000040)) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00', {}, 0x6}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x81}}, './file0\x00'}) read$rfkill(r4, &(0x7f0000000180), 0x8) (async) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1) add_key(&(0x7f0000000440)='rxrpc\x00', 0x0, &(0x7f0000000480)="00000000000000404cb35727f24beeedb5978f31ff6943b80000000800000014f200000000861f41", 0x28, r5) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x340}}, './file0\x00'}) (async) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000200)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r6}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x1000, 0x0, {0x9, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x7}}}) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1daa0000000000006110ccdf0000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x30000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0xf6}}, './file1\x00'}) 6m37.085339089s ago: executing program 57 (id=10040): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f00000004c0)={0x5, @raw_data="3dad6ae0a71bb097ea30e5e3fb5aeb4e83acbeba0efe4ba1aeb4932865c0162a48e872e9bd7896cc6843d433bb50cf8f7895fa75fde6440d72df7fbf74bd85c4a9f4729eb53a3f449b092b900e4973f12ed33d132458a114fac0d85edfcdcd16f3319967fd4e6d9fca8cdeb6ec6525ed2ffc11113dfdde7282adc4cf74ff6686c8ce1d074243b24e2816ed26fbb9d4f8eb14c8f74afcf3c4bd70bf86526baf51032de734d9fb174c1716e540f6a78084cd0eb67561c5cd1ee88a84f24b8833f7a395258c3c865579"}) (async) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r2, 0xc01c64ae, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x4}) unshare(0x22020600) (async, rerun: 64) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000000)=@o_path={0x0}, 0x18) (async, rerun: 64) r3 = socket$packet(0x11, 0x2, 0x300) capset(&(0x7f0000000200)={0x20071026}, &(0x7f0000000040)) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00', {}, 0x6}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0, {0x81}}, './file0\x00'}) read$rfkill(r4, &(0x7f0000000180), 0x8) (async) r5 = add_key$keyring(&(0x7f0000000380), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r1) add_key(&(0x7f0000000440)='rxrpc\x00', 0x0, &(0x7f0000000480)="00000000000000404cb35727f24beeedb5978f31ff6943b80000000800000014f200000000861f41", 0x28, r5) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r4, {0x340}}, './file0\x00'}) (async) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000000200)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r6}) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000040)={0x0, 0x1000, 0x0, {0x9, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0x7}}}) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1daa0000000000006110ccdf0000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300), 0x30000, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0xf6}}, './file1\x00'}) 4m52.084666137s ago: executing program 3 (id=10408): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) io_uring_setup(0x19ea, &(0x7f00000000c0)) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$unix(0x1, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRES32=r1, @ANYRES32=r1], 0x20) 4m51.884774132s ago: executing program 3 (id=10411): r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f00000001c0)='./bus\x00', 0x1) mkdirat(r0, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000240)={0x1, 0x8000, 0x8000, 0x0, 0x8, 0x2, 0x1, 0x0, r2}, 0x20) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x612d6cbdae96bb0a, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000280)=0xa5) ioctl$SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000000240)=0x81) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x51f403, 0x2) bpf$ENABLE_STATS(0x20, &(0x7f00000002c0), 0x4) 4m50.63668255s ago: executing program 3 (id=10415): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xb4}}, 0x0) eventfd2(0x0, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x268, 0x1, 0x5, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [{{0x254, 0x1, {{0x1, 0x9}, 0x6, 0x7e, 0xf3, 0x1956, 0x21, 'syz1\x00', "da55111a7843e7c0338db4285e7e3d99b452bacba6c9a08010ff87794b888ea0", "7bf8dd79a6cef9a525f52091a00c91a9ec1318439574d8c21f98ad11cefb186d", [{0xe, 0x8001, {0x3, 0x2ff}}, {0x1, 0xf54, {0x1, 0x1}}, {0x7, 0xe16, {0x2, 0x9ad}}, {0x8, 0x9fd, {0x2, 0x8}}, {0x52f, 0x7, {0x3}}, {0x8, 0x7, {0x0, 0xf}}, {0x101, 0xd4ee, {0x2, 0x3}}, {0x24, 0x5, {0x6, 0x88}}, {0x3, 0x8b8, {0x1, 0x5}}, {0x0, 0x2, {0x1, 0x7ffd}}, {0xd, 0x3, {0x3, 0x400}}, {0xd5, 0x2, {0x1, 0xb9ca}}, {0x8, 0x6, {0x2, 0x7f4}}, {0xe2, 0x9, {0x1, 0xc7b7}}, {0x2f, 0x7, {0x1, 0x3}}, {0x7ff, 0x7, {0x1, 0x7}}, {0xe00, 0x8000, {0x0, 0x1}}, {0x80, 0x4, {0x0, 0x7}}, {0x2, 0x0, {0x0, 0x3}}, {0x5, 0xb, {0x2, 0x1}}, {0x5, 0x9, {0x0, 0x4}}, {0xd, 0x3, {0x1, 0xaa0}}, {0x9, 0x8, {0x0, 0x6}}, {0x1ff, 0x636a, {0x1, 0x4}}, {0x8, 0x9, {0x2, 0xc}}, {0x6e53, 0x8, {0x2c5c7c1dd87d2863, 0x9}}, {0x7fff, 0x3, {0x1, 0x4}}, {0x4, 0x5, {0x2, 0x9}}, {0x400, 0x101, {0x2, 0x5}}, {0x1000, 0x9, {0x1}}, {0x5, 0x5, {0x1, 0x8}}, {0x6, 0x15d8, {0x1, 0x3}}, {0x5471, 0x5, {0x2, 0x6}}, {0x4, 0x8, {0x0, 0x8}}, {0x6, 0x4, {0x3, 0xa80}}, {0x8, 0x20, {0x0, 0x5}}, {0x4, 0x3, {0x3, 0x8}}, {0x95, 0x9, {0x2, 0x80000005}}, {0xa9, 0x6, {0x1, 0x5}}, {0x81, 0x7cc9, {0x3, 0xe}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x200080c5}, 0x8000) unshare(0x20000400) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4m49.601672322s ago: executing program 3 (id=10419): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000180)='./file0/file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x600) sched_setscheduler(0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x82) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000a9000000000000000200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) 4m47.598931962s ago: executing program 3 (id=10427): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000e7ffff1f003f8fb83af5b400"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) listen(r4, 0xc18f) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYRES8=r2], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r5, @ANYRES64=r0, @ANYBLOB="c8f4eeb696ff73ffff"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f00000001c0), 0x100) close_range(r1, 0xffffffffffffffff, 0x0) 4m46.054317231s ago: executing program 3 (id=10430): socket(0x15, 0x80005, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2af01c3d0040fbffffffffffffff00"}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x6, 0x0, 0x17, "afee3aaaba9a7afcf637553cd6c46c11cef163"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x109) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r2, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200000002abd7000000000000200000a001f00"/36], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$pppoe(0x18, 0x1, 0x0) 4m45.676289974s ago: executing program 58 (id=10430): socket(0x15, 0x80005, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2af01c3d0040fbffffffffffffff00"}) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x3, 0x6, 0x0, 0x17, "afee3aaaba9a7afcf637553cd6c46c11cef163"}) openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x109) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r2, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200000002abd7000000000000200000a001f00"/36], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$pppoe(0x18, 0x1, 0x0) 10.852880932s ago: executing program 0 (id=11460): syz_usb_connect(0x0, 0x2d, &(0x7f00000029c0)={{0x12, 0x1, 0x200, 0x57, 0xa5, 0x4c, 0x40, 0x77d, 0x627a, 0x1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x81, 0x7, 0x20, 0x5, [{{0x9, 0x4, 0xc9, 0x1, 0x1, 0x3, 0x38, 0x79, 0x5, [], [{{0x9, 0x5, 0xf, 0x10, 0x10, 0x7, 0x70, 0xc0}}]}}]}}]}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000000)={0x5, @pix={0x9, 0x1, 0x31303453, 0x0, 0x8000, 0xff, 0xb, 0x2, 0x0, 0x2, 0x0, 0x7}}) 7.172954082s ago: executing program 0 (id=11471): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000600), 0x802, 0x0) r2 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x80, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r7 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) r8 = syz_io_uring_setup(0x1f8, &(0x7f0000000080)={0x0, 0x6c0e, 0x10100}, &(0x7f0000000440), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x5e9, &(0x7f00000017c0), &(0x7f0000000040)=0x0, &(0x7f0000000840)) syz_io_uring_submit(r10, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r8, 0xb15, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0xffffffff, 0x7, 0x0, 0xffffffff, 0xfffffffe}, [@TCA_NETEM_RATE={0x14, 0x6, {0x4, 0x1, 0xf}}]}}}]}, 0x60}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000140)={0x2, {{0x2, 0x0, @multicast2=0xe0000001}}}, 0x88) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) close_range(r0, 0xffffffffffffffff, 0x2) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000003140)="30d5316e5a9f82afc05e78e1b262faca0f4e8a434c2bc7787c31161515847a9b", 0x20) pipe2$9p(&(0x7f0000000300)={0xffffffffffffffff}, 0x40) r13 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r14 = getuid() mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x1000c48, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r12}, 0x2c, {'wfdno', 0x3d, r13}, 0x2c, {[{@msize={'msize', 0x3d, 0x3d74}}, {@posixacl}, {@ignoreqv}], [{@hash}, {@fowner_lt={'fowner<', r14}}]}}) r15 = accept4(r11, 0x0, 0x0, 0x0) recvmsg$kcm(r15, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f00000008c0)=""/89, 0x59}], 0x1}, 0x0) recvmmsg(r15, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1}}], 0x1, 0x0, 0x0) openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/doi\x00', 0x2, 0x0) 6.826083162s ago: executing program 6 (id=11474): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x140}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000480)) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000040)={'batadv_slave_0\x00', @multicast}) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000480)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x85c}, 0x0) process_vm_writev(0x0, &(0x7f0000000840)=[{&(0x7f00000004c0)=""/208, 0xd0}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/242, 0xf2}, {&(0x7f00000006c0)=""/202, 0xca}, {&(0x7f00000007c0)=""/121, 0x79}], 0x5, &(0x7f0000002100)=[{&(0x7f00000008c0)=""/31, 0x1f}, {&(0x7f0000001c00)=""/195, 0xc3}, {&(0x7f0000001d00)=""/67, 0x43}, {&(0x7f0000001d80)=""/138, 0x8a}, {&(0x7f0000001e40)=""/176, 0xb0}, {&(0x7f0000001f00)=""/209, 0xd1}, {&(0x7f0000002000)=""/96, 0x60}, {&(0x7f0000002080)=""/84, 0x54}], 0x8, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4004) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x4e23, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0xb8}}, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0) 6.760781752s ago: executing program 4 (id=11476): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(0xffffffffffffffff, 0x5411, &(0x7f0000000280)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0xd, 'veth1_to_batadv\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0xc9f, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x8, 0x8000) r5 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$LOOP_SET_FD(r4, 0x4c00, r5) bpf$ENABLE_STATS(0x20, 0x0, 0x0) lseek(0xffffffffffffffff, 0xffffffffffffeffa, 0x2) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$P9_RLERRORu(r7, 0x0, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800000003147df800000000fedbdf250900020073797b300000000008004100736977001400330076657468305f6d616376746170000000"], 0x38}}, 0x0) 6.168675932s ago: executing program 0 (id=11478): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = msgget$private(0x0, 0x418) msgctl$MSG_INFO(r1, 0xc, &(0x7f0000000040)=""/202) msgctl$IPC_RMID(r1, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0xff, 0xa4], &(0x7f0000001280), 0x0, 0x100000}}, 0x40) r2 = socket(0x10, 0x803, 0x0) r3 = getuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) r5 = getegid() r6 = gettid() tkill(r6, 0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000380)={{0x3, r3, r4, 0xee00, r5, 0x4, 0x3}, 0x0, 0x0, 0xfff, 0x4, 0x5, 0x293e, 0xfffffffffffffffa, 0xffff, 0x7fff, 0x4, r6, r7}) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x1}}) syz_emit_ethernet(0x109, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000fb006800000a069078ac1414bbac1414aa00004e2256f2e18d815e0dfc8b6017051575229861dfad3a5b2d2c76179cecd80e6c675336834bc1ec8c24e3cc33136806622d5aec8dd7949b6a0b", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ccc2000090780000fe06e2d4c3d91312e5b5f5fcae114084be3c434de92b708d01fe06e2d4c3d91312a01c063634cea56c652c232c7b8737de0402fe06e2d4c3d9020401001312e65e5afa8b9205bad54216b48344e55d080a000000010000add70000003c4f6abcbbca2e3214efdbea3d614721107453d2b850f363312868aea470e8203275ec312eedac0bbeab1612fe36da99e1ed360c6ee50c1d5d326dfa48738d171a0e6c332069602fcd4d6791689e2f7d33609066644b6189c8418ea58c248a56553389c9dbdd5d4ab6c3c511c2e68818aea5a6d93e878b"], 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r8, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x74, r9, 0x400, 0x70bd29, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'syzkaller1\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_vlan\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0xc}}]}, 0x74}, 0x1, 0x0, 0x0, 0x24004014}, 0x4000) 6.093587218s ago: executing program 8 (id=11479): r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000002100)={0x2c, r4, 0x101, 0x0, 0x0, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x2c}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_SESSION_ID={0x8}]}, 0x1c}}, 0x0) 5.830681333s ago: executing program 4 (id=11480): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[@ANYRES64], 0x118) syz_open_dev$sndmidi(&(0x7f0000000040), 0x6, 0x408040) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) fsetxattr$security_capability(r1, &(0x7f0000000240), &(0x7f0000000280)=@v3, 0x14, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) prlimit64(0x0, 0xb, &(0x7f00000001c0)={0x3, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f0000000fc0)=[{{&(0x7f0000000440)=@alg, 0x80, &(0x7f0000000980)=[{&(0x7f0000000600)=""/174, 0xae}, {&(0x7f0000000100)=""/6, 0x6}, {&(0x7f00000004c0)=""/98, 0x62}, {&(0x7f00000006c0)=""/241, 0xf1}, {&(0x7f00000007c0)=""/226, 0xe2}, {&(0x7f00000008c0)=""/184, 0xb8}, {&(0x7f0000000200)=""/9, 0x9}], 0x7}, 0xfffffffa}, {{&(0x7f0000000a00)=@l2, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000a80)=""/193, 0xc1}, {&(0x7f00000003c0)}, {&(0x7f0000000580)=""/46, 0x2e}, {&(0x7f0000001040)=""/124, 0x7c}, {&(0x7f0000000c00)=""/235, 0xeb}, {&(0x7f0000000d00)=""/156, 0x9c}, {&(0x7f0000000dc0)=""/182, 0xb6}], 0x7, &(0x7f0000000f00)=""/135, 0x87}, 0xffffffff}], 0x2, 0x2003, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r7}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa000, 0x0) r8 = socket(0x11, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r8, &(0x7f0000000180)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r8, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000ff840600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fd"], 0xdd12}], 0x1}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000003100)="0f20e0450f00906d4b000066f30f0966baa00066ed0f01d1440f07c4423af7a60648000066ba4200b86b000000efc4639168aa000000007cb9ca0a0000b8a6154811ba29988a2f0f30", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5.829275072s ago: executing program 1 (id=11481): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000c3e5ffff4100000095"], &(0x7f00000002c0)='GPL\x00', 0x3, 0x86, &(0x7f0000000340)=""/134, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_SET_VERSION(0xffffffffffffffff, 0xc0106407, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r5, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000900000000000800097c86b722735035dc0067f6b13308000a000000000008000a000000000008000900975b9b5e04000b"], 0x184}}, 0x0) bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00000004000000040000000400010000000000", @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500"/28], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000050000000060a010400000000000000000100000008000b40000000002800048024000180080001006c6f67001800028008000540fffffff8090002402d262689000000000900010073797a30"], 0xc4}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"/720], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0xfffff000, 0x28, 0x0, &(0x7f0000000880)="61df712bc884fed5722780b686dd", 0x0, 0x8000, 0x0, 0xfffffffffffffeca, 0x0, &(0x7f0000000000), &(0x7f0000000800)="ffe200004e379b19393a41afde6b0b1235c1278ebf59a5d4d697bc199e060b675b46d4ff37c7f91ceaa6790cd8570f080b0d2375918cd7dfcf26aa90dc6a5617be488475b892958512c8e814c24d7efc26f9f2512dec8c759773c42a2fca2735984613809a78eb", 0x0, 0x2}, 0x28) r8 = syz_open_dev$video4linux(&(0x7f0000000000), 0xfffffffffffffffe, 0x90000) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r8, 0xc0305615, &(0x7f0000000040)={0x0, {0xc, 0xf0f0}}) socket$kcm(0x29, 0x5, 0x0) 5.828387041s ago: executing program 8 (id=11482): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) socket(0x22, 0x2, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSNPMODE(r3, 0x4008744b, &(0x7f0000000000)={0x283, 0x2}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000011c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000001200)={0x1d, r7}, 0x18) connect$can_j1939(r6, &(0x7f0000000100)={0x1d, r7, 0x1, {0x0, 0x0, 0x4}}, 0x18) ioctl$TIOCSETD(r0, 0x5412, &(0x7f00000000c0)=0xdb) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x1000000, 0x0, 0x200]}) 5.827516143s ago: executing program 6 (id=11483): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}, [@TCA_NETEM_DELAY_DIST={0x4}]}}}]}, 0x50}}, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r2, 0x20000005) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r5, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r6, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r7, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000401c1b3e1b00000000000109026a"], 0x0) r8 = dup2(r4, r0) close_range(r8, 0xffffffffffffffff, 0x0) 5.48065783s ago: executing program 8 (id=11484): mknod$loop(&(0x7f0000002180)='./file0\x00', 0x800, 0x0) r0 = io_uring_setup(0x301c, &(0x7f0000000240)={0x0, 0x57c6, 0x20, 0x0, 0x301}) r1 = io_uring_setup(0xdac, &(0x7f0000000340)={0x0, 0x0, 0x1, 0x0, 0xc3, 0x0, r0}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x4ce82, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000003c0)=0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) close(0xffffffffffffffff) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r7, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e0003000f3a000002800000121f", 0x2e}], 0x1}, 0x0) getsockname$packet(r9, &(0x7f00000001c0), &(0x7f00000002c0)=0x14) close_range(r1, 0xffffffffffffffff, 0x0) mount(&(0x7f0000002400)=@loop={'/dev/loop', 0x0}, &(0x7f0000002440)='./file0\x00', &(0x7f0000002480)='efs\x00', 0x10000, 0x0) 4.92444858s ago: executing program 1 (id=11485): r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0) r1 = fcntl$getown(r0, 0x9) sched_setscheduler(r1, 0x0, &(0x7f0000000040)=0x2) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000080)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0xe4, 0x0, 0x2, 0x8, 0xca9, 0x85c, "172bd90c87522bd59c17827d84d5156cfcaddb4911a99c6a57c8cb053ea79a0bf80fa628578b3c4db6eaac6c8525de7f03d2e237ad733da2cea6011bf88cc3bafa4fe79efe994cbb2e19451307ba2b142db5051535333885e768bfcac23230a2f0b3b04c121913885f8d297c321ed418531da45439ec45a37671930f1a0c3355aecef49c0f4bd6fb320cbf2f385b8eb6e712936d2e504a968706f03bd8c4fba18e24d6d7038d02f4a5d0e497fbc3a0518d053b50abc3ac6f1f518d37838366f19f892b6f20665bb50b85648d296b5fef9be2cc3f3c6cd6c094edcc0e3b68fcb6a102c992"}}, 0x1fc) mmap(&(0x7f0000ff3000/0xa000)=nil, 0xa000, 0x5, 0x30, r0, 0xd8f4e000) (async) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x181001, 0x0) io_uring_enter(r2, 0xf93, 0xcfd4, 0x9, &(0x7f00000002c0)={[0x1]}, 0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000300)={0x0, 0x101}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000380)={0x800, 0x201, 0x1ff, 0x79, r3}, &(0x7f00000003c0)=0x10) (async) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000400)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r6 = timerfd_create(0x8, 0x0) (rerun: 64) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x7, 0x8010, r2, 0x0) (async) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, 0x0, &(0x7f0000000640)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x6e95, 0x1, &(0x7f0000000600)="a0933bc531c2c046af74b3e80d70adde284157424521425a8818edc79dff9f89d84d70dfc4a2416442a6c1dcb5b2b14e", 0x0, 0x0, 0x0, {0x1, r8}}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000006c0)={{{@in=@dev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@private0}}, &(0x7f00000007c0)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000800)={{0x1, 0x1, 0x18, r2, {0xee00, 0x0}}, './file0\x00'}) sendmsg$nl_generic(r2, &(0x7f0000000b80)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000840)={0x2dc, 0x40, 0x200, 0x70bd27, 0x25dfdbfb, {0x1c}, [@typed={0x4, 0x34}, @generic="982d7e24fd24c7132804361be39fa0fa47752f08274d09e2b6dd72b258ff4c9d92b39c870eecd7df89a93fa51a96bb34d1d6ac05da552311e91e971d60cfe9e8c84ab72d0b6b2b98a6c917214b30330d464ad248e67e0e33c8a0347fd9da140c3ff17a2d9eaac59b224f02b735764bdaf98abae083", @generic="c5f1a0e327a16580384c9a9a183d17dd390e845eaf3149addb94ac3a08868fee72a956e3e843721b67f4a8f8710c7ae13d2a", @typed={0x14, 0x88, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @typed={0x8, 0x145, 0x0, 0x0, @uid=r9}, @typed={0x8, 0x4d, 0x0, 0x0, @uid=r11}, @generic="cce426f6ce948225ba378bcda2101b9a3067c9112d29d41cb902622b112a74304ba74ed053e58eb0e0f0de29b98c7a7e3c5e0fe9728c40f0afd7823b5968df204316df9e2c94e192ec", @nested={0xbc, 0x76, 0x0, 0x1, [@typed={0xb5, 0x3b, 0x0, 0x0, @binary="bb2dd30699d0dd5cf1082dfb770ecad14e872c096afb3571a3434ab52fa8ad295a4beef52e034eb27ffe99ceb36c7e2a8f93499d315e72ba831b27f9403c044ba252a8a8d7d0623f45ebfbcd312e47c7ea5e53a94d35044b5aceb9f8adb51f18ba4a5d82d211615a8fdae9cd38a9c1dfdcac1d9fc207f6ddb3cef43d21c64f008adc514a71fb713a33319304b23d0a6e1e693d16eb4c7a1a4c00200ec51cfacdb12176ca99920f934aa2ced836807aed2e"}]}, @generic="6b1c768c6d64fda69d4500335d81a36942795e502725bf1ab06a6316351de6fdd1098bd4a703072ef0a75e1ddc58565fa294683db8ba3918cb1b382090b47152c81cef7ec308a074c53398ea", @nested={0xa7, 0xa7, 0x0, 0x1, [@generic="dac5f06668b9c5253bc05b06e33a6278189e4e549b2e43b7ee16939baeb7e0f2fa7f6ecf08175bf27179c76c5d31194dde9601d3a8aa4db40dd6077dd7cd361093f38bcf7936e278918695e66f462401f8e2b2597e7eb127ef7af40034450e8b63a0416b16837dc18383e13f4524a21d07149f57d68e8ea9addd90ae31a370e6726e7238fd584fc65284990a22e522a0855ce90148dfaad4a524fe", @typed={0x8, 0x102, 0x0, 0x0, @u32=0x80000000}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x4801}, 0x4001) (async) ioctl$BTRFS_IOC_QUOTA_CTL(r10, 0xc0109428, &(0x7f0000000bc0)={0x1, 0x2}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r2, 0x84, 0x79, &(0x7f0000000c00)={r3, 0x7, 0xa0}, 0x8) (async, rerun: 32) ioctl$KVM_GET_IRQCHIP(r10, 0xc208ae62, &(0x7f0000000c40)) (async, rerun: 32) r13 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r14 = openat$smackfs_revoke_subject(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) (async) r15 = syz_open_dev$dmmidi(&(0x7f0000001240), 0xe3e9, 0xa041) (async) r16 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000001280), 0x240840, 0x0) (async, rerun: 32) r17 = syz_open_dev$ttys(0xc, 0x2, 0x1) (rerun: 32) sendmsg$unix(r2, &(0x7f0000001380)={&(0x7f0000000e80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000000f00)="520bb49673fc9fdb5ce9d1c67f38c49864b3b564898864e39a8d5cacd627eba68dfda4b04095ab2e024dad8fef21f571a4aa9dad5e9f597a59cf44bac8037b5b52364ebd6fb33667a545feca9011aad0a61dccb27c45c38f1a46429a3c9d3ac11fb6c851ead080f42fa91e05943a798d9dd2b30087b1cae7756156e78dd40fb434c5d077fd17", 0x86}, {&(0x7f0000000fc0)="7266e05f1dabf311c0a059290843bd8a435ad19daf8820911f0c3e3d02900b4a4a5c57b370e94a87d1af5cc199cf9b424118160178bb08a0172dcae423bd738223721c447ed3ed224b7a448c063747f58f93c1805705974b9891cb595416ba30b10c712b9d87ea13", 0x68}, {&(0x7f0000001040)="fbc8920cacf03a670b027758d99644fb2d690b067513bf429a580850a24189779e1371650ef4d35bed289ee98296e6855c24632ad401f51672fb63ab0193e1de12b9ad497c57e9dcd2a70f0b044058548e509ad9e828d75c15bb74f523bf947fd7bc92cc6978eda817451e80d824f59ae98dd9b61beabf797cb52ec05705250f75ebc963a789289cb7bb29f3829e06f90f12146b28e177da654e579296730af4191a1f7206c048f46e08ca8984c0f143ca107ab22fc240b22064020dba9b42f261dd88ecf54c933c0288160e486840a7dd4a8c5fe0c8735d4bccdf482f5635687c2dec", 0xe3}, {&(0x7f0000001140)="a5dcf9425272c72c75f8abf84609a656f210180de471667f6775f1288975cb0d4b30595516947d76492e911f403a92b35e687f46c95805298d38810e85981b5d3006c81c5edd3e7968930849c401c572f387f742fad82a26cb7c8066eab11f100fada18b062d1d3d8ba3422e", 0x6c}], 0x4, &(0x7f00000012c0)=[@cred={{0x1c, 0x1, 0x2, {r1, r9, r12}}}, @cred={{0x1c, 0x1, 0x2, {r1, r9, r12}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x30, 0x1, 0x1, [r6, r0, r0, r2, r13, r10, r14, r15]}}, @rights={{0x34, 0x1, 0x1, [r2, r5, r6, r4, r6, 0xffffffffffffffff, r16, r17, r2]}}], 0xc0, 0x40080}, 0x4001) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f00000013c0)={0x4, 0x0, [{0xb7a, 0x0, 0x1}, {0xbd6, 0x0, 0x2}, {0x992, 0x0, 0xffffffffffffffff}, {0x8ed, 0x0, 0x4}]}) syz_open_dev$usbfs(&(0x7f0000001440), 0x9, 0x40) (async) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000001500)={0x0, 0xb7f}, 0x8) 4.649668312s ago: executing program 0 (id=11486): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x9, @loopback, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @empty, 0xffff8b97}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x303}, "e3f500314208683d", "3e7b423182e9893bb0f2a70221b27428", "739eeea1", "3d29be82a757e294"}, 0x28) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = open(0x0, 0x8060, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="6d70046c3d64656661756c"]) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004000000cb00fbdcbfb3e488ccf78f0085c3176e5686c57208956dfb69f68e860977bfd5c7bc7f8e1ae61e368493d7b40e30166c4edc607ed95f0d351d06fe53c0d889515ad6b1c435974dea71b08a491193275584ff12bbea6482"], 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='GPL\x00', &(0x7f0000000180)='(\x00', 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4, 0x0, &(0x7f0000000640)=[@register_looper], 0xb, 0x0, &(0x7f00000004c0)="9b2d6bcab4f848f9df76b6"}) 4.56493899s ago: executing program 1 (id=11487): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x48, r1, 0x1, 0x4, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}, 0x1, 0x4000000}, 0x0) 4.541342455s ago: executing program 4 (id=11488): r0 = socket$igmp(0x2, 0x3, 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000300)=[{{&(0x7f0000000380)=@nfc, 0x80, &(0x7f00000000c0)=[{&(0x7f00000004c0)=""/174, 0xae}, {&(0x7f0000000580)=""/172, 0xac}], 0x2}, 0x7}], 0x1, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, 0x0, &(0x7f0000000480)) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c9, &(0x7f0000000100)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0100000000e4ffffff001c000000"], 0x14}}, 0x0) 4.380698736s ago: executing program 1 (id=11489): openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x40101, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7d}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x30, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote={0xac, 0x3}}}}]}, @CTA_TUPLE_REPLY={0x4}]}, 0x30}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000009"], 0x24d8}], 0x1}, 0x0) 3.631148205s ago: executing program 4 (id=11490): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x2c}, [@IFLA_IFNAME={0x14, 0x3, 'batadv_slave_1\x00'}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}, 0x1, 0x300}, 0x0) 3.240916917s ago: executing program 0 (id=11491): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_ifreq(r0, 0x8937, &(0x7f0000000040)={'lo\x00', @ifru_addrs=@isdn={0x22, 0x80, 0x1, 0xfb, 0x4}}) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000480)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}}}]}}]}}, &(0x7f0000000c40)={0x0, 0x0, 0x38, &(0x7f0000000b00)=ANY=[@ANYBLOB="040f"]}) 3.207299622s ago: executing program 1 (id=11492): prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) socket$inet_udplite(0x2, 0x2, 0x88) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r3, 0x800448d3, &(0x7f0000000100)) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000b00)=0x6) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r5, 0x0, &(0x7f0000000080)) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000540)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0xfffffffc}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0xdfc2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x73) 2.348873414s ago: executing program 4 (id=11493): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800008004000000000000000000000085000000bb00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) 2.264633802s ago: executing program 6 (id=11494): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c003d000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x9, 0x20000003, 0x1, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r5, 0x5607, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}], 0x10) sendto$inet6(r6, &(0x7f0000000000)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.243579243s ago: executing program 1 (id=11495): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x10000, 0x2ffffffff}, 0xc) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0x310, 0x5002004a, 0xb, 0x0, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00'}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0xffff}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000300)={0x48, 0x1, 0x0, 0x0, 0x4, 0x9}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0c0100001000130700000000000000007f000001000000000000000000000000e00000020000000000000000000000000000080000000000000d00000000000002905fd51652f84889f9ab7254645b85c032b02673", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000380000000032000000ac1414aa00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200040000000000000000001c0004000700000000000000fe880000000000000000000000000001"], 0x10c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x54, 0x6, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x20000011) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f00001b8000/0x2000)=nil, &(0x7f000075c000/0x1000)=nil, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x4}) 2.079830991s ago: executing program 8 (id=11496): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') writev(r0, &(0x7f0000009e80)=[{&(0x7f0000009f00)='O', 0x1}], 0x1) io_setup(0x7, &(0x7f0000000280)=0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000f80)='/sys/power/pm_wakeup_irq', 0x0, 0x12c) io_submit(r1, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x4000, 0x0, 0x0, 0x0, r2, &(0x7f0000000000), 0xfffffc98, 0x300}]) 1.932852342s ago: executing program 4 (id=11497): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x796be047ad50167c) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r0, 0x2) unlink(&(0x7f0000000180)='./file1\x00') close(r0) getpriority(0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000040)=0xc) setuid(r1) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, r1}) syz_usb_connect(0x0, 0x2d, &(0x7f0000001180)={{0x12, 0x1, 0x110, 0x1c, 0xf8, 0x80, 0x10, 0x6cd, 0x202, 0xcbbe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x2, 0x4, 0x0, 0x5, [{{0x9, 0x4, 0xd6, 0x13, 0x1, 0x42, 0xa6, 0x27, 0x79, [], [{{0x9, 0x5, 0xa, 0x3, 0x40, 0xff, 0xc, 0x3}}]}}]}}]}}, 0x0) 1.118630777s ago: executing program 6 (id=11498): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x102}}, &(0x7f0000000200)='GPL\x00', 0xc, 0xff9, &(0x7f0000002300)=""/4089, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.059246143s ago: executing program 8 (id=11499): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11}) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000015c0)=ANY=[@ANYBLOB="38000000100001040800b5df2a00000000000a4c", @ANYRES32=0x0, @ANYBLOB="6a400400200400001800128008000100677470000c00028008000200", @ANYBLOB], 0x38}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000200), 0x4) set_mempolicy(0x3, &(0x7f0000000140)=0x81, 0x9) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0xfdef}, 0x1, 0x4000}, 0x0) unshare(0x2c060000) unshare(0x24020400) 908.577627ms ago: executing program 6 (id=11500): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000000012e000000000000000008500000028000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_io_uring_complete(0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001000000800000000d946447334b0afddddf02c24e78c2fcbbcb52d455f503a1f26612402608f02efdbf74c085859b5d92cf2792684cfee5d2dd7364874d0fd23b31b1b5031aeefd92fb279551806b7e81acd846cbae325120597e718fb3e95a238a845eb4b9df1971c8d14cf35720bd0632d5b8937ca53d4b4523298585b18d78bc1e3f4f44114f145440b2d1fb7a60159ba5cc2891a74e66151a0e958cbbf8a0cb22bd0ae5da1f26f2cea776913daedbae930d45a6fb9e98", @ANYRES32=0x0, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000002e00)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000138b08333891f825669c8cc6b7bce50085000000a50000009500000000f9ff973c39a9d96578e7a1a76627a30000001f1186a53f9a418e82f4912ef9ac73214ad0e22e48379d9cf29f1fc0482a78a8674513d5045047e93c19dc1be809320c14c84b8b34d850df066bd603049e03bc4c9f3f30c8c5244b6ce31bc17ce4cc64f877218a34b961cacd3ed77edbe324509a2eb54fc12705f11e05286c30cb9375a29432ff49459f9758d6008cb8a862aa38bdd4bee5cc7c8bcb5524d95768e39c2041cfa1d15e104a07dbc638b99a1615506036"], &(0x7f0000000300)='GPL\x00', 0x4, 0xfef, &(0x7f0000001e00)=""/4079, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x7800, 0x1, 0x9, 0x3, {{0x15, 0x4, 0x1, 0x5, 0x54, 0x65, 0x0, 0x7, 0x29, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x19}, {[@noop, @noop, @cipso={0x86, 0x14, 0x3, [{0x6, 0xe, "ccc7ddc17921005a31504731"}]}, @timestamp={0x44, 0x14, 0x66, 0x0, 0x1, [0x6, 0x2e79, 0x6, 0x9]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x10, 0xffffffffffffffff, [{0x2, 0xa, "8ed58764da389a90"}]}]}}}}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) fsetxattr(r4, &(0x7f0000000380)=@known='trusted.overlay.upper\x00', 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x38}}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) read$FUSE(r5, &(0x7f0000000080)={0x2020}, 0x2020) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r7, 0x30}) fgetxattr(r4, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', 0x0, 0xdeff) r8 = open_tree(r1, &(0x7f0000000740)='./file0\x00', 0x8000) ioctl$FITRIM(r8, 0xc0185879, &(0x7f0000000780)={0x2e, 0x1b}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000300)={&(0x7f0000000080)=""/49, 0x31, 0x0, &(0x7f0000000480)=""/150, 0x96}}, 0x10) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000001000000000000000000000009ad58f7250db9b8f"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2f, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)=r0}, 0x20) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={0xffffffffffffffff, 0x5, 0x10}, 0xc) r13 = signalfd4(r0, &(0x7f0000000580)={[0xfffffffffffffffa]}, 0xffffffffffffff74, 0x80800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r0}, 0x20) r15 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r16 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r16, 0xd1383000) ioctl$FS_IOC_RESVSP(r16, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{0x1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%pi6 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0xe, &(0x7f0000002f80)=ANY=[@ANYBLOB="14690400ffffffff180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000003000000850000000600000018250000", @ANYRES32=r1, @ANYBLOB="00000000080000008500000059000000183000000300deff0000000000000000567e787f0c7a7195c08a89a6652f4401e50ca1864f26427b14be90714f819a1c9e311d8a98f1a9fb9209b9fead38908fab872389a5b5c173558b9d1fe4a9e397f4415b13c2f6c0a11546e17f2b96dd"], &(0x7f00000000c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x10, '\x00', r3, @fallback=0x20, r4, 0x8, &(0x7f00000001c0)={0x7, 0x2}, 0x8, 0x10, 0x0, 0x0, r9, r0, 0x1, &(0x7f0000000600)=[r11, r12, 0xffffffffffffffff, r13, 0xffffffffffffffff, r14, 0x1, r15, r17, 0xffffffffffffffff], &(0x7f0000000640)=[{0x5, 0x1, 0x9, 0xc}], 0x10, 0x1, @void, @value}, 0x94) 51.300927ms ago: executing program 0 (id=11501): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000040)={0x0, [[0x9ef8, 0x5], [0x12000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x562], [0x7fff]], '\x00', [{}, {}, {}, {0x0, 0x401, 0x0, 0x1, 0x1}, {0x0, 0x6}, {0x8000000, 0xfffffffe}, {}, {0x0, 0x8}, {}, {}, {0x0, 0x2}], '\x00', 0x1000}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, 0x0, 0x1, {}, 0xff}, 0x18) sendmsg$can_j1939(r1, &(0x7f0000000140)={&(0x7f0000000180)={0x1d, 0x0, 0x0, {0x2, 0xfe, 0x1}, 0xff}, 0x18, &(0x7f0000000080)={0x0}, 0x4}, 0x8000) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0500000000000109022400010000000009040001090300000009210000000122220009058103"], 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000000180)=0x5, 0x4) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000f7b0bae78099bf4f654b00000000000000009500000000030000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getrusage(0x0, &(0x7f00000006c0)) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MTU={0x8, 0x4, 0x3ff}]}, 0x48}}, 0x0) 534.429µs ago: executing program 8 (id=11502): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x80000, 0xfffffffd}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400e7ff1900010000000000000000000a00000000000000000000000800100000004000"], 0x24}}, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_DELETE(r2, &(0x7f0000000400)=ANY=[@ANYBLOB="2d000000ccbd28656e8da6be94ea060000000000000000e5cc13a1e561f4879e87d90f000000040000000000c8161e935dbf792e7b5a624ee41700000000000000000004"], 0x2d) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) prlimit64(r3, 0x5, &(0x7f0000000340)={0x1, 0x2}, 0x0) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000380)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8800000000010104000000000000000002000000240001801400018008000100ac1e000108000200e00000010c0002800500010000000000240002800c000280050001000000008414000180080001000000000008000200e0000002080007400000000008000840000000001c0018800800024000000000080001"], 0x88}}, 0x0) r7 = dup(r5) write$P9_RLERRORu(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB="5300000007000046009ce6e7e68cce73c582dc6dfdbca736b02715df74ff5409f0233ef78972b95b029b351cb4dbad", @ANYRESOCT=r5], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB='\x00'/11, @ANYRESHEX=r7, @ANYBLOB=',k']) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="eb000000000000000000"], 0xa) write$cgroup_devices(r9, &(0x7f00000058c0)=ANY=[@ANYBLOB='a'], 0x9) 0s ago: executing program 6 (id=11503): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r3, &(0x7f0000000180)={'b', ' *:* ', 'wm\x00'}, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) splice(r2, 0x0, r5, 0x0, 0x8, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)=0x20000) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = getpid() r8 = syz_pidfd_open(r7, 0x0) process_madvise(r8, 0x0, 0x0, 0xa, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x20001439) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0x4004743d, 0x2000000b) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) close(r6) r10 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r10, 0x65, 0x1, &(0x7f0000000080), &(0x7f0000002cc0)=0xffffffffffffff99) r11 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r11, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) setsockopt$inet6_IPV6_DSTOPTS(r11, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000024000000040000000200000000000000", @ANYRES32, @ANYBLOB="00000000005f7d00000000000000000000000000ce8586f57896638108", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r13 = syz_open_dev$vcsu(&(0x7f0000001340), 0x1ff, 0x0) lseek(r13, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r12, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r14, &(0x7f00000007c0)}, 0x20) kernel console output (not intermixed with test programs): cb4c0090 R08: 0000000000000000 R09: 0000000000000000 [ 3425.762553][T13111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3425.770550][T13111] R13: 0000000000000000 R14: 00007f3dca935f80 R15: 00007fff951cafe8 [ 3425.778570][T13111] [ 3425.781653][ C1] vkms_vblank_simulate: vblank timer overrun [ 3425.817586][T19760] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3425.843599][T19760] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3425.895862][T19760] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3425.916428][T19760] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=3 [ 3425.956912][T19760] usb 7-1: Manufacturer: syz [ 3425.965317][T19760] usb 7-1: SerialNumber: syz [ 3425.983967][T13124] netlink: 132 bytes leftover after parsing attributes in process `syz.0.10916'. [ 3426.174741][T13129] netlink: 'syz.0.10918': attribute type 3 has an invalid length. [ 3426.746528][T28809] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 3426.911569][T28809] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 3426.923416][T28809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3426.996848][T28809] usb 5-1: Product: syz [ 3427.001088][T28809] usb 5-1: Manufacturer: syz [ 3427.005707][T28809] usb 5-1: SerialNumber: syz [ 3427.048463][T28809] usb 5-1: config 0 descriptor?? [ 3427.141070][T13144] ip6gretap0: entered promiscuous mode [ 3427.207070][T13144] ip6gretap0: left promiscuous mode [ 3427.288241][T28809] usb 5-1: USB disconnect, device number 47 [ 3427.607027][T19760] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 3427.651964][T19760] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 3427.673227][T19760] usb 7-1: USB disconnect, device number 59 [ 3427.829712][T13153] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.10924'. [ 3427.839580][T13153] openvswitch: netlink: Tunnel attr 245 out of range max 16 [ 3427.926805][T13157] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 3428.086465][ T6769] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 3428.115424][T13160] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 3428.125779][T13159] IPVS: stopping backup sync thread 13160 ... [ 3428.267394][ T6769] usb 2-1: Using ep0 maxpacket: 16 [ 3428.288167][ T6769] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3428.310017][ T6769] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3428.356573][ T6769] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3428.401752][ T6769] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3428.411559][T13167] sg_write: process 283 (syz.6.10928) changed security contexts after opening file descriptor, this is not allowed. [ 3428.425589][ T6769] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3428.442137][ T6769] usb 2-1: config 0 descriptor?? [ 3428.445843][T13167] program syz.6.10928 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3428.666601][T13156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3428.688097][T13156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3429.160646][ T29] kauditd_printk_skb: 59 callbacks suppressed [ 3429.160665][ T29] audit: type=1326 audit(1731851074.006:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13182 comm="syz.6.10933" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43ccf7e719 code=0x7ffb0000 [ 3429.337273][T13185] sg_write: data in/out 209/8 bytes for SCSI command 0xff-- guessing data in; [ 3429.337273][T13185] program syz.1.10925 not setting count and/or reply_len properly [ 3430.878140][T13197] netlink: 'syz.8.10935': attribute type 1 has an invalid length. [ 3430.903390][T13197] netlink: 9384 bytes leftover after parsing attributes in process `syz.8.10935'. [ 3430.927397][ T6769] usbhid 2-1:0.0: can't add hid device: -71 [ 3430.936605][ T6769] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 3430.948505][T13200] netlink: 'syz.1.10939': attribute type 3 has an invalid length. [ 3430.963569][ T6769] usb 2-1: USB disconnect, device number 95 [ 3430.976677][T31127] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 3431.126874][T31127] usb 5-1: Using ep0 maxpacket: 32 [ 3431.160068][T31127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 3431.187114][T31127] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 3431.233761][T31127] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 3431.317024][T31127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3431.357109][T13209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10941'. [ 3431.363890][T31127] usb 5-1: config 0 descriptor?? [ 3431.412718][T13209] 9pnet_fd: Insufficient options for proto=fd [ 3431.425460][T13192] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 3431.810161][T31127] hub 5-1:0.0: USB hub found [ 3431.836948][T31127] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 3431.855626][T13213] usb usb8: usbfs: process 13213 (syz.0.10943) did not claim interface 0 before use [ 3432.001431][T13215] FAULT_INJECTION: forcing a failure. [ 3432.001431][T13215] name failslab, interval 1, probability 0, space 0, times 0 [ 3432.026858][T13215] CPU: 0 UID: 0 PID: 13215 Comm: syz.0.10944 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 3432.037781][T13215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 3432.047878][T13215] Call Trace: [ 3432.051183][T13215] [ 3432.054138][T13215] dump_stack_lvl+0x241/0x360 [ 3432.058859][T13215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3432.064098][T13215] ? __pfx__printk+0x10/0x10 [ 3432.068731][T13215] ? fs_reclaim_acquire+0x93/0x130 [ 3432.073878][T13215] ? __pfx___might_resched+0x10/0x10 [ 3432.079200][T13215] should_fail_ex+0x3b0/0x4e0 [ 3432.083911][T13215] ? tomoyo_encode+0x26f/0x540 [ 3432.088713][T13215] should_failslab+0xac/0x100 [ 3432.093420][T13215] ? tomoyo_encode+0x26f/0x540 [ 3432.098217][T13215] __kmalloc_noprof+0xd8/0x400 [ 3432.103000][T13215] tomoyo_encode+0x26f/0x540 [ 3432.107609][T13215] tomoyo_realpath_from_path+0x59e/0x5e0 [ 3432.113258][T13215] tomoyo_path_number_perm+0x23a/0x880 [ 3432.118743][T13215] ? tomoyo_path_number_perm+0x208/0x880 [ 3432.124410][T13215] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3432.130424][T13215] ? __fget_files+0x29/0x470 [ 3432.135022][T13215] ? __fget_files+0x3f3/0x470 [ 3432.139734][T13215] security_file_ioctl+0xc6/0x2a0 [ 3432.144770][T13215] __se_sys_ioctl+0x47/0x170 [ 3432.149369][T13215] do_syscall_64+0xf3/0x230 [ 3432.153875][T13215] ? clear_bhb_loop+0x35/0x90 [ 3432.158559][T13215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3432.164454][T13215] RIP: 0033:0x7f6f9337e719 [ 3432.168872][T13215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3432.188482][T13215] RSP: 002b:00007f6f941dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3432.196913][T13215] RAX: ffffffffffffffda RBX: 00007f6f93535f80 RCX: 00007f6f9337e719 [ 3432.204885][T13215] RDX: 0000000000000005 RSI: 000000000000540a RDI: 0000000000000003 [ 3432.212854][T13215] RBP: 00007f6f941dd090 R08: 0000000000000000 R09: 0000000000000000 [ 3432.220826][T13215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3432.228813][T13215] R13: 0000000000000000 R14: 00007f6f93535f80 R15: 00007fff9c7876a8 [ 3432.236819][T13215] [ 3432.239861][ C0] vkms_vblank_simulate: vblank timer overrun [ 3432.240108][T18909] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 3432.255670][T13215] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3432.376635][T28809] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 3433.140256][T31127] hid-generic 0003:046D:C314.008D: item fetching failed at offset 0/1 [ 3433.149129][T31127] hid-generic 0003:046D:C314.008D: probe with driver hid-generic failed with error -22 [ 3433.193760][T18909] usb 9-1: Using ep0 maxpacket: 8 [ 3433.205317][T18909] usb 9-1: too many configurations: 180, using maximum allowed: 8 [ 3433.215308][T18909] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 3433.224021][T31127] usb 5-1: USB disconnect, device number 48 [ 3433.234983][T18909] usb 9-1: can't read configurations, error -61 [ 3433.316667][T28809] usb 2-1: device descriptor read/64, error -71 [ 3433.375069][ T29] audit: type=1326 audit(1731851078.216:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13227 comm="syz.6.10947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ccf7e719 code=0x7ffc0000 [ 3433.399302][T18909] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 3433.408964][ T29] audit: type=1326 audit(1731851078.216:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13227 comm="syz.6.10947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f43ccf7e719 code=0x7ffc0000 [ 3433.432631][ T29] audit: type=1326 audit(1731851078.226:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13227 comm="syz.6.10947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ccf7e719 code=0x7ffc0000 [ 3433.455345][ T29] audit: type=1326 audit(1731851078.226:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13227 comm="syz.6.10947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ccf7e719 code=0x7ffc0000 [ 3433.495342][ T29] audit: type=1326 audit(1731851078.226:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13227 comm="syz.6.10947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f43ccf7d1ff code=0x7ffc0000 [ 3433.525232][ T29] audit: type=1326 audit(1731851078.226:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13227 comm="syz.6.10947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ccf7e719 code=0x7ffc0000 [ 3433.547474][ T29] audit: type=1326 audit(1731851078.226:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13227 comm="syz.6.10947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ccf7e719 code=0x7ffc0000 [ 3433.576691][T28809] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 3433.626865][T18909] usb 9-1: Using ep0 maxpacket: 8 [ 3433.645739][T18909] usb 9-1: too many configurations: 180, using maximum allowed: 8 [ 3433.656636][T18909] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 3433.664256][T18909] usb 9-1: can't read configurations, error -61 [ 3433.681353][T18909] usb usb9-port1: attempt power cycle [ 3433.706440][T28809] usb 2-1: device descriptor read/64, error -71 [ 3433.996562][T28809] usb usb2-port1: attempt power cycle [ 3434.740375][T18909] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 3434.956515][T18909] usb 9-1: device not accepting address 12, error -71 [ 3435.016631][T28809] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 3435.139404][T13269] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10960'. [ 3435.257144][T28809] usb 2-1: device not accepting address 98, error -71 [ 3435.280056][T13275] PKCS8: Unsupported PKCS#8 version [ 3435.501598][ T29] audit: type=1800 audit(1731851080.346:1381): pid=13280 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.10963" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 3436.986394][ T29] audit: type=1804 audit(1731851081.806:1382): pid=13301 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.10969" name="/newroot/153/file0/bus" dev="ramfs" ino=196419 res=1 errno=0 [ 3437.076420][ T29] audit: type=1800 audit(1731851081.906:1383): pid=13301 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.10969" name="bus" dev="ramfs" ino=196419 res=0 errno=0 [ 3437.238866][T13311] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10973'. [ 3437.390578][T13322] ax25_connect(): syz.0.10977 uses autobind, please contact jreuter@yaina.de [ 3437.404080][T13323] PKCS8: Unsupported PKCS#8 version [ 3437.458821][T13322] random: crng reseeded on system resumption [ 3437.486646][T28809] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 3437.546436][T13327] netlink: 'syz.0.10977': attribute type 10 has an invalid length. [ 3437.572044][T13327] mac80211_hwsim hwsim80 wlan1: entered promiscuous mode [ 3437.580596][T13327] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 3437.638266][T28809] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 3437.648257][T28809] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3437.670345][T28809] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 3437.694107][T28809] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 3437.721924][T28809] usb 5-1: Manufacturer: syz [ 3437.743299][T28809] usb 5-1: config 0 descriptor?? [ 3437.866551][T28809] rc_core: IR keymap rc-hauppauge not found [ 3437.877834][T28809] Registered IR keymap rc-empty [ 3437.888731][T28809] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 3437.913713][T28809] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input253 [ 3437.973359][T19760] usb 5-1: USB disconnect, device number 49 [ 3438.191505][T13344] netlink: 156 bytes leftover after parsing attributes in process `syz.6.10984'. [ 3438.256572][T28809] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 3438.436970][T28809] usb 2-1: Using ep0 maxpacket: 16 [ 3438.464263][T28809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3438.592995][T28809] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3438.762003][T28809] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3438.998686][T28809] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3439.058022][T28809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3439.131992][T28809] usb 2-1: config 0 descriptor?? [ 3439.202679][T13355] siw: device registration error -23 [ 3439.312799][T13361] PKCS8: Unsupported PKCS#8 version [ 3439.583502][T13329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3439.711810][T13329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3440.518063][T13373] netlink: 9 bytes leftover after parsing attributes in process `syz.6.10991'. [ 3440.539322][T13374] netlink: 4 bytes leftover after parsing attributes in process `syz.8.10990'. [ 3440.736709][T18909] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 3440.869095][T13373] gretap0: entered promiscuous mode [ 3440.916617][T18909] usb 5-1: Using ep0 maxpacket: 32 [ 3440.932415][T18909] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 3440.958330][T18909] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 3440.975054][T18909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3440.993771][T18909] usb 5-1: Product: syz [ 3441.001092][T13382] sg_write: data in/out 209/8 bytes for SCSI command 0xff-- guessing data in; [ 3441.001092][T13382] program syz.1.10979 not setting count and/or reply_len properly [ 3441.044422][T18909] usb 5-1: Manufacturer: syz [ 3441.079922][T18909] usb 5-1: SerialNumber: syz [ 3441.110900][T18909] usb 5-1: config 0 descriptor?? [ 3441.117095][T13370] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 3441.133849][T18909] hub 5-1:0.0: bad descriptor, ignoring hub [ 3441.141666][T18909] hub 5-1:0.0: probe with driver hub failed with error -5 [ 3441.153033][T18909] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input254 [ 3441.323169][T13395] overlay: Unknown parameter 'dont_hash' [ 3441.364558][T18909] usb 5-1: USB disconnect, device number 50 [ 3441.370826][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 3441.398814][T13396] netlink: 2052 bytes leftover after parsing attributes in process `syz.0.10997'. [ 3441.486798][T13396] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 3441.500319][T13395] netlink: 'syz.6.10998': attribute type 49 has an invalid length. [ 3442.384174][T28809] usbhid 2-1:0.0: can't add hid device: -71 [ 3442.390389][T28809] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 3442.408470][T28809] usb 2-1: USB disconnect, device number 100 [ 3442.445559][T23170] Bluetooth: hci2: unexpected event for opcode 0x0c24 [ 3442.626045][T13428] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11007'. [ 3442.685367][T13428] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11007'. [ 3442.927706][T28809] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 3443.087620][T28809] usb 2-1: Using ep0 maxpacket: 8 [ 3443.107554][T28809] usb 2-1: New USB device found, idVendor=10d2, idProduct=2865, bcdDevice=a4.c9 [ 3443.214043][T28809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3443.257658][T28809] usb 2-1: config 0 descriptor?? [ 3443.298611][T28809] usblcd 2-1:0.0: USBLCD model not supported. [ 3443.370156][T13432] FAULT_INJECTION: forcing a failure. [ 3443.370156][T13432] name failslab, interval 1, probability 0, space 0, times 0 [ 3443.383366][T13432] CPU: 0 UID: 0 PID: 13432 Comm: syz.0.11009 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 3443.394256][T13432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 3443.404351][T13432] Call Trace: [ 3443.407663][T13432] [ 3443.410622][T13432] dump_stack_lvl+0x241/0x360 [ 3443.415334][T13432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3443.420560][T13432] ? __pfx__printk+0x10/0x10 [ 3443.425177][T13432] ? fs_reclaim_acquire+0x93/0x130 [ 3443.430319][T13432] ? __pfx___might_resched+0x10/0x10 [ 3443.435639][T13432] should_fail_ex+0x3b0/0x4e0 [ 3443.440344][T13432] ? p9_client_prepare_req+0x583/0xf50 [ 3443.445832][T13432] should_failslab+0xac/0x100 [ 3443.450532][T13432] ? p9_client_prepare_req+0x583/0xf50 [ 3443.456015][T13432] __kmalloc_noprof+0xd8/0x400 [ 3443.460829][T13432] p9_client_prepare_req+0x583/0xf50 [ 3443.466155][T13432] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 3443.471987][T13432] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 3443.478008][T13432] p9_client_rpc+0x19d/0xac0 [ 3443.482624][T13432] ? __pfx_call_rcu+0x10/0x10 [ 3443.487326][T13432] ? __pfx_p9_client_rpc+0x10/0x10 [ 3443.492467][T13432] ? p9_client_walk+0x42c/0x690 [ 3443.497334][T13432] ? rcu_is_watching+0x15/0xb0 [ 3443.502113][T13432] ? p9_client_walk+0x42c/0x690 [ 3443.506981][T13432] ? kfree+0x4e/0x440 [ 3443.510978][T13432] ? p9_client_walk+0x545/0x690 [ 3443.515850][T13432] p9_client_open+0x1c7/0x440 [ 3443.520550][T13432] ? __pfx_p9_client_open+0x10/0x10 [ 3443.525770][T13432] ? smack_file_open+0x233/0x2b0 [ 3443.530738][T13432] v9fs_file_open+0x3b1/0xa60 [ 3443.535452][T13432] ? __pfx_v9fs_file_open+0x10/0x10 [ 3443.540678][T13432] ? bpf_lsm_file_open+0x9/0x10 [ 3443.545549][T13432] ? security_file_open+0x509/0x990 [ 3443.550773][T13432] ? __pfx_v9fs_file_open+0x10/0x10 [ 3443.556000][T13432] do_dentry_open+0x978/0x1460 [ 3443.560803][T13432] vfs_open+0x3e/0x330 [ 3443.564905][T13432] path_openat+0x2c84/0x3590 [ 3443.569523][T13432] ? __lock_acquire+0x1384/0x2050 [ 3443.574590][T13432] ? __pfx_path_openat+0x10/0x10 [ 3443.579567][T13432] do_filp_open+0x235/0x490 [ 3443.584094][T13432] ? __pfx_do_filp_open+0x10/0x10 [ 3443.589169][T13432] ? _raw_spin_unlock+0x28/0x50 [ 3443.594048][T13432] ? alloc_fd+0x5a1/0x640 [ 3443.598416][T13432] do_sys_openat2+0x13e/0x1d0 [ 3443.603115][T13432] ? __pfx_do_sys_openat2+0x10/0x10 [ 3443.608347][T13432] __x64_sys_open+0x225/0x270 [ 3443.613046][T13432] ? __pfx___x64_sys_open+0x10/0x10 [ 3443.618256][T13432] ? do_syscall_64+0x100/0x230 [ 3443.623017][T13432] ? do_syscall_64+0xb6/0x230 [ 3443.627687][T13432] do_syscall_64+0xf3/0x230 [ 3443.632187][T13432] ? clear_bhb_loop+0x35/0x90 [ 3443.636873][T13432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3443.642798][T13432] RIP: 0033:0x7f6f9337e719 [ 3443.647232][T13432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3443.666869][T13432] RSP: 002b:00007f6f941dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 3443.675332][T13432] RAX: ffffffffffffffda RBX: 00007f6f93535f80 RCX: 00007f6f9337e719 [ 3443.683335][T13432] RDX: 0000000000000040 RSI: 0000000000082c02 RDI: 0000000020000140 [ 3443.691512][T13432] RBP: 00007f6f941dd090 R08: 0000000000000000 R09: 0000000000000000 [ 3443.699520][T13432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3443.707514][T13432] R13: 0000000000000000 R14: 00007f6f93535f80 R15: 00007fff9c7876a8 [ 3443.715535][T13432] [ 3443.718686][ C0] vkms_vblank_simulate: vblank timer overrun [ 3444.996979][T19760] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 3445.289699][T19760] usb 5-1: Using ep0 maxpacket: 16 [ 3445.354908][T19760] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3445.369424][T19760] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3445.384956][T19760] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3445.401082][T19760] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3445.483817][T19760] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3445.533167][T19760] usb 5-1: config 0 descriptor?? [ 3445.607260][T29439] usb 2-1: USB disconnect, device number 101 [ 3445.694063][T13463] nvme_fabrics: unknown parameter or missing value 'õ' in ctrl creation request [ 3445.834698][T13456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3445.843513][T13456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3446.446642][T23170] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 3447.555301][T13485] netlink: 'syz.1.11025': attribute type 6 has an invalid length. [ 3447.563338][T13485] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11025'. [ 3447.576005][T13485] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11025'. [ 3447.596068][T13482] sg_write: data in/out 209/8 bytes for SCSI command 0xff-- guessing data in; [ 3447.596068][T13482] program syz.4.11016 not setting count and/or reply_len properly [ 3447.634116][T13485] netlink: 'syz.1.11025': attribute type 6 has an invalid length. [ 3447.656598][T13485] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11025'. [ 3447.860179][T13494] mkiss: ax0: crc mode is auto. [ 3447.956726][T13496] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 3447.966762][T13496] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 3447.979551][T13496] overlayfs: failed to set uuid (115/file1, err=-13); falling back to uuid=null. [ 3448.927570][T13514] PKCS8: Unsupported PKCS#8 version [ 3448.956462][T19760] usbhid 5-1:0.0: can't add hid device: -71 [ 3448.963954][T19760] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 3448.991737][T19760] usb 5-1: USB disconnect, device number 51 [ 3449.197509][T13521] binder: 13518:13521 ioctl 400c620e 0 returned -14 [ 3449.444976][T13523] tipc: Enabling of bearer rejected, failed to enable media [ 3449.621515][T13523] loop9: detected capacity change from 0 to 7 [ 3449.703572][T13523] Dev loop9: unable to read RDB block 7 [ 3449.750866][T13523] loop9: AHDI p2 p3 [ 3449.768535][T13523] loop9: partition table partially beyond EOD, truncated [ 3449.797534][T13528] netlink: 'syz.6.11037': attribute type 1 has an invalid length. [ 3449.842819][T13529] hsr0: entered allmulticast mode [ 3449.848123][T13529] hsr_slave_0: entered allmulticast mode [ 3449.853834][T13529] hsr_slave_1: entered allmulticast mode [ 3449.873705][T13529] hsr_slave_0: left promiscuous mode [ 3450.066988][T13529] hsr_slave_1: left promiscuous mode [ 3450.210805][T13529] hsr0 (unregistering): left allmulticast mode [ 3450.276475][T13542] tipc: Started in network mode [ 3450.308012][T13542] tipc: Node identity 8606956a00f8, cluster identity 4711 [ 3450.325052][T13542] tipc: Enabled bearer , priority 0 [ 3450.392373][T13542] tipc: Resetting bearer [ 3450.403509][T13544] xt_socket: unknown flags 0x4 [ 3450.496924][ T5888] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 3451.239642][T13554] PKCS8: Unsupported PKCS#8 version [ 3451.342367][T13534] tipc: Resetting bearer [ 3451.546467][T28822] tipc: Node number set to 2264831338 [ 3451.574995][ C0] vkms_vblank_simulate: vblank timer overrun [ 3452.375504][ C0] vkms_vblank_simulate: vblank timer overrun [ 3452.544179][ C0] vkms_vblank_simulate: vblank timer overrun [ 3452.593775][ C0] vkms_vblank_simulate: vblank timer overrun [ 3452.641953][ C0] vkms_vblank_simulate: vblank timer overrun [ 3452.709226][ C0] vkms_vblank_simulate: vblank timer overrun [ 3453.768351][T13566] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 3453.977666][ C0] vkms_vblank_simulate: vblank timer overrun [ 3454.095059][ C0] vkms_vblank_simulate: vblank timer overrun [ 3454.178276][ C0] vkms_vblank_simulate: vblank timer overrun [ 3454.210050][ C0] vkms_vblank_simulate: vblank timer overrun [ 3454.279920][ C0] vkms_vblank_simulate: vblank timer overrun [ 3454.311125][ C0] vkms_vblank_simulate: vblank timer overrun [ 3454.375400][ C0] vkms_vblank_simulate: vblank timer overrun [ 3455.726837][ T5888] usb 5-1: device descriptor read/64, error -110 [ 3456.006466][ T5888] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 3457.185880][T13534] tipc: Disabling bearer [ 3457.256501][ T5888] usb 5-1: device descriptor read/64, error -32 [ 3457.376850][ T5888] usb usb5-port1: attempt power cycle [ 3457.425390][T13598] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11055'. [ 3457.524286][T13599] FAULT_INJECTION: forcing a failure. [ 3457.524286][T13599] name failslab, interval 1, probability 0, space 0, times 0 [ 3457.562792][T13599] CPU: 1 UID: 0 PID: 13599 Comm: syz.0.11056 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 3457.573713][T13599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 3457.583800][T13599] Call Trace: [ 3457.587114][T13599] [ 3457.590066][T13599] dump_stack_lvl+0x241/0x360 [ 3457.594778][T13599] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3457.600009][T13599] ? __pfx__printk+0x10/0x10 [ 3457.604628][T13599] ? fs_reclaim_acquire+0x93/0x130 [ 3457.609768][T13599] ? __pfx___might_resched+0x10/0x10 [ 3457.615093][T13599] should_fail_ex+0x3b0/0x4e0 [ 3457.619796][T13599] ? tomoyo_encode+0x26f/0x540 [ 3457.624591][T13599] should_failslab+0xac/0x100 [ 3457.629298][T13599] ? tomoyo_encode+0x26f/0x540 [ 3457.634089][T13599] __kmalloc_noprof+0xd8/0x400 [ 3457.638895][T13599] tomoyo_encode+0x26f/0x540 [ 3457.643519][T13599] tomoyo_realpath_from_path+0x59e/0x5e0 [ 3457.649179][T13599] tomoyo_path_number_perm+0x23a/0x880 [ 3457.654649][T13599] ? tomoyo_path_number_perm+0x208/0x880 [ 3457.660288][T13599] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3457.666309][T13599] ? __fget_files+0x29/0x470 [ 3457.670917][T13599] ? __fget_files+0x3f3/0x470 [ 3457.675609][T13599] security_file_ioctl+0xc6/0x2a0 [ 3457.680646][T13599] __se_sys_ioctl+0x47/0x170 [ 3457.685237][T13599] do_syscall_64+0xf3/0x230 [ 3457.689753][T13599] ? clear_bhb_loop+0x35/0x90 [ 3457.694433][T13599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3457.700328][T13599] RIP: 0033:0x7f6f9337e719 [ 3457.704742][T13599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3457.724349][T13599] RSP: 002b:00007f6f941dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3457.732772][T13599] RAX: ffffffffffffffda RBX: 00007f6f93535f80 RCX: 00007f6f9337e719 [ 3457.740746][T13599] RDX: 0000000000000000 RSI: 0000000080045520 RDI: 0000000000000003 [ 3457.748716][T13599] RBP: 00007f6f941dd090 R08: 0000000000000000 R09: 0000000000000000 [ 3457.756686][T13599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3457.764653][T13599] R13: 0000000000000000 R14: 00007f6f93535f80 R15: 00007fff9c7876a8 [ 3457.772638][T13599] [ 3457.837150][T13599] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3457.846529][ T5888] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 3457.889916][ T5888] usb 5-1: device descriptor read/8, error -32 [ 3458.016566][ T5888] raw-gadget.0 gadget.4: failed to queue suspend event [ 3458.039213][ T5888] raw-gadget.0 gadget.4: failed to queue reset event [ 3458.146600][ T5888] raw-gadget.0 gadget.4: failed to queue resume event [ 3458.262141][ T5888] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 3458.486652][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 3458.493819][ T5888] usb 5-1: device descriptor read/8, error -32 [ 3458.563483][T13614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11060'. [ 3458.735708][ T5888] raw-gadget.0 gadget.4: failed to queue suspend event [ 3458.994215][ T5888] usb usb5-port1: unable to enumerate USB device [ 3461.858251][T13538] raw-gadget.0 gadget.4: failed to queue disconnect event [ 3461.898195][T13638] netlink: 'syz.6.11064': attribute type 1 has an invalid length. [ 3461.906364][T13638] netlink: 9388 bytes leftover after parsing attributes in process `syz.6.11064'. [ 3461.948544][T13638] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11064'. [ 3461.957568][T28822] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 3462.110222][T28822] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3462.119299][T13649] FAULT_INJECTION: forcing a failure. [ 3462.119299][T13649] name failslab, interval 1, probability 0, space 0, times 0 [ 3462.130732][T28822] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3462.166820][T13625] vlan3: entered allmulticast mode [ 3462.172319][T13625] mac80211_hwsim hwsim80 wlan1: entered allmulticast mode [ 3462.176374][T13649] CPU: 1 UID: 0 PID: 13649 Comm: syz.4.11069 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 3462.190307][T13649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 3462.190460][T28822] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3462.200362][T13649] Call Trace: [ 3462.200376][T13649] [ 3462.200387][T13649] dump_stack_lvl+0x241/0x360 [ 3462.200417][T13649] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3462.200440][T13649] ? __pfx__printk+0x10/0x10 [ 3462.200465][T13649] ? __kmalloc_noprof+0xb0/0x400 [ 3462.200485][T13649] ? __pfx___might_resched+0x10/0x10 [ 3462.200513][T13649] should_fail_ex+0x3b0/0x4e0 [ 3462.200536][T13649] ? bpf_test_init+0xe1/0x180 [ 3462.200556][T13649] should_failslab+0xac/0x100 [ 3462.200576][T13649] ? bpf_test_init+0xe1/0x180 [ 3462.200594][T13649] __kmalloc_noprof+0xd8/0x400 [ 3462.200616][T13649] bpf_test_init+0xe1/0x180 [ 3462.200638][T13649] bpf_prog_test_run_skb+0x2bb/0x1820 [ 3462.200658][T13649] ? __pfx_lock_release+0x10/0x10 [ 3462.200701][T13649] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 3462.200728][T13649] ? fput+0x1a8/0x230 [ 3462.200746][T13649] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 3462.200769][T13649] bpf_prog_test_run+0x2e4/0x360 [ 3462.200806][T13649] __sys_bpf+0x48d/0x810 [ 3462.200832][T13649] ? __pfx___sys_bpf+0x10/0x10 [ 3462.200865][T13649] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 3462.200893][T13649] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3462.200922][T13649] ? do_syscall_64+0x100/0x230 [ 3462.200949][T13649] __x64_sys_bpf+0x7c/0x90 [ 3462.200971][T13649] do_syscall_64+0xf3/0x230 [ 3462.200995][T13649] ? clear_bhb_loop+0x35/0x90 [ 3462.201021][T13649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3462.201042][T13649] RIP: 0033:0x7f3dca77e719 [ 3462.349403][T13649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3462.369017][T13649] RSP: 002b:00007f3dcb4c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3462.377439][T13649] RAX: ffffffffffffffda RBX: 00007f3dca935f80 RCX: 00007f3dca77e719 [ 3462.385413][T13649] RDX: 000000000000002c RSI: 0000000020000080 RDI: 000000000000000a [ 3462.393400][T13649] RBP: 00007f3dcb4c0090 R08: 0000000000000000 R09: 0000000000000000 [ 3462.401716][T13649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3462.409690][T13649] R13: 0000000000000000 R14: 00007f3dca935f80 R15: 00007fff951cafe8 [ 3462.417673][T13649] [ 3462.421188][T28822] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3462.429298][T28822] usb 9-1: Product: syz [ 3462.433682][T28822] usb 9-1: Manufacturer: syz [ 3462.447138][T13625] mac80211_hwsim hwsim80 wlan1: left allmulticast mode [ 3462.447480][T28822] usb 9-1: SerialNumber: syz [ 3462.463816][T28822] cdc_mbim 9-1:1.0: MBIM functional descriptor missing [ 3462.515735][T28822] cdc_mbim 9-1:1.0: bind() failure [ 3462.743783][T13661] usb 9-1: USB disconnect, device number 14 [ 3462.776674][ T6769] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 3463.090754][ T6769] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 3463.152785][ T6769] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3463.307507][ T6769] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3463.427619][ T6769] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3463.444434][ T6769] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3463.475883][ T6769] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 3463.483681][ T6769] usb 7-1: invalid MIDI out EP 0 [ 3463.566062][ T6769] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 3463.633478][T13674] FAULT_INJECTION: forcing a failure. [ 3463.633478][T13674] name failslab, interval 1, probability 0, space 0, times 0 [ 3463.664960][T13674] CPU: 1 UID: 0 PID: 13674 Comm: syz.0.11077 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 3463.675874][T13674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 3463.685957][T13674] Call Trace: [ 3463.689261][T13674] [ 3463.692210][T13674] dump_stack_lvl+0x241/0x360 [ 3463.696925][T13674] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3463.702157][T13674] ? __pfx__printk+0x10/0x10 [ 3463.706782][T13674] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 3463.712272][T13674] ? __pfx___might_resched+0x10/0x10 [ 3463.717592][T13674] should_fail_ex+0x3b0/0x4e0 [ 3463.722303][T13674] should_failslab+0xac/0x100 [ 3463.727005][T13674] ? madvise_collapse+0x208/0xd30 [ 3463.732066][T13674] __kmalloc_cache_noprof+0x6c/0x2c0 [ 3463.737400][T13674] madvise_collapse+0x208/0xd30 [ 3463.742808][T13674] ? find_vma_prev+0x1a1/0x270 [ 3463.747611][T13674] ? __pfx_madvise_collapse+0x10/0x10 [ 3463.753032][T13674] do_madvise+0xce7/0x4700 [ 3463.757507][T13674] ? __pfx_do_madvise+0x10/0x10 [ 3463.762388][T13674] ? get_pid_task+0x23/0x1f0 [ 3463.767005][T13674] ? __pfx_lock_release+0x10/0x10 [ 3463.772058][T13674] ? kstrtouint_from_user+0x128/0x190 [ 3463.777484][T13674] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 3463.783427][T13674] ? ksys_write+0x229/0x2b0 [ 3463.787952][T13674] ? __pfx_lock_release+0x10/0x10 [ 3463.793016][T13674] ? vfs_write+0x730/0xd30 [ 3463.797468][T13674] ? __mutex_unlock_slowpath+0x21d/0x750 [ 3463.803142][T13674] ? __pfx_vfs_write+0x10/0x10 [ 3463.807936][T13674] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3463.813950][T13674] ? __fget_files+0x3f3/0x470 [ 3463.818682][T13674] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3463.825036][T13674] ? do_syscall_64+0x100/0x230 [ 3463.829832][T13674] __x64_sys_madvise+0xa6/0xc0 [ 3463.834628][T13674] do_syscall_64+0xf3/0x230 [ 3463.839166][T13674] ? clear_bhb_loop+0x35/0x90 [ 3463.843873][T13674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3463.849794][T13674] RIP: 0033:0x7f6f9337e719 [ 3463.854229][T13674] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3463.873867][T13674] RSP: 002b:00007f6f941bc038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 3463.882319][T13674] RAX: ffffffffffffffda RBX: 00007f6f93536058 RCX: 00007f6f9337e719 [ 3463.890324][T13674] RDX: 0000000000000019 RSI: 0000000000600707 RDI: 0000000020000000 [ 3463.898336][T13674] RBP: 00007f6f941bc090 R08: 0000000000000000 R09: 0000000000000000 [ 3463.906334][T13674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3463.914333][T13674] R13: 0000000000000000 R14: 00007f6f93536058 R15: 00007fff9c7876a8 [ 3463.922344][T13674] [ 3465.305147][T13707] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11086'. [ 3465.342620][T13707] 9pnet_fd: Insufficient options for proto=fd [ 3465.938014][T13717] xt_TCPMSS: Only works on TCP SYN packets [ 3467.880331][ T5888] usb 7-1: USB disconnect, device number 60 [ 3469.622068][T13754] vlan1: entered promiscuous mode [ 3469.724670][T13754] input input257: cannot allocate more than FF_MAX_EFFECTS effects [ 3470.037715][T13750] vlan1: left promiscuous mode [ 3470.316402][T13762] FAULT_INJECTION: forcing a failure. [ 3470.316402][T13762] name failslab, interval 1, probability 0, space 0, times 0 [ 3470.329226][T13762] CPU: 1 UID: 0 PID: 13762 Comm: syz.4.11099 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 3470.340100][T13762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 3470.350177][T13762] Call Trace: [ 3470.353470][T13762] [ 3470.356416][T13762] dump_stack_lvl+0x241/0x360 [ 3470.361128][T13762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3470.366350][T13762] ? __pfx__printk+0x10/0x10 [ 3470.370964][T13762] ? __kmalloc_node_track_caller_noprof+0xb2/0x440 [ 3470.377488][T13762] ? __pfx___might_resched+0x10/0x10 [ 3470.382795][T13762] should_fail_ex+0x3b0/0x4e0 [ 3470.387495][T13762] should_failslab+0xac/0x100 [ 3470.392198][T13762] __kmalloc_node_track_caller_noprof+0xda/0x440 [ 3470.398542][T13762] ? v9fs_session_init+0xb0/0x1b80 [ 3470.403668][T13762] ? legacy_get_tree+0xee/0x190 [ 3470.408538][T13762] ? vfs_get_tree+0x90/0x2b0 [ 3470.413152][T13762] kstrdup+0x3a/0x80 [ 3470.417067][T13762] v9fs_session_init+0xb0/0x1b80 [ 3470.422041][T13762] ? __pfx_v9fs_session_init+0x10/0x10 [ 3470.427524][T13762] ? __kasan_kmalloc+0x98/0xb0 [ 3470.432305][T13762] ? v9fs_mount+0xb2/0xa90 [ 3470.436738][T13762] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 3470.442306][T13762] v9fs_mount+0xd5/0xa90 [ 3470.446573][T13762] ? __kasan_kmalloc+0x98/0xb0 [ 3470.451354][T13762] ? __pfx_v9fs_mount+0x10/0x10 [ 3470.456220][T13762] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 3470.461783][T13762] ? legacy_init_fs_context+0x7e/0xc0 [ 3470.467183][T13762] legacy_get_tree+0xee/0x190 [ 3470.471879][T13762] ? __pfx_v9fs_mount+0x10/0x10 [ 3470.476755][T13762] vfs_get_tree+0x90/0x2b0 [ 3470.481191][T13762] do_new_mount+0x2be/0xb40 [ 3470.485717][T13762] ? __pfx_do_new_mount+0x10/0x10 [ 3470.490775][T13762] __se_sys_mount+0x2d6/0x3c0 [ 3470.495472][T13762] ? irqentry_exit+0x63/0x90 [ 3470.500086][T13762] ? __pfx___se_sys_mount+0x10/0x10 [ 3470.505308][T13762] ? __x64_sys_mount+0x20/0xc0 [ 3470.510093][T13762] do_syscall_64+0xf3/0x230 [ 3470.514612][T13762] ? clear_bhb_loop+0x35/0x90 [ 3470.519308][T13762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3470.525215][T13762] RIP: 0033:0x7f3dca77e719 [ 3470.529644][T13762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3470.549264][T13762] RSP: 002b:00007f3dc8bf6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3470.557697][T13762] RAX: ffffffffffffffda RBX: 00007f3dca936130 RCX: 00007f3dca77e719 [ 3470.565685][T13762] RDX: 0000000020000080 RSI: 0000000020000000 RDI: 0000000000000000 [ 3470.573674][T13762] RBP: 00007f3dc8bf6090 R08: 00000000200000c0 R09: 0000000000000000 [ 3470.581658][T13762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3470.589639][T13762] R13: 0000000000000000 R14: 00007f3dca936130 R15: 00007fff951cafe8 [ 3470.597648][T13762] [ 3472.518558][T13783] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11106'. [ 3475.540757][T13810] input input258: cannot allocate more than FF_MAX_EFFECTS effects [ 3477.122483][T13824] netlink: 'syz.1.11117': attribute type 1 has an invalid length. [ 3477.130466][T13824] netlink: 9384 bytes leftover after parsing attributes in process `syz.1.11117'. [ 3477.338881][T13837] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11119'. [ 3477.349967][T13837] nbd: must specify a size in bytes for the device [ 3477.434381][T13839] siw: device registration error -23 [ 3479.652247][T13859] openvswitch: netlink: Invalid VLAN frame [ 3480.072301][T13867] vlan1: entered promiscuous mode [ 3480.196496][T13867] input input259: cannot allocate more than FF_MAX_EFFECTS effects [ 3480.458378][T13863] vlan1: left promiscuous mode [ 3480.606872][T13859] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11125'. [ 3481.244886][T13890] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11133'. [ 3481.254406][T13890] nbd: must specify a size in bytes for the device [ 3481.609960][T13892] PKCS8: Unsupported PKCS#8 version [ 3483.835732][T13914] netlink: 12 bytes leftover after parsing attributes in process `syz.6.11141'. [ 3483.843114][T13913] netlink: 'syz.1.11140': attribute type 3 has an invalid length. [ 3484.339630][T13926] PKCS8: Unsupported PKCS#8 version [ 3486.228967][T13953] netlink: 144 bytes leftover after parsing attributes in process `syz.0.11153'. [ 3488.074051][T13973] Cannot find add_set index 2 as target [ 3489.308607][ T29] audit: type=1800 audit(1731851133.456:1384): pid=13982 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.11162" name="/" dev="fuse" ino=1 res=0 errno=0 [ 3489.837627][T13985] ALSA: mixer_oss: invalid OSS volume '' [ 3490.084119][T13989] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 3490.290738][T13995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11164'. [ 3490.300771][T13995] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11164'. [ 3490.527220][T29439] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 3490.556838][ T6769] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 3490.686597][T29439] usb 2-1: Using ep0 maxpacket: 16 [ 3490.693818][T29439] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 3490.702657][T29439] usb 2-1: config 0 has no interface number 0 [ 3490.711341][ T6769] usb 7-1: config 0 has an invalid interface number: 4 but max is 0 [ 3490.720426][T29439] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 3490.732034][ T6769] usb 7-1: config 0 has no interface number 0 [ 3490.739161][T29439] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 3490.749513][ T6769] usb 7-1: New USB device found, idVendor=0b3c, idProduct=c002, bcdDevice=21.34 [ 3490.759223][ T6769] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3490.771411][T29439] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 3490.781135][T29439] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 3490.790015][T29439] usb 2-1: Product: syz [ 3490.794962][ T6769] usb 7-1: config 0 descriptor?? [ 3490.800413][T29439] usb 2-1: SerialNumber: syz [ 3490.814637][T29439] usb 2-1: config 0 descriptor?? [ 3490.823192][T29439] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 3491.023161][T29439] usb 7-1: USB disconnect, device number 61 [ 3491.064629][ T6769] usb 2-1: USB disconnect, device number 102 [ 3491.152891][T14005] netlink: 'syz.8.11169': attribute type 4 has an invalid length. [ 3491.577756][T14012] overlayfs: missing 'workdir' [ 3492.230087][T14017] netlink: 'syz.6.11173': attribute type 32 has an invalid length. [ 3492.457982][T14024] FAULT_INJECTION: forcing a failure. [ 3492.457982][T14024] name failslab, interval 1, probability 0, space 0, times 0 [ 3492.471055][T14024] CPU: 0 UID: 0 PID: 14024 Comm: syz.0.11172 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 3492.481934][T14024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 3492.491985][T14024] Call Trace: [ 3492.495254][T14024] [ 3492.498197][T14024] dump_stack_lvl+0x241/0x360 [ 3492.502905][T14024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3492.508139][T14024] ? __wake_up_klogd+0xcc/0x110 [ 3492.513016][T14024] ? dump_stack+0x9/0x20 [ 3492.517298][T14024] should_fail_ex+0x3b0/0x4e0 [ 3492.521992][T14024] ? __kernfs_new_node+0xd8/0x870 [ 3492.527033][T14024] should_failslab+0xac/0x100 [ 3492.531733][T14024] ? __kernfs_new_node+0xd8/0x870 [ 3492.536785][T14024] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 3492.542184][T14024] __kernfs_new_node+0xd8/0x870 [ 3492.547065][T14024] ? up_write+0x1a9/0x590 [ 3492.551425][T14024] ? __pfx___kernfs_new_node+0x10/0x10 [ 3492.556909][T14024] ? __pfx_up_write+0x10/0x10 [ 3492.561586][T14024] kernfs_new_node+0x137/0x240 [ 3492.566366][T14024] __kernfs_create_file+0x49/0x2e0 [ 3492.571523][T14024] sysfs_add_file_mode_ns+0x24a/0x310 [ 3492.576931][T14024] sysfs_merge_group+0x1fd/0x450 [ 3492.581904][T14024] ? __pfx_sysfs_merge_group+0x10/0x10 [ 3492.587389][T14024] ? device_add_attrs+0x48c/0x600 [ 3492.592450][T14024] ? __pfx_device_add_attrs+0x10/0x10 [ 3492.597844][T14024] ? bus_add_device+0xde/0x460 [ 3492.602632][T14024] dpm_sysfs_add+0xd3/0x280 [ 3492.607159][T14024] device_add+0x5bc/0xbf0 [ 3492.611602][T14024] tty_register_device_attr+0x437/0x960 [ 3492.617174][T14024] ? __pfx_tty_register_device_attr+0x10/0x10 [ 3492.623269][T14024] ? tty_port_register_device+0x5b/0x100 [ 3492.628923][T14024] rfcomm_dev_ioctl+0x1a51/0x2220 [ 3492.633976][T14024] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 3492.639369][T14024] ? kfree+0x1a0/0x440 [ 3492.643466][T14024] ? tomoyo_path_number_perm+0x68d/0x880 [ 3492.649129][T14024] ? bt_sock_ioctl+0xe9/0x2c0 [ 3492.653832][T14024] sock_do_ioctl+0x158/0x460 [ 3492.658449][T14024] ? __pfx_smack_log+0x10/0x10 [ 3492.663234][T14024] ? __pfx_sock_do_ioctl+0x10/0x10 [ 3492.668370][T14024] ? smk_tskacc+0x300/0x370 [ 3492.672901][T14024] ? smack_file_ioctl+0x29e/0x3a0 [ 3492.677952][T14024] sock_ioctl+0x626/0x8e0 [ 3492.682302][T14024] ? __pfx_sock_ioctl+0x10/0x10 [ 3492.687176][T14024] ? __fget_files+0x3f3/0x470 [ 3492.691889][T14024] ? __pfx_sock_ioctl+0x10/0x10 [ 3492.696759][T14024] __se_sys_ioctl+0xf9/0x170 [ 3492.701370][T14024] do_syscall_64+0xf3/0x230 [ 3492.705897][T14024] ? clear_bhb_loop+0x35/0x90 [ 3492.710598][T14024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3492.716512][T14024] RIP: 0033:0x7f6f9337e719 [ 3492.720960][T14024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3492.740629][T14024] RSP: 002b:00007f6f941bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3492.749073][T14024] RAX: ffffffffffffffda RBX: 00007f6f93536058 RCX: 00007f6f9337e719 [ 3492.757070][T14024] RDX: 0000000020000100 RSI: 00000000400452c8 RDI: 0000000000000005 [ 3492.765049][T14024] RBP: 00007f6f941bc090 R08: 0000000000000000 R09: 0000000000000000 [ 3492.773014][T14024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3492.780980][T14024] R13: 0000000000000000 R14: 00007f6f93536058 R15: 00007fff9c7876a8 [ 3492.788967][T14024] [ 3492.792020][ C0] vkms_vblank_simulate: vblank timer overrun [ 3493.826600][T14033] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11175'. [ 3493.951562][T14033] 9pnet_fd: Insufficient options for proto=fd [ 3494.281675][T14041] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11179'. [ 3494.582128][T14041] macsec0: entered promiscuous mode [ 3494.617025][T14040] macsec0: left promiscuous mode [ 3494.914025][T14059] netlink: 'syz.6.11184': attribute type 9 has an invalid length. [ 3495.644976][T14059] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.11184'. [ 3497.151422][T14062] netlink: 'syz.6.11184': attribute type 9 has an invalid length. [ 3497.257102][T14062] netlink: 209836 bytes leftover after parsing attributes in process `syz.6.11184'. [ 3497.537842][T14077] FAULT_INJECTION: forcing a failure. [ 3497.537842][T14077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3497.551110][T14077] CPU: 0 UID: 0 PID: 14077 Comm: syz.4.11187 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 3497.561965][T14077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 3497.572020][T14077] Call Trace: [ 3497.575294][T14077] [ 3497.578224][T14077] dump_stack_lvl+0x241/0x360 [ 3497.582895][T14077] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3497.588097][T14077] ? __pfx__printk+0x10/0x10 [ 3497.592719][T14077] ? snprintf+0xda/0x120 [ 3497.596971][T14077] should_fail_ex+0x3b0/0x4e0 [ 3497.601649][T14077] _copy_to_user+0x31/0xb0 [ 3497.606066][T14077] simple_read_from_buffer+0xca/0x150 [ 3497.611441][T14077] proc_fail_nth_read+0x1e9/0x250 [ 3497.616470][T14077] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3497.622015][T14077] ? rw_verify_area+0x568/0x6f0 [ 3497.626867][T14077] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3497.632416][T14077] vfs_read+0x1fc/0xb70 [ 3497.636573][T14077] ? fdget_pos+0x24e/0x320 [ 3497.640989][T14077] ? __pfx_vfs_read+0x10/0x10 [ 3497.645662][T14077] ? __fget_files+0x3f3/0x470 [ 3497.650338][T14077] ? fdget_pos+0x24e/0x320 [ 3497.654755][T14077] ksys_read+0x183/0x2b0 [ 3497.659005][T14077] ? __pfx_ksys_read+0x10/0x10 [ 3497.663776][T14077] ? do_syscall_64+0x100/0x230 [ 3497.668545][T14077] ? do_syscall_64+0xb6/0x230 [ 3497.673238][T14077] do_syscall_64+0xf3/0x230 [ 3497.677778][T14077] ? clear_bhb_loop+0x35/0x90 [ 3497.682462][T14077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3497.688353][T14077] RIP: 0033:0x7f3dca77d15c [ 3497.692767][T14077] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 3497.712378][T14077] RSP: 002b:00007f3dcb4c0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3497.720795][T14077] RAX: ffffffffffffffda RBX: 00007f3dca935f80 RCX: 00007f3dca77d15c [ 3497.728765][T14077] RDX: 000000000000000f RSI: 00007f3dcb4c00a0 RDI: 0000000000000003 [ 3497.736742][T14077] RBP: 00007f3dcb4c0090 R08: 0000000000000000 R09: 0000000000000000 [ 3497.744711][T14077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3497.752678][T14077] R13: 0000000000000001 R14: 00007f3dca935f80 R15: 00007fff951cafe8 [ 3497.760661][T14077] [ 3497.763754][ C0] vkms_vblank_simulate: vblank timer overrun [ 3498.226684][ T5888] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 3498.386419][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 3498.407546][ T5888] usb 5-1: config 0 has no interfaces? [ 3498.413282][ T5888] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 3498.443301][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3498.498836][ T5888] usb 5-1: config 0 descriptor?? [ 3498.816669][T28809] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 3499.171237][T28809] usb 7-1: Using ep0 maxpacket: 32 [ 3499.186702][T28809] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3499.203161][T28809] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3499.233426][T28809] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3499.343064][T28809] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 3499.370093][T28809] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3499.413229][T28809] usb 7-1: config 1 interface 1 has no altsetting 0 [ 3499.433764][T28809] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3499.443727][T28809] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3499.462738][T28809] usb 7-1: Product: syz [ 3499.473967][T28809] usb 7-1: Manufacturer: syz [ 3499.488735][T28809] usb 7-1: SerialNumber: syz [ 3499.507587][T28809] cdc_ncm 7-1:1.0: NCM or ECM functional descriptors missing [ 3499.530044][T28809] cdc_ncm 7-1:1.0: bind() failure [ 3499.935175][T28822] usb 7-1: USB disconnect, device number 62 [ 3500.000436][T14113] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 3500.856512][T29439] usb 7-1: new full-speed USB device number 63 using dummy_hcd [ 3501.037708][T29439] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3501.083027][T29439] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 3501.119198][T29439] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 3501.153641][T29439] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3501.199437][T28822] usb 5-1: USB disconnect, device number 56 [ 3501.239180][T29439] usb 7-1: config 0 descriptor?? [ 3501.283933][T29439] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 3501.301333][T29439] dvb-usb: bulk message failed: -22 (3/0) [ 3501.368974][T29439] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 3501.417492][T29439] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 3501.450075][T29439] usb 7-1: media controller created [ 3501.487073][T29439] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3501.684159][T29439] dvb-usb: bulk message failed: -22 (6/0) [ 3501.693066][T29439] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 3501.702407][T29439] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input260 [ 3501.715497][T29439] dvb-usb: schedule remote query interval to 150 msecs. [ 3501.723729][T29439] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 3502.422850][T29439] dvb-usb: bulk message failed: -22 (1/0) [ 3502.428817][T29439] dvb-usb: error while querying for an remote control event. [ 3502.613603][T29439] dvb-usb: bulk message failed: -22 (1/0) [ 3502.619876][T29439] dvb-usb: error while querying for an remote control event. [ 3503.150033][T14141] infiniband syz0: set down [ 3503.155572][T14141] infiniband syz0: added bond0 [ 3503.192843][T28822] dvb-usb: bulk message failed: -22 (1/0) [ 3503.198803][T28822] dvb-usb: error while querying for an remote control event. [ 3503.484099][T14141] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 3503.491853][T14141] infiniband syz0: Couldn't open port 1 [ 3503.498432][T29439] dvb-usb: bulk message failed: -22 (1/0) [ 3503.512767][T29439] dvb-usb: error while querying for an remote control event. [ 3503.526124][T14141] RDS/IB: syz0: added [ 3503.530832][T14141] smc: adding ib device syz0 with port count 1 [ 3503.537230][T14141] smc: ib device syz0 port 1 has pnetid [ 3504.163800][T28822] dvb-usb: bulk message failed: -22 (1/0) [ 3504.178374][T28822] dvb-usb: error while querying for an remote control event. [ 3504.365109][T28822] dvb-usb: bulk message failed: -22 (1/0) [ 3504.371400][T28822] dvb-usb: error while querying for an remote control event. [ 3504.382196][T29439] usb 7-1: USB disconnect, device number 63 [ 3504.909340][T14150] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11209'. [ 3504.967542][T14150] bond_slave_0: entered promiscuous mode [ 3504.973246][T14150] bond_slave_1: entered promiscuous mode [ 3504.991810][T14150] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 3505.025002][T14153] 9pnet_fd: Insufficient options for proto=fd [ 3505.060213][T29439] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 3505.062895][T14150] bond_slave_0: left promiscuous mode [ 3505.074120][T14150] bond_slave_1: left promiscuous mode [ 3505.313025][T14163] input: syz0 as /devices/virtual/input/input261 [ 3507.565168][T14174] netlink: 76 bytes leftover after parsing attributes in process `syz.6.11217'. [ 3507.630528][T14174] Êü: entered promiscuous mode [ 3507.668921][T14178] netlink: 'syz.8.11218': attribute type 11 has an invalid length. [ 3507.687846][T14178] netlink: 60 bytes leftover after parsing attributes in process `syz.8.11218'. [ 3507.722569][T28835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3507.765524][T28835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3507.954452][T28835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3508.052489][T14194] netlink: 'syz.6.11220': attribute type 1 has an invalid length. [ 3508.064387][T14194] netlink: 9384 bytes leftover after parsing attributes in process `syz.6.11220'. [ 3508.759583][T28835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3508.797046][T28835] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 3508.804479][T28835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3509.514324][T14210] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11223'. [ 3509.535497][T14210] 9pnet_fd: Insufficient options for proto=fd [ 3509.973208][T14219] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11225'. [ 3510.016482][T14180] chnl_net:caif_netlink_parms(): no params data found [ 3510.572905][ C0] vkms_vblank_simulate: vblank timer overrun [ 3510.733852][T17793] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3510.990619][T23170] Bluetooth: hci5: command tx timeout [ 3511.025305][T14180] bridge0: port 1(bridge_slave_0) entered blocking state [ 3511.049881][T14180] bridge0: port 1(bridge_slave_0) entered disabled state [ 3511.070711][T14242] input input262: cannot allocate more than FF_MAX_EFFECTS effects [ 3511.124846][T14180] bridge_slave_0: entered allmulticast mode [ 3511.210912][T14180] bridge_slave_0: entered promiscuous mode [ 3511.564801][T14245] netlink: 'syz.1.11232': attribute type 1 has an invalid length. [ 3511.575604][T14245] netlink: 9384 bytes leftover after parsing attributes in process `syz.1.11232'. [ 3511.620559][T17793] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3511.886598][T14180] bridge0: port 2(bridge_slave_1) entered blocking state [ 3511.893988][T14180] bridge0: port 2(bridge_slave_1) entered disabled state [ 3511.902089][T14180] bridge_slave_1: entered allmulticast mode [ 3511.908907][T14180] bridge_slave_1: entered promiscuous mode [ 3512.310318][T17793] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3512.594051][T14180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3512.709437][T17793] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3512.777089][T14180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3512.930517][T14180] team0: Port device team_slave_0 added [ 3512.950085][T14180] team0: Port device team_slave_1 added [ 3513.086925][T23170] Bluetooth: hci5: command tx timeout [ 3513.172445][T14180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3513.180317][T14180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3513.206252][ C0] vkms_vblank_simulate: vblank timer overrun [ 3513.213791][T14180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3513.226718][T14180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3513.233692][T14180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3513.259614][ C0] vkms_vblank_simulate: vblank timer overrun [ 3513.265826][T14180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3513.304881][T17793] bridge_slave_1: left allmulticast mode [ 3513.312050][T17793] bridge_slave_1: left promiscuous mode [ 3513.318736][T17793] bridge0: port 2(bridge_slave_1) entered disabled state [ 3513.357719][T17793] bridge_slave_0: left allmulticast mode [ 3513.364960][T17793] bridge_slave_0: left promiscuous mode [ 3513.382188][T17793] bridge0: port 1(bridge_slave_0) entered disabled state [ 3513.518494][T18909] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 3513.757252][T18909] usb 7-1: Using ep0 maxpacket: 8 [ 3513.773253][T18909] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 3513.819545][T18909] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 3513.887819][T14282] input input263: cannot allocate more than FF_MAX_EFFECTS effects [ 3513.896755][T18909] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 3513.911368][T18909] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 3513.944211][T18909] usb 7-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 3513.955235][T18909] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3513.974546][T18909] usb 7-1: Product: syz [ 3513.983914][T18909] usb 7-1: Manufacturer: syz [ 3514.013999][T18909] usb 7-1: SerialNumber: syz [ 3514.077292][T18909] usb 7-1: config 0 descriptor?? [ 3514.325293][T18909] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input264 [ 3514.444407][T14288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3514.474085][T14272] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 3514.480662][T14272] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 3514.498817][T14293] FAULT_INJECTION: forcing a failure. [ 3514.498817][T14293] name failslab, interval 1, probability 0, space 0, times 0 [ 3514.511710][T14293] CPU: 1 UID: 0 PID: 14293 Comm: syz.8.11245 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 3514.522605][T14293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 3514.532113][T14288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3514.532676][T14293] Call Trace: [ 3514.543682][T14293] [ 3514.546627][T14293] dump_stack_lvl+0x241/0x360 [ 3514.551345][T14293] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3514.555079][T14272] vhci_hcd vhci_hcd.0: Device attached [ 3514.556550][T14293] ? __pfx__printk+0x10/0x10 [ 3514.556579][T14293] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 3514.556601][T14293] ? __pfx___might_resched+0x10/0x10 [ 3514.556628][T14293] should_fail_ex+0x3b0/0x4e0 [ 3514.556654][T14293] ? __mpol_dup+0x79/0x340 [ 3514.556672][T14293] should_failslab+0xac/0x100 [ 3514.556692][T14293] ? __mpol_dup+0x79/0x340 [ 3514.556709][T14293] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 3514.556734][T14293] __mpol_dup+0x79/0x340 [ 3514.556752][T14293] ? __pfx___mpol_dup+0x10/0x10 [ 3514.556771][T14293] ? mas_find+0x950/0xbb0 [ 3514.614580][T14293] __se_sys_set_mempolicy_home_node+0x46e/0xa00 [ 3514.620832][T14293] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3514.626825][T14293] ? __pfx___se_sys_set_mempolicy_home_node+0x10/0x10 [ 3514.633619][T14293] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3514.639957][T14293] ? do_syscall_64+0x100/0x230 [ 3514.644726][T14293] ? do_syscall_64+0xb6/0x230 [ 3514.649408][T14293] do_syscall_64+0xf3/0x230 [ 3514.653915][T14293] ? clear_bhb_loop+0x35/0x90 [ 3514.658600][T14293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3514.664499][T14293] RIP: 0033:0x7ff9dd57e719 [ 3514.668913][T14293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3514.688651][T14293] RSP: 002b:00007ff9de37c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c2 [ 3514.697071][T14293] RAX: ffffffffffffffda RBX: 00007ff9dd735f80 RCX: 00007ff9dd57e719 [ 3514.705042][T14293] RDX: 0000000000000000 RSI: 000000000000a000 RDI: 0000000020349000 [ 3514.713012][T14293] RBP: 00007ff9de37c090 R08: 0000000000000000 R09: 0000000000000000 [ 3514.720986][T14293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3514.728966][T14293] R13: 0000000000000000 R14: 00007ff9dd735f80 R15: 00007fff8efe1598 [ 3514.736951][T14293] [ 3514.978094][T17793] dvmrp0 (unregistering): left allmulticast mode [ 3514.987850][T14288] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3514.998008][T14272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3515.032043][T14288] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3515.044810][T14272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3515.096544][T19760] usb 46-1: SetAddress Request (2) to port 0 [ 3515.103818][T19760] usb 46-1: new SuperSpeed USB device number 2 using vhci_hcd [ 3515.116495][T14289] vhci_hcd: connection closed [ 3515.147690][ T3046] vhci_hcd: stop threads [ 3515.166642][ T3046] vhci_hcd: release socket [ 3515.171546][T23170] Bluetooth: hci5: command tx timeout [ 3515.183791][ T3046] vhci_hcd: disconnect device [ 3515.267403][T17793] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 3515.323876][T18909] imon:send_packet: packet tx failed (-71) [ 3515.356427][T18909] imon 7-1:0.0: panel buttons/knobs setup failed [ 3515.477079][T18909] rc_core: IR keymap rc-imon-pad not found [ 3515.506745][T18909] Registered IR keymap rc-empty [ 3515.521178][T18909] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 3515.547694][T18909] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 3515.554395][ C0] vkms_vblank_simulate: vblank timer overrun [ 3515.579054][T18909] imon:send_packet: packet tx failed (-71) [ 3515.616476][T18909] imon 7-1:0.0: remote input dev register failed [ 3515.654004][T18909] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 3515.770855][ C0] vkms_vblank_simulate: vblank timer overrun [ 3515.825409][T18909] imon 7-1:0.0: unable to initialize intf0, err 0 [ 3515.833925][T18909] imon:imon_probe: failed to initialize context! [ 3515.854570][T18909] imon 7-1:0.0: unable to register, err -19 [ 3515.877145][T18909] usb 7-1: USB disconnect, device number 64 [ 3516.104561][ C0] vkms_vblank_simulate: vblank timer overrun [ 3516.234960][T14306] FAULT_INJECTION: forcing a failure. [ 3516.234960][T14306] name failslab, interval 1, probability 0, space 0, times 0 [ 3516.249219][T14306] CPU: 0 UID: 0 PID: 14306 Comm: syz.6.11249 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 3516.260111][T14306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 3516.270185][T14306] Call Trace: [ 3516.273479][T14306] [ 3516.276433][T14306] dump_stack_lvl+0x241/0x360 [ 3516.281135][T14306] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3516.286354][T14306] ? __pfx__printk+0x10/0x10 [ 3516.290964][T14306] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 3516.296442][T14306] ? __pfx___might_resched+0x10/0x10 [ 3516.301745][T14306] ? preempt_schedule_common+0x84/0xd0 [ 3516.307256][T14306] should_fail_ex+0x3b0/0x4e0 [ 3516.311956][T14306] should_failslab+0xac/0x100 [ 3516.316649][T14306] ? allocate_file_region_entries+0x204/0x670 [ 3516.322732][T14306] __kmalloc_cache_noprof+0x6c/0x2c0 [ 3516.328127][T14306] allocate_file_region_entries+0x204/0x670 [ 3516.334058][T14306] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 3516.340503][T14306] ? region_chg+0x266/0x390 [ 3516.345039][T14306] region_chg+0x2b4/0x390 [ 3516.349395][T14306] __vma_reservation_common+0x3c1/0x7e0 [ 3516.354969][T14306] ? __pfx___vma_reservation_common+0x10/0x10 [ 3516.361059][T14306] ? get_mem_cgroup_from_current+0x3f/0x1c0 [ 3516.366981][T14306] alloc_hugetlb_folio+0x2ab/0x1810 [ 3516.372215][T14306] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3516.378570][T14306] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 3516.384225][T14306] ? irqentry_exit+0x63/0x90 [ 3516.388833][T14306] ? lockdep_hardirqs_on+0x99/0x150 [ 3516.394060][T14306] ? hugetlb_fault+0xbfb/0x37a0 [ 3516.398926][T14306] ? hugetlb_fault+0xc09/0x37a0 [ 3516.403816][T14306] hugetlb_fault+0x23a4/0x37a0 [ 3516.408624][T14306] ? __pfx_hugetlb_fault+0x10/0x10 [ 3516.413754][T14306] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3516.420115][T14306] ? irqentry_exit+0x63/0x90 [ 3516.424724][T14306] ? lockdep_hardirqs_on+0x99/0x150 [ 3516.429961][T14306] ? lock_acquire+0x264/0x550 [ 3516.434670][T14306] handle_mm_fault+0x183a/0x1ad0 [ 3516.439652][T14306] ? __pfx_handle_mm_fault+0x10/0x10 [ 3516.444967][T14306] ? __get_user_pages+0x1b99/0x49e0 [ 3516.450192][T14306] ? __up_read+0x2c2/0x6b0 [ 3516.454626][T14306] ? __pfx___up_read+0x10/0x10 [ 3516.459407][T14306] ? vma_is_secretmem+0xd/0x50 [ 3516.464184][T14306] ? check_vma_flags+0x4fa/0x5a0 [ 3516.469149][T14306] __get_user_pages+0x1c82/0x49e0 [ 3516.474243][T14306] ? __pfx___get_user_pages+0x10/0x10 [ 3516.479637][T14306] ? __pfx_mt_find+0x10/0x10 [ 3516.484267][T14306] populate_vma_page_range+0x264/0x330 [ 3516.489748][T14306] ? __pfx_populate_vma_page_range+0x10/0x10 [ 3516.495757][T14306] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3516.502106][T14306] __mm_populate+0x27a/0x460 [ 3516.506707][T14306] ? __pfx___mm_populate+0x10/0x10 [ 3516.511819][T14306] ? __se_sys_remap_file_pages+0x5f6/0xbb0 [ 3516.517627][T14306] ? __se_sys_remap_file_pages+0x600/0xbb0 [ 3516.523440][T14306] __se_sys_remap_file_pages+0x610/0xbb0 [ 3516.529086][T14306] ? __pfx___se_sys_remap_file_pages+0x10/0x10 [ 3516.535244][T14306] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 3516.541254][T14306] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3516.547610][T14306] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3516.553955][T14306] ? __x64_sys_remap_file_pages+0x20/0xc0 [ 3516.559686][T14306] do_syscall_64+0xf3/0x230 [ 3516.564201][T14306] ? clear_bhb_loop+0x35/0x90 [ 3516.568885][T14306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3516.574792][T14306] RIP: 0033:0x7f43ccf7e719 [ 3516.579214][T14306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3516.598821][T14306] RSP: 002b:00007f43cde15038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 3516.607246][T14306] RAX: ffffffffffffffda RBX: 00007f43cd136130 RCX: 00007f43ccf7e719 [ 3516.615216][T14306] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000000020800000 [ 3516.623183][T14306] RBP: 00007f43cde15090 R08: 0000000000000002 R09: 0000000000000000 [ 3516.631168][T14306] R10: 0000000000000600 R11: 0000000000000246 R12: 0000000000000002 [ 3516.639156][T14306] R13: 0000000000000000 R14: 00007f43cd136130 R15: 00007ffc3a5236e8 [ 3516.647154][T14306] [ 3516.650228][ C0] vkms_vblank_simulate: vblank timer overrun [ 3516.932498][T17793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3516.945003][T17793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3516.971280][T17793] bond0 (unregistering): Released all slaves [ 3517.009836][T14180] hsr_slave_0: entered promiscuous mode [ 3517.021849][T14180] hsr_slave_1: entered promiscuous mode [ 3517.180015][T14180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3517.188853][T14180] Cannot create hsr debugfs directory [ 3517.334183][T23170] Bluetooth: hci5: command tx timeout [ 3517.356671][T14271] IPv6: Can't replace route, no match found [ 3518.232151][T17793] tipc: Disabling bearer [ 3518.239062][T17793] tipc: Left network mode [ 3518.791200][T14320] mkiss: ax0: crc mode is auto. [ 3518.944146][T31127] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 3519.090474][T17793] hsr_slave_0: left promiscuous mode [ 3519.108393][T17793] hsr_slave_1: left promiscuous mode [ 3519.117544][T17793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3519.126197][T31127] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3519.139453][T31127] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 178 [ 3519.160798][T17793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3519.186508][T31127] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 3519.262682][T17793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3519.284431][T17793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3519.292037][T31127] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=31.c9 [ 3519.315408][T31127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3519.352849][T31127] usb 2-1: config 0 descriptor?? [ 3519.381363][T14323] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3519.388937][T17793] veth1_macvtap: left promiscuous mode [ 3519.405772][T17793] veth0_macvtap: left promiscuous mode [ 3519.650644][T14322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3519.696537][T14322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3519.710723][T14337] input: syz0 as /devices/virtual/input/input266 [ 3519.739166][T31127] ath6kl: Failed to submit usb control message: -71 [ 3519.759471][T31127] ath6kl: unable to send the bmi data to the device: -71 [ 3519.795802][T31127] ath6kl: Unable to send get target info: -71 [ 3519.848377][T31127] ath6kl: Failed to init ath6kl core: -71 [ 3519.877615][T31127] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 3519.906832][T31127] usb 2-1: USB disconnect, device number 103 [ 3519.998323][T17793] pimreg (unregistering): left allmulticast mode [ 3520.040258][ C0] vkms_vblank_simulate: vblank timer overrun [ 3520.211738][T19760] usb 46-1: device descriptor read/8, error -110 [ 3520.336859][ C0] vkms_vblank_simulate: vblank timer overrun [ 3520.487901][ C0] vkms_vblank_simulate: vblank timer overrun [ 3520.639208][ C0] vkms_vblank_simulate: vblank timer overrun [ 3520.647506][T19760] usb usb46-port1: attempt power cycle [ 3520.704016][ C0] vkms_vblank_simulate: vblank timer overrun [ 3520.716479][T31127] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 3520.821232][ C0] vkms_vblank_simulate: vblank timer overrun [ 3520.896687][T31127] usb 2-1: Using ep0 maxpacket: 16 [ 3520.924200][T31127] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3520.952745][T31127] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3520.963574][T31127] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3521.001675][T31127] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3521.009445][T31127] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 3521.018783][T31127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3521.056220][T31127] usb 2-1: config 0 descriptor?? [ 3521.207869][T19760] usb usb46-port1: unable to enumerate USB device [ 3521.227472][T17793] team0 (unregistering): Port device team_slave_1 removed [ 3521.337539][T17793] team0 (unregistering): Port device team_slave_0 removed [ 3522.604545][T14180] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3522.684281][T14180] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3522.813447][T14360] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3523.626089][T14358] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11259'. [ 3523.641342][T14358] 9pnet_fd: Insufficient options for proto=fd [ 3523.788165][T14360] netlink: 'syz.0.11261': attribute type 2 has an invalid length. [ 3523.796589][T14360] netlink: 'syz.0.11261': attribute type 8 has an invalid length. [ 3523.802482][T31127] usbhid 2-1:0.0: can't add hid device: -71 [ 3523.804610][T14360] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11261'. [ 3523.811412][T31127] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 3523.950829][T14180] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3524.160004][T14354] netlink: 'syz.8.11260': attribute type 1 has an invalid length. [ 3524.167973][T14354] netlink: 9384 bytes leftover after parsing attributes in process `syz.8.11260'. [ 3524.195388][T14180] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3524.337848][T31127] usb 2-1: USB disconnect, device number 104 [ 3524.372038][T17793] IPVS: stop unused estimator thread 0... [ 3524.472042][T14371] hub 6-0:1.0: USB hub found [ 3524.478602][T14371] hub 6-0:1.0: 1 port detected [ 3525.201898][T14180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3525.232823][T14380] netlink: 24 bytes leftover after parsing attributes in process `syz.8.11266'. [ 3525.307298][T14180] 8021q: adding VLAN 0 to HW filter on device team0 [ 3525.457753][ T6802] bridge0: port 1(bridge_slave_0) entered blocking state [ 3525.464964][ T6802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3525.492128][T14384] netlink: 209852 bytes leftover after parsing attributes in process `syz.8.11268'. [ 3525.503335][ T6802] bridge0: port 2(bridge_slave_1) entered blocking state [ 3525.510532][ T6802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3525.549590][T14384] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 3525.643842][T14388] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11267'. [ 3526.443068][T14392] netlink: 'syz.1.11271': attribute type 1 has an invalid length. [ 3526.487111][T14392] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.11271'. [ 3526.607794][T14392] netlink: 'syz.1.11271': attribute type 1 has an invalid length. [ 3527.025041][T14392] netlink: 'syz.1.11271': attribute type 1 has an invalid length. [ 3527.043813][T14392] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.11271'. [ 3527.074571][T14392] netlink: 'syz.1.11271': attribute type 1 has an invalid length. [ 3527.324774][T17798] Bluetooth: hci6: Frame reassembly failed (-84) [ 3527.383079][T14180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3527.408990][T14411] Bluetooth: hci6: Frame reassembly failed (-84) [ 3527.456535][T18909] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 3527.627750][T18909] usb 7-1: Using ep0 maxpacket: 16 [ 3527.639144][T18909] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3527.663501][T18909] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3527.699652][T18909] usb 7-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3527.738702][T18909] usb 7-1: config 0 interface 0 has no altsetting 0 [ 3527.765885][T18909] usb 7-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 3527.796392][T18909] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3527.827441][T18909] usb 7-1: config 0 descriptor?? [ 3527.977475][T14180] veth0_vlan: entered promiscuous mode [ 3528.006158][T14180] veth1_vlan: entered promiscuous mode [ 3528.013955][T28822] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 3528.095153][T14180] veth0_macvtap: entered promiscuous mode [ 3528.142187][T14180] veth1_macvtap: entered promiscuous mode [ 3528.156465][T28822] usb 2-1: device descriptor read/64, error -71 [ 3528.181523][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3528.207187][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3528.228763][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3528.256399][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3528.266901][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3528.277792][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3528.289272][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3528.300232][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3528.310841][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3528.323048][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3528.333378][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3528.344787][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3528.355307][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3528.388630][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3528.406463][T28822] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 3528.416807][T14180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3528.448290][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3528.473212][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3528.493492][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3528.514462][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3528.534039][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3528.536590][T28822] usb 2-1: device descriptor read/64, error -71 [ 3528.555268][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3528.571472][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3528.582343][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3528.592716][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3528.603701][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3528.614017][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3528.624749][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3528.635627][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3528.646462][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3528.656949][T14180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3528.668312][T14180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3528.668703][T28822] usb usb2-port1: attempt power cycle [ 3528.680014][T14180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3528.702596][T14180] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3528.711579][T14180] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3528.721173][T14180] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3528.732349][T14180] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3528.838600][T17793] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3528.847711][T17793] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3528.868733][ T6802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3528.876971][ T6802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3529.127399][T14433] infiniband sy{0: RDMA CMA: cma_listen_on_dev, error -98 [ 3529.326477][T23170] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 3529.416672][ C1] vkms_vblank_simulate: vblank timer overrun [ 3529.626366][T28822] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 3529.689094][T28822] usb 2-1: device descriptor read/8, error -71 [ 3530.103556][T23170] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 3530.120267][T23170] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 3530.128546][T28822] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 3530.143013][T23170] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 3530.155297][T23170] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 3530.164415][T28822] usb 2-1: device descriptor read/8, error -71 [ 3530.173702][T23170] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 3530.182020][T23170] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 3530.570988][T18909] usbhid 7-1:0.0: can't add hid device: -71 [ 3530.590382][T18909] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 3530.605807][T18909] usb 7-1: USB disconnect, device number 65 [ 3530.926786][T28822] usb usb2-port1: unable to enumerate USB device [ 3532.317941][T14449] netlink: 'syz.0.11284': attribute type 9 has an invalid length. [ 3532.325784][T14449] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.11284'. [ 3533.021330][T28835] Bluetooth: hci6: command tx timeout [ 3533.144513][T14457] netlink: 'syz.0.11284': attribute type 9 has an invalid length. [ 3533.165907][T14457] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.11284'. [ 3533.276158][ T3046] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3533.663275][ T3046] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3533.818635][T31127] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 3533.829514][ T3046] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3533.970747][ T3046] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3533.990957][T31127] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 3534.002359][T31127] usb 2-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 3534.103623][T14482] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11292'. [ 3534.105202][T31127] usb 2-1: New USB device found, idVendor=951f, idProduct=a083, bcdDevice=31.b8 [ 3534.113872][T14481] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11290'. [ 3534.122569][T31127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3534.139915][T31127] usb 2-1: Product: syz [ 3534.144177][T31127] usb 2-1: Manufacturer: syz [ 3534.146710][T14481] netlink: 'syz.6.11290': attribute type 18 has an invalid length. [ 3534.149216][T31127] usb 2-1: SerialNumber: syz [ 3534.352874][T14481] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 3534.362404][T14481] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 3534.372233][T14481] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 3534.381205][T14481] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 3534.561073][T14481] vxlan0: entered promiscuous mode [ 3534.613313][T14437] chnl_net:caif_netlink_parms(): no params data found [ 3534.745990][T14486] unsupported nlmsg_type 40 [ 3535.109063][T28835] Bluetooth: hci6: command tx timeout [ 3536.582745][ T3046] infiniband syz0: set down [ 3537.105974][T14508] tmpfs: Bad value for 'mpol' [ 3537.174068][T23170] Bluetooth: hci6: command tx timeout [ 3537.659065][T31127] usb 2-1: USB disconnect, device number 109 [ 3538.213487][ T3046] bond0 (unregistering): Released all slaves [ 3538.213842][T17798] smc: removing ib device syz0 [ 3538.234469][T14504] netlink: 2088 bytes leftover after parsing attributes in process `syz.6.11295'. [ 3538.483685][T14437] bridge0: port 1(bridge_slave_0) entered blocking state [ 3538.497290][T14437] bridge0: port 1(bridge_slave_0) entered disabled state [ 3538.504704][T14437] bridge_slave_0: entered allmulticast mode [ 3538.534095][T14437] bridge_slave_0: entered promiscuous mode [ 3538.573876][T14437] bridge0: port 2(bridge_slave_1) entered blocking state [ 3538.591766][T14437] bridge0: port 2(bridge_slave_1) entered disabled state [ 3538.600127][T14437] bridge_slave_1: entered allmulticast mode [ 3538.619543][T14437] bridge_slave_1: entered promiscuous mode [ 3538.862983][T14535] siw: device registration error -23 [ 3539.043716][T14533] netlink: 2052 bytes leftover after parsing attributes in process `syz.4.11302'. [ 3539.124807][T14533] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 3539.321551][T28835] Bluetooth: hci6: command tx timeout [ 3539.490242][T14437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3539.567328][T14437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3539.846363][ T7917] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 3540.126836][ T7917] usb 7-1: device descriptor read/64, error -71 [ 3540.367652][ T7917] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 3540.666631][ T7917] usb 7-1: device descriptor read/64, error -71 [ 3540.844032][T14437] team0: Port device team_slave_0 added [ 3540.907991][ T7917] usb usb7-port1: attempt power cycle [ 3540.933117][T14437] team0: Port device team_slave_1 added [ 3541.316454][T14558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11309'. [ 3541.716512][ T7917] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 3541.888009][ T7917] usb 7-1: device descriptor read/8, error -71 [ 3541.948861][T14566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11311'. [ 3542.001872][T14566] 9pnet_fd: Insufficient options for proto=fd [ 3542.017831][T28809] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 3543.019531][T14437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3543.026986][T14437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3543.139722][T14437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3543.188914][T28809] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 3543.202886][T28809] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3543.228827][T28809] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 3543.241415][T14437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3543.241437][T14437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3543.241462][T14437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3543.298656][T28809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3543.542247][T28809] usb 5-1: config 0 descriptor?? [ 3543.809097][T14575] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11315'. [ 3543.818434][T14575] netlink: 'syz.1.11315': attribute type 3 has an invalid length. [ 3544.170917][T14580] siw: device registration error -23 [ 3544.264042][T28809] usb 5-1: string descriptor 0 read error: -71 [ 3544.384904][T14437] hsr_slave_0: entered promiscuous mode [ 3544.553679][T14437] hsr_slave_1: entered promiscuous mode [ 3544.587362][T28809] usb 5-1: USB disconnect, device number 57 [ 3544.696853][T14437] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3544.723249][T14437] Cannot create hsr debugfs directory [ 3544.729831][ T3046] Êü: left promiscuous mode [ 3545.119652][ T3046] tipc: Left network mode [ 3545.281265][T14597] netlink: 'syz.1.11320': attribute type 1 has an invalid length. [ 3545.306718][T28809] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 3545.434781][T14597] netlink: 9384 bytes leftover after parsing attributes in process `syz.1.11320'. [ 3545.548829][T28809] usb 5-1: Using ep0 maxpacket: 16 [ 3545.590285][T28809] usb 5-1: config 0 has an invalid interface number: 203 but max is 0 [ 3545.636437][T28809] usb 5-1: config 0 has no interface number 0 [ 3545.674942][T28809] usb 5-1: config 0 interface 203 altsetting 0 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 3545.734994][T28809] usb 5-1: New USB device found, idVendor=04cb, idProduct=010f, bcdDevice=29.7d [ 3545.783327][T28809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3545.809605][T28809] usb 5-1: Product: syz [ 3545.834100][T28809] usb 5-1: Manufacturer: syz [ 3545.847532][T28809] usb 5-1: SerialNumber: syz [ 3545.871193][T28809] usb 5-1: config 0 descriptor?? [ 3545.898464][T28809] gspca_main: finepix-2.14.0 probing 04cb:010f [ 3546.111918][T14594] netlink: 276 bytes leftover after parsing attributes in process `syz.4.11321'. [ 3546.133632][T28809] usb 5-1: USB disconnect, device number 58 [ 3546.474666][ T3046] hsr_slave_0: left promiscuous mode [ 3546.480933][ T3046] hsr_slave_1: left promiscuous mode [ 3546.507647][ T3046] dummy0: left allmulticast mode [ 3546.513352][ T3046] dummy0: left promiscuous mode [ 3546.543641][T14608] input input267: cannot allocate more than FF_MAX_EFFECTS effects [ 3546.575745][ T3046] veth1_macvtap: left promiscuous mode [ 3546.626931][ T3046] veth0_macvtap: left promiscuous mode [ 3546.663321][ T3046] veth1_vlan: left promiscuous mode [ 3546.738809][ T3046] veth0_vlan: left promiscuous mode [ 3547.363134][ T3046] team0 (unregistering): Port device batadv1 removed [ 3548.284767][T14581] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 3548.445086][T14581] usb 7-1: Using ep0 maxpacket: 32 [ 3548.474920][T14581] usb 7-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 3548.484275][T14581] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3548.495083][T14581] usb 7-1: config 0 descriptor?? [ 3548.527363][T14581] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 3548.904773][T14627] netlink: 'syz.0.11331': attribute type 4 has an invalid length. [ 3548.912902][T14627] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.11331'. [ 3549.083241][T14629] UBIFS error (pid: 14629): cannot open "/dev/sg0", error -22 [ 3549.605986][T14632] netlink: 'syz.6.11330': attribute type 16 has an invalid length. [ 3549.623008][T14632] netlink: 'syz.6.11330': attribute type 3 has an invalid length. [ 3549.631039][T14632] netlink: 64066 bytes leftover after parsing attributes in process `syz.6.11330'. [ 3549.692598][T14581] gspca_nw80x: reg_r err -110 [ 3549.697739][T14581] nw80x 7-1:0.0: probe with driver nw80x failed with error -110 [ 3549.947963][T14629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11332'. [ 3549.983804][T14629] veth0_vlan: left allmulticast mode [ 3550.023131][T14629] vlan1: left allmulticast mode [ 3550.189314][T14640] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11335'. [ 3550.609466][T14376] usb 7-1: USB disconnect, device number 70 [ 3551.292850][T14437] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 3551.322837][T14437] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 3551.457749][ T3046] IPVS: stop unused estimator thread 0... [ 3551.688470][T14437] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 3551.753059][T14437] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 3552.022891][T14660] netlink: 4 bytes leftover after parsing attributes in process `syz.6.11342'. [ 3552.436079][T14437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3552.455073][T14437] 8021q: adding VLAN 0 to HW filter on device team0 [ 3552.467682][ T6788] bridge0: port 1(bridge_slave_0) entered blocking state [ 3552.474825][ T6788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3552.574872][ T6788] bridge0: port 2(bridge_slave_1) entered blocking state [ 3552.582007][ T6788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3552.876533][T14581] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 3552.955064][T14437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3553.026666][T14581] usb 7-1: Using ep0 maxpacket: 16 [ 3553.045143][T14581] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3553.064230][T14581] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3553.087383][T14581] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 3553.126660][T14581] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 3553.135759][T14581] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3553.188663][T14581] usb 7-1: config 0 descriptor?? [ 3553.399540][T14666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3553.417543][T14666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3553.440821][T14437] veth0_vlan: entered promiscuous mode [ 3553.474217][T14437] veth1_vlan: entered promiscuous mode [ 3553.541907][T14437] veth0_macvtap: entered promiscuous mode [ 3553.559818][T14437] veth1_macvtap: entered promiscuous mode [ 3553.595085][T14437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3553.619309][T14437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3553.642327][T14437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3553.663409][T14437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3553.684858][T14437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3553.707266][T14437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3553.730260][T14437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3553.776568][T14437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3553.816288][T14437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3553.846764][T14437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3553.878107][T14437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3553.909562][T14437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3553.940752][T14437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3553.976495][T14437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3554.016504][T14437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3554.045176][T14437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3554.078136][T14437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3554.158216][T14437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3554.202879][T14437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3554.229826][T14690] sg_write: data in/out 209/8 bytes for SCSI command 0xff-- guessing data in; [ 3554.229826][T14690] program syz.6.11344 not setting count and/or reply_len properly [ 3554.246369][T14437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3554.278099][T14437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3554.326325][T14437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3554.346562][T14437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3554.357010][T14437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3554.368412][T14437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3554.378460][T14437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3554.389116][T14437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3554.399223][T14437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3554.409763][T14437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3554.419851][T14437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3554.430618][T14437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3554.441069][T14437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3554.452832][T14437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3554.464334][T14437] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3554.474940][T14437] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3554.492627][T14437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3554.539310][T14437] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3554.568898][T14437] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3554.631732][T14437] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3554.677423][T14437] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3554.887868][ T6802] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3554.918084][ T6802] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3554.946491][T14376] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 3554.970885][ T6802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3554.982036][ T6802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3555.098389][T14376] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 3555.144128][T14376] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 3555.144165][T14376] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 3555.144190][T14376] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 3555.144217][T14376] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 3555.144243][T14376] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 3555.149589][T14376] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 3555.149621][T14376] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3555.149642][T14376] usb 2-1: Product: syz [ 3555.149658][T14376] usb 2-1: Manufacturer: syz [ 3555.149675][T14376] usb 2-1: SerialNumber: syz [ 3555.151727][T14376] usb 2-1: config 0 descriptor?? [ 3555.281767][T14376] iguanair 2-1:0.0: probe with driver iguanair failed with error -12 [ 3555.591173][T14693] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3555.619133][ T6769] usb 2-1: USB disconnect, device number 110 [ 3555.714823][T14581] usbhid 7-1:0.0: can't add hid device: -71 [ 3555.714929][T14581] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 3555.716858][T14581] usb 7-1: USB disconnect, device number 71 [ 3558.760637][ T29] audit: type=1800 audit(1731851203.556:1385): pid=14764 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.11369" name="bus" dev="overlay" ino=40 res=0 errno=0 [ 3558.780342][T14771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11371'. [ 3558.963925][T14778] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11371'. [ 3560.128875][ C0] vkms_vblank_simulate: vblank timer overrun [ 3560.246941][T14784] netlink: 188 bytes leftover after parsing attributes in process `syz.1.11375'. [ 3560.256124][T14784] netlink: 'syz.1.11375': attribute type 1 has an invalid length. [ 3560.344696][ C0] vkms_vblank_simulate: vblank timer overrun [ 3561.256924][T14795] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.11378'. [ 3561.431825][ C0] vkms_vblank_simulate: vblank timer overrun [ 3561.898293][ C0] vkms_vblank_simulate: vblank timer overrun [ 3562.147804][ C0] vkms_vblank_simulate: vblank timer overrun [ 3562.170408][T14804] Invalid ELF header magic: != ELF [ 3562.236805][T14804] 9pnet_fd: Insufficient options for proto=fd [ 3562.264571][ C0] vkms_vblank_simulate: vblank timer overrun [ 3562.312387][ C0] vkms_vblank_simulate: vblank timer overrun [ 3562.444682][ C0] vkms_vblank_simulate: vblank timer overrun [ 3562.529343][ C0] vkms_vblank_simulate: vblank timer overrun [ 3565.780692][ C0] vkms_vblank_simulate: vblank timer overrun [ 3565.831280][ C0] vkms_vblank_simulate: vblank timer overrun [ 3566.146398][T14803] netlink: 'syz.0.11382': attribute type 3 has an invalid length. [ 3566.146446][T14808] netlink: 'syz.8.11384': attribute type 1 has an invalid length. [ 3566.162198][T14808] netlink: 9384 bytes leftover after parsing attributes in process `syz.8.11384'. [ 3566.180216][T14803] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.11382'. [ 3567.297389][T14823] tmpfs: Bad value for 'nr_inodes' [ 3567.759235][T14831] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11390'. [ 3568.417131][T14849] overlayfs: failed to resolve '/šíâ¾!ÌýÄéO†„³¤óTÚšy^–3N }ÿpñ˜€7²í': -2 [ 3568.498518][T14851] netlink: 'syz.0.11397': attribute type 1 has an invalid length. [ 3568.506807][T14851] netlink: 9384 bytes leftover after parsing attributes in process `syz.0.11397'. [ 3569.672707][T14866] vlan1: entered promiscuous mode [ 3569.706199][T14866] input: syz1 as /devices/virtual/input/input270 [ 3569.802803][T14863] input: syz1 as /devices/virtual/input/input269 [ 3569.907561][T14858] vlan1: left promiscuous mode [ 3570.316585][T14874] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 3571.544437][T14894] netlink: 'syz.1.11410': attribute type 1 has an invalid length. [ 3571.552512][T14894] netlink: 9384 bytes leftover after parsing attributes in process `syz.1.11410'. [ 3573.442191][T14916] afs: Unknown parameter 'd' [ 3573.474748][T28822] IPVS: starting estimator thread 0... [ 3573.574783][T14925] IPVS: using max 32 ests per chain, 76800 per kthread [ 3574.425352][T14932] random: crng reseeded on system resumption [ 3574.573861][T14933] could not allocate digest TFM handle sha256-arm64-neon [ 3574.583598][T14946] netlink: 'syz.8.11423': attribute type 1 has an invalid length. [ 3574.592187][T14946] netlink: 9384 bytes leftover after parsing attributes in process `syz.8.11423'. [ 3574.999572][T28835] Bluetooth: hci2: unexpected event for opcode 0x202d [ 3575.564663][T14951] netlink: 'syz.4.11425': attribute type 9 has an invalid length. [ 3575.573310][T14951] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.11425'. [ 3575.620107][T14952] netlink: 'syz.4.11425': attribute type 9 has an invalid length. [ 3575.663052][T14952] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.11425'. [ 3576.595524][ C1] vkms_vblank_simulate: vblank timer overrun [ 3576.908627][T14966] siw: device registration error -23 [ 3578.348711][T14973] IPVS: ovf: FWM 4 0x00000004 - no destination available [ 3578.487940][T28835] Bluetooth: hci1: unexpected event for opcode 0x1405 [ 3579.990548][T14994] FAULT_INJECTION: forcing a failure. [ 3579.990548][T14994] name failslab, interval 1, probability 0, space 0, times 0 [ 3580.076290][T14994] CPU: 1 UID: 0 PID: 14994 Comm: syz.1.11437 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 3580.087212][T14994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 3580.097297][T14994] Call Trace: [ 3580.100609][T14994] [ 3580.103557][T14994] dump_stack_lvl+0x241/0x360 [ 3580.108277][T14994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3580.113520][T14994] ? __pfx__printk+0x10/0x10 [ 3580.118170][T14994] should_fail_ex+0x3b0/0x4e0 [ 3580.122876][T14994] should_failslab+0xac/0x100 [ 3580.127649][T14994] ? __alloc_skb+0x1c3/0x440 [ 3580.132252][T14994] kmem_cache_alloc_node_noprof+0x71/0x320 [ 3580.138067][T14994] ? br_get_link_af_size_filtered+0xdb/0xd30 [ 3580.144059][T14994] __alloc_skb+0x1c3/0x440 [ 3580.148573][T14994] ? __pfx___alloc_skb+0x10/0x10 [ 3580.153534][T14994] ? if_nlmsg_size+0x744/0x7a0 [ 3580.158330][T14994] ? if_nlmsg_size+0x53a/0x7a0 [ 3580.163110][T14994] rtmsg_ifinfo_build_skb+0x84/0x260 [ 3580.168410][T14994] rtmsg_ifinfo+0x91/0x1b0 [ 3580.172837][T14994] __dev_notify_flags+0xf7/0x400 [ 3580.177792][T14994] ? dev_set_rx_mode+0x233/0x2e0 [ 3580.182736][T14994] ? __pfx___dev_notify_flags+0x10/0x10 [ 3580.188295][T14994] ? __dev_change_flags+0x515/0x6f0 [ 3580.193513][T14994] ? __pfx___dev_change_flags+0x10/0x10 [ 3580.199067][T14994] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 3580.205239][T14994] ? kernel_text_address+0xa7/0xe0 [ 3580.210361][T14994] dev_change_flags+0xf0/0x1a0 [ 3580.215135][T14994] do_setlink+0xcd0/0x41f0 [ 3580.219560][T14994] ? stack_trace_save+0x118/0x1d0 [ 3580.224586][T14994] ? __pfx_stack_trace_save+0x10/0x10 [ 3580.229963][T14994] ? __pfx_do_setlink+0x10/0x10 [ 3580.234818][T14994] ? __asan_memset+0x23/0x50 [ 3580.239501][T14994] ? __nla_validate_parse+0x26ce/0x3090 [ 3580.245050][T14994] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 3580.250599][T14994] ? rtnl_newlink+0xf2/0x20a0 [ 3580.255282][T14994] ? netlink_sendmsg+0x8e4/0xcb0 [ 3580.260225][T14994] ? __sys_sendmsg+0x292/0x380 [ 3580.264990][T14994] ? do_syscall_64+0xf3/0x230 [ 3580.269681][T14994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3580.275757][T14994] ? __pfx___nla_validate_parse+0x10/0x10 [ 3580.281504][T14994] ? validate_linkmsg+0x71e/0x900 [ 3580.286535][T14994] rtnl_newlink+0x180d/0x20a0 [ 3580.291219][T14994] ? rtnl_newlink+0x481/0x20a0 [ 3580.295992][T14994] ? __pfx_rtnl_newlink+0x10/0x10 [ 3580.301021][T14994] ? __pfx___mutex_trylock_common+0x10/0x10 [ 3580.306920][T14994] ? rcu_is_watching+0x15/0xb0 [ 3580.311683][T14994] ? trace_contention_end+0x3c/0x120 [ 3580.316968][T14994] ? __mutex_lock+0x2ef/0xd70 [ 3580.321661][T14994] ? __pfx_lock_release+0x10/0x10 [ 3580.326704][T14994] ? __pfx_rtnl_newlink+0x10/0x10 [ 3580.331733][T14994] rtnetlink_rcv_msg+0x73f/0xcf0 [ 3580.336694][T14994] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 3580.341837][T14994] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3580.347300][T14994] ? ref_tracker_free+0x643/0x7e0 [ 3580.352345][T14994] netlink_rcv_skb+0x1e3/0x430 [ 3580.357118][T14994] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 3580.362610][T14994] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 3580.367918][T14994] ? netlink_deliver_tap+0x2e/0x1b0 [ 3580.373122][T14994] netlink_unicast+0x7f6/0x990 [ 3580.377900][T14994] ? __pfx_netlink_unicast+0x10/0x10 [ 3580.383181][T14994] ? __virt_addr_valid+0x183/0x530 [ 3580.388299][T14994] ? __check_object_size+0x48e/0x900 [ 3580.393590][T14994] netlink_sendmsg+0x8e4/0xcb0 [ 3580.398365][T14994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3580.403666][T14994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 3580.408950][T14994] __sock_sendmsg+0x221/0x270 [ 3580.413632][T14994] ____sys_sendmsg+0x52a/0x7e0 [ 3580.418411][T14994] ? __pfx_____sys_sendmsg+0x10/0x10 [ 3580.423886][T14994] __sys_sendmsg+0x292/0x380 [ 3580.428480][T14994] ? __pfx___sys_sendmsg+0x10/0x10 [ 3580.433600][T14994] ? __pfx_vfs_write+0x10/0x10 [ 3580.438383][T14994] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3580.444726][T14994] ? do_syscall_64+0x100/0x230 [ 3580.449502][T14994] ? do_syscall_64+0xb6/0x230 [ 3580.454188][T14994] do_syscall_64+0xf3/0x230 [ 3580.458698][T14994] ? clear_bhb_loop+0x35/0x90 [ 3580.463376][T14994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3580.469276][T14994] RIP: 0033:0x7f283c17e719 [ 3580.473690][T14994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3580.493299][T14994] RSP: 002b:00007f283cea9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 3580.501739][T14994] RAX: ffffffffffffffda RBX: 00007f283c336058 RCX: 00007f283c17e719 [ 3580.509713][T14994] RDX: 0000000004008000 RSI: 0000000020000340 RDI: 0000000000000003 [ 3580.517683][T14994] RBP: 00007f283cea9090 R08: 0000000000000000 R09: 0000000000000000 [ 3580.525654][T14994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3580.533627][T14994] R13: 0000000000000000 R14: 00007f283c336058 R15: 00007ffcea616ca8 [ 3580.541615][T14994] [ 3580.582733][T15007] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11442'. [ 3580.598073][T15008] netlink: 'syz.4.11440': attribute type 9 has an invalid length. [ 3580.668441][T15008] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.11440'. [ 3581.005285][T15018] siw: device registration error -23 [ 3582.243217][T15013] netlink: 'syz.4.11440': attribute type 9 has an invalid length. [ 3582.402431][T15033] siw: device registration error -23 [ 3583.126354][T15013] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.11440'. [ 3583.136510][T28835] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 3583.145699][T28835] Bluetooth: hci1: Injecting HCI hardware error event [ 3583.161344][T28835] Bluetooth: hci1: hardware error 0x00 [ 3583.395952][T15041] ptrace attach of "./syz-executor exec"[11497] was attempted by "./syz-executor exec"[15041] [ 3583.401589][T15040] syz.8.11452: attempt to access beyond end of device [ 3583.401589][T15040] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 3583.518396][ T46] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 3583.711530][ T46] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 3583.731614][T15040] exFAT-fs (nbd8): unable to read boot sector [ 3583.857532][ T46] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3583.911352][ T46] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3583.940582][ T46] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3583.949002][ T46] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3583.958351][T15040] exFAT-fs (nbd8): failed to read boot sector [ 3583.964552][T15040] exFAT-fs (nbd8): failed to recognize exfat type [ 3583.971232][ T46] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3584.016338][ T46] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3584.026841][ T46] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3584.045539][ T46] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3584.079333][ T46] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3584.096839][ T46] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3584.115135][ T46] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3584.156315][ T46] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3584.177021][ T46] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3584.191053][ T46] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3584.223729][ T46] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3584.264369][ T46] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3584.326972][ T46] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3584.356391][ T46] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3584.404204][ T46] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3584.416557][ T46] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3584.452698][ T46] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3584.471256][ T46] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 3584.500954][ T46] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 3584.585013][ T46] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3584.617797][ T46] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 3584.649851][ T46] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 3584.853607][ T46] usb 2-1: Product: syz [ 3584.865901][ T46] usb 2-1: Manufacturer: syz [ 3584.881553][ T46] usb 2-1: SerialNumber: syz [ 3584.883689][T15058] netlink: 104 bytes leftover after parsing attributes in process `syz.0.11459'. [ 3584.911166][ T46] usb 2-1: config 0 descriptor?? [ 3584.956447][ T46] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 3585.163424][T15063] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4102857745 (32822861960 ns) > initial count (10843324416 ns). Using initial count to start timer. [ 3585.256662][T28835] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 3585.429928][T15072] CIFS mount error: No usable UNC path provided in device string! [ 3585.429928][T15072] [ 3585.440130][T15072] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 3585.756400][T15077] usb 2-1: USB disconnect, device number 111 [ 3585.875695][T15077] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 3585.968917][T15078] hub 2-0:1.0: USB hub found [ 3586.006492][T15077] program syz.4.11458 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 3586.034723][T15078] hub 2-0:1.0: 1 port detected [ 3586.176516][T14376] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 3586.798980][T15086] vlan2: entered promiscuous mode [ 3586.804186][T15086] team0: entered promiscuous mode [ 3586.809400][T15086] team_slave_0: entered promiscuous mode [ 3586.816542][T15086] team_slave_1: entered promiscuous mode [ 3586.823817][T15086] vlan2: entered allmulticast mode [ 3586.829116][T15086] team0: entered allmulticast mode [ 3586.834387][T15086] team_slave_0: entered allmulticast mode [ 3586.840351][T15086] team_slave_1: entered allmulticast mode [ 3586.848218][T15086] team0: Device vlan2 is already an upper device of the team interface [ 3587.284498][T15086] team0: left allmulticast mode [ 3587.289571][T15086] team_slave_0: left allmulticast mode [ 3587.295222][T15086] team_slave_1: left allmulticast mode [ 3587.302690][T15086] team0: left promiscuous mode [ 3587.307642][T15086] team_slave_0: left promiscuous mode [ 3587.313580][T15086] team_slave_1: left promiscuous mode [ 3587.408411][T15089] FAULT_INJECTION: forcing a failure. [ 3587.408411][T15089] name failslab, interval 1, probability 0, space 0, times 0 [ 3587.431534][T15089] CPU: 1 UID: 0 PID: 15089 Comm: syz.1.11465 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 3587.442439][T15089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 3587.452522][T15089] Call Trace: [ 3587.455815][T15089] [ 3587.458762][T15089] dump_stack_lvl+0x241/0x360 [ 3587.463468][T15089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3587.468695][T15089] ? __pfx__printk+0x10/0x10 [ 3587.473313][T15089] ? fs_reclaim_acquire+0x93/0x130 [ 3587.478450][T15089] ? __pfx___might_resched+0x10/0x10 [ 3587.483762][T15089] should_fail_ex+0x3b0/0x4e0 [ 3587.488465][T15089] ? tomoyo_encode+0x26f/0x540 [ 3587.493255][T15089] should_failslab+0xac/0x100 [ 3587.497951][T15089] ? tomoyo_encode+0x26f/0x540 [ 3587.502743][T15089] __kmalloc_noprof+0xd8/0x400 [ 3587.507538][T15089] tomoyo_encode+0x26f/0x540 [ 3587.512177][T15089] tomoyo_realpath_from_path+0x59e/0x5e0 [ 3587.517832][T15089] tomoyo_path_number_perm+0x23a/0x880 [ 3587.523309][T15089] ? tomoyo_path_number_perm+0x208/0x880 [ 3587.528956][T15089] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3587.534972][T15089] ? __fget_files+0x29/0x470 [ 3587.539585][T15089] ? __fget_files+0x3f3/0x470 [ 3587.544280][T15089] security_file_ioctl+0xc6/0x2a0 [ 3587.549313][T15089] __se_sys_ioctl+0x47/0x170 [ 3587.553915][T15089] do_syscall_64+0xf3/0x230 [ 3587.558424][T15089] ? clear_bhb_loop+0x35/0x90 [ 3587.563109][T15089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3587.569010][T15089] RIP: 0033:0x7f283c17e719 [ 3587.573429][T15089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3587.593036][T15089] RSP: 002b:00007f283ceca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3587.601453][T15089] RAX: ffffffffffffffda RBX: 00007f283c335f80 RCX: 00007f283c17e719 [ 3587.609430][T15089] RDX: 0000000000000000 RSI: 00000000c008551a RDI: 0000000000000003 [ 3587.617403][T15089] RBP: 00007f283ceca090 R08: 0000000000000000 R09: 0000000000000000 [ 3587.625373][T15089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3587.633344][T15089] R13: 0000000000000000 R14: 00007f283c335f80 R15: 00007ffcea616ca8 [ 3587.641331][T15089] [ 3587.644464][ C1] vkms_vblank_simulate: vblank timer overrun [ 3587.688042][T15089] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3588.326515][ T29] audit: type=1326 audit(1731851233.126:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15099 comm="syz.6.11470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ccf7e719 code=0x7ffc0000 [ 3588.497904][ T29] audit: type=1326 audit(1731851233.136:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15099 comm="syz.6.11470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ccf7e719 code=0x7ffc0000 [ 3588.623495][ T29] audit: type=1326 audit(1731851233.156:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15099 comm="syz.6.11470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f43ccf7e719 code=0x7ffc0000 [ 3588.645364][ C1] vkms_vblank_simulate: vblank timer overrun [ 3588.682222][ T29] audit: type=1326 audit(1731851233.156:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15099 comm="syz.6.11470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ccf7e719 code=0x7ffc0000 [ 3588.725109][ T29] audit: type=1326 audit(1731851233.156:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15099 comm="syz.6.11470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ccf7e719 code=0x7ffc0000 [ 3588.749287][ T29] audit: type=1326 audit(1731851233.206:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15099 comm="syz.6.11470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f43ccf7e719 code=0x7ffc0000 [ 3588.773103][ T29] audit: type=1326 audit(1731851233.246:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15099 comm="syz.6.11470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ccf7e719 code=0x7ffc0000 [ 3588.798353][ T29] audit: type=1326 audit(1731851233.266:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15099 comm="syz.6.11470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ccf7e719 code=0x7ffc0000 [ 3588.820915][ T29] audit: type=1326 audit(1731851233.326:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15099 comm="syz.6.11470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f43ccf7e719 code=0x7ffc0000 [ 3588.936384][ T29] audit: type=1326 audit(1731851233.326:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15099 comm="syz.6.11470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43ccf7e719 code=0x7ffc0000 [ 3589.584846][T15123] netlink: 'syz.1.11475': attribute type 2 has an invalid length. [ 3589.635483][T15122] netlink: 104 bytes leftover after parsing attributes in process `syz.6.11474'. [ 3590.062448][T15136] mkiss: ax0: crc mode is auto. [ 3590.448655][T15140] netlink: 244 bytes leftover after parsing attributes in process `syz.1.11481'. [ 3590.486827][T15140] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11481'. [ 3590.508000][T14376] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 3590.668094][T14376] usb 7-1: config index 0 descriptor too short (expected 106, got 36) [ 3590.676685][T14376] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3590.738707][T14376] usb 7-1: config 0 has no interfaces? [ 3590.753082][T14376] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 3590.782676][T14376] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3590.814944][T14376] usb 7-1: config 0 descriptor?? [ 3591.036877][T14376] usb 7-1: USB disconnect, device number 72 [ 3591.967126][T15165] netlink: 'syz.1.11489': attribute type 1 has an invalid length. [ 3591.975329][T15165] netlink: 9384 bytes leftover after parsing attributes in process `syz.1.11489'. [ 3592.565542][T15167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3593.825859][T15183] netlink: 'syz.1.11495': attribute type 9 has an invalid length. [ 3593.845735][T15183] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.11495'. [ 3594.694288][T15188] netlink: 'syz.1.11495': attribute type 9 has an invalid length. [ 3594.716499][T15188] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.11495'. [ 3595.850434][T15201] [ 3595.852815][T15201] ====================================================== [ 3595.859856][T15201] WARNING: possible circular locking dependency detected [ 3595.866891][T15201] 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 Not tainted [ 3595.874012][T15201] ------------------------------------------------------ [ 3595.881021][T15201] syz.6.11503/15201 is trying to acquire lock: [ 3595.887170][T15201] ffff88805edd1088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 3595.896487][T15201] [ 3595.896487][T15201] but task is already holding lock: [ 3595.903849][T15201] ffff888047ffec68 (&pipe->mutex){+.+.}-{3:3}, at: iter_file_splice_write+0x330/0x1510 [ 3595.913589][T15201] [ 3595.913589][T15201] which lock already depends on the new lock. [ 3595.913589][T15201] [ 3595.923979][T15201] [ 3595.923979][T15201] the existing dependency chain (in reverse order) is: [ 3595.933011][T15201] [ 3595.933011][T15201] -> #3 (&pipe->mutex){+.+.}-{3:3}: [ 3595.940384][T15201] lock_acquire+0x1ed/0x550 [ 3595.945396][T15201] __mutex_lock+0x136/0xd70 [ 3595.950408][T15201] iter_file_splice_write+0x330/0x1510 [ 3595.956381][T15201] backing_file_splice_write+0x339/0x580 [ 3595.962607][T15201] ovl_splice_write+0x3c8/0x490 [ 3595.967961][T15201] do_splice+0xd68/0x18e0 [ 3595.972823][T15201] __se_sys_splice+0x331/0x4a0 [ 3595.978091][T15201] do_syscall_64+0xf3/0x230 [ 3595.983112][T15201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3595.989518][T15201] [ 3595.989518][T15201] -> #2 (sb_writers#5){.+.+}-{0:0}: [ 3595.996892][T15201] lock_acquire+0x1ed/0x550 [ 3596.001906][T15201] sb_start_write+0x4d/0x1c0 [ 3596.007012][T15201] mnt_want_write+0x3f/0x90 [ 3596.012105][T15201] ovl_create_object+0x13a/0x3a0 [ 3596.017558][T15201] path_openat+0x1c03/0x3590 [ 3596.022658][T15201] do_filp_open+0x235/0x490 [ 3596.027669][T15201] do_sys_openat2+0x13e/0x1d0 [ 3596.032866][T15201] __x64_sys_openat+0x247/0x2a0 [ 3596.038246][T15201] do_syscall_64+0xf3/0x230 [ 3596.043273][T15201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3596.049676][T15201] [ 3596.049676][T15201] -> #1 (&ovl_i_mutex_dir_key[depth]){++++}-{3:3}: [ 3596.058364][T15201] lock_acquire+0x1ed/0x550 [ 3596.063381][T15201] down_read+0xb1/0xa40 [ 3596.068040][T15201] lookup_slow+0x45/0x70 [ 3596.072785][T15201] walk_component+0x2e1/0x410 [ 3596.077964][T15201] path_lookupat+0x16f/0x450 [ 3596.083055][T15201] filename_lookup+0x256/0x610 [ 3596.088372][T15201] kern_path+0x35/0x50 [ 3596.092945][T15201] lookup_bdev+0xc5/0x290 [ 3596.097792][T15201] resume_store+0x1a0/0x710 [ 3596.102800][T15201] kernfs_fop_write_iter+0x3a0/0x500 [ 3596.108595][T15201] vfs_write+0xaeb/0xd30 [ 3596.113417][T15201] ksys_write+0x183/0x2b0 [ 3596.118268][T15201] do_syscall_64+0xf3/0x230 [ 3596.123295][T15201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3596.129701][T15201] [ 3596.129701][T15201] -> #0 (&of->mutex){+.+.}-{3:3}: [ 3596.136912][T15201] validate_chain+0x18ef/0x5920 [ 3596.142367][T15201] __lock_acquire+0x1384/0x2050 [ 3596.147736][T15201] lock_acquire+0x1ed/0x550 [ 3596.152748][T15201] __mutex_lock+0x136/0xd70 [ 3596.157757][T15201] kernfs_fop_write_iter+0x1ea/0x500 [ 3596.163552][T15201] iter_file_splice_write+0xbfa/0x1510 [ 3596.169518][T15201] do_splice+0xd68/0x18e0 [ 3596.174355][T15201] __se_sys_splice+0x331/0x4a0 [ 3596.179622][T15201] do_syscall_64+0xf3/0x230 [ 3596.184644][T15201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3596.191076][T15201] [ 3596.191076][T15201] other info that might help us debug this: [ 3596.191076][T15201] [ 3596.201330][T15201] Chain exists of: [ 3596.201330][T15201] &of->mutex --> sb_writers#5 --> &pipe->mutex [ 3596.201330][T15201] [ 3596.213421][T15201] Possible unsafe locking scenario: [ 3596.213421][T15201] [ 3596.220856][T15201] CPU0 CPU1 [ 3596.226207][T15201] ---- ---- [ 3596.231566][T15201] lock(&pipe->mutex); [ 3596.235715][T15201] lock(sb_writers#5); [ 3596.242469][T15201] lock(&pipe->mutex); [ 3596.249158][T15201] lock(&of->mutex); [ 3596.253150][T15201] [ 3596.253150][T15201] *** DEADLOCK *** [ 3596.253150][T15201] [ 3596.261273][T15201] 2 locks held by syz.6.11503/15201: [ 3596.266539][T15201] #0: ffff88807d0bc420 (sb_writers#11){.+.+}-{0:0}, at: do_splice+0xce4/0x18e0 [ 3596.275591][T15201] #1: ffff888047ffec68 (&pipe->mutex){+.+.}-{3:3}, at: iter_file_splice_write+0x330/0x1510 [ 3596.285660][T15201] [ 3596.285660][T15201] stack backtrace: [ 3596.291529][T15201] CPU: 1 UID: 0 PID: 15201 Comm: syz.6.11503 Not tainted 6.12.0-rc7-syzkaller-00212-g4a5df3796467 #0 [ 3596.302362][T15201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 3596.312408][T15201] Call Trace: [ 3596.315688][T15201] [ 3596.318622][T15201] dump_stack_lvl+0x241/0x360 [ 3596.323288][T15201] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3596.328481][T15201] ? __pfx__printk+0x10/0x10 [ 3596.333057][T15201] print_circular_bug+0x13a/0x1b0 [ 3596.338074][T15201] check_noncircular+0x36a/0x4a0 [ 3596.343022][T15201] ? __pfx_check_noncircular+0x10/0x10 [ 3596.348484][T15201] ? lockdep_lock+0x123/0x2b0 [ 3596.353162][T15201] validate_chain+0x18ef/0x5920 [ 3596.358025][T15201] ? __pfx_validate_chain+0x10/0x10 [ 3596.363212][T15201] ? look_up_lock_class+0x77/0x170 [ 3596.368321][T15201] ? register_lock_class+0x102/0x980 [ 3596.373596][T15201] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 3596.379560][T15201] ? __pfx_register_lock_class+0x10/0x10 [ 3596.385178][T15201] ? mark_lock+0x9a/0x360 [ 3596.389487][T15201] ? lockdep_hardirqs_on+0x99/0x150 [ 3596.394673][T15201] __lock_acquire+0x1384/0x2050 [ 3596.399519][T15201] lock_acquire+0x1ed/0x550 [ 3596.404023][T15201] ? kernfs_fop_write_iter+0x1ea/0x500 [ 3596.409532][T15201] ? __pfx_lock_acquire+0x10/0x10 [ 3596.414567][T15201] ? __pfx___might_resched+0x10/0x10 [ 3596.419842][T15201] ? __virt_addr_valid+0x183/0x530 [ 3596.424941][T15201] ? _copy_from_iter+0x889/0x1e70 [ 3596.429980][T15201] __mutex_lock+0x136/0xd70 [ 3596.434499][T15201] ? kernfs_fop_write_iter+0x1ea/0x500 [ 3596.439948][T15201] ? kernfs_fop_write_iter+0x1ea/0x500 [ 3596.445404][T15201] ? __pfx___mutex_lock+0x10/0x10 [ 3596.450419][T15201] ? __virt_addr_valid+0x183/0x530 [ 3596.455512][T15201] ? __virt_addr_valid+0x183/0x530 [ 3596.460609][T15201] ? __virt_addr_valid+0x45f/0x530 [ 3596.465705][T15201] ? __check_object_size+0x48e/0x900 [ 3596.470972][T15201] kernfs_fop_write_iter+0x1ea/0x500 [ 3596.476254][T15201] iter_file_splice_write+0xbfa/0x1510 [ 3596.481754][T15201] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3596.487667][T15201] ? rcu_read_lock_any_held+0xb7/0x160 [ 3596.493125][T15201] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3596.499009][T15201] do_splice+0xd68/0x18e0 [ 3596.503332][T15201] ? __pfx_lock_release+0x10/0x10 [ 3596.508344][T15201] ? do_sys_openat2+0x17a/0x1d0 [ 3596.513191][T15201] ? kmem_cache_free+0x1a2/0x420 [ 3596.518130][T15201] ? pipe_clear_nowait+0x196/0x220 [ 3596.523233][T15201] ? __pfx_do_splice+0x10/0x10 [ 3596.527982][T15201] __se_sys_splice+0x331/0x4a0 [ 3596.532731][T15201] ? __pfx___se_sys_splice+0x10/0x10 [ 3596.538000][T15201] ? do_syscall_64+0x100/0x230 [ 3596.542754][T15201] ? __x64_sys_splice+0x21/0xf0 [ 3596.547599][T15201] do_syscall_64+0xf3/0x230 [ 3596.552087][T15201] ? clear_bhb_loop+0x35/0x90 [ 3596.556766][T15201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3596.562647][T15201] RIP: 0033:0x7f43ccf7e719 [ 3596.567046][T15201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3596.586642][T15201] RSP: 002b:00007f43cde57038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 3596.595057][T15201] RAX: ffffffffffffffda RBX: 00007f43cd135f80 RCX: 00007f43ccf7e719 [ 3596.603015][T15201] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000006 [ 3596.610976][T15201] RBP: 00007f43ccff175e R08: 0000000000000008 R09: 0000000000000000 [ 3596.618929][T15201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3596.626888][T15201] R13: 0000000000000000 R14: 00007f43cd135f80 R15: 00007ffc3a5236e8 [ 3596.634878][T15201] [ 3596.766580][T14376] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 3597.116471][T14376] usb 5-1: device not accepting address 59, error -71