last executing test programs: 15m37.062087019s ago: executing program 0 (id=1): r0 = socket(0x10, 0xe6da5f8cfe0f1066, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000042003303"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) recvmmsg(r2, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000280)=""/193, 0xc1}, {&(0x7f0000000000)=""/194, 0xc2}, {&(0x7f00000005c0)=""/4101, 0x1005}, {&(0x7f00000001c0)=""/92, 0x5c}], 0x4}, 0x1}], 0x4f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rseq(&(0x7f00000006c0), 0x20, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r1, @ANYBLOB="000000000d1c0000300012800e000100697036657200000014000700ff070000000000000000000000000001"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x12) 15m35.697703429s ago: executing program 0 (id=9): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000500)=0xf, 0x4) setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0) socket(0x10, 0x80002, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x0, 0xffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000180)={r1, 0x80000}) r2 = socket$packet(0x11, 0x2, 0x300) dup3(0xffffffffffffffff, r2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) keyctl$clear(0x3, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r5 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r6 = fanotify_init(0xf00, 0x1) fanotify_mark(r6, 0x105, 0x4000996f, r5, 0x0) fallocate(r4, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r4, 0xffffd000) 15m35.582848323s ago: executing program 1 (id=2): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8abb29e09f442f35, r0, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg$unix(r5, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000380)="34f21e", 0x3}], 0x1}}], 0x1, 0x10) r6 = socket(0x40000000015, 0x5, 0x0) socket$rxrpc(0x21, 0x2, 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r7, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}}}, 0x24) bind$inet6(r6, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast1, 0xfffffffd}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000069113200000000008510000002000000850000000500000095000000dd3700009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 15m33.174144171s ago: executing program 1 (id=12): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x13, r1, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x21, &(0x7f0000000180)=[@in={0x2, 0x0, @local}], 0x10) sched_setaffinity(0x0, 0xfffffffffffffe68, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) r4 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000034000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x20000009, @mcast1, 0x4}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000480)={0x45, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_buf(r4, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448dd, &(0x7f0000000880)) 15m31.033520141s ago: executing program 0 (id=15): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x94, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x2, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x3}}}}}]}}]}}, 0x0) pipe2$watch_queue(0x0, 0x80) r2 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0xb0) syz_usb_control_io$hid(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r4], 0x68}}, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x3, {0x0, 0x0, 0x0, r4, {0x7, 0x6}, {0xd, 0x5}, {0x11, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 15m29.474215631s ago: executing program 1 (id=17): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000009, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000380)={0x2b, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f00000002c0)={0x28, 0x3, 0x0, r6, 0x0, 0x0, 0xdead, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r6, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, &(0x7f0000000040)={0x10, 0x1, r7}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) unshare(0x28000600) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103", @ANYRESHEX], 0x0) syz_open_dev$evdev(&(0x7f0000000200), 0xe7d7, 0x2100) syz_usb_disconnect(r8) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x800001f, 0x7b, 0x800000000000, 0x6, 0x1000000004, 0xa9d, 0x8f, 0xffffffffffffffff}, 0x0, 0x0) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f00000001c0)={0x8, r7}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @win={{0x3ac, 0x5, 0x2bc, 0x6d}, 0x5, 0xd, &(0x7f0000000300)={{0x5, 0x5cc, 0xfffffff7, 0x1}}, 0x452, &(0x7f0000000340)="9c", 0x22}}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2) 15m27.774972254s ago: executing program 0 (id=20): r0 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$binfmt_script(r0, &(0x7f0000002200)={'#! ', './file1', [{0x20, 'llA\xf0\x15x\xe9}c)\xf6t\x15\x1f\vBxX@\xdd\xeb\x15\x88\xec\xc4\x94{\x82\xe6\x88\xf2\xe9\xbf\xf2^E\xcdU3\xd7\xf9\xee\x01\x93\xf5\x8f\x82\xfco\xdc\xca\xbf\x92Z\xe1\x8f\xcaM\xea\x82\fNS\x99\x93\b\xb1\x1ad\xf02\xd3\xbb\xb2\xe0\xc7\\\xfc\xb8\xd6\xa6\t\x16R\x9aY(\x03\x9bl/\xd3}\bc<>\xcb\xb2JQh/T\xe1ei\xa5\xcd\x7f\xa5WIfg)\xf4X\xf8\xff\xfc\xf8\xdf\b\x94\xc6BE\xae\x8a\xcbH)\xb3)\xb4\x1d\xb3Aq\x06\x15\xc9\x92\x16\x16tB\x1bMRj\xa9-[$\xbc\x19\'>\xb1\xed\xe9\xbaW\xbf_z\x1c\xc2\xd82@\r\xb4`\xacAQ\x82F:\xce\xcf\xfeh(\xdbf\x0f\x00\xde8:\x9a\x06#?\xd9\x15\xe34`\xc7\xb8\xc8\x1d\xec\xc8\xa9\xa0w\xa5s\xdd\f\x96D\x88\xcd\xa7\x105\x8d\xe1\xca\xb3o~\xc4W,\xbd\x02o\xec\xde\f\x99=X\xde}4\x93\xdc\xfe\x8c\x98\xf81\xa2e\x15\x87\x99\r\xd7\x9e\x05_Q\xc0c$w\x95kon`(\x90\xea8r\x99+T)`\xdd7=\xb6m\xe0G\x8e_g\xdbU\xd4\x9aa0\\\xa5\x88DXp\xf6\xb6`\xcc\xd3\x82\x04\xdf\xa2\xe2X\xad\xa0\xfc\xbb\x9aHP\xd26\xfc\xcb\x11\xb0jl\xda\xce~\x85\x06\x84Sh;9\x95\xd0\x9c\x02\a\x11\xc7\x82\xb248*\xa3\x9e\x8b\xe6F\xac\xb5\x18\x10X\xbc\x84]\x13(\x86m\x80'}]}, 0x17d) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r1, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x4}, {}, @time=@time={0x7, 0xe}}, {0x0, 0x0, 0x0, 0x5, @time={0xb, 0x8}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"272be5806cd46d37ea9a65a0"}}, {0x0, 0x0, 0x0, 0x0, @tick=0x3, {}, {0x0, 0xf0}, @ext={0x1000, &(0x7f0000000640)="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"}}], 0x70) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000600)=""/108, 0x6c}, {&(0x7f0000000180)=""/256, 0x100}], 0x2}, 0x60}], 0x1, 0x10042, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000008480)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3], 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x40080) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r5, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) r6 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchownat(r7, &(0x7f0000000080)='.\x00', 0xffffffffffffffff, 0x0, 0x0) 15m26.630623523s ago: executing program 0 (id=23): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f00000002c0)={0x28, 0x3, r7, r8, 0x0, 0x0, 0xdead, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000180)={0x52, 0x5, r8, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r4, 0x3b8b, &(0x7f0000000040)={0x10, 0x1, r9}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @win={{0x3ac, 0x5, 0x2bc, 0x6d}, 0x5, 0xd, &(0x7f0000000300)={{0x5, 0x5cc, 0xfffffff7, 0x1}}, 0x452, &(0x7f0000000340)="9c", 0x22}}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r10 = io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf0}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r10, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 15m13.70196776s ago: executing program 32 (id=17): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000009, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000380)={0x2b, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f00000002c0)={0x28, 0x3, 0x0, r6, 0x0, 0x0, 0xdead, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r6, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, &(0x7f0000000040)={0x10, 0x1, r7}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) unshare(0x28000600) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103", @ANYRESHEX], 0x0) syz_open_dev$evdev(&(0x7f0000000200), 0xe7d7, 0x2100) syz_usb_disconnect(r8) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x800001f, 0x7b, 0x800000000000, 0x6, 0x1000000004, 0xa9d, 0x8f, 0xffffffffffffffff}, 0x0, 0x0) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f00000001c0)={0x8, r7}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @win={{0x3ac, 0x5, 0x2bc, 0x6d}, 0x5, 0xd, &(0x7f0000000300)={{0x5, 0x5cc, 0xfffffff7, 0x1}}, 0x452, &(0x7f0000000340)="9c", 0x22}}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2) 15m10.401055822s ago: executing program 33 (id=23): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000380)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f00000002c0)={0x28, 0x3, r7, r8, 0x0, 0x0, 0xdead, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000180)={0x52, 0x5, r8, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x5}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r4, 0x3b8b, &(0x7f0000000040)={0x10, 0x1, r9}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x18) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0x9, @win={{0x3ac, 0x5, 0x2bc, 0x6d}, 0x5, 0xd, &(0x7f0000000300)={{0x5, 0x5cc, 0xfffffff7, 0x1}}, 0x452, &(0x7f0000000340)="9c", 0x22}}, 0xfffffffd}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r10 = io_uring_setup(0x549c, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf0}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r10, 0x13, &(0x7f0000000400)=[0xe758, 0x8], 0x2) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 11m35.996133469s ago: executing program 2 (id=475): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000400000000000000000000e2ffffff000000000000000000", @ANYRES32=0x0], 0x30}], 0x1, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x7, &(0x7f00000000c0)=0x182b, 0x4) setsockopt$inet_int(r4, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)={0x24, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x23}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 11m35.591821663s ago: executing program 2 (id=477): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 11m33.331323974s ago: executing program 2 (id=485): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRES32=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="00000f00002727f3f0"], 0x30) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, 0x0, 0x20000080) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000006c0)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x6, 0x3, 0xd, 0xa, 0xb9, 0xfffffff8, 0x5}, 0x9c) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xc, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r6, 0x2, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x15, 0x0, 0x0) syz_fuse_handle_req(r4, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x3fffffffffffe, {0x0, 0x200000000, 0x3, 0x8, 0x0, 0x0, {0x0, 0x10002, 0x200000000000, 0xd, 0xdb5a, 0x100, 0x10000, 0x2, 0x80000000, 0xa000, 0xd, 0x0, 0x0, 0x6, 0xa0}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000004300)={0x50, 0x0, 0x0, {0x7, 0x26, 0x8, 0xfffffffff323c746, 0x0, 0xfffc, 0x6, 0x5d3186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x108) write$FUSE_INTERRUPT(r4, &(0x7f0000000040)={0x10, 0xffffffffffffffda}, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) 11m31.951949546s ago: executing program 2 (id=490): creat(&(0x7f00000002c0)='./file0\x00', 0x109) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x18) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) 11m30.720398025s ago: executing program 2 (id=492): creat(&(0x7f0000000340)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r4) ioctl$KVM_CHECK_EXTENSION(r5, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000040)={0x0, 0x399000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000080)={0x1000, 0x100000, 0x8}) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) write$binfmt_misc(r6, &(0x7f0000000400)="201f5c2289d4831f6d4a39209468014e000d33fcfd9b156f1154f019012648fb2077aa4470a01e1f0e8e0eba12fab654805ca48a8b126a5ed791fd505cd0b19486ea71fe3d4ba5fa0e8b968a8367c0a42e863532408e8b326c72efd412d3a550f2ff47384bcccc29873f6755cd2e55560ed554bb11c36b5d6e8e0839a5f27d23741953ae28dc49b9d7747b4c3ea4528e8d63d4c03edeca6ba690197c4571bdcee9cdfd601aeac5785cdf0cc9f7afa2a764f0575ebf0a8f8242613aa23ed2e6b06690fe1cb8d2b4eb410b53ff206c90620219f9", 0xd3) truncate(&(0x7f0000000080)='./file0\x00', 0x800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x80) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x14\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x5) fallocate(r9, 0x0, 0x400000000000000, 0x7) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_EXPR={0x7, 0x11, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFT_MSG_NEWSETELEM={0x90, 0xc, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0xffffffff}, @NFTA_SET_ELEM_LIST_SET={0x0, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x0, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x80) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000200000109000200733c7a31000000000900010073797a3100000004"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r8) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 11m28.473546714s ago: executing program 2 (id=497): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x5, @mcast1}}}, &(0x7f0000000040)=0x84) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r6, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r4, 0x3b8d, &(0x7f0000000280)={0x20, r8, &(0x7f0000000480)=[{0x1, 0x1}, {0x0, 0x2}], 0xdeadbeef, 0x8, 0x200000b9}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r3, 0x3}, 0x8) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0xf) r10 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb010203010902240001000020000904c40102fffd0180090502803baed700000905820200"], 0x0) syz_usb_control_io$uac1(r10, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000040)=ANY=[]}, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) ioctl$BLKPG(r12, 0x1269, &(0x7f0000000300)={0x2, 0x0, 0x0, 0x0}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r15 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r15, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r14, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 11m12.485199822s ago: executing program 34 (id=497): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x1002, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x5, @mcast1}}}, &(0x7f0000000040)=0x84) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r4, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r6, r5, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r4, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r6, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r4, 0x3b8d, &(0x7f0000000280)={0x20, r8, &(0x7f0000000480)=[{0x1, 0x1}, {0x0, 0x2}], 0xdeadbeef, 0x8, 0x200000b9}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000080)={r3, 0x3}, 0x8) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000080)=0xf) r10 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000092ecc620ac05c2773aeb010203010902240001000020000904c40102fffd0180090502803baed700000905820200"], 0x0) syz_usb_control_io$uac1(r10, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000040)=ANY=[]}, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) ioctl$BLKPG(r12, 0x1269, &(0x7f0000000300)={0x2, 0x0, 0x0, 0x0}) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r14, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r15 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r15, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r14, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 10m55.872641097s ago: executing program 5 (id=558): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208800, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x3c, r4, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x20}}}]}, 0x3c}}, 0x0) 10m54.47741754s ago: executing program 5 (id=559): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r1, 0x29, 0x22, &(0x7f0000000100)="2667854ba216cb4ebffa875f07efe5d560571b6a16b13649b54046f751836422545a83ef68be33144a16f8ff46d9d26539bccdd4aeadb21bc442e1e8c56f0cd3f0753b0bd69b8265ed9297a6b56dd0ba9b5e1747ea3f5ec6d273fc8900e4d04b9f3c3054e88963906b5bb262acc04fa91456a9365045c671d4d7b9b1715f188e8c4fe2890a3aa50a54443ea5f475c1cb9b42755378d648d540c4bcfba22de932e4b822415ad0d41b5968ec2d915d64f1d5b87e88e4200814727b9316ef4b1f66bf61ff32a67c", 0xc6) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0xb0, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_PROP_LIST={0x90, 0x34, 0x0, 0x1, [{0x14, 0x35, 'bridge_slave_0\x00'}, {0x14, 0x35, 'tunl0\x00'}, {0x14, 0x35, 'veth0_to_team\x00'}, {0x14, 0x35, 'wlan0\x00'}, {0x14, 0x35, 'syz_tun\x00'}, {0x14, 0x35, 'veth0_macvtap\x00'}, {0x14, 0x35, 'ip6gretap0\x00'}]}]}, 0xb0}}, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_ifreq(r2, 0xf6efca66e833c7b4, &(0x7f0000000200)={'nr0\x00', @ifru_flags=0x8000}) 10m53.037133255s ago: executing program 5 (id=562): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x20040011) write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x0, 0xe8, 0xf2, &(0x7f0000000300)="7fba11522176e040d570059b0140bf52256ed0b18331ea75c989247eb3dba9e02eada03a75495b055eca6a739c2f73ec78d9bcf106c6e9ba92b19d7c790a2e9435d9a039081df66b618b686f0c22970d2ee568ccfa934eac63aac5cb4c7fa7f929031197a9a6969a5545d8cbcf102d8e2147d5e49db6a07928d0f17a53efa72cea400dcdfe6c3811d924f21d705daededb6fe581a7334cbf77fc854f99d2e0896aeaad6d76250e6124d285ff45fecea3dff333b617da85d08ba94580dcdcb141c967064e067e6a36cceb0a95652748b1a2a64f7174ffa97b77374c4ea8b70e5021a26b077c1915ad", &(0x7f0000000400)=""/242, 0x1, 0x0, 0x6b, 0xd9, &(0x7f0000000500)="8e0cd9c833cb183a724d838fc6cd8dd6642d5c794d731dcd4cd20c985befc9f43f84362fb7b6c73ed4d46887e8954a51134aeff03919f3d1561ea7f10849fae15bfb69d62831c18a8872a0262451712326b5f42e61f7a451bb7520b0419bfe17a4d1f8ee3669a784b88abd", &(0x7f0000000580)="537c2b82d03c286a9abb8426478931aacfbd2c5c105d44361e20309d80f71054b43d92c81ceb12f82d281a33948a3a4d74039e8f1e8b88c7deb91a05c3abf13ee1d76d3c9579b6fc1820e8aac73c9fc51012e25c397d1da6bc9fb4ac34c02fed86667403ff367902ef87f983c136ff5763e9dcbc5d31a0de3eb648a5bbf01a05f827bcbc8b6d5a2e8bbf4c476baf3062059ee85672b750fc7f0fe6c97d287d35ab034d2e370354b7994e5e785e754a16c7a8ca5b3dfa41b74fd2feeb61051b82d507a522aa8ab095e54f70694b65fc04df83032c5462b170f7", 0x0, 0x0, 0x1}, 0x50) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0x5c}, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x80000000, 0x36}}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x400c010}, 0x4004805) write$sndseq(0xffffffffffffffff, &(0x7f0000000080)=[{0x1e, 0x0, 0x8, 0xfd, @time={0x7ffffffd, 0x4}, {}, {}, @result={0x1f00}}], 0x1c) 10m51.287898306s ago: executing program 5 (id=566): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001580), 0x83, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000008c0)=r2, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000140)={0x28, 0x10000, 0x0, 0x0, 0xbf6e5, 0xfffffffffffffffc, 0x6, 0x3bf96e}) openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES64=r0], 0xbb8}, 0x1, 0x0, 0x0, 0x2000}, 0x4004040) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r4) socket$inet_icmp(0x2, 0x2, 0x1) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r5, 0x4b33, 0x0) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) r6 = getpid() syz_pidfd_open(r6, 0x0) prlimit64(0xffffffffffffffff, 0x4, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) faccessat2(0xffffffffffffffff, 0x0, 0xb1, 0x700) setpgid(r7, 0x0) setpgid(0x0, r7) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x200000, &(0x7f0000000500)=ANY=[]) 10m50.694867011s ago: executing program 5 (id=568): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x208800, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x3c, r4, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x20}}}]}, 0x3c}}, 0x0) 10m46.170462262s ago: executing program 5 (id=578): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mq_unlink(0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3}, 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = msgget$private(0x0, 0x123) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44090000000003042abd7000000000000000040032469ee7a080904d98a5b313173001a5798a0cc0d37cc3ad2be4c82c2e78881f7dc2fe3fdd4482264fec8d112478c35f16c1c084022576e03356ed78ebdafdd0d04b6342b142c84a3d08669185a828c61225349aa3fa72610e7977d319314d5d", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1], 0x44}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYRES16], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='net_prio.prioidx\x00', 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) msgrcv(r4, 0x0, 0x0, 0x3, 0x3000) msgsnd(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="01a1700000846a27e546"], 0x8, 0x800) syz_open_dev$sg(0x0, 0x6, 0x41c005) socket$netlink(0x10, 0x3, 0x0) 10m45.431823614s ago: executing program 35 (id=578): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) mq_unlink(0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3}, 0x10) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = msgget$private(0x0, 0x123) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44090000000003042abd7000000000000000040032469ee7a080904d98a5b313173001a5798a0cc0d37cc3ad2be4c82c2e78881f7dc2fe3fdd4482264fec8d112478c35f16c1c084022576e03356ed78ebdafdd0d04b6342b142c84a3d08669185a828c61225349aa3fa72610e7977d319314d5d", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r1], 0x44}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYRES16], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='net_prio.prioidx\x00', 0x26e1, 0x0) close(r5) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008dffff"}) msgrcv(r4, 0x0, 0x0, 0x3, 0x3000) msgsnd(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="01a1700000846a27e546"], 0x8, 0x800) syz_open_dev$sg(0x0, 0x6, 0x41c005) socket$netlink(0x10, 0x3, 0x0) 2m3.499306193s ago: executing program 7 (id=1948): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x82000, 0x0) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000100)=0x5) r2 = syz_io_uring_setup(0x31c7, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0xfffffffc}, &(0x7f00000001c0), &(0x7f00000005c0)) syz_io_uring_setup(0x263f, &(0x7f0000000840)={0x0, 0xb8da, 0x186a, 0x0, 0x0, 0x0, r2}, 0x0, 0x0) syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x2, 0x0, 0x0, r2}, &(0x7f00000002c0), &(0x7f0000000300)) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2}}], {0x14}}, 0x68}}, 0x0) 2m3.199644538s ago: executing program 7 (id=1953): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) gettid() socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0x4]}, 0x0, &(0x7f0000000100)={0x0, 0x989680}, 0x8) gettid() futex(&(0x7f00000002c0)=0x2, 0xb, 0x2, &(0x7f0000000300)={0x77359400}, &(0x7f00000004c0)=0x1, 0x2) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x27) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r2, 0x29, 0xc8, &(0x7f0000000040), 0x4) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x1}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, &(0x7f0000001480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x27, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_gettime(r5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0) 2m2.236106529s ago: executing program 7 (id=1958): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400c404) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, 0x0, 0x240048c1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f0000000080)='syzkaller\x00', 0x4}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) r6 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000400)=0x10, 0x4) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) 2m1.017876014s ago: executing program 7 (id=1961): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e25, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) shutdown(r0, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x0, 0x1b}, 0x9c) (fail_nth: 4) 2m0.425066926s ago: executing program 7 (id=1964): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x10005, @mcast2, 0x2}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) fallocate(r1, 0x0, 0x0, 0xb) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001980)={0x9, {"a2e3ad084fc752f91b2909094bf70e0dd038e7ff7fc6e5539b324c078b089b34343b6d1a0890e0878f0e1ac6e7049b076d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31300d326d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df0784c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b4bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d618e462071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4000000000000007fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af44863c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000510b00", 0x1000}}, 0x1006) syz_emit_ethernet(0xd2, &(0x7f0000000100)={@random="79ee7ca42eea", @broadcast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00\b\x00', 0x9c, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], {0x4e1d, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "cb7dc5b933b90e057d0f10f8dbafe1c5dc517190adc9e9df57006c0e7446932b", "409d040bdc4b67e75c072feac02644e5d0b3568022d7fb9b2fa997a0e772f2fb2efd0af5adb8d4e81d1861a4ef0c3d02", "9de311b0ac89c14078b9309cea263bba22e3f9f6b4f83580566b5652", {"fc9ebfc89892e26f4ec4b151ce631848", "e5b9bb000000f6a500"}}}}}}}}, 0x0) 2m0.202912034s ago: executing program 7 (id=1966): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r4, r5, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r6, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r6, r2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m45.011008511s ago: executing program 36 (id=1966): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r4, r5, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r6, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r6, r2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m18.107679913s ago: executing program 3 (id=2057): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpgrp(0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) 1m13.63892339s ago: executing program 3 (id=2066): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) socket$kcm(0x10, 0x2, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r1, 0x4}, 0x50) syz_usb_ep_write(0xffffffffffffffff, 0x4, 0x11, &(0x7f0000000000)="8b480485ba1db7113174de71d883b3b0f3") sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r3, 0x89f5, &(0x7f0000000800)={'sit0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r6, 0x1, 0x2, 0x0, {{}, {0x0, 0x4102}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) ioctl$MON_IOCX_MFETCH(r5, 0xc0109207, &(0x7f0000000000)={0x0}) ioctl$MON_IOCX_GETX(r5, 0x80089203, 0x0) 1m11.754777197s ago: executing program 3 (id=2071): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)=0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x48, r2, 0x1, 0xffffffff, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000000)={0x80fb, 0x1}) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, 0x0, r3, 0x0, 0x46) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001100)={r3, &(0x7f0000000080)="632409134efde9f7b76e559c9a6779b635a529f69eac6eb82f7e30af664878992077d8f87eced6abd76ca9b9200a884fb47b4a6f30b51a4d60981b1404cb7c28ff44f9837dc639d20218285c01d3c141504caad7093d03b5a0850393ecb51fbbb21700f41ce0676ae8339eed5073957f067ed5bbca1239c6c1fcf0d6a1533087328a62352c977e41e077054139558926f1814f9dbac75c0d29956886117b084b1c92c7505d7a680af53c565089034621015ee0ad00c3bea1ef3138c2eb7c1596dc1fa6ccf6142b47e3bba6f9e3fa709dbaa434ae2acef19f1b40a6686defbb9a9e98d5222e7e9fbb0df0d0ab2d544b4138ccb26f2e2c07252b21b06011e0370a5109b2a0b98d06a01d4883c5c4287bf89514fece8e70e62f5df6f679a932d8bce4cfa06a5275d6fad6e6f2550789fe30c31927802631e8b797e8a24f76a116c1d70dae55321062646a7d082f519728e1781ad1b83436ac9f908a7f671c54683161fe28d49748bb46a75995b524b01de922556f09d7b3aea33ef7077f793d7e803d23a731e0a48269bda0f03eeff054589ccb5cc8de3ad84b9107a034e2f64c09c5a471157e7f3986af15a659e40d88b396d97f38e4bcd4add81876b9cdbc8d42e12a259aa4e71ce3dda6c21338689e0e68cbbcc28020437fd2d4cd7ab1cb78ca9786192944e845344835902d96e4e8d2252aabda911a713d013887a129b7afa79249b279953c7a4aae98929c9a13f5cdc284cdfe8ae7609cc251b891d72411cbfffa6b3501fbb329c21d99b4136d27078dbf7ceb589755c07f368164c19c31519fabc30269d518792ecb3be241b0d5e4e6824901c7b255259ee30369c7f1e68b05812d1fb61e2e630de5261ace960a9ed78af5c7810501eac5d809fbfd9c493e60fb4deed8ad5e860fe7b12889018c32fb8792d8e6fbf1e201d9b5f5096c18549c964eda8f180dda63b963a108a4379c556f7c7b528235da0bb3a8930f03c83aca96cd9c194b26bde17606c62d633b94c1b7e6efacdeaedee0cd7d636668f0d199cb00e85afe6123f7d71506cf3bf1694be723d4f1a0f56fcab1bca1a99e2f0465ec7b0855f924667a578810a56fd9b00672f6b33c53dd697be75a7d19afaad2ec6951c413b52e4458694b9c8b48c1cc7033a89503f29ace69688606a3ce08c6a062e2aa6af75263b14fe1afb90ddd6a1d511af12e70fa449bdf2b4cc278bb26ee9922038ece52736d21a8c89143ea7b9f0450bc909c4d8c59045fd04ca753ee6e78f4483c58ffd7d1b72d1085fbcd0c58877b7420c065f56eb23627caa0c2633faadcc4e848605c5f0908068c314d916f6d4f82113bb79d64e32180f570d5989a7e4413c30dc8dc33a168cc432deceb903aa0a44fc8ef64b5e9f67f03abe479b768e8c7942e476b7fd10c6d53bbc18d9cf593df23324af22b970cf8fc1b44b70ebcfda2532b26a584700aa0ae3152c6dde4255fc429a7fc7ff01155cc32b1bbdb2b0c9b9a5936ba103dfa93e6b8bd129da92cd1e45635011825e3fc6704125952895dec7d4927e304fa961cea8ba12df04b3d73c4db35539b38f10a6668b46fb3d0cbaf2ea8bba9dc2e7bc560b8467eabbc97adebef6b15c426b380eca30eea750a3951b743c610aaf3b8723e74afe0aeea634ddf92187e0d531ceeacb74c6db81b8ae449393a93c1aa9478d89f85a9e689aca4773e6efe406373cff872bc53139d8d05a03f9ec5838bfdf017ff0fad229045c519c4f88db43d9d65698c6b4de6de297852ad4efe4c6611808190dde0014a41cfc38611494434c615d96b0f5d24ebd022f7310daeac8f38149c33b79a278b374f24880532592d041aa3776b1d5daa803eabebe7887385b73eb908c67372c11bb97a493817888da161fbd78a57dd9e9286d046792cd92e2cb237596e5e41755d4f8d73b8f294c09b3fbb1a8f06196c53926de942afab2348967a4019bbe2aa8308030b12379037ab94750b8a33e7fc80ab621a33c37e0fc23fc8ae6f7e1e1da03c4452122f7930fa5b41463a4f439095ce4431f5c9ceee02d5fb8a216abed20db955437dd673ecf757f093c67343088c3a73cab1db20e82c0513e3ee5c5763591da2eecbf8cae35b49976aee7d2517d8811d189bc945e14d23613698c4d561524939b7a3bdb0838ddb2144f31d8bde0f2a1723e271534d3b534727fd7ecb736de25dafcf7291cd102e8572cc52186c9ffb5ded6539d4c1f947479063fc57fd4fd0069b509c716905bbe99d827edb5b89afe8c1b4b7e894faf41cbc64274c717db6b91b38a5c3e62628cd7c117d1b3e17b17bb4183c639f604a700ee16deb3fcc18bc14e5c1a0bc7915c92cfbf4e7ee461e623ac622758bca924d331d28dc14cd6401981b4be9610c2a43db07c1087c0a1e856b35162a104de4e6e3732b9b80035aa97a859001bff9693eb0fad53a8a823b6110ed5a04eeb2580f37117230dbb57829dedf7501d36819a821cd636790b5116168ff76eb825699be464a9c688964b7133697a91c62d0f9dbaea351df5f459c83744b646745fb657ba6eddaa637838668852122d5c61d33c6047a101c59780e21fc7553fd8ebd272e951fefe35d32b8c0557b1a76722763d4b3dd49da8076a17e55999c0283ea864bc77d83c91d2a4c35f90bf9ebafaad3602c1a89121d9475e7c7c9e534fcfac25c85163908528d3c3a80e7716967ba04c2dc2b3e176c7d7803a39c594657fb321d8f9f6db602a8c0679a514faf16ecc669d78afbc66f9b9eaa7bc4f57915134484b239493765cb97923e5ecad6c54f09ff76ea8d98ee127043ec2a30b44a5673a9576cdc7fbe93864774487d92af8327639a6af96eb08618925da25d85c41331c717a0ec8108cdfa63739878a6e5de97dff9958d2dfd57a9e908ff65981f38cc84fd186223ed189be0004abe515f9cecf8421a31e33371f6511961420b01cb3017b560d27475771bfdedf43f3658d754921c134406bbdf4fd15c1fc0fcc39689996d78b2ab2dcab05921124a20905f0bca3fe40861d847426f186b5e462603f1fa5dabe6fc80fff124b6395ab2442a803428d82fa5a74eea2a9fbabc3363af019425d9833c663d8413543f0ec34c12e5d0a00e7bc93fb290821b5139e3a90b0983cefed76c432554b9e32088dba03de1c0962f54874e17464baa7ac1693710c017e1e3d6cc6407ce8528adcaed2d5f1fa0a44c53cbc5dcf5c00e96bd085d42d05a81c2470d3c1587b1aea88bbe91ef560ccfd9a8688b275366998ac288f3cac57b5324310e315701246e9901259188767d7ed253eda6297aaccd5b4ead03b8ac230ab44a0c98ab9bd5308f6316741a7452e418c8632986d884fc63e0c28cf2969bddb97bcd6b72f38568053c23ccbd71373dbe5812f1c94d24a4857a8f1bf5dab2b8198a3fe55fafc8913a4024635ac9f5756dc740758e21ee990936e8706c58155417bb8dd75f0e40a5ba302e5bc683b5716eb303b308bbdaadf04291add25eac4e23d798f38ce88a8d143de98d7d6b369e5710f401b80c1c82c85585d6639a67d7cf38a7158b51c7321ce428243cd29d421ffb434add0a722282f422e9607daf3f12035673864390115d45d4f523aba8e57c88b6a8dac00376a422a1d2d574094618100e3423b991c4646188d8fcca3b65e0bd1f20a29bed4e9f4e4b7b0532cee95a5212802c71eef44aedfe302b1b468e0323fb92b13ef9788d142829a5e28cf2d09ad03123ea4c1c750ac6a024d18f316be67925155bfb85ce9d5b5b99416f509fe2452b8ca94e6f63d7da2b08ee1dcce9fcbeb1dbb0c829d34641f093717e5648e13cb7908c0ee2d8408fc0c5fe7528981e776c27306b5f66b6f4c5e460f02d241ae1ce6361ddecf711d2f0b99d9d915685b0df36fb00f5eb5b63ec7f78c8e1855490f4f2dcc355dc7b99b05697c33f0675dff600b5f082ee5047d725d0f876c55b6280cef15fb230454035ce301dbdbadb420903085fe24b40efdfffa77aa6bce9ccdbfd94a323fe7fc3deb4960a399ba05f257b6e630c85ce98999914ab1e3cac2126ef27c49b198d7cab9ba5d71b3d2618ee76ec7f84b2534a4001869d09d5115f101a62eda1034ca61780b2b1659b3925f7848a84d6dffefd91659f24b4627917d1263aca9586f32fe4d216c041a48d896fa53876a9be10da92d82cf9d217f6956a4db1e1588de9ba5c65e556971eab0bc390148872c39bcc815660db2fa4668aea5fad99709b8983b2371c9dae86370baa1b88066267872cc8cb6b56b71c966a108ffe8c3b3610bebeb575ee36a8c5c91f15e176cd8bc5ec06086cebdbfb944d3f05405babb31dab0e5bdb42672ac90f6a3ba99e50f4c2f213937b7e419452cfcef18d95741f34ce6c4a3545d2b6b0ea85e71a176c78845526791b6dda7142b5ea7642a180f0adf2d56b3657cb1a7ff6ff316249468f3b76dc284ae5e91e94999e3206fedcca86496eeca96b19928bba3ad01dd891c4a41f7b8b89f8ca75a96d48b0164ee83768d6fa5ba1050571829aba6c148869e4d26f3516a1001b93b60db5e0942cc197bc4105ae1ebafcf5138847a946296f6cb5125f3ef1d82631efdc2faedd31fd7c893bf153e69246151d8ba0455b33670ef7e51cf4a66d3d91cb6297546af8693941b335b6e93840b3da4846c058285f817801522f34cb3618e57d59ab24c34f0d1b85b1047e9584f97200757070a0c261a8e3906e4b0967810b9872cc18969661c6b3abb0310cd5c6443205caf18380cf83204ee51316cb2647a4dd62ab6ff3e81234acbe3c5b744f5039b5a067c490d0378518a663ad1d277cffc5f091147a8bd071450d46079fc5619d9ca691e8491dba654815675027035f67b8cf7440d7108883d31296c2946ad4cfe8b71422d3b6d0016f0e07c041b193a98ae130afa2f7607d0bdbeebc3d41aca583a25f19df15e2fd428c4b288f0e5423a2aa96e82dbc12cc9211f056735f57e761b932b410fb7a1aa190789af4c02deeb2da10f1b95b3edbb733b5e812ca1a3a07d0cb14b67a14d48b61afbb5036494596f7a2b0b5493bd4663885cceae123a90e6e339687eada9cdc12e0ad39ea845c602209e13c4be55a1aad0cfa8f9e8cb6b4fbd27bfd1e8e8e7f1706e8286c3054c103562cb9908e41d6c3d349bf90ef66babed878fbb9d4183c19a91757089c903ef6fc1278ae7b46e0f4e9cad8e636e63b6e8fe1083d7de304c18c879cf295308e2a3c06087eeb27b07d5b3906d8eee44fd2e6e1b95b66aefdef807033d620bf462b59951281a9a66da665d2dac1a892daec2b763edd6d3da655c0d8dbd2da4ad78aa13be3655e50eaecf765ba1bc88ff4bf8227add2db8e581b0abacc1dcda09777071beb78d2757643967d0b765ae75ac6637ad58bcb73f25933d07cc9d8d01a9bfd8dab72bb1a82aa1bacb063be90eedc21111c6a5b9b135811acfed9be5357eb9f31131026cbf0c2a426c3577524a2bc5671f03331024fc11a4a8b5b00240b1ef33bb53fd1c345684f469c03b57615192cb6ad3292e1700b8f0962a40e4911de822786163e851dbbae2e11ca091100ae97be7420910cb52cfd504ce47fa9b254042542cff0299335cd624ee1259afa7faebcd58b9e3a0cc393265f4d7dcc46fa41dac9cc90136c3a4bf4bf8410d65faef0e9654a07c14cd05482f956c06e836b00a6010e4fb34aed5d609d3c6f77f16973eb589dcba666513c1f691982815e69005a383556afa0eede9e24a0edb558ac99dbd2bc7a42847d03d82f9e20e4c98b7505713509d64ee1157112286e", &(0x7f0000001080)=""/122}, 0x20) write$char_usb(r3, &(0x7f0000001180)="d632aab6ca145d24f523a07de5484b6eb8cae100e906f819f6d779ea854e1cb74575091260b31a98fd68e81896266a340a90d30a597bacb9c1268defd89b33a485cf0244d05e70409a1ef6cf7f35e69e51ac674d64cc75fddf0d53b74eb4378b1e723d939de4cd2d1652a2fd5c154ecc5cc06897e190e7b5359b2c692f3dfbdc124d09e37ff15374d775f952336cfda22d6f7b6944c47b23c28a43f757fed253454abab69fe3539f215f1275456033e0b141ab5c7b62e7e9e94fdd99d830fbd0f401b4e3df73af2b0fb9f144ec7246e614b5984200de5aeb9e328dc784957c21bdac7221a9bd900ab7bd7ba2d9f7589614a58b28", 0x42) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000001140)={0x40, r3, 0x2}) 1m11.327837247s ago: executing program 3 (id=2072): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x3, 0x4}}, 0x10, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x88) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x5d032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0xc8) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000002680)="1e", 0x1}], 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000340)={0x0, 0x3cf9}, &(0x7f00000003c0)=0x8) close(0x4) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0x0]) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 1m10.449331727s ago: executing program 3 (id=2073): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[@ANYBLOB], 0xb8) dup3(0xffffffffffffffff, r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003700)=[{{&(0x7f0000000500)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43}, 0x4}}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000580)="8002c3868a85c98b95a165a66fe183db952657fc23e97ec448833c18e67d16fb59472de10cd564242169e9438c198b97c688c21e0326952eb9835c2f0762a00ea211169f1f218e", 0x47}, {&(0x7f0000000800)="95208b5e9a02b2c5ff9244e3cd9571e4ce25cc76b67cc2164d04b09d4b47fe58437813b7078ed4fad56622bd56c64985ff31e7fc8b6540b1f4ed656a686968bd0110e4469c96c5fc4242fea697ff2e82c4249f6ed4c48400d478581adb238f00c263b8af6f28827f2e17763a6806700a2a8a28b48ddfe4033cd474d1c060b0f9950dd7956eb9be29ede2ba4cb500056bb99c7850b445908ff4f062a811f05c924f579fff53c23f6cbd09e940bfe626773782b470583b8fcb9f89433ab37e", 0xfffffdd0}, {&(0x7f0000000600)="19867ddbe31467590b1f220db4031b356834f92f47a1e030bc5d874939747439e9080f4ac4adc1bfe99824d318fca509be3c93820887d07bc0401e189bfd582de9a268330c7995285987e13dd40bb7d3", 0x50}, {&(0x7f0000004980)="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", 0x1000}], 0x4}}, {{&(0x7f0000003480)=@can, 0x80, &(0x7f0000003640)=[{&(0x7f0000003500)="d55b101d8439aaf0d2b0784f9190a661004037f27142e618ddaf4f69420b26771bbded1c9baa209d", 0x28}, {&(0x7f0000003540)="4c519b42979279ff4d0d2d3271a9c6590060472bc062efc61e6c80292ff28e5cd6188da0f75eaa44bf0c970eb467030dcf76297bf43afd1db38137efa79883a142a86beef1acb837de14f8739090cc7bbf4e7a49cfff264854e35ada86fc10bc74c5fd079d6af0195fde90932ffb3146ebde4340eb8579c7bc3adf8023d60c8423dfcb5af61e8c29e785468eb3449595f6c703721670b8d0d54672840ee2885d2bcc8198401f5bfc1d5835c9a72e86887ce44e9563116c9898359c9ee08d3bbad8f8", 0xc2}], 0x2, &(0x7f0000003680)=[@txtime={{0x18, 0x1, 0x3d, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x1e29}}], 0x48}}], 0x2, 0x200050c0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x31}, 0x200}}}, 0x84) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0xa, 0x4e24, 0x1, @dev}, 0x1c, 0x0, 0x0, &(0x7f0000000300)}, 0x0) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080088a8ffff0500290001000000", @ANYBLOB="5700000010004b0400000000fcdbdf257af2ff00", @ANYRESHEX], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1m8.883880183s ago: executing program 3 (id=2076): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpgrp(0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) 53.221050997s ago: executing program 37 (id=2076): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpgrp(0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x2) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045540, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) 23.389063617s ago: executing program 8 (id=2150): creat(&(0x7f0000000340)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r4) ioctl$KVM_CHECK_EXTENSION(r5, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000040)={0x0, 0x399000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r4, 0x4020aed2, &(0x7f0000000080)={0x1000, 0x100000, 0x8}) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) write$binfmt_misc(r6, &(0x7f0000000400)="201f5c2289d4831f6d4a39209468014e000d33fcfd9b156f1154f019012648fb2077aa4470a01e1f0e8e0eba12fab654805ca48a8b126a5ed791fd505cd0b19486ea71fe3d4ba5fa0e8b968a8367c0a42e863532408e8b326c72efd412d3a550f2ff47384bcccc29873f6755cd2e55560ed554bb11c36b5d6e8e0839a5f27d23741953ae28dc49b9d7747b4c3ea4528e8d63d4c03edeca6ba690197c4571bdcee9cdfd601aeac5785cdf0cc9f7afa2a764f0575ebf0a8f8242613aa23ed2e6b06690fe1cb8d2b4eb410b53ff206c90620219f9", 0xd3) truncate(&(0x7f0000000080)='./file0\x00', 0x800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x80) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x14\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x5) fallocate(r9, 0x0, 0x400000000000000, 0x7) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_EXPR={0x7, 0x11, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFT_MSG_NEWSETELEM={0x90, 0xc, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0xffffffff}, @NFTA_SET_ELEM_LIST_SET={0x0, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x0, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x80) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000200000109000200733c7a31000000000900010073797a3100000004"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r8) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 20.95131391s ago: executing program 8 (id=2155): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000800000804d20095000000000000002e5fe1d387f50fe5776b4e5c8784159a1944c2bda14c58f7ad544977e62de8f40c550c0139a4e0de20cfd952ddbd51ce299193f068490e25248486b8aa0600000045ab609273e8819202485a9aeb99561220cc57b4e78c3630a6dc046057a3a778e8ea25482a8d5153eefc008182ea4b49a469631c0cdf5688deccd5c3d367c25d9a725fb30cbd1e3a52b9bdf9528eac18d08e273d72a8b0234b194bad0ced0ad17f754a62cbfc25ce41013a9117a49708ab7b00cf68605faf0fdbba77179036825db4da29abe672d71538882ccdfb786a9c0d5c4f7219b470a751c944e8eeee10d92cbe7d7653e02c319570026c00"/273], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000580)='rpcb_unregister\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000031c0)=ANY=[@ANYBLOB="b80000001900010026bd700000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x10) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f00000a3000/0x2000)=nil, 0x2000, 0x8, 0x10010, 0xffffffffffffffff, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0xe}, 0x94) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000fc0)={'bridge_slave_0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYRESHEX=r2, @ANYRES32=r6, @ANYBLOB="8000c6000a000200aaaaaaaaaabb0000060005"], 0x30}}, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='jffs2\x00', 0x0, 0x0) r8 = memfd_create(0x0, 0x2) fcntl$addseals(r8, 0x409, 0x7) (async) fcntl$addseals(r8, 0x409, 0x7) syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) (async) r9 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) mount(&(0x7f0000000180)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x8000, 0x0) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000280)={0x7, @raw_data="aba47109bc8591377f6d859b26e1e9beae5cdef51af0e56244b510d8020851e096c52293aa14f0c3b453d93452fd211c5de98ace86dd92331e8de2a8bca15f7264c4e68083e95940071555f792101c5131dfd212b10a7cf3d6c4ade89910536176932f7168ff5a2fa576e0ea3949e2dec73188081744476bc478e76e3491ca65718ce009cf8affd2e0c08fb1cce81c8786c609f912e34918e0f83b8a81d305bc06a6917992c9ffbf2639ab6f82dfacc93ab17429b298df6ead1d0b75549a052fb3e8783aa9eff741"}) (async) ioctl$VIDIOC_S_FMT(r9, 0xc0d05605, &(0x7f0000000280)={0x7, @raw_data="aba47109bc8591377f6d859b26e1e9beae5cdef51af0e56244b510d8020851e096c52293aa14f0c3b453d93452fd211c5de98ace86dd92331e8de2a8bca15f7264c4e68083e95940071555f792101c5131dfd212b10a7cf3d6c4ade89910536176932f7168ff5a2fa576e0ea3949e2dec73188081744476bc478e76e3491ca65718ce009cf8affd2e0c08fb1cce81c8786c609f912e34918e0f83b8a81d305bc06a6917992c9ffbf2639ab6f82dfacc93ab17429b298df6ead1d0b75549a052fb3e8783aa9eff741"}) syz_usb_connect$uac1(0x5, 0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109028a000301ffa0060904000000010100000a240100000202010207240504062e7d0904010000000000000000010101010200000c2402ec79030420be11d1d109050109758b0620010725010006efff0904020000010200000904"], 0x0) 19.392120626s ago: executing program 4 (id=2157): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000940d18dc12e40000b1fc2d6ee15f194961b26f23", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_setup(0x47b, &(0x7f0000000ac0)={0x0, 0xfffefffe, 0x80, 0x2, 0x4800020}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioperm(0x7, 0x449, 0x7ff) syz_clone3(0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040), 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PPPIOCGMRU(0xffffffffffffffff, 0x80047453, 0x0) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffc000/0x4000)=nil) brk(0x55555ede5ffe) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x0, 0x2b8, 0xb0000010, 0x2, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x248, 0x290, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x10000000, 0x1, 0x7fffffff}}}, @common=@unspec=@limit={{0x48}, {0x0, 0x3}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x123100, 0x0) ioctl$COMEDI_INSN(r5, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xf, &(0x7f00000001c0)=[0x9, 0xfff, 0x4, 0xb, 0x662, 0xfffffff9, 0xe0, 0xfffffff7, 0x9, 0xf5, 0xffffffff, 0xfffffffe, 0x200, 0x3, 0x6], 0x0, 0x7}) 18.243362842s ago: executing program 9 (id=2158): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000000c0)=0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x8abb29e09f442f35, r0, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002640)=@newtaction={0x770, 0x30, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [{0x6b8, 0x1, [@m_ipt={0x254, 0x17, 0x0, 0x0, {{0x8}, {0x198, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0xf1, 0x6, {0x0, 'raw\x00', 0xe, 0xb3, "01df771ed4aa468d466490bb6d3a762752b0276450737133d354ea68c13a92efe99064741e04d8a20e194e30a60295d386bccda0f3007979597e6d03b954a8f914ba7b899f16c20d6d72edd9b6f52db88f3ba2e308499f6252662a51fa4b12868b58f75e27ec9103b8068b9b811e21bd2aa37e31ee1bb8e60ecb8155c8e19ea1c7fdbb9aa819059c61aa86c434a7c8da18ab573d7585bec9c1d4494956d182e7b35a526fd48659ab60beb8f339651c715661a36a876cce3dd7a98863f318caef99752c65346980"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x3d, 0x6, {0xff3b, 'nat\x00', 0x6a, 0xfff, "ec6c358b1b02688c45d6891b8d39befc710e9c"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x3ff}, @TCA_IPT_HOOK={0x8}]}, {0x95, 0x6, "33c428b1016ea0e62b6c917780554ec63a01a7382016d430730d1158d5469fa35f73d351ec348637d292a8c8699738644c304a14a0ca2e2c1422d9493ae361a88a61e76022334cc9eff1d9b15acf815ab9bf490688724773d3775e92953306fa3923bf0b3eb78ed4c4e43760fb360a12727f0000004fe4c5639595b4ce1706ccb85c9b5872240c31834297cfb06b7eaaa1"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x90, 0x11, 0x0, 0x0, {{0x8}, {0x4}, {0x65, 0x6, "195244b493b69a109e343c48236a318aa067ccccb2000506f4e63246fce6276de9355aae82ccf014b3a51009a53cc597e7eec180e252560262d28e1340152b8389fc3dcbd1c60cbef5aa738a80d9582b7bf553a33208654c9b7b642eb56b8a9716"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ipt={0x170, 0x17, 0x0, 0x0, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x4}]}, {0x89, 0x6, "828d51b8c024f3ba75276291fd744bf1d83ac94c40f59c2d7aabe5cffe85cb1235f3e723c7a0ca6f1a15a0e38afac0bc7115796816162cbc6d09aea501ff36a46772ec7a3aa4d7c60363ff8f0eeda2f3eb8c435fb1d254244779da6c44c5dc30ed21a60df465ec395bc4d898dc7104dc47d809383d1d5431371c66f76842e2571bf73ce597"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x114, 0x18, 0x0, 0x0, {{0x8}, {0x78, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_TARG={0x69, 0x6, {0x3, 'security\x00', 0x84, 0x8, "cf8102ab12c6b2198a413eaa65607ab7ca51ab206bef3fe70b20aa2e7aacfa341b2d9158773430366e3a48eb70679ab8b9759ebcd3b2636776df09c3eb7702"}}]}, {0x75, 0x6, "1d4af027bf39e92f2bc3b16061477612108c4de6dbb9dbc37f978e20a11849888f1cfa0d69961cc5b133c25b0a606d867918fd28cefd9936cea3c502ba83dbc878d09708660761105b2cb89c15f4eb2ff9ca07aba60aef01aab6097fa30bc52f5c31cbba441df32848abb9344a809a2a4c"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ipt={0x64, 0x20, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'raw\x00'}]}, {0x15, 0x6, "a0f801aae36e077609a01908bc70dd5a7c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ipt={0xe8, 0x20, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x55, 0x6, {0xfffa, 'nat\x00', 0x4, 0x8, "b112d50939750fa56623826275793a59f694cdc8bda79320bfe1d4c8997abe43daace6790afb2937cfb2e0"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}, @TCA_IPT_INDEX={0x8, 0x3, 0x6062ae06}]}, {0x55, 0x6, "080f497fef56763eb14339e04d8880b35d4fcb1f3ccd5757021fa31ef38a7d4c8fca4f32d5757fdee1a2aceaaeb6abdad810154a059435c356867b27c8df5015f90bffb81405bdefffef46fede1a803889"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x97dd299ab8dc81d}}}}]}, {0xa4, 0x1, [@m_ipt={0xa0, 0x3, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x5d, 0x6, {0x8, 'mangle\x00', 0x80, 0xa62, "07625db7849301f3c760230789043c3c5de12e22cc8e1f5f20c97ba14d907f5a3eae7673340356d1e624a3f315c4d0b1439a38"}}]}, {0x15, 0x6, "e2ebd2e0185a4d308803e9306ec5d2b0e6"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x770}}, 0x4008800) recvmmsg$unix(r5, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000015c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000380)="34f21e", 0x3}], 0x1}}], 0x1, 0x10) r6 = socket(0x40000000015, 0x5, 0x0) socket$rxrpc(0x21, 0x2, 0x2) syz_init_net_socket$x25(0x9, 0x5, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r7, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}}}, 0x24) bind$inet6(r6, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast1, 0xfffffffd}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000069113200000000008510000002000000850000000500000095000000dd3700009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 18.119740519s ago: executing program 8 (id=2159): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0xbe, &(0x7f0000000140)={@link_local, @empty, @void, {@ipv4={0x897, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x9, @loopback, @local, {[@cipso={0x86, 0x77, 0xffffffffffffffff, [{0x0, 0xc, "0800b28c590300000052"}, {0x2, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x7, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x7, 0xa, "0000000000800000"}, {0x0, 0x12, "73bc95a70000ffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0xffffffffffffffff}]}}}}}}}, 0x0) 17.20561624s ago: executing program 8 (id=2160): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44045}, 0xc090) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0xee00, 0xee01, 0x0) getpriority(0x2, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ec}}, 0x18, &(0x7f00000004c0)={0x0}}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) 16.616543883s ago: executing program 9 (id=2161): r0 = socket$kcm(0x10, 0x2, 0x4) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r1 = socket(0x1e, 0x2, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x24004010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x1000000000, 0x7, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$ndb(&(0x7f0000000400), 0x0, 0x240202) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) syz_usb_connect(0x6, 0x3b, &(0x7f0000000100)=ANY=[], 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) close(0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093b837dc6cc01e32ef", 0x45}], 0x1}, 0x0) 8.729272655s ago: executing program 6 (id=2167): syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x0, 0xbd, 0xf7, 0x13, 0x8, 0x2770, 0x930c, 0x8d6a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2a, 0xc5, 0x98}}]}}]}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, 0x0, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x48}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) sendmmsg$alg(r3, &(0x7f0000006cc0)=[{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000480)="4aeb18ddbcd90136f1c6b98eca21dbab78ec893213a566fc35584fcad68fdf52df9b9423beaf27706ad3c5891841ec0e7167181d808283", 0x37}, {&(0x7f0000000500)="f53e12199b1198bb2d8c0ae9936efe06ceebfbb17da937a4269214181f86d6df38ddfba8027893618205909793", 0x2d}, {&(0x7f0000000540)="e9586d27b2777d41dbf36af7ca630e44313e7c8896ac5cc5f5b3f88d5be5868dd8fbf4848183c742239c86f8b41d0030ef9ce26a16a2ad6f46184ca6364d470b8a2727efd302bf91f46130cd73e0cef68793d42e805c41cce9497005c20641cabf8ac45fa6a86d628ffb2814f91143419f84f6ee7fa29ee204a94bbe732f111e7969cf586d399b940ffb0c260058fb3f0326a9acbae832b4a1fd59a2d77d44cb3c2040987a547bda979a005e80a2f058653654ac3faf057e089b964674aa0c246a2678a5077a", 0xc6}, {&(0x7f0000000640)="d4baf14a5de5ab4fc47d36d5470dd014f8095278df9522b2b62a4327dd05d635a10854ea2f891c0b8c742e447aa67e0e81cc9d957b4cb4fa0c211ca0f396b91ff841234d138ca92d339cba7091559a5a3ce566a3e0ca41bc45f97932c7b906741d8ad79245758fa1a2774bc175cfad1bb24f3a3a55b918e856e6fe75cd8e800a07c1fc26a6805a2322f4a1bb0292143b7bcf380d008db5368e39ec9b41112759d30d2ba54e2c59a435c17138bf29a116b7ab29dd4dbc0438aeaa44fe19f176b127ee683d208dbcfe9b462ca782b4392b32633811f080d3cddafceb217cdbb2ffc8", 0xe1}, {&(0x7f0000000740)="a7f4b8862b34860bf8aa6813fbdacdb10c28df0f745f9c9796ab328c249ba18b7fb79c59dbcc7ea53f1ee325858d75d7bfa91fbe", 0x34}, {&(0x7f0000000780)="314a163bf805e32780e35939c6928a097b71c91db4f17a0a8bdbf543abd6ad4fdabc6630b022273299cad49b7ed09b006f808f2adddea76894b8e75133467489c8e1f96db8dbbe69eeb40dbf80cf5e958acb82e7937e071d45914b437a9c53f5f4f81af53f30ca6ec11135f2f6e3fe", 0x6f}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f0000000800)="72026e09d0f57444b41ebe028037d44552bb2d013e2b18379758580b1ab4aceabcefdf449dd2c71ecc22b832664127036f5539c51d9d8379397c4b891194f7", 0x3f}], 0x8, 0x0, 0x0, 0x4}, {0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000022c0)="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", 0x1000}, {&(0x7f00000008c0)="2dba59a561ef355a888294166fa36c47a0280410d88af37e53c292b1608d9f089f034b387d3a769cb73ab0f5f32c21928ae7b04f0a4f9ceb9ef6f5b3f6335aa694a48b1156d53373d31e9766a9fed44da553b293f740bb7ccdfc7c45b091c0a2b902f6b1e463eea0bc15b7c9f286aa952efadb4902c840d8728178473b4378e7ab01ad29e6740037c6a1e1f24431a86d971f", 0x92}, {&(0x7f0000000980)="50de798b8b16c27a9e1b859ade3093526af112bd92543ed0fa12f08e62ccb2dcd4ce3ec72ea8bc3ca69081ed9efe8436f62218613eff2ea8edf2e4f7b8ef862ce16e5194fd86672e38fdfa4962063c3edcc31ac88e3cfce220286d3c18ab44d3f179a2a25f28077845e9ba6ca36cfeb9e0f121b49562fe60ef1bf80cbb4ec15ff136325e766f57e16e519389b06f3318783d44e1b838a244d8eb43e79939fe6d2f0b4eaa5d29ea8d06bf16e4c96967981d8310f3c8d591e88b092f7f712acdb88ab6a51eb2942f303715ed337e4335d054e835046ce341b2e6d46d329c4cfbc53276a7f055a130f057c30690493a448e5e3f43", 0xf3}, {&(0x7f0000000a80)="fc95656218adc962cef851ce0a0a571596456edc6c4088f94bd7a9a42373c31dda871e0a1d2d1cf948da8bf83f8effbdc97a1e54be991d3adf06e391d309dee96f54ccf90e3a675ddf0b6c9335c54d5142e9d46d37cf2231f943e79575c38789041e81fe94d9cc7ad9dee9e269d26aebbe1b3564b0c8e220b6fac965e0ce979ab7cb738500c71ffcfb776c543f0e7900a94195f67032cd3d64d697d8af477902ae6bc16803f137c4505a01d5372662c534a35f6ba3b87bebc40b4a642d064ee09d1fb5b7cb98c720105ff25fcae30f5f24bdb61e37e9d8168cbcede43f27b3c804d39c7fb615388f1cc0c3d33cf7961d44cf51ef74717ed4c9", 0xf9}], 0x4, &(0x7f0000000bc0)=[@assoc={0x18, 0x117, 0x4, 0x4cf1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x2}], 0x60, 0x40000}, {0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000c40)="bdbe941abc82c0f31bf08c93257220f009cd6c47c0c32023cdddacc82cb45546c8af4f25b482b875663ca746bc0455812625b2ccb3a50fe89044530ba459d7a6409673924205561e85244a22602101da4a03a33a0798720a5fcc44cffba0fc26a8bbb82d26f2129594fd8bc9072c0e7754d65d5bf4729ec6a433f19a85b67e0da7a896347aed2822546a4645e86daccde131e768bbb265f774032d1e1b9dc6625fa7", 0xa2}, {&(0x7f0000000d00)="a8bc64bfbeb584ed078d2f5559e3086f246f04c5d9f150141360460ebf14d9ae2af33899767ef31f42b5970baa72242f0866846ba794fd07b4f43038621cba95d70daa7c42f94289788b0b8ad89b1c27ce1756a83062163b3ea50fe53d7c391e8b68e70693435ad0e353bdd2edf6aa07ef000329eb4574c829de0331bcb440b5f35f6c1f921022701c09f776b807122b44cbf3b9f59be68a1ba64f7dbb8b15e5616e72b788952216afb0ec3d860450fe838e4f6a5dcdee45d3e41eb4d122ae5734b56c5239583c0f8a9fb9f0", 0xcc}, {&(0x7f00000032c0)="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", 0x1000}, {&(0x7f0000000e00)="13a41a96fa213bd5762f7927cf2d261b0921da2349", 0x15}, {&(0x7f0000000e40)="089d7943d0e4246aa0ea224a4fad170bc5066972a223cfee6b3542ba19ddfba892f86dea0cf673a4546a140553d4b4102910383d543678a9b1700e086f649fd1804d3f6c3a75f204410dd27050e4f17983fe3d35ee2ebf7c7cd36fe27974c794f8f168343f33c289bb5bfce436aea791628cba3d1999ac6ba8cac6bcc6df2014d2", 0x81}], 0x5, &(0x7f00000042c0)=[@iv={0x88, 0x117, 0x2, 0x73, "0805744c5732a05c0101bef789fd6bbc364ad00a4faabf93f4291edbeb33fd3faa40bcce158cf9d3a6abf3bb78d71447d4690b11a1f51a8f4a9f5db40a05ea32a2f8756ce6ab4cdb218fb774e3e64d2c4e7101f125656ca5871bf2b6839bd3615715950d9a3bcafc1510a16a3db74264cc9b24"}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0x58, 0x117, 0x2, 0x3f, "46b048c320868d6e6049b6407245bc32f0e4b3bd10be65b85d8e066a0b6eae7a5766e4b2f5043a923b22915e8fea8bf36d815eb4ea659a38f19b65836cac48"}], 0x10f8, 0x40040}, {0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000f80)="05d3d51893fa85576009a74f01b52b548076d67c7ecf0e10358dae8128a026c2b680970a8d5d5242ee803927abe0f71dd348725261bd4e2bd7e528db53c787fd86f3e39399b50b8153a319c8e8336312b66588d8e2936f9cbc9659c89db5831049f0a10391f362eeaddf4fd5505e389d47ad788f08bbc363a131bb4729df16cf9b5898376caa6e73db4e824582d0b4da6b05947a4a8e21f5f901af02179a513d3d9edf8c66f373", 0xa7}, {&(0x7f0000001040)="d3ed00704e64bd291be5c87a21e1686beed8a6672c489ab2c7848426123451987a48370f259b80d690e2d4c53e0eb60bd9dd5ff75f47245b480042205739c16b679ad0564c6c9bc384799165cd242d496f4ad0a5f83810eb400faf6c067c9a45eb7480f3df3901470ab6355c69f55830f3073e85", 0x74}, {&(0x7f0000002180)="3cd6d76d076935a31f1faa882dfb1eb8df08830cf362c09f1ba282397681a546c7ef104c4da3aba880575cd739ea487bd6e7753434f5ff82da9bde9248cbe0a796396097c85be9de3f2bd012e1c4e58e748e8951b6ef580cc870c670c71c1d1bae380456d8575439d182573eb7577e9b6a0a861d687e0b3dad2c8e101017e827a83b9c151d051ecea86a992eb61171427a3fb3dec8193cb54b9482cb8d07b5b3aeaeb3ea76c14df9716cafe9605724f6822b27526ce0", 0xb6}, {&(0x7f00000053c0)="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", 0x1000}, {&(0x7f00000063c0)="f878695a17eeb052fd59a18a4ce6f811c00a9589281f5e5bb7f12f62e3cc90497e5e737d5bc9fb40449c9c0c5b19c3ba452606fcf87d12073883aa555d55de5e7ce95c75d2747e2a9829476ff593f97cb4b64bd434c1994ceffce43839b3e85f6f8656e374a20db7eb17e5a27e45ca0fe829b2c011cba88de4a841f93b7996ee307a5023c12267b77b3368b09da6e7cf87d6ebbc43c7b0d37e200623a9b1233c43929e269f74d83debad36a997ce6474ef4c22277a49353d", 0xb8}, {&(0x7f0000006480)="89f8bc6b8a95a42a4e426dab6dc321be8f3c67c57c9b7fdc280984e7e0255797208546d2df56d36202378bc834daaa92d93297f78108aa9455f27a90cc1484808764e8a7a34a525c7b19e67d86b66027b22f542ec2c7a54d81c1343e57769bad45e206d6877901623e7503b4620d0355a6f9544fad1fd4080391686c36a8512e49731c0a26aab9655cad42232b7406ea48b3066bd358dec519252317b53554223e31698bd472d8d1c609fe403716d2c647aab77cbfe9862ff8295492f5da538f5be1fc6fe786591f61d77453f0d783fd448928619c410b46e9d2cc8a08d24b9e4a890e4473e72485d6a76960ac7377995b33586f3a1c2a46e3", 0xf9}, {&(0x7f0000006580)="861de1c262b0e60fb0897cbe9bfb044c2686d8246c8e33af199a6eb3c19149c3fb298dea548413ad5b53829ccbbbf01dfab08111b144998a830ad243a3e4776e2bf2295b6cd29b9329db7ec1a303bb20a78b65bbbb7bedc203c3cd0c4f69e000340595def37b6cd88fd6d2c1a98883e9c419334e129487ed45dbed0d0c78f4051f4600cdd9e570a8f1cb9473e722824edcdb52b13092b448e6fc93b4382643f5bb73ac607ba557bf644cc239dc08d576140fd7df6f252a7a4bde0862f9e6685af7294635a9143b01fb1d5d038bc12594d6917660eb75a5b6b50d8c5518deea7c8c74", 0xe2}], 0x7, &(0x7f0000006680)=[@assoc={0x18}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x8001}, @assoc={0x18, 0x117, 0x4, 0x3a7df1b}], 0xa8, 0xfc048312f8c5a02e}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000006740)=[@assoc={0x18}, @iv={0x80, 0x117, 0x2, 0x67, "a49131cfc8d15fe62421e093ea9274e4f8013f2e923e88fa6be335323f3fdf936cc39c1bb7a5ba6267d6cd16a8f9e317bcb55ad928d2f33a37108275fda63bec38f9b8e284efb478e77857a8ed1b4fbd154ec456c4241b5a41e8740fb2fbca2d6f640e1bb054d4"}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x60, 0x117, 0x2, 0x45, "974128dfcad8da0071ddf1b19b5fea6562b34e63615bd916183a579338580ecd1fa3caab1b9b5e8fcfd41a87099943fa11472decb0bc1cc275fbb2f34d4146d7fc9aca68fa"}, @assoc={0x18}, @assoc={0x18, 0x117, 0x4, 0xf}, @op={0x18}, @iv={0x20, 0x117, 0x2, 0x7, "7fcb606f73e902"}], 0x178, 0x10}, {0x0, 0x0, &(0x7f00000069c0)=[{&(0x7f00000068c0)="dfbc4ab8a73b75062d785459edfd6957fcd1faf902b7d879cd22709f5a8a8cdba164f06b370f1849ed212d5e653d17627c", 0x31}, {&(0x7f0000006900)="48c063ecdad465416e01d48acdddc8963edeca5ab715e749f3193714b513d912d2a1f2f85c8c403efa42d23b9b8a82da4ae799ff3399a140395f7f9107f17de7270012c6", 0x44}], 0x2, &(0x7f0000006a00)=[@assoc={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2}], 0x48, 0x20000000}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000006c40)=[@assoc={0x18, 0x117, 0x4, 0xfb}], 0x18, 0x10}], 0x7, 0xd0) 7.979163213s ago: executing program 6 (id=2168): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010020bd7000fbdbdf2526000000180001801400020064756d6d7930"], 0x2c}}, 0x20000000) syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$vim2m(&(0x7f00000000c0), 0xfffffffffffff630, 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) ioctl$SNDRV_PCM_IOCTL_XRUN(0xffffffffffffffff, 0x4148, 0x0) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2400, 0x0) read$msr(r3, &(0x7f0000000300)=""/136, 0x88) ioctl$SNDRV_PCM_IOCTL_DROP(r3, 0x4143, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0xfffb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) readv(r6, &(0x7f0000000040)=[{&(0x7f00000000c0)=""/214, 0xd6}], 0x1) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001e0001eb25bd70000000000001"], 0x114}], 0x1}, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) 7.642027568s ago: executing program 6 (id=2169): r0 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/fs/smackfs/load-self\x00', 0x2, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/179, 0xb3}], 0x1, 0x7, 0x10000005) pread64(r0, &(0x7f0000000380)=""/163, 0xa3, 0x3) clock_gettime(0x6, &(0x7f0000000040)) r1 = open(&(0x7f00000000c0)='.\x00', 0x101800, 0x40) symlinkat(&(0x7f00000000c0)='./file1\x00', r1, &(0x7f0000000100)='./file0\x00') syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x7ffffffff000, 0x3, &(0x7f0000fee000/0x2000)=nil) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$dsp(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$lock(r7, 0x5, &(0x7f0000000040)={0x1, 0x0, 0x7, 0xb25}) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r9, 0x0, 0xf3a, 0x0) splice(r3, 0x0, r9, 0x0, 0x80, 0x4) read(r3, &(0x7f0000000240)=""/230, 0xe6) write(r5, 0x0, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000040)={0x6, 0x7f, 0x2}) 7.297900251s ago: executing program 9 (id=2170): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @val={@val={0x88a8, 0x3, 0x0, 0x1}, {0x8100, 0x3, 0x1, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x10, 0x3a, 0xff, @private0, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x4}}}}}}, 0x0) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@can_delroute={0x14c, 0x19, 0x1, 0x70bd28, 0x25dfdbfc, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x7, 0x6f, 0x75, 0xd, 0x7, "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", 0x0, "bd8d321465fb4104f0a83843e7d0ed840fb00fd0"}}, @CGW_MOD_AND={0x15, 0x1, {{{0x1, 0x0, 0x1}, 0x5, 0x3, 0x0, 0x0, "16cae59d43baab9a"}, 0x2}}]}, 0x14c}, 0x1, 0x0, 0x0, 0x48010}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x20, &(0x7f00000009c0)=[{&(0x7f0000000140)="d800000018007b29e00212ba0d8105040a601800fe0f040b067c55a1bc0009001e0006990600000004000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ccd40dd601edef3d93452a92307ff0ff0e97031e9f05e9f16e9cb500"/216, 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000800)=0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000840)={0x0, r5}) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, 0x7, 0x6, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x4080) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r5], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x1, 0x3, 0x4, 0x404, r10, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x2, 0xd}, 0x50) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r11, 0x8933, &(0x7f0000000280)={'wg0\x00'}) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000007c0)=0x40000000) 5.616602881s ago: executing program 1 (id=2099): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0x82, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48) socket$kcm(0x29, 0x2, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000100)={0x0, 0xf786, 0x800, 0x0, 0x36c}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x18}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x0, 0xbf, &(0x7f000000cf3d)=""/191, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) io_setup(0x8, &(0x7f0000004200)) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r6 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x3, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000600)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000001300e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) setsockopt$llc_int(r0, 0x10c, 0x6, &(0x7f0000000080)=0xf, 0x4) 5.604685265s ago: executing program 9 (id=2171): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan0\x00', 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x5, '\x00', r1, 0xffffffffffffffff, 0x0, 0x5, 0x3}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ptrace$peekuser(0x3, r0, 0xe17) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x22826, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r5, 0x4068aea3, &(0x7f0000000000)={0xda, 0x0, 0x1}) 5.523839484s ago: executing program 6 (id=2172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) rt_sigtimedwait(&(0x7f0000000040)={[0x4]}, 0x0, &(0x7f0000000100)={0x0, 0x989680}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000340)={r3, 0xffffffffffffffff, 0x24, 0x7, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x443, 0x0, 0x1}}, 0x40) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1000000, 0x3, 0xfffffffd}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r4, 0x5608, 0x97) 5.523336041s ago: executing program 4 (id=2173): socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000001c0)='.\n#)|.\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x9aM\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n://\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997AOJ=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c', 0x0) ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, &(0x7f0000000040)) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r3, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=@acquire={0x1ac, 0x17, 0x1, 0x0, 0x0, {{@in=@loopback}, @in6=@remote, {@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56befe125658cb64}, {{@in6=@private2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x2}, 0xfffffff9}, [@tmpl={0x84, 0x5, [{{@in=@broadcast, 0x4d5, 0x3c}, 0xa, @in6=@loopback, 0x3505, 0x2, 0x0, 0xac, 0x3, 0x1, 0x9}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d4, 0x32}, 0xa, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x3506, 0x0, 0x2, 0x2, 0x9, 0x101, 0x8}]}]}, 0x1ac}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) 2.938316429s ago: executing program 4 (id=2174): creat(&(0x7f0000000340)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r1 = dup(r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r3) ioctl$KVM_CHECK_EXTENSION(r4, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000040)={0x0, 0x399000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000080)={0x1000, 0x100000, 0x8}) write$FUSE_BMAP(r1, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r5 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) write$binfmt_misc(r5, &(0x7f0000000400)="201f5c2289d4831f6d4a39209468014e000d33fcfd9b156f1154f019012648fb2077aa4470a01e1f0e8e0eba12fab654805ca48a8b126a5ed791fd505cd0b19486ea71fe3d4ba5fa0e8b968a8367c0a42e863532408e8b326c72efd412d3a550f2ff47384bcccc29873f6755cd2e55560ed554bb11c36b5d6e8e0839a5f27d23741953ae28dc49b9d7747b4c3ea4528e8d63d4c03edeca6ba690197c4571bdcee9cdfd601aeac5785cdf0cc9f7afa2a764f0575ebf0a8f8242613aa23ed2e6b06690fe1cb8d2b4eb410b53ff206c90620219f9", 0xd3) truncate(&(0x7f0000000080)='./file0\x00', 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x80) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = memfd_create(&(0x7f00000006c0)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\xf2\xed\x04\x00\x00\x00\xd4N\x12\x9b\x1f\t\xd1Z+\x86T\x16\xf8\x01\x00\x00\x00\x9f+\x8d!\x0fG\xab\xc2\xdc\xa3\xb3\xae8\x9f9?\xefo\xa4k\x01\xb2>\xa1\x9c\x86xm\xe6\x9bZ4\x91\x1a\xdb\xdd\x89\xb9\xc0LF;\xd6\x84\x195\x06\x00\x00\x00~\xf3S\x12\"p^\xc1jP\x8a\xc6[\xbd\xe7q]\xdd\r\x1aZS\x01*\x14\xfd\xbcMA\xdcq\xa1\x00\xb3\xf9\x91r\x7f\xdc\xf1\xc3G,\xdb\xccS\x15\x95b\x17\xab\xe4?\x96\x95\xa4kP\x99YO\xb8V\xd5p\x90X\xaaf', 0x5) fallocate(r8, 0x0, 0x400000000000000, 0x7) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_EXPR={0x7, 0x11, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFT_MSG_NEWSETELEM={0x90, 0xc, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0xffffffff}, @NFTA_SET_ELEM_LIST_SET={0x0, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x0, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x80) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000200000109000200733c7a31000000000900010073797a3100000004"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) close(r7) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.652507624s ago: executing program 6 (id=2175): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) sendmsg(r4, &(0x7f0000000800)={&(0x7f00000003c0)=@in={0x2, 0x4e22, @broadcast}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000440)="c9a0e7a34b9bd3176c3f2290087f81bb00967c5e2ebe21b1f344c5b3c3b37b6f00b130ffd0d39b24ba42b616ec32287c710bd067e7dcaded313911a9818ba26279d3aa9aaafa090bdd18a7c06be9e04e43fd978db56c57f9", 0x58}, {&(0x7f00000004c0)="54581c004ee686b1688d9576e05c10ceee3bc84086dc6ac432fcdac2008fec2c7a718bcf1b9e0959b296dcea1fd807e24b351ca82ae592c6437d9847f8efed43947019e73e7fdc077cd7ba8224f0999e2ef3", 0x52}, {&(0x7f0000000300)}, {&(0x7f0000000540)}, {&(0x7f0000000580)="cdeef6c49ee0ff2088d76f176a8700d86fb3a6", 0x13}, {&(0x7f00000005c0)="b7ae2ac3ea0c30092ea0e1f086dbcfd4c303f85faa34a7453b66ec77a084cf3f4c9cf1783089e583eb36c7b5009503314780c8698a7aa50520a7fea2de348b7841fd14310e0c5d887e052aaae5303c69ac4bc5c7022f3609aada6e6cfdf3a733a46d310319346c592affb1a2c1113c344e54dc290a4121961d6e23f4c54fac67144578b11fd2527a57bd64f8315aa864a9d1dcd87c9e9e718aefeafbef756bc69980d5b9454d98be5c07f8b5564a99264479a8450c5bda66edf5aaca7bbc79e4", 0xc0}, {&(0x7f0000000680)="9da887edba630c351e34010c9f3b03e2d3bd477a32b1901ae56fd3b4ba1f24133d48598656c23d34e00d5e21d9bf55882c5b2b8fceec750d10fa5bfac66528b044ddec05bc5a6537ab6e7c7a355f7b827a452d8122dd3e7e6ba0809a99f2dba5c66d8c7cc52d48dbae36cd9cf791c7af6cde0f7aff5e5b2635ff2c6fc0117d74cc7475abef0843dfd27e064ef956b24e4d11d6d68df522d98d37e5afe5c667097709267c0f86a7c302d32ee04840165b0d02106d5ec88dc87c3cb97498ad84484c11d2520ce8e0e11118f3a5ccb3159d415106769d162bd4d13754eab0e42a8cdc6ff8fdcd30aba0dd", 0xe9}], 0x7}, 0x41) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000140)={0x0, 0x2000bb22, 0x2, {0x1, @raw_data="3d924b827139e8a4ec01eb92492ff84715d1a004d08b012a7cafe27a5f313d31bbdae5b411ca5be6bfe92437ed0d21b5180e375be56b3b9306d7dbb26bf9f22de7ac7681cca450055250217bdf1113b4258293ba4efed32147bda8454dd115bd5ba066ba06f2854cc96db9a98055cbde9fd084a1223ada91ed2e832907a01ab5ee65f997b617f73d1aa5a6dfc47acdc5eb834f8e448469d235e4380cbcc331c96177b67caa0656f9664277cadb8597e7d911ad1da457ef9744b0993c57a700"}}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f00000000c0)=@userptr={0x7, 0x1, 0x4, 0xec1af57558979226, 0x0, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "f99fae00"}, 0x0, 0x2, {0x0}, 0x20002}) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000540)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x94) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5400000010002104000000007cdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000061000000280012800e00010069703667726574617000006cfd0002800600180004000000060010004e2300000a000100aa"], 0x54}}, 0x0) 2.549011806s ago: executing program 8 (id=2176): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x3, 0x4}}, 0x10, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x6c, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x88) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x5d032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r4, &(0x7f00000001c0)=ANY=[], 0xc8) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000002680)="1e", 0x1}], 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000340)={0x0, 0x3cf9}, &(0x7f00000003c0)=0x8) close(0x4) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESDEC=0x0]) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) 2.296170902s ago: executing program 4 (id=2177): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0x2000000000000323, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='tcp_cong_state_set\x00', r6}, 0x10) r7 = socket$kcm(0x2, 0x1, 0x106) sendmsg$inet(r7, &(0x7f0000000080)={0x0, 0x3, 0x0}, 0x30004001) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8}, &(0x7f0000000080), &(0x7f00000000c0)=r4}, 0x20) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0000000400000009000000070000002a200000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0500000002000000010000004098cfbad1dc2ed00e000000020000000000000000002e272d07960c8e121609797731e5b1799034da8ec0772cbf323997a7dd058f936db2592e7c3c79a36c78ff91803fb487c14add50601ed10398849aae463e4bd6081e124a52fb013e858fc1728e6a201b3b8e33d1cf9e3ee827b581c5962f61d89cdb5d9b"], 0x50) r10 = openat$nvram(0xffffffffffffff9c, &(0x7f00000005c0), 0x84000, 0x0) r11 = syz_io_uring_complete(0x0) r12 = syz_open_dev$vcsu(&(0x7f0000000600), 0x2, 0x80000) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r10, 0x4040534e, &(0x7f0000000800)={0x11, @time={0xfffffe00, 0x1c000000}, 0x4, {0xf3, 0x1}, 0xa, 0x0, 0x8}) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f000000040000000800000009"], 0x48) close(r13) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000bdbd21c07cd008000000000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r1, r14, 0x4}, 0x20) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0xffffff8a, 0x9, 0x10, 0x2408, 0x1, 0x7f, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x50) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000006c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x28, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfe000000, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@cb_func={0x18, 0x7}, @jmp={0x5, 0x0, 0x3, 0x0, 0x2, 0x20, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @alu={0x7, 0x0, 0xb, 0x7, 0x4, 0x1, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x72ad}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff87}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0xfff, 0x37, &(0x7f0000000240)=""/55, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x2, 0x8, 0x3, 0x100}, 0x10, 0x0, 0x0, 0xfffffffffffffd57, &(0x7f0000000700)=[r8, r9, r10, r11, r12, 0x1, 0x1, r15, r16], 0x0, 0x10, 0x8}, 0x94) add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r17 = timerfd_create(0x0, 0x0) timerfd_settime(r17, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x77359400}}, 0x0) 1.254082695s ago: executing program 1 (id=2178): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) (fail_nth: 4) 1.225875226s ago: executing program 6 (id=2179): r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(0xffffffffffffffff, 0x3b8c, &(0x7f0000000180)={0x30, 0x0, 0x456c75156db3095f, 0x0, 0x9, 0x7, 0x200000002, 0x0}) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xd3, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f0000000240)=""/69, 0x45, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000001ac0)={r2, 0x2000, {0x0, 0x0, 0x0, 0x760, 0x140000, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b39800000000000000000009000ec0c1b441dd17c1c50d38ef2a565ef1e83323691c58d600", "a9103939c787a14d074accd5d4c3408554fe581b59ded130e04d528539f39737f0374c72a964a02447a75df8869ea9fac5b7aa193bc37772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200", [0x0, 0x1ff]}}) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) 995.481899ms ago: executing program 9 (id=2180): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000000)={0x6, 0x0, '\x00', [@padn]}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10) socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) pwritev2(r5, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) copy_file_range(r5, &(0x7f0000000000)=0x3ff, r5, 0x0, 0x6, 0x0) r6 = syz_open_dev$usbfs(0x0, 0x203, 0x2581) fcntl$dupfd(r6, 0x0, r6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4000005, 0x40010, r2, 0xcd230000) ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4008550d, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}], {0x14}}, 0x68}}, 0x0) getpid() 994.992952ms ago: executing program 4 (id=2181): socket$inet6_icmp(0xa, 0x2, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe68, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x19, 0x0, 0x8, 0xff, 0x48020, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) ioctl$SIOCSIFHWADDR(r1, 0x8b26, &(0x7f0000000200)={'wlan1\x00', @random="8dffffff00"}) (fail_nth: 1) 375.408242ms ago: executing program 1 (id=2182): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r4}) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0xfeffffff00000000, 0x1ff0000aa}, @private2}}}}}}, 0x0) r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r8 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x2080) ioctl$NBD_SET_SOCK(r8, 0xab00, r1) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x30, r7, 0x1, 0x0, 0x2000000, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}}, 0x0) r9 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r9, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0xd0, 0x0, 0x0) io_setup(0x3ff, &(0x7f0000000500)=0x0) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r12 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x800003, 0x200000005c832, 0xffffffffffffffff, 0x0) close(r12) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) read$FUSE(r0, &(0x7f0000001740)={0x2020}, 0x2020) io_submit(r10, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) 50.151583ms ago: executing program 8 (id=2183): openat$ppp(0xffffffffffffff9c, 0x0, 0x161142, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)}, 0x4044) openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x5752c1, 0x0) syz_open_dev$loop(0x0, 0x9, 0x20a5c3) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x87}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180000001e00000000000000000000007a025000f0ffffff95"], &(0x7f0000000080)='GPL\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x40f00}, 0x94) r1 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_emit_vhci(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b0000000400"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="0100080000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000300000085000000700000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d6487775b", 0x0, 0x9004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r6, 0x400, 0x0) rename(&(0x7f0000000140)='./file1\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r7 = syz_open_dev$mouse(&(0x7f0000000400), 0x1, 0x408000) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x1d) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r8, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000e006"]) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, &(0x7f0000000100)={0x4, 0x20002, 0x1}) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x200000, 0x0) 1.298734ms ago: executing program 4 (id=2184): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003000000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 0s ago: executing program 9 (id=2185): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r1, r0, 0x0) kernel console output (not intermixed with test programs): 007f7f7e9b6038 R14: 00007f7f7e9b5fa0 R15: 00007fff253e6588 [ 720.942266][T12275] [ 721.371716][ T5956] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 721.406144][ T5956] keyspan 4-1:3.168: device disconnected [ 721.617889][T12273] loop8: detected capacity change from 0 to 8 [ 721.827676][T12283] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1294'. [ 722.399613][T12277] binder: 12276:12277 ioctl c0306201 200000000240 returned -14 [ 722.450669][T12273] loop8: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 [ 722.515871][T12273] loop8: p1 start 3674210304 is beyond EOD, truncated [ 722.555641][T12273] loop8: p2 start 2946521549 is beyond EOD, truncated [ 722.608030][T12273] loop8: p3 start 3210040201 is beyond EOD, truncated [ 722.667400][T12273] loop8: p4 start 2187423751 is beyond EOD, truncated [ 722.709925][T12273] loop8: p5 start 1210360614 is beyond EOD, truncated [ 722.746423][T12273] loop8: p6 start 4163130221 is beyond EOD, truncated [ 722.767348][T12273] loop8: p7 start 65302515 is beyond EOD, truncated [ 722.795265][T12273] loop8: p8 start 365161308 is beyond EOD, truncated [ 722.816429][T12273] loop8: p9 start 986802111 is beyond EOD, truncated [ 724.032137][T12297] overlayfs: workdir and upperdir must reside under the same mount [ 724.387725][T12309] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1302'. [ 724.397342][T12309] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1302'. [ 724.740744][ T5887] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 724.900798][ T5887] usb 9-1: Using ep0 maxpacket: 8 [ 724.915757][ T5887] usb 9-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 724.928461][ T5887] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.938566][ T5887] usb 9-1: Product: syz [ 724.949078][ T5887] usb 9-1: Manufacturer: syz [ 724.955504][ T5887] usb 9-1: SerialNumber: syz [ 724.966943][ T5887] usb 9-1: config 0 descriptor?? [ 725.022651][ T5887] gspca_main: sq930x-2.14.0 probing 2770:930c [ 725.123401][T12324] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1306'. [ 725.216630][ T5887] gspca_sq930x: reg_r 001f failed -71 [ 725.229151][ T5887] sq930x 9-1:0.0: probe with driver sq930x failed with error -71 [ 725.247077][T12326] program syz.6.1307 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 725.260246][ T5887] usb 9-1: USB disconnect, device number 16 [ 726.944073][T12333] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 727.366061][T12340] can0: slcan on ttyS3. [ 727.417014][T12337] overlayfs: failed to clone upperpath [ 727.621195][T12340] can0 (unregistered): slcan off ttyS3. [ 728.482156][T12354] syz.8.1314: attempt to access beyond end of device [ 728.482156][T12354] loop8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 728.680078][T12359] netlink: 'syz.3.1319': attribute type 29 has an invalid length. [ 728.696021][T12359] netlink: 'syz.3.1319': attribute type 29 has an invalid length. [ 728.705288][T12359] netlink: 'syz.3.1319': attribute type 29 has an invalid length. [ 729.055970][T12364] ubi: mtd0 is already attached to ubi31 [ 729.813504][T12374] dlm: no local IP address has been set [ 729.819255][T12374] dlm: cannot start dlm midcomms -107 [ 729.843282][T12374] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1322'. [ 730.533863][T12377] netlink: 'syz.8.1325': attribute type 10 has an invalid length. [ 730.618676][T12377] net_ratelimit: 10 callbacks suppressed [ 730.618699][T12377] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 730.652709][ T5887] lo speed is unknown, defaulting to 1000 [ 730.784712][T12380] binder: BINDER_SET_CONTEXT_MGR already set [ 730.792030][T12380] binder: 12379:12380 ioctl 4018620d 200000000040 returned -16 [ 732.661809][T10027] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 733.420717][T10027] usb 9-1: Using ep0 maxpacket: 8 [ 733.432582][T10027] usb 9-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 733.465384][T10027] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.486131][T10027] usb 9-1: Product: syz [ 733.490333][T10027] usb 9-1: Manufacturer: syz [ 733.497324][T10027] usb 9-1: SerialNumber: syz [ 733.506575][T10027] usb 9-1: config 0 descriptor?? [ 733.521974][T10027] gspca_main: sq930x-2.14.0 probing 2770:930c [ 733.856386][T10027] gspca_sq930x: reg_r 001f failed -71 [ 733.861947][T10027] sq930x 9-1:0.0: probe with driver sq930x failed with error -71 [ 733.886461][T10027] usb 9-1: USB disconnect, device number 17 [ 735.705308][T12422] overlayfs: failed to clone upperpath [ 735.803542][T12426] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 735.813030][T12426] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 736.362102][T12440] netlink: 'syz.8.1342': attribute type 12 has an invalid length. [ 737.986954][T12495] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 738.139728][ T31] audit: type=1400 audit(1755659040.670:154): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12490 comm="syz.3.1350" daddr=fc02::ff [ 740.710937][T12534] FAULT_INJECTION: forcing a failure. [ 740.710937][T12534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 740.769649][T12534] CPU: 0 UID: 0 PID: 12534 Comm: syz.8.1363 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 740.769681][T12534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 740.769695][T12534] Call Trace: [ 740.769704][T12534] [ 740.769714][T12534] dump_stack_lvl+0x189/0x250 [ 740.769756][T12534] ? __pfx____ratelimit+0x10/0x10 [ 740.769780][T12534] ? __pfx_dump_stack_lvl+0x10/0x10 [ 740.769805][T12534] ? __pfx__printk+0x10/0x10 [ 740.769833][T12534] ? __might_fault+0xb0/0x130 [ 740.769879][T12534] should_fail_ex+0x414/0x560 [ 740.769906][T12534] _copy_from_user+0x2d/0xb0 [ 740.769935][T12534] input_event_from_user+0xb2/0x280 [ 740.769958][T12534] ? __pfx_input_event_from_user+0x10/0x10 [ 740.769985][T12534] ? input_inject_event+0xbc/0x320 [ 740.770015][T12534] evdev_write+0x2a6/0x480 [ 740.770041][T12534] ? __pfx_evdev_write+0x10/0x10 [ 740.770062][T12534] ? bpf_lsm_file_permission+0x9/0x20 [ 740.770085][T12534] ? security_file_permission+0x75/0x290 [ 740.770109][T12534] ? rw_verify_area+0x258/0x650 [ 740.770139][T12534] ? __pfx_evdev_write+0x10/0x10 [ 740.770160][T12534] vfs_write+0x27e/0xa90 [ 740.770188][T12534] ? __pfx_vfs_write+0x10/0x10 [ 740.770209][T12534] ? __fget_files+0x2a/0x420 [ 740.770235][T12534] ? __fget_files+0x2a/0x420 [ 740.770255][T12534] ? __fget_files+0x3a0/0x420 [ 740.770277][T12534] ? __fget_files+0x2a/0x420 [ 740.770309][T12534] ksys_write+0x145/0x250 [ 740.770331][T12534] ? __pfx_ksys_write+0x10/0x10 [ 740.770356][T12534] ? do_syscall_64+0xbe/0x3b0 [ 740.770403][T12534] do_syscall_64+0xfa/0x3b0 [ 740.770423][T12534] ? lockdep_hardirqs_on+0x9c/0x150 [ 740.770442][T12534] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.770461][T12534] ? clear_bhb_loop+0x60/0xb0 [ 740.770487][T12534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.770505][T12534] RIP: 0033:0x7f7f7e78ebe9 [ 740.770521][T12534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.770537][T12534] RSP: 002b:00007f7f7f617038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 740.770555][T12534] RAX: ffffffffffffffda RBX: 00007f7f7e9b6090 RCX: 00007f7f7e78ebe9 [ 740.770570][T12534] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000004 [ 740.770581][T12534] RBP: 00007f7f7f617090 R08: 0000000000000000 R09: 0000000000000000 [ 740.770592][T12534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.770603][T12534] R13: 00007f7f7e9b6128 R14: 00007f7f7e9b6090 R15: 00007fff253e6588 [ 740.770635][T12534] [ 741.083348][T12521] overlayfs: failed to clone upperpath [ 741.130793][ T5887] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 741.158940][ T31] audit: type=1400 audit(1755659043.650:155): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12536 comm="syz.3.1365" daddr=fc02:: [ 741.179577][T12537] tmpfs: Bad value for 'gid' [ 741.189652][T12537] tmpfs: Bad value for 'gid' [ 741.290774][ T5887] usb 7-1: Using ep0 maxpacket: 32 [ 741.299868][ T5887] usb 7-1: config 1 has an invalid interface number: 242 but max is 0 [ 741.322079][ T5887] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 741.334640][ T5887] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 741.345585][ T5887] usb 7-1: config 1 has no interface number 1 [ 741.369810][ T5887] usb 7-1: config 1 interface 242 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 741.419313][ T5887] usb 7-1: config 1 interface 242 has no altsetting 0 [ 741.688654][ T31] audit: type=1400 audit(1755659044.120:156): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12546 comm="syz.4.1366" daddr=fc02::ff [ 742.105924][ T5887] usb 7-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 742.115193][ T5887] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.123480][ T5887] usb 7-1: Product: syz [ 742.127685][ T5887] usb 7-1: Manufacturer: syz [ 742.132337][ T5887] usb 7-1: SerialNumber: syz [ 743.293201][ T31] audit: type=1400 audit(1755659045.250:157): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12550 comm="syz.3.1367" daddr=fc02::ff [ 743.419437][ T5887] aqc111 7-1:1.242: probe with driver aqc111 failed with error -22 [ 743.692258][T10027] usb 7-1: USB disconnect, device number 15 [ 743.901058][ T5887] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 744.060885][ T5887] usb 9-1: device descriptor read/64, error -71 [ 744.321602][ T5887] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 744.481227][ T5887] usb 9-1: device descriptor read/64, error -71 [ 744.635285][ T5887] usb usb9-port1: attempt power cycle [ 745.040657][ T5887] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 745.061370][ T5887] usb 9-1: device descriptor read/8, error -71 [ 745.790660][ T5887] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 745.821597][ T5887] usb 9-1: device descriptor read/8, error -71 [ 745.981959][T12594] xt_hashlimit: max too large, truncated to 1048576 [ 745.992366][T12594] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 746.787328][ T5887] usb usb9-port1: unable to enumerate USB device [ 747.331728][T12602] can0: slcan on ttyS3. [ 747.883047][T12602] can0 (unregistered): slcan off ttyS3. [ 750.144076][ T31] audit: type=1400 audit(1755659052.560:158): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12622 comm="syz.6.1390" daddr=fc00:: [ 750.965730][T12621] netlink: 'syz.3.1387': attribute type 14 has an invalid length. [ 750.997108][ T92] libceph: connect (1)[c::]:6789 error -101 [ 751.015129][ T92] libceph: mon0 (1)[c::]:6789 connect error [ 751.263128][T12642] ceph: No mds server is up or the cluster is laggy [ 751.493010][T12658] /dev/nullb0: Can't lookup blockdev [ 752.060691][ T25] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 752.079169][T12655] netlink: 120 bytes leftover after parsing attributes in process `syz.6.1394'. [ 753.965814][T12681] overlayfs: failed to clone upperpath [ 754.611675][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 754.730463][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 755.363036][T12695] ufs: You didn't specify the type of your ufs filesystem [ 755.363036][T12695] [ 755.363036][T12695] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 755.363036][T12695] [ 755.363036][T12695] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 755.422592][T12693] can0: slcan on ttyS3. [ 755.452174][T12695] ufs: ufstype=old is supported read-only [ 755.465280][T12701] syz_tun: entered allmulticast mode [ 755.470239][T12695] syz.7.1406: attempt to access beyond end of device [ 755.470239][T12695] loop7: rw=0, sector=16, nr_sectors = 2 limit=0 [ 755.483283][T12701] dvmrp1: entered allmulticast mode [ 755.496322][T12698] syz_tun: left allmulticast mode [ 755.583781][T12693] can0 (unregistered): slcan off ttyS3. [ 755.900935][ T5956] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 757.067169][ T5956] usb 9-1: Using ep0 maxpacket: 8 [ 757.134476][ T5956] usb 9-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 757.338500][ T5956] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.346840][ T5956] usb 9-1: Product: syz [ 757.351080][ T5956] usb 9-1: Manufacturer: syz [ 757.355696][ T5956] usb 9-1: SerialNumber: syz [ 757.369052][ T5956] usb 9-1: config 0 descriptor?? [ 757.389728][ T5956] gspca_main: sq930x-2.14.0 probing 2770:930c [ 757.615533][ T5956] gspca_sq930x: reg_r 001f failed -71 [ 757.632966][ T5956] sq930x 9-1:0.0: probe with driver sq930x failed with error -71 [ 757.769055][ T5929] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 757.891139][ T5956] usb 9-1: USB disconnect, device number 22 [ 758.220644][ T5929] usb 7-1: device descriptor read/64, error -71 [ 758.429312][ T31] audit: type=1400 audit(1755659060.960:159): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12738 comm="syz.8.1421" daddr=fe80::2c dest=20001 [ 758.476933][ T5929] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 758.538233][T12742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1422'. [ 758.549616][T12741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1422'. [ 760.525901][ T5929] usb 7-1: device descriptor read/64, error -71 [ 760.621053][T12749] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 760.641169][T12749] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 760.648313][ T5929] usb usb7-port1: attempt power cycle [ 760.929828][T12758] can0: slcan on ttyS3. [ 761.096097][T12758] can0 (unregistered): slcan off ttyS3. [ 761.312256][T12767] qrtr: Invalid version 47 [ 761.378294][T12771] fuse: Unknown parameter 'g“oup_id' [ 761.571808][T12774] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1432'. [ 761.589118][T12774] netlink: 'syz.6.1432': attribute type 10 has an invalid length. [ 761.606334][T12774] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1432'. [ 761.653707][T12772] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 761.681011][T12783] bond0: Unable to set down delay as MII monitoring is disabled [ 761.977850][T12789] xt_TCPMSS: Only works on TCP SYN packets [ 762.623497][T12792] sctp: [Deprecated]: syz.6.1435 (pid 12792) Use of struct sctp_assoc_value in delayed_ack socket option. [ 762.623497][T12792] Use struct sctp_sack_info instead [ 763.035905][T12799] netlink: 'syz.8.1438': attribute type 14 has an invalid length. [ 763.521377][ T5956] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 763.921563][ T5956] usb 9-1: Using ep0 maxpacket: 16 [ 763.939639][ T5956] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.960348][ T5956] usb 9-1: config 0 has no interfaces? [ 763.970388][ T5956] usb 9-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 763.983102][ T5915] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 763.990959][ T5956] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.011582][ T5915] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 764.200175][ T5956] usb 9-1: config 0 descriptor?? [ 764.307099][T12812] fuse: Unknown parameter 'g“oup_id' [ 764.674253][T12817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1444'. [ 765.950405][ T5915] usb 9-1: USB disconnect, device number 23 [ 766.029802][ T31] audit: type=1400 audit(1755659068.560:160): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12819 comm="syz.4.1445" daddr=fc02::ff [ 767.200583][ T5929] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 767.373259][ T5887] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 767.376812][T12849] overlayfs: workdir and upperdir must reside under the same mount [ 767.390420][ T5887] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 767.391411][ T5929] usb 4-1: too many configurations: 19, using maximum allowed: 8 [ 767.443370][ T5929] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 767.486222][ T5929] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 767.503529][ T5929] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 767.517750][ T5929] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 767.531953][ T5929] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 767.659829][ T5929] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 767.697998][ T5929] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 767.738714][ T5929] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 767.758463][ T5929] usb 4-1: New USB device found, idVendor=0738, idProduct=1705, bcdDevice= 1.40 [ 767.768516][ T5929] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=92 [ 767.777157][ T5929] usb 4-1: Product: syz [ 767.781584][ T5929] usb 4-1: Manufacturer: syz [ 767.788508][ T5929] usb 4-1: SerialNumber: syz [ 767.802724][ T5929] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 768.049232][ T5956] usb 4-1: USB disconnect, device number 16 [ 769.044592][T12872] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1463'. [ 769.073663][T12872] tipc: Started in network mode [ 769.078563][T12872] tipc: Node identity 7, cluster identity 5 [ 769.110590][T12872] tipc: Node number set to 7 [ 769.179018][T12873] vxcan1: entered allmulticast mode [ 769.221251][T12877] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1463'. [ 769.421919][T12884] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1466'. [ 769.772712][T12889] netlink: 'syz.6.1469': attribute type 14 has an invalid length. [ 770.008193][T12893] netlink: 'syz.8.1470': attribute type 14 has an invalid length. [ 770.414264][T12897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1471'. [ 770.530716][ T92] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 770.594226][ T25] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 770.610744][ T25] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 771.344282][ T92] usb 9-1: Using ep0 maxpacket: 16 [ 771.461739][ T92] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.478094][T12908] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1475'. [ 771.530765][ T92] usb 9-1: config 0 has no interfaces? [ 771.536298][ T92] usb 9-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 771.560572][ T92] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.575044][ T92] usb 9-1: config 0 descriptor?? [ 772.088112][T12915] overlayfs: workdir and upperdir must reside under the same mount [ 772.855473][T12922] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1481'. [ 772.875337][T12922] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1481'. [ 773.832306][T12930] trusted_key: encrypted_key: insufficient parameters specified [ 774.376416][ T92] usb 9-1: USB disconnect, device number 24 [ 774.481732][T12933] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 774.495304][T12933] batman_adv: batadv0: Adding interface: ip6gretap2 [ 774.502276][T12933] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 774.528654][T12934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1484'. [ 774.538093][T12933] batman_adv: batadv0: Interface activated: ip6gretap2 [ 774.547595][T12933] batadv0: mtu less than device minimum [ 774.555406][T12933] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 774.567489][T12933] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 774.579361][T12933] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 774.591162][T12933] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 774.602895][T12933] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 774.614858][T12933] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 774.626726][T12933] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 774.638478][T12933] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 774.650406][T12933] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 776.077416][T12957] overlayfs: workdir and upperdir must reside under the same mount [ 777.420865][T12964] trusted_key: encrypted_key: insufficient parameters specified [ 779.270681][ T31] audit: type=1400 audit(1755659081.050:161): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12968 comm="syz.4.1496" daddr=fc02::ff [ 779.422134][T12978] xt_TCPMSS: Only works on TCP SYN packets [ 780.836627][ T31] audit: type=1400 audit(1755659082.800:162): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=12972 comm="syz.7.1495" daddr=fc02::ff [ 782.595571][T13021] netlink: 'syz.6.1506': attribute type 4 has an invalid length. [ 783.124465][T13032] netlink: 10 bytes leftover after parsing attributes in process `syz.6.1509'. [ 784.241760][T13040] dlm: no local IP address has been set [ 784.247411][T13040] dlm: cannot start dlm midcomms -107 [ 784.259260][T13040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1510'. [ 786.364402][T13057] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1516'. [ 787.275214][T13068] bond_slave_0: entered promiscuous mode [ 787.281184][T13068] bond_slave_1: entered promiscuous mode [ 787.286985][T13068] macvlan0: entered allmulticast mode [ 787.292439][T13068] bond0: entered allmulticast mode [ 787.297592][T13068] bond_slave_0: entered allmulticast mode [ 787.303370][T13068] bond_slave_1: entered allmulticast mode [ 787.310362][T13068] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 787.317846][T13068] bridge0: port 3(macvlan0) entered blocking state [ 787.324462][T13068] bridge0: port 3(macvlan0) entered disabled state [ 787.333462][T13068] macvlan0: entered promiscuous mode [ 787.338765][T13068] bond0: entered promiscuous mode [ 787.345425][T13068] bridge0: port 3(macvlan0) entered blocking state [ 787.352991][T13068] bridge0: port 3(macvlan0) entered forwarding state [ 787.599818][T13073] bond0: Unable to set down delay as MII monitoring is disabled [ 788.099662][T13078] trusted_key: encrypted_key: insufficient parameters specified [ 793.214630][T13137] netlink: 'syz.6.1540': attribute type 14 has an invalid length. [ 793.950766][T13143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1541'. [ 793.988246][T13144] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1541'. [ 794.325852][T13156] bond0: Unable to set down delay as MII monitoring is disabled [ 794.499646][T10027] IPVS: starting estimator thread 0... [ 794.723187][T13158] IPVS: using max 43 ests per chain, 103200 per kthread [ 794.931864][T13168] netlink: 'syz.7.1545': attribute type 14 has an invalid length. [ 796.450650][ T5956] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 796.737687][ T5956] usb 9-1: Using ep0 maxpacket: 16 [ 796.744942][ T5956] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 796.768820][ T5956] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 796.778776][ T5956] usb 9-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 796.788033][ T5956] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.802608][ T5956] usb 9-1: config 0 descriptor?? [ 797.685334][T13194] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 797.945463][ T5956] hid-multitouch 0003:1FD2:6007.000B: unknown main item tag 0x0 [ 797.988314][ T5956] hid-multitouch 0003:1FD2:6007.000B: unknown main item tag 0x0 [ 797.997005][ T5956] hid-multitouch 0003:1FD2:6007.000B: item fetching failed at offset 3/5 [ 798.013407][ T5956] hid-multitouch 0003:1FD2:6007.000B: probe with driver hid-multitouch failed with error -22 [ 798.852068][ T5956] usb 9-1: USB disconnect, device number 25 [ 798.876488][T13212] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1557'. [ 798.901556][T13212] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1557'. [ 799.549377][ T31] audit: type=1400 audit(1755659102.080:163): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13219 comm="syz.8.1561" daddr=ff02::1 dest=65534 [ 799.664553][T13224] bond0: Unable to set down delay as MII monitoring is disabled [ 799.715347][T13225] Cannot find add_set index 0 as target [ 800.978379][T13237] bridge0: port 1(hsr_slave_1) entered blocking state [ 800.987062][T13237] bridge0: port 1(hsr_slave_1) entered disabled state [ 800.997376][T13237] hsr_slave_1: entered allmulticast mode [ 801.007059][T13237] hsr_slave_1: left allmulticast mode [ 802.335530][T13250] 8021q: adding VLAN 0 to HW filter on device bond1 [ 802.356638][T13248] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1568'. [ 802.370240][T13248] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1568'. [ 803.403173][T13272] overlayfs: failed to clone upperpath [ 803.529937][ T5956] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 803.606967][ T5956] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 804.588325][T13288] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1581'. [ 804.614934][T13288] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1581'. [ 811.499638][T13358] netlink: 'syz.6.1601': attribute type 14 has an invalid length. [ 813.768567][T13383] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1608'. [ 813.950665][T10027] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 814.433582][T13388] overlayfs: failed to clone upperpath [ 814.460555][T10027] usb 9-1: Using ep0 maxpacket: 32 [ 814.485648][T10027] usb 9-1: config 71 has an invalid interface number: 164 but max is 0 [ 814.513828][T10027] usb 9-1: config 71 contains an unexpected descriptor of type 0x2, skipping [ 814.560267][T10027] usb 9-1: config 71 has an invalid interface number: 141 but max is 0 [ 814.610565][T10027] usb 9-1: config 71 contains an unexpected descriptor of type 0x2, skipping [ 814.619475][T10027] usb 9-1: config 71 contains an unexpected descriptor of type 0x2, skipping [ 814.648178][T10027] usb 9-1: config 71 has 2 interfaces, different from the descriptor's value: 1 [ 814.657549][T10027] usb 9-1: config 71 has no interface number 0 [ 814.664229][T10027] usb 9-1: config 71 has no interface number 1 [ 814.670662][T10027] usb 9-1: config 71 interface 164 altsetting 170 has an invalid descriptor for endpoint zero, skipping [ 814.818515][T10027] usb 9-1: config 71 interface 164 altsetting 170 has 3 endpoint descriptors, different from the interface descriptor's value: 15 [ 814.840548][T10027] usb 9-1: too many endpoints for config 71 interface 141 altsetting 247: 255, using maximum allowed: 30 [ 814.874242][T10027] usb 9-1: config 71 interface 141 altsetting 247 bulk endpoint 0x2 has invalid maxpacket 16 [ 814.884857][T10027] usb 9-1: config 71 interface 141 altsetting 247 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 815.060440][T13399] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 815.088400][T13399] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 815.464276][T10027] usb 9-1: config 71 interface 141 altsetting 247 has a duplicate endpoint with address 0x5, skipping [ 815.590540][T10027] usb 9-1: config 71 interface 141 altsetting 247 has a duplicate endpoint with address 0x7, skipping [ 815.606426][T10027] usb 9-1: config 71 interface 141 altsetting 247 has a duplicate endpoint with address 0xF, skipping [ 815.617596][T10027] usb 9-1: config 71 interface 141 altsetting 247 endpoint 0xE has invalid maxpacket 22839, setting to 1024 [ 815.636826][T10027] usb 9-1: config 71 interface 141 altsetting 247 bulk endpoint 0xE has invalid maxpacket 1024 [ 815.648104][T10027] usb 9-1: config 71 interface 141 altsetting 247 has a duplicate endpoint with address 0x7, skipping [ 815.667295][T10027] usb 9-1: config 71 interface 141 altsetting 247 has an invalid descriptor for endpoint zero, skipping [ 815.710624][T10027] usb 9-1: config 71 interface 141 altsetting 247 has a duplicate endpoint with address 0x2, skipping [ 815.739406][T10027] usb 9-1: config 71 interface 141 altsetting 247 has an invalid descriptor for endpoint zero, skipping [ 815.760052][T10027] usb 9-1: config 71 interface 141 altsetting 247 has 12 endpoint descriptors, different from the interface descriptor's value: 255 [ 815.822100][T13407] FAULT_INJECTION: forcing a failure. [ 815.822100][T13407] name failslab, interval 1, probability 0, space 0, times 0 [ 815.837610][T13407] CPU: 0 UID: 0 PID: 13407 Comm: syz.8.1614 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 815.837634][T13407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 815.837646][T13407] Call Trace: [ 815.837654][T13407] [ 815.837662][T13407] dump_stack_lvl+0x189/0x250 [ 815.837690][T13407] ? __pfx____ratelimit+0x10/0x10 [ 815.837711][T13407] ? __pfx_dump_stack_lvl+0x10/0x10 [ 815.837732][T13407] ? __pfx__printk+0x10/0x10 [ 815.837762][T13407] ? __pfx___might_resched+0x10/0x10 [ 815.837783][T13407] ? fs_reclaim_acquire+0x7d/0x100 [ 815.837811][T13407] should_fail_ex+0x414/0x560 [ 815.837836][T13407] should_failslab+0xa8/0x100 [ 815.837859][T13407] __kmalloc_noprof+0xcb/0x4f0 [ 815.837877][T13407] ? iter_file_splice_write+0x1cb/0x1000 [ 815.837901][T13407] iter_file_splice_write+0x1cb/0x1000 [ 815.837947][T13407] ? __pfx_iter_file_splice_write+0x10/0x10 [ 815.837971][T13407] ? rcu_read_lock_any_held+0xb3/0x120 [ 815.837993][T13407] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 815.838028][T13407] ? __pfx_iter_file_splice_write+0x10/0x10 [ 815.838047][T13407] do_splice+0xc79/0x1660 [ 815.838085][T13407] ? __fget_files+0x2a/0x420 [ 815.838110][T13407] ? __pfx_do_splice+0x10/0x10 [ 815.838140][T13407] __se_sys_splice+0x2e1/0x460 [ 815.838167][T13407] ? __pfx___se_sys_splice+0x10/0x10 [ 815.838193][T13407] ? __x64_sys_splice+0x21/0xf0 [ 815.838216][T13407] do_syscall_64+0xfa/0x3b0 [ 815.838236][T13407] ? lockdep_hardirqs_on+0x9c/0x150 [ 815.838256][T13407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.838273][T13407] ? clear_bhb_loop+0x60/0xb0 [ 815.838297][T13407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.838315][T13407] RIP: 0033:0x7f7f7e78ebe9 [ 815.838331][T13407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 815.838347][T13407] RSP: 002b:00007f7f7f617038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 815.838366][T13407] RAX: ffffffffffffffda RBX: 00007f7f7e9b6090 RCX: 00007f7f7e78ebe9 [ 815.838380][T13407] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000006 [ 815.838391][T13407] RBP: 00007f7f7f617090 R08: 00000000000408cd R09: 0000000000000000 [ 815.838403][T13407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 815.838414][T13407] R13: 00007f7f7e9b6128 R14: 00007f7f7e9b6090 R15: 00007fff253e6588 [ 815.838444][T13407] [ 815.841120][T10027] usb 9-1: config 71 interface 164 has no altsetting 0 [ 816.050046][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 816.100615][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 816.235731][T10027] usb 9-1: config 71 interface 141 has no altsetting 0 [ 816.243708][T10027] usb 9-1: string descriptor 0 read error: -71 [ 816.250019][T10027] usb 9-1: New USB device found, idVendor=04e2, idProduct=1422, bcdDevice=80.f2 [ 816.259139][T10027] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.270267][T10027] usb 9-1: can't set config #71, error -71 [ 816.434946][T10027] usb 9-1: USB disconnect, device number 26 [ 819.153248][T13446] netlink: 'syz.6.1629': attribute type 14 has an invalid length. [ 820.230608][ T5915] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 820.412825][ T5915] usb 9-1: Using ep0 maxpacket: 8 [ 820.431201][ T5915] usb 9-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 820.464454][ T31] audit: type=1326 audit(1755659122.990:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13465 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ac58ebe9 code=0x7ffc0000 [ 820.486426][ T5915] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.501304][ T5915] usb 9-1: Product: syz [ 820.509273][ T5915] usb 9-1: Manufacturer: syz [ 820.514735][ T5915] usb 9-1: SerialNumber: syz [ 820.519472][ T31] audit: type=1326 audit(1755659122.990:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13465 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ac58ebe9 code=0x7ffc0000 [ 820.546794][ T5915] usb 9-1: config 0 descriptor?? [ 820.571847][ T31] audit: type=1326 audit(1755659122.990:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13465 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fa0ac58ebe9 code=0x7ffc0000 [ 820.593976][ T31] audit: type=1326 audit(1755659123.000:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13465 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ac58ebe9 code=0x7ffc0000 [ 820.615928][ T31] audit: type=1326 audit(1755659123.000:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13465 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0ac58ebe9 code=0x7ffc0000 [ 820.637867][ T31] audit: type=1326 audit(1755659123.000:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13465 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ac58ebe9 code=0x7ffc0000 [ 820.659820][ T31] audit: type=1326 audit(1755659123.000:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13465 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0ac58ebe9 code=0x7ffc0000 [ 820.740638][ T31] audit: type=1326 audit(1755659123.040:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13465 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ac58ebe9 code=0x7ffc0000 [ 820.763768][ T31] audit: type=1326 audit(1755659123.040:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13465 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ac58ebe9 code=0x7ffc0000 [ 820.802499][ T5915] gspca_main: sq930x-2.14.0 probing 2770:930c [ 821.360688][ T31] audit: type=1326 audit(1755659123.090:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13465 comm="syz.4.1635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fa0ac58ebe9 code=0x7ffc0000 [ 821.394480][ T5915] gspca_sq930x: reg_r 001f failed -110 [ 821.403256][ T5915] sq930x 9-1:0.0: probe with driver sq930x failed with error -110 [ 821.496839][ T92] usb 9-1: USB disconnect, device number 27 [ 822.559819][T13478] netlink: 'syz.4.1637': attribute type 14 has an invalid length. [ 823.580611][ T5915] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 824.559995][T13517] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1649'. [ 824.569595][ T5915] usb 4-1: device descriptor read/64, error -71 [ 824.601713][T13517] netlink: 'syz.4.1649': attribute type 4 has an invalid length. [ 825.400691][ T5915] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 825.408366][ T25] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 825.557454][ T5915] usb 4-1: device descriptor read/64, error -71 [ 825.586593][T13536] netlink: 'syz.6.1656': attribute type 14 has an invalid length. [ 825.596415][ T25] usb 9-1: Using ep0 maxpacket: 8 [ 825.607009][ T25] usb 9-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 825.616540][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.625019][ T25] usb 9-1: Product: syz [ 825.629271][ T25] usb 9-1: Manufacturer: syz [ 825.633912][ T25] usb 9-1: SerialNumber: syz [ 825.640569][ T25] usb 9-1: config 0 descriptor?? [ 825.647697][ T25] gspca_main: sq930x-2.14.0 probing 2770:930c [ 825.692792][ T5915] usb usb4-port1: attempt power cycle [ 825.875129][ T25] gspca_sq930x: reg_r 001f failed -71 [ 825.890758][ T25] sq930x 9-1:0.0: probe with driver sq930x failed with error -71 [ 825.903324][ T25] usb 9-1: USB disconnect, device number 28 [ 825.924827][ T31] kauditd_printk_skb: 28 callbacks suppressed [ 825.924843][ T31] audit: type=1326 audit(1755659128.460:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13538 comm="syz.3.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c298ebe9 code=0x7ffc0000 [ 825.965371][ T31] audit: type=1326 audit(1755659128.460:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13538 comm="syz.3.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c298ebe9 code=0x7ffc0000 [ 825.994153][ T31] audit: type=1326 audit(1755659128.500:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13538 comm="syz.3.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7ff3c298ebe9 code=0x7ffc0000 [ 826.016861][ T31] audit: type=1326 audit(1755659128.500:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13538 comm="syz.3.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c298ebe9 code=0x7ffc0000 [ 826.039060][ T31] audit: type=1326 audit(1755659128.500:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13538 comm="syz.3.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c298ebe9 code=0x7ffc0000 [ 826.211472][ T31] audit: type=1326 audit(1755659128.530:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13538 comm="syz.3.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3c298ebe9 code=0x7ffc0000 [ 826.247652][ T31] audit: type=1326 audit(1755659128.530:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13538 comm="syz.3.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c298ebe9 code=0x7ffc0000 [ 826.269764][ T31] audit: type=1326 audit(1755659128.530:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13538 comm="syz.3.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c298ebe9 code=0x7ffc0000 [ 826.449365][ T31] audit: type=1326 audit(1755659128.530:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13538 comm="syz.3.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3c298ebe9 code=0x7ffc0000 [ 826.870573][ T31] audit: type=1326 audit(1755659128.530:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13538 comm="syz.3.1657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3c298ebe9 code=0x7ffc0000 [ 828.330230][T13560] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1663'. [ 828.350974][T13560] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1663'. [ 828.681813][T13569] netlink: 'syz.8.1667': attribute type 14 has an invalid length. [ 829.084964][T13579] netlink: 'syz.4.1670': attribute type 14 has an invalid length. [ 829.133730][T13580] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1671'. [ 829.142966][T13580] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1671'. [ 829.210852][ T5956] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 829.420772][ T5956] usb 9-1: Using ep0 maxpacket: 16 [ 829.432337][ T5956] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.444354][ T5956] usb 9-1: config 0 has no interfaces? [ 829.449921][ T5956] usb 9-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 830.065472][ T5956] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.076676][ T5956] usb 9-1: config 0 descriptor?? [ 831.003595][T13592] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 832.167999][ T25] usb 9-1: USB disconnect, device number 29 [ 832.442816][T13622] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1682'. [ 832.476249][T13622] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1682'. [ 833.144468][T13633] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1683'. [ 833.189766][T13633] netlink: 100 bytes leftover after parsing attributes in process `syz.6.1683'. [ 833.207047][ T31] kauditd_printk_skb: 63 callbacks suppressed [ 833.207063][ T31] audit: type=1326 audit(1755659135.740:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13634 comm="syz.4.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ac58ebe9 code=0x7ffc0000 [ 833.330605][ T5887] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 833.388279][ T31] audit: type=1326 audit(1755659135.780:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13634 comm="syz.4.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ac58ebe9 code=0x7ffc0000 [ 833.410907][ T31] audit: type=1326 audit(1755659135.780:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13634 comm="syz.4.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fa0ac58ebe9 code=0x7ffc0000 [ 833.434852][T13633] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1683'. [ 834.077740][T13633] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1683'. [ 834.108103][ T31] audit: type=1326 audit(1755659135.780:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13634 comm="syz.4.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ac58ebe9 code=0x7ffc0000 [ 834.142375][ T31] audit: type=1326 audit(1755659135.780:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13634 comm="syz.4.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0ac58ebe9 code=0x7ffc0000 [ 834.171025][ T5887] usb 9-1: Using ep0 maxpacket: 8 [ 834.222048][ T5887] usb 9-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 834.262415][ T31] audit: type=1326 audit(1755659135.780:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13634 comm="syz.4.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ac58ebe9 code=0x7ffc0000 [ 834.290919][ T31] audit: type=1326 audit(1755659135.780:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13634 comm="syz.4.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0ac58ebe9 code=0x7ffc0000 [ 834.320980][ T5887] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.329020][ T5887] usb 9-1: Product: syz [ 834.338193][ T31] audit: type=1326 audit(1755659135.780:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13634 comm="syz.4.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ac58ebe9 code=0x7ffc0000 [ 834.362580][ T5887] usb 9-1: Manufacturer: syz [ 834.413772][ T5887] usb 9-1: SerialNumber: syz [ 834.414852][ T31] audit: type=1326 audit(1755659135.780:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13634 comm="syz.4.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fa0ac58ebe9 code=0x7ffc0000 [ 834.431655][ T5887] usb 9-1: config 0 descriptor?? [ 834.476803][ T5887] gspca_main: sq930x-2.14.0 probing 2770:930c [ 834.484057][ T31] audit: type=1326 audit(1755659135.780:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13634 comm="syz.4.1685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0ac58ebe9 code=0x7ffc0000 [ 834.708555][T13645] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 834.727804][T13645] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 834.910066][ T5887] gspca_sq930x: reg_r 001f failed -71 [ 834.915786][ T5887] sq930x 9-1:0.0: probe with driver sq930x failed with error -71 [ 834.925572][ T5887] usb 9-1: USB disconnect, device number 30 [ 834.945063][T13644] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1688'. [ 835.288522][T13656] /dev/nullb0: Can't lookup blockdev [ 835.922712][ T25] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 836.146137][ T25] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 836.691062][T13665] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1694'. [ 836.700056][T13665] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1694'. [ 837.073360][T13671] FAULT_INJECTION: forcing a failure. [ 837.073360][T13671] name failslab, interval 1, probability 0, space 0, times 0 [ 837.150638][T13671] CPU: 1 UID: 0 PID: 13671 Comm: syz.8.1698 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 837.150665][T13671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 837.150678][T13671] Call Trace: [ 837.150685][T13671] [ 837.150694][T13671] dump_stack_lvl+0x189/0x250 [ 837.150719][T13671] ? __pfx____ratelimit+0x10/0x10 [ 837.150740][T13671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 837.150761][T13671] ? __pfx__printk+0x10/0x10 [ 837.150784][T13671] ? do_raw_spin_lock+0x121/0x290 [ 837.150812][T13671] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 837.150834][T13671] ? trace_contention_end+0x39/0x120 [ 837.150859][T13671] should_fail_ex+0x414/0x560 [ 837.150884][T13671] should_failslab+0xa8/0x100 [ 837.150915][T13671] __kmalloc_cache_noprof+0x70/0x3d0 [ 837.150934][T13671] ? __io_queue_proc+0x23a/0x4d0 [ 837.150961][T13671] __io_queue_proc+0x23a/0x4d0 [ 837.150981][T13671] ? add_wait_queue+0xba/0x170 [ 837.151009][T13671] ? __pfx_io_poll_queue_proc+0x10/0x10 [ 837.151031][T13671] v4l2_m2m_poll+0xe5/0x4b0 [ 837.151065][T13671] v4l2_m2m_fop_poll+0xa3/0xf0 [ 837.151085][T13671] ? __pfx_v4l2_m2m_fop_poll+0x10/0x10 [ 837.151107][T13671] v4l2_poll+0x147/0x2c0 [ 837.151131][T13671] ? __pfx_v4l2_poll+0x10/0x10 [ 837.151159][T13671] __io_arm_poll_handler+0x36f/0xbb0 [ 837.151193][T13671] io_poll_add+0xcd/0x1f0 [ 837.151214][T13671] ? __pfx_io_poll_add+0x10/0x10 [ 837.151233][T13671] ? __pfx_io_poll_queue_proc+0x10/0x10 [ 837.151259][T13671] ? __fget_files+0x2a/0x420 [ 837.151284][T13671] ? __fget_files+0x2a/0x420 [ 837.151304][T13671] ? __fget_files+0x3a0/0x420 [ 837.151327][T13671] __io_issue_sqe+0x181/0x4b0 [ 837.151357][T13671] ? io_file_get_normal+0x101/0x2f0 [ 837.151388][T13671] io_issue_sqe+0x165/0xfd0 [ 837.151425][T13671] io_submit_sqes+0xa38/0x1c50 [ 837.151485][T13671] __se_sys_io_uring_enter+0x2df/0x2b20 [ 837.151524][T13671] ? ksys_write+0x1cb/0x250 [ 837.151546][T13671] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 837.151562][T13671] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 837.151585][T13671] ? __pfx_vfs_write+0x10/0x10 [ 837.151605][T13671] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 837.151631][T13671] ? __fget_files+0x3a0/0x420 [ 837.151659][T13671] ? fput+0xa0/0xd0 [ 837.151687][T13671] ? ksys_write+0x22a/0x250 [ 837.151706][T13671] ? __pfx_ksys_write+0x10/0x10 [ 837.151721][T13671] ? rcu_is_watching+0x15/0xb0 [ 837.151747][T13671] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 837.151769][T13671] do_syscall_64+0xfa/0x3b0 [ 837.151789][T13671] ? lockdep_hardirqs_on+0x9c/0x150 [ 837.151809][T13671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.151828][T13671] ? clear_bhb_loop+0x60/0xb0 [ 837.151851][T13671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.151869][T13671] RIP: 0033:0x7f7f7e78ebe9 [ 837.151886][T13671] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 837.151908][T13671] RSP: 002b:00007f7f7f638038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 837.151928][T13671] RAX: ffffffffffffffda RBX: 00007f7f7e9b5fa0 RCX: 00007f7f7e78ebe9 [ 837.151942][T13671] RDX: 0000000000000000 RSI: 00000000000047f6 RDI: 0000000000000004 [ 837.151953][T13671] RBP: 00007f7f7f638090 R08: 0000000000000000 R09: 0000000000000000 [ 837.151965][T13671] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 837.151976][T13671] R13: 00007f7f7e9b6038 R14: 00007f7f7e9b5fa0 R15: 00007fff253e6588 [ 837.152007][T13671] [ 838.425166][T13686] dummy0: entered allmulticast mode [ 838.681750][T13688] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1702'. [ 838.691713][T13686] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1702'. [ 838.727963][T13685] dummy0: left allmulticast mode [ 840.932577][T13695] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1703'. [ 840.990167][T13695] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1703'. [ 841.011193][T13695] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1703'. [ 842.275353][T13719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1708'. [ 842.284813][T13719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1708'. [ 842.731152][T13727] netlink: 'syz.7.1711': attribute type 14 has an invalid length. [ 843.370525][T13731] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1712'. [ 843.833784][ T31] kauditd_printk_skb: 23 callbacks suppressed [ 843.833798][ T31] audit: type=1400 audit(1755659146.370:308): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13734 comm="syz.7.1713" daddr=ff01::1 dest=20000 [ 843.886944][ T31] audit: type=1400 audit(1755659146.370:309): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13734 comm="syz.7.1713" daddr=::ffff:172.20.20.0 [ 843.937578][T13721] bond0: Unable to set down delay as MII monitoring is disabled [ 844.211051][T13743] FAULT_INJECTION: forcing a failure. [ 844.211051][T13743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 844.225513][T13743] CPU: 0 UID: 0 PID: 13743 Comm: syz.8.1715 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 844.225541][T13743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 844.225554][T13743] Call Trace: [ 844.225562][T13743] [ 844.225570][T13743] dump_stack_lvl+0x189/0x250 [ 844.225597][T13743] ? __pfx____ratelimit+0x10/0x10 [ 844.225619][T13743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 844.225642][T13743] ? __pfx__printk+0x10/0x10 [ 844.225667][T13743] ? __might_fault+0xb0/0x130 [ 844.225699][T13743] should_fail_ex+0x414/0x560 [ 844.225724][T13743] _copy_from_user+0x2d/0xb0 [ 844.225752][T13743] video_usercopy+0x354/0x14f0 [ 844.225787][T13743] ? smk_tskacc+0x2fc/0x370 [ 844.225818][T13743] ? __pfx_subdev_do_ioctl_lock+0x10/0x10 [ 844.225840][T13743] ? __pfx_video_usercopy+0x10/0x10 [ 844.225866][T13743] ? smack_file_ioctl+0x2a9/0x340 [ 844.225902][T13743] ? __fget_files+0x2a/0x420 [ 844.225923][T13743] ? __fget_files+0x3a0/0x420 [ 844.225949][T13743] v4l2_ioctl+0x18a/0x1e0 [ 844.225978][T13743] ? __pfx_v4l2_ioctl+0x10/0x10 [ 844.226005][T13743] __se_sys_ioctl+0xfc/0x170 [ 844.226036][T13743] do_syscall_64+0xfa/0x3b0 [ 844.226060][T13743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.226079][T13743] ? asm_sysvec_call_function_single+0x1a/0x20 [ 844.226099][T13743] ? clear_bhb_loop+0x60/0xb0 [ 844.226123][T13743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.226141][T13743] RIP: 0033:0x7f7f7e78ebe9 [ 844.226159][T13743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 844.226176][T13743] RSP: 002b:00007f7f7f617038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 844.226197][T13743] RAX: ffffffffffffffda RBX: 00007f7f7e9b6090 RCX: 00007f7f7e78ebe9 [ 844.226211][T13743] RDX: 0000200000000240 RSI: 00000000c0305616 RDI: 0000000000000008 [ 844.226224][T13743] RBP: 00007f7f7f617090 R08: 0000000000000000 R09: 0000000000000000 [ 844.226236][T13743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 844.226248][T13743] R13: 00007f7f7e9b6128 R14: 00007f7f7e9b6090 R15: 00007fff253e6588 [ 844.226286][T13743] [ 845.960591][T13754] xt_hashlimit: max too large, truncated to 1048576 [ 845.969631][T13754] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 847.664678][T13756] netlink: 'syz.7.1719': attribute type 14 has an invalid length. [ 850.109269][T13781] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1726'. [ 850.118342][T13781] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1726'. [ 850.127629][T13781] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1726'. [ 850.514688][T13790] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1729'. [ 855.044131][T13824] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 855.681489][T13836] FAULT_INJECTION: forcing a failure. [ 855.681489][T13836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 855.815250][T13836] CPU: 0 UID: 0 PID: 13836 Comm: syz.3.1741 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 855.815278][T13836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 855.815291][T13836] Call Trace: [ 855.815298][T13836] [ 855.815307][T13836] dump_stack_lvl+0x189/0x250 [ 855.815333][T13836] ? __pfx____ratelimit+0x10/0x10 [ 855.815354][T13836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 855.815376][T13836] ? __pfx__printk+0x10/0x10 [ 855.815400][T13836] ? __might_fault+0xb0/0x130 [ 855.815430][T13836] should_fail_ex+0x414/0x560 [ 855.815455][T13836] _copy_from_user+0x2d/0xb0 [ 855.815482][T13836] ____sys_sendmsg+0x2fe/0x830 [ 855.815517][T13836] ? __pfx_____sys_sendmsg+0x10/0x10 [ 855.815555][T13836] ? import_iovec+0x74/0xa0 [ 855.815585][T13836] ___sys_sendmsg+0x21f/0x2a0 [ 855.815620][T13836] ? __pfx____sys_sendmsg+0x10/0x10 [ 855.815685][T13836] ? __fget_files+0x2a/0x420 [ 855.815706][T13836] ? __fget_files+0x3a0/0x420 [ 855.815738][T13836] __x64_sys_sendmsg+0x19b/0x260 [ 855.815770][T13836] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 855.815809][T13836] ? __pfx_ksys_write+0x10/0x10 [ 855.815824][T13836] ? rcu_is_watching+0x15/0xb0 [ 855.815850][T13836] ? do_syscall_64+0xbe/0x3b0 [ 855.815875][T13836] do_syscall_64+0xfa/0x3b0 [ 855.815895][T13836] ? lockdep_hardirqs_on+0x9c/0x150 [ 855.815914][T13836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.815933][T13836] ? clear_bhb_loop+0x60/0xb0 [ 855.815956][T13836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.815974][T13836] RIP: 0033:0x7ff3c298ebe9 [ 855.815990][T13836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 855.816007][T13836] RSP: 002b:00007ff3c376f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 855.816027][T13836] RAX: ffffffffffffffda RBX: 00007ff3c2bb5fa0 RCX: 00007ff3c298ebe9 [ 855.816040][T13836] RDX: 0000000000000000 RSI: 0000200000001940 RDI: 0000000000000003 [ 855.816052][T13836] RBP: 00007ff3c376f090 R08: 0000000000000000 R09: 0000000000000000 [ 855.816063][T13836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 855.816074][T13836] R13: 00007ff3c2bb6038 R14: 00007ff3c2bb5fa0 R15: 00007ffc7fe45f58 [ 855.816104][T13836] [ 856.040010][ C0] vkms_vblank_simulate: vblank timer overrun [ 856.247521][T13840] input: syz0 as /devices/virtual/input/input11 [ 858.103558][T13868] xt_hashlimit: max too large, truncated to 1048576 [ 858.725458][T13868] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 858.799624][T13867] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1753'. [ 858.842309][T13867] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1753'. [ 858.882160][T13869] batman_adv: batadv0: Adding interface: dummy0 [ 858.928575][T13869] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 858.976367][T13873] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1755'. [ 859.077759][T13869] batman_adv: batadv0: Interface activated: dummy0 [ 859.142743][T13867] net_ratelimit: 10 callbacks suppressed [ 859.142767][T13867] batadv0: mtu less than device minimum [ 859.197524][T13867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 859.209563][T13867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 859.221324][T13867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 859.233186][T13867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 859.244905][T13867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 859.256779][T13867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 859.268507][T13867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 859.280394][T13867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 859.292255][T13867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 859.400145][T13881] loop8: detected capacity change from 0 to 8 [ 859.418325][T13881] Dev loop8: unable to read RDB block 8 [ 859.426970][T13881] loop8: unable to read partition table [ 859.441557][T13881] loop8: partition table beyond EOD, truncated [ 859.448227][T13881] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 860.657223][T13894] syz.8.1762: attempt to access beyond end of device [ 860.657223][T13894] loop8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 862.494033][T13916] block nbd3: NBD_DISCONNECT [ 864.731900][T13935] netlink: 116 bytes leftover after parsing attributes in process `syz.7.1772'. [ 865.670132][T13941] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1775'. [ 865.710528][T13941] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1775'. [ 867.252188][T13968] /dev/nullb0: Can't lookup blockdev [ 871.190551][ T31] audit: type=1400 audit(1755659173.070:310): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=13992 comm="syz.6.1787" daddr=fc02::ff [ 871.649628][T13997] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 871.670059][T13997] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 872.858235][T14015] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1792'. [ 872.867554][T14015] netlink: 'syz.8.1792': attribute type 5 has an invalid length. [ 872.875411][T14015] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1792'. [ 872.919009][T14015] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 872.928014][T14015] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 872.936939][T14015] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 872.945791][T14015] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 872.955033][T14015] geneve2: entered promiscuous mode [ 872.960342][T14015] geneve2: entered allmulticast mode [ 873.985996][T14018] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1793'. [ 874.422725][T14029] FAULT_INJECTION: forcing a failure. [ 874.422725][T14029] name failslab, interval 1, probability 0, space 0, times 0 [ 874.435452][T14029] CPU: 1 UID: 0 PID: 14029 Comm: syz.7.1788 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 874.435475][T14029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 874.435487][T14029] Call Trace: [ 874.435495][T14029] [ 874.435503][T14029] dump_stack_lvl+0x189/0x250 [ 874.435529][T14029] ? __pfx____ratelimit+0x10/0x10 [ 874.435551][T14029] ? __pfx_dump_stack_lvl+0x10/0x10 [ 874.435573][T14029] ? __pfx__printk+0x10/0x10 [ 874.435603][T14029] ? __pfx___might_resched+0x10/0x10 [ 874.435624][T14029] ? fs_reclaim_acquire+0x7d/0x100 [ 874.435652][T14029] should_fail_ex+0x414/0x560 [ 874.435678][T14029] should_failslab+0xa8/0x100 [ 874.435700][T14029] __kmalloc_noprof+0xcb/0x4f0 [ 874.435718][T14029] ? copy_splice_read+0x143/0x9b0 [ 874.435743][T14029] copy_splice_read+0x143/0x9b0 [ 874.435774][T14029] ? __pfx_copy_splice_read+0x10/0x10 [ 874.435791][T14029] ? look_up_lock_class+0x74/0x170 [ 874.435814][T14029] ? register_lock_class+0x51/0x320 [ 874.435848][T14029] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 874.435875][T14029] ? alloc_pipe_info+0x374/0x4d0 [ 874.435896][T14029] ? __pfx_copy_splice_read+0x10/0x10 [ 874.435913][T14029] splice_direct_to_actor+0x4a6/0xcc0 [ 874.435953][T14029] ? __pfx_direct_splice_actor+0x10/0x10 [ 874.435973][T14029] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 874.436004][T14029] do_splice_direct+0x181/0x270 [ 874.436028][T14029] ? __pfx_do_splice_direct+0x10/0x10 [ 874.436049][T14029] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 874.436073][T14029] ? bpf_lsm_file_permission+0x9/0x20 [ 874.436094][T14029] ? security_file_permission+0x75/0x290 [ 874.436117][T14029] ? rw_verify_area+0x258/0x650 [ 874.436150][T14029] do_sendfile+0x4da/0x7e0 [ 874.436173][T14029] ? __pfx_vfs_write+0x10/0x10 [ 874.436197][T14029] ? __pfx_do_sendfile+0x10/0x10 [ 874.436220][T14029] ? __fget_files+0x3a0/0x420 [ 874.436252][T14029] __se_sys_sendfile64+0x13e/0x190 [ 874.436278][T14029] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 874.436298][T14029] ? rcu_is_watching+0x15/0xb0 [ 874.436324][T14029] ? do_syscall_64+0xbe/0x3b0 [ 874.436356][T14029] do_syscall_64+0xfa/0x3b0 [ 874.436376][T14029] ? lockdep_hardirqs_on+0x9c/0x150 [ 874.436395][T14029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.436415][T14029] ? clear_bhb_loop+0x60/0xb0 [ 874.436438][T14029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.436456][T14029] RIP: 0033:0x7fc80ad8ebe9 [ 874.436473][T14029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 874.436489][T14029] RSP: 002b:00007fc80bb65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 874.436509][T14029] RAX: ffffffffffffffda RBX: 00007fc80afb6180 RCX: 00007fc80ad8ebe9 [ 874.436523][T14029] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 874.436534][T14029] RBP: 00007fc80bb65090 R08: 0000000000000000 R09: 0000000000000000 [ 874.436545][T14029] R10: 0000020000023896 R11: 0000000000000246 R12: 0000000000000001 [ 874.436557][T14029] R13: 00007fc80afb6218 R14: 00007fc80afb6180 R15: 00007ffd92469998 [ 874.436587][T14029] [ 875.582562][T14038] netlink: 'syz.3.1796': attribute type 14 has an invalid length. [ 877.502613][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 877.509649][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 878.281564][T14069] tipc: Enabling of bearer rejected, failed to enable media [ 879.449472][T14088] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1809'. [ 880.114473][T14099] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1811'. [ 880.127561][T14099] syz_tun: entered allmulticast mode [ 880.456781][ T31] audit: type=1400 audit(1755659182.990:311): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14101 comm="syz.8.1812" daddr=ff02::1 [ 880.588631][T14110] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1811'. [ 880.754390][T14098] syz_tun: left allmulticast mode [ 881.059950][T14119] xt_TCPMSS: Only works on TCP SYN packets [ 883.009863][ T31] audit: type=1326 audit(1755659185.360:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14139 comm="syz.6.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79a98ebe9 code=0x7ffc0000 [ 883.032547][ T31] audit: type=1326 audit(1755659185.360:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14139 comm="syz.6.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb79a98ebe9 code=0x7ffc0000 [ 883.054192][ T31] audit: type=1326 audit(1755659185.360:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14139 comm="syz.6.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79a98ebe9 code=0x7ffc0000 [ 884.029166][ T31] audit: type=1326 audit(1755659185.360:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14139 comm="syz.6.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fb79a98ebe9 code=0x7ffc0000 [ 884.058127][ T31] audit: type=1326 audit(1755659185.360:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14139 comm="syz.6.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79a98ebe9 code=0x7ffc0000 [ 884.191034][ T31] audit: type=1326 audit(1755659185.360:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14139 comm="syz.6.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb79a98ebe9 code=0x7ffc0000 [ 884.213089][ T31] audit: type=1326 audit(1755659185.360:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14139 comm="syz.6.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79a98ebe9 code=0x7ffc0000 [ 884.287085][ T31] audit: type=1326 audit(1755659185.360:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14139 comm="syz.6.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fb79a98ebe9 code=0x7ffc0000 [ 884.558416][ T31] audit: type=1326 audit(1755659185.360:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14139 comm="syz.6.1822" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb79a98ebe9 code=0x7ffc0000 [ 886.385773][T14163] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1828'. [ 886.708901][T14171] netlink: 76 bytes leftover after parsing attributes in process `syz.6.1831'. [ 888.284904][T14182] netlink: 'syz.3.1835': attribute type 38 has an invalid length. [ 889.712164][ T31] kauditd_printk_skb: 39 callbacks suppressed [ 889.712202][ T31] audit: type=1400 audit(1755659192.210:360): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14183 comm="syz.6.1836" daddr=fc02::ff [ 892.100083][ T31] audit: type=1400 audit(1755659194.630:361): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14210 comm="syz.6.1845" daddr=fe88::107 [ 892.443402][ T31] audit: type=1400 audit(1755659194.970:362): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14218 comm="syz.8.1848" daddr=fc02::ff [ 893.557539][T14226] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1850'. [ 894.577598][T14232] xt_TCPMSS: Only works on TCP SYN packets [ 895.039853][T14240] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 896.096396][T14258] syzkaller1: entered promiscuous mode [ 896.104545][T14258] syzkaller1: entered allmulticast mode [ 896.542320][T14268] qrtr: Invalid version 47 [ 896.567819][T14268] fuse: Unknown parameter 'g“oup_id' [ 897.430611][ T5887] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 897.581029][ T5887] usb 4-1: device descriptor read/64, error -71 [ 897.830816][ T5887] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 898.030612][ T5887] usb 4-1: device descriptor read/64, error -71 [ 898.142622][ T5887] usb usb4-port1: attempt power cycle [ 898.560696][ T5887] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 898.600064][ T5887] usb 4-1: device descriptor read/8, error -71 [ 898.901534][T14300] qrtr: Invalid version 47 [ 898.906062][ T5887] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 898.944070][T14300] fuse: Unknown parameter 'g“oup_id' [ 898.952248][ T5887] usb 4-1: device descriptor read/8, error -71 [ 899.072019][ T5887] usb usb4-port1: unable to enumerate USB device [ 899.889112][T14313] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1878'. [ 900.069098][T14316] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1879'. [ 901.352201][ T31] audit: type=1400 audit(1755659203.880:363): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14339 comm="syz.8.1886" [ 901.370211][T14338] qrtr: Invalid version 47 [ 901.411222][T14338] fuse: Unknown parameter 'g“oup_id' [ 901.752029][T14348] trusted_key: encrypted_key: insufficient parameters specified [ 903.479592][T14356] Cannot find del_set index 0 as target [ 905.557417][T14372] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1896'. [ 905.727559][T14379] netlink: 'syz.6.1900': attribute type 1 has an invalid length. [ 905.736146][ T31] audit: type=1800 audit(1755659208.260:364): pid=14376 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.1898" name="nullb0" dev="devtmpfs" ino=2948 res=0 errno=0 [ 905.900419][T14379] 8021q: adding VLAN 0 to HW filter on device bond1 [ 907.000286][T14383] bond1: (slave veth3): Enslaving as an active interface with a down link [ 907.030315][T14385] batman_adv: batadv0: Interface deactivated: dummy0 [ 907.128611][T14385] batman_adv: batadv0: Removing interface: dummy0 [ 907.222109][T14385] bond1: (slave dummy0): making interface the new active one [ 907.223407][T14385] dummy0: entered promiscuous mode [ 907.282515][T14385] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 908.212367][T14392] qrtr: Invalid version 47 [ 909.069044][T14392] fuse: Unknown parameter 'g“oup_id' [ 910.026179][T14414] syz.7.1907: attempt to access beyond end of device [ 910.026179][T14414] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 911.399626][T14423] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1909'. [ 912.031031][T14432] xt_TCPMSS: Only works on TCP SYN packets [ 912.375879][T14434] netlink: 'syz.8.1912': attribute type 14 has an invalid length. [ 912.803911][T14436] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1913'. [ 912.970695][ T5922] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 913.147021][T14445] netlink: 'syz.7.1916': attribute type 14 has an invalid length. [ 913.488030][ T5922] usb 9-1: Using ep0 maxpacket: 16 [ 913.513470][ T5922] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 913.530525][ T5922] usb 9-1: config 0 has no interfaces? [ 913.536073][ T5922] usb 9-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 913.570463][ T5922] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.591716][ T5922] usb 9-1: config 0 descriptor?? [ 913.821517][T14451] fuse: Unknown parameter 'g“oup_id' [ 913.837252][ T5922] usb 9-1: USB disconnect, device number 31 [ 915.071702][ T31] audit: type=1400 audit(1755659217.600:365): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14456 comm="syz.4.1920" daddr=fe80::31 [ 915.128218][T14457] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1920'. [ 915.437842][T14469] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1923'. [ 915.711168][T14476] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1924'. [ 915.753254][T14476] vlan0: entered allmulticast mode [ 915.758725][T14476] bridge0: port 3(vlan0) entered blocking state [ 915.780524][T14476] bridge0: port 3(vlan0) entered disabled state [ 915.783795][ T5922] kernel write not supported for file /input/mouse0 (pid: 5922 comm: kworker/0:4) [ 915.802782][T14476] vlan0: entered promiscuous mode [ 917.852616][T14493] overlayfs: workdir and upperdir must reside under the same mount [ 919.726473][T14499] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1930'. [ 919.748403][T14499] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1930'. [ 921.110139][T14509] lo speed is unknown, defaulting to 1000 [ 924.464856][T14544] Cannot find add_set index 0 as target [ 930.614188][ T31] audit: type=1800 audit(1755659233.150:366): pid=14567 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.1951" name="nullb0" dev="tmpfs" ino=2138 res=0 errno=0 [ 931.163342][ T31] audit: type=1326 audit(1755659233.700:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14583 comm="syz.8.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7e78ebe9 code=0x7ffc0000 [ 931.184948][ C1] vkms_vblank_simulate: vblank timer overrun [ 931.191394][T10027] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 931.335995][ T31] audit: type=1326 audit(1755659233.730:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14583 comm="syz.8.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7e78ebe9 code=0x7ffc0000 [ 931.358585][ T31] audit: type=1326 audit(1755659233.730:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14583 comm="syz.8.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f7f7e78ebe9 code=0x7ffc0000 [ 931.380294][ T31] audit: type=1326 audit(1755659233.730:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14583 comm="syz.8.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7e78ebe9 code=0x7ffc0000 [ 931.401867][ C1] vkms_vblank_simulate: vblank timer overrun [ 931.410087][ T31] audit: type=1326 audit(1755659233.730:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14583 comm="syz.8.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f7e78ebe9 code=0x7ffc0000 [ 931.444508][ T31] audit: type=1326 audit(1755659233.730:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14583 comm="syz.8.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7e78ebe9 code=0x7ffc0000 [ 931.469676][ T31] audit: type=1326 audit(1755659233.730:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14583 comm="syz.8.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7f7e78ebe9 code=0x7ffc0000 [ 931.500048][ T31] audit: type=1326 audit(1755659233.730:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14583 comm="syz.8.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f7e78ebe9 code=0x7ffc0000 [ 931.502367][T10027] usb 4-1: Invalid ep0 maxpacket: 64 [ 931.528578][ T31] audit: type=1326 audit(1755659233.740:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14583 comm="syz.8.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f7f7e78ebe9 code=0x7ffc0000 [ 931.701875][T10027] usb 4-1: new low-speed USB device number 25 using dummy_hcd [ 932.061429][T10027] usb 4-1: Invalid ep0 maxpacket: 64 [ 932.068987][T10027] usb usb4-port1: attempt power cycle [ 932.188470][T14597] can0: slcan on ttyS3. [ 932.391236][T14597] can0 (unregistered): slcan off ttyS3. [ 932.408088][T14595] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1955'. [ 932.573462][T14605] FAULT_INJECTION: forcing a failure. [ 932.573462][T14605] name failslab, interval 1, probability 0, space 0, times 0 [ 932.593205][T14605] CPU: 0 UID: 0 PID: 14605 Comm: syz.8.1959 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 932.593229][T14605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 932.593241][T14605] Call Trace: [ 932.593249][T14605] [ 932.593257][T14605] dump_stack_lvl+0x189/0x250 [ 932.593284][T14605] ? __pfx____ratelimit+0x10/0x10 [ 932.593306][T14605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 932.593328][T14605] ? __pfx__printk+0x10/0x10 [ 932.593357][T14605] ? __pfx___might_resched+0x10/0x10 [ 932.593380][T14605] ? fs_reclaim_acquire+0x7d/0x100 [ 932.593410][T14605] should_fail_ex+0x414/0x560 [ 932.593437][T14605] should_failslab+0xa8/0x100 [ 932.593461][T14605] __kmalloc_noprof+0xcb/0x4f0 [ 932.593480][T14605] ? tomoyo_encode+0x28b/0x550 [ 932.593511][T14605] tomoyo_encode+0x28b/0x550 [ 932.593543][T14605] tomoyo_realpath_from_path+0x58d/0x5d0 [ 932.593596][T14605] tomoyo_path_perm+0x213/0x4b0 [ 932.593614][T14605] ? security_inode_permission+0xb7/0x310 [ 932.593633][T14605] ? tomoyo_path_perm+0x1e3/0x4b0 [ 932.593652][T14605] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 932.593680][T14605] ? fuse_dentry_revalidate+0x71a/0x9e0 [ 932.593731][T14605] ? __pfx_current_check_access_path+0x10/0x10 [ 932.593773][T14605] tomoyo_path_unlink+0xa2/0xe0 [ 932.593799][T14605] ? __pfx_tomoyo_path_unlink+0x10/0x10 [ 932.593840][T14605] security_path_unlink+0x167/0x360 [ 932.593871][T14605] do_unlinkat+0x2de/0x560 [ 932.593896][T14605] ? __pfx_do_unlinkat+0x10/0x10 [ 932.593921][T14605] ? getname_flags+0x1e5/0x540 [ 932.593949][T14605] __x64_sys_unlink+0x47/0x50 [ 932.593966][T14605] do_syscall_64+0xfa/0x3b0 [ 932.593985][T14605] ? lockdep_hardirqs_on+0x9c/0x150 [ 932.594006][T14605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.594030][T14605] ? clear_bhb_loop+0x60/0xb0 [ 932.594051][T14605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.594066][T14605] RIP: 0033:0x7f7f7e78ebe9 [ 932.594081][T14605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 932.594096][T14605] RSP: 002b:00007f7f7f638038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 932.594114][T14605] RAX: ffffffffffffffda RBX: 00007f7f7e9b5fa0 RCX: 00007f7f7e78ebe9 [ 932.594127][T14605] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000026c0 [ 932.594137][T14605] RBP: 00007f7f7f638090 R08: 0000000000000000 R09: 0000000000000000 [ 932.594147][T14605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.594157][T14605] R13: 00007f7f7e9b6038 R14: 00007f7f7e9b5fa0 R15: 00007fff253e6588 [ 932.594185][T14605] [ 932.754116][T14605] ERROR: Out of memory at tomoyo_realpath_from_path. [ 932.858959][T10027] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 932.919153][T10027] usb 4-1: Invalid ep0 maxpacket: 64 [ 932.976168][ T7460] dummy0: left promiscuous mode [ 933.070916][T10027] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 933.086087][T14618] FAULT_INJECTION: forcing a failure. [ 933.086087][T14618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 933.210676][T14618] CPU: 1 UID: 0 PID: 14618 Comm: syz.7.1961 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 933.210707][T14618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 933.210718][T14618] Call Trace: [ 933.210726][T14618] [ 933.210734][T14618] dump_stack_lvl+0x189/0x250 [ 933.210762][T14618] ? __pfx____ratelimit+0x10/0x10 [ 933.210783][T14618] ? __pfx_dump_stack_lvl+0x10/0x10 [ 933.210804][T14618] ? __pfx__printk+0x10/0x10 [ 933.210830][T14618] ? __might_fault+0xb0/0x130 [ 933.210861][T14618] should_fail_ex+0x414/0x560 [ 933.210887][T14618] _copy_from_user+0x2d/0xb0 [ 933.210914][T14618] kstrtouint_from_user+0xc4/0x170 [ 933.210940][T14618] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 933.210986][T14618] proc_fail_nth_write+0x88/0x240 [ 933.211012][T14618] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 933.211041][T14618] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 933.211067][T14618] vfs_write+0x27e/0xa90 [ 933.211095][T14618] ? __pfx_vfs_write+0x10/0x10 [ 933.211115][T14618] ? __fget_files+0x2a/0x420 [ 933.211141][T14618] ? __fget_files+0x3a0/0x420 [ 933.211161][T14618] ? __fget_files+0x2a/0x420 [ 933.211191][T14618] ksys_write+0x145/0x250 [ 933.211213][T14618] ? __pfx_ksys_write+0x10/0x10 [ 933.211236][T14618] ? do_syscall_64+0xbe/0x3b0 [ 933.211262][T14618] do_syscall_64+0xfa/0x3b0 [ 933.211284][T14618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.211303][T14618] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 933.211321][T14618] ? clear_bhb_loop+0x60/0xb0 [ 933.211345][T14618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.211363][T14618] RIP: 0033:0x7fc80ad8d69f [ 933.211380][T14618] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 933.211397][T14618] RSP: 002b:00007fc80bba7030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 933.211416][T14618] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc80ad8d69f [ 933.211430][T14618] RDX: 0000000000000001 RSI: 00007fc80bba70a0 RDI: 0000000000000006 [ 933.211441][T14618] RBP: 00007fc80bba7090 R08: 0000000000000000 R09: 0000000000000000 [ 933.211453][T14618] R10: 00002000000001c0 R11: 0000000000000293 R12: 0000000000000001 [ 933.211464][T14618] R13: 00007fc80afb6038 R14: 00007fc80afb5fa0 R15: 00007ffd92469998 [ 933.211496][T14618] [ 933.441130][ C1] vkms_vblank_simulate: vblank timer overrun [ 933.470931][T10027] usb 4-1: Invalid ep0 maxpacket: 64 [ 933.476633][T10027] usb usb4-port1: unable to enumerate USB device [ 934.551516][T14636] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1967'. [ 935.895761][T14657] xt_TCPMSS: Only works on TCP SYN packets [ 938.941038][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 938.947367][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 940.805442][T14683] macvtap1: entered allmulticast mode [ 940.811024][T14683] veth0_macvtap: entered allmulticast mode [ 944.802714][T14687] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1981'. [ 948.419456][T14722] netlink: 'syz.3.1986': attribute type 14 has an invalid length. [ 949.221804][T14726] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1990'. [ 949.411320][ T5887] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 949.531023][T14732] syz.8.1992: attempt to access beyond end of device [ 949.531023][T14732] loop8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 949.724445][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 950.917982][ T5887] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 950.995111][ T5887] usb 4-1: config 0 has no interfaces? [ 951.001857][ T5887] usb 4-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 951.054901][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.093713][T14735] team_slave_1: entered promiscuous mode [ 951.100227][T14735] vlan0: entered promiscuous mode [ 951.112723][ T5887] usb 4-1: config 0 descriptor?? [ 951.149913][T14735] team0: entered promiscuous mode [ 951.178788][T14735] geneve0: entered promiscuous mode [ 951.288361][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 951.301549][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 951.315864][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 951.325800][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 951.334595][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 951.357481][ T5157] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 951.365093][ T5157] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 951.374779][ T5157] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 951.405282][ T5157] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 951.421331][ T5157] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 951.492561][ T5887] usb 4-1: USB disconnect, device number 28 [ 951.517198][T14741] netlink: 116 bytes leftover after parsing attributes in process `syz.8.1995'. [ 951.879250][T14751] netlink: 'syz.4.2000': attribute type 12 has an invalid length. [ 952.100921][T14755] syz.3.1998: attempt to access beyond end of device [ 952.100921][T14755] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 952.250370][T14742] lo speed is unknown, defaulting to 1000 [ 952.977723][ T7453] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.296078][T14762] tmpfs: Bad value for 'mpol' [ 953.340208][T14762] 9pnet_fd: Insufficient options for proto=fd [ 953.370254][ T7453] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.486465][ T51] Bluetooth: hci5: command tx timeout [ 953.525134][ T7453] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.630793][T10027] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 953.641426][T14769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2003'. [ 953.666604][ T7453] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.675923][T14773] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2006'. [ 953.737884][T12462] Bluetooth: hci4: Frame reassembly failed (-84) [ 953.740804][T14773] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2006'. [ 953.757280][T12462] Bluetooth: hci4: Frame reassembly failed (-84) [ 953.793987][T10027] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 953.816631][T10027] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 953.833001][T10027] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 953.846740][T10027] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.854966][T10027] usb 4-1: Product: syz [ 953.859231][T10027] usb 4-1: Manufacturer: syz [ 953.863940][T10027] usb 4-1: SerialNumber: syz [ 953.950958][T14742] chnl_net:caif_netlink_parms(): no params data found [ 954.090746][T14767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 954.102487][T14767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 954.113210][T14767] cgroup: release_agent respecified [ 954.122627][T10027] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 954.136335][T10027] usb 4-1: USB disconnect, device number 29 [ 954.877928][ T7453] macvlan0: left promiscuous mode [ 954.887614][ T7453] bond0: left promiscuous mode [ 954.895625][ T7453] bridge0: port 3(macvlan0) entered disabled state [ 954.913599][ T7453] bridge_slave_1: left allmulticast mode [ 954.919546][ T7453] bridge_slave_1: left promiscuous mode [ 954.931507][ T5915] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 954.947150][ T7453] bridge0: port 2(bridge_slave_1) entered disabled state [ 954.959088][ T7453] bridge_slave_0: left allmulticast mode [ 954.970135][ T7453] bridge_slave_0: left promiscuous mode [ 954.976317][ T7453] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.017678][T14790] netlink: 'syz.6.2010': attribute type 39 has an invalid length. [ 955.029605][ T7453] bond_slave_0: left promiscuous mode [ 955.035573][ T7453] bond_slave_1: left promiscuous mode [ 955.102870][ T5915] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 955.119229][ T5915] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 955.129789][ T5915] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 955.147576][ T5915] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64 [ 955.159036][ T5915] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 955.177249][ T5915] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 955.186615][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.411889][ T5915] usb 4-1: usb_control_msg returned -71 [ 955.425425][ T5915] usbtmc 4-1:16.0: can't read capabilities [ 955.583649][ T5157] Bluetooth: hci5: command tx timeout [ 955.601960][ T7453] bond0 (unregistering): left allmulticast mode [ 955.608459][ T7453] bond_slave_0: left allmulticast mode [ 955.610321][ T5915] usb 4-1: USB disconnect, device number 30 [ 955.620238][ T7453] bond_slave_1: left allmulticast mode [ 955.649266][ T7453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 955.664502][ T7453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 955.676917][ T7453] bond0 (unregistering): Released all slaves [ 955.693932][T14742] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.704824][T14742] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.712182][T14742] bridge_slave_0: entered allmulticast mode [ 955.719678][T14742] bridge_slave_0: entered promiscuous mode [ 955.771691][T14742] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.779201][T14742] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.788197][T14742] bridge_slave_1: entered allmulticast mode [ 955.795652][T14742] bridge_slave_1: entered promiscuous mode [ 955.802835][T14744] Bluetooth: hci4: command 0x1003 tx timeout [ 955.810856][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 955.856051][ T7453] : left promiscuous mode [ 955.922381][T14742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 955.937797][T14742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 956.131055][T14742] team0: Port device team_slave_0 added [ 956.146938][T14796] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 956.154040][T14796] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 956.160804][T14796] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 956.167299][T14796] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4) [ 956.174396][T14796] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 956.181519][T14796] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 956.187989][T14796] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 956.194766][T14796] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 956.201537][T14796] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 956.208098][T14796] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 956.214662][T14796] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 956.255733][T14742] team0: Port device team_slave_1 added [ 956.922950][T14800] netlink: 546 bytes leftover after parsing attributes in process `syz.6.2013'. [ 957.072987][T14808] ptrace attach of "./syz-executor exec"[5838] was attempted by "./syz-executor exec"[14808] [ 957.159861][T14742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 957.176459][T14742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 957.220907][T14813] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2016'. [ 957.243779][T14742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 957.326948][T14742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 957.366764][T14742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 957.430734][T14742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 957.641085][ T51] Bluetooth: hci5: command tx timeout [ 959.728205][ T51] Bluetooth: hci5: command tx timeout [ 959.903922][ T7453] hsr_slave_0: left promiscuous mode [ 959.930936][T14820] syz.8.2020 uses old SIOCAX25GETINFO [ 959.938159][ T7453] hsr_slave_1: left promiscuous mode [ 959.953672][ T7453] batman_adv: batadv0: Interface deactivated: dummy0 [ 959.969493][ T7453] batman_adv: batadv0: Removing interface: dummy0 [ 960.074544][T14830] kvm: requested 9219 ns i8254 timer period limited to 200000 ns [ 960.645238][ T7453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 960.671113][ T7453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 960.782186][ T7453] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 960.789677][ T7453] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 960.938244][ T7453] veth1_macvtap: left promiscuous mode [ 960.984660][ T7453] veth0_macvtap: left promiscuous mode [ 961.006394][ T31] kauditd_printk_skb: 56 callbacks suppressed [ 961.006413][ T31] audit: type=1400 audit(1755659263.540:432): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14835 comm="syz.8.2022" daddr=fe80::3a dest=20001 [ 961.267764][T14838] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2023'. [ 961.321278][ T31] audit: type=1400 audit(1755659263.860:433): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14837 comm="syz.8.2023" daddr=fe80::aa dest=20001 [ 961.330752][T14841] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2023'. [ 963.799743][ T7453] team0 (unregistering): Port device team_slave_1 removed [ 963.974739][ T7453] team0 (unregistering): Port device team_slave_0 removed [ 964.045996][ T5956] libceph: connect (1)[c::]:6789 error -101 [ 964.078957][ T5956] libceph: mon0 (1)[c::]:6789 connect error [ 964.384290][ T5956] libceph: connect (1)[c::]:6789 error -101 [ 964.393611][ T5956] libceph: mon0 (1)[c::]:6789 connect error [ 964.736078][T14854] ceph: No mds server is up or the cluster is laggy [ 965.081608][T14860] netlink: 116 bytes leftover after parsing attributes in process `syz.6.2029'. [ 965.396832][T14866] netlink: 'syz.4.2031': attribute type 1 has an invalid length. [ 965.476752][T14742] hsr_slave_0: entered promiscuous mode [ 965.506248][T14742] hsr_slave_1: entered promiscuous mode [ 965.526264][T14742] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 965.563668][T14742] Cannot create hsr debugfs directory [ 965.857862][T14873] syz.3.2032: attempt to access beyond end of device [ 965.857862][T14873] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 966.393349][T14867] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 969.655233][T14901] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2037'. [ 970.287823][T14742] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 970.332111][T14742] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 970.413147][T14742] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 970.429268][T14742] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 970.621204][T14907] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2039'. [ 971.053971][T14742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 971.606827][T14742] 8021q: adding VLAN 0 to HW filter on device team0 [ 971.647273][ T7455] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.654500][ T7455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 971.814832][ T7455] bridge0: port 2(bridge_slave_1) entered blocking state [ 971.821991][ T7455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 972.734593][T14742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 973.655080][T14742] veth0_vlan: entered promiscuous mode [ 973.691740][T14742] veth1_vlan: entered promiscuous mode [ 973.782490][T14742] veth0_macvtap: entered promiscuous mode [ 973.815572][T14742] veth1_macvtap: entered promiscuous mode [ 973.926768][T14742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 973.941150][T14742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 973.956096][T14742] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.966434][T14742] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.976329][T14742] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.991858][T14742] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.759546][ T7460] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.776559][ T7460] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 974.789763][T14951] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2048'. [ 974.798950][T14951] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2048'. [ 974.850842][T14951] bond1: (slave dummy0): Releasing active interface [ 974.910299][T12462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 974.942789][T12462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 975.026993][T14956] netlink: 116 bytes leftover after parsing attributes in process `syz.8.2049'. [ 975.270986][T14969] comedi: valid board names for 8255 driver are: [ 975.277707][T14969] 8255 [ 975.292779][T14969] comedi: valid board names for vmk80xx driver are: [ 975.299430][T14969] vmk80xx [ 975.321853][T14969] comedi: valid board names for usbduxsigma driver are: [ 975.328935][T14969] usbduxsigma [ 975.333673][T14969] comedi: valid board names for usbduxfast driver are: [ 975.340261][T14963] lo speed is unknown, defaulting to 1000 [ 975.341329][T14969] usbduxfast [ 975.349968][T14969] comedi: valid board names for usbdux driver are: [ 975.367892][T14969] usbdux [ 975.380698][T14969] comedi: valid board names for ni6501 driver are: [ 975.391689][T14969] ni6501 [ 975.397483][T14969] comedi: valid board names for dt9812 driver are: [ 975.440566][T14969] dt9812 [ 975.443579][T14969] comedi: valid board names for ni_labpc_cs driver are: [ 975.515482][T14969] ni_labpc_cs [ 975.518943][T14969] comedi: valid board names for ni_daq_700 driver are: [ 975.539740][ T31] audit: type=1400 audit(1755659278.070:434): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="B" requested=w pid=14978 comm="syz.6.2055" daddr=fe80::aa [ 975.579590][T14969] ni_daq_700 [ 975.597076][T14969] comedi: valid board names for labpc_pci driver are: [ 975.746690][T14986] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2054'. [ 975.755817][T14969] labpc_pci [ 975.761421][T14969] comedi: valid board names for adl_pci9118 driver are: [ 975.783728][T14969] pci9118dg [ 975.958656][T14988] x_tables: ip_tables: osf match: only valid for protocol 6 [ 976.755971][T14969] pci9118hg [ 976.790563][T14969] pci9118hr [ 976.956227][T14969] comedi: valid board names for 8255_pci driver are: [ 977.084286][T14969] 8255_pci [ 977.087433][T14969] comedi: valid board names for s526 driver are: [ 977.119973][T14969] s526 [ 977.126379][T14969] comedi: valid board names for multiq3 driver are: [ 977.133645][T14969] multiq3 [ 977.136961][T14969] comedi: valid board names for pcmuio driver are: [ 977.144765][T14969] pcmuio48 [ 977.148196][T14969] pcmuio96 [ 977.206242][T14969] comedi: valid board names for pcmmio driver are: [ 977.228822][T14969] pcmmio [ 977.290631][T14969] comedi: valid board names for pcmda12 driver are: [ 977.407491][T14969] pcmda12 [ 977.426902][T14969] comedi: valid board names for pcmad driver are: [ 977.470137][T14969] pcmad12 [ 977.483092][T14969] pcmad16 [ 977.508903][T14969] comedi: valid board names for ni_labpc driver are: [ 977.528089][T14969] lab-pc-1200 [ 977.541439][T14969] lab-pc-1200ai [ 977.549390][T14969] lab-pc+ [ 977.556990][T14969] comedi: valid board names for atmio16 driver are: [ 977.575179][T14969] atmio16 [ 977.583342][T14969] atmio16d [ 977.590992][T14969] comedi: valid board names for ni_at_ao driver are: [ 977.601883][T14969] at-ao-6 [ 977.605208][T14969] at-ao-10 [ 977.608640][T14969] comedi: valid board names for ni_at_a2150 driver are: [ 977.642509][T14969] ni_at_a2150 [ 977.650366][T14969] comedi: valid board names for adq12b driver are: [ 977.668687][T14969] adq12b [ 977.676006][T14969] comedi: valid board names for mpc624 driver are: [ 977.689610][T14969] mpc624 [ 977.740327][T14969] comedi: valid board names for c6xdigio driver are: [ 977.753658][T14969] c6xdigio [ 977.756950][T14969] comedi: valid board names for aio_iiro_16 driver are: [ 977.768418][T14969] aio_iiro_16 [ 977.774681][T14969] comedi: valid board names for aio_aio12_8 driver are: [ 977.900529][T14969] aio_aio12_8 [ 977.904214][T14969] aio_ai12_8 [ 977.909762][T14969] aio_ao12_4 [ 977.913326][T14969] comedi: valid board names for fl512 driver are: [ 977.919972][T14969] fl512 [ 977.923348][T14969] comedi: valid board names for dmm32at driver are: [ 977.930113][T14969] dmm32at [ 977.957262][T14969] comedi: valid board names for dt282x driver are: [ 978.077334][T14969] dt2821 [ 978.093864][T14969] dt2821-f [ 978.160520][T14969] dt2821-g [ 978.163692][T14969] dt2823 [ 978.166645][T14969] dt2824-pgh [ 978.253657][T14969] dt2824-pgl [ 978.257199][T14969] dt2825 [ 978.260336][T14969] dt2827 [ 978.263612][T14969] dt2828 [ 978.266753][T14969] dt2829 [ 978.273735][T14969] dt21-ez [ 978.277121][T14969] dt23-ez [ 978.280304][T14969] dt24-ez [ 979.400596][T14969] dt24-ez-pgl [ 979.404110][T14969] comedi: valid board names for dt2817 driver are: [ 979.859329][T14969] dt2817 [ 979.866218][T14969] comedi: valid board names for dt2815 driver are: [ 979.922247][T14969] dt2815 [ 979.925291][T14969] comedi: valid board names for dt2814 driver are: [ 979.947213][T15014] netlink: 'syz.6.2063': attribute type 64 has an invalid length. [ 979.960637][T15014] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2063'. [ 979.991876][T14969] dt2814 [ 979.994960][T14969] comedi: valid board names for dt2811 driver are: [ 980.069444][T14969] dt2811-pgh [ 980.079651][T14969] dt2811-pgl [ 980.096290][T14969] comedi: valid board names for dt2801 driver are: [ 980.128254][T14969] dt2801 [ 980.149198][T14969] comedi: valid board names for das6402 driver are: [ 980.202567][T14969] das6402-12 [ 980.236536][T14969] das6402-16 [ 980.267300][T14969] comedi: valid board names for das1800 driver are: [ 980.297937][T14969] das-1701st [ 980.322051][T14969] das-1701st-da [ 980.357917][T14969] das-1702st [ 980.389062][T14969] das-1702st-da [ 980.434274][T14969] das-1702hr [ 980.465296][T14969] das-1702hr-da [ 980.503431][T14969] das-1701ao [ 980.507232][T14969] das-1702ao [ 980.512983][T14969] das-1801st [ 980.529241][T14969] das-1801st-da [ 980.539586][T14969] das-1802st [ 980.555908][T14969] das-1802st-da [ 980.586114][T14969] das-1802hr [ 980.612778][T14969] das-1802hr-da [ 980.647067][T14969] das-1801hc [ 980.650705][T14969] das-1802hc [ 980.672929][T14969] das-1801ao [ 980.676371][T14969] das-1802ao [ 980.686446][T14969] comedi: valid board names for das800 driver are: [ 980.702764][T14969] das-800 [ 980.714157][T14969] cio-das800 [ 980.950554][T14969] das-801 [ 980.957117][T14969] cio-das801 [ 980.966220][T14969] das-802 [ 980.977203][T14969] cio-das802 [ 980.986196][T14969] cio-das802/16 [ 981.019800][T14969] comedi: valid board names for isa-das08 driver are: [ 981.260597][T14969] isa-das08 [ 981.280905][T14969] das08-pgm [ 981.282396][T15028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2069'. [ 981.284147][T14969] das08-pgh [ 981.284159][T14969] das08-pgl [ 981.310659][T14969] das08-aoh [ 981.316032][T14969] das08-aol [ 981.319250][T14969] das08-aom [ 981.343640][T14969] das08/jr-ao [ 981.373743][T14969] das08jr-16-ao [ 981.377357][T14969] pc104-das08 [ 981.410920][T14969] das08jr/16 [ 981.414412][T14969] comedi: valid board names for das16m1 driver are: [ 981.430686][T14969] das16m1 [ 981.433753][T14969] comedi: valid board names for dac02 driver are: [ 981.490455][T14969] dac02 [ 981.501824][T14969] comedi: valid board names for rti802 driver are: [ 981.541735][T14969] rti802 [ 981.544738][T14969] comedi: valid board names for rti800 driver are: [ 981.610501][T14969] rti800 [ 981.613542][T14969] rti815 [ 981.616472][T14969] comedi: valid board names for pcm3724 driver are: [ 981.670734][T14969] pcm3724 [ 981.673937][T14969] comedi: valid board names for pcl818 driver are: [ 981.700757][T14969] pcl818l [ 981.703969][T14969] pcl818h [ 981.720627][T14969] pcl818hd [ 981.723875][T14969] pcl818hg [ 981.734041][T14969] pcl818 [ 981.737022][T14969] pcl718 [ 981.750327][T14969] pcm3718 [ 981.781994][T14969] comedi: valid board names for pcl816 driver are: [ 981.788537][T14969] pcl816 [ 981.817350][T14969] pcl814b [ 981.829778][T14969] comedi: valid board names for pcl812 driver are: [ 981.880478][T14969] pcl812 [ 981.910528][T14969] pcl812pg [ 981.940609][T14969] acl8112pg [ 981.950718][T14969] acl8112dg [ 981.953976][T14969] acl8112hg [ 981.957216][T14969] a821pgl [ 982.011603][T14969] a821pglnda [ 982.014951][T14969] a821pgh [ 982.060724][T14969] a822pgl [ 982.070508][T14969] a822pgh [ 982.094816][T14969] a823pgl [ 982.098106][T14969] a823pgh [ 982.118274][T14969] pcl813 [ 982.130592][T14969] pcl813b [ 982.133667][T14969] acl8113 [ 982.194660][T14969] iso813 [ 982.211122][T14969] acl8216 [ 982.214200][T14969] a826pg [ 982.230462][T14969] comedi: valid board names for pcl730 driver are: [ 982.261636][T14969] pcl730 [ 982.264629][T14969] iso730 [ 982.267592][T14969] acl7130 [ 982.294438][T14969] pcm3730 [ 982.297497][T14969] pcl725 [ 982.315937][T14969] p8r8dio [ 982.324291][T14969] acl7225b [ 982.330468][T14969] p16r16dio [ 982.339679][T14969] pcl733 [ 982.344555][T14969] pcl734 [ 982.347507][T14969] opmm-1616-xt [ 982.364217][T14969] pearl-mm-p [ 982.374384][T14969] ir104-pbf [ 982.378809][T14969] comedi: valid board names for pcl726 driver are: [ 982.412603][T14969] pcl726 [ 982.415566][T14969] pcl727 [ 982.436369][T14969] pcl728 [ 982.441139][T14969] acl6126 [ 982.444540][T14969] acl6128 [ 982.447605][T14969] comedi: valid board names for pcl724 driver are: [ 982.530499][T14969] pcl724 [ 982.543697][T14969] pcl722 [ 982.554239][T14969] pcl731 [ 982.570517][T14969] acl7122 [ 982.574114][T14969] acl7124 [ 982.599145][T14969] pet48dio [ 982.634488][T14969] pcmio48 [ 982.640533][T14969] onyx-mm-dio [ 982.661125][T14969] comedi: valid board names for pcl711 driver are: [ 982.686302][T14969] pcl711 [ 982.691104][T14969] pcl711b [ 982.699640][T14969] acl8112hg [ 982.706229][T14969] acl8112dg [ 982.709538][T14969] comedi: valid board names for amplc_pc263 driver are: [ 983.031000][T15036] fuse: Unknown parameter 'g“oup_id' [ 983.240495][T14969] pc263 [ 983.243403][T14969] comedi: valid board names for amplc_pc236 driver are: [ 983.250348][T14969] pc36at [ 983.330720][T14969] comedi: valid board names for amplc_dio200 driver are: [ 983.337840][T14969] pc212e [ 983.342446][T14969] pc214e [ 983.345418][T14969] pc215e [ 983.350508][T14969] pc218e [ 983.356496][T14969] pc272e [ 983.372923][T14969] comedi: valid board names for comedi_parport driver are: [ 983.397472][T14969] comedi_parport [ 983.428140][T14969] comedi: valid board names for comedi_test driver are: [ 983.449632][T14969] comedi_test [ 983.457730][T14969] comedi: valid board names for comedi_bond driver are: [ 983.466285][T14969] comedi_bond [ 984.573647][T15039] ALSA: mixer_oss: invalid OSS volume '' [ 987.005027][T15071] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2080'. [ 989.131300][T15078] fuse: Unknown parameter 'g“oup_id' [ 989.519547][T15086] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2084'. [ 989.903716][T15090] macvtap2: entered allmulticast mode [ 993.074791][T15101] macvtap3: entered allmulticast mode [ 995.914867][T15117] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2093'. [ 997.219125][T15126] syz.8.2094: attempt to access beyond end of device [ 997.219125][T15126] loop8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 998.477390][T15123] fuse: Unknown parameter 'g“oup_id' [ 1000.441096][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1000.447558][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1003.189722][T14744] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1003.202443][T14744] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1003.213146][T14744] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1003.230573][T14744] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1003.241370][T14744] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1004.260898][T15159] lo speed is unknown, defaulting to 1000 [ 1005.494347][T14744] Bluetooth: hci4: command tx timeout [ 1007.607861][T14744] Bluetooth: hci4: command tx timeout [ 1009.006999][T15191] fuse: Unknown parameter 'g“oup_id' [ 1009.037078][T15192] xt_hashlimit: max too large, truncated to 1048576 [ 1009.044160][T15192] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1009.353238][T15200] FAULT_INJECTION: forcing a failure. [ 1009.353238][T15200] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1009.500496][T15200] CPU: 0 UID: 0 PID: 15200 Comm: syz.8.2113 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1009.500524][T15200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1009.500537][T15200] Call Trace: [ 1009.500545][T15200] [ 1009.500555][T15200] dump_stack_lvl+0x189/0x250 [ 1009.500584][T15200] ? __pfx____ratelimit+0x10/0x10 [ 1009.500605][T15200] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1009.500627][T15200] ? __pfx__printk+0x10/0x10 [ 1009.500654][T15200] ? __might_fault+0xb0/0x130 [ 1009.500686][T15200] should_fail_ex+0x414/0x560 [ 1009.500713][T15200] _copy_from_user+0x2d/0xb0 [ 1009.500742][T15200] ___sys_sendmsg+0x158/0x2a0 [ 1009.500777][T15200] ? __pfx____sys_sendmsg+0x10/0x10 [ 1009.500847][T15200] ? __fget_files+0x2a/0x420 [ 1009.500868][T15200] ? __fget_files+0x3a0/0x420 [ 1009.500902][T15200] __x64_sys_sendmsg+0x19b/0x260 [ 1009.500936][T15200] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1009.500978][T15200] ? __pfx_ksys_write+0x10/0x10 [ 1009.500994][T15200] ? rcu_is_watching+0x15/0xb0 [ 1009.501022][T15200] ? do_syscall_64+0xbe/0x3b0 [ 1009.501049][T15200] do_syscall_64+0xfa/0x3b0 [ 1009.501070][T15200] ? lockdep_hardirqs_on+0x9c/0x150 [ 1009.501090][T15200] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.501110][T15200] ? clear_bhb_loop+0x60/0xb0 [ 1009.501135][T15200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.501154][T15200] RIP: 0033:0x7f7f7e78ebe9 [ 1009.501172][T15200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1009.501190][T15200] RSP: 002b:00007f7f7f638038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1009.501212][T15200] RAX: ffffffffffffffda RBX: 00007f7f7e9b5fa0 RCX: 00007f7f7e78ebe9 [ 1009.501227][T15200] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1009.501239][T15200] RBP: 00007f7f7f638090 R08: 0000000000000000 R09: 0000000000000000 [ 1009.501251][T15200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1009.501263][T15200] R13: 00007f7f7e9b6038 R14: 00007f7f7e9b5fa0 R15: 00007fff253e6588 [ 1009.501294][T15200] [ 1009.719179][T15190] net_ratelimit: 10 callbacks suppressed [ 1009.719194][T15190] netlink: del zone limit has 4 unknown bytes [ 1009.731273][T14744] Bluetooth: hci4: command tx timeout [ 1009.801671][T15159] chnl_net:caif_netlink_parms(): no params data found [ 1010.207218][T15207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2114'. [ 1010.572269][T12453] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.215621][T12453] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.388576][T12453] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.446869][T15159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.454284][T15159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.462190][T15159] bridge_slave_0: entered allmulticast mode [ 1011.482106][T15159] bridge_slave_0: entered promiscuous mode [ 1011.525907][T12453] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.736335][T15159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.744084][T15159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.915079][T14744] Bluetooth: hci4: command tx timeout [ 1013.015438][T15159] bridge_slave_1: entered allmulticast mode [ 1013.038244][T15159] bridge_slave_1: entered promiscuous mode [ 1013.083504][T15223] macvtap4: entered allmulticast mode [ 1013.284535][T15159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1013.325632][T15159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1013.718154][T15159] team0: Port device team_slave_0 added [ 1013.760214][T15159] team0: Port device team_slave_1 added [ 1015.440916][T12453] batman_adv: batadv0: Interface deactivated: ip6gretap2 [ 1015.448026][T12453] batadv0: mtu less than device minimum [ 1015.467116][T12453] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1015.479728][T12453] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1015.491860][T12453] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1015.503822][T12453] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1015.515787][T12453] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1015.527736][T12453] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1015.539808][T12453] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1015.551862][T12453] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1015.563868][T12453] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1016.731202][T15239] fuse: Unknown parameter 'g“oup_id' [ 1018.345811][T12453] batman_adv: batadv0: Removing interface: ip6gretap2 [ 1018.701239][T12453] dvmrp1 (unregistering): left allmulticast mode [ 1020.350527][ T5922] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1020.614027][T12453] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1021.592686][ T5922] usb 9-1: Using ep0 maxpacket: 8 [ 1021.641553][ T5922] usb 9-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1021.651480][T12453] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1021.993523][ T5922] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.003302][T12453] bond0 (unregistering): Released all slaves [ 1022.009334][ T5922] usb 9-1: Product: syz [ 1022.028062][ T5922] usb 9-1: Manufacturer: syz [ 1022.033197][ T5922] usb 9-1: SerialNumber: syz [ 1022.045110][ T5922] usb 9-1: config 0 descriptor?? [ 1022.084581][ T5922] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1022.184621][T15247] macvtap5: entered allmulticast mode [ 1022.199621][T15263] macvtap1: entered allmulticast mode [ 1022.205148][T15263] veth0_macvtap: entered allmulticast mode [ 1022.343170][T12453] tipc: Left network mode [ 1022.382140][T15159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1022.389175][T15159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.510519][T15159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1022.539855][T15159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1022.590452][T15159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.624552][ T5922] gspca_sq930x: reg_r 001f failed -110 [ 1022.643557][ T5922] sq930x 9-1:0.0: probe with driver sq930x failed with error -110 [ 1023.359821][T15275] ALSA: mixer_oss: invalid OSS volume 'DIG' [ 1023.661484][T15159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1023.780790][ T25] usb 9-1: USB disconnect, device number 32 [ 1024.209862][T15296] fuse: Unknown parameter 'g“oup_id' [ 1024.338920][T15159] hsr_slave_0: entered promiscuous mode [ 1024.361891][T15302] xt_hashlimit: max too large, truncated to 1048576 [ 1024.362770][T15159] hsr_slave_1: entered promiscuous mode [ 1024.381103][T15302] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1024.402848][T15159] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1024.417533][T15159] Cannot create hsr debugfs directory [ 1024.433956][T15301] netlink: 'syz.6.2135': attribute type 14 has an invalid length. [ 1024.656251][T12453] hsr_slave_0: left promiscuous mode [ 1024.677638][T12453] hsr_slave_1: left promiscuous mode [ 1024.707254][T12453] batman_adv: batadv0: Interface deactivated: dummy0 [ 1024.721164][T12453] batman_adv: batadv0: Removing interface: dummy0 [ 1024.730908][T12453] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1024.739646][T12453] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1024.808326][T12453] veth1_macvtap: left promiscuous mode [ 1024.816850][T12453] veth0_macvtap: left allmulticast mode [ 1024.828507][T12453] veth0_macvtap: left promiscuous mode [ 1025.425191][T15315] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2136'. [ 1025.756105][ T31] audit: type=1800 audit(1755659328.290:435): pid=15319 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.2138" name="nullb0" dev="tmpfs" ino=1416 res=0 errno=0 [ 1026.121280][T15321] net_ratelimit: 10 callbacks suppressed [ 1026.121301][T15321] netlink: del zone limit has 4 unknown bytes [ 1026.468438][T15323] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2140'. [ 1026.497998][T12453] team0 (unregistering): Port device team_slave_1 removed [ 1029.231510][T15336] fuse: Unknown parameter 'g“oup_id' [ 1029.513406][T15338] fuse: Unknown parameter 'g`E0V­žßÒûíœÿ' [ 1030.246024][T15344] /dev/nullb0: Can't lookup blockdev [ 1031.021335][T15357] netlink: 116 bytes leftover after parsing attributes in process `syz.8.2150'. [ 1031.220480][ T5915] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1032.247932][T15372] macvtap6: entered allmulticast mode [ 1033.126243][T15378] fuse: Unknown parameter 'g“oup_id' [ 1033.131864][ T5915] usb 10-1: Using ep0 maxpacket: 8 [ 1033.792816][ T5915] usb 10-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1034.482775][ T5915] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.538004][ T5915] usb 10-1: Product: syz [ 1035.501833][ T5915] usb 10-1: Manufacturer: syz [ 1035.575274][ T5915] usb 10-1: SerialNumber: syz [ 1035.583079][ T5915] usb 10-1: config 0 descriptor?? [ 1035.589277][ T5915] usb 10-1: can't set config #0, error -71 [ 1035.648564][ T5915] usb 10-1: USB disconnect, device number 2 [ 1036.569697][T15404] xt_hashlimit: max too large, truncated to 1048576 [ 1036.912923][T15404] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 1037.612847][T15413] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2161'. [ 1039.803272][T15430] macvtap7: entered allmulticast mode [ 1040.669009][T15159] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1041.005187][T15159] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1041.034646][T15159] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1041.046690][T15159] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1042.455367][T15159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1042.959330][T15159] 8021q: adding VLAN 0 to HW filter on device team0 [ 1043.075940][ T7460] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.083222][ T7460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1043.120877][ T7453] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.128060][ T7453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1043.231789][T15448] netlink: 116 bytes leftover after parsing attributes in process `syz.6.2164'. [ 1043.402514][T15159] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1045.164657][T15461] fuse: Unknown parameter 'g“oup_id' [ 1045.394589][T15159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1045.603072][T15159] veth0_vlan: entered promiscuous mode [ 1045.687645][T15159] veth1_vlan: entered promiscuous mode [ 1045.824840][T15159] veth0_macvtap: entered promiscuous mode [ 1045.863757][T15159] veth1_macvtap: entered promiscuous mode [ 1045.930245][T15159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1046.018714][T15159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1046.092290][T15159] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.133943][T15159] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.160468][T15159] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.179514][T15159] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1046.571582][ T7455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.612430][ T7455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.666875][ T7455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1046.696923][ T7455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1051.351440][T15510] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2174'. [ 1051.680434][T15518] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2175'. [ 1052.821050][T15517] qrtr: Invalid version 47 [ 1052.826451][T15517] fuse: Unknown parameter 'g“oup_id' [ 1052.923652][T15528] FAULT_INJECTION: forcing a failure. [ 1052.923652][T15528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1052.987979][T15528] CPU: 0 UID: 0 PID: 15528 Comm: syz.1.2178 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1052.988009][T15528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1052.988023][T15528] Call Trace: [ 1052.988030][T15528] [ 1052.988039][T15528] dump_stack_lvl+0x189/0x250 [ 1052.988067][T15528] ? __pfx____ratelimit+0x10/0x10 [ 1052.988089][T15528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1052.988112][T15528] ? __pfx__printk+0x10/0x10 [ 1052.988138][T15528] ? __might_fault+0xb0/0x130 [ 1052.988171][T15528] should_fail_ex+0x414/0x560 [ 1052.988205][T15528] _copy_from_iter+0x1db/0x16f0 [ 1052.988236][T15528] ? rcu_is_watching+0x15/0xb0 [ 1052.988259][T15528] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1052.988282][T15528] ? __pfx__copy_from_iter+0x10/0x10 [ 1052.988309][T15528] ? __build_skb_around+0x257/0x3e0 [ 1052.988342][T15528] ? netlink_sendmsg+0x642/0xb30 [ 1052.988369][T15528] ? skb_put+0x11b/0x210 [ 1052.988402][T15528] netlink_sendmsg+0x6b2/0xb30 [ 1052.988441][T15528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1052.988479][T15528] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1052.988500][T15528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1052.988530][T15528] __sock_sendmsg+0x21c/0x270 [ 1052.988558][T15528] ____sys_sendmsg+0x505/0x830 [ 1052.988595][T15528] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1052.988636][T15528] ? import_iovec+0x74/0xa0 [ 1052.988669][T15528] ___sys_sendmsg+0x21f/0x2a0 [ 1052.988703][T15528] ? __pfx____sys_sendmsg+0x10/0x10 [ 1052.988795][T15528] ? __fget_files+0x2a/0x420 [ 1052.988818][T15528] ? __fget_files+0x3a0/0x420 [ 1052.988854][T15528] __x64_sys_sendmsg+0x19b/0x260 [ 1052.988890][T15528] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1052.988935][T15528] ? __pfx_ksys_write+0x10/0x10 [ 1052.988953][T15528] ? rcu_is_watching+0x15/0xb0 [ 1052.988982][T15528] ? do_syscall_64+0xbe/0x3b0 [ 1052.989010][T15528] do_syscall_64+0xfa/0x3b0 [ 1052.989032][T15528] ? lockdep_hardirqs_on+0x9c/0x150 [ 1052.989055][T15528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.989077][T15528] ? clear_bhb_loop+0x60/0xb0 [ 1052.989102][T15528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.989123][T15528] RIP: 0033:0x7f846ad8ebe9 [ 1052.989142][T15528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1052.989161][T15528] RSP: 002b:00007f846bc0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1052.989183][T15528] RAX: ffffffffffffffda RBX: 00007f846afb5fa0 RCX: 00007f846ad8ebe9 [ 1052.989206][T15528] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1052.989219][T15528] RBP: 00007f846bc0b090 R08: 0000000000000000 R09: 0000000000000000 [ 1052.989233][T15528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1052.989245][T15528] R13: 00007f846afb6038 R14: 00007f846afb5fa0 R15: 00007ffe6cdce5e8 [ 1052.989280][T15528] [ 1054.039113][ T7455] [ 1054.041512][ T7455] ====================================================== [ 1054.048542][ T7455] WARNING: possible circular locking dependency detected [ 1054.055570][ T7455] 6.16.0-syzkaller #0 Not tainted [ 1054.060590][ T7455] ------------------------------------------------------ [ 1054.067596][ T7455] kworker/u8:18/7455 is trying to acquire lock: [ 1054.073827][ T7455] ffff888025677358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0 [ 1054.083070][ T7455] [ 1054.083070][ T7455] but task is already holding lock: [ 1054.090430][ T7455] ffff888142370988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160 [ 1054.100033][ T7455] [ 1054.100033][ T7455] which lock already depends on the new lock. [ 1054.100033][ T7455] [ 1054.110426][ T7455] [ 1054.110426][ T7455] the existing dependency chain (in reverse order) is: [ 1054.119453][ T7455] [ 1054.119453][ T7455] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 1054.127884][ T7455] lock_acquire+0x120/0x360 [ 1054.132906][ T7455] down_write+0x96/0x1f0 [ 1054.137668][ T7455] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 1054.143912][ T7455] nbd_start_device+0x16c/0xac0 [ 1054.149287][ T7455] nbd_ioctl+0x636/0xeb0 [ 1054.154058][ T7455] blkdev_ioctl+0x5a8/0x6d0 [ 1054.159079][ T7455] __se_sys_ioctl+0xfc/0x170 [ 1054.164193][ T7455] do_syscall_64+0xfa/0x3b0 [ 1054.169218][ T7455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.175645][ T7455] [ 1054.175645][ T7455] -> #1 (&nbd->config_lock){+.+.}-{4:4}: [ 1054.183463][ T7455] lock_acquire+0x120/0x360 [ 1054.188480][ T7455] __mutex_lock+0x182/0xe80 [ 1054.193511][ T7455] refcount_dec_and_mutex_lock+0x30/0xa0 [ 1054.199670][ T7455] nbd_config_put+0x2c/0x790 [ 1054.204793][ T7455] nbd_release+0xfe/0x140 [ 1054.209641][ T7455] bdev_release+0x533/0x650 [ 1054.214680][ T7455] blkdev_release+0x15/0x20 [ 1054.219733][ T7455] __fput+0x449/0xa70 [ 1054.224267][ T7455] fput_close_sync+0x119/0x200 [ 1054.229577][ T7455] __x64_sys_close+0x7f/0x110 [ 1054.234789][ T7455] do_syscall_64+0xfa/0x3b0 [ 1054.239829][ T7455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.246258][ T7455] [ 1054.246258][ T7455] -> #0 (&disk->open_mutex){+.+.}-{4:4}: [ 1054.254079][ T7455] validate_chain+0xb9b/0x2140 [ 1054.259366][ T7455] __lock_acquire+0xab9/0xd20 [ 1054.264565][ T7455] lock_acquire+0x120/0x360 [ 1054.269604][ T7455] __mutex_lock+0x182/0xe80 [ 1054.274720][ T7455] __del_gendisk+0x129/0x9e0 [ 1054.279839][ T7455] del_gendisk+0xe8/0x160 [ 1054.284694][ T7455] nbd_dev_remove_work+0x47/0xe0 [ 1054.290157][ T7455] process_scheduled_works+0xade/0x17b0 [ 1054.296228][ T7455] worker_thread+0x8a0/0xda0 [ 1054.301344][ T7455] kthread+0x70e/0x8a0 [ 1054.305933][ T7455] ret_from_fork+0x3fc/0x770 [ 1054.311040][ T7455] ret_from_fork_asm+0x1a/0x30 [ 1054.316323][ T7455] [ 1054.316323][ T7455] other info that might help us debug this: [ 1054.316323][ T7455] [ 1054.326598][ T7455] Chain exists of: [ 1054.326598][ T7455] &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock [ 1054.326598][ T7455] [ 1054.340806][ T7455] Possible unsafe locking scenario: [ 1054.340806][ T7455] [ 1054.348261][ T7455] CPU0 CPU1 [ 1054.353655][ T7455] ---- ---- [ 1054.359027][ T7455] rlock(&set->update_nr_hwq_lock); [ 1054.364316][ T7455] lock(&nbd->config_lock); [ 1054.371429][ T7455] lock(&set->update_nr_hwq_lock); [ 1054.379149][ T7455] lock(&disk->open_mutex); [ 1054.383746][ T7455] [ 1054.383746][ T7455] *** DEADLOCK *** [ 1054.383746][ T7455] [ 1054.391896][ T7455] 3 locks held by kworker/u8:18/7455: [ 1054.397266][ T7455] #0: ffff888142370148 ((wq_completion)nbd-del){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1054.408317][ T7455] #1: ffffc900154b7bc0 ((work_completion)(&nbd->remove_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1054.420580][ T7455] #2: ffff888142370988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160 [ 1054.430592][ T7455] [ 1054.430592][ T7455] stack backtrace: [ 1054.436477][ T7455] CPU: 1 UID: 0 PID: 7455 Comm: kworker/u8:18 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1054.436495][ T7455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1054.436505][ T7455] Workqueue: nbd-del nbd_dev_remove_work [ 1054.436526][ T7455] Call Trace: [ 1054.436532][ T7455] [ 1054.436538][ T7455] dump_stack_lvl+0x189/0x250 [ 1054.436556][ T7455] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1054.436571][ T7455] ? __pfx__printk+0x10/0x10 [ 1054.436589][ T7455] ? print_lock_name+0xde/0x100 [ 1054.436607][ T7455] print_circular_bug+0x2ee/0x310 [ 1054.436626][ T7455] check_noncircular+0x134/0x160 [ 1054.436644][ T7455] validate_chain+0xb9b/0x2140 [ 1054.436663][ T7455] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1054.436682][ T7455] ? arch_stack_walk+0x11c/0x150 [ 1054.436701][ T7455] __lock_acquire+0xab9/0xd20 [ 1054.436716][ T7455] ? __del_gendisk+0x129/0x9e0 [ 1054.436733][ T7455] lock_acquire+0x120/0x360 [ 1054.436744][ T7455] ? __del_gendisk+0x129/0x9e0 [ 1054.436763][ T7455] ? check_path+0x21/0x40 [ 1054.436780][ T7455] __mutex_lock+0x182/0xe80 [ 1054.436795][ T7455] ? __del_gendisk+0x129/0x9e0 [ 1054.436815][ T7455] ? __del_gendisk+0x129/0x9e0 [ 1054.436833][ T7455] ? __pfx___mutex_lock+0x10/0x10 [ 1054.436848][ T7455] ? __pfx___might_resched+0x10/0x10 [ 1054.436866][ T7455] ? __lock_acquire+0xab9/0xd20 [ 1054.436878][ T7455] ? disk_del_events+0xb5/0x210 [ 1054.436896][ T7455] ? __del_gendisk+0xc1/0x9e0 [ 1054.436914][ T7455] __del_gendisk+0x129/0x9e0 [ 1054.436931][ T7455] ? del_gendisk+0xe0/0x160 [ 1054.436950][ T7455] ? __pfx___del_gendisk+0x10/0x10 [ 1054.436969][ T7455] ? down_read+0x1ad/0x2e0 [ 1054.436986][ T7455] del_gendisk+0xe8/0x160 [ 1054.437004][ T7455] nbd_dev_remove_work+0x47/0xe0 [ 1054.437024][ T7455] ? process_scheduled_works+0x9ef/0x17b0 [ 1054.437039][ T7455] process_scheduled_works+0xade/0x17b0 [ 1054.437064][ T7455] ? __pfx_process_scheduled_works+0x10/0x10 [ 1054.437085][ T7455] worker_thread+0x8a0/0xda0 [ 1054.437110][ T7455] kthread+0x70e/0x8a0 [ 1054.437129][ T7455] ? __pfx_worker_thread+0x10/0x10 [ 1054.437143][ T7455] ? __pfx_kthread+0x10/0x10 [ 1054.437161][ T7455] ? _raw_spin_unlock_irq+0x23/0x50 [ 1054.437173][ T7455] ? lockdep_hardirqs_on+0x9c/0x150 [ 1054.437186][ T7455] ? __pfx_kthread+0x10/0x10 [ 1054.437204][ T7455] ret_from_fork+0x3fc/0x770 [ 1054.437218][ T7455] ? __pfx_ret_from_fork+0x10/0x10 [ 1054.437233][ T7455] ? __switch_to_asm+0x39/0x70 [ 1054.437249][ T7455] ? __switch_to_asm+0x33/0x70 [ 1054.437265][ T7455] ? __pfx_kthread+0x10/0x10 [ 1054.437283][ T7455] ret_from_fork_asm+0x1a/0x30 [ 1054.437306][ T7455] [ 1055.025824][T15549] /dev/nullb0: Can't lookup blockdev [ 1061.803330][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1061.809670][ T1300] ieee802154 phy1 wpan1: encryption failed: -22