last executing test programs: 12m30.476592969s ago: executing program 32 (id=170): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x205, 0x20417}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000000) 12m30.1205809s ago: executing program 33 (id=172): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000040)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4b642, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffb) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) 12m30.096186594s ago: executing program 1 (id=173): openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="05000000000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c006400000008000d000000000073f68ac399765b7ab289a21d254ebf1c30920188d7e0527bff31151da7c57628327841e9134f"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 12m29.999242957s ago: executing program 34 (id=173): openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYBLOB="05000000000000", @ANYBLOB="3d000e0080000000ffffffffffff080211000000ffffffffffff0000feffffffffffffff070001000406f0027f0006a7000c006400000008000d000000000073f68ac399765b7ab289a21d254ebf1c30920188d7e0527bff31151da7c57628327841e9134f"], 0x70}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6m48.918899601s ago: executing program 35 (id=974): socket$alg(0x26, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(0x0, 0x8000002000000, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/vmallocinfo\x00', 0x0, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x5, &(0x7f0000000140)=0x6, 0x4) recvmmsg(r1, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 5m7.013663231s ago: executing program 36 (id=1214): io_setup(0x3f, &(0x7f0000000140)=0x0) r1 = timerfd_create(0x0, 0x0) io_pgetevents(r0, 0x5, 0x1, &(0x7f00000000c0)=[{}], &(0x7f0000000240), &(0x7f0000000300)={&(0x7f0000000280)={[0x12a0000000000]}, 0x8}) io_submit(r0, 0xf000, &(0x7f00000002c0)=[&(0x7f0000000040)={0x0, 0x1000000, 0x0, 0x0, 0xffff, r1, &(0x7f0000000000)="66fe1ff6b94d79bc", 0x8, 0x7}]) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x100, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x12, 0x0, {0x0, 0x4}, {0xc, 0xffff}, {0x2, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x40, 0x40, 0x3ff, 0x8, {{0x5, 0x4, 0x2, 0x9, 0x14, 0x65, 0x0, 0xff, 0x4, 0x0, @remote, @multicast1}}}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x9}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffd, 0x0, 0x3, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x41, 0x1) epoll_create(0x7) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r6, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) 4m42.823469136s ago: executing program 4 (id=1275): r0 = syz_open_dev$MSR(0x0, 0xd2d, 0x0) read$msr(r0, &(0x7f0000000300)=""/246, 0xf6) r1 = syz_clone(0x1088000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000640)={@private0, 0x43}) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) fchdir(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r7 = syz_open_procfs(r1, &(0x7f0000000200)='personality\x00') pread64(r7, &(0x7f0000000140)=""/15, 0xf, 0x4) 4m42.022936545s ago: executing program 37 (id=1274): socket$rxrpc(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x11) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0xffffffea, 0x0, 0x0, 0x0) 4m38.851453648s ago: executing program 4 (id=1285): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x13) socket(0x10, 0x803, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000006d000000000000000f20e035000040000f22e0450f95ec460f060f200000000f22d80f20c035200000000f22c0b805000000b9f2ffffff"], 0x6d}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0x0, 0x8, 0x6f, 0xa, 0xb9, 0x0, 0x11, 0x5, 0x204}, {0x804, 0x1, 0x1, 0x45, 0x81, 0x2, 0x2, 0xff, 0x10, 0x4, 0x6, 0x7f, 0x20c}, {0x1, 0x3, 0x38, 0x5, 0x84, 0x7, 0x3, 0x50, 0x0, 0x70, 0x2, 0x5}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000010000, 0x8000000000000006, 0x0, 0x40, 0x2000001, 0x0, 0x2004cb, 0xfffffffffffffffc, 0x0, 0x68ff, 0x9, 0x0, 0x5, 0x0, 0x3], 0x1, 0x202}) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000240)={[{0x3, 0xeb, 0xff, 0x4, 0x0, 0x5, 0x5, 0xfc, 0x8, 0x5, 0x1, 0x5, 0x4}, {0xf807, 0x1, 0x6, 0x6, 0x4, 0x9, 0xe8, 0x0, 0x9, 0xa4, 0x9, 0x3, 0xd8a}, {0x8, 0x1, 0x6, 0x0, 0x30, 0x3, 0x8, 0x8, 0x7, 0x5, 0x80, 0x22, 0x4}], 0x1b8}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5, 0x0, {0x0, 0x0, 0x2}, 0x1}, 0x18) sendmmsg(r4, 0x0, 0x0, 0xf5) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x180000) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x4004000) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x6afc43, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 4m37.270583398s ago: executing program 38 (id=1286): socket$pppl2tp(0x18, 0x1, 0x1) accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10, 0x80800) r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='mand\x00', &(0x7f0000000040)='sysfs\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b405000000400000611076000000000062050000000000009500000000000000b12424501f2c565eaa10e88f2fb55ccf9989e56b4cc6d1214b6a3a8212422f30fde7f0e4d338d97b1c1c7cac7b2fb1e2f4dda34bbf7c429de549283c65e95b9cfbbaae8570a6eacbb33d"], &(0x7f0000000100)='syzkaller\x00', 0x85, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 4m37.208959179s ago: executing program 4 (id=1290): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r2, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r3, &(0x7f0000000080)=@file={0x1}, 0x6e) accept(r2, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0xffffffff, 0x1000, 0xffffffff, 0x5, 0xf84, 0x3}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r6, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, r7, 0x0, r5}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000073c00000000000000000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="d4010000400000001800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x5}, 0x94) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000080)) 4m36.723043216s ago: executing program 4 (id=1292): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) socket$inet_tcp(0x2, 0x1, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000000c0)={0x33, 0x4, 0x2, 0x9, 0x0, [@mcast1, @empty]}, 0x28) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000340)={0x0, 0x0, 0x6, &(0x7f0000000100)={0x22, "50e1c0340af66e0dffda611f117e9df8b20630faa67cf4f18be015c85613a37043"}}) ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000480)={&(0x7f0000000380)=""/232, 0xe8}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0x9362, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0x40049366, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000ffffffff"]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f0000000080)) 4m35.88197887s ago: executing program 2 (id=1294): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = memfd_secret(0x80000) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004140)={0x14, 0x52, 0x1, 0x70bd30, 0x25dfdbfc, {0x12}}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x20044884) sendmsg$ETHTOOL_MSG_WOL_GET(r1, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x44000100}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4001) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r7, 0x110, 0x4, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$inet6(r8, &(0x7f0000000c40)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x5, @empty, 0x6}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000400)="ab306912b51f702f6ec8035dfb4b0c7d345a2d123c84ba6fc38ea9a40468331085b9f73c5a3752599b26787a8f2763bc17e7802a537a5f543bc0468f96d600e4e07a2556cdba5f6fde2d734c9b27fa248c621713869ac7a9a700899f750e542f743c7d3b753df7d49a2fe402ef1c055cb838106f0903a7bba8ff8af8189a8732c16a9327", 0x84}], 0x1, &(0x7f0000000500)=[@tclass={{0x14}}], 0x18}}, {{&(0x7f0000000540)={0xa, 0x4e23, 0x2, @local, 0x491}, 0x1c, &(0x7f0000000a80)=[{&(0x7f0000000580)="1dd2422d5ccbb000af2b8301a1f3baa02b1e05770b9f635ee45eb20dab287eb7cffd2bb9a0861eeb0bdb81e581e8c736beb82216c855bf1d7e559f743d13a5465363c87cea0576b57279ae2d433fc8ae3d3a39645c580fd40b33673f9ceaec311ebbaadc9deec4c7bb10899267142cb88a92a885849daebf3a11781e00a3af3bc16615752f3f", 0x86}, {&(0x7f0000000640)="13a744819331b146356aeefd101fd66f1ed7aac96674e4485a2ecf7b54f0809ed34b04a785d53350a9ed836d645a5abca84580d0a1c90c78a036b32ca4cb38423a8c441814b5f498dba3b98ef12c19e27ba6cfe3205e61b55737d5993be1bfd099727a51cc116406e77827928089abbf1d37a95748fdeffa1e04f56b885a5efe7b9f878f7c95aab17e2575448a8deff48265111c79a488c1ff4a3bc2102ee0a6267467a394704b6e9477c4d49b12184d9c851fa781cc40b59ae3ccf0d0f5c45b7e930204fd9329e2cce8c180b4e15e1e6f2ba12f4266bb9ecc0e", 0xda}, {&(0x7f0000000740)="0ab567b257fbf6933085e81acaa65812a90fe0dec7d177c37715c7f237c9a50eea87532250a18b07cbe60f4ca2a7855163b2c3242a5742dcd3a47905f3abd2a659b2454ede5f5775d6ba1a221707a6c1cb752cce3c5eb9c7f505a219ad4a7fb870d78f16d658bd545c39cf074adbb894d8dbbdfb32c89f4f670f90be541e48b655e931c9fcd0235d7fb29d769ec76b703bc69f4abfc9470c2c8042345ac5c3b97bad3821344a30f110a797faa8a36a79dc89d23af8dafdcc746a44e0632765608fe9a72c93d41a1f215f30c18942545d9861a210b99b15168934804263cfab8fa1d825ff881a", 0xe6}, {&(0x7f0000000840)="924b2f4ef63bc15d74cfe8551773e983b1fc24fa448c30b4908aa270cd94e9e292daa34419e98244ef141ac00324744b008313d36a2c77feb5eb61c448b93efa35cee908001f642b69dcf397", 0x4c}, {&(0x7f00000008c0)="4d1e49d7c88cadfc06d62c71526d970a8a11deb36a5003e17a64e6ad8e7b4944a6f576c5ff", 0x25}, {&(0x7f0000000900)="9f31e72e78aae90835d6fc6d901d9fe57c7a1ab8aab2ef6540b45cd001ae44fbad512f688dc4070974c6369742c80dcb46191b5cf0da99ea4f664e1c407d2a30b7c8291d1337567da204", 0x4a}, {&(0x7f0000000980)="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", 0xfe}], 0x7, &(0x7f0000000b00)=[@hoplimit={{0x14, 0x29, 0x34, 0x7}}, @rthdr={{0x38, 0x29, 0x39, {0x0, 0x4, 0x2, 0x5, 0x0, [@mcast1, @empty]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x21, 0x0, '\x00', [@pad1, @pad1]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x58, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x10000}, @ra={0x5, 0x2, 0xa}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr={{0x88, 0x29, 0x39, {0x2e, 0xe, 0x1, 0xa, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @private2, @local, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}}], 0x120}}], 0x2, 0x80) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x9}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0) 4m35.778180173s ago: executing program 4 (id=1295): r0 = userfaultfd(0x80001) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xd, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7786}, [@call={0x85, 0x0, 0x0, 0x28}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x4d, 0x0, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x50}, 0x1, 0x0, 0x0, 0xc090}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'veth1_to_bond\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'veth0_virt_wifi\x00'}}) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000080)={@host, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000001fc0)={{@host, 0x2}, @local, 0x9, 0x0, 0x5e, 0x0, 0x0, 0x31}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000002600)=[{&(0x7f0000000180)="7c9f134cc2131527ba569592c0639a952f6097a16f3d2235f2a17ea07eb948b56d6134da2f65411f0b65fa7391b1e15bdd7873a71d202c18a1c38faea7074bbd", 0x40}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="1dd8ceba94d4195742c4be21c604747c97477e7833a1f3648a0cbeb0a60e1efaf294bd71d8959bd7bfda7e487354d13cc793d6afaaa4f4df18c1d474083d6bbc1dee5eb86ba4ca49cbd76b98e10d8e1bce08cc837a00e9d06fd459e743316b0362d7563f3a170177c2858fe104322ec0914189cd8937a10db06db6bc6f786db9953c7cf649c0fc804447676d3a93e4fc2e3d6bb285364ab3bb438ec615ce62fa1ad1f2f71303ccdf5b7986f1a8ca9c3ceb6c77", 0xb3}, {&(0x7f0000001480)="0d4e7946f91b32464765e400843a43020408513dee4cc854756eb2f34d50bc0698db4e89b5c8b8b8b89607d6ff1efe3c1413468be73d3be633d3e67128193a302190087353c78a059c1f6d8ac7c8961cca9e", 0x52}, {&(0x7f0000001500)="d5181c298da9da7409bd3ff63748e678449606deca1b351b7b8914b308226b642fa62f350ac9a419e691e4b82b61f298e998508f7d079dd7234fca99ad56b2c56696e9a1cfe13ea03c99ec792e9f165e3686391c92348928618488cecbcda176ae1dda806c5e916363a8cafde7c2477d3d2a732a010b818b15f6cc473a3d2b60bd3e9c72ff79f00e066fd82a21ab50540d428286d204e4d64f1d40c46161f7062265196140683fc1f5dd960de8c4fd7759367b11384704bc0dbd3a04947b4e4b98514f5957156ca23efc82bb052f68295b31893e3a5db8e64547f309a9e8967d42237cb79bf53f3e7e159b", 0xeb}, {&(0x7f0000001600)="9323a24241acc7d7b0e961940bf406389772bff5d8cd406f8c9ef0a068254837e908d11fd1dd8056ac75bb95e53f94ed13aec90670704f2993c46c9de87f6cd4d8b3c6c60017b7c0fde09c7da53c5eb9f9618aa49ff0cc89bcc14d866cf7dfde6cf9b794369dbea7b0f83511b343bbf35d38253bfbb6b3dab3025b0378ec58d88b521dbd3bd472001c033cf943a2bcc14090f091fcb0f295e23135b9ebac5ffc129f69faa95990eed8a97aab3922f5f917e8351ad19d55dbd167504f07103335badf4a54d01cc317be7ffc0cdf0dd06d54df7c8b643ba37ad0d246455e48b402320aba10be09ef939162ebfef902ff4c97d563ee15866d78c86a6b7c91a7c5ec775c92108677d16de8365182e27a243f6485cb6cdf7e97344e3c6ab3a1596d4d32b3a5053d3eb241f3c7e1f2a47177862636d025943f8f73a4fc31c22ec08e1da3db6781be07772629b1c2a8b1fbc5f7bb16eeadfad3fe29e8171acd9e3544d20dc0ec9041be5d575184586a500b803dca4212d3bdc446991bbab67407ea8ca26ba1cf2b1ac6d1e8f52e8b70b7800ec33cbbf94cf2459e171a029420b16f04af592a2841207ab78f6c0680ff52980211c27836539b783bce8e1442662468c20c584e6f6f3763d2de0332ecd91dd3ddd5ac69fc25d43c7b547b2127c70ac6cf18ea910aefb665472405e6c8128c9986df63ef485783be82dfa298d1c4281bae50a0a418e574e88a514e1888ab40f308bdf39ac1ab71c6df112ede13e88fca3f22b6bdbc477e18c59cf05bf9a5b736d5bb98cb04f55f94531ee331c463aea9a1dfaf81675a64cf9c475aea4425cbd7a9249be5ffe43959fdb665a8c75d7176d9591a5e592f59c2aaaf134aab26c1a56edc45ccb6c45e822eeaf54125c08f99426a459b62e3b13e1af30ed74f9bb49cd79f5035a73f9b6aef65ac61cc74ef2355e7770282f964a9059bf8b77f3a5c1028fd10e4cfc832ed047451ba8cedf731776f0b790d6df05a20ebc7c325f5aae05b1f457d896a25ea3e85e05f3664c576ab6928c92638fa473d9757b71b6b69c68710a8db2207a0a8fa2a553b9fb3beeb95997fcce9f1b013ac5a891c430be71e14c538d5bfe983c9c45bb99f6790bc7428c39c3eee91c834de9d902aeaf2f660379301334920832192966e36a058ed6c3907c653dcc2fe4e28e581cf30bd66aef638b412707de0d14765b2c566d6cd91c421802df5865b0bc6e6edb72aaad896b63edfe6ca38adf1f6f9eb7dfd4c7f2ff2a18fead2f40310c421b2d734c932062068a016c1f62240b1beef409a7d5c42ba7a7bb8b66646139019176f0a7e70b51b10fe65b07ccc63d3eeb212851d70a0e335befd741187904555f9a924ddf8786e42b21d4cca3137f33ca57d382ddf3682c6c114a8a431f7d334b46cd0ede5d43ae7242115187d985f5899ecd7cdda6e76e13bd11c438157376730d63bf14cc1fd5712b61f856aebe23b6fcb826773a92b6d13a845f74d56a8c88ea67885649a4ad52d9864c3ce438959bfb8f2f5b9c67821250b22ff86cb46977c37492df1744c9cf60eab6081812eca7d539359d815fe96ddcdf8e5666a23967e3b71a7c9d64eb7bb41d9674c3a1cf5c4009fba7418b96dfc9b2e4950738de755e522b48354ea8b6d93df3188572fa853763be273d3e5cfea087025c6bf880ca833666555066755607b9cf0c044c9f6c1dfcc7cf54a0f366f57950a3f7712e6385e3946c3de7c280274c2d393b57b3a971e6ab3773be2b4de1401fd084b2a0113f419ecc9b7d6d3fb6954440e205c809681e1bf103abbb1eaa61a7ac28334570f192733de036b87c50b994f3185cb8922bdc33222c43109d11f2310e08ad7a9fe95c12d47cec971ea9d126ae28bdc8928c40a3efc0f04729e54d05e0a0cdae110db235cbc40d621fd4712c2a781f69cd21beb0719860dcc69e0005b742edbb7e7c15e7a78ecda376c9db67cae2ac6dc36e6cc2e1bf29aeaf6aad3a29c2bd8ad20aff3951aacabbaa046bcb26be309fb1df63d1021bc5bb1de4956de7fb13cb0778333a290690c9ae25a8650f70d253bd10f0933f61927e7835502f7fb872ab6adec89a513ab88ee1c3a8f43fb3671fe6436abb876b5800c12d468c5e358d62d12cbe79cba98a383cb9f0b243eba0a1a42ad72762f8431528bb2d09b579f3a73efa0ff51752c4bba179b23e7dd9672e76a943797d4c13929843a1c20df76dbc432469bbcab9107e4271de95447d3c67c2737c2a164ca958a8593414461b5bf91f6f8b2f01236f72894b46d4ef7696474cee7a8feca322112f2198b941adfe827730d0c38c917de1f8288666b4756694b836a28d224a459eedfb19403d257f35482ae6b30c966c7c7835a6da2e52584986512a4ad5b92ced0c6c245427db17a853266232e856d5852bf89a9d85fae7cba030bdd0bb78f00e967da3fecbb1ba3a37643b6d30945d0e3295dbd4e32187ceeb74da6fdbdcc18858a4b83e0b6881dc6e387ea2e0d6141eda0f205f11c13002aa44dad5a70a0678d8c3bc5d2e4c7c6b34ea813c77c96da91ce27a390df2195fb52bc1cf49b8462ba11aca5625fef7cab45a3dbfa7651e93b9e460db0d65ab072e39cfa13f78d46e5f9281bf2a071d5da7141248c583a9d91f4d9d85065be365512d7b7c32acee7e2cfae2f2fd22bc1748df51b860235b9e71d8c69bc19e6680be437402ffcfb20b03ea59846f51e0068e0449770a0ed15448cf21b768faee11b198dec6840cdd8661b54b978aec0069474896e60ee32b3cb18d985edc3744e4da11e6e3cb59339c132c0e51e063b65637b628655f892c66c861e56ee1781f7da894372d1c5a42fc78dfdff597a0bc69c9dabe2c0aa6986b8cb46fdeec4bf833bbc20980cea69122037f6d085a359c377aed7ef3ec47c3a4ae8138cbcdf0a0298c258db0ae0a37e5de7d01f9f1809d843e8dc612f9f24737ff4a1efa099d0eee1e1f05c52b0f65dfb0f060bf108ad88c33dcb38b5ab9b111184054c59adab8b1788e4b753108a8d2843c4752fef9f3126f612282cef7688ff7df2960cc645132b09c48cf0473b5f3e213aad4832f5ab9b5180f3ebc103e047cd28f9e019bc9b279fa2e6fb3a35789ad8ce367d2c4f3fd713cb7eff9e38f56c1b88a3b1e21334d47c1c8838931044a6e5a46da0cdac9bc15bae56385394b2bc4a982b2d747086e9cda434aaf95281a61e1b2229450bd67a88f5733b388d6bb321fb9fe47efea32baf42593e52783a4d7b11887ba03e45b6a1e04e1d7a42bbd2a9e1ce2f331f13c7838be3a7cdc465a225270048d783ad79dc782be550b187a8baa51f51b794f890908ed91ffbb7a9fdca7882a528b696d168cc1e69b3f1e4fded14f8280409d72c10eb26a85513289e4d4ad73021745ed9bf9bac34eaea1c5b50e7555451859b84e21206c4b1513199ab2255f5fc43f058cfe5be03413176fd842feb83a3e3678e374c94eb7907e8d96fe91b9a51ef960d69c32f3f36d8c66c74b01e9b3b62a552afcb8ea9cd861ac51b4ab876dca388c2ca98a38a6e4df762324e60878636b780f89cdd52347444f161e3de214c75d8662e6415d5970e970d983a92b1d72726ef08755db40810f38607db744ea5859317b51da247710643522600fe4cefee8ce7d4101d04b0b404ee928fffd56a98828f2a09e1dc3a9430ecc17c1518cacf5d37bc4e4af0897f7815a5b9fe995c7d31953c734e838882707444c8664665acf152f200d808d3c5111bf4be999c81c88085040029ea24905e10b1da07b73a230d21319ba68cd86948032c6f866d5d29c983604442a6e824d0263b9ac3efc6ea24d2492b376efa9f2d86049020f4302ba6a459700140868b196ddebc43c845dd061ef121173fc9c3010a31e9df0e3b6d899b64d7f87d1f568598b8b2577ebbf0cf92865688ebc6cd8b199ddf96937c31d10800ec889f5614bb121a5bc3f8dde79d78091460500b0fa96fdbcfb7be0117fe3aba8675fcecfe7d0e0faa8c5662da5a10343e553657b5ac28f694a1ccf88ab0e8952a48709863704e86bebc7445f08150335eb3db2ebb3a4f07e3a55b23a04ae62d2f89827df5339a11459e7d9800a9e1d795b1a1fcc2d0eb85cd430785aa629333411d534b8e97bbfcc3edcdbb948f0311e7a7f7ae8a338338b122de3ae89cea9a5d81f63e5f1102a84bc13d0256b959113a643e5e91229b9ebd40eba55cbc8c9e6795ea60de9d1a9bfcb825fd0757b7907f195754af2966b7b6ed643da4b7c6ba9d55012ae51f52f1873d3194d6f26bae6b9ba9cf50ef30bb0ea753c1ac489e77455aca1c3dca104888633a77e4bf095595d801a63fed2bfb35f514e874f4063c38539628d17c1e1ffa6bf221a669ae064930428207c39959c72069faea9c24a8d8c8c4834f18de77571c2703af0ba984737d7de5dc54d13165e008e91d57afb448344beac6c8d28999957d834a90535c8be49293717c3b76859443032b185ffe7adc22a73f15f7ec841933f5119137a45045ce074f7c2a4afb9858653e23ba0cf3c3e28bdf77f4004ec9ecae98205838e54d0a76b774b7bca7e51ebb34ebf5cc60beecc1ce0567630503a59797afae8d777068b071f992d835983aed7d8d5cb8b9693ee7b2c0db40be6d28874ac5e862602a2d6b73e94bc177f59b5a5d5a53b0f01183cea0762bcb7efd6d3ee67e91caafb4546a49c3cea1697c93651e89197a57d55e8dbfadcce73efe3af2ee93e62753781c592adcae07ff08a65faa41cd86fec74f98089f7b4bb046dc59c97c237b31c38f910f68b5be0dea9958d5b80c960c12d491a0ef6e2df45dbef0869660c415983f5b9335a4a24058969482854bdad187d09011808be502dbf61d5d3b4c9d54b034d854680b8b8d5011bea6f92762edc1dd31779e03e90770dd48e78e5718c0cef29dc52e7ed7a5aaec8df97f4e88c268cb00a95285fd5b257d1e6415c38b7e01baae91b98a34a70c8850fa2be2efabcabcf7472cf655c60254ce7d819f4360b118c81b36f88c629da81124346045e357688c7c76929783b5f8f114b66b8d142f7015f03b15e80b69a3cafa721df9609a153208645ecb5a8e799bbdd5199893ae2a0eb6266582d4a23bdfa9b54d847d55a202797cce3645309c7d5116ef3921a796a088395a8af3030888a268f469d5fbe0cc5b1fb13e2247627d18de0da16e0eb9147ecbeaa422094533e58dd29817abc111d7b1559e0d337a3cfd308b940a140ad754abd953066bd5e0ba82e42566183383f132df63a8b453c1c94f7e9ae06aa6ba8649d068c91059fb9f9743a04c0bb8b86698b7186c222d371d4ddbd96d55fc3c7ce4c80a919e28a836c3143d67a1a9fac488a60f4ddb029ae231cf323479d20b737177f2ee1e6892f2378e9307423cf73f0f3647564f4c40317d6d4593eecd20013432397ca1702ddd0983cc4c01f03e1a579f1aecb1013a7aa800956ac84a862c9a3d9464947cf729198ed302d196dcce916623effc2a86a49217aeaeaac015ebc43e462be18bfad7a4c7e04aa5763617b404d9876142ee073332a31e2a662a8f2ac01abab6ad800632586577cc9b78c14bb329a25dfb34c6cbb526103404ebed86b954a7b492257dcbb6895c5aad1377d0f7899ae3c59f5dddfe15e8f5a942eba7f1ed4e420d2879d5e58bacb4fb46aaf576c5c68800e092005b58398b664cee0a3af87102b7afbc6927ad613de50ebc08cacae687bc86e4836068ee9c7afd63d014335f5f99a8940994bdf312ab49aa775b7e62cc674f214a504e61fadf0126bee7", 0x1000}], 0x6}, 0x20000840) 4m34.865949057s ago: executing program 2 (id=1297): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) readv(r2, &(0x7f0000000680)=[{&(0x7f0000000040)=""/2, 0x2}], 0x1) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r4], 0x1c}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 4m34.52718781s ago: executing program 4 (id=1298): getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x4) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r3, &(0x7f0000000140), 0x4001) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socketpair(0x0, 0xa, 0x9, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000054d564b"]) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 4m34.526743833s ago: executing program 2 (id=1299): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c722a1d7990b03d5e486f6f746d6f64653d30303030303030303030303030303030303034303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x1d9}, &(0x7f0000000240), &(0x7f0000000140)) syz_io_uring_setup(0x3, &(0x7f0000000300)={0x0, 0xfbbc, 0x100, 0x0, 0x334, 0x0, r1}, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d77f10", 0x8, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010"], 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4m33.757011306s ago: executing program 39 (id=1298): getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x4) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) mremap(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) ptrace$ARCH_GET_UNTAG_MASK(0x1e, r3, &(0x7f0000000140), 0x4001) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socketpair(0x0, 0xa, 0x9, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000054d564b"]) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) 4m33.553796724s ago: executing program 2 (id=1303): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) socket$inet_tcp(0x2, 0x1, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000000c0)={0x33, 0x4, 0x2, 0x9, 0x0, [@mcast1, @empty]}, 0x28) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000340)={0x0, 0x0, 0x6, &(0x7f0000000100)={0x22, "50e1c0340af66e0dffda611f117e9df8b20630faa67cf4f18be015c85613a37043"}}) ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000480)={&(0x7f0000000380)=""/232, 0xe8}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0x9362, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0x40049366, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000ffffffff"]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f0000000080)) 4m33.323240376s ago: executing program 2 (id=1304): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req3={0x3, 0x3, 0x8000, 0x800, 0x7fff, 0x4, 0x401}, 0x1c) r1 = openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$smackfs_ptrace(r1, &(0x7f0000000100), 0x14) fcntl$addseals(r1, 0x409, 0x3) sched_setaffinity(0xffffffffffffffff, 0x8, &(0x7f0000000140)=0x4) socket$kcm(0x29, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x4002, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e20, @remote}, 0x3, 0x4, 0x3, 0x1}}, 0x26) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x800, 0x0) ioctl$SNDCTL_TMR_TEMPO(r4, 0xc0045405, &(0x7f0000000240)=0x89) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x541c, &(0x7f0000000280)) syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$KVM_CAP_STEAL_TIME(r3, 0x4068aea3, &(0x7f00000002c0)) r5 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000000380)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x3, "03d26bd3530a76"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f0000001380)={{r6, 0xb, 0x5, 0x0, 0x9b1b, 0x100000000, 0xff, 0xfffffffb, 0x8, 0x5, 0xffffffff, 0xff, 0x10, 0x9, 0x5}, 0x10, [0x0, 0x0]}) r7 = open_tree(r3, &(0x7f0000001400)='./file0\x00', 0x1) clock_gettime(0x0, &(0x7f0000001440)={0x0, 0x0}) timerfd_settime(r7, 0x1, &(0x7f0000001480)={{r8, r9+10000000}}, &(0x7f00000014c0)) syz_open_dev$midi(&(0x7f0000001500), 0x5, 0x200440) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001580), r3) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000015c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r7, &(0x7f0000001680)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x28, r10, 0x20, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x8, 0x12}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40010) r12 = syz_open_dev$I2C(&(0x7f00000016c0), 0x7, 0x200041) ioctl$FS_IOC_GETVERSION(r12, 0x80087601, &(0x7f0000001700)) ioctl$AUTOFS_DEV_IOCTL_READY(r7, 0xc0189376, &(0x7f0000001780)={{0x1, 0x1, 0x18, r2, {0x28}}, './file0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000001740), r13) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000017c0), &(0x7f0000001800)=0x14) 4m31.855800936s ago: executing program 2 (id=1306): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) gettid() r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 4m31.620060249s ago: executing program 40 (id=1306): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) gettid() r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) dup(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 4m7.017334724s ago: executing program 1 (id=1300): gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(r1, r1) r2 = socket$inet6(0xa, 0x1, 0x3a) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r3 = socket$xdp(0x2c, 0x3, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r3}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, r7, 0x200, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7, 0x68}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0xd4, 0x19}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x18}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x1, 0x1a}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1e93fc4e03cf24c}, 0x1) creat(0x0, 0x0) gettid() timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) r9 = syz_open_dev$vcsn(&(0x7f0000000000), 0x6, 0x242) fsetxattr$security_capability(r9, &(0x7f0000001cc0), &(0x7f0000001d00)=@v2={0x2000000, [{0x101, 0x7}, {0x4, 0x20000000}]}, 0x14, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r9, &(0x7f0000001d80)={0x2, 0x4}, 0x2) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0x30, 0x2, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x8001}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) r10 = socket$inet6(0xa, 0x80002, 0x0) tee(r2, r10, 0x6, 0xc) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 4m5.971311281s ago: executing program 1 (id=1336): r0 = socket(0x2, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x100, 0xffffffff, 0xffffffff, 0x100, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0xd8, 0x1, 0x0, 0x2, r2}, &(0x7f00000001c0)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000020000000000000000000000850000001100000085000000b200000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) syz_emit_ethernet(0x42, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x6071, 0x0, 0xe7, {[@generic={0x8, 0xa, "09df168a00000000"}, @sack={0x5, 0x2}]}}}}}}}, 0x0) 4m4.438883355s ago: executing program 1 (id=1341): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) socket$inet_tcp(0x2, 0x1, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000000c0)={0x33, 0x4, 0x2, 0x9, 0x0, [@mcast1, @empty]}, 0x28) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000340)={0x0, 0x0, 0x6, &(0x7f0000000100)={0x22, "50e1c0340af66e0dffda611f117e9df8b20630faa67cf4f18be015c85613a37043"}}) ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000480)={&(0x7f0000000380)=""/232, 0xe8}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0x9362, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0x40049366, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000ffffffff"]) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000003b80)={0x3, 0x0, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f0000000080)) 4m3.088088688s ago: executing program 5 (id=1344): r0 = syz_open_dev$MSR(&(0x7f0000000040), 0xd2d, 0x0) read$msr(r0, 0x0, 0x0) r1 = syz_clone(0x1088000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f0000000640)={@private0, 0x43}) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) fchdir(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r7 = syz_open_procfs(r1, &(0x7f0000000200)='personality\x00') pread64(r7, &(0x7f0000000140)=""/15, 0xf, 0x4) 4m2.974726095s ago: executing program 1 (id=1345): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_getneigh={0x44, 0x1e, 0x1, 0x70bd26, 0x25dfdbfb, {0x7, 0x0, 0x0, 0x0, 0x0, 0x70008}, [@IFLA_MAP={0x24, 0xe, {0x9, 0x80000001, 0x9, 0x9, 0x4, 0x9}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048050}, 0x20000800) renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='.\x02\x00', 0x4) ioctl$SIOCRSGL2CALL(0xffffffffffffffff, 0x89e5, &(0x7f00000000c0)=@null) ioctl$sock_x25_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r2) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)={0x44, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0x24, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x4}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "aba4a007479335aea9ceea0bf29da6a2"}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x2800a000}, 0x10) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r1, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200"}}) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r5, 0x0) read$dsp(0xffffffffffffffff, &(0x7f0000000100)=""/23, 0x17) r6 = dup(r4) write$UHID_INPUT(r6, &(0x7f0000001c00)={0x8, {"b0476b76ba5d044f65271519727e4ff1ff0d12c0e6bdf3ea1f52e24f60ca698457b32832b83d7e96694c1feb5809bd67222f71e0b97c0d5270c04ffa64f63b2e18ee4b7b572fe2f4d03cad38bcd106ff12f53b443ac6fc81da518f54b9004a44859529c07a2b1b8feddc0180a0f37b13babba1dd0813b7ea56dac4b7ffe9a2ef54221439ecc55223ef2d40f4ba8108c10387ddffbaed25d41e7692bf26ddfa747a666caff49843e38c86cac7323f784a17df6beaa49c3f4a98fb4013f4e573e2ef77b0965d4bfbdf7d5eada69406ca93f422495e00addfca1518085a40f10284ff59388ecf476a12ef1a540163922098d600519ae8cf3ef544344e9d968f341af618503b455f3976b76975270e94d714302382c63de5b7c1fad1fa373b369916cb3b4d583a9ebbaeb262884d25a0e1d9fb141de60df7e64cb38b6f7167991f8fba06bffe2d49133bbb462cd8a9493177eee5f03875b15c7a92c3cd6a3fdfc64f236e14fa05a0e8d3c45f13eecd22e13528c74186dc50e0e2af44177e26bded1161e5533375508dadb83db5126cc810f4e30d4e24ec12c3b99e5220aacf42c58f2960bd43c337dbd318aeeb5c9a6cd5ffd3bf1497bb48ab7bcb32c9c33c9f5b9bc4645b96f23f9e0d826b780030444ffb925f55df587ef5ca5ea74ccd66afc7981da496d6f037efbb0b08f3f5078c60ffb4db18d1b59996bd9b1513442785bf4ece8587b39d8176dc9c735d5ea25133b2053bba227b81faab7220326f8814a9df4eba4ecc6acdd82f70b653b56a18cc9dfa4deb0a112c797ab89a51a103c3a9085d828523370c4d79d9484f4dc910735a2c9b5b85197cd9c073df7a54b40df8e1bf595bab957900c2a1a7dc40e88ed0c55c362ffbb7f88a0725a6ae73b936a639e951faf9c45ae74a2ece2f6f88e425ee41d2c60cb083a2fd6d07381908a7f629e32f89a553cf0794f54b8bdc7bd541d88464a4f80ac0b8b625a803a55de4b05a95fc7f8fc3d6d79858ccb269b7b8b21657654164a9aa29f4e8462377e9d234a41ea69841a4aaa1e5f89f9b074f6f71cb1ffaa450c3160b0e319ec81ad30101db66218b0c69f97c234465dc45849fcfd62d396f2b50ddcc0ed7dd8651431534232ab6d1186d7760770a1fc6c77553a79d0297194f794997ee47781094a76d9dccf632dcbb527b3e68950d9bb534245c7f08ae1d6ef2750292ae28e5e6dcfe2a69737dd7a1e453f3902ae90789e98c212905422099904d3bfb949bde187682a59c01aa8e6a9972a63d6aaef4d4139b10a24e063707f1aba79bd59e3f9709a873dff401d1f356c4be5e449ae0e2633a1fe50ed367fe56b0499957c3b6cabb42256547995ea998f3937d153897d1c83f1ad922d6835bdfa3b986dc6f4bd927a4ca13fbaa99b7b43758e2329d588f40fac718b16cca855468643f3818496b4915fe9a2bdd3e68889fea24bc1dfa6287a801d49a7bb84654147448550d2919e4df3a943a88cf616befea4e7a4fddb7969311c6837f9529966241be1e57ed2d773debc542986d09866905a3f63b6e1820086d52a70f039154e839da7ea852c33bf3722a048f61bbf068519e050b8788370fb130a42e9f5322dfff65b15d588f9e926b70e4530e8b66697cabb1e8514831431fa0eaecb49f9613ed5fd7bc50f897bda36d24d4296e143e2480e325ec09a77c03a07b4f86eb703085313ebeee94ef5b1cde3f6a7efd785772eb4034039f598c07819b769416a223fab824c4ac50086e78042a1ccf47b6c7ede8540cded4bd4c920ce6c2b7493a5634c5e96bb761373623ab473b121d555bfd5a8bc3f5c5418bed83ffd0d6492840550fccc0c35746370396d0190b7b1d2cadcc150877e0d197f692f97cec790c95e3d3959dc7c68aca37306c1bc13ad33848395dba5e3c9ce8090bc0e7e8312091773641be56411921e3d473321c6d8bd10b7d3f5aedd6620bcaa06474bbb298bc77297b8b5dcb9e6b33dbe676460cca825609857724cee245306d07fda287d5fe57c424c27cf9b6cf0f16d2c6a8071bd57c826d7371841cf43dab1b42421ce416d0d3a9c80bc807d2e6761e53f06b3e63c0af1b4548d820118421205f040f4ab35307871e4c7a21ff28082c29e02e89486064661898c0eb1811c70a6124c1f25d62c38794a3e87c312c870db7b60d0df8b57860c94d1a9c561b327fae3a68ce9ff4551e418eb00766f0341c5e796e3cbbbe6b4864928b966110256d5475eb1fd7b2893b60e19e859baaf23c9233a1b064771671ee2d07c151e2e99c37a116a338788052a726a8519b8335e9ff4f71d00ab634543c20ddea1bf57d4f2b797182ff19618b6974d2b69d9f052934d527a1830bf2785842f35eaf32b65b7c9fdd6f0c41756072a59c0cce0b7305740729f1daa14e0092da9d022321b726d658fcef55affa2bbf36ad788f1f423b7dfd328435b4d5df315143d8b8028ba4bea6134a3dc9720c73d5e66b8b8168752eea6b78c75f04efd9677dbe419f13f5e1c9764276a83821b710307d8f85359b34d038ff17de45e8739d4b647fd1a8d794a3273d922af3374f5d3c75b8345b9dfdabb2c0418a358921e0e73d0fe88caab1741b913673e22ff4b59afa0f653a423d9b2bb20cbf07951a349eea18a891b4f4dc6df8e42a6181284f643de5fd2924ae54f672a1920343476c67333e1e8205bf4877b1251a83f417936714edb1c6975ba7969d2fcc2e69024a4669ac2f998116ade1bd84568b8f3f1fccbe95df9ed21db77315b7469f30bfae418415d9cb5aeea627ba6811e30d56d4f4bfe5f794ea4243e3cdfad3ef55199699b8433083b6f72f95effc5f2f613cfcefaf0b94e801ebcb7095a1474ee93142b82c9bf9886617b6bf69d08c83c76cd21d4cce5872d99de8e54bbff915ab923b2d24bb3aa178dd50b44fd0eb880ef33ca51d4bf5f0fbc8ffe18afe4245397f277e4efad955baa10cf56613481253d69c02e7661714b68be0fd64f29bdafbc8b4a0b30bd6709c67fe8e8915d0479b3902b1d0169fb5486b02e966ad5d8a2bcf42ecba59177cd85e17239667f6b045d1f873ce24733ae17e2d8432709062e786a32ac925121f1b0d46c66d4fb9088f4aa0cfe2149f6c2cb5b75d45349bc88fbd47e01ea07e7cd573335aab8d389846566800dd084bc3caa95f7632719c651f2d33be0fb56347c063b3c6e3e75c5e58caeb4c37574859b78c1ed018fbeed788a4305a9ee1c1ef65a0c83a7cd717a8c08ecd4e86370ffffd6d40a89a0b1e8c15a10ad5406e867e49319ad83bfbb925d5e240b4bd44fd751e7510d5ea03a6cab95f37155d1fd69aaea1db4a1f53714eb90e669209cf634f84a50c85bdc51838ebbb545b4387790df67f0122740c2abc910cf83230394172a56c9ffda6675bb8bb39846730a1bf764aeb92407c90a194da880cb8a4efb5b57a8311d864209c7fd226b93582b6b11eec559abfbba653c0569c219d3a2e60555cb739f9d32d564f23c4e98be78aa553610822af426f961df0df2185c61ccaa22b2a6aa6fb3e917bdfb2be9c3ffb8a50821321119c4cf4917db39548abc17bfba267fa50f6af15c560a21055f967f1ca6f656ddb556f9c7e17a771eeef7e80940d1c14ddf2c27647686fd0526460036aeea395fb10abef2be2ea96c9bb380370c08d1568d30eea0f3e6b7cf8f7edc7b36d4d0affd249330707b54ee620f208d885791171eb67a25a80fcc6922e0258c9673b6576564949dfa5bed9a0299bf952aade654de16e22d54fcd391ded6adab94ff621efcd91ef69acf8dfa1b22692ba3e49cd1d3fbed6db1402065ab37e457056877977ebac33ef566f28a19b9acb67a9cc53feb156814e880b3dd5a9119ffdbc5a45c20ea375f2882575b9a28740eebf63f2895d9ffac1ec33cbdcdede98a201424d000df1efd64dd7268cc1b2366ccfb09754822dafdb1821de5e6ebee09608e82e679fafb7a5100172f26998d31d7f27c2b310f0372c3b5e888f8e6efb56074177bf6a2a5bbd9ed070ad5aaf23ce144d1ac86cad110e5916a8a57e1e7fc3d37353f84f2f6d43d92ab8b35040467f3f8b1d23fac021bbac3710edc8e2e26d794db38e48020f63e94d4b4dca3e015537a8e3008274d55f81af931a0faf1a438444b6a0489b93f7b88f81f761eae0f82e60cb0cf2745ca8c9e30d3cc189c1405b1994ed71b00d90ea7a94102916cdc915620c363d04e51eabaaca6c2814a7c1e7aaeec80bdc13135b813e6d0eea83446a5c57ec29695c302c0d8da65b61fe8ada51a36e1aff34d449f9eb70cb94931226121ab121a971c2fc070ca84272d122c1696f52fbd5ed06783abe188dcf133c4d41e10295f6ffda69fa8c5a7c0fec3425a2d60523a60d280b5ce34eac5911268172e772fefba63a6f5c6dafa9e500a5e1355fb614613f8fc1ef5e5466fa19212bcdc349a865f4cee6ea80b11a410bb6e4ad677393973e38621d25ff6c4876ef8a8d2ba651be4a78d2ba9fafadcea8eff9cca3f4ab71a0b84917794e521220dad099ac8aaf32abd162348879e4299e4d46395f9d55267b635e18ca2e2fc96146b96c8a8055130b8d8cb10cc31382df34057bd8637f86e48adc854af408226752a04df8d0362db263e0959f2bd7e8a4d33a8c4b257e19d308280baf40cced1b3cd3a86ee22df0da49d750539eee1104e99a9f8a065e5499c73125a8a8430eda7aee156821a97c237611b50f682a2cccd0969304f0a50ae98800dfb32ee1bcfeab98182c34a51e67fa5bd738c22c44fc1269ce73f464edd2f31296e92e62df51cf55798ae2e3c33c57b09f4ecd13469122095a3563f95f0a04cf58dcea4aed5e8bdda7617863cbc37a97ebadb46d679f7e30014d96d0ac7ce9484368fa5fd19cbc3d139410a2bd7ffacef1bdf76dd1d5f34d2392fcb91c7585fc1ae7d8ba2aa8ded9645d5a5e76e2279b6e0692101137da946dfbd3836476f5dad7fed70115d716dce87b5ad755e5653a709f5aa42265ec9657ed406cc9256af3628c0116b8e1d23306983e9adbc19dec354870c98e2e76566895df933a80c4c36b617db4bbda1a4ca7d6c80a43734471fc92d0bdeacfc125dddd73febd8f7ef84f221d52ae71372cee802d59013a15958e850f8fdf46d8fd3b874633daf3b1f346470456c05722258480959dd6afcffa1f3f2ca033011339c5cb85b7d1c9b5916fb8dc9c2783df64eb5cca5af83a74fe5bb259f93722842eb4ac851e71f3cfd67a39590e7f8e20f018744b9277e6eb46b5f211df5f767ef29dc9a972e14c40ea2d4624f187f301c1116d3a61adeb5c6f7ccc021ac5e18d8b40d7f1f19daf4445c06e72db8701c267c0144c92cddd49af7a87aca5aa05d0e380dd27cc780d2f7db3bef26cc4fd358543e19d73179b879f7bdc702ab405270c93a3ed64153e20b5b663773a2ad4e8e3e1e8eaf39ec80d75d02f74ff94f0e095240a564eeece4fc9bcf19bf2243c700e1dae14a1b0217013977bfa05f681abc37714fe462d0a632044ce52fdaa1c1a806b1eb4370e23ca0247e536165aa9f1c2af8adfea369ee1f4a2c7823a7baef028a1e77501db48db6aa0d7e30969f7197368db02d443803b53b2899315f7e2ba9c5ae952a3866b4ea60f3d669e0a91f7ef640cd938646bf8822fe455f0302fccf87c7fad6daf38fde038fa596b83a9fd5bf675669a6cb2bab44c6617f07950bf34edb93bbcb4174630f275dbda7a0631c4b456e5f80eb6258c1874e77d426743e478917fe44b73dc203baa2cc442b84b5818409abae99d97a28754969bd393df", 0x1000}}, 0xfffffe38) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x2b, @empty, @empty, 0x0, 0x10, 0x200, 0xa}}) 4m1.714985272s ago: executing program 1 (id=1346): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB='\x00'/18], 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0xfffffffd}}, 0x10) ioctl$int_in(r4, 0x5421, 0x0) listen(r4, 0x0) socket$tipc(0x1e, 0x1, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013a0000000000958ef2000000000098ee8381761ce68cbb46ce124771db0f848415bced6ff2e7835f26e0f28bc2fca5186678eace1a1ccb11114bf181ac3d3285e006f6e8d270a385ef3c8d676601256df0ef70c525799147979b951bbc9c941bdd4b25d5675ee2d728fa33224ad8fcc21ef8a10211c74493d924d0a2a7c6eef781"], 0x0, 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) keyctl$dh_compute(0x17, &(0x7f0000000800)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}, 0x0, 0xf0ff}) 4m0.220034448s ago: executing program 41 (id=1346): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYBLOB='\x00'/18], 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0xfffffffd}}, 0x10) ioctl$int_in(r4, 0x5421, 0x0) listen(r4, 0x0) socket$tipc(0x1e, 0x1, 0x0) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x6, 0x0, 0x0, "5debca561a5fbf61048955f6f876b2ff"}) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013a0000000000958ef2000000000098ee8381761ce68cbb46ce124771db0f848415bced6ff2e7835f26e0f28bc2fca5186678eace1a1ccb11114bf181ac3d3285e006f6e8d270a385ef3c8d676601256df0ef70c525799147979b951bbc9c941bdd4b25d5675ee2d728fa33224ad8fcc21ef8a10211c74493d924d0a2a7c6eef781"], 0x0, 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) keyctl$dh_compute(0x17, &(0x7f0000000800)={r5, r5, r5}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}, 0x0, 0xf0ff}) 3m57.179391899s ago: executing program 5 (id=1359): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000200)=ANY=[@ANYBLOB="0600010018000000000000000c0000000c0000000500000002000000000000053f00000000005f5f00"], 0x0, 0x29}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r3) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0xee01, &(0x7f00000000c0)={0x4, 0x1, 0x2000200000a95c, 0x9, 0x4000000201, 0x80000001, 0x48cd, 0xfffffffffffffffc, 0x800000df}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1812c1, 0x0) fchown(r6, 0xee01, 0x0) bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3m56.027499033s ago: executing program 5 (id=1362): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(0x0, r0) sendmsg$GTP_CMD_DELPDP(r0, 0x0, 0x840) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x8001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000003000000609400000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000804000000000000130000"], 0x50) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount$nfs(0x0, &(0x7f0000000380)='./file1\x00', 0x0, 0x3089469, 0x0) mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) ptrace$getsig(0x4202, r2, 0x1000, &(0x7f0000000240)) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$media(0x0, 0x1ff, 0x52300) r3 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x1000000, 0x2080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="47512dbdf000fddbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008b00", @ANYRES32=0x0, @ANYBLOB="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"], 0x64}}, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_setup(0x1694, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) getrlimit(0x2, &(0x7f0000000180)) 3m52.495096471s ago: executing program 5 (id=1370): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) socket$inet_tcp(0x2, 0x1, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000000c0)={0x33, 0x4, 0x2, 0x9, 0x0, [@mcast1, @empty]}, 0x28) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) r2 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000340)={0x0, 0x0, 0x6, &(0x7f0000000100)={0x22, "50e1c0340af66e0dffda611f117e9df8b20630faa67cf4f18be015c85613a37043"}}) ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000480)={&(0x7f0000000380)=""/232, 0xe8}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0x9362, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0x40049366, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000003b80)={0x3, 0x0, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f0000000080)) 3m51.251005524s ago: executing program 5 (id=1374): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) munmap(&(0x7f0000002000/0x3000)=nil, 0x3000) r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x101d0}], 0x1}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet_udp(0x2, 0x2, 0x0) recvfrom$inet(r2, &(0x7f0000000240)=""/43, 0x2b, 0x40, &(0x7f0000000280)={0x2, 0x4e22, @multicast1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000003900000000000080b8aa349b32fbea49c34101927e4d9a4f68827b0a3e27934c4cfae4f8e70ac6b061cdacf4d270eccdc091ad076b78f1cfa449dccbd54e871ae824e9f1ef9fb7dce34c8c51546b918f880b4e73888ac8e2e7a0cad0f7af6456d85fc2287fbe488f6b2a26ef0e4f9e8dfa360e756e9bb4a67204ba8f2649ad75ae4510ae259a94ade33844c2b7be2ed1d71f6b2b20dfa94ec050c7764245e31af65c309ad8f57666fd034e8afaea3174ace2525d", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) syz_open_dev$cec(&(0x7f0000000380), 0x0, 0x800) socket$vsock_stream(0x28, 0x1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) 3m50.268434995s ago: executing program 5 (id=1376): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) sched_setscheduler(r0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) ioctl$EVIOCGBITSND(r4, 0x40044591, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCGBITKEY(r4, 0x80404521, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x1}, 0x10) 3m49.889680337s ago: executing program 42 (id=1376): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) sched_setscheduler(r0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') pread64(r3, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r5, &(0x7f00000049c0)={0x0, 0x0, &(0x7f0000004980)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) ioctl$EVIOCGBITSND(r4, 0x40044591, 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCGBITKEY(r4, 0x80404521, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x1}, 0x10) 2m31.52951497s ago: executing program 6 (id=1592): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2080, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd(0x1) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f00000002c0)={0x0, 0x0, 0x4, r4, 0xb}) r5 = dup(r3) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x400454d0, 0xd) request_key(&(0x7f0000000900)='user\x00', &(0x7f0000000940)={'syz', 0x2}, &(0x7f0000000980), 0x0) 2m30.163058235s ago: executing program 6 (id=1596): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) syz_emit_vhci(0x0, 0x6) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b70700000100e0ff5070000028000000770000000000000095000200000000007ae9413df8ff0af5aa35339f4b382c4cad9db6fa7a9b857b72abaca100af1ba23d699b89e890c10500000000000000000000000000ac0e064c27bdfbd301150500000000000000bfdc995279d64072aacbb0595b95060000009ad3bf16a461e48e955a772d4062093f4cb1c3d9532abad2085401f098eb039ae4f4103699b9e079227e98cc07c09c1a72cb6d47cef1595e84d21951010f0274b1445a2ad6a7ad73827cccc21842599e0ae7b91f0b878b9267aa0b28d69a74ffdea613e892f0f9ff94e690b6ad68e4cb6dd65fd7bf3124702c6b1c2aea53ee0cb83ff1807459c7cba77cedca0bff6d8370c33e2bd9cebd29c152ff9dc8c2772fe552fecfcd1778b0838100000031d521207e5223d86508416780983c2f380bc01cefe9773a9a5cd5b24aa24a561e72393c0ce2bf44825b05c138779fe74f884c2472ab45c2af60289cb199963312dd1929096c6f49d116f1612a7b97f77169fa5e8a66a372ef8e3ee7167f7d2a26fc6c3cfa4dc5860277223d6eb3460e3b10a0dc9495635a9fca19d7beb5e700498b43bdadc916c01264d22d7969530633f94b257fbc5da7a96820e31444c0b0f62619c9e351996185e4015510875b774666ba5c0ba9845ad25b578d"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x15}, 0x48) (async) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 32) getpid() (async, rerun: 32) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="ad840400000000002c00128009000100626f6e64000000001c00028008001c000900000006005d39800000ba1064ff673256a436"], 0x4c}}, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) (async, rerun: 32) accept4(r2, 0x0, 0x0, 0x0) (async, rerun: 32) socket(0x10, 0x80003, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) (async, rerun: 64) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) readv(r4, &(0x7f0000002400)=[{&(0x7f0000000140)=""/225, 0xe1}], 0x1) (async) ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f0000000180)={0x2, 0x4}) (async, rerun: 64) r5 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) (async) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x10, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141400}}, 0x1c) (async) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44804}, 0x4044044) 2m16.195452112s ago: executing program 6 (id=1622): r0 = userfaultfd(0x80001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x28, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0x18, 0x4, @local}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}]}}}, @IFLA_LINK={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x8c}}, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4, r4, 0x80000}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4c, 0x31, 0xf7, 0x6, 0x80, 0x7, 0xc2, 0xc, 0x66, 0x4, [0x40, 0x3ff, 0xf, 0x10000, 0x6, 0x7, 0xfffffeff, 0x2174]}}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/102, 0x66}], 0x1) 2m14.898158897s ago: executing program 6 (id=1627): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) socket$inet_tcp(0x2, 0x1, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000000c0)={0x33, 0x4, 0x2, 0x9, 0x0, [@mcast1, @empty]}, 0x28) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000000ffffffff"]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000003b80)={0x3, 0x0, 0xf000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000080)) 2m14.041606947s ago: executing program 6 (id=1634): openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080), 0x0) syz_open_dev$vcsu(0x0, 0x2, 0x610083) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_syncookies\x00', 0x1, 0x0) r4 = socket(0x848000000015, 0x805, 0x0) r5 = socket$inet6(0xa, 0x3, 0x2c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x48801}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000005c0)="09339b69dc5d746fb0e121fe1baac5ed9fe36c44e9e8e1685431ca09df1c6068b5171a36db8e9b0516cc1eb502c017d650bfc8960344cd282f76e04d685ac4ea6fa2432a89399d401865047ead4428287646a5145718721a640de5028e3231fec9476849c561fd3a", 0x68, 0x800, &(0x7f0000000680)={0x11, 0x11, 0x0, 0x1, 0x8d}, 0x14) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x558, 0x320, 0xffffff80, 0x178, 0x0, 0x178, 0x488, 0x22b, 0x258, 0x488, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x320, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{0x94}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}]}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b8) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x10}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a280)="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", 0x2000, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x20, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) sendfile(r3, r1, 0x0, 0x23b) 2m13.760320664s ago: executing program 6 (id=1636): openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x40201, 0x0) (async, rerun: 32) r0 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0x88000, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=r2, @ANYRESDEC=r2, @ANYRES8=r2, @ANYRES32=r2, @ANYRES32, @ANYRESOCT=r2, @ANYRESDEC=r2, @ANYRES16=r2], 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(&(0x7f0000000600)) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) r5 = socket$kcm(0x1e, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) (async) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f0000000000)="94", 0x1}, {0x0}], 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1000, 0xf}, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) 2m12.139997545s ago: executing program 43 (id=1636): openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x40201, 0x0) (async, rerun: 32) r0 = socket$unix(0x1, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) (async) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000880), 0x88000, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r2, @ANYRESDEC=r2, @ANYRESDEC=r2, @ANYRES8=r2, @ANYRES32=r2, @ANYRES32, @ANYRESOCT=r2, @ANYRESDEC=r2, @ANYRES16=r2], 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(&(0x7f0000000600)) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) r5 = socket$kcm(0x1e, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) (async) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f0000000000)="94", 0x1}, {0x0}], 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1000, 0xf}, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) 14.899623147s ago: executing program 0 (id=1946): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0xfffffffe}, 0x26}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448c9, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r4 = socket$netlink(0x10, 0x3, 0x15) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) 10.074976143s ago: executing program 9 (id=1962): r0 = io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x2, 0x1f6}) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f00000009c0)=ANY=[@ANYRESOCT=r2, @ANYRES64=r2, @ANYRES16=r2, @ANYRESHEX=r1], 0x0) r3 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) ioctl$FIOCLEX(r0, 0x5451) r4 = io_uring_setup(0x30d5, &(0x7f0000000000)={0x0, 0x0, 0x8}) close_range(r4, 0xffffffffffffffff, 0x0) io_setup(0x2, &(0x7f0000000180)) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r5, 0x11b, 0xf, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_crypto(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x6, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0) ioctl$TIOCSIG(r6, 0x40045436, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, r6, {0xee01}}, './file0\x00'}) getgroups(0x3, &(0x7f0000000080)=[0xee00, 0xffffffffffffffff, 0xee01]) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, 0x0, 0x0) write$P9_RSTATu(r6, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r7, @ANYRESDEC=r7], 0x67) read$msr(r6, &(0x7f0000019380)=""/102380, 0x18fec) syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') 8.998572592s ago: executing program 0 (id=1964): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r0 = socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x1000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000000c0)=r1) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) fspick(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1) ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, &(0x7f0000000200), 0x4001) r3 = socket$nl_generic(0x10, 0x3, 0x10) msgrcv(0x0, 0x0, 0x2000, 0x1, 0x5800) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000680)={0x0, 0xffdc, &(0x7f0000000980)={&(0x7f0000000900)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0100000000000000ecc4287bd9da6664439e", @ANYRES32=0x0, @ANYBLOB="0c009900010001004400000014000400626f6e645f736c6176655f300000000008000500060000000800178004000500"], 0x4c}, 0x1, 0x0, 0x0, 0x4004000}, 0x40048a4) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000340), 0x105000, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0xa1044d03, &(0x7f0000000000)) r5 = socket$inet6(0xa, 0x2, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000001080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xfffffffffffffee3}, 0x1, 0x0, 0x0, 0x800}, 0x404c801) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffffc, @local, 0x2}, 0x1c) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000300)={0x0, 0x4000, 0x1800, 0xff, 0x1aa98a3d0e10db04}, 0x20) sched_setscheduler(0x0, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 8.327559651s ago: executing program 0 (id=1966): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x101a02, 0x0) pwritev(r1, &(0x7f0000000240)=[{&(0x7f00000001c0)="fd", 0xffffff4f}], 0x1, 0x0, 0x0) r2 = socket$kcm(0x11, 0x2, 0x300) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000000202030000000000000000000a0000003c0002802c000180140003"], 0x50}}, 0x0) r5 = socket(0x8, 0x5, 0x10003) setsockopt$inet6_buf(r5, 0x29, 0x42000004, &(0x7f0000000080)="d132", 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r6 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f0000000040)=0x8004, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(r6, &(0x7f0000008180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=""/19, 0x13}, 0x4143380}], 0x1, 0x2, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r7, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) write$sndseq(r3, &(0x7f0000000000)=[{0x1c, 0x0, 0x0, 0x0, @tick, {0x5c}, {}, @note={0x5, 0x1, 0x7, 0x6, 0xfffe}}], 0x1c) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r8, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x1}}) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r9, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) 8.327229726s ago: executing program 8 (id=1967): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r2, 0x400, 0x1) mq_open(&(0x7f0000000780)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\a\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x136, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) clock_gettime(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x80040005, 0x0, 0x0, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl(0xffffffffffffffff, 0x8b1a, &(0x7f0000000040)) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket(0xa, 0x3, 0x3a) unshare(0x20000400) bind$alg(r4, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 6.785251121s ago: executing program 9 (id=1969): timer_create(0x0, &(0x7f0000000200)={0x0, 0x10, 0x1, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file1/../file0', [{}], 0xa, "b524be350e7611b133a1"}, 0x1f) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r1, @ANYRES16=0xffffffffffffffff, @ANYBLOB="050000000000fcdbdf252e00000008"], 0x40}, 0x1, 0x0, 0x0, 0x8894}, 0x0) r3 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000140)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[@ANYRESOCT=r2, @ANYRES32, @ANYRES32=r2], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x82) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x1}}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000002c0), 0x10040, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r6, 0xc0406618, &(0x7f0000000400)={@id={0x2, 0x0, @a}}) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1000000000000000100100000c0000008bcda96673a77cd573322c8e18e0c0611db8082b17896ace1a2d2f10b7ab6f78f61bbb977b70be8c192fcb6883a5a46166c4cb5720221d7d1599a41b6c3b304bcf129865e5b002afc30798a04e4fa855f0ebb0901a377de5e2e318a4d13fa5a33361344423f2253ea83a74d08d4c646d3aa7997ae64e44b62e599670cafe6b7a140b733dbb17ff02efebd247d70e596db47278c11e89f12d2d60e6bb201a320f342a93c75e0bb7"], 0x10}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) listxattr(0x0, 0x0, 0x0) 6.770235013s ago: executing program 7 (id=1970): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000300)={&(0x7f00000001c0)}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fanotify_init(0xf00, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x8001420, 0x1) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) 6.631507711s ago: executing program 8 (id=1971): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() ptrace$getregset(0x4204, r1, 0x202, &(0x7f0000000300)={&(0x7f00000001c0)}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fanotify_init(0xf00, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x8001420, 0x1) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000240)={0x0, 0x0}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) 6.631153231s ago: executing program 0 (id=1972): socket(0x2a, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a280)="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", 0x2000, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000240)={0x0, 0xfffffff8, 0x6, 0x47, 0x0, 0xf8, 0x401, 0xf5, {0x0, @in6={{0xa, 0x4e20, 0x1a0a, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}}, 0x6, 0x17ef, 0x0, 0x1, 0xff}}, &(0x7f0000000140)=0xb0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x40010000, 0x0, 0x32315659, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}}) close(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000], [0x0, 0x1001000, 0x4000], [0x0, 0x0, 0x4]}) fsopen(&(0x7f0000000080)='nfs\x00', 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x37f, 0x34325241, 0x3, [r5, 0x0, 0x0, r6], [0x2b8, 0x0, 0x5f6a, 0x8], [0x6, 0x0, 0x0, 0x1]}) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 5.042088185s ago: executing program 7 (id=1974): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0/../file0/file0\x00', 0x0, 0x1000000, &(0x7f0000000440)) r0 = open(0x0, 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x10, 0x0) chdir(0x0) pwritev2(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xf4240}], 0x1, 0x800000, 0x0, 0x2000000) linkat(r0, 0x0, r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={0x0, 0x0, 0x34}, 0x28) link(&(0x7f0000000280)='./file0/../file0/file0\x00', 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, 0x0) unlink(&(0x7f0000000280)='./file1\x00') mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000240)='ocfs2\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = syz_clone3(0x0, 0x0) ptrace(0x11, r4) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r0, r1, 0x80000) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) faccessat(r6, &(0x7f0000000100)='./cgroup\x00', 0x19) lsetxattr(&(0x7f0000000000)='./cgroup\x00', 0x0, &(0x7f00000000c0)='${)\'&\x00', 0x6, 0x2) 4.861146611s ago: executing program 8 (id=1975): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000900)={0x7, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r1) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000640)={&(0x7f00000006c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200029bd5c143a8b93b437103a84e6e8127000fddbdf250a000000080005000700000008000400bc0b0000080004000b40b00000002bcd2f31df15f4"], 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x4) ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000000)={0x0, 0x0, 0x380, &(0x7f0000000180)=[0x6bd1a312, 0xec66, 0xff, 0x8, 0x4e5, 0x800000000000009, 0x0, 0x4, 0x10000, 0x7, 0x9004, 0x9, 0x8, 0x9, 0x5, 0x49, 0x3ff, 0x5, 0x2, 0x1, 0x8, 0x7, 0xc1, 0x1, 0x2, 0x5, 0x6, 0x9, 0x96, 0xffffffff, 0xffffffff00000000, 0x3, 0x200005, 0xa, 0x0, 0x401, 0x6, 0x888f, 0x1, 0x8, 0x46, 0x26, 0x3, 0xa3de, 0x400, 0x8, 0x8000007, 0x400, 0x3, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x2, 0xe, 0x6, 0x4, 0xe6, 0x200000000000101, 0x30, 0x2, 0x66, 0x6, 0x7, 0x40000005, 0xfffffffeffffffff, 0x9, 0xd, 0xffff, 0xbbd9, 0x80000000, 0xfffffffffffffc00, 0x7d, 0x7, 0x2, 0xcdc, 0x4000000007, 0xa, 0x8000000000000002, 0x6, 0x3fffffffffffffff, 0x1001, 0x6, 0x4, 0x1, 0xab6, 0x0, 0x4, 0x0, 0xffffffffffffff81, 0x9, 0xff, 0x2, 0x28000000, 0x5, 0x9, 0x3, 0x7, 0xf6, 0x4, 0x5, 0x200, 0x7, 0xe53e, 0x8, 0x8, 0x12293332f, 0x9, 0x5, 0x1e, 0xd, 0x2, 0x100000001, 0xfffffffffffffffb, 0x7, 0x6, 0xdfd4, 0xfffd, 0x10, 0x5, 0x8, 0x1, 0x53e0f0fe, 0xeb4, 0x0, 0xffffffffffffffff, 0xb692, 0xcc, 0x2000000008, 0x1000003]}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc)=0x1, 0xd, 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000140)=[{0x6, 0x9, 0x8, 0xa}]}, 0x10) dup(0xffffffffffffffff) 4.560101586s ago: executing program 3 (id=1976): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, 0x0, 0x0, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0xf7, 0x1, [0x7]}, 0xa) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r2, &(0x7f0000000100)={0x2, 0x0, {&(0x7f00000027c0)=""/4097, 0x1001, 0x0, 0x2, 0x2}}, 0x48) 3.254022226s ago: executing program 3 (id=1977): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffff53a2513743897e44000d0001007564703aa3"], 0x54}}, 0x0) 3.220264051s ago: executing program 7 (id=1978): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0x10000, 'syz0\x00'}, 0x3, 0x20000000, 0x5, 0x0, 0x0, 0x1ff, 'syz0\x00', 0x0}) shmctl$SHM_LOCK(0x0, 0xb) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) r2 = syz_io_uring_setup(0xc, &(0x7f00000002c0)={0x0, 0x29, 0x8, 0x0, 0x209}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) io_uring_enter(r2, 0x847ba, 0x900, 0xe, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) 3.203212719s ago: executing program 0 (id=1979): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x21) 3.163474733s ago: executing program 8 (id=1980): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x4000001, 0x0) fanotify_init(0x200, 0x0) socket(0x1d, 0x2, 0x6) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) sendmsg$tipc(r5, &(0x7f00000003c0)={&(0x7f0000000200)=@name={0x1e, 0x2, 0x1, {{0x2}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x26040885}, 0x20000040) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) pselect6(0x0, 0x0, &(0x7f0000000240)={0x18, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800000000, 0x8000000000000, 0x2}, 0x0, 0x0, 0x0) setuid(0xee00) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 3.10749904s ago: executing program 9 (id=1981): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r0, 0x4, 0x7c00) sendmmsg$inet6(r0, 0x0, 0x0, 0x4001c00) dup3(r1, r0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 3.043518826s ago: executing program 3 (id=1982): r0 = syz_io_uring_setup(0x497, &(0x7f00000003c0)={0x0, 0x727b, 0x0, 0x800000, 0x15b}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd=r0, 0x8000000006, 0x0, 0xe448}) io_uring_enter(r0, 0x26c8, 0x0, 0x1, 0x0, 0x10) 2.768329657s ago: executing program 0 (id=1983): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0xfffffffd, {}, [{0x90, 0x1, [@m_ct={0x44, 0x5, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000340)=0xffffffffffff0001, 0xd, 0x2) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000192c0)=@newtaction={0x60, 0x30, 0xcac229faa96ee7df, 0xffffffff, 0xfffffffd, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4000, 0x2}}}]}, {0x4}, {0xc, 0x4}, {0xc}}}]}]}, 0x60}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r6, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @loopback, 0x3}, r6}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r6, 0xffffffff}}, 0x10) 2.738551554s ago: executing program 3 (id=1984): r0 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc4c85513, &(0x7f0000000000)={0x2, 0x4, 0x1, 0x0, 'syz1\x00', 0x624}) 2.003495033s ago: executing program 9 (id=1985): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000040), 0x14) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) close(0x4) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 2.003199744s ago: executing program 8 (id=1986): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @loopback, 0x1}, 0x1c) socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 1.923122444s ago: executing program 7 (id=1987): socket$nl_route(0x10, 0x3, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x80600, 0x0) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x240048c1) sched_setscheduler(r0, 0x1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100), 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) 1.785964078s ago: executing program 3 (id=1988): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000180)={@empty}, 0x14) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000040), 0x4) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x420d, 0x12) socket$kcm(0x29, 0x7, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f0000000140)='2', 0xfdef, 0x8000c61) symlink(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f00000002c0)='.\x02\x00') sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x24008014) inotify_add_watch(r6, 0x0, 0x400040a) 1.1076494s ago: executing program 8 (id=1989): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f000000040b0000000095f5758483"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001840)={0x84, &(0x7f0000000380)={0x0, 0x23a0007941e88169, 0x1, "fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCSFLAG(r1, 0x4004480f, 0x0) 356.577182ms ago: executing program 7 (id=1990): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000001540)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @remote, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x28048005) writev(r0, &(0x7f0000000240)=[{&(0x7f00000036c0)="7d29dbe640bf9136", 0x8}, {&(0x7f00000002c0)="7794aa6fde076f17baebfa46123089f865ef3bb07dfb50afbd9267b1954a9ca90be5b079e13fe10a25256b8e5ada738172399dcfd5157ada26a10314f3dc7fbb570fc1471d8a6d885f70b055abd40ade42d87be1abcae749139f1834b139d1f565a4c412f5b68471ede406d4dcc46e7059c7a88c491cc851ef509b81699d73d64ef0178d20bee18f8334f7218b458a11fe195c8a77be928e3295f874761fd42bec042564e485d332e5e458415d92c9d84dd552f3a23be3f0d11d471a", 0xbc}, {&(0x7f0000002680)="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", 0x4fd}], 0x3) 221.083388ms ago: executing program 9 (id=1991): ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020600) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x400) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r3 = dup(r2) r4 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0) ftruncate(r4, 0xee72) sendfile(r3, r4, 0x0, 0x8000fffffffe) 71.533032ms ago: executing program 3 (id=1992): io_pgetevents(0x0, 0x1000, 0x0, &(0x7f0000000480), &(0x7f00000001c0), 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x12, 0x0, 0xffffffffffffffff, 0x0, r0}) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, 0x0, 0x0) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r3 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) setrlimit(0x40000000000008, &(0x7f0000000000)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) listen(r4, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r5, 0xc008561b, &(0x7f0000000000)={0xf0f040, 0x8}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x200) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) connect$rxrpc(r2, &(0x7f0000000180)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e21, 0x5, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x9e}}, 0x24) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2715, 0x0, &(0x7f00000000c0)) 66.206471ms ago: executing program 9 (id=1993): modify_ldt$write2(0x11, &(0x7f0000000240)={0x7ff, 0x20001000, 0x1000, 0x1, 0x3, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) socket$kcm(0x10, 0x2, 0x0) r0 = syz_io_uring_setup(0x34b7, &(0x7f0000000000)={0x0, 0x0, 0x30c0, 0x4, 0x2a}, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0xf0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, 0x94) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x80000001, 0x4) syz_genetlink_get_family_id$nl80211(0x0, r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) shutdown(r4, 0x1) 0s ago: executing program 7 (id=1994): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001) socket$kcm(0x10, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/udp\x00') preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000180)=""/131, 0x83}], 0x1, 0x0, 0x7fffffff) socket$inet6_sctp(0xa, 0x801, 0x84) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) kernel console output (not intermixed with test programs): network mode [ 646.678642][T11357] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 646.710064][ T3519] IPVS: stopping backup sync thread 10610 ... [ 646.761423][T11357] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 646.780830][T11357] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 646.888458][T11274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 646.915753][T11274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 647.086918][T11274] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.133371][T11274] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.142570][T11274] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.154366][T11274] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.808657][ T3519] hsr_slave_0: left promiscuous mode [ 647.849127][ T3519] hsr_slave_1: left promiscuous mode [ 647.867349][ T3519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 647.886963][ T3519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.894974][ T3519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 647.902793][ T3519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 647.930533][ T3519] hsr_slave_0: left promiscuous mode [ 647.940411][ T3519] hsr_slave_1: left promiscuous mode [ 647.952107][ T3519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 647.960188][ T3519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.969889][ T3519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 647.978194][ T3519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.028139][ T3519] veth1_macvtap: left promiscuous mode [ 648.033776][ T3519] veth0_macvtap: left promiscuous mode [ 648.039896][ T3519] veth1_vlan: left promiscuous mode [ 648.054871][ T3519] veth0_vlan: left promiscuous mode [ 648.061556][ T3519] veth1_macvtap: left promiscuous mode [ 648.067742][ T3519] veth0_macvtap: left promiscuous mode [ 648.075143][ T3519] veth1_vlan: left promiscuous mode [ 648.080481][ T3519] veth0_vlan: left promiscuous mode [ 649.172106][ T3519] team_slave_1 (unregistering): left allmulticast mode [ 649.189210][ T3519] team0 (unregistering): Port device team_slave_1 removed [ 649.250808][ T3519] team_slave_0 (unregistering): left allmulticast mode [ 649.264059][ T3519] team0 (unregistering): Port device team_slave_0 removed [ 650.427054][ T3519] team0 (unregistering): Port device team_slave_1 removed [ 650.496142][ T3519] team0 (unregistering): Port device team_slave_0 removed [ 651.190037][T11469] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 651.199041][T11469] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 651.207691][T11469] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 651.272659][T11373] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 651.324691][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.354706][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.377698][T11317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 651.393911][T11373] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 651.410817][T11373] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 651.433885][T11473] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 651.435175][T11472] netlink: 'syz.8.1324': attribute type 1 has an invalid length. [ 651.493219][T11373] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 651.552875][ T3464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 651.561856][ T3464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 651.737610][T11317] veth0_vlan: entered promiscuous mode [ 651.790188][T11317] veth1_vlan: entered promiscuous mode [ 651.943863][T11357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.970186][T11487] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1325'. [ 651.995685][T11317] veth0_macvtap: entered promiscuous mode [ 652.003643][T11489] netlink: 'syz.3.1276': attribute type 4 has an invalid length. [ 652.065321][T11485] netlink: 'syz.3.1276': attribute type 4 has an invalid length. [ 652.079669][T11317] veth1_macvtap: entered promiscuous mode [ 652.113249][T11357] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.165010][T11373] 8021q: adding VLAN 0 to HW filter on device bond0 [ 652.191984][T11317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 652.208543][ T6096] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.215765][ T6096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.242544][T11317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.258613][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.265867][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.283709][T11317] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.295340][T11317] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.304608][T11317] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.313583][T11317] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.351651][T11373] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.399558][ T3464] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.407056][ T3464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.632682][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.639916][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 652.699157][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.722007][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.813443][ T3519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.857620][ T3519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.096397][T11499] loop6: detected capacity change from 0 to 524287999 [ 653.530951][T11509] xt_TCPMSS: Only works on TCP SYN packets [ 653.998247][T11357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 654.254537][T11513] fuse: Unknown parameter '0000000000000000000000600000000000000000000006' [ 654.361879][T11357] veth0_vlan: entered promiscuous mode [ 654.421103][T11357] veth1_vlan: entered promiscuous mode [ 654.490376][T11510] ptrace attach of "./syz-executor exec"[11493] was attempted by "./syz-executor exec"[11510] [ 654.505162][T11373] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.610890][T11357] veth0_macvtap: entered promiscuous mode [ 655.643035][T11357] veth1_macvtap: entered promiscuous mode [ 655.730173][T11357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 655.809254][T11357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 655.908452][T11357] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.960859][T11357] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.018306][T11357] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.394057][T11357] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.676531][T11530] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 656.685326][T11530] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 656.694078][T11530] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 657.120573][ T3464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.168710][ T3464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.252585][T10072] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.284360][T10072] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 657.369904][T11373] veth0_vlan: entered promiscuous mode [ 657.376356][ T2151] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 657.401583][T11373] veth1_vlan: entered promiscuous mode [ 657.547666][ T2151] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 657.578040][T11373] veth0_macvtap: entered promiscuous mode [ 657.588008][ T2151] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 657.622809][T11373] veth1_macvtap: entered promiscuous mode [ 657.640930][ T2151] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 657.681546][ T2151] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.713797][T11373] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.738914][ T2151] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 657.765954][ T2151] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 657.774016][ T2151] usb 1-1: Product: syz [ 657.798836][T11373] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.862091][ T2151] usb 1-1: Manufacturer: syz [ 657.875346][T11373] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.901641][T11373] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.916006][ T2151] cdc_wdm 1-1:1.0: skipping garbage [ 657.921256][ T2151] cdc_wdm 1-1:1.0: skipping garbage [ 657.944446][T11373] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.954688][ T2151] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 657.964347][T11373] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.984171][ T2151] cdc_wdm 1-1:1.0: Unknown control protocol [ 658.121017][ T2151] usb 1-1: USB disconnect, device number 3 [ 658.327292][ T3519] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.364441][ T3519] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.444945][ T3519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.463286][ T3519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.625938][ T2151] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 658.946182][ T2151] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 658.955182][ T2151] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 658.965665][ T2151] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 658.975420][ T2151] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 658.981000][T11568] fuse: Unknown parameter 'r*y°' [ 658.989295][ T2151] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 659.003533][ T2151] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 659.050667][T11569] xt_TCPMSS: Only works on TCP SYN packets [ 659.070658][ T2151] usb 1-1: Product: syz [ 659.169513][ T2151] usb 1-1: Manufacturer: syz [ 659.518416][ T2151] cdc_wdm 1-1:1.0: skipping garbage [ 659.529273][ T2151] cdc_wdm 1-1:1.0: skipping garbage [ 659.550382][ T2151] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 659.558080][ T2151] cdc_wdm 1-1:1.0: Unknown control protocol [ 659.719216][T11575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 659.751676][T11575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 659.811394][ T5898] usb 1-1: USB disconnect, device number 4 [ 661.303049][T11591] netlink: zone id is out of range [ 661.365482][T11587] i2c i2c-0: Invalid block write size 34 [ 661.401001][T11590] netlink: zone id is out of range [ 661.434659][T11591] netlink: zone id is out of range [ 661.440040][T11591] netlink: zone id is out of range [ 661.446264][T11591] netlink: zone id is out of range [ 661.451588][T11591] netlink: zone id is out of range [ 661.456974][T11591] netlink: zone id is out of range [ 661.462474][T11591] netlink: zone id is out of range [ 661.468931][T11590] netlink: zone id is out of range [ 661.493331][T11590] netlink: zone id is out of range [ 661.855348][ T927] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 662.084307][ T927] usb 1-1: Using ep0 maxpacket: 32 [ 662.498696][ T927] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 662.534248][ T927] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 662.543602][ T927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.559677][ T927] usb 1-1: Product: syz [ 662.563914][ T927] usb 1-1: Manufacturer: syz [ 662.604557][ T927] usb 1-1: SerialNumber: syz [ 662.613679][ T927] usb 1-1: config 0 descriptor?? [ 662.626678][ T927] usb 1-1: bad CDC descriptors [ 662.632393][ T927] usb 1-1: unsupported MDLM descriptors [ 662.831230][ T927] usb 1-1: USB disconnect, device number 5 [ 663.304728][T10072] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.613147][T11619] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1351'. [ 664.679557][T10072] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.735768][T11620] netlink: 844 bytes leftover after parsing attributes in process `syz.3.1350'. [ 664.889819][T10072] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.858259][T10072] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.085361][T10072] bridge_slave_1: left allmulticast mode [ 667.091310][T10072] bridge_slave_1: left promiscuous mode [ 667.119539][T11014] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 667.127487][T11633] i2c i2c-0: Invalid block write size 34 [ 667.129926][T11014] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 667.143605][T10072] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.151479][T11014] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 667.166794][T11014] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 667.174984][T11014] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 667.197829][T10072] bridge_slave_0: left allmulticast mode [ 667.200461][T11645] loop6: detected capacity change from 0 to 524287999 [ 667.203743][T10072] bridge_slave_0: left promiscuous mode [ 667.243143][T10072] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.956261][T11658] fuse: Unknown parameter 'r*y°' [ 669.294328][T11014] Bluetooth: hci0: command tx timeout [ 670.441267][T11683] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1366'. [ 671.498544][T11014] Bluetooth: hci0: command tx timeout [ 671.879119][T10072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 671.904937][T10072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 671.915552][T10072] bond0 (unregistering): Released all slaves [ 672.217453][T11694] i2c i2c-0: Invalid block write size 34 [ 673.534316][T11014] Bluetooth: hci0: command tx timeout [ 673.564642][T11703] ptrace attach of "./syz-executor exec"[11692] was attempted by "./syz-executor exec"[11703] [ 674.140777][T11640] chnl_net:caif_netlink_parms(): no params data found [ 674.414280][T10072] hsr_slave_0: left promiscuous mode [ 674.438031][T10072] hsr_slave_1: left promiscuous mode [ 674.444441][T10072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.453249][T10072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.503108][T10072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.524836][T10072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.581555][T10072] veth1_macvtap: left promiscuous mode [ 674.599811][T10072] veth0_macvtap: left promiscuous mode [ 674.622984][T10072] veth1_vlan: left promiscuous mode [ 674.630410][T10072] veth0_vlan: left promiscuous mode [ 674.904918][T11726] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1378'. [ 675.614320][T11014] Bluetooth: hci0: command tx timeout [ 676.150522][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 676.163667][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 676.182280][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 676.193415][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 676.204008][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 676.775064][T10072] team0 (unregistering): Port device team_slave_1 removed [ 676.841840][T10072] team0 (unregistering): Port device team_slave_0 removed [ 677.555869][T11738] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22 [ 677.566447][T11738] netdevsim netdevsim8: Direct firmware load for . failed with error -22 [ 677.575320][T11738] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 677.950551][T11640] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.000292][T11640] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.230471][T11640] bridge_slave_0: entered allmulticast mode [ 678.415971][T11014] Bluetooth: hci3: command tx timeout [ 678.461204][T11640] bridge_slave_0: entered promiscuous mode [ 678.486378][T11640] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.507600][T11640] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.515149][T11640] bridge_slave_1: entered allmulticast mode [ 678.523016][T11640] bridge_slave_1: entered promiscuous mode [ 678.702035][ T927] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 678.704538][T11640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.781178][T11640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 678.919418][T11766] syz.3.1386: attempt to access beyond end of device [ 678.919418][T11766] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 678.964350][ T927] usb 9-1: Using ep0 maxpacket: 8 [ 678.979886][ T927] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.996826][ T927] usb 9-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 679.018447][ T927] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 679.032925][T11640] team0: Port device team_slave_0 added [ 679.040259][ T927] usb 9-1: SerialNumber: syz [ 679.062383][T11640] team0: Port device team_slave_1 added [ 679.069555][T11766] EXT4-fs (loop3): unable to read superblock [ 679.323666][ T927] usb 9-1: config 0 descriptor?? [ 679.336944][ T927] usb 9-1: Found UVC 0.00 device (05ac:8501) [ 679.370691][ T927] usb 9-1: No valid video chain found. [ 679.477910][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.557956][T11640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 679.593041][T11640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 679.632815][T11640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 679.663689][ T5847] usb 9-1: USB disconnect, device number 2 [ 679.718316][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.887331][T11640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 679.905189][T11640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 680.017994][T11640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 680.031555][T11739] chnl_net:caif_netlink_parms(): no params data found [ 680.107784][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.451807][T11777] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1390'. [ 680.464032][T11776] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1390'. [ 680.495576][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.514361][T11014] Bluetooth: hci3: command tx timeout [ 680.656148][ T5953] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 680.673697][T11640] hsr_slave_0: entered promiscuous mode [ 680.680852][T11640] hsr_slave_1: entered promiscuous mode [ 680.871767][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 680.883104][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 680.901589][ T5953] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 680.936175][ T5953] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 680.945519][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.976025][ T5953] usb 4-1: config 0 descriptor?? [ 681.081907][T11782] ptrace attach of "./syz-executor exec"[11771] was attempted by "./syz-executor exec"[11782] [ 681.113423][T11776] team0 (unregistering): Port device team_slave_0 removed [ 681.143141][T11776] team0 (unregistering): Port device team_slave_1 removed [ 681.249734][T11774] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 681.268924][T11774] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 682.395733][T11739] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.403089][T11739] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.421409][T11739] bridge_slave_0: entered allmulticast mode [ 682.575991][T11739] bridge_slave_0: entered promiscuous mode [ 682.580896][T11014] Bluetooth: hci3: command tx timeout [ 682.586123][T11739] bridge0: port 2(bridge_slave_1) entered blocking state [ 682.594455][T11739] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.603838][T11739] bridge_slave_1: entered allmulticast mode [ 682.613038][T11739] bridge_slave_1: entered promiscuous mode [ 683.379208][ T5953] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 683.546021][T11799] loop6: detected capacity change from 0 to 524287999 [ 683.549158][T11739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 683.578624][T11739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.846419][T11739] team0: Port device team_slave_0 added [ 683.896890][T11739] team0: Port device team_slave_1 added [ 684.264502][ T36] bridge_slave_1: left allmulticast mode [ 684.270510][ T36] bridge_slave_1: left promiscuous mode [ 684.351650][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.453891][ T36] bridge_slave_0: left allmulticast mode [ 684.470673][ T36] bridge_slave_0: left promiscuous mode [ 684.580770][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.694347][T11014] Bluetooth: hci3: command tx timeout [ 685.326146][ T5953] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 685.824900][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.205993][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.485491][ T5847] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 686.657000][T11022] usb 4-1: USB disconnect, device number 4 [ 686.666835][ T5847] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 686.695967][ T5847] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.708085][ T5847] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 686.721984][ T5847] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 686.735286][ T5847] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.750966][ T5847] usb 9-1: config 0 descriptor?? [ 686.841770][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 686.855322][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 686.866651][ T36] bond0 (unregistering): Released all slaves [ 686.893156][T11739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.902612][T11739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 686.929389][T11739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.976426][T11825] netlink: 844 bytes leftover after parsing attributes in process `syz.0.1400'. [ 687.010409][T11739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 687.032832][T11739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 687.060740][T11739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 688.216216][T11739] hsr_slave_0: entered promiscuous mode [ 688.242889][T11739] hsr_slave_1: entered promiscuous mode [ 688.253440][T11739] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 688.272275][T11739] Cannot create hsr debugfs directory [ 688.534329][ T5847] usbhid 9-1:0.0: can't add hid device: -71 [ 688.544806][ T5847] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 688.561337][ T36] hsr_slave_0: left promiscuous mode [ 688.572393][ T5847] usb 9-1: USB disconnect, device number 3 [ 688.610711][ T36] hsr_slave_1: left promiscuous mode [ 688.617787][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 688.649489][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 688.687223][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 688.710961][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 688.797933][ T36] veth1_macvtap: left promiscuous mode [ 688.822740][ T36] veth0_macvtap: left promiscuous mode [ 688.833080][ T36] veth1_vlan: left promiscuous mode [ 688.849955][ T36] veth0_vlan: left promiscuous mode [ 689.410776][T11845] ptrace attach of "./syz-executor exec"[11833] was attempted by "./syz-executor exec"[11845] [ 689.844478][ T5953] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 690.014663][ T5953] usb 1-1: device descriptor read/64, error -71 [ 690.242800][ T36] team0 (unregistering): Port device team_slave_1 removed [ 690.284711][ T5953] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 690.336658][ T36] team0 (unregistering): Port device team_slave_0 removed [ 690.454744][ T5953] usb 1-1: device descriptor read/64, error -71 [ 690.575020][ T5953] usb usb1-port1: attempt power cycle [ 690.934469][ T5953] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 690.955689][ T5953] usb 1-1: device descriptor read/8, error -71 [ 691.204487][ T5953] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 691.245352][ T5953] usb 1-1: device descriptor read/8, error -71 [ 691.446149][T11858] loop2: detected capacity change from 0 to 7 [ 691.525264][T11858] loop2: p1 [ 691.528546][T11858] loop2: partition table partially beyond EOD, truncated [ 691.543310][ T5953] usb usb1-port1: unable to enumerate USB device [ 691.546568][T11858] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 691.622177][T11860] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1408'. [ 694.321407][T11874] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 694.329995][T11874] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 694.338532][T11874] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 696.156438][T11885] trusted_key: syz.0.1416 sent an empty control message without MSG_MORE. [ 696.172855][T11640] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 696.388126][T11640] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 696.674811][T11640] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 697.640527][T11903] loop6: detected capacity change from 0 to 524287999 [ 697.694637][T11640] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 698.141578][T11739] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 698.242396][T11739] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 698.448796][T11739] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 698.487826][T11739] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 700.197463][T11640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.316859][T11640] 8021q: adding VLAN 0 to HW filter on device team0 [ 700.399900][T10519] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.407071][T10519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.461463][T10519] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.468693][T10519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.594864][T11640] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 700.606319][T11640] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 700.737802][T11943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 702.134473][T11490] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 702.210071][T11739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 702.290020][T11951] tipc: Started in network mode [ 702.314818][T11490] usb 4-1: Using ep0 maxpacket: 8 [ 702.325756][T11951] tipc: Node identity 4, cluster identity 4711 [ 702.344515][T11951] tipc: Node number set to 4 [ 702.356238][T11490] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 702.368527][T11490] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 702.385556][T11490] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.401837][T11739] 8021q: adding VLAN 0 to HW filter on device team0 [ 702.414770][T11490] usb 4-1: Product: syz [ 702.430162][T11490] usb 4-1: Manufacturer: syz [ 702.447701][T11490] usb 4-1: SerialNumber: syz [ 702.466262][ T6333] bridge0: port 1(bridge_slave_0) entered blocking state [ 702.473421][ T6333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.498614][T11490] usb 4-1: config 0 descriptor?? [ 702.516591][T11490] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 702.528960][T11490] usb 4-1: setting power ON [ 702.538540][T11490] dvb-usb: bulk message failed: -22 (2/0) [ 702.561206][T11490] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 702.572947][T10519] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.580246][T10519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 702.581709][T11490] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 702.636881][T11490] usb 4-1: media controller created [ 702.673487][T11490] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 702.720066][T11942] dvb-usb: bulk message failed: -22 (3/0) [ 702.726587][T11942] cxusb: i2c wr: len=80 is too big! [ 702.726587][T11942] [ 702.736158][T11490] usb 4-1: selecting invalid altsetting 6 [ 702.761277][T11640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 702.763285][T11490] usb 4-1: digital interface selection failed (-22) [ 702.798049][T11490] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 702.819571][T11490] usb 4-1: setting power OFF [ 702.837957][T11490] dvb-usb: bulk message failed: -22 (2/0) [ 702.861105][T11490] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 702.894530][T11490] (NULL device *): no alternate interface [ 703.552614][T11739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 703.651130][T11973] xt_TCPMSS: Only works on TCP SYN packets [ 703.832737][T11490] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 703.929870][T11490] usb 4-1: USB disconnect, device number 5 [ 704.038551][T11978] netlink: 'syz.0.1434': attribute type 4 has an invalid length. [ 704.384480][T11640] veth0_vlan: entered promiscuous mode [ 704.443682][T11640] veth1_vlan: entered promiscuous mode [ 704.552260][T11640] veth0_macvtap: entered promiscuous mode [ 704.638704][T11640] veth1_macvtap: entered promiscuous mode [ 704.664509][T11490] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 704.702664][T11640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 704.742771][T11640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 704.778437][T11640] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.799355][T11640] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.808426][T11640] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.823817][T11640] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 704.852572][T11490] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 704.869554][T11490] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 704.903236][T11490] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 704.958970][T11490] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 705.011008][T11490] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 705.018310][T11991] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x42474752, 6, 0, 5, 0) [ 705.062224][T11490] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 705.087314][T11739] veth0_vlan: entered promiscuous mode [ 705.122305][T11490] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 705.247389][T11996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 705.367416][T11996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 705.399410][T11739] veth1_vlan: entered promiscuous mode [ 705.420634][ T3464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.739872][ T3464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.381287][ T5925] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 707.221912][ T9] usb 4-1: USB disconnect, device number 6 [ 707.287827][T10519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.288103][ T5925] usb 9-1: device descriptor read/64, error -71 [ 707.304581][T10519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.381996][T11739] veth0_macvtap: entered promiscuous mode [ 707.446103][T11739] veth1_macvtap: entered promiscuous mode [ 707.550946][T11739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 707.559896][ T5925] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 707.601227][T11739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 707.641227][T11739] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.701180][T11739] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.713254][T11739] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.728711][T11739] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 707.746338][ T5925] usb 9-1: device descriptor read/64, error -71 [ 707.855926][ T5925] usb usb9-port1: attempt power cycle [ 707.864039][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.881284][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 707.918272][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 707.929568][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 708.219146][ T5925] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 708.483744][ T5925] usb 9-1: device descriptor read/8, error -71 [ 708.729598][T12032] PKCS8: Unsupported PKCS#8 version [ 708.764380][T12034] netlink: 'syz.8.1446': attribute type 1 has an invalid length. [ 708.803481][T12034] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1446'. [ 708.813435][T12035] syzkaller1: entered promiscuous mode [ 708.841139][T12035] syzkaller1: entered allmulticast mode [ 708.998458][T12042] FAULT_INJECTION: forcing a failure. [ 708.998458][T12042] name fail_futex, interval 1, probability 0, space 0, times 1 [ 709.011639][T12042] CPU: 0 UID: 0 PID: 12042 Comm: syz.3.1451 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 709.011666][T12042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 709.011680][T12042] Call Trace: [ 709.011688][T12042] [ 709.011697][T12042] dump_stack_lvl+0x189/0x250 [ 709.011727][T12042] ? __pfx____ratelimit+0x10/0x10 [ 709.011751][T12042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 709.011774][T12042] ? __pfx__printk+0x10/0x10 [ 709.011815][T12042] should_fail_ex+0x414/0x560 [ 709.011843][T12042] get_futex_key+0x1a8/0x1640 [ 709.011880][T12042] ? __pfx_get_futex_key+0x10/0x10 [ 709.011903][T12042] ? __kasan_kmalloc+0x93/0xb0 [ 709.011945][T12042] futex_lock_pi+0x1cc/0xa60 [ 709.011979][T12042] ? _parse_integer_limit+0x1ae/0x1f0 [ 709.012009][T12042] ? __pfx_futex_lock_pi+0x10/0x10 [ 709.012067][T12042] ? __pfx_futex_wake_mark+0x10/0x10 [ 709.012100][T12042] ? vfs_write+0x8d8/0xa90 [ 709.012134][T12042] ? ksys_write+0x1cb/0x250 [ 709.012157][T12042] do_futex+0x292/0x420 [ 709.012181][T12042] ? __pfx_vfs_write+0x10/0x10 [ 709.012203][T12042] ? __pfx_do_futex+0x10/0x10 [ 709.012237][T12042] __se_sys_futex+0x36f/0x400 [ 709.012263][T12042] ? fput+0xa0/0xd0 [ 709.012287][T12042] ? ksys_write+0x22a/0x250 [ 709.012303][T12042] ? __pfx___se_sys_futex+0x10/0x10 [ 709.012329][T12042] ? __pfx_ksys_write+0x10/0x10 [ 709.012344][T12042] ? rcu_is_watching+0x15/0xb0 [ 709.012371][T12042] ? __x64_sys_futex+0x21/0xf0 [ 709.012399][T12042] do_syscall_64+0xfa/0x3b0 [ 709.012420][T12042] ? lockdep_hardirqs_on+0x9c/0x150 [ 709.012442][T12042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.012461][T12042] ? clear_bhb_loop+0x60/0xb0 [ 709.012485][T12042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 709.012505][T12042] RIP: 0033:0x7f775658ebe9 [ 709.012523][T12042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 709.012547][T12042] RSP: 002b:00007f77573a6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 709.012568][T12042] RAX: ffffffffffffffda RBX: 00007f77567b5fa0 RCX: 00007f775658ebe9 [ 709.012583][T12042] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 000020000000cffc [ 709.012596][T12042] RBP: 00007f77573a6090 R08: 0000000000000000 R09: 00000000fffffffc [ 709.012610][T12042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 709.012622][T12042] R13: 00007f77567b6038 R14: 00007f77567b5fa0 R15: 00007ffd90971ef8 [ 709.012655][T12042] [ 709.257406][ C0] vkms_vblank_simulate: vblank timer overrun [ 709.730674][T12050] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1450'. [ 710.297024][T12075] atomic_op ffff88802ff71198 conn xmit_atomic 0000000000000000 [ 710.544897][T12076] atomic_op ffff888068a1b198 conn xmit_atomic 0000000000000000 [ 710.642257][ T2151] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 710.959152][ T2151] usb 4-1: Using ep0 maxpacket: 16 [ 710.986112][ T2151] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.004313][ T2151] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 711.032589][ T2151] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 711.136449][T12086] sock: sock_timestamping_bind_phc: sock not bind to device [ 711.234341][ T2151] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 711.244795][ T2151] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 711.260411][ T2151] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 711.270493][ T2151] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 711.278945][ T2151] usb 4-1: Manufacturer: syz [ 711.290747][ T2151] usb 4-1: config 0 descriptor?? [ 711.886541][T12086] netlink: 596 bytes leftover after parsing attributes in process `syz.6.1464'. [ 712.479207][ T2151] rc_core: IR keymap rc-hauppauge not found [ 712.487801][ T2151] Registered IR keymap rc-empty [ 712.493297][ T2151] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 712.535384][ T2151] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 712.587049][ T2151] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 712.738872][ T2151] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input24 [ 713.062617][ T2151] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 713.204670][ T2151] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 713.240831][ T2151] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 713.314313][ T2151] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 713.345285][ T2151] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 713.394494][ T2151] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 713.433197][ T2151] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 713.632593][T12122] atomic_op ffff888055991998 conn xmit_atomic 0000000000000000 [ 713.725974][ T2151] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 714.153649][ T2151] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 714.378879][ T2151] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 714.499421][ T2151] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 714.531567][ T2151] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 714.646182][ T2151] usb 4-1: USB disconnect, device number 7 [ 717.287972][T12158] FAULT_INJECTION: forcing a failure. [ 717.287972][T12158] name failslab, interval 1, probability 0, space 0, times 0 [ 717.464317][T12158] CPU: 1 UID: 0 PID: 12158 Comm: syz.8.1483 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 717.464338][T12158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 717.464345][T12158] Call Trace: [ 717.464350][T12158] [ 717.464356][T12158] dump_stack_lvl+0x189/0x250 [ 717.464372][T12158] ? __pfx____ratelimit+0x10/0x10 [ 717.464384][T12158] ? __pfx_dump_stack_lvl+0x10/0x10 [ 717.464395][T12158] ? __pfx__printk+0x10/0x10 [ 717.464409][T12158] ? __pfx___might_resched+0x10/0x10 [ 717.464421][T12158] ? fs_reclaim_acquire+0x7d/0x100 [ 717.464436][T12158] should_fail_ex+0x414/0x560 [ 717.464450][T12158] should_failslab+0xa8/0x100 [ 717.464463][T12158] __kmalloc_noprof+0xcb/0x4f0 [ 717.464472][T12158] ? tomoyo_encode+0x28b/0x550 [ 717.464488][T12158] tomoyo_encode+0x28b/0x550 [ 717.464504][T12158] tomoyo_realpath_from_path+0x58d/0x5d0 [ 717.464524][T12158] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 717.464535][T12158] tomoyo_path_number_perm+0x1e8/0x5a0 [ 717.464547][T12158] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 717.464580][T12158] ? __lock_acquire+0xab9/0xd20 [ 717.464602][T12158] ? __fget_files+0x2a/0x420 [ 717.464615][T12158] ? __fget_files+0x2a/0x420 [ 717.464625][T12158] ? __fget_files+0x3a0/0x420 [ 717.464636][T12158] ? __fget_files+0x2a/0x420 [ 717.464649][T12158] security_file_ioctl+0xcb/0x2d0 [ 717.464662][T12158] __se_sys_ioctl+0x47/0x170 [ 717.464679][T12158] do_syscall_64+0xfa/0x3b0 [ 717.464690][T12158] ? lockdep_hardirqs_on+0x9c/0x150 [ 717.464701][T12158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.464711][T12158] ? clear_bhb_loop+0x60/0xb0 [ 717.464723][T12158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.464733][T12158] RIP: 0033:0x7fbefcb8ebe9 [ 717.464744][T12158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 717.464752][T12158] RSP: 002b:00007fbefda41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 717.464764][T12158] RAX: ffffffffffffffda RBX: 00007fbefcdb5fa0 RCX: 00007fbefcb8ebe9 [ 717.464772][T12158] RDX: 0000200000000080 RSI: 00000000c0d05640 RDI: 0000000000000003 [ 717.464779][T12158] RBP: 00007fbefda41090 R08: 0000000000000000 R09: 0000000000000000 [ 717.464785][T12158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.464791][T12158] R13: 00007fbefcdb6038 R14: 00007fbefcdb5fa0 R15: 00007fff2bd3b268 [ 717.464807][T12158] [ 717.464820][T12158] ERROR: Out of memory at tomoyo_realpath_from_path. [ 718.254985][T12170] atomic_op ffff888056357198 conn xmit_atomic 0000000000000000 [ 719.148449][T12176] net_ratelimit: 16 callbacks suppressed [ 719.148495][T12176] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 719.173860][T12176] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1487'. [ 719.183207][T12176] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1487'. [ 719.797054][T12180] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1491'. [ 721.013016][T12197] FAULT_INJECTION: forcing a failure. [ 721.013016][T12197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 721.162614][T12197] CPU: 0 UID: 0 PID: 12197 Comm: syz.6.1495 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 721.162642][T12197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 721.162655][T12197] Call Trace: [ 721.162663][T12197] [ 721.162671][T12197] dump_stack_lvl+0x189/0x250 [ 721.162699][T12197] ? __pfx____ratelimit+0x10/0x10 [ 721.162718][T12197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 721.162735][T12197] ? __pfx__printk+0x10/0x10 [ 721.162768][T12197] should_fail_ex+0x414/0x560 [ 721.162793][T12197] _copy_to_user+0x31/0xb0 [ 721.162822][T12197] simple_read_from_buffer+0xe1/0x170 [ 721.162847][T12197] proc_fail_nth_read+0x1df/0x250 [ 721.162873][T12197] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 721.162902][T12197] ? rw_verify_area+0x258/0x650 [ 721.162929][T12197] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 721.162954][T12197] vfs_read+0x200/0x980 [ 721.162986][T12197] ? __pfx___mutex_lock+0x10/0x10 [ 721.163005][T12197] ? __pfx_vfs_read+0x10/0x10 [ 721.163034][T12197] ? __fget_files+0x2a/0x420 [ 721.163061][T12197] ? __fget_files+0x3a0/0x420 [ 721.163081][T12197] ? __fget_files+0x2a/0x420 [ 721.163113][T12197] ksys_read+0x145/0x250 [ 721.163133][T12197] ? __pfx_ksys_read+0x10/0x10 [ 721.163149][T12197] ? rcu_is_watching+0x15/0xb0 [ 721.163176][T12197] ? do_syscall_64+0xbe/0x3b0 [ 721.163202][T12197] do_syscall_64+0xfa/0x3b0 [ 721.163227][T12197] ? lockdep_hardirqs_on+0x9c/0x150 [ 721.163247][T12197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.163266][T12197] ? clear_bhb_loop+0x60/0xb0 [ 721.163290][T12197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.163308][T12197] RIP: 0033:0x7f49f6d8d5fc [ 721.163326][T12197] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 721.163343][T12197] RSP: 002b:00007f49f7c9d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 721.163364][T12197] RAX: ffffffffffffffda RBX: 00007f49f6fb5fa0 RCX: 00007f49f6d8d5fc [ 721.163379][T12197] RDX: 000000000000000f RSI: 00007f49f7c9d0a0 RDI: 0000000000000004 [ 721.163391][T12197] RBP: 00007f49f7c9d090 R08: 0000000000000000 R09: 0000000000000000 [ 721.163404][T12197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.163415][T12197] R13: 00007f49f6fb6038 R14: 00007f49f6fb5fa0 R15: 00007fff2c34ab08 [ 721.163449][T12197] [ 721.392671][ C0] vkms_vblank_simulate: vblank timer overrun [ 721.397391][T12205] FAULT_INJECTION: forcing a failure. [ 721.397391][T12205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 721.411888][T12205] CPU: 1 UID: 0 PID: 12205 Comm: syz.8.1496 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 721.411903][T12205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 721.411910][T12205] Call Trace: [ 721.411916][T12205] [ 721.411923][T12205] dump_stack_lvl+0x189/0x250 [ 721.411939][T12205] ? __pfx____ratelimit+0x10/0x10 [ 721.411950][T12205] ? __pfx_dump_stack_lvl+0x10/0x10 [ 721.411962][T12205] ? __pfx__printk+0x10/0x10 [ 721.411975][T12205] ? __might_fault+0xb0/0x130 [ 721.411992][T12205] should_fail_ex+0x414/0x560 [ 721.412006][T12205] _copy_from_user+0x2d/0xb0 [ 721.412022][T12205] ___sys_recvmsg+0x12e/0x510 [ 721.412036][T12205] ? __pfx____sys_recvmsg+0x10/0x10 [ 721.412063][T12205] ? __might_fault+0xb0/0x130 [ 721.412074][T12205] do_recvmmsg+0x307/0x770 [ 721.412089][T12205] ? __pfx_do_recvmmsg+0x10/0x10 [ 721.412106][T12205] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 721.412128][T12205] __x64_sys_recvmmsg+0x190/0x240 [ 721.412139][T12205] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 721.412148][T12205] ? rcu_is_watching+0x15/0xb0 [ 721.412162][T12205] ? do_syscall_64+0xbe/0x3b0 [ 721.412175][T12205] do_syscall_64+0xfa/0x3b0 [ 721.412186][T12205] ? lockdep_hardirqs_on+0x9c/0x150 [ 721.412197][T12205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.412207][T12205] ? clear_bhb_loop+0x60/0xb0 [ 721.412220][T12205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.412230][T12205] RIP: 0033:0x7fbefcb8ebe9 [ 721.412241][T12205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 721.412250][T12205] RSP: 002b:00007fbefda20038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 721.412262][T12205] RAX: ffffffffffffffda RBX: 00007fbefcdb6090 RCX: 00007fbefcb8ebe9 [ 721.412269][T12205] RDX: 000000000000045b RSI: 0000200000008880 RDI: 0000000000000005 [ 721.412276][T12205] RBP: 00007fbefda20090 R08: 0000000000000000 R09: 0000000000000000 [ 721.412282][T12205] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 721.412288][T12205] R13: 00007fbefcdb6128 R14: 00007fbefcdb6090 R15: 00007fff2bd3b268 [ 721.412305][T12205] [ 724.471940][T12225] IPVS: length: 201 != 24 [ 724.935775][T12229] fuse: Unknown parameter 'r*y°' [ 725.065030][T12235] netlink: 'syz.8.1502': attribute type 4 has an invalid length. [ 725.084616][T12235] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.1502'. [ 725.634424][ T5953] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 725.808422][ T5953] usb 4-1: Using ep0 maxpacket: 16 [ 725.821053][ T5953] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 725.949789][ T5953] usb 4-1: config 0 has no interface number 0 [ 726.318959][ T5953] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 726.339592][ T5953] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 726.348999][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 726.694333][ T5953] usb 4-1: Product: syz [ 726.698571][ T5953] usb 4-1: SerialNumber: syz [ 726.717436][ T5953] usb 4-1: config 0 descriptor?? [ 726.749966][ T5953] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input25 [ 727.105335][T12256] netdevsim netdevsim7: loading /lib/firmware/. failed with error -22 [ 727.114487][T12256] netdevsim netdevsim7: Direct firmware load for . failed with error -22 [ 727.123104][T12256] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 728.191099][T12264] FAULT_INJECTION: forcing a failure. [ 728.191099][T12264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 728.263603][T12264] CPU: 0 UID: 0 PID: 12264 Comm: syz.6.1510 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 728.263632][T12264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 728.263643][T12264] Call Trace: [ 728.263653][T12264] [ 728.263661][T12264] dump_stack_lvl+0x189/0x250 [ 728.263685][T12264] ? __pfx____ratelimit+0x10/0x10 [ 728.263704][T12264] ? __pfx_dump_stack_lvl+0x10/0x10 [ 728.263724][T12264] ? __pfx__printk+0x10/0x10 [ 728.263758][T12264] should_fail_ex+0x414/0x560 [ 728.263781][T12264] strncpy_from_user+0x36/0x290 [ 728.263814][T12264] getname_flags+0xf3/0x540 [ 728.263855][T12264] do_sys_openat2+0xbc/0x1c0 [ 728.263880][T12264] ? __pfx_do_sys_openat2+0x10/0x10 [ 728.263902][T12264] ? ksys_write+0x22a/0x250 [ 728.263920][T12264] ? __pfx_ksys_write+0x10/0x10 [ 728.263938][T12264] __x64_sys_openat+0x138/0x170 [ 728.263965][T12264] do_syscall_64+0xfa/0x3b0 [ 728.263984][T12264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.264000][T12264] ? asm_sysvec_call_function_single+0x1a/0x20 [ 728.264017][T12264] ? clear_bhb_loop+0x60/0xb0 [ 728.264037][T12264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.264053][T12264] RIP: 0033:0x7f49f6d8d550 [ 728.264068][T12264] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 728.264083][T12264] RSP: 002b:00007f49f7c5af10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 728.264102][T12264] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f49f6d8d550 [ 728.264114][T12264] RDX: 0000000000000002 RSI: 00007f49f7c5afa0 RDI: 00000000ffffff9c [ 728.264124][T12264] RBP: 00007f49f7c5afa0 R08: 0000000000000000 R09: 0000000000000000 [ 728.264136][T12264] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 728.264145][T12264] R13: 00007f49f6fb6218 R14: 00007f49f6fb6180 R15: 00007fff2c34ab08 [ 728.264172][T12264] [ 729.968291][T12274] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 730.255387][T12280] xt_TCPMSS: Only works on TCP SYN packets [ 730.279266][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 730.289655][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 730.297222][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 730.305171][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 730.313814][ T5953] usb 4-1: USB disconnect, device number 8 [ 730.319813][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 730.319842][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 730.393555][ T5953] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 731.181702][T12292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1517'. [ 731.191208][T12292] bridge_slave_1: left allmulticast mode [ 731.197063][T12292] bridge_slave_1: left promiscuous mode [ 731.203914][T12292] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.348529][T12292] bridge_slave_0: left allmulticast mode [ 731.356493][T12292] bridge_slave_0: left promiscuous mode [ 731.362359][T12292] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.383048][T12295] libceph: resolve '4' (ret=-3): failed [ 733.426329][T12318] xt_bpf: check failed: parse error [ 733.532634][T12311] Bluetooth: MGMT ver 1.23 [ 733.874676][T12314] IPVS: set_ctl: invalid protocol: 59 10.1.1.1:20002 [ 734.344534][T12321] netlink: 372 bytes leftover after parsing attributes in process `syz.8.1519'. [ 735.163978][T12334] FAULT_INJECTION: forcing a failure. [ 735.163978][T12334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 735.178339][T12334] CPU: 1 UID: 0 PID: 12334 Comm: syz.0.1532 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 735.178366][T12334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 735.178379][T12334] Call Trace: [ 735.178387][T12334] [ 735.178396][T12334] dump_stack_lvl+0x189/0x250 [ 735.178425][T12334] ? __pfx____ratelimit+0x10/0x10 [ 735.178447][T12334] ? __pfx_dump_stack_lvl+0x10/0x10 [ 735.178466][T12334] ? __pfx__printk+0x10/0x10 [ 735.178488][T12334] ? __might_fault+0xb0/0x130 [ 735.178516][T12334] should_fail_ex+0x414/0x560 [ 735.178542][T12334] copy_fpstate_to_sigframe+0xa8d/0xce0 [ 735.178576][T12334] ? copy_fpstate_to_sigframe+0x181/0xce0 [ 735.178611][T12334] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 735.178654][T12334] ? __lock_acquire+0xab9/0xd20 [ 735.178680][T12334] ? fpu__alloc_mathframe+0xad/0x130 [ 735.178711][T12334] get_sigframe+0x58d/0x7d0 [ 735.178751][T12334] ? __pfx_get_sigframe+0x10/0x10 [ 735.178792][T12334] x64_setup_rt_frame+0x15c/0xd40 [ 735.178826][T12334] ? lockdep_hardirqs_on+0x9c/0x150 [ 735.178855][T12334] ? _raw_spin_unlock_irq+0x2e/0x50 [ 735.178872][T12334] ? get_signal+0x1122/0x1310 [ 735.178901][T12334] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 735.178939][T12334] arch_do_signal_or_restart+0x3dc/0x750 [ 735.178968][T12334] ? __fget_files+0x3a0/0x420 [ 735.178994][T12334] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 735.179039][T12334] ? exit_to_user_mode_loop+0x40/0x110 [ 735.179062][T12334] exit_to_user_mode_loop+0x75/0x110 [ 735.179082][T12334] do_syscall_64+0x2bd/0x3b0 [ 735.179103][T12334] ? lockdep_hardirqs_on+0x9c/0x150 [ 735.179122][T12334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.179141][T12334] ? clear_bhb_loop+0x60/0xb0 [ 735.179172][T12334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.179192][T12334] RIP: 0033:0x7fd2bfd8ebe7 [ 735.179209][T12334] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 735.179226][T12334] RSP: 002b:00007fd2c0c91038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 735.179247][T12334] RAX: 0000000000000013 RBX: 00007fd2bffb5fa0 RCX: 00007fd2bfd8ebe9 [ 735.179261][T12334] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000003 [ 735.179274][T12334] RBP: 00007fd2c0c91090 R08: 0000000000000000 R09: 0000000000000000 [ 735.179286][T12334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 735.179298][T12334] R13: 00007fd2bffb6038 R14: 00007fd2bffb5fa0 R15: 00007ffc729e32c8 [ 735.179330][T12334] [ 736.245119][T12350] fuse: Unknown parameter 'r*y°' [ 736.780868][T12362] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 736.820501][T12364] xt_bpf: check failed: parse error [ 736.840506][T12361] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 737.384649][T12367] fuse: Bad value for 'rootmode' [ 737.795821][T12362] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 739.381025][T12382] lo speed is unknown, defaulting to 1000 [ 739.387468][T12382] lo speed is unknown, defaulting to 1000 [ 739.394995][T12382] lo speed is unknown, defaulting to 1000 [ 739.405645][T12382] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 739.424084][T12382] infiniband s: RDMA CMA: cma_listen_on_dev, error -98 [ 739.583099][T12382] lo speed is unknown, defaulting to 1000 [ 739.590329][T12382] lo speed is unknown, defaulting to 1000 [ 739.597196][T12382] lo speed is unknown, defaulting to 1000 [ 739.604039][T12382] lo speed is unknown, defaulting to 1000 [ 739.610961][T12382] lo speed is unknown, defaulting to 1000 [ 739.617864][T12382] lo speed is unknown, defaulting to 1000 [ 739.906994][T12389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1542'. [ 740.389944][ T30] audit: type=1326 audit(1755049326.578:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12380 comm="syz.3.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f775658ebe9 code=0x7fc00000 [ 740.448809][T12393] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1546'. [ 740.489129][ T30] audit: type=1326 audit(1755049326.578:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12380 comm="syz.3.1542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f775658ebe9 code=0x7fc00000 [ 740.510622][ C0] vkms_vblank_simulate: vblank timer overrun [ 741.649243][T12407] xt_bpf: check failed: parse error [ 742.479229][T12421] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 742.488284][T12421] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 742.496888][T12421] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 743.556621][T11014] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 743.566843][T11014] CPU: 0 UID: 0 PID: 11014 Comm: kworker/u9:0 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 743.566870][T11014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 743.566883][T11014] Workqueue: hci4 hci_rx_work [ 743.566909][T11014] Call Trace: [ 743.566918][T11014] [ 743.566928][T11014] dump_stack_lvl+0x189/0x250 [ 743.566953][T11014] ? kernfs_path_from_node+0x2c/0x260 [ 743.566979][T11014] ? __pfx_dump_stack_lvl+0x10/0x10 [ 743.567003][T11014] ? __pfx__printk+0x10/0x10 [ 743.567031][T11014] ? kernfs_path_from_node+0x2c/0x260 [ 743.567054][T11014] ? kernfs_path_from_node+0x2c/0x260 [ 743.567080][T11014] ? kernfs_path_from_node+0x22c/0x260 [ 743.567101][T11014] ? kernfs_path_from_node+0x2c/0x260 [ 743.567125][T11014] sysfs_create_dir_ns+0x259/0x280 [ 743.567149][T11014] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 743.567184][T11014] ? do_raw_spin_unlock+0x122/0x240 [ 743.567218][T11014] kobject_add_internal+0x59f/0xb40 [ 743.567255][T11014] kobject_add+0x155/0x220 [ 743.567286][T11014] ? __pfx_kobject_add+0x10/0x10 [ 743.567311][T11014] ? _raw_spin_unlock+0x28/0x50 [ 743.567346][T11014] ? get_device_parent+0x366/0x3a0 [ 743.567380][T11014] device_add+0x408/0xb50 [ 743.567412][T11014] hci_conn_add_sysfs+0xd5/0x1e0 [ 743.567445][T11014] le_conn_complete_evt+0xc3a/0x1220 [ 743.567488][T11014] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 743.567517][T11014] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 743.567538][T11014] ? __asan_memcpy+0x40/0x70 [ 743.567569][T11014] ? __pfx___mutex_lock+0x10/0x10 [ 743.567592][T11014] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 743.567614][T11014] ? skb_pull_data+0xfb/0x200 [ 743.567642][T11014] hci_le_conn_complete_evt+0x187/0x450 [ 743.567678][T11014] hci_event_packet+0x78c/0x1200 [ 743.567703][T11014] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 743.567732][T11014] ? __pfx_hci_event_packet+0x10/0x10 [ 743.567756][T11014] ? kcov_remote_start+0x4d3/0x7f0 [ 743.567785][T11014] ? lockdep_hardirqs_on+0x90/0x150 [ 743.567810][T11014] ? hci_send_to_monitor+0xe2/0x570 [ 743.567840][T11014] hci_rx_work+0x46a/0xe80 [ 743.567871][T11014] ? process_scheduled_works+0x9ef/0x17b0 [ 743.567896][T11014] process_scheduled_works+0xade/0x17b0 [ 743.567950][T11014] ? __pfx_process_scheduled_works+0x10/0x10 [ 743.567993][T11014] worker_thread+0x8a0/0xda0 [ 743.568047][T11014] kthread+0x70e/0x8a0 [ 743.568077][T11014] ? __pfx_worker_thread+0x10/0x10 [ 743.568099][T11014] ? __pfx_kthread+0x10/0x10 [ 743.568127][T11014] ? _raw_spin_unlock_irq+0x23/0x50 [ 743.568145][T11014] ? lockdep_hardirqs_on+0x9c/0x150 [ 743.568171][T11014] ? __pfx_kthread+0x10/0x10 [ 743.568199][T11014] ret_from_fork+0x3fc/0x770 [ 743.568223][T11014] ? __pfx_ret_from_fork+0x10/0x10 [ 743.568250][T11014] ? __switch_to_asm+0x39/0x70 [ 743.568273][T11014] ? __switch_to_asm+0x33/0x70 [ 743.568294][T11014] ? __pfx_kthread+0x10/0x10 [ 743.568319][T11014] ret_from_fork_asm+0x1a/0x30 [ 743.568358][T11014] [ 743.570469][T11014] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 743.871610][T11014] Bluetooth: hci4: failed to register connection device [ 744.525293][T12434] ptrace attach of "./syz-executor exec"[11274] was attempted by "./syz-executor exec"[12434] [ 744.960031][T12451] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1560'. [ 744.969337][T12451] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1560'. [ 746.210876][T12460] xt_bpf: check failed: parse error [ 747.049516][T12460] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 747.252247][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.285008][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.593343][T12475] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 747.602354][T12475] cramfs: wrong magic [ 747.611587][T12475] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.622004][T12475] bridge0: port 1(bridge_slave_0) entered disabled state [ 748.538820][ T5953] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 748.554238][T11490] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 748.708729][ T5953] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 748.724855][ T5953] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 748.748867][ T5953] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 748.887775][T11490] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 748.917233][T11490] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 749.694443][T11014] Bluetooth: hci4: command 0x0406 tx timeout [ 749.727420][ T5953] usb 7-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 749.736808][ T5953] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.749148][ T5953] usb 7-1: config 0 descriptor?? [ 749.778925][T11490] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 749.779565][T12496] tipc: Started in network mode [ 749.789977][T11490] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 750.141190][T12496] tipc: Node identity 4, cluster identity 4711 [ 750.176805][T12496] tipc: Node number set to 4 [ 750.182671][T11490] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 750.197638][T11490] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.213593][T11490] usb 1-1: Product: syz [ 750.235492][T11490] usb 1-1: Manufacturer: syz [ 750.240146][T11490] usb 1-1: SerialNumber: syz [ 750.398036][T12489] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 750.410247][ T5953] viewsonic 0003:2133:0018.000D: hidraw0: USB HID v0.00 Device [HID 2133:0018] on usb-dummy_hcd.6-1/input0 [ 750.412136][T11490] cdc_mbim 1-1:1.0: skipping garbage [ 750.513928][T12516] netlink: 'syz.3.1580': attribute type 10 has an invalid length. [ 750.525421][T12516] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 750.815354][T12485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.824722][T11490] cdc_mbim 1-1:1.0: bind() failure [ 750.834813][T11490] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 750.843842][T11490] cdc_ncm 1-1:1.1: bind() failure [ 750.855634][T12524] FAULT_INJECTION: forcing a failure. [ 750.855634][T12524] name failslab, interval 1, probability 0, space 0, times 0 [ 750.868353][T12524] CPU: 1 UID: 0 PID: 12524 Comm: syz.7.1581 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 750.868375][T12524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 750.868386][T12524] Call Trace: [ 750.868394][T12524] [ 750.868402][T12524] dump_stack_lvl+0x189/0x250 [ 750.868430][T12524] ? __pfx____ratelimit+0x10/0x10 [ 750.868450][T12524] ? __pfx_dump_stack_lvl+0x10/0x10 [ 750.868472][T12524] ? __pfx__printk+0x10/0x10 [ 750.868509][T12524] ? __pfx___might_resched+0x10/0x10 [ 750.868535][T12524] should_fail_ex+0x414/0x560 [ 750.868560][T12524] should_failslab+0xa8/0x100 [ 750.868584][T12524] __kmalloc_noprof+0xcb/0x4f0 [ 750.868602][T12524] ? qrtr_tun_write_iter+0xbf/0x180 [ 750.868629][T12524] ? security_file_permission+0x75/0x290 [ 750.868656][T12524] qrtr_tun_write_iter+0xbf/0x180 [ 750.868687][T12524] vfs_write+0x54b/0xa90 [ 750.868711][T12524] ? __pfx_qrtr_tun_write_iter+0x10/0x10 [ 750.868742][T12524] ? __pfx_vfs_write+0x10/0x10 [ 750.868769][T12524] ? __fget_files+0x2a/0x420 [ 750.868801][T12524] ksys_write+0x145/0x250 [ 750.868822][T12524] ? __pfx_ksys_write+0x10/0x10 [ 750.868838][T12524] ? rcu_is_watching+0x15/0xb0 [ 750.868865][T12524] ? do_syscall_64+0xbe/0x3b0 [ 750.868890][T12524] do_syscall_64+0xfa/0x3b0 [ 750.868910][T12524] ? lockdep_hardirqs_on+0x9c/0x150 [ 750.868931][T12524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.868950][T12524] ? clear_bhb_loop+0x60/0xb0 [ 750.868973][T12524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.868992][T12524] RIP: 0033:0x7f288b78ebe9 [ 750.869011][T12524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 750.869028][T12524] RSP: 002b:00007f288c692038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 750.869048][T12524] RAX: ffffffffffffffda RBX: 00007f288b9b6180 RCX: 00007f288b78ebe9 [ 750.869063][T12524] RDX: 00000000000000c8 RSI: 0000200000000380 RDI: 0000000000000007 [ 750.869076][T12524] RBP: 00007f288c692090 R08: 0000000000000000 R09: 0000000000000000 [ 750.869088][T12524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 750.869101][T12524] R13: 00007f288b9b6218 R14: 00007f288b9b6180 R15: 00007ffd903a6ee8 [ 750.869133][T12524] [ 751.198811][T12485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 751.596644][T11490] usb 1-1: USB disconnect, device number 10 [ 751.795536][T11014] Bluetooth: hci4: command 0x0406 tx timeout [ 752.793034][ T9] usb 7-1: USB disconnect, device number 25 [ 752.793355][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1587'. [ 753.084187][ T2151] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 753.905824][ T2151] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 753.924244][ T2151] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1463, setting to 64 [ 753.984398][ T2151] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 753.997053][ T2151] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 754.005871][ T2151] usb 9-1: Manufacturer: syz [ 754.013217][ T2151] usb 9-1: config 0 descriptor?? [ 754.248874][T12555] team0: Port device team_slave_0 removed [ 754.255895][T12555] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 754.394473][ T2151] rc_core: IR keymap rc-hauppauge not found [ 754.408610][ T2151] Registered IR keymap rc-empty [ 754.414414][T12567] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1596'. [ 754.448588][T12567] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 754.456841][ T2151] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 754.545135][ T2151] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input26 [ 754.750936][ C1] igorplugusb 9-1:0.0: Error: urb status = -32 [ 754.834565][T11014] Bluetooth: hci1: command 0x0406 tx timeout [ 756.379289][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 756.499911][ T30] audit: type=1800 audit(1755049342.688:140): pid=12583 uid=0 auid=4294967295 ses=4294967295 subj=_ op=set_data cause=unavailable-hash-algorithm comm="syz.3.1598" name="/newroot/72/bus" dev="tmpfs" ino=402 res=0 errno=0 [ 756.652381][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.739086][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 756.808166][ T9] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 756.864236][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.714419][ T9] usb 1-1: Product: syz [ 757.718636][ T9] usb 1-1: Manufacturer: syz [ 757.723232][ T9] usb 1-1: SerialNumber: syz [ 757.818305][ T9] usb 1-1: config 0 descriptor?? [ 757.863279][ T9] dm9601 1-1:0.0: probe with driver dm9601 failed with error -22 [ 758.070357][ T5985] usb 9-1: USB disconnect, device number 8 [ 759.019505][T12600] input: syz1 as /devices/virtual/input/input27 [ 759.166745][T12596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 759.175389][T12596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 761.016541][ T5953] usb 1-1: USB disconnect, device number 11 [ 761.300131][T12620] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1609'. [ 762.000701][T12628] syzkaller0: entered promiscuous mode [ 762.007394][T12628] syzkaller0: entered allmulticast mode [ 767.246020][T12673] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1620'. [ 769.599882][ T30] audit: type=1326 audit(1755049355.788:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12687 comm="syz.0.1624" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd2bfd8ebe9 code=0x0 [ 769.631843][T12692] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1626'. [ 769.654261][T12693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1624'. [ 769.670572][T12692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1626'. [ 769.680200][T12693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1624'. [ 769.826392][T12693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1624'. [ 770.233399][ T30] audit: type=1800 audit(1755049356.408:142): pid=12702 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.1628" name="bus" dev="overlay" ino=650 res=0 errno=0 [ 770.592542][T12715] comedi comedi0: dt2815: I/O port conflict (0x9,2) [ 770.840280][T12721] Invalid source name [ 770.845184][T12721] UBIFS error (pid: 12721): cannot open "usrquota", error -22 [ 771.970850][ T6334] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.017708][T12726] overlay: filesystem on ./file0 is read-only [ 772.125915][ T6334] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.345029][ T6334] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.547613][ T6334] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.750120][T12739] syz.8.1642: attempt to access beyond end of device [ 772.750120][T12739] nbd8: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 772.770453][T12739] gfs2: error -5 reading superblock [ 773.379551][ T6334] bridge_slave_1: left allmulticast mode [ 773.388573][ T6334] bridge_slave_1: left promiscuous mode [ 773.404392][ T6334] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.426180][ T6334] bridge_slave_0: left allmulticast mode [ 773.438720][ T6334] bridge_slave_0: left promiscuous mode [ 773.527661][ T6334] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.541399][T11014] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 773.554946][T11014] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 773.564130][T11014] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 773.575327][T11014] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 773.582814][T11014] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 775.283833][ T6334] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 775.299003][ T6334] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 775.310951][ T6334] bond0 (unregistering): Released all slaves [ 775.452777][T12745] lo speed is unknown, defaulting to 1000 [ 775.624317][T11014] Bluetooth: hci0: command tx timeout [ 776.812296][T12745] chnl_net:caif_netlink_parms(): no params data found [ 776.993643][ T6334] hsr_slave_0: left promiscuous mode [ 777.016881][ T6334] hsr_slave_1: left promiscuous mode [ 777.031033][ T6334] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 777.071550][ T6334] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 777.633922][ T6334] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 777.660983][ T6334] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 777.709972][T11014] Bluetooth: hci0: command tx timeout [ 777.827064][ T6334] veth1_macvtap: left promiscuous mode [ 777.834484][ T6334] veth0_macvtap: left promiscuous mode [ 777.840187][ T6334] veth1_vlan: left promiscuous mode [ 777.845900][ T6334] veth0_vlan: left promiscuous mode [ 778.988122][ T5898] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 779.103832][T12802] loop6: detected capacity change from 0 to 524287999 [ 779.105627][ T5985] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 779.205460][ T5898] usb 9-1: Using ep0 maxpacket: 8 [ 779.225603][ T5898] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 779.236336][ T5898] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 779.248592][ T5898] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 779.262683][ T5898] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 779.272894][ T5898] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 779.289790][ T5898] usb 9-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 779.299154][ T5898] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.314808][ T5985] usb 4-1: Using ep0 maxpacket: 8 [ 779.348178][ T5985] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 779.359221][ T5985] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 779.365303][ T5898] usb 9-1: config 0 descriptor?? [ 779.407572][ T5985] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 779.469398][ T5985] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 779.507127][ T5985] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 779.531736][ T5985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.592541][T12793] xt_cluster: node mask cannot exceed total number of nodes [ 779.601732][T12793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.610670][T12793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.626485][T12809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.637304][T12809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.695313][ T9] usb 9-1: USB disconnect, device number 9 [ 779.750489][ T5985] usb 4-1: GET_CAPABILITIES returned 0 [ 779.756380][ T5985] usbtmc 4-1:16.0: can't read capabilities [ 779.793286][T11014] Bluetooth: hci0: command tx timeout [ 779.969722][T12799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.997901][T12799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 780.342912][ T6334] team0 (unregistering): Port device team_slave_1 removed [ 780.409471][ T6334] team0 (unregistering): Port device team_slave_0 removed [ 780.830351][ T5985] usb 4-1: USB disconnect, device number 9 [ 781.212938][ T927] lo speed is unknown, defaulting to 1000 [ 781.227927][ T927] infiniband s: ib_query_port failed (-19) [ 781.509118][ T30] audit: type=1804 audit(1755049367.698:143): pid=12825 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.1663" name="/newroot/36/file0" dev="tmpfs" ino=205 res=1 errno=0 [ 781.509447][T12825] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 781.538537][T12825] ref_ctr increment failed for inode: 0xcd offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807cf63200 [ 781.667392][T12745] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.707642][T12745] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.751536][T12745] bridge_slave_0: entered allmulticast mode [ 781.777355][T12745] bridge_slave_0: entered promiscuous mode [ 781.800592][T12745] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.808068][T12745] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.903585][T11014] Bluetooth: hci0: command tx timeout [ 781.983349][T12745] bridge_slave_1: entered allmulticast mode [ 781.992532][T12745] bridge_slave_1: entered promiscuous mode [ 782.079954][T12835] netlink: 'syz.3.1666': attribute type 4 has an invalid length. [ 782.159757][T12745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.181212][T12745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.268337][T12745] team0: Port device team_slave_0 added [ 782.299909][T12745] team0: Port device team_slave_1 added [ 782.820997][T12745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.828124][T12745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 782.862800][T12745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 782.891914][T12847] overlayfs: upper fs does not support tmpfile. [ 782.976505][T12745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 782.983489][T12745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.059912][T12745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.233372][T12859] syz_tun: entered allmulticast mode [ 783.319419][T12857] dvmrp8: entered allmulticast mode [ 783.555244][T12745] hsr_slave_0: entered promiscuous mode [ 783.562750][T12745] hsr_slave_1: entered promiscuous mode [ 783.574785][ T2151] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 783.628869][T12855] syz_tun: left allmulticast mode [ 783.754258][ T2151] usb 1-1: Using ep0 maxpacket: 32 [ 783.770116][ T2151] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 783.803918][ T2151] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 783.842695][ T2151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.907327][ T2151] usb 1-1: Product: syz [ 783.916032][ T2151] usb 1-1: Manufacturer: syz [ 783.923610][ T2151] usb 1-1: SerialNumber: syz [ 783.931069][ T30] audit: type=1804 audit(1755049370.118:144): pid=12869 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.1677" name="/newroot/91/file0" dev="tmpfs" ino=502 res=1 errno=0 [ 783.931175][T12869] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 783.962518][T12869] ref_ctr increment failed for inode: 0x1f6 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807eac1e00 [ 784.282131][ T2151] usb 1-1: config 0 descriptor?? [ 784.297382][ T2151] usb 1-1: bad CDC descriptors [ 784.425007][ T2151] usb 1-1: unsupported MDLM descriptors [ 784.535801][ T2151] usb 1-1: USB disconnect, device number 12 [ 787.073426][ T5985] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 787.262028][T12888] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1683'. [ 787.287127][ T5985] usb 1-1: config 0 has an invalid interface number: 5 but max is 0 [ 787.347075][ T5985] usb 1-1: config 0 has no interface number 0 [ 787.401558][ T5985] usb 1-1: config 0 interface 5 has no altsetting 0 [ 787.681441][ T5985] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 787.727610][T12745] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 787.734496][ T5985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.742517][ T5985] usb 1-1: Product: syz [ 787.774911][ T5985] usb 1-1: Manufacturer: syz [ 787.779571][ T5985] usb 1-1: SerialNumber: syz [ 787.787109][ T5985] usb 1-1: config 0 descriptor?? [ 787.794413][ T5985] hso 1-1:0.5: Not our interface [ 787.799903][ T5985] usb-storage 1-1:0.5: USB Mass Storage device detected [ 787.817969][T12745] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 787.910158][T12745] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 787.931863][T12745] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 788.341613][T12911] befs: (nullb0): invalid magic header [ 789.138570][T12745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.182518][T12745] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.205824][T10072] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.213227][T10072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.278350][T10072] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.285668][T10072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.643932][T12927] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 789.653662][T12927] ref_ctr increment failed for inode: 0xed offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88803309b200 [ 789.661523][ T30] audit: type=1804 audit(1755049375.828:145): pid=12927 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.1688" name="/newroot/42/file0" dev="tmpfs" ino=237 res=1 errno=0 [ 789.884331][ T927] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 790.586700][ T5898] usb 1-1: USB disconnect, device number 13 [ 790.751192][ T927] usb 9-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 790.971554][ T927] usb 9-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 791.093493][ T927] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.106582][ T927] usb 9-1: Product: syz [ 791.112904][ T927] usb 9-1: Manufacturer: syz [ 791.144350][ T927] usb 9-1: SerialNumber: syz [ 791.540048][T12745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.552299][ T9] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 791.840765][ T9] usb 1-1: LPM exit latency is zeroed, disabling LPM. [ 791.860987][ T9] usb 1-1: config 1 interface 0 altsetting 60 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 791.884201][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 791.902633][ T9] usb 1-1: string descriptor 0 read error: -22 [ 791.910750][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.40 [ 791.941584][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.032797][ T927] comedi comedi5: Wrong number of endpoints [ 792.057842][ T927] ni6501 9-1:5.0: driver 'ni6501' failed to auto-configure device. [ 792.098069][ T927] usb 9-1: USB disconnect, device number 10 [ 792.285871][T12936] tipc: Enabling of bearer rejected, failed to enable media [ 793.343466][T12745] veth0_vlan: entered promiscuous mode [ 793.371115][ T9] usbhid 1-1:1.0: can't add hid device: -71 [ 793.384614][ T927] IPVS: starting estimator thread 0... [ 793.412978][ T9] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 793.432879][T12745] veth1_vlan: entered promiscuous mode [ 793.454837][ T9] usb 1-1: USB disconnect, device number 14 [ 793.525339][T12745] veth0_macvtap: entered promiscuous mode [ 793.544615][T12956] IPVS: using max 25 ests per chain, 60000 per kthread [ 793.563153][T12745] veth1_macvtap: entered promiscuous mode [ 793.811495][T12745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 793.861526][T12745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 794.016282][T12745] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.122939][T12745] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.227103][T12745] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.542748][T12745] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.778304][T12978] bridge_slave_0: left allmulticast mode [ 795.784683][T12978] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.991537][T10072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.115130][T10072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.188088][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.223748][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.587343][T13011] netlink: 'syz.9.1639': attribute type 1 has an invalid length. [ 797.599582][T13011] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1639'. [ 797.690873][T13014] xt_TCPMSS: Only works on TCP SYN packets [ 797.796408][ T5925] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 797.911174][T13018] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 798.024188][ T5925] usb 9-1: Using ep0 maxpacket: 16 [ 798.039742][ T5925] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.205975][ T5925] usb 9-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 798.445855][ T5925] usb 9-1: config 0 interface 0 has no altsetting 0 [ 798.478328][ T5925] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 798.492441][ T5925] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.508714][ T5925] usb 9-1: config 0 descriptor?? [ 798.528771][ T5925] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 798.639407][T13029] syz_tun: entered allmulticast mode [ 798.670489][T13028] syz_tun: left allmulticast mode [ 799.160822][T13036] bridge_slave_0: left allmulticast mode [ 799.180609][T13036] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.061329][T13043] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1721'. [ 800.070555][T13043] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1721'. [ 800.379654][ T5898] usb 9-1: USB disconnect, device number 11 [ 800.577377][T13051] fuse: Bad value for 'fd' [ 801.286189][ T30] audit: type=1326 audit(1755049387.478:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13055 comm="syz.0.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bfd8ebe9 code=0x7ffc0000 [ 801.514847][ T30] audit: type=1326 audit(1755049387.478:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13055 comm="syz.0.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bfd8ebe9 code=0x7ffc0000 [ 801.544772][ T30] audit: type=1326 audit(1755049387.698:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13055 comm="syz.0.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd2bfd8ebe9 code=0x7ffc0000 [ 801.566797][ T30] audit: type=1326 audit(1755049387.708:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13055 comm="syz.0.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bfd8ebe9 code=0x7ffc0000 [ 801.737703][ T30] audit: type=1326 audit(1755049387.708:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13055 comm="syz.0.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bfd8ebe9 code=0x7ffc0000 [ 801.760008][ T30] audit: type=1326 audit(1755049387.788:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13055 comm="syz.0.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd2bfd8ebe9 code=0x7ffc0000 [ 801.785169][ T30] audit: type=1326 audit(1755049387.788:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13055 comm="syz.0.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bfd8ebe9 code=0x7ffc0000 [ 801.807645][ T30] audit: type=1326 audit(1755049387.788:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13055 comm="syz.0.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bfd8ebe9 code=0x7ffc0000 [ 801.867741][ T30] audit: type=1326 audit(1755049387.788:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13055 comm="syz.0.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd2bfd8ebe9 code=0x7ffc0000 [ 801.889751][ T30] audit: type=1326 audit(1755049387.788:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13055 comm="syz.0.1725" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd2bfd8ebe9 code=0x7ffc0000 [ 802.284642][T13065] syz_tun: entered allmulticast mode [ 802.431931][T13065] dvmrp8: entered allmulticast mode [ 802.621625][T13062] syz_tun: left allmulticast mode [ 805.780626][T13104] fuse: Bad value for 'fd' [ 806.655878][T13106] xt_bpf: check failed: parse error [ 807.303284][T13118] dvmrp8: entered allmulticast mode [ 809.654583][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.660971][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.943884][T13130] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 809.986001][T13141] bridge_slave_0: left allmulticast mode [ 810.103780][T13141] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.195668][T13158] xt_bpf: check failed: parse error [ 811.506827][T13160] fuse: Bad value for 'fd' [ 811.520290][T13161] tipc: Enabled bearer , priority 0 [ 811.782962][T13164] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1755'. [ 811.813882][T13164] bridge0: entered promiscuous mode [ 811.837717][T13164] macsec1: entered allmulticast mode [ 811.864334][T13164] bridge0: entered allmulticast mode [ 811.872730][T13164] bridge0: port 3(macsec1) entered blocking state [ 811.889760][T13164] bridge0: port 3(macsec1) entered disabled state [ 812.774824][T13164] bridge0: left allmulticast mode [ 812.810150][T13164] bridge0: left promiscuous mode [ 813.593836][T13153] tipc: Disabling bearer [ 813.639014][T13168] dvmrp8: entered allmulticast mode [ 813.970425][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 813.970443][ T30] audit: type=1804 audit(1755049400.158:208): pid=13191 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.9.1761" name="/newroot/14/file0" dev="tmpfs" ino=91 res=1 errno=0 [ 813.971249][T13191] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 814.006145][T13191] ref_ctr increment failed for inode: 0x5b offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807856b200 [ 814.590043][ T927] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 814.829064][T13198] xt_bpf: check failed: parse error [ 814.909424][ T927] usb 1-1: Using ep0 maxpacket: 8 [ 815.057936][ T927] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 815.070139][ T927] usb 1-1: config 179 has no interface number 0 [ 815.084772][ T927] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 815.096300][ T927] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 815.124913][ T927] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 815.136753][ T927] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 815.166618][ T927] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 815.180388][ T927] usb 1-1: config 179 interface 65 has no altsetting 0 [ 815.190443][ T927] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 815.218584][ T927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.310339][ T927] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input29 [ 815.404461][ T5192] input input29: unable to receive magic message: -110 [ 815.455287][ T5192] input input29: unable to receive magic message: -32 [ 815.477174][ T5192] input input29: unable to receive magic message: -32 [ 815.527354][ T5192] input input29: unable to receive magic message: -32 [ 817.116506][ T2151] usb 1-1: USB disconnect, device number 15 [ 817.116505][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 817.501295][T13224] dvmrp8: entered allmulticast mode [ 817.520184][T13227] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 817.529228][T13227] ref_ctr increment failed for inode: 0x75 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff888029faee00 [ 817.551589][ T30] audit: type=1804 audit(1755049403.708:209): pid=13227 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.9.1774" name="/newroot/19/file0" dev="tmpfs" ino=117 res=1 errno=0 [ 818.654187][T13241] FAULT_INJECTION: forcing a failure. [ 818.654187][T13241] name failslab, interval 1, probability 0, space 0, times 0 [ 818.667114][T13241] CPU: 0 UID: 0 PID: 13241 Comm: syz.9.1775 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 818.667138][T13241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 818.667149][T13241] Call Trace: [ 818.667156][T13241] [ 818.667163][T13241] dump_stack_lvl+0x189/0x250 [ 818.667190][T13241] ? __pfx____ratelimit+0x10/0x10 [ 818.667211][T13241] ? __pfx_dump_stack_lvl+0x10/0x10 [ 818.667229][T13241] ? __pfx__printk+0x10/0x10 [ 818.667243][T13241] ? __pfx___might_resched+0x10/0x10 [ 818.667255][T13241] ? fs_reclaim_acquire+0x7d/0x100 [ 818.667270][T13241] should_fail_ex+0x414/0x560 [ 818.667285][T13241] should_failslab+0xa8/0x100 [ 818.667297][T13241] __kmalloc_noprof+0xcb/0x4f0 [ 818.667307][T13241] ? tomoyo_encode+0x28b/0x550 [ 818.667323][T13241] tomoyo_encode+0x28b/0x550 [ 818.667339][T13241] tomoyo_realpath_from_path+0x58d/0x5d0 [ 818.667358][T13241] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 818.667369][T13241] tomoyo_path_number_perm+0x1e8/0x5a0 [ 818.667381][T13241] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 818.667396][T13241] ? rcu_is_watching+0x15/0xb0 [ 818.667411][T13241] ? __lock_acquire+0xab9/0xd20 [ 818.667432][T13241] ? __fget_files+0x2a/0x420 [ 818.667446][T13241] ? __fget_files+0x2a/0x420 [ 818.667456][T13241] ? __fget_files+0x3a0/0x420 [ 818.667466][T13241] ? __fget_files+0x2a/0x420 [ 818.667480][T13241] security_file_ioctl+0xcb/0x2d0 [ 818.667493][T13241] __se_sys_ioctl+0x47/0x170 [ 818.667510][T13241] do_syscall_64+0xfa/0x3b0 [ 818.667522][T13241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.667532][T13241] ? asm_sysvec_call_function_single+0x1a/0x20 [ 818.667542][T13241] ? clear_bhb_loop+0x60/0xb0 [ 818.667554][T13241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.667564][T13241] RIP: 0033:0x7fb6e9d8ebe9 [ 818.667574][T13241] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 818.667583][T13241] RSP: 002b:00007fb6eab3c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 818.667595][T13241] RAX: ffffffffffffffda RBX: 00007fb6e9fb6090 RCX: 00007fb6e9d8ebe9 [ 818.667603][T13241] RDX: 00002000000001c0 RSI: 00000000000007a8 RDI: 0000000000000006 [ 818.667609][T13241] RBP: 00007fb6eab3c090 R08: 0000000000000000 R09: 0000000000000000 [ 818.667616][T13241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.667622][T13241] R13: 00007fb6e9fb6128 R14: 00007fb6e9fb6090 R15: 00007fff5844d3b8 [ 818.667638][T13241] [ 818.667678][T13241] ERROR: Out of memory at tomoyo_realpath_from_path. [ 819.146503][T13243] xt_bpf: check failed: parse error [ 819.191008][T13243] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 824.047931][T13263] netlink: 212360 bytes leftover after parsing attributes in process `syz.0.1782'. [ 826.646149][T13277] overlayfs: missing 'lowerdir' [ 826.736812][T13283] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 826.745627][T13283] ref_ctr increment failed for inode: 0x28a offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8880748ebc00 [ 826.758036][ T30] audit: type=1804 audit(1755049412.928:210): pid=13283 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.1786" name="/newroot/119/file0" dev="tmpfs" ino=650 res=1 errno=0 [ 827.509641][T13288] syz_tun: entered allmulticast mode [ 827.606193][T13287] syz_tun: left allmulticast mode [ 828.920700][T13303] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1791'. [ 829.034631][T13306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1792'. [ 829.645733][T13307] gretap0: mtu less than device minimum [ 830.536398][ T927] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 830.734216][ T927] usb 1-1: Using ep0 maxpacket: 8 [ 830.780898][ T927] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 830.828330][ T927] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 830.881308][ T927] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 830.918067][ T927] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 830.945558][ T927] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 830.961639][ T927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 831.904984][ T927] usb 1-1: GET_CAPABILITIES returned 0 [ 831.910653][ T927] usbtmc 1-1:16.0: can't read capabilities [ 832.186494][ T927] usb 1-1: USB disconnect, device number 16 [ 832.225093][T13337] syz_tun: entered allmulticast mode [ 832.248123][T13336] syz_tun: left allmulticast mode [ 832.888389][T13348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1804'. [ 832.919663][T13347] fuse: root generation should be zero [ 833.214225][T11014] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 834.368867][T13366] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 834.404931][T13366] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 835.145301][T13366] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 836.024264][ T5898] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 836.817216][ T5898] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 836.844368][ T5898] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 836.854468][ T5898] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 836.875229][ T5898] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 836.896838][ T5898] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 836.912250][T13394] loop6: detected capacity change from 0 to 524287999 [ 836.924156][ T5898] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 836.950157][ T5898] usb 4-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 836.967812][ T5898] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 837.004364][ T5898] usb 4-1: config 168 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 837.026358][ T5898] usb 4-1: string descriptor 0 read error: -22 [ 837.032891][ T5898] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 837.043173][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.072616][ T5898] adutux 4-1:168.0: interrupt endpoints not found [ 837.286521][T13377] use of bytesused == 0 is deprecated and will be removed in the future, [ 837.306042][T13377] use the actual size instead. [ 837.314889][T13397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 837.372519][T13397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 837.418937][ T5898] usb 4-1: USB disconnect, device number 10 [ 837.894347][ T5985] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 838.034299][ T5985] usb 1-1: device descriptor read/64, error -71 [ 838.274393][ T5985] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 839.034204][ T5985] usb 1-1: device descriptor read/64, error -71 [ 839.145294][ T5985] usb usb1-port1: attempt power cycle [ 839.544206][ T5985] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 840.084849][ T5985] usb 1-1: device descriptor read/8, error -71 [ 840.484210][ T5985] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 840.767551][ T5985] usb 1-1: device descriptor read/8, error -71 [ 841.376810][ T5985] usb usb1-port1: unable to enumerate USB device [ 841.462277][T13436] bridge_slave_0: entered promiscuous mode [ 841.598282][T13440] netlink: 248 bytes leftover after parsing attributes in process `syz.8.1826'. [ 842.160937][T13448] binder: Unknown parameter 'func' [ 843.069727][T13456] loop6: detected capacity change from 0 to 524287999 [ 843.812667][ T5985] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 844.674169][ T5985] usb 4-1: Using ep0 maxpacket: 8 [ 844.814895][ T5985] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 844.852799][ T5985] usb 4-1: config 0 interface 0 has no altsetting 0 [ 844.874257][ T5985] usb 4-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00 [ 844.893657][ T5985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.916516][ T5985] usb 4-1: config 0 descriptor?? [ 845.219540][T13484] vlan0: entered promiscuous mode [ 845.566136][ T5985] hid-u2fzero 0003:20A0:4287.000E: hidraw0: USB HID v0.03 Device [HID 20a0:4287] on usb-dummy_hcd.3-1/input0 [ 845.717494][ T5985] hid-u2fzero 0003:20A0:4287.000E: NitroKey U2F LED initialised [ 845.775230][ T5985] hid-u2fzero 0003:20A0:4287.000E: NitroKey U2F RNG initialised [ 845.964291][ T5985] usb 4-1: USB disconnect, device number 11 [ 847.053016][T13494] netlink: 'syz.3.1839': attribute type 1 has an invalid length. [ 847.460965][ T30] audit: type=1326 audit(1755049433.648:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13495 comm="syz.8.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefcb8ebe9 code=0x7ffc0000 [ 847.644182][ T30] audit: type=1326 audit(1755049433.678:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13495 comm="syz.8.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefcb8ebe9 code=0x7ffc0000 [ 848.308153][ T30] audit: type=1326 audit(1755049433.678:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13495 comm="syz.8.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7fbefcb8ebe9 code=0x7ffc0000 [ 848.445739][ T30] audit: type=1326 audit(1755049433.678:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13495 comm="syz.8.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefcb8ebe9 code=0x7ffc0000 [ 849.274278][ T30] audit: type=1326 audit(1755049433.678:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13495 comm="syz.8.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefcb8ebe9 code=0x7ffc0000 [ 849.343799][ T30] audit: type=1326 audit(1755049433.678:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13495 comm="syz.8.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbefcb8ebe9 code=0x7ffc0000 [ 849.464144][ T30] audit: type=1326 audit(1755049433.678:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13495 comm="syz.8.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefcb8ebe9 code=0x7ffc0000 [ 849.520258][ T30] audit: type=1326 audit(1755049433.678:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13495 comm="syz.8.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefcb8ebe9 code=0x7ffc0000 [ 849.542094][ C0] vkms_vblank_simulate: vblank timer overrun [ 849.712282][ T30] audit: type=1326 audit(1755049433.678:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13495 comm="syz.8.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbefcb8d550 code=0x7ffc0000 [ 849.734816][ T30] audit: type=1326 audit(1755049433.678:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13495 comm="syz.8.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbefcb8ebe9 code=0x7ffc0000 [ 849.756393][ C0] vkms_vblank_simulate: vblank timer overrun [ 851.427713][T13538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1851'. [ 851.599305][T13544] binder: BINDER_SET_CONTEXT_MGR already set [ 851.607878][T13544] binder: 13543:13544 ioctl 4018620d 200000004a80 returned -16 [ 851.939759][T11359] Bluetooth: hci0: command 0x0405 tx timeout [ 854.686741][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 854.686752][ T30] audit: type=1800 audit(1755049440.878:259): pid=13577 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.8.1861" name="file1" dev="overlay" ino=912 res=0 errno=0 [ 854.798050][T13583] random: crng reseeded on system resumption [ 858.636230][T13624] xt_TCPMSS: Only works on TCP SYN packets [ 860.081304][ T5898] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 861.105454][T13643] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1877'. [ 861.146023][ T5898] usb 1-1: config 0 has an invalid descriptor of length 13, skipping remainder of the config [ 861.234645][ T5898] usb 1-1: config 0 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 861.247850][ T5898] usb 1-1: config 0 interface 0 has no altsetting 0 [ 861.259147][ T5898] usb 1-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 861.269149][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.332484][ T5898] usb 1-1: config 0 descriptor?? [ 861.372591][ T5898] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 861.500337][T13652] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1881'. [ 861.580570][T13652] tipc: Started in network mode [ 861.586327][T13652] tipc: Node identity ac14140f, cluster identity 4711 [ 861.601119][T13652] tipc: New replicast peer: 255.255.255.255 [ 861.612460][T13652] tipc: Enabled bearer , priority 10 [ 862.724164][ T5985] tipc: Node number set to 2886997007 [ 863.313202][ T9] usb 1-1: USB disconnect, device number 21 [ 863.440851][T13658] syz_tun: entered allmulticast mode [ 863.456561][T13657] syz_tun: left allmulticast mode [ 863.745610][T13666] bridge_slave_0: invalid flags given to default FDB implementation [ 863.754578][T13666] x_tables: duplicate underflow at hook 1 [ 867.129855][T11359] Bluetooth: hci3: command 0x0406 tx timeout [ 869.567450][T13692] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 869.580881][ T30] audit: type=1804 audit(1755049455.758:260): pid=13692 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.1894" name="/newroot/132/file0" dev="tmpfs" ino=730 res=1 errno=0 [ 869.601409][ C1] vkms_vblank_simulate: vblank timer overrun [ 869.624751][T13692] ref_ctr increment failed for inode: 0x2da offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff8880748ebc00 [ 869.642788][T13694] syz_tun: entered allmulticast mode [ 869.696481][T13693] syz_tun: left allmulticast mode [ 869.779695][T13697] macsec1: entered allmulticast mode [ 869.785263][T13697] macvlan1: entered allmulticast mode [ 869.790623][T13697] veth1_vlan: entered allmulticast mode [ 869.814734][T13697] macvlan1: left allmulticast mode [ 869.820013][T13697] veth1_vlan: left allmulticast mode [ 870.112548][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.124136][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.137092][ T48] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 870.324166][ T48] usb 9-1: Using ep0 maxpacket: 8 [ 870.393747][ T48] usb 9-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 871.014138][ T48] usb 9-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 871.022229][ T48] usb 9-1: Product: syz [ 871.054460][ T48] usb 9-1: Manufacturer: syz [ 871.059866][ T48] usb 9-1: SerialNumber: syz [ 871.095073][ T48] usb 9-1: config 0 descriptor?? [ 871.103699][T13704] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1899'. [ 871.227903][T13704] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 871.567146][T13731] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1900'. [ 872.378074][ T48] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 873.004287][ T48] gspca_zc3xx: reg_w_i err -71 [ 873.009178][ T48] gspca_zc3xx 9-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 873.009237][ T9] IPVS: starting estimator thread 0... [ 873.092607][ T48] usb 9-1: USB disconnect, device number 12 [ 873.124394][T13743] IPVS: using max 33 ests per chain, 79200 per kthread [ 873.216845][T13746] syz_tun: entered allmulticast mode [ 873.223705][T13745] syz_tun: left allmulticast mode [ 873.234179][ T5985] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 873.414016][T13753] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 873.426643][ T30] audit: type=1804 audit(1755049459.598:261): pid=13753 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.8.1909" name="/newroot/172/file0" dev="tmpfs" ino=943 res=1 errno=0 [ 873.458157][T13753] ref_ctr increment failed for inode: 0x3af offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807d820000 [ 873.468360][ T5985] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 873.499007][ T5985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 873.529611][ T5985] usb 1-1: Product: syz [ 873.534343][ T5985] usb 1-1: Manufacturer: syz [ 873.538975][ T5985] usb 1-1: SerialNumber: syz [ 873.553520][ T5985] usb 1-1: config 0 descriptor?? [ 873.624439][ T48] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 873.931291][ T48] usb 4-1: Using ep0 maxpacket: 32 [ 874.223723][ T48] usb 4-1: no configurations [ 874.242159][ T48] usb 4-1: can't read configurations, error -22 [ 874.504315][ T48] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 875.143560][T13769] sctp: [Deprecated]: syz.7.1914 (pid 13769) Use of int in max_burst socket option deprecated. [ 875.143560][T13769] Use struct sctp_assoc_value instead [ 875.197684][T13766] netlink: 1041 bytes leftover after parsing attributes in process `syz.7.1914'. [ 875.293073][ T5898] usb 1-1: USB disconnect, device number 22 [ 875.299305][ T48] usb 4-1: Using ep0 maxpacket: 32 [ 876.320370][T13782] fuse: Unknown parameter '' [ 877.401042][ T48] usb 4-1: device descriptor read/all, error -71 [ 877.577029][ T48] usb usb4-port1: attempt power cycle [ 878.424038][T13791] trusted_key: encrypted_key: keyword 'load, priority 10 [ 901.772213][T14040] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1981'. [ 902.531021][T14052] Unsupported ieee802154 address type: 0 [ 902.538477][T14051] netlink: 'syz.8.1986': attribute type 3 has an invalid length. [ 902.571642][T14051] netlink: 'syz.8.1986': attribute type 3 has an invalid length. [ 903.727391][T14062] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1987'. [ 903.741813][T14062] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1987'. [ 904.484230][ T5898] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 904.674351][T11359] non-paged memory [ 904.679215][T11359] list_del corruption, ffff888058d50b00->next is LIST_POISON1 (dead000000000100) [ 904.689037][T11359] ------------[ cut here ]------------ [ 904.694629][T11359] kernel BUG at lib/list_debug.c:58! [ 905.211554][T11359] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 905.217873][T11359] CPU: 1 UID: 0 PID: 11359 Comm: kworker/u9:3 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 905.228128][T11359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 905.238195][T11359] Workqueue: hci0 hci_conn_timeout [ 905.243328][T11359] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 905.250375][T11359] Code: c0 bd e1 8b 48 89 de e8 b0 1d 68 fc 90 0f 0b 4c 89 e7 e8 55 01 40 fd 48 c7 c7 20 be e1 8b 48 89 de 4c 89 e2 e8 93 1d 68 fc 90 <0f> 0b 4c 89 e7 e8 38 01 40 fd 48 c7 c7 80 be e1 8b 48 89 de 4c 89 [ 905.270021][T11359] RSP: 0018:ffffc9000401f980 EFLAGS: 00010246 [ 905.276112][T11359] RAX: 000000000000004e RBX: ffff888058d50b00 RCX: f5bb293c45118300 [ 905.284113][T11359] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 905.292105][T11359] RBP: ffffffff8a759c60 R08: 0000000000000003 R09: 0000000000000004 [ 905.300088][T11359] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: dead000000000100 [ 905.308070][T11359] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 905.316058][T11359] FS: 0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 905.325010][T11359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 905.331606][T11359] CR2: 00007fb6eab1af98 CR3: 000000001ab96000 CR4: 00000000003526f0 [ 905.339610][T11359] Call Trace: [ 905.342906][T11359] [ 905.345852][T11359] hci_cmd_sync_dequeue_once+0x24a/0x370 [ 905.351522][T11359] hci_cancel_connect_sync+0xc8/0x120 [ 905.356928][T11359] hci_abort_conn+0x191/0x330 [ 905.361629][T11359] ? process_scheduled_works+0x9ef/0x17b0 [ 905.367370][T11359] process_scheduled_works+0xade/0x17b0 [ 905.372947][T11359] ? __pfx_process_scheduled_works+0x10/0x10 [ 905.378947][T11359] worker_thread+0x8a0/0xda0 [ 905.383554][T11359] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 905.389907][T11359] ? __kthread_parkme+0x7b/0x200 [ 905.394883][T11359] kthread+0x70e/0x8a0 [ 905.398969][T11359] ? __pfx_worker_thread+0x10/0x10 [ 905.404092][T11359] ? __pfx_kthread+0x10/0x10 [ 905.408703][T11359] ? _raw_spin_unlock_irq+0x23/0x50 [ 905.413999][T11359] ? lockdep_hardirqs_on+0x9c/0x150 [ 905.419210][T11359] ? __pfx_kthread+0x10/0x10 [ 905.423819][T11359] ret_from_fork+0x3fc/0x770 [ 905.428418][T11359] ? __pfx_ret_from_fork+0x10/0x10 [ 905.433547][T11359] ? __switch_to_asm+0x39/0x70 [ 905.438338][T11359] ? __switch_to_asm+0x33/0x70 [ 905.443116][T11359] ? __pfx_kthread+0x10/0x10 [ 905.447725][T11359] ret_from_fork_asm+0x1a/0x30 [ 905.452519][T11359] [ 905.455557][T11359] Modules linked in: [ 905.460312][T11359] ---[ end trace 0000000000000000 ]--- [ 905.505763][ T5898] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 905.516840][T11359] RIP: 0010:__list_del_entry_valid_or_report+0x10e/0x190 [ 905.523990][T11359] Code: c0 bd e1 8b 48 89 de e8 b0 1d 68 fc 90 0f 0b 4c 89 e7 e8 55 01 40 fd 48 c7 c7 20 be e1 8b 48 89 de 4c 89 e2 e8 93 1d 68 fc 90 <0f> 0b 4c 89 e7 e8 38 01 40 fd 48 c7 c7 80 be e1 8b 48 89 de 4c 89 [ 905.545296][T11359] RSP: 0018:ffffc9000401f980 EFLAGS: 00010246 [ 905.551496][T11359] RAX: 000000000000004e RBX: ffff888058d50b00 RCX: f5bb293c45118300 [ 905.562776][T11359] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 905.571177][T11359] RBP: ffffffff8a759c60 R08: 0000000000000003 R09: 0000000000000004 [ 905.579451][T11359] R10: dffffc0000000000 R11: fffffbfff1bfaa6c R12: dead000000000100 [ 905.587566][T11359] R13: dffffc0000000000 R14: dead000000000100 R15: dead000000000122 [ 905.595619][T11359] FS: 0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 905.604776][T11359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 905.611391][T11359] CR2: 00007fd2bff812f8 CR3: 000000000df38000 CR4: 00000000003526f0 [ 905.619454][T11359] Kernel panic - not syncing: Fatal exception [ 905.625862][T11359] Kernel Offset: disabled [ 905.630201][T11359] Rebooting in 86400 seconds..