last executing test programs: 28m8.34938055s ago: executing program 32 (id=415): munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0xffffffff, 0x0, 0x4]}}], 0x1c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004004}, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x8}, 0x0, {}, 0x67, 0x2}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000008900000008000300", @ANYRES32=r6, @ANYBLOB="18001d801400008006000500cf0000e60482f4820005000600000000002904f9b4b455da70baf4806fbeaaaaa5d9d34d3a86c072d9081c5c7c29b5788d784cd0d581144511a8f2268acb1c33c8328feeab0660e8724be93638e816a869903ccd5262d632cfd2084be576ac"], 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getflags(r9, 0x401) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000100001042dbd70000000000000000000", @ANYRES32=r8, @ANYRESHEX, @ANYBLOB="7a9b"], 0x38}}, 0x0) 26m17.379369948s ago: executing program 33 (id=632): syz_usb_connect$cdc_ecm(0x4, 0x5a, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902480001015700400904000000020600000524"], 0x0) 23m19.32995023s ago: executing program 34 (id=927): prlimit64(0x0, 0xd, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4880}, 0x40004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002580)=@delchain={0x11c, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xe0, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xfff1}}, @TCA_BPF_ACT={0xcc, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0x98, 0x1b, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x3, 0x101, 0x4}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0x0, 0x9}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffb4}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xe, 0x8, 0x512ce089}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/138, 0x8a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) gettid() openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x67f3b106703e7177, 0x0) write$binfmt_aout(r3, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x1, 0x41, "0062ba7d82000000000000000000f7ffffff00"}) r4 = syz_open_pts(r3, 0x0) dup3(r4, r3, 0x0) ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000200)={0x0, 0x2, 0x7c, 0xfffffffa, 0xc6, "84b53f5dc1d996e6e7d479db86fe609ea2029b", 0x80, 0x2}) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f024}) r5 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r5, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x86c}}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x80000000, 0x34524742, [0x1000, 0x7], [0x9, 0xfff], 0x108}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) 23m6.453459716s ago: executing program 35 (id=952): unshare(0x48041580) r0 = add_key(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3f, &(0x7f0000000380)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd60010000091100200100000000000000000001ff02000000000000000000000000000100000e22000990787f"], 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000a40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000003ec0)={&(0x7f0000000540)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf256c00000008000300", @ANYRES32=r5, @ANYBLOB="080026006c090000080027000103"], 0x34}}, 0x20000000) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$KVM_GET_REGS(r6, 0x8090ae81, &(0x7f00000003c0)) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x88400, 0x3) fanotify_mark(0xffffffffffffffff, 0x2c8, 0x80000000, r7, &(0x7f0000000100)='./file0\x00') r8 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f0000000200), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000280)="d2", 0x1, 0xfffffffffffffffe) mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x19) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring={'key_or_keyring:', r9}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r8}) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000000), 0x8) 17m12.660627694s ago: executing program 36 (id=1718): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) syz_usb_disconnect(0xffffffffffffffff) socket(0x28, 0x803, 0x0) syz_usb_connect(0x5, 0x365, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0xcc, 0xc9, 0xac, 0x8, 0x19d2, 0x1535, 0x3fb3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x353, 0x1, 0x0, 0x7, 0x20, 0x8, [{{0x9, 0x4, 0xc0, 0x1, 0xe, 0xff, 0xff, 0xff, 0x4, [], [{{0x9, 0x5, 0xb, 0x4, 0x20, 0x2, 0x9, 0xb}}, {{0x9, 0x5, 0x5, 0xc, 0x200, 0x2, 0x8, 0x7}}, {{0x9, 0x5, 0x6, 0x0, 0x210, 0xa, 0xa, 0xfe}}, {{0x9, 0x5, 0x8, 0x1, 0x20, 0x3, 0xc, 0x8, [@generic={0xb5, 0x23, "247e16e91b688667b9d150512d406f95b6ba5e2b85fa78597bfbda9a6eaf1dbc1df7fd73e2e792ad3775b3b26d516a62c878090fe9283a75f251ef9b75700b540b7ed557bea6f25a9aed59d715302540469cd490d5c8154baeba78e4dc3bb97a361452906a7826c087bc5068d36261bdc550ce92f0b740a82751612b3012714fff0f06b6474f860ee07567cc4b33ef70f8d32cfe9e1ba8001a19ab579fe3383fc89f9c8ade255a0d90b380aa501c20b61f1001"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0x4}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0xf0, 0x1, 0x1}}, {{0x9, 0x5, 0x8, 0x10, 0x400, 0x1, 0x4d, 0xea, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x8}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x2, 0x9, 0x8}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0xe0, 0x6, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x10, 0x7c}]}}, {{0x9, 0x5, 0xa, 0x16, 0x10, 0x2, 0x3, 0xf4}}, {{0x9, 0x5, 0x2, 0xc, 0x200, 0x6, 0xee, 0x1, [@generic={0xae, 0x21, "374c23546556021dbfc1910acd36c45d78e5549399f8b276d863513517fec1f44fae50160713b27f2445d3708ea0560bf030f724ca8bab1a198ab1defbb1c332ed039719886ed03477d1c973e409a625f35ce6353e38f4f065c13ff83d16c52dc56f455c7f11584e35c9a62b8c3d2ce34b7b0f345d0bbad358791838c4569c154c6d6472f4090e9330e8f022ce7ff5d985bd0ca99293326f71dceefdc999298060dc90431b7b8147e9f7fff1"}]}}, {{0x9, 0x5, 0x2, 0x2, 0x0, 0x4, 0x2, 0x4, [@generic={0x6d, 0x24, "9aa52f5bd2b327ed48a558a8a01a60e3fbd6b11616933dd6fc5e4159f65301fc09179c2f61cad95a9dc29a7566125274ef62e5860406380f6a5e7b7009728c3e4bd31ecb5f9e84809569746cbed197c115864a6c585bbc5fe52ba1e7d0367d34b51969f46ac7fc6ea6f6ea"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x4, 0x4, 0x0, [@generic={0xb7, 0x1, "febfef6d93f9394383e4e49d39bc3c351fc525e0501288399d15beee721b30f788815ae4b588011516efefb08a77a3ff2d7b82ed151d6f855c2e2519166045d001dc2f9076030abb527f93df565f330662e0fa57b513859e56f31ca7cffd1bb58318b80acf7f988649dc46e37260c4c8cf4583b541360ea8cacf66aff0121b31005a621779eee69ef019897ff8265dc98f809822def4f97009e1e17eae509f87ec2ec43065c708ef7e65777fc28c3126b4226cc8d3"}]}}, {{0x9, 0x5, 0x7, 0xc, 0x400, 0x5, 0x5, 0x6, [@generic={0x19, 0x23, "02f1505743ea7bfedb58143c6acdbb99cc7956e089834f"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xd, 0x9}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x4, 0x4, 0x6c}}]}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x9, 0xc, 0x84, 0x10, 0x8f}, 0x1c, &(0x7f0000000040)={0x5, 0xf, 0x1c, 0x3, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x1, 0x1b, 0x401}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x9, 0xa, 0x106b}]}, 0x5, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x403}}, {0xc3, &(0x7f00000005c0)=ANY=[@ANYBLOB="c3030d5274a3aa9aab1db2679839b78d49314c5e54d5004dfc5dfff5399786dd93bb5946de753ea80391d54638bfaaf151a824c47050b57710fe80770634d7ca39bdae648d8634299eb95e26929f2b582f0a9f32e819848e2d4049bd58d1ab163874e458c92d43303b2745e9168dfb124559bc9fb848013937e4d1653ff65e1b2440a262b8546184fbdbc45bb1cde3d7caa2ac7c5dca7a54766309f19764d60588923d0a39ccfe8621c4c98bb12d5a3bf40d89eadafb16850ad6242775c9ca647242f1"]}, {0x8f, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f035adfe43af9d6d689e2543270df7b4b8625f7890f7ce4ba6b3a6e23a51c750aa2a1e6343015bc67b793597e38c8e103862ec4c94146e6b963f61ff7c0dcdfaa3256dacf035444df51b29fe6170dc7223d79017ce56efe45d1fcaac9cc2852858c76f29a0f08042da793de326c3b1f1b2700109ca9068f3ae1b3ac950200"/143]}, {0xee, &(0x7f0000000780)=@string={0xee, 0x3, "e0bbef2220c37a0dfe98a2f2fa660ddc90e944440070469d3cec484792bab0fdb4770fcaaf67da183279315dfa4dedc56cb752578f8225587256e3bb05d33dc9c5c36ca918f29f4b74ae6ead22be3ef161e449aca041d2442c09848fad88097065f07470fec395aeaf05e5db2390f9f4a5111404aebf33b630e5ea23ad987c4124f34d39df63ae1445a48f7792c96375a71daf0438978fdcb285dca729277541d888a6e1b577b2cd1bf86ad51cbd028a695970f7f23197a7670233f95462c74025a71beeb9a089e93bdd7eaf4fe00a4c4841dab45538c201e11ec6e05d3c4af4eb8e01076b54351d15050563"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x414}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x85}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) 15m25.922063432s ago: executing program 9 (id=2005): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x30dd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(0x0, 0xc000, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40040000) 15m19.727875527s ago: executing program 9 (id=2016): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000024c0)={0xa, 0x19}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000022c0)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast2}}, &(0x7f0000000a40)=0xe8) sendmmsg$unix(r3, &(0x7f0000011300)=[{{&(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000440)="314d93c7a4ef7599313f23c8fe072ddd337b5dc6d6e367447337274186f326506a320512a53c5f1edff178c6ca01a2e53ab9c8337f6c35bbcd9a117e727fb43d0602c3d4b10f49bcfb16b14dc78f47c278b9809bac7addac51b07776b9f35a10a0b0278340ffcb8ba76458f04b7cad28ffe116f1844bf41f784673c426c48f0c5afedacfa83773c1d78284c89572470675c2ee39f144c653914e468752b25991396f940f0f854c9ded8ba774becbaab80d537dde1c31e599d4c343c9f3d5e6064c60c03648ea4c820174944936ff2cbce1131b57658ba68fceae4f4cc8b2a3978c8c1d425c11a625d38c414840020d6b660fc54ee9d4f23a", 0xf8}, {&(0x7f0000002500)="aef1d7131afa4e8d6183e925c7d7500b317b6f719f04e8dc2928f174f00b452365464cab2a1bb6ff2c73c0a76987f7d1368ebb0d24a9aa18d510262e31f066cd8c813f63b53d2917b5353c3b2a55212e63b1da8d2e0ade05fe13d2a557c6586123db5aaa6446dc208d3e7cdc4785360cf69f1bd8059e4f21678e5530007d0add2e54ff9c7c9042935fa94a18cf5c70d1a2d673bf302ee3e56bad0db6e0053d55d7bdf1719f1fc8f4feae4fa9e6d52c34a45218a21d21417ee6e7f9da3226f2f37afeeafa6cec3ac7116f9c111f", 0xcd}, {&(0x7f0000000640)="5c55686f51921c20201d784a9843749d44ea9b15d51db7ca96af52f11985a110c8ecfc4deb27cd68832455fde03838dc6df732d8e74a7676ff0d24bccedd6f3c293c5d557ffc5bb68ed882a5d3307576750b699f92cd50cc87abc710de9de4e6bb9d18652d4d6d3febc76a0717d6", 0x6e}], 0x3, &(0x7f0000000700)=[@rights={{0x30, 0x1, 0x1, [r2, 0xffffffffffffffff, r0, r2, r3, r0, r2, r2]}}], 0x30, 0x40000}}, {{&(0x7f0000000780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002240)=[{&(0x7f0000000800)="da2e02753d37739e1e52d6a965c243a8fe034c3334fbc1f3188d2d5ff307154b92fcc98e540a02d50b916de22e7932066905f5bbc27cf0c4cd2a5107bfb996a692", 0x41}, {&(0x7f0000000880)="c09083add2612fd7ddd680e9675b27457e45255cfb8eae092b3c29302c0b5a03e91c0757c4ce9d916a81e7d22d0862c83ba633a8542206351196bc6e7de55ac29ab9af5100663439f265fe1076deb5ad1a306ee2834643a7c492d5c9ab4476a07b4d055b5cacda8f32ec9f59893a75e9ae9c4cf093b91ebbfe8dbe6c4d3dbbc3d83463e367d033a8f9b4faea734c92c3663d1434c835fad24dc28b4630380ae6a183f9cd886ccae0799dfd07bfacba6290d1f01db793299ff5df9b9cb1e7", 0xbe}, {&(0x7f0000000940)="34092a8a9c4ca586ede51a8cce4d7bbbb0fb9a62ae5f30a84091ebe072c523b6b8c356666093a322e2400690584f5adc9a9154876423a651c389428bb6a2e2476af0af8f77e35e5b3c98b2d878ef5b81035a7782b9677b379e0dc8d4b3de28ba138e5b5c274a8f1c47948fbbd39b28b23969cf0968662a1e87c443e4d42d36547cee73aa628e6c45d6e5a5427020c3feb468a12813802e8880c781fa9ba58dfd2562ea51f5e6a68fa0bcfdbdafb2d3f6e4bc56ee79cdfbadab37379cfdd8b9d349b2220d4a83b46b507ed7f1ef4e83b0d4814e0a3438b7cc4eb1db22ac2900bb9816fc7f3eabfae0727e5a239f753323fed878c9e423", 0xf6}, {&(0x7f0000002700)="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", 0xfc}, {&(0x7f0000000fc0)="b53b299e9a40f081295a3525a47456465855cc0bad1ed1cdbbea053c09c35e3e09293db7f45aa532b4f20107aba0d5ec67db684a834500b726b3c2b151014620738392b944b29f1ac8893b5529b09a4d0284e7bbcf04ca7cc55e155e97259fba5948268c3c4b3fb30451027c1fdba2a7380b0a412e56a9dd8e8e042629890a0ecf67277e90459dcae7d16e07", 0x8c}, {&(0x7f0000001080)="20d738247fdadf3d8ac40996d8841e9c582d931ae4ebbcd85aa3f4d134815ac589be8e55f0ea24b0e4aef9e4f36ad323fc13d03ee2bb4a9b37617edd85c28f1b5977488cbca54065d659cc45e98ab629c041d8623a6d351a8f4d7a9c69d380c66c30cd016cdd0fb09ca5014f95366df6ace44d5ac45f6556689313cc8e2969751049b3f9d9516e36d43d7f49aef39f21027e90f1cae366f21b7fdef850bfbe2eafbce01b2c05780a7a", 0xa9}, {&(0x7f0000001140)="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", 0xfd}, {&(0x7f0000001240)="0bd15509566eb89d67deedb56ba036b83ca46b7f3784c6fdd66eb6b52a146766f5e6cdd897f3c96c42721ef9fff82767f793cfc9c2ec5cdf6a3cb0ce2eaff38553e11c867986e7897617006e51415043759b2e44b06f057f80d2dc618fdb99bc373566a8e4cc0109e5a51b42dde2b82559edc27935ac30a31dca83017addfeed0e41211a3592f45fcafd6c1ebc50d5ffe7e2f3e2e6c112719e8786f545348b4decc76046e1066a9d2ca5679956e8ad10e494b721fe85111daeef5b1f37247ba6b1dad177870d68530ef9a3b78b54a23e9af298aa65303f99b3f04ca1122ce3d36f7aa49186cf55f6e6c740bc98f8c8774f5ca895c3786cee6250f3c4b70055a82f8be2ec5d8ee31e3d26aa861474a9eff68c97c13a2370257a778e895a6defccefa99b186484de8a5d3bc51f483de0f6905e5cdd214beda3beb1a9f3377f42d55a96b5d14853de26c3d02ecc4d0ca743451210cc4359a1148eef227a22543e8683d70852e2f46e1bf304d3752fb20d9a1a83181e47b27333385e7cb9341e36d79edd57590a09694d821e3c48efc3271cac56b17ec40714b1b9059abb6cf81ad0573f2b877f1cbea04d48efaecc5019bf6d7438a8b631a75d1a54bac1162619ea3811c7de69e5d3d7d634a4d908c69b982911b61a445a9b1a8078b1a28a0d1ca98ed59f4eb296a06f77cba7f12839ef2029a88c42d5a56bb5c0b53657fba1602f845083f582624c7d0bf7c30daa852e11dd4ee55c3accb020e99b0e0a571e8d41c3173239aae3ec3bc138dcc1883a72974d841d992e78af5b2fe2733f0939caad84ccaa8bbd5308fd30ac0fde04f523178f86b26b522c23cfb6ba9728d9d42fb3149a1b663afcf709f27ba48d1b590d7a2bef573fd6a8f14489a9bafd8997180380e75baf12111fb6a657577bb25b862d6b6da61a4566e9d38a33ec6af7e3497bfdc9dd2a04ac918bc8ba73ecfcbd3c8f6b8583dbf7859b3f7229a97f89660d51f5d31c1d74b73b8c03359697a4ce4b73d8fb8bfc8b9988f0a159351eb707b4aada4b2bebac38b96518ec976ef25f0c048c82b8850fc5083ff7fec0ed25b387dce78aee6d484043985b284e8c40a9b144c43b71817b9480fb6d6717fa32252ce0ecaec66d6aa320be1a8d53995ef95c27335bc1986ae97d9f2c0ddaeeed6b0de111f116a368846e9622709e0b38d2b1190a2d616e032a426b4e2371c7de599e52a2717210fa354b61f66041ab9c83c4263fac5c568aab2172818005fffb0a25fc24c607bbc4b5334f804fc9023b698da861ddc47dfaffb4dd684f4b8efaf431e1c4213fef6d238dada4b8ff3a779f268e8d0e952084a6c01f7aeb3496403a43bf6673d866cf65a08f43469ed831970027d40df264d0e8eb73eb7fefcbb6daa6e95030549506f4e70b0edea124e2de2460008cc9eff3c0ea736bb3a804670d306444b70938a1ce655587e7ac8c3e3f72f4502033a49fef9e5dec15e965b25a94ea558b1adb674e6b562f114020c0cebe55f1a2c80bc705bda137cb2fdda77ba3ebfcd3a9742e0b59f46ad3fe0228dd8c37899e33eb49d4392f4b59c89aad980235698d22e4d050a84d6311311b4d0d6b7ba187ceadddaa5635fc046a98c929c5873e72e5063a76e7e2aa5d428e3a6da272804160363474106331f38ed33c051712740c6982d103fde489772d4f841e0bc067778c911b91f243673ce1d90ea7523b29a974d01c7cb0b29b1f7950f04eb56faebeb3ae0ec1aa2a39fd43276f499a810e30bc0575ef9f91cb42fba2263c081257f74a99fbf0c8713efb4999072b5a222addb7cd9c844bb32dde9fa4c1a39c9beac79301be3d0dd87f306636f34b9067c86c3ea85cdb7ca19383ad8e33fdcd6ce6e088a575f03e0db06430f828747899a01c8e7444816bd68ecf39223db47f2f6db558b939364a51f22ac123b5afba73c1780c7c2c8d6c955799e509435fddc770db0f9d79504b15b47a0b634179ed572a67f53950fe6970c2509ec9922651f9e2000a50f0b71513ef844c30f9484eb36397e5c9baa20a33d3d0ffc6a5ed1f223fd67a6dad136e4b08fb3f0ca82370ae32da8886c766f3e8a4a9e77d5dd3ce92e885fffe7b3eee3233a11f745a154ada35b679786342112b7902007f91fdf2fc5fd3aeb70429cc07e116d1f696581dcc3396e6b7bd889d6d2a3e35c0382ebae730bffe3c735ca4c69e6275e0df0562030fc22d63675fcc511e1d0997cdf3736574bad10e91474f6821824e6368dae71d9d3a758f9a5dfc4deb528913d64cd578256a0c81352ef4d68a36d3a12f6d18c3e777edfa879f8bd2389fb7006227a40a94f51cac6ccaea59aa41fe9763d74a33528bb777ebe4a77a27f59bcc3100cfdefaf272bc3f0e9fa13bf12d464536114ecc8c74385b4aab80e7ed86740d857fd85297822e9df4d1558c9c6aad5fa82289b061bb4bbd5561d15d39168c19139f1136018765311d9cefed0f42b1a7235a0c05cd8c3a7463219890753059e1fc88cb1b96ecadec74a5421f08d53d85a9106708c8557fbb020e567f0f655614a2198544c0280249afcc05a90b1843688b6ae491a4901bb8240f40e517b2652e957411c1c2703c251189054e624579e16875829631bf46fd31d91aaa1c24759f71ed3e14e7d4717f63cf3b4835eb913f316eff56dd37a80581e121b529db9544cc09038b7a78ab3794770b039ed5aa4cf38f6c77d29d7987e96b7edc57cf329530443014db312c682af258df58eec341a99970fb8867b63daae52d7075146bfac5657e032445ae6fa69b9eaba8113c24c8f941515e14afbc098929ee71a5ae0c3c6f9365bfff349c086a164c699d5806076ac9792b3ad8639b8d5e408bd8d4d7f81c3d0c0f1e7df18a76101ddca529a130b0ec62015fa650f6a778121ecf7b2aa4cb4f3d83350292294e1651bf1b0d7985504b5fcc47ef683c9770ae91897516361e526a91a30c59a65643e1048c0d7b796faac73b3bd47e363d03084fe2d777d364d45544e9c470ca39ba307c13bbcebd3e21d5fa9f91fa1cd0f9797ef624c0f9199ebf5519ab05a94780842a09ba9aa7cf18c5b9dee00a04e596280c35a29ebf59042748e02fc0d7518d012bbb380d7c4ee16b8a6bcb8a6478ddaa686bc4101722beda07099de432806f63441644d813894df5f01ecc4dfb79d43d62a87463c8d28d366e0a8179a762346bed0909855670c21f1c37eb194483920ce835cf58d6e565bcebe779e6023dc9506dd11e0be946e8c981487ac89c0b5dfea451b3af20090384e530fc9a224b34157dcc2e234d2e7bb1f9cff358f4fbab50684b35211897874de732790d052c857ff042309971422320f7cb186f7a3fe6b9115e6d0a03458b40b3e9274923785c0cdd8c6780873a6d9cabc3a4c67e20b8c995d2285ee74282e2fefce841c6217a0592c25eb02adeaa435070d1cf15ea2c98369038500fb991db36f603f2940a34f86e86160a1341ef35e68ede6099f2fcaa26a15ba9fabb62c840fbea2e599fc11396faaaf67e17799c12af0f1ec65435983ed95b10e11615c86e9b5660c4067c72120df567f3354960d4e7926ae5253f8c3a1f9e39c987849d50499f160b9c62eafaab7779f146e0ed23a22524cb2fad3e64d8cce37067490d0e2fb820643ab60610e0767ba8625a629894ec06244c3aa5ba2bd86b92e1933bb12d6bfbc20a4814edc0523d8ce210b287bf95159a636c1058c51a29b5ae4f333e75bca3e58b5cc35f3bff9ebbf0a78ca0593a1df19c8b7bdb58b70c4cd778f0d2ad56ce15957178e5a34cadaf33a24f29ee6525d936d00b8e08d894ce7d483ce75cca772558cb3124430bb1bfb980cc160b75392f971283db45fdea6fe797331fabffa899542379bde26f18e71b915d68d2f607ff52193f09bbbaa40f1dd6cfb5bdb5b96546d85fa2f97302dffadbcea64fa65a455b2f89a7b5abb4c0f75c924103a86abc72266a47732d1a87abf30e081bd3048ee947cb56bfbb8e9bb021e8f7c08757a43b93f255a8b1e06cbe5d3a2bdb7db399387819af84443e4e3699c86d1a0e936858b727afc3b12fdb5401af729c46b07f5516304abd192823f19efc9a01a6985264b3dae276d003709d78d07bb93d59ae438a011412ea20a7be748dbc9cf45c6925b109470a7b053bc88871c0c5054acac0e6dac31bc4644536808981a2fb6a515eb6c04ebfa14ad6f29d4007ffcc45b70c12dd90924d0ff64afa34b53d5499b28ba3ef1043c68524dc8442f6c4727dc8521db94be540565a6afd8f5a5013bd297958ab01676be583ba60273f868dcaa392df0ef0db4983bb70d512c5a9413a6479549d0fbec0bff6b02d43212064415cb91c4d0ba21c27d6ea73330af34a2ca350fcddc501b53aa5154c339806df4dacd9d4d1cbb0b893f68186ccd6823b42b916ab8a27a4ec377498976eaf0084f3b8a8e5f2474dfd7bb760f251f912b2524ce13f11dcc2360a6f03dec29ebf2572c700a318b3af59416bb9aa870033d9a294654a9ae18a8e938301200d22a8a318a9a3cb6c3420760ee6ce033a9e2cc1c85513d5d49a1658514656e8074916b896cebd6f0e8668e856f92525dcb5c4a3b2d113cf7119903008ff9ed69a8eef5b45353e067f48c74f135c9ccd56f04d9287133aca035c9793f089fcb9277ec075ecf3f985e6b3dafb3a62ccf648840afeb3236fc30351fb8d083c3c3deb1d3ae370d176fd2fe30ca82fa78de34cef20c8fd967f32d92f7abb04436747dc0500fa497fbd8f05987fa6c4577ce402f14dc04494843977cb3fb3988dd2502c1b7cdc819de89f5240d359ad2ed02ad872576a4165df122c6574688526aa6efb6dcc16413b93ac96d09850d1bb90ecd5832517caad5bf2f8c1648fc6ffc8f4d6627de773db0c7ff91e25c9ddca1cca8d27303b0c7160cb7a30e64f5262e77e76d6e5dc401e6c432091b33e7b42e4528209f0ae0afa82975284576c58f471f6a195f31e51f55b14e38404b0d8c7742c9337824cc46ae7474d89c3cc8adbe40e8d1cf6975d48f9148e1e21fcd92609863aca792bc74baabad3a55424d22c000cfe475050b5bf364d54959f0b84533671f22971d495fb75660d72aa91cd0c2bd0d910619e9150b4387ebf6fd1156e41f7a22c18bd23c2d768916c0464297fb8a424897e1863d67492295214c26f0962e516d65cb641fbf186ae1100924f5d5b144cf8d699c7fa812d1ecf829c3e6f9add78eeb7f8ba913871729785d2f6e708c484dc6273c3a3822dbea979f786488695ca589ebfa0898697a69e0a5c3d75628a7a8dac23f4b4565212c72e6107b254397789893728225e7d20e2c7bead7f21a6f0422f63760a9d9a4b01de99d7129ff9f6d46f95b3b740f5f66e139834d9e7814e3bda9bf56736547c6d00d1b359df1facbaddbeed701dcdafa47772432f0f11d050820ff985bab8413c8eab1ef852ddc1c3eb0321c98ea766e4c6a70a2229d1ffe284b60ad302f5aed5c2beee6ad982c026a3e9b1cc1bb7951653605a1228697562a205b11d48bd1c6c683fc7f57500282f87313bd39a77e425df1dffac464e0251b9cd88b7f9206abbba3039dd40a8036cc1d42f462d5b5c998a87e0a6b776e379e9007778213d09f13d4a2a72cb0ab5d19da60847ddf9f8fe5d12855999b2b14635205c8929d9d779f7b78b0ea03afcd1f8ed89d4c683b8872fb387b12050a644a0cb73bccef44db833997a3e6bf72a165af911d1fd965baf91a598a006755c73bbe370c03639141b38f06250a475a87e77e60c5633b08562bd52349bd856", 0x1000}], 0x8, &(0x7f0000002600)=[@cred={{0x1c, 0x1, 0x2, {r1, r4}}}, @rights={{0x28, 0x1, 0x1, [r3, r0, r3, 0xffffffffffffffff, r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x10}}, @rights={{0x34, 0x1, 0x1, [r0, r3, r2, r0, r2, r2, r0, r2, r0]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8, 0x4004081}}, {{0x0, 0x0, &(0x7f0000008a40)=[{&(0x7f0000008680)}, {&(0x7f00000086c0)="f83a3c30256c87af443efa84c96fcb719e6efe541b83b8f550453ca032e59f1bba0acfdef1b75ec13e7c1057459331978aeb3c05a941154d", 0x38}, {&(0x7f0000008700)="dfccd9055a4d77d4df8df6b57e11ba41a893728c6a1438c8001037e17e7c5ecd9717d7bcd7f315be2dc58e06d753e566b46e39f5489e8fa33bee6f02515b73c517d26da08479872bdbf5096d44fec6d242333d7e425a999d5f139d8cdd30416e23bda2ad507e2271265b2f05797eab8b338b7e60b252e6f5c990e98ae5f55515267b3b83bf", 0x85}, {&(0x7f00000087c0)="025ebc87b8089459bc5171c0e964a7d082539aa6ebb56786f13e87acded74c82d87d8aebde1ac893516b8d00cd0a03e9d08de160fb18effbcb20129fa1d98bbe272df0a0f60b5f298f95cce671fd413f80086547510eea484c38e1ad6be595dcc627451b01b94e0fb3052f6307dd2f378391791ec620af3cb399868efabc5fd5d3d4bad30f10ec5168891f0396aeafdbe662298c8e53ede3c41e7289ebf763a9739a6295dbbd1bb2f29aba9feb027a679637cfde493064dbdfbb5f318a7715c8fe1081b06873d399d77b2f98e27e402f196fe6838d68dcbc0c04420defb4fcc3a8a796b4e0151d4e7b1248e15eaee3a77105131f226cb4b6", 0xf8}, {&(0x7f00000088c0)="8c70a43dd9b660db8462516ffa1cfc0c3fb87d9f92a7a7eb22724353df58cec81f7c68b17289c980f7778539a7855ebbe7de7616adebab80590327e1023efb104b96295722dc9b954590b0b5c46b6ed64ad1161988e28abb51916f6556e5843f6589d606e74e9ca22083a6c3e0bfcab732c71d0e181a2f923640cfa2a1c028bc74f45c7e70a438b85169ca6840c9ca47e64162e884a4bf8dba302fca3246f6d258fbd0eae00153ead9d0cc4d72ad33e9e4275af6b8c5f65358e520f9bbe5d839d659f6", 0xc3}, {&(0x7f00000089c0)="4d95911dc640bc2072ecf7bb76b31b713f25cedb4cf9b266b08189e559521fbd1025649447a984507e91ac21287cfcd4df8815303ee3b46553ce1fd4736c106cff0ceb7208d368241b680b2aff4779c725632ce0d51687cd", 0x58}], 0x6, &(0x7f0000008ac0)=[@cred={{0x1c}}], 0x20, 0x4}}, {{0x0, 0x0, &(0x7f0000008e00)=[{&(0x7f0000008b00)="7a3be508000000000000000e1be79f5925c922a7564528ca30a7883be9428dd5ea2cc10f", 0x24}, {&(0x7f0000008b40)="9609149fe796a41b70500863f30d4e29897ff7464ffd8599b46a59c53360db6ae9bfcd2110b1945f84c68f5959c813dc43553d0f6be8679b3ce7bb159aab8fe055cabd37bcdf0b125511332fadc1143b41b3892d55e9d16c5cb1cc02f355a600e6b31b4c86f02c1335dfc79d613c86b4173895353982e6", 0x77}, {&(0x7f0000008bc0)="822b6ea3c3087ca485d2f097367464d34cf1d64e1ff2b9224fdb02483cdd561bd7e3b223844cf38240c7468949d6cca0b36fee02fd227e0ffa70c2eb6e33a299fcf5219a55a33dbf76d9aeb81ddb367345076f6fad096aba49a859431c3ad3678c6694885148cb67db56d5818e4a88cbaae0e3d84ce6ab134e01b6c3d3c184b6ad0521f17076c1907ba33051bbe0b9130e92b213d92e560c20c18b9217fd1f98320ba2ee1d99bfb2d61923ea92cb29651f1d31a237263b", 0xb7}, {&(0x7f0000008c80)="039a6ce6f0f42be63ede0778661a5c255e088a871ee2ab9bd46462c1a872d8d651ec72415325b3d5efd67d89300955f9d18da223d6261a0ccbbe9d8c42499b9ff12375378c6cbf6d8000000000000400000000000000", 0x56}, {&(0x7f0000008d00)="a18da72fd79a3d98e7eb8f5a84cd08d7ae88f64caff4a83450ddcdfa1c5c930424107c086a365c3985af17b1189a66d59e838607d861192dd210d2c8ea438145a02b01c5653c73ad8e41320c7556fa6cc33dcddede275a15584f08acdc3af48baff15d73caaf551efae4bb2a5de232ad6d75dda0ebbcca8967d704e2bdcc4318b83e7bf0d6978b2958a7190972076bf6da20e69457f45dcaa64211d5ce4b47995e4ae1373cd1f7cce9100d060e2cfb5dd895cdd5aa0ef43da2ade03f16bd4d8d95232f4296c1e460474b185c080f60b91bdcf8cabc12bf6c", 0xd8}], 0x5, &(0x7f0000008f40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}], 0x70, 0x40000}}, {{&(0x7f0000008fc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000a140)=[{&(0x7f0000009040)="ef2db929a35136a52384bfec1810fce5dfb492f5df67d0b15cdecdd034ab8ff3ec9a5c7eb5f79a799edfb2eede6d5b7b3a66af46444633de8c4f7a77dba4e48aa1de004da0e7e016796235e0cfeaa715491292a6795b3398d8b1ee0fd3aabf40e023abc4b711643297ed1bdf3efe0be4c0bd3af2361c28042b6b9ac17393493205eb7e9d5184f4267bc4672a9500d7bfb9de41086b8a2251bcac4d1df0a4ce648624656e46bd6c95f6d8b9fce3c9709a6c91125697e925458b52c4690402292a544ac35f448fe54d655463a35147741a68dbd0afd83429936099d3eb0e86376740cbc3a703c94cdd49a2729a53b13b0382e212452708d3", 0xf7}, {&(0x7f0000009140)="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", 0x1000}], 0x2, &(0x7f000000a180)=[@cred={{0x1c, 0x1, 0x2, {r1}}}], 0x20, 0x4000}}, {{&(0x7f000000a1c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000e800)=[{&(0x7f000000c280)="ad04dcd1897b70eb9fa8d0a7352862d8a1c8b89bcadb792be345ec00d14b483407aadaab4277149c552cfae6b878ecd58f411931c72bb691b8e48adc04d130b992738b389da711e4e00c54e1b747d53556b76d58633091ddf98e021f9b7a432532a3c37cf6e9b38e211105377983c240e4f7b5ce6117081c33a1f0574f871b69295a38636117a4e5dd8a8ee86094c9ed564145b528c42592560a5f9589aeb55b9be87362b298d62e4dd742fbeb21788874dd07fad3bf9a2fbe8b2da6ea3d", 0xbe}, {&(0x7f000000c340)="8c8b63f59558bbdcbc22fa96a53bfc00befb042332095a355bf914f0d2062e875692659747668b1c6abe7f33473a349292e29679ba8182fe88e6bba04435dca01b856107a2e9d5d414e65a707f22f9e979416d91331d41f245e8c9e26343640717686b39fcf8d55f06dbd9116ef4ecc0071603ea71787575f2a3aa5aef4064f013bb47534c192c053e18259b2fcb355129a4bc18d05d45d3e201535892016b400a99a88cdbe1d6b75e5cc2fa3893c290c5b24b01baad4231", 0xb8}, {&(0x7f000000e440)="6ef97ca6d9b2d2a1de5a592bc099dff6d68630a5b6647f9c439ed55d1370c13921f3192175efc55931c334b221ac12d0c5366a73c20817b87f80409b786b12e3feae1318", 0x44}, {&(0x7f00000023c0)="9d029800c373ccdaafe9a6492589ba5ac9a5c7a0f0378cf66293a6c40ff2ff0e2b78c6df2121dc81a0c5ea15e6bd3c260da5b8d551c8e8ecae7726caaf8b4318c5dcd987796eae707f758bcc0c887401520a833b26e0a65b6908ee8d2c0f9efef6baf5dea186224dc716348d522bbffcfca9de66a428dae60700582f49a19b14c0324047b9564869a962a1464d727894846f501762948a041cfe9ded79392dfb", 0xa0}, {&(0x7f000000e580)="bcfdeda38a367bba6ba333f9a664830606c51ba35f2d0e436c9b6d6a70f5c21556036f2b114bbc5bcf0be8f3e499cd94eb12104b76e3c8073fc319419d1c435582b66967527881f7286fd9e347288ac3a12d4124cbad4b085c9d1786850ea1320e62ad7ea28b66c0eff80f3ca802b50ab5346463242a36050f737fc21dbbe14aad7e7ac57556f65d93", 0x89}, {&(0x7f000000a240)="b536f09d58362b80720a4e7b46b0cf309ed8a67be722280ae4d8cff0af3e8d933dec85770845049c555bbd0b2b849914d7f7e8623e18e2", 0x37}, {&(0x7f000000e640)="0f43ea8eea0aa22128c44f13fd7f363e991d6215a9bd259343106a830ee759194f3b8cc1dc83328e7ab4c345423c040aed987de769f8da9b275926eb777ae5749c2196d7f27b9b8c6255caaf42d56d6d99be1f72ba9c65e0617bdc65ccf67d709c022f2da2836e5b673a8bccf513d66c3bfdbfbf1fa43a37e6e6c1f15028701113933c91ecbefeb6eda19a56996abaaa0a8262697a738bd4036c99598b9de6c6e6decbec62c9d186c84f75408d41c31085e367c8aae2de875c0f3675cd445afab066aac6d8fe5e615ab6a7c0ee3cff9749107f090a1691e6fa24507ae33d513741b9ef08b9e6e81e59e717608d3aede287", 0xf1}, {&(0x7f000000e740)="182e313f84853b7b12df4b3e010730b53ef3dd7dbe885276a4d8653597d353dc8ef8361ae708e571f07e1ffc29ae032052cfcbca4c19", 0x36}, {&(0x7f000000e780)="fb95d13f1aeb1804f4490e67012d32f3b2bc7a95b9a4065c6a4ae41e627f0792d2e4ed622a4da676f072558140f651d1909d84a127104a32b6990fbec8200440b2fe7dc8cb4cd0c8b643a09caef4e2145ebc380d824a3138b329aa87fd49557b55456eaf000c76bee7ec363f", 0x6c}], 0x9, 0x0, 0x0, 0x1}}, {{&(0x7f000000e8c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f000000fe40)=[{&(0x7f000000e940)="f50952793857d3bf939b1e52e46b9e8d7f6b55ef4fbc8e7bab1c482146c043272202f029c307761ba2b6dd6d112841b4808e718058ec513f1caa9c51919eafeb9c409d56068e3ef48a51674ac4de30c654a376da1973c130e64a39b9a0df37098144117ab0785cafbec86c06cd3b192f5c922beea414432f26b83f3f10f262896e776f5fd350f1a87146333c8a3d50d364c2ee5878ab42e0ce86704732ce490e7985c13e3d1a346133465d7a620a33c4f4314db838b118129b1ad154f4d007cf36a1043db908584add1f29", 0xcb}, {&(0x7f000000ea40)="9acc4eb9558c2854fa44be5560f4361f1869aad18b6ab32a134f5003ade9c1d060c9e19046d8fef25a734e8b0a58e15d68913bf384e8e033c701398ab770feab7a5b67f739801cbcc52e26ce27eb47f7420ac87c2b150ef3f7c56192de39716f31553ab53e811681062c09445033067ce2ecbf03f0dbfbcb7826428844f5dd2e8575d17b0c8ab9d05fc5bdd9c6a7d706a1404c370a3f85fb52498cf580af87e43a32b9e8eed752afd7bd0a756f2cf5093bb0786c1235f8bba62a2a4a08b9234e439aca28667718ba390f01595d93cac42b335a47cb2571a6dd816553c2ec5a1119870f81b6777d31f8b220bb", 0xec}, {&(0x7f000000eb40)="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", 0x1000}, {&(0x7f000000fb40)="16d22d3c8fda3970dc691e061bd33b7d0a59898a246684e5d627041e9fd71e9498974d46ad08f38d7c4e8774d6f1ce7bbb54fbb35b8942327fb477a8f9ee1d9d688e848b2181905bafaef4d8791752bf0d46c32c7139d0284f", 0x59}, {&(0x7f0000002480)="06000f8f68cf3c37b52f66", 0xb}, {&(0x7f000000fc00)="e67363cdfbdc21c553a5dafef505f1864ae5d630690573f0b70701df04500dce170177f6b5903d7d0faaa72791f4a7730c77c2e57c8b3ed0", 0x38}, {&(0x7f000000fc40)="6b0598ddacc2728bba7595b475c6016ecd21205264f9539d7f6ff4134af9818dee1e607bee89fefff1e91728561f5364bbc96f430fce451cd25977f332e6f05c84c95728c4e17b1aa4dd41e08f272d589d1e0024dc0d24e3488f1f6482a3c327d37312dfb67ca3798f2fc52ccc53f2a496c35b2660f1a6b31e4f66a3ce5996313e34651bb77133109e169ad9460be7313f34be1ec28e3ffe0411ad4a7d7e75a54685e2b8dccd18c9e4f33b2d4f58988ee42ba782260da9836bdbdc8db0d9", 0xbe}, {&(0x7f000000fd00)="342bf7cfb92d40f4571ff706f07ca53ec1844cd9ec424a9b0a461322911fa367e9025cb54be2a4a7250650c5398781db282aad53e7b44ed8978a3922784ab25a7557401cbb3f773d29a74d3f374bcef142c9edc1c88a263ed30773fa76448a1194bd35f9e6e45cef400078d34d776e9db4a757dab67b8e3cc0f8c023ca99cb288a3809288f08a5d203447e65a589d94148dc9c0bda5ca548f6f947fe01ebd47d87728182de3447a461132c713ac5b31495526286f6c8d13988bb3197818724ceac12c3f7", 0xc4}, {&(0x7f000000fe00)="59e012279a61d0c37a9d6fc772831069175b457a0bf3141f34f8b3cd485eb0ec47846176d7c8dfa9803add339a", 0x2d}], 0x9, 0x0, 0x0, 0x4004010}}, {{0x0, 0x0, &(0x7f0000011180)=[{&(0x7f000000ff00)="c0fbb615fd8c434439e0076774d913b6ca19bda3dcdd1880c3dd99a3e072848f91481239a19fe0a7173ddad1d870a0de5803ae498245eeff2ad417474abb7538daf9191b94d2273f8ad48daaff2a0102a3af6277768e65207eb02901d3352c57221bf5cdc7a050428017864480debc14c5f5b4f12fda4f5672eec1766fdb2d7243cdfd76d0cd72c05d1d32ab169f52ed225e4214edba64f4dfd926895f7e66171bdeab6f0eff70b8f59ddad67bd57cb4b799745d26f3c7b4d1751041eb84f6baba51b01150eae643ed3def21913c5c5687d0d4440d8bbd", 0xd7}, {&(0x7f0000002800)="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", 0x106f}, {&(0x7f0000011000)="fb90d69067178095a5bdd4e532a9f2ba651a292b142d9a5eb12e0edd53b3c7acf79ca34b07c06b5cdb64d78db645088e6aa8de6c8054e72633ae5d71944d0915532e453ba0610ce556d857263c3f2506d0555f94219404832ac74922ac3fe4029f097f650ed74448face87d56c1c33b7dc9fd3fcebb73251d53c5ed8425df4c088b3dd546b06fc2415e386cbcfe58e988e0828b4d4f1c338cf110124827bf960106f9fab95af9048d320e134baffa4ff3da114e294136b183853d84f24ca1bb6886de6f6ba3de20ea8d131265f00f803bced5aadf8becad383f5c9b0e7e1a4f7c0660b310795487cbfb2b929a4286f3c595c7e5e", 0xf4}, {&(0x7f0000011100)="fe1b19986b37bca6258dbc6ad9de17c971e4b208aadc40f1a9d73ab84c301516b40680a60fb5f1080305410e1af6f4c1c4d91277255f34c4e59a62a23a318e3c4379001a490026ffa911e2cb4c47e88cc6ba55b7080a17fcf8bf45ee13f44c9f4a", 0x61}], 0x4, &(0x7f0000011200)=[@rights={{0x34, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, r3, r2, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r4}}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100, 0x80}}], 0x8, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r7 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000000)={0x51, 0x1, 0x2, "a90037e7f30f000080df4832c305f70000000000004840080000000000008300", 0x7b143208}) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYRESOCT=r7], 0x18}}, 0x4004) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, &(0x7f0000000040), &(0x7f0000000140)=r8}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r9}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r8}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x1a, 0x0, 0x1, 0x5, 0x10000, @value}, 0x28) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r10, 0x84, 0x72, &(0x7f00000003c0)={0x0, 0x8}, &(0x7f0000000400)=0xc) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9402000021000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES16, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}, 0x1, 0x0, 0x0, 0x14008000}, 0x81) r12 = inotify_init() inotify_add_watch(r12, &(0x7f0000000080)='.\x00', 0x80) inotify_add_watch(r12, &(0x7f0000000000)='.\x00', 0xfe) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a80)=ANY=[@ANYBLOB="7f454c4609f409100100000000000000030003003f0000006f0100000000000040000000000000008001000000000000ffffffff060038000200400000044e03010000000600000007000000000000de535211e257b341b67112000400000000000000bb030000000000000a000000000000000500000000000000050000000000000007000000850000000100000000000000010000000000000098feffffffffffff00000000000000000500000000000000020000000000000040ac5b1af05916637b045c9dc6399e9c793302154520ec15cdf58eb076f30185fb55ea80a109bbaee28a2cea359384f98d8452a0ab5ff20b973e5e058654c5bd756e641395c9ff2fe705b09c036ce5d01a84f2fdbfac50c5ac8d6bbbf5b387eb4c9adb70bc278a0aea445e3ae03981e235cb840160ca3cb1cb0588ed7b92b4599f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900400"/1084], 0x431) add_key$user(&(0x7f0000000040), 0x0, &(0x7f0000000300)="d2b477", 0x3, 0xfffffffffffffffd) 15m18.577504506s ago: executing program 9 (id=2022): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xfffd, 0x0, @loopback, 0x9}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, 0x0, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 15m17.585159573s ago: executing program 9 (id=2025): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = socket$vsock_stream(0x28, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0xa38e9, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000440)='./file0/file0\x00'}, 0x18) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0xa00) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='fsi_master_rw_result\x00'}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, 0x0) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x5}, 0x1c) r5 = dup2(r4, r4) sendmmsg$unix(r5, &(0x7f0000008380), 0x400000000000174, 0x4008890) 15m17.268803952s ago: executing program 9 (id=2028): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000400)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000400)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000340)=0x40000007) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x9) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) r4 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = fanotify_init(0xf00, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="03"], 0xa) (async) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="03"], 0xa) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) mknod(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8000, 0x73) syz_open_dev$video4linux(0x0, 0x6d6b, 0x480) (async) r7 = syz_open_dev$video4linux(0x0, 0x6d6b, 0x480) ioctl$VIDIOC_SUBSCRIBE_EVENT(r7, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x2}) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0x980900, 0x85, @value=0xffffffff7ffffffe}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x20004800}, 0x80) sendto$inet6(r8, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r8, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000000), &(0x7f0000000140)=0x8) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r8, 0x84, 0x1a, &(0x7f0000000000), &(0x7f0000000140)=0x8) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r9, 0x540a, 0x0) (async) ioctl$TCXONC(r9, 0x540a, 0x0) 15m16.929022049s ago: executing program 9 (id=2030): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000002080)={@dev={0xac, 0x14, 0x14, 0xa}, @initdev={0xac, 0x1e, 0x1, 0x0}}) (async) getdents64(r0, &(0x7f00000020c0)=""/246, 0xf6) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002240)={0xa, &(0x7f00000021c0)=[{0x6, 0x5, 0x8, 0x1}, {0x9, 0x0, 0x4, 0x1}, {0x6, 0x3, 0x1, 0x2}, {0x8, 0xf9, 0x2, 0x6}, {0xfff8, 0x81, 0x1, 0x9}, {0x4, 0xf8, 0x6, 0x7}, {0xb39a, 0x8, 0x4, 0x1}, {0x1ff, 0x3e, 0x4, 0x2}, {0x7d, 0xfc, 0x8, 0x7ff}, {0x1, 0x0, 0x3, 0xffff}]}) (async) prlimit64(r1, 0x5, 0x0, &(0x7f0000002280)) (async) sched_setscheduler(r1, 0x5, &(0x7f00000022c0)=0xa38) prlimit64(r1, 0x9, &(0x7f0000002300)={0x3, 0xfffffffffffffffd}, &(0x7f0000002340)) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) getrlimit(0x5, &(0x7f0000002380)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f00000023c0)="d22923292491cf4851ce724f7d3b8c7a31fc6443deb084c04a6f99e42758e78c55e045cbe18d7bc0c3d9aa5da485a8b8c2a62911fb677b646a5a10fa53bb3284dd182991d3afd67c483cc7b8b2e673b2b3b529737b6fb5c92ab205c19cee7dd03aba737f0cc81a7748ff6d9c126ac31117e073dcf732e7410346b5f816d6a9d7a567c116de28036db7c79e6ce9737f8271972eaede27364cd81be79137874a73f24ca016890d955e39771148276b3aba5cfb047c724a3f049d6751b71d1c49dc5ae18c37bb9384050b41e4962a66c80d5e64ffa7ebcb599e904137c07d98caed976656fd3a1f36f9b9cbfed603062b27370b78cf6c", 0xf5) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x40, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040001}, 0x800) unlink(&(0x7f00000025c0)='./file0\x00') r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000002600)={r3}) r6 = socket$key(0xf, 0x3, 0x2) quotactl_fd$Q_SYNC(r6, 0xffffffff80000101, 0x0, 0x0) (async) r7 = socket$inet6(0xa, 0x80000, 0x4) (async) sched_setaffinity(r1, 0x8, &(0x7f0000002640)=0x6db) userfaultfd(0x800) (async) r8 = fspick(0xffffffffffffffff, &(0x7f0000002680)='./file0\x00', 0x0) r9 = fsmount(r8, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000026c0)={0x0, 0x0}) fcntl$lock(r7, 0x6, &(0x7f0000002700)={0x1, 0x2, 0x4, 0x7, r10}) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000002740)=0x1, &(0x7f0000002780)=0x4) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000027c0)={[0xfffffffffffffe01, 0x1, 0x5, 0x4, 0xfff, 0x12c, 0x7, 0xdfca, 0xff, 0xfffffffffffffffb, 0xfff, 0x2, 0xb0a, 0x9, 0x35, 0x3], 0x0, 0x100}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f0000002880)=0x6) 15m16.196056245s ago: executing program 37 (id=2030): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, &(0x7f0000002080)={@dev={0xac, 0x14, 0x14, 0xa}, @initdev={0xac, 0x1e, 0x1, 0x0}}) (async) getdents64(r0, &(0x7f00000020c0)=""/246, 0xf6) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000002240)={0xa, &(0x7f00000021c0)=[{0x6, 0x5, 0x8, 0x1}, {0x9, 0x0, 0x4, 0x1}, {0x6, 0x3, 0x1, 0x2}, {0x8, 0xf9, 0x2, 0x6}, {0xfff8, 0x81, 0x1, 0x9}, {0x4, 0xf8, 0x6, 0x7}, {0xb39a, 0x8, 0x4, 0x1}, {0x1ff, 0x3e, 0x4, 0x2}, {0x7d, 0xfc, 0x8, 0x7ff}, {0x1, 0x0, 0x3, 0xffff}]}) (async) prlimit64(r1, 0x5, 0x0, &(0x7f0000002280)) (async) sched_setscheduler(r1, 0x5, &(0x7f00000022c0)=0xa38) prlimit64(r1, 0x9, &(0x7f0000002300)={0x3, 0xfffffffffffffffd}, &(0x7f0000002340)) (async) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async) getrlimit(0x5, &(0x7f0000002380)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_opts(r2, 0x0, 0x0, &(0x7f00000023c0)="d22923292491cf4851ce724f7d3b8c7a31fc6443deb084c04a6f99e42758e78c55e045cbe18d7bc0c3d9aa5da485a8b8c2a62911fb677b646a5a10fa53bb3284dd182991d3afd67c483cc7b8b2e673b2b3b529737b6fb5c92ab205c19cee7dd03aba737f0cc81a7748ff6d9c126ac31117e073dcf732e7410346b5f816d6a9d7a567c116de28036db7c79e6ce9737f8271972eaede27364cd81be79137874a73f24ca016890d955e39771148276b3aba5cfb047c724a3f049d6751b71d1c49dc5ae18c37bb9384050b41e4962a66c80d5e64ffa7ebcb599e904137c07d98caed976656fd3a1f36f9b9cbfed603062b27370b78cf6c", 0xf5) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000002580)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002540)={&(0x7f0000002500)={0x40, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040001}, 0x800) unlink(&(0x7f00000025c0)='./file0\x00') r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000002600)={r3}) r6 = socket$key(0xf, 0x3, 0x2) quotactl_fd$Q_SYNC(r6, 0xffffffff80000101, 0x0, 0x0) (async) r7 = socket$inet6(0xa, 0x80000, 0x4) (async) sched_setaffinity(r1, 0x8, &(0x7f0000002640)=0x6db) userfaultfd(0x800) (async) r8 = fspick(0xffffffffffffffff, &(0x7f0000002680)='./file0\x00', 0x0) r9 = fsmount(r8, 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000026c0)={0x0, 0x0}) fcntl$lock(r7, 0x6, &(0x7f0000002700)={0x1, 0x2, 0x4, 0x7, r10}) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, &(0x7f0000002740)=0x1, &(0x7f0000002780)=0x4) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000027c0)={[0xfffffffffffffe01, 0x1, 0x5, 0x4, 0xfff, 0x12c, 0x7, 0xdfca, 0xff, 0xfffffffffffffffb, 0xfff, 0x2, 0xb0a, 0x9, 0x35, 0x3], 0x0, 0x100}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$F2FS_IOC_RESIZE_FS(r3, 0x4008f510, &(0x7f0000002880)=0x6) 13m42.445972824s ago: executing program 4 (id=2293): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001700)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000003e00)=""/4098, 0x1002}, {&(0x7f0000000340)=""/232, 0xe8}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0xc}], 0x8, 0x40000020, 0x0) 13m42.35898644s ago: executing program 4 (id=2294): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0xfffd, 0x0, @loopback, 0x9}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$sock(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000540)="7191a90b05b1eb63285e543c30d9cbf875b3607f1cf5b1cbb69f427cd98ede8f0a55c9", 0x23}], 0x1}, 0x4) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 13m42.17595806s ago: executing program 4 (id=2295): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x8000, @empty, 0x3}, 0x1c) listen(r0, 0x3) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x3, 0x4) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000140601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780800eae007a22346420929b3c8659c04650e1fb6a660955f13adc19b0ce4f7471ad7ac9b3ef66caf1ad2018ef64b736251aed20e2786761b4863c20296e354b360f43d435e63d04d55c810f96e26e4835174841aa12fe32830a9ac211ee9e5e02f143ab51e933923b8b8b78009d9cb33f0b5b9cbadf831b158f321412c08114533000e277cc4e1b407d1475f02646dbc49752408daf33ea6f3e0ce8d65d4fbb869f6fb43f8173599a0462318b7ea1a61d6d171eaa32d34c077f6aa9dbe"], 0x0) r1 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$smackfs_netlabel(r1, &(0x7f0000000400)=@l2={{0x40e, 0x2e, 0x7, 0x2e, 0x0, 0x2e, 0x80000000}, 0x2f, 0x1, 0x20, '\x00'}, 0x6c) syz_emit_ethernet(0xe8, &(0x7f0000000500)={@local, @broadcast, @void, {@generic={0x88ca, "a7162f86bc49d5a72a97f8ebd405606977cf138a785f018e07b3587bb774e23ad81ca4e6d705db3e95989a04f04734917c87ad797241f8bf58233674ff722c0b394ce6e5aae88ff09b27fee45cbebc986fe96bd5fa235e517ea5f36f59c41d00b1dac90729c9914bcdb743be34317bb1287c4b20268ebce5ce5f8e6f7b46d9d25103e36e68f134ddbefb6a4bd10d3ad072d5c7a773fda2942eeb2a1c2b41bae6e8980e513034db2f0eeaf625f451dfe94b514f843ec18ba334dc30ece897af107c2ded12afb386aed98c95c8ed094da60d3ede2fdbe17f980a2c"}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='timer_expire_entry\x00', r2, 0x0, 0xa14a}, 0x18) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r5, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r3, 0x5452, &(0x7f0000000140)=0x200001) writev(r3, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, &(0x7f0000000180)={0x80000018}) 13m41.002103195s ago: executing program 4 (id=2301): unshare(0x28000400) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb010318"], 0x0, 0x46, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xe) write$binfmt_misc(r0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/address_bits', 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x10) unshare(0x10040000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00'/14, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) 13m40.933723213s ago: executing program 4 (id=2302): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, 0x0, 0x0) read$nci(r0, 0x0, 0x0) write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14) read$nci(r0, 0x0, 0x0) write$nci(r0, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r5, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000100)="16000000246837f7", 0x8}], 0x2) chdir(&(0x7f0000000080)='./file1\x00') r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x43}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x60}}, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000100)='pstore\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000680)='./file1\x00', &(0x7f0000000700)='binder\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x40049366, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x538a, 0x0, r6, 0x2, '\x00', 0x0, r6, 0x3, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x700, 0x8000, 0x6b2, 0xf, {{0x1b, 0x4, 0x0, 0x3, 0x6c, 0x64, 0x0, 0x7, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x1f, 0xff, [@dev={0xac, 0x14, 0x14, 0x29}, @multicast1, @broadcast, @local, @multicast1, @empty, @broadcast]}, @timestamp_addr={0x44, 0x34, 0x78, 0x1, 0x4, [{@local, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@rand_addr=0x64010101, 0x6}, {@rand_addr=0x64010102, 0x8}, {@broadcast, 0x1}, {@empty, 0xd}]}]}}}}}) 13m39.492351163s ago: executing program 4 (id=2306): r0 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@remote, @in6=@remote, 0x0, 0x33, 0x0, 0x0, 0xa, 0x60, 0x10, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x23}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60, 0x0, 0x0, 0xee01}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x3, 0x0, 0x100000000007fff}, 0x0, 0x6e6bb1, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0) sendto$inet6(r3, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000300000e825088b590fce591dd9770020fc0290780000001ce000030003166f77d1046569e9e194371306907800fa000945f4fff6006502000000000000005f9b64bab67b"], 0x0) pread64(r0, &(0x7f0000000100)=""/253, 0xfd, 0x36) 13m24.429639246s ago: executing program 38 (id=2306): r0 = syz_open_procfs(0x0, &(0x7f0000002380)='net/ip_mr_cache\x00') r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@remote, @in6=@remote, 0x0, 0x33, 0x0, 0x0, 0xa, 0x60, 0x10, 0x0, 0x0, 0xee01}, {0x0, 0x7f, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xb8, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x23}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60, 0x0, 0x0, 0xee01}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x3, 0x0, 0x100000000007fff}, 0x0, 0x6e6bb1, 0x1, 0x0, 0x3}}, 0xb8}}, 0x0) sendto$inet6(r3, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000300000e825088b590fce591dd9770020fc0290780000001ce000030003166f77d1046569e9e194371306907800fa000945f4fff6006502000000000000005f9b64bab67b"], 0x0) pread64(r0, &(0x7f0000000100)=""/253, 0xfd, 0x36) 10m52.482658168s ago: executing program 2 (id=2800): syz_usb_disconnect(0xffffffffffffffff) r0 = socket(0x28, 0x803, 0x0) syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000000180)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x300, 0x9, 0xc, 0x84, 0x10, 0x8f}, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x403}}, {0xc3, &(0x7f00000005c0)=ANY=[@ANYBLOB="c3030d5274a3aa9aab1db2679839b78d49314c5e54d5004dfc5dfff5399786dd93bb5946de753ea80391d54638bfaaf151a824c47050b57710fe80770634d7ca39bdae648d8634299eb95e26929f2b582f0a9f32e819848e2d4049bd58d1ab163874e458c92d43303b2745e9168dfb124559bc9fb848013937e4d1653ff65e1b2440a262b8546184fbdbc45bb1cde3d7caa2ac7c5dca7a54766309f19764d60588923d0a39ccfe8621c4c98bb12d5a3bf40d89eadafb16850ad6242775c9ca647242f1"]}, {0x8f, &(0x7f00000006c0)=ANY=[]}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x414}}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x85}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x58, &(0x7f0000000240)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x54}}, 0x80) socket$tipc(0x1e, 0x2, 0x0) close(r0) 10m46.889130941s ago: executing program 2 (id=2814): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f0000000040)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x2c) 10m46.153729106s ago: executing program 2 (id=2818): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x45}, 0x0) 10m45.925109261s ago: executing program 2 (id=2820): mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') symlink(&(0x7f0000000880)='.\x00', &(0x7f00000008c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f0000000180)='./file1/file3\x00', 0x400, 0x805) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x2, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x200, 0xa, 0x2000000, 0x441, 0x7}) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x2fd73a18, 0x80000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000e601"], 0x20}}, 0x4000040) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="0e030e00c4e8120006001e0089", 0xd, 0x28000000, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r4, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x11) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r5 = socket(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x110, 0xa}], 0x10}, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r2, 0x8010550e, &(0x7f0000000040)={0x2, &(0x7f0000000400)="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"}) socket$nl_netfilter(0x10, 0x3, 0xc) 10m41.64839524s ago: executing program 2 (id=2833): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x0, 0x0, 0x56555958}}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a2003ce80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000380)={0x2, 0x102000, 0x1}) close_range(r2, 0xffffffffffffffff, 0x0) 10m39.885112611s ago: executing program 2 (id=2837): preadv(0xffffffffffffffff, 0x0, 0x0, 0xe, 0x80) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) pread64(r0, &(0x7f0000004640)=""/94, 0x5e, 0x7) (fail_nth: 3) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) 10m38.266267898s ago: executing program 39 (id=2837): preadv(0xffffffffffffffff, 0x0, 0x0, 0xe, 0x80) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) pread64(r0, &(0x7f0000004640)=""/94, 0x5e, 0x7) (fail_nth: 3) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) 8m23.791712389s ago: executing program 7 (id=3294): unshare(0x2a020400) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (rerun: 32) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) (async, rerun: 64) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r1, r1, 0x3, 0xfffffffffffffffa, 0x3fff}) (async, rerun: 64) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 8m19.283759167s ago: executing program 7 (id=3300): openat$ptmx(0xffffffffffffff9c, 0x0, 0x60281, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x1, 0x12) read$char_usb(r1, &(0x7f0000000100)=""/32, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1b26cb52e3f67f56000000bf0a7a902b9a005100000000004c8760517c233aa6b7449b1d46f487114d15a0fbcf269cc58841a2b940fbe6d4f6d2356a3421fe2c61b02a56972ac34d825dea0d00eb8082a6660100282b1ed599f0b5c5254b6026e85310a7a37089befa0554602e7d1d032df538aee523a2523edf"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001000010800000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000010000faffff0b0a7e5b", @ANYRES32=r3, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xe, 0x80) r4 = syz_open_dev$sndpcmp(&(0x7f0000002440), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0xc0984124, &(0x7f0000000c40)) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) pread64(r5, &(0x7f0000004640)=""/94, 0x5e, 0x7) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) 8m18.556151504s ago: executing program 7 (id=3301): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800c79c72f4061cda6e472f6e0000090603000000000e00020073797a3100000000050005000756f4bf"], 0x28}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000300), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_clone(0x10008400, &(0x7f0000000300)="740700df4eb1aad0af9fb4105125078a1b4ab74ce3c53e6bea21fa1b7b09462a8b718cc4fcb15bed5407acf2e08e1c12837df3c8df16911a55bffba2c021e2ba66ac5aa786b11515722b1e2dd303bbe7a1cf8f6e143a0453becc24422f8509a4f8c127ebd3310733d87dd5545939a2f59e88d6867892b86684d2914bf4ad880899b5728934b12ee4d1bbe1a1708639ee9b5ccb31e06fba1665886b661ded5cf135dc2f583db37288c9b0df2dbaa0528dc10e4ca202bcf441fb9bf2b80270d01e7152432a57669734090c5dd6cb5450954c0c2f33edf1a8f0699c61120f54486766b7cb532fe05865c4a94aeb52", 0xed, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000004c0)="d723c149b9fe185727755430a70fc2cd72388ef7c8d6be4a81522e5308d380473c6fd5e8a667de9c273c4aeb7e90c0a21a19a3a268ff198b19daa25b231496d817298ba3c7e278f082e275e887bebd14628fcc0a0c1d1e97b2e8d126f30b17249f7ba92eba9f7c3fcf38de9708647d316abf5cfcd11a0f4867a2717169a428411f557fc7b32f8dc42ce80f832cb5da90321ca8754d4842b358a1e42a138a6cd53720fd61f72620d8d6c3e228297daa0a271994f08a397ffce3ff1f5d17e517b3dc9703b9abf409624e9d19") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m18.260337982s ago: executing program 7 (id=3303): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x45}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffcb8}]}) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) 8m18.195641056s ago: executing program 7 (id=3304): socket$inet_sctp(0x2, 0x800000000000001, 0x84) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB]) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 8m15.130300746s ago: executing program 7 (id=3313): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000540)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000002080)=0x3a, 0x23b) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28dc6d00b99b8c0bf4ae0b2d56b0d855d0dc52391a4ab4a38ec298abf8b01b20e3519bd83b", @ANYRES16=r1, @ANYBLOB="100029bd7000fedbdf251c00000008000300", @ANYRES32=r4, @ANYBLOB="0c0099003c06000012000000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x801) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)=0x2) 7m59.973492469s ago: executing program 40 (id=3313): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000540)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000002080)=0x3a, 0x23b) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28dc6d00b99b8c0bf4ae0b2d56b0d855d0dc52391a4ab4a38ec298abf8b01b20e3519bd83b", @ANYRES16=r1, @ANYBLOB="100029bd7000fedbdf251c00000008000300", @ANYRES32=r4, @ANYBLOB="0c0099003c06000012000000"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x801) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000140)=0x2) 5m21.64018436s ago: executing program 8 (id=3775): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xc12, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0x20, 0xfd, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x0, 0xfd}}}}}]}}]}}, 0x0) getpid() r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c40)={0xf0, 0x0, 0x786b6295d7f1977, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0xd0, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xff}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x2}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xd}]}, @NL802154_DEVKEY_ATTR_ID={0x7c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x18001}, 0x40040) 5m19.201999901s ago: executing program 8 (id=3785): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x10, "25263408eb2f1b51ffc86d031c0496df"}, &(0x7f0000000040)=0x18) mount$nfs(0x0, 0x0, 0x0, 0x396a4e8, 0x0) r2 = getpid() syz_pidfd_open(r2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$pppl2tp(r4, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @multicast1}, 0x3, 0x0, 0x3, 0x2}}, 0x26) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x14, r8, 0x101, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20040055}, 0x8000) socket(0x15, 0x5, 0x0) socket$inet_sctp(0x2, 0x800000000000001, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000001540)={0x2, 0x3, 0x208, 0x0, 0x6, 0x20000000, 0x5, 0x8, r1}, &(0x7f0000000280)=0x20) socket$inet6_tcp(0xa, 0x1, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000000240)="74f0bbf84e68693878323e0aa95456a89334b8f3da5f559867c4a38f23a09d9a581e45554b907c9e2c26eff92e836b7ced13868e2abca1", 0x37}, {&(0x7f0000001480)="85103a1479bd00702b25493d4e6a9f6260a5d2f566e014f44677f89740c34957b177a9d5eed7d3127911f1afe2cffd6e67f2ecea9e994d4b3445e0cd04eb77dd7d7e033b7136b1e2557ecdfdf2d27992c1557066d27482ada302dd72f453b9e31c0d2db3369fa30146462ece438a32935efe462587f83dd5fb2a05509c233bb8630bff328c0203e35533e2b84cfc8f54b57801b4a877cb76ed", 0x99}], 0x3) 5m17.689933203s ago: executing program 8 (id=3788): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket(0x2b, 0x1, 0x1) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="dc00000002000005ffffff00aaaa06000008004500002200000000002f907800001f38e0000001a00086dd"], 0x32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x13, 0xe, 0x0, &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7794b0ed934a040a, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x800000}, 0x8, 0x5, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) rseq(0x0, 0x0, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000000)={r4, 0xa001}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES16, @ANYRES8, @ANYRES64, @ANYRES32], 0x50) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r5}, 0x0, 0x0}, 0x20) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0xf1504}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000000a0a01"], 0x14}}, 0x800) sendmsg$NFT_BATCH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x4dc}, 0x1, 0x0, 0x0, 0x44000}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) 5m13.87359013s ago: executing program 8 (id=3794): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='\x00', 0x89901) move_mount(r1, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 5m13.611774339s ago: executing program 8 (id=3796): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r5, {0xc, 0xd}, {}, {0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x24, 0x2, [@TCA_CGROUP_EMATCHES={0x20, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x5e, 0x8, 0xfffa}, {0xffffffffffffffff, 0x4}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000080}, 0x40) r6 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e22, 0x4, @private0, 0x1}}, 0x1ff, 0x4}, 0x90) lseek(r6, 0xffffffffffffffff, 0x3) r7 = socket(0x2, 0x80805, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = fanotify_init(0x200, 0x0) readv(r9, &(0x7f0000000140)=[{&(0x7f0000000040)=""/140, 0x8c}], 0x1) setsockopt$IP_VS_SO_SET_TIMEOUT(r7, 0x0, 0x48a, &(0x7f0000000140)={0x81, 0x7, 0xcb}, 0xc) syz_open_procfs(0x0, &(0x7f0000000280)='net/netlink\x00') pselect6(0x40, &(0x7f0000000080)={0xe, 0x3, 0x1, 0x1, 0xc, 0x5, 0x72a5, 0x7fffffffffffffff}, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000a40)={0xa, 0x4e02, 0x7ffe, @remote, 0x9}, 0x1c) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)={0x6c, @private=0xa010101, 0x4e23, 0x1, 'nq\x00', 0xa, 0x1, 0xc}, 0x2c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2c10", 0x2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 5m13.351761762s ago: executing program 8 (id=3799): unshare(0x20000600) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x2402, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x2, 0xe1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x12, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f00000002c0)={'syz0\x00', {0xfaf9, 0xfff7, 0x4, 0x8001}, 0x11, [0x1, 0x7, 0xf62, 0x7, 0x4, 0xc6, 0xe, 0x1, 0x3, 0x0, 0x8578, 0xc, 0xe, 0x9, 0x8000000, 0x8, 0x8, 0x8, 0x6380, 0x2ccb48e3, 0x8001, 0x8, 0x9, 0x7, 0x9, 0xd392, 0x2, 0x800, 0x7, 0x5, 0x131c, 0x7182ae0b, 0x40, 0x9, 0xe58e, 0x9, 0x8, 0x6, 0x6, 0x2, 0x9, 0x1, 0x101, 0xe, 0x1ff, 0xfffffff8, 0x1, 0xae2, 0x6, 0x0, 0x401, 0x3, 0x9, 0x7f, 0x6, 0xffff, 0x6, 0x1, 0x1, 0x7, 0x0, 0xe, 0x1, 0x4], [0x85, 0x2, 0x1, 0x7f, 0x1ff, 0x2, 0x2, 0x3, 0x77, 0x10, 0x3, 0x0, 0x7, 0x0, 0x7fff, 0x0, 0x4, 0x9, 0x3ff80, 0x4, 0x40, 0x2, 0x0, 0xfb6, 0x85, 0x0, 0x6, 0x4, 0x8, 0x1ff, 0x7, 0x8000, 0x8, 0x1, 0x8, 0x5, 0xfffffffe, 0x3, 0xe0000000, 0xff, 0x10001, 0x3, 0x8, 0x1, 0xbf6, 0x6, 0xfffffffc, 0xd, 0x4, 0x9462, 0x7, 0x3, 0x5, 0x7000, 0x10001, 0xfffeffff, 0xfffffffa, 0x9, 0x7, 0xc, 0x8, 0x7907, 0x6ce00000, 0x1], [0x1ff, 0x8, 0x100, 0x400, 0x7, 0x900, 0x7, 0x7, 0x1, 0x0, 0x47e80000, 0x7ee6, 0x4, 0x9, 0x0, 0x2, 0x6, 0x1, 0x8, 0x7f, 0x7, 0x400, 0x6d1, 0x401, 0xec60, 0xf, 0x1, 0x2, 0x9, 0x7, 0x3, 0x8, 0x7ff, 0x0, 0x3, 0x99, 0xffffffc1, 0x61810067, 0x7, 0x9, 0x7fff, 0x1, 0xc, 0xf73, 0x5, 0x6, 0x1, 0x3, 0x1, 0x6, 0x8001, 0x2, 0x2, 0x1, 0x9, 0x2, 0x6, 0x4, 0x1ff, 0x6, 0x6, 0x6, 0x0, 0x5], [0x7ff, 0x8, 0x7, 0xfff, 0x5, 0x5, 0x9, 0x9, 0xffffff81, 0x775, 0xb7dc, 0x4, 0x8, 0x8, 0xffff0001, 0x3, 0x40, 0xe, 0x8, 0xfffffc90, 0x5, 0x9, 0xffffffff, 0x2, 0x8001, 0x3, 0x590, 0x8, 0x8, 0x3, 0x2, 0x4, 0x0, 0x3, 0x7f, 0x80000001, 0x146, 0x4, 0x6b7e, 0x17e6, 0x0, 0x228, 0xbe, 0x1, 0x100, 0x0, 0x0, 0xf6a3, 0x3, 0x81, 0xffffffff, 0xeb9, 0x80, 0xfffffc01, 0x81, 0x11f446de, 0x20, 0x4, 0x1000, 0xff, 0x9, 0x5, 0x9, 0x81]}, 0x45c) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r6, 0x4068aea3, 0x0) bind$inet6(r5, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x240540c7, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) epoll_pwait2(r4, &(0x7f0000000040)=[{}, {}], 0x2, &(0x7f0000000180)={r7, r8+10000000}, &(0x7f0000000200)={[0x6]}, 0x8) sendto$inet6(r5, 0x0, 0x0, 0xc040005, 0x0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x40000040, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r9, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 5m12.068579585s ago: executing program 41 (id=3799): unshare(0x20000600) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) r1 = syz_io_uring_setup(0x2402, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x2, 0xe1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x12, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f00000002c0)={'syz0\x00', {0xfaf9, 0xfff7, 0x4, 0x8001}, 0x11, [0x1, 0x7, 0xf62, 0x7, 0x4, 0xc6, 0xe, 0x1, 0x3, 0x0, 0x8578, 0xc, 0xe, 0x9, 0x8000000, 0x8, 0x8, 0x8, 0x6380, 0x2ccb48e3, 0x8001, 0x8, 0x9, 0x7, 0x9, 0xd392, 0x2, 0x800, 0x7, 0x5, 0x131c, 0x7182ae0b, 0x40, 0x9, 0xe58e, 0x9, 0x8, 0x6, 0x6, 0x2, 0x9, 0x1, 0x101, 0xe, 0x1ff, 0xfffffff8, 0x1, 0xae2, 0x6, 0x0, 0x401, 0x3, 0x9, 0x7f, 0x6, 0xffff, 0x6, 0x1, 0x1, 0x7, 0x0, 0xe, 0x1, 0x4], [0x85, 0x2, 0x1, 0x7f, 0x1ff, 0x2, 0x2, 0x3, 0x77, 0x10, 0x3, 0x0, 0x7, 0x0, 0x7fff, 0x0, 0x4, 0x9, 0x3ff80, 0x4, 0x40, 0x2, 0x0, 0xfb6, 0x85, 0x0, 0x6, 0x4, 0x8, 0x1ff, 0x7, 0x8000, 0x8, 0x1, 0x8, 0x5, 0xfffffffe, 0x3, 0xe0000000, 0xff, 0x10001, 0x3, 0x8, 0x1, 0xbf6, 0x6, 0xfffffffc, 0xd, 0x4, 0x9462, 0x7, 0x3, 0x5, 0x7000, 0x10001, 0xfffeffff, 0xfffffffa, 0x9, 0x7, 0xc, 0x8, 0x7907, 0x6ce00000, 0x1], [0x1ff, 0x8, 0x100, 0x400, 0x7, 0x900, 0x7, 0x7, 0x1, 0x0, 0x47e80000, 0x7ee6, 0x4, 0x9, 0x0, 0x2, 0x6, 0x1, 0x8, 0x7f, 0x7, 0x400, 0x6d1, 0x401, 0xec60, 0xf, 0x1, 0x2, 0x9, 0x7, 0x3, 0x8, 0x7ff, 0x0, 0x3, 0x99, 0xffffffc1, 0x61810067, 0x7, 0x9, 0x7fff, 0x1, 0xc, 0xf73, 0x5, 0x6, 0x1, 0x3, 0x1, 0x6, 0x8001, 0x2, 0x2, 0x1, 0x9, 0x2, 0x6, 0x4, 0x1ff, 0x6, 0x6, 0x6, 0x0, 0x5], [0x7ff, 0x8, 0x7, 0xfff, 0x5, 0x5, 0x9, 0x9, 0xffffff81, 0x775, 0xb7dc, 0x4, 0x8, 0x8, 0xffff0001, 0x3, 0x40, 0xe, 0x8, 0xfffffc90, 0x5, 0x9, 0xffffffff, 0x2, 0x8001, 0x3, 0x590, 0x8, 0x8, 0x3, 0x2, 0x4, 0x0, 0x3, 0x7f, 0x80000001, 0x146, 0x4, 0x6b7e, 0x17e6, 0x0, 0x228, 0xbe, 0x1, 0x100, 0x0, 0x0, 0xf6a3, 0x3, 0x81, 0xffffffff, 0xeb9, 0x80, 0xfffffc01, 0x81, 0x11f446de, 0x20, 0x4, 0x1000, 0xff, 0x9, 0x5, 0x9, 0x81]}, 0x45c) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r6, 0x4068aea3, 0x0) bind$inet6(r5, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x240540c7, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) epoll_pwait2(r4, &(0x7f0000000040)=[{}, {}], 0x2, &(0x7f0000000180)={r7, r8+10000000}, &(0x7f0000000200)={[0x6]}, 0x8) sendto$inet6(r5, 0x0, 0x0, 0xc040005, 0x0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x40000040, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r9, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 10.468191869s ago: executing program 6 (id=4688): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a09040000000000000008020000004c000480300001800e000100696d6d6564696174650000001c000280100002800c00028008000180000000000800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a320000000014000000110001"], 0xa0}}, 0x0) r3 = pidfd_getfd(0xffffffffffffffff, r2, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000080), 0x2, 0x0) r4 = memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) fallocate(r4, 0x0, 0x0, 0x8) fcntl$addseals(r4, 0x409, 0xe) ftruncate(r4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b37, &(0x7f0000000000)={'wlan1\x00'}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, &(0x7f0000000000)=0xa, 0x4) r6 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000001f00)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x40, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x0, 0x401}, {0x6, 0x24, 0x1a, 0x0, 0x5}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x6, 0x10, 0x10, 0x10, 0x1000, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 8.536432321s ago: executing program 6 (id=4691): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x82, 0x100, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$usbmon(0x0, 0x80000000000000, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x101303, 0x0) write$proc_mixer(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="4c494e453120274d617374657220436170747572652053775f7463ba"], 0x33) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1200000001000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000e20577101e2df8eb443841f448ac42ea9c3b64e03766d979ed2ffbb1f2698a66bfd28bbfead1f01abf1a8438d506cd2fb1adb68fcc8e2f3debb437675a2fce098775b51cc50402c1c03cf3336ad2ea49873d74c1c7997271b9daa706210730468ce620df6dd990adc50eea96b5581ab30e5c08d33dba8050ae860c84d0a346dffa50500bc7828e97ddb1a2a65d7151a5808ed7dc49dcb4cd8758c5cd8121ead2f71d01bcd0fca5bb77a1aa7651f24b5467232be8ce250ee8ee7f29df30b68c350a2e0e09f214d1c12d0310dd8fe03f879f6378b3911f864e6229069c945212f42823e783f88cf72c4f941edd24"], 0x50) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, 0x0) msgsnd(0x0, 0x0, 0x0, 0x800) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 7.230416591s ago: executing program 6 (id=4694): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) rt_sigpending(0x0, 0x1000000) r1 = syz_open_dev$video(0x0, 0x0, 0x0) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYBLOB="ffffffff0e000000000000000000000000000000bb24def97f3e0f65b1b885076d92c288ba0b53b16fc18df3b4009b75bca5fb5a3b9c1b7a913ba5fb7eecfc48779dc632457ab24b1db0b5426297e02bde2b9c5b471008209e9a3df6f8450c75fa76b0a6d73a3dcbce1e248d810a892fef8ef8ea02377b69f48dabd7a2d687dc8bc6a6482ac3eb8a2077bf9d596ba519398ed79c2da3c17dd1a58229f9e37ca9b61ac26f6d7c4bf2252a96d272fca2a0f7f4fcf011a8f026cc7f3d344386e01884ce6cc2924e79bdfaaf17fba129a1afbdc04fcf9fc2a6b003f0a6146f81b64138406902b9e085a10cc042d595c002", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000400"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x14) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$read(0xb, 0x0, 0x0, 0x0) fsopen(0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000640)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd3\x8a5J8-kP\x0f\xac\x84%#/w\x11\xc2\x0f]\x8d\x19M\x1cC\x88\xcb\xb4c8\x8c\x1a\x9e\xf5Q \x1b\xb2}G\xb0\xd7~]\xceH5S\n\xe5\xeaZ\x89[\xa6\x98\xb8,#+\xb6\xecb\xa5\xee\\\x03`2?Y\xe5n\xa7X\x97X\xecs\xd1\xad\xef\xfc\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00u\xea\xd7^\xedm \xc1d\xe7\x94Q\x0f>\x80j\x8f\x855\xd0\xa2NC\x9a\xce\xf5\xec\xc8A\xf2\xd7\xcf\xae\x80\xf4\xfa\xa2~1I\x84\xeac\xc9Z\f\xbb\xfb\xce:{W\x84\tH\x18w\xf3\vI\xde\xe9\xb3 \x9bA\xe5\xdb\xb5\xa4}\xcaK\xf7Q\x06p\xbb\x18\xa4q\xf7\x85\nfB\xc4\x86^\x8dV\xe5(N\xe0|\xc9g\xa0\xb8\xfc\xda\xc6\xf2T\xbcQ\x96\xf8\xfdV\xa4`\x17\x9d\xfa\xd9`/\a\xe8~\xdcE\n\x9a\xcc\xde\xf1/\x85\x8b^.\x03\xc1\x19\x92s\xc4vU-s\f^@1C!0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e22, 0x6, @mcast1, 0x1}}, 0x200, 0x2}, &(0x7f0000000080)=0x90) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000400)={r4, 0x8}, 0x8) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000140)=0x90000) 5.874188492s ago: executing program 6 (id=4697): socket(0x10, 0x803, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pimreg\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0xffffffffffffffb0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b0009ef"], 0x14}}, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000d0400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r5], 0x48}}, 0x0) recvmmsg(r3, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x10000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$ttys(0xc, 0x2, 0x1) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000000000000000000080"], 0x48) open_by_handle_at(r7, &(0x7f0000000380)=@FILEID_UDF_WITHOUT_PARENT={0xc, 0x51, {0x10001, 0x2, 0xffff, 0x8}}, 0x480240) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}}, 0x0) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r11}, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) 5.66178857s ago: executing program 5 (id=4699): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x8108}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, 0x0) r1 = syz_io_uring_setup(0x27f0, &(0x7f0000000340)={0x0, 0xd67d, 0x10100, 0xd, 0x4}, &(0x7f0000000280)=0x0, &(0x7f0000000100)=0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_open_dev$vivid(&(0x7f0000000200), 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000005180)={0x2020}, 0x2020) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x78081d98c7d63d19, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCGETLINKNAME(r6, 0x89e0, &(0x7f0000000080)={0x2, 0x2}) 5.504940235s ago: executing program 0 (id=4701): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x4, 0x400) fanotify_mark(r1, 0x39, 0x1a, r0, 0x0) mkdir(&(0x7f0000000040)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000008c0), 0xfecc) 4.431192038s ago: executing program 3 (id=4704): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) getrlimit(0xe, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) keyctl$setperm(0x5, 0x0, 0x9290101) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r4) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r4, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r7, 0x4b3a, 0x1) ioctl$TCXONC(r7, 0x4b3a, 0x2) socket(0x5, 0x800, 0xe7) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 4.430421014s ago: executing program 0 (id=4705): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x1, &(0x7f0000000200)=ANY=[], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00'}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x4, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) syz_emit_ethernet(0x82, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde0800450000740000000000019078ac1e0001ac1414aa05009078e00000e04600000000000000001100000000000000000004830300070300443c0003e0000089000000000000000000000000ac1414aa00000000ac1434bb000000000000000000000000ac141400"/130], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r7 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x334) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r8 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r8, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000f8000300000018002eec97854700"/32], 0x0) ioctl$EVIOCSABS2F(r7, 0x401845ef, &(0x7f00000000c0)={0x6, 0x8, 0xd, 0x6, 0x3, 0x8000}) 4.25249676s ago: executing program 5 (id=4706): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000580)={0x0}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0xfffffd00, &(0x7f0000000000)='}\x00') mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x2000}, 0x90) munlockall() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000002040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r4 = socket(0x2, 0x80805, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, 0x0, &(0x7f0000000040)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000003c0)={r1, 0xffffffffffffffff}) 3.332340666s ago: executing program 3 (id=4707): socket$netlink(0x10, 0x3, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={0x0, r0}, 0x18) rt_sigpending(0x0, 0x1000000) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) accept$inet6(r1, 0x0, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r2, @void, @void, @value}, 0x50) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x7}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, 0xe0ff}, 0x1c) r5 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f00000000c0)='io#harset', 0x0) 2.580171023s ago: executing program 3 (id=4709): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x280, 0x30, 0x300, 0x71bd22, 0x25dfdbff, {}, [{0x26c, 0x1, [@m_bpf={0x98, 0x6, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x5b, 0x6, "bfb48d1c9cbd39c403490f71e7c26903a2429639badf09f7f1460a1a37776d69ba43d012403ff817b805f05e15fda7d5abfefd6f88a71220a3dc2a6660c265b59ed90ce6980eda6d48215f2ed37602646c6855209b52b2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ct={0x138, 0x15, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x5, 0x3, 0x3, 0x3}}, @TCA_CT_LABELS={0x14, 0x7, "5c593798e071e0bc4efb8aaafda23300"}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}, {0xd0, 0x6, "2d5d5cb27836d5dc9cf3ecdb08cc5dd629e1cf9a6aa5d915cc1e8ee87e7f4da5fbceddcac488edc192465d9643af820055d697225633aaeea14c8441d82d0eb28eea68e74ac208a356cdb84f2b9e918c40688f3786124caf0ee47348e6063d70a41f97f29a61d2b0c09d0104440291872c7f1d0ec4d1af46279267d56037b390218c4afef31558a8742220488a6721b6aedb734aecec57f7cc669c4df57165ba2782234ce0d3c5eeb60f0c3335363dd62cb2e3e176016fc9c8e68e1dd6245ee7338ea12af71183f5ca0856cb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_sample={0x60, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x33, 0x6, "a04e93089126fb36c3994e3bffd86ad6c41427b04aa71165645ccd9fd750e23bab4aa0f3c6a2477eddc777f5b667ab"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x38, 0x1d, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x4000810}, 0x20000800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.566072394s ago: executing program 1 (id=4710): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x181040, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)=""/106, 0x6a}], 0x1}}], 0x1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000240)=@x86={0xf, 0x8, 0x5, 0x0, 0x3, 0x2, 0x9, 0x3, 0x0, 0xca, 0x6, 0x1, 0x0, 0x278a, 0x4, 0x3, 0x4a, 0x2, 0x10, '\x00', 0x28, 0x80000001}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000070000040"]) 2.480381836s ago: executing program 1 (id=4711): syz_open_dev$evdev(0x0, 0x4, 0x20900) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000800)=@gcm_256={{0x303}, "d024ff15dc3e0560", "062b35f3a2acc24d7506d3d67945dde3f8c826f0842b6d104bcadf2b01fa62e8", "d3c3f704", "08e0ffffff00"}, 0x38) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f00000000c0)}], 0x2}, 0x400c080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x4001}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) write$binfmt_script(r0, &(0x7f0000001300), 0x8f) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000380)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x1f8, 0x110, 0x308, 0x308, 0x308, 0x4, &(0x7f00000002c0), {[{{@arp={@empty, @private=0xa010100, 0x0, 0xff, 0x2, 0xf, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xfa9f, 0x8001, 0xa7, 0x5, 0x4, 0x9, 'veth1_vlan\x00', 'batadv0\x00', {0xff}, {}, 0x0, 0x101}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @local, @private=0xa010102, 0x1, 0x1}}}, {{@arp={@multicast1, @multicast1, 0xff000000, 0xffffffff, 0xf, 0xd, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x4, 0x5, 0x10, 0x7, 0x1, 0x7, 'batadv_slave_0\x00', 'dummy0\x00', {}, {}, 0x0, 0x10}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@arp={@multicast2, @multicast1, 0xffffff00, 0xffffffff, 0x7, 0xa, {@mac=@multicast, {[0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x5, 0x7, 0xbf82, 0x9, 0x1, 0xfffe, 'ip_vti0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x0, 0x14}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @remote, @private=0xa010101, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 2.312274451s ago: executing program 5 (id=4712): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="6000000002060502000000000000000000000000140007800800114000000000050015000600000005000100060000e0050005000200000005000400000000000900020073797a310000000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000940), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000a80)={0xb, @win={{0x38305343, 0x9, 0xfff, 0x2}, 0x1, 0x2, 0x0, 0x5, 0x0, 0x8f}}) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r1, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001d80)=""/166, 0xa6}, {&(0x7f0000000100)=""/230, 0xe6}], 0x2, &(0x7f0000001fc0)=""/67, 0x41}, 0x1}], 0x1, 0x40002122, 0x0) munmap(&(0x7f0000002000/0x800000)=nil, 0x800000) sendmsg$tipc(r1, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000500)="e8", 0x1}], 0x1}, 0x4800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000001200)={0x1d, r4, 0x1000000000}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r4, 0x4, {0x1, 0xff, 0x3}, 0xfe}, 0x18) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) r5 = syz_clone(0x25000000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f0000000540)=ANY=[]) r7 = syz_pidfd_open(r5, 0x0) r8 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r8, &(0x7f0000000040)={0x1, 0x6}, 0x2) write$USERIO_CMD_REGISTER(r8, &(0x7f0000000100), 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000002e00000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) statx(r9, &(0x7f00000068c0)='./cgroup\x00', 0x800, 0x2, &(0x7f0000006900)) write$USERIO_CMD_SEND_INTERRUPT(r8, &(0x7f00000000c0)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r8, &(0x7f0000000140)={0x2, 0x63}, 0x2) setns(r7, 0x24020000) 2.269454699s ago: executing program 1 (id=4713): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x30c, 0x30, 0x300, 0x71bd22, 0x25dfdbff, {}, [{0x2f8, 0x1, [@m_bpf={0x9c, 0x6, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x5d, 0x6, "bfb48d1c9cbd39c403490f71e7c26903a2429639badf09f7f1460a1a37776d69ba43d012403ff817b805f05e15fda7d5abfefd6f88a71220a3dc2a6660c265b59ed90ce6980eda6d48215f2ed37602646c6855209b52b2022e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ct={0x134, 0x15, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x5, 0x3, 0x3, 0x3}}, @TCA_CT_LABELS={0x14, 0x7, "5c593798e071e0bc4efb8aaafda23300"}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}, {0xcc, 0x6, "2d5d5cb27836d5dc9cf3ecdb08cc5dd629e1cf9a6aa5d915cc1e8ee87e7f4da5fbceddcac488edc192465d9643af820055d697225633aaeea14c8441d82d0eb28eea68e74ac208a356cdb84f2b9e918c40688f3786124caf0ee47348e6063d70a41f97f29a61d2b0c09d0104440291872c7f1d0ec4d1af46279267d56037b390218c4afef31558a8742220488a6721b6aedb734aecec57f7cc669c4df57165ba2782234ce0d3c5eeb60f0c3335363dd62cb2e3e176016fc9c8e68e1dd6245ee7338ea12af71183f5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_sample={0x80, 0x12, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x662, 0xdaa, 0xffffffffffffffff, 0x8, 0xa807}}]}, {0x31, 0x6, "a04e93089126fb36c3994e3bffd86ad6c41427b04aa71165645ccd9fd750e23bab4aa0f3c6a2477eddc777f5b6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0xa4, 0x13, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x7, 0x3, 0x7, 0x2}, 0x5a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xdbc6, 0xfffffffffffffff8, 0x401, 0xdbc0}, 0x6a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x7a1e, 0x0, 0x7fff, 0x80}, 0xfeff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf, 0x1, 0x4, 0x8001, 0x8c}, 0xa26}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x4000810}, 0x20000800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 1.947502143s ago: executing program 5 (id=4714): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002b80)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r0, 0x80000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) write(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x45, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = io_uring_setup(0x7d2e, &(0x7f0000002380)={0x0, 0xffffffff, 0x1046}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x20, 0x0) r4 = gettid() ptrace$getregset(0x4204, r4, 0x6, &(0x7f0000000240)={&(0x7f00000001c0)=""/82, 0x52}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0x48, 0x20000855, &(0x7f0000000540)={0xc9, 0x4, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.69282059s ago: executing program 0 (id=4715): socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x202, &(0x7f0000000200)=0x0) eventfd(0xc6) io_submit(r0, 0x0, &(0x7f0000000080)) lsm_set_self_attr(0x0, &(0x7f0000000000)={0x4, 0xe000000000000000, 0x7b, 0x5b, "4693a51da8264e2b1ea317e9b9c94734e909125e9deb63f8b0ab9eafb14b6ee4f74a53c48b1a52a0683cc1d3a76c1afd0f2a577167849891d59e106c831c3bb23bd58d5c2844ba386032ef986e94dcd587c8e49771c9189ebe1ae5"}, 0x7b, 0x0) 1.631001698s ago: executing program 1 (id=4716): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r0) unshare(0x24020400) fremovexattr(0xffffffffffffffff, &(0x7f0000000040)=@known='system.posix_acl_default\x00') r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083, 0x715cb}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x34}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r3 = socket(0x10, 0x3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_START_NAN(r1, 0x0, 0x20048050) symlink(&(0x7f0000000080)='.\x00', 0x0) truncate(0x0, 0x2) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000001140)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r4, 0x1) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000380)={r6, @in6={{0xa, 0x4e22, 0x4, @empty, 0xc}}, 0x0, 0x2}, &(0x7f0000000340)=0x90) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000340)={r6, @in={{0x2, 0x4e23, @remote}}, [0x8, 0x9, 0x2, 0x3, 0x5e770000000000, 0x4, 0x401, 0xffff, 0xffffffffffffcbf1, 0x1ff, 0x4, 0x230, 0x1, 0x0, 0x9]}, &(0x7f0000000100)=0x100) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="ff95908f7ccfcd90a1388b00000075a2ae0a0000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.600398224s ago: executing program 3 (id=4717): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000b40), r0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000c40)={0x20, r1, 0x786b6295d7f1977, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0xc, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x18001}, 0x40040) 1.392344208s ago: executing program 5 (id=4718): prctl$PR_SET_IO_FLUSHER(0x41, 0x3) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000010000104000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r1, @ANYBLOB="094001009b4d15f1cbb433d4b945ec9ea6dd88a70b346f711f3361f5948802c7aebf3b384933a56262481635bbc93b77afa82292db75a06ef1ecd27da8ba542d27476ed916ec9ab9607e51915359e5518152dbc613d0b8d4c0572874cbf042fd36bb4f41a3c7e2001ca0b7dd707d4297d3e5e6cf220ae7592da6c1d803eadec4b67e8eaf4b12be21b4f977d3b80c1db5d208b1c5913fee4fd723260d3cd03ae736c2", @ANYRES32=0x0, @ANYBLOB="05000700010000000500060005000000"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x800, 0x108) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000027c0)={0x11, 0x4, &(0x7f0000000a40)=ANY=[], &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x0) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="2e0000000400000000000000000000000300"/46], 0x2e) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) ioprio_set$pid(0x2, 0x0, 0x0) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)="e9bed39c101417d7e467170468da901a864cd36ebbdc4e493534e8550a", 0x1d}, 0x1, 0x0, 0x0, 0x4000890}, 0x20004854) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r7 = socket(0x10, 0x803, 0x0) write(r7, &(0x7f0000000340)="1c0000005e001f3814584707f9f4ffffff000000230000001ff80000", 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100029b96351042070920903f010203010902240083080239ee87000dcd0200"/54], 0x0) 1.330451279s ago: executing program 6 (id=4719): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x1f32}, 0x48, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) r8 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r8, 0x0, 0x0, 0x0) r9 = openat$binfmt(0xffffffffffffff9c, r8, 0x2, 0x0) close(r9) execveat$binfmt(0xffffffffffffff9c, r8, 0x0, 0x0, 0x0) 1.309166732s ago: executing program 3 (id=4720): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000004d80)={0x0, 0x0, &(0x7f0000004d40)={&(0x7f0000004b80)={0x2, 0x7, 0xc, 0xc, 0x2, 0x0, 0x70bd29, 0x25dfdbfe}, 0x10}}, 0x40004) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) recvmmsg(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}, 0x275a}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=""/234, 0xea}, 0x4}], 0x2, 0x60010020, 0x0) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 1.220433693s ago: executing program 0 (id=4721): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x181040, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)=""/106, 0x6a}], 0x1}}], 0x1, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000240)=@x86={0xf, 0x8, 0x5, 0x0, 0x3, 0x2, 0x9, 0x3, 0x0, 0xca, 0x6, 0x1, 0x0, 0x278a, 0x4, 0x3, 0x4a, 0x2, 0x10, '\x00', 0x28, 0x80000001}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000000000070000040"]) 1.079710638s ago: executing program 0 (id=4722): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x1f32}, 0x48, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) readlinkat(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', &(0x7f00000002c0)=""/157, 0x9d) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r5 = openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) close(r5) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000000), 0xd) r7 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r7, 0x0, 0x0, 0x0) r8 = openat$binfmt(0xffffffffffffff9c, r7, 0x2, 0x0) close(r8) execveat$binfmt(0xffffffffffffff9c, r7, 0x0, 0x0, 0x0) 1.078696867s ago: executing program 1 (id=4723): syz_open_dev$evdev(0x0, 0x4, 0x20900) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000800)=@gcm_256={{0x303}, "d024ff15dc3e0560", "062b35f3a2acc24d7506d3d67945dde3f8c826f0842b6d104bcadf2b01fa62e8", "d3c3f704", "08e0ffffff00"}, 0x38) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f00000000c0)}], 0x2}, 0x400c080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a8, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x4001}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x1, 0xbe, {0x565159d7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) write$binfmt_script(r0, &(0x7f0000001300), 0x8f) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f00000003c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x1f8, 0x110, 0x308, 0x308, 0x308, 0x4, &(0x7f00000002c0), {[{{@arp={@empty, @private=0xa010100, 0x0, 0xff, 0x2, 0xf, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0xfa9f, 0x8001, 0xa7, 0x5, 0x4, 0x9, 'veth1_vlan\x00', 'batadv0\x00', {0xff}, {}, 0x0, 0x101}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local, @local, @private=0xa010102, 0x1, 0x1}}}, {{@arp={@multicast1, @multicast1, 0xff000000, 0xffffffff, 0xf, 0xd, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x4, 0x5, 0x10, 0x7, 0x1, 0x7, 'batadv_slave_0\x00', 'dummy0\x00', {}, {}, 0x0, 0x10}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@arp={@multicast2, @multicast1, 0xffffff00, 0xffffffff, 0x7, 0xa, {@mac=@multicast, {[0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}}, 0x5, 0x7, 0xbf82, 0x9, 0x1, 0xfffe, 'ip_vti0\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x0, 0x14}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @remote, @private=0xa010101, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 1.05474398s ago: executing program 3 (id=4724): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd5e, 0x240000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0x46, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x40, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x356b, @local, @rand_addr=0x64010100}, "08a52af54ae7832e"}}}}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) socket$rxrpc(0x21, 0x2, 0x4) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000600)) pipe2$9p(&(0x7f0000000080), 0x0) r4 = timerfd_create(0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x70}}, 0x0) timerfd_settime(r4, 0x3, 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) syz_io_uring_submit(r2, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) syz_open_dev$MSR(&(0x7f0000000000), 0x9, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x388, 0x1c0, 0x12, 0x60d, 0x0, 0x202, 0x2b8, 0x2e8, 0x2e8, 0x2b8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @local, [], [], 'ip6erspan0\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x1, 0x1}, {0x1, 0x1, 0x2}, 0x9, 0x7}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x6}, {0x0, 0x41}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) 177.799564ms ago: executing program 6 (id=4725): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x1f32}, 0x48, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000007"], 0x50) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r7, &(0x7f0000000000), 0xd) r8 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r9 = openat$binfmt(0xffffffffffffff9c, r8, 0x2, 0x0) close(r9) execveat$binfmt(0xffffffffffffff9c, r8, 0x0, 0x0, 0x0) 423.795µs ago: executing program 0 (id=4726): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x30c, 0x30, 0x300, 0x71bd22, 0x25dfdbff, {}, [{0x2f8, 0x1, [@m_bpf={0x9c, 0x6, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x5d, 0x6, "bfb48d1c9cbd39c403490f71e7c26903a2429639badf09f7f1460a1a37776d69ba43d012403ff817b805f05e15fda7d5abfefd6f88a71220a3dc2a6660c265b59ed90ce6980eda6d48215f2ed37602646c6855209b52b2022e"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ct={0x134, 0x15, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x5, 0x3, 0x3, 0x3}}, @TCA_CT_LABELS={0x14, 0x7, "5c593798e071e0bc4efb8aaafda23300"}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}, {0xcc, 0x6, "2d5d5cb27836d5dc9cf3ecdb08cc5dd629e1cf9a6aa5d915cc1e8ee87e7f4da5fbceddcac488edc192465d9643af820055d697225633aaeea14c8441d82d0eb28eea68e74ac208a356cdb84f2b9e918c40688f3786124caf0ee47348e6063d70a41f97f29a61d2b0c09d0104440291872c7f1d0ec4d1af46279267d56037b390218c4afef31558a8742220488a6721b6aedb734aecec57f7cc669c4df57165ba2782234ce0d3c5eeb60f0c3335363dd62cb2e3e176016fc9c8e68e1dd6245ee7338ea12af71183f5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_sample={0x80, 0x12, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x3}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x662, 0xdaa, 0xffffffffffffffff, 0x8, 0xa807}}]}, {0x31, 0x6, "a04e93089126fb36c3994e3bffd86ad6c41427b04aa71165645ccd9fd750e23bab4aa0f3c6a2477eddc777f5b6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0xa4, 0x13, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0x7, 0x3, 0x7, 0x2}, 0x5a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7, 0xdbc6, 0xfffffffffffffff8, 0x401, 0xdbc0}, 0x6a}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x7a1e, 0x0, 0x7fff, 0x80}, 0xfeff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf, 0x1, 0x4, 0x8001, 0x8c}, 0xa26}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x4000810}, 0x20000800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 0s ago: executing program 1 (id=4727): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x158}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x280, 0x30, 0x300, 0x71bd22, 0x25dfdbff, {}, [{0x26c, 0x1, [@m_bpf={0x98, 0x6, 0x0, 0x0, {{0x8}, {0x18, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x5b, 0x6, "bfb48d1c9cbd39c403490f71e7c26903a2429639badf09f7f1460a1a37776d69ba43d012403ff817b805f05e15fda7d5abfefd6f88a71220a3dc2a6660c265b59ed90ce6980eda6d48215f2ed37602646c6855209b52b2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ct={0x138, 0x15, 0x0, 0x0, {{0x7}, {0x44, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x5, 0x3, 0x3, 0x3}}, @TCA_CT_LABELS={0x14, 0x7, "5c593798e071e0bc4efb8aaafda23300"}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}]}, {0xd0, 0x6, "2d5d5cb27836d5dc9cf3ecdb08cc5dd629e1cf9a6aa5d915cc1e8ee87e7f4da5fbceddcac488edc192465d9643af820055d697225633aaeea14c8441d82d0eb28eea68e74ac208a356cdb84f2b9e918c40688f3786124caf0ee47348e6063d70a41f97f29a61d2b0c09d0104440291872c7f1d0ec4d1af46279267d56037b390218c4afef31558a8742220488a6721b6aedb734aecec57f7cc669c4df57165ba2782234ce0d3c5eeb60f0c3335363dd62cb2e3e176016fc9c8e68e1dd6245ee7338ea12af71183f5ca0856cb"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_sample={0x60, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x33, 0x6, "a04e93089126fb36c3994e3bffd86ad6c41427b04aa71165645ccd9fd750e23bab4aa0f3c6a2477eddc777f5b667ab"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x38, 0x1d, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x280}, 0x1, 0x0, 0x0, 0x4000810}, 0x20000800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): 000000000 [ 1817.104400][T21802] R10: 00002000000009c0 R11: 0000000000000246 R12: 0000000000000001 [ 1817.104413][T21802] R13: 0000000000000000 R14: 00007f24683b6080 R15: 00007ffedea13118 [ 1817.104445][T21802] [ 1817.360654][ C1] vkms_vblank_simulate: vblank timer overrun [ 1817.532747][ T1093] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1817.541608][ T6952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1817.551448][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1818.078844][T21760] Bluetooth: hci1: command 0x0c1a tx timeout [ 1818.087045][ T5838] Bluetooth: hci5: command 0x0406 tx timeout [ 1818.573317][ T9928] IPVS: starting estimator thread 0... [ 1819.028805][T21836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4195'. [ 1819.158860][T21834] IPVS: using max 23 ests per chain, 55200 per kthread [ 1820.182659][ T9928] net_ratelimit: 7 callbacks suppressed [ 1820.182681][ T9928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1821.277870][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1822.158156][ T980] TC_ACT_REPEAT abuse ? [ 1822.329892][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1822.593398][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1823.059562][ T10] TC_ACT_REPEAT abuse ? [ 1823.289715][ T6698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1823.302015][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1823.315489][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1823.369415][ T9928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1823.653828][T21892] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4209'. [ 1824.471886][T21898] dlm: non-version read from control device 36 [ 1825.393931][ T5898] net_ratelimit: 1 callbacks suppressed [ 1825.393951][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1826.154649][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1826.262320][T21918] batadv_slave_1: entered promiscuous mode [ 1826.410843][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1826.518863][ T9928] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1826.677720][T21938] dlm: non-version read from control device 36 [ 1827.011439][T21941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4224'. [ 1827.378899][ T9928] usb 6-1: Using ep0 maxpacket: 32 [ 1827.392571][ T9928] usb 6-1: no configurations [ 1827.417580][ T9928] usb 6-1: can't read configurations, error -22 [ 1827.441497][T21947] pimreg: entered allmulticast mode [ 1827.448997][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1827.460151][T21946] pimreg: left allmulticast mode [ 1827.490038][T13324] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1827.665204][T13324] usb 2-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice= e.32 [ 1827.680231][T13324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.688501][T13324] usb 2-1: Product: syz [ 1827.700139][T13324] usb 2-1: Manufacturer: syz [ 1827.704815][T13324] usb 2-1: SerialNumber: syz [ 1827.847656][ T10] TC_ACT_REPEAT abuse ? [ 1828.154097][T13324] usb 2-1: config 0 descriptor?? [ 1828.301560][T13324] pwc: Logitech/Cisco VT Camera webcam detected. [ 1828.471001][T21945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1828.473007][ T9928] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1828.489668][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1828.502481][T21945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1828.531831][T21945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1828.541336][T21945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1828.555977][T13324] pwc: Failed to set LED on/off time (-71) [ 1828.569478][T13324] pwc: send_video_command error -71 [ 1828.579670][T13324] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1828.593588][T13324] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1828.611347][T13324] usb 2-1: USB disconnect, device number 15 [ 1828.649033][ T9928] usb 6-1: Using ep0 maxpacket: 32 [ 1829.067754][ T8686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1829.104489][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1829.114516][T13324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1829.209812][T13324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1829.325018][T21918] batadv_slave_1: left promiscuous mode [ 1829.895145][ T9928] usb 6-1: device descriptor read/all, error -71 [ 1829.962147][ T9928] usb usb6-port1: attempt power cycle [ 1830.427227][T21983] dlm: non-version read from control device 36 [ 1830.685842][T21986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4239'. [ 1830.705747][ T5898] net_ratelimit: 1 callbacks suppressed [ 1830.705768][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1831.168943][ T5898] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1831.348894][ T5898] usb 2-1: device descriptor read/64, error -71 [ 1831.589165][ T5898] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1832.529243][T19016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1832.665894][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1832.752547][ T5898] usb 2-1: device descriptor read/64, error -71 [ 1832.869071][ T5898] usb usb2-port1: attempt power cycle [ 1833.647957][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1834.861829][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1835.669177][ T5898] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1835.766727][T13324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1835.968908][ T9928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1836.019009][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1836.056231][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1836.088187][ T5898] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1836.216689][ T5898] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1836.351463][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1836.605208][ T5898] usb 2-1: config 0 descriptor?? [ 1836.658814][ T10] usb 6-1: new low-speed USB device number 65 using dummy_hcd [ 1836.660962][ T5898] hub 2-1:0.0: USB hub found [ 1837.027965][ T10] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1837.036706][ T10] usb 6-1: config 0 has no interface number 0 [ 1837.604741][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1837.613397][ T5898] hub 2-1:0.0: 14 ports detected [ 1837.644029][T13324] TC_ACT_REPEAT abuse ? [ 1837.752846][ T10] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1837.783370][ T5898] hub 2-1:0.0: config failed, can't get hub status (err -5) [ 1837.818911][ T10] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1837.818963][ T5898] usb 2-1: USB disconnect, device number 19 [ 1837.864658][ T10] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1837.874900][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1837.896219][ T10] usb 6-1: config 0 descriptor?? [ 1837.903107][T22046] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1837.915169][ T10] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1838.057482][T22068] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1838.285240][T22070] FAULT_INJECTION: forcing a failure. [ 1838.285240][T22070] name failslab, interval 1, probability 0, space 0, times 0 [ 1838.409959][T22070] CPU: 0 UID: 0 PID: 22070 Comm: syz.0.4264 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(full) [ 1838.409992][T22070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1838.410004][T22070] Call Trace: [ 1838.410013][T22070] [ 1838.410022][T22070] dump_stack_lvl+0x189/0x250 [ 1838.410062][T22070] ? __pfx____ratelimit+0x10/0x10 [ 1838.410091][T22070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1838.410118][T22070] ? __pfx__printk+0x10/0x10 [ 1838.410147][T22070] ? __pfx___might_resched+0x10/0x10 [ 1838.410173][T22070] ? fs_reclaim_acquire+0x7d/0x100 [ 1838.410206][T22070] should_fail_ex+0x414/0x560 [ 1838.410236][T22070] should_failslab+0xa8/0x100 [ 1838.410264][T22070] __kmalloc_noprof+0xcb/0x4f0 [ 1838.410285][T22070] ? kfree+0x4d/0x440 [ 1838.410303][T22070] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1838.410346][T22070] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1838.410377][T22070] ? tomoyo_domain+0xda/0x130 [ 1838.410411][T22070] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1838.410436][T22070] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1838.410464][T22070] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1838.410489][T22070] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 1838.410512][T22070] ? preempt_schedule_irq+0xde/0x150 [ 1838.410538][T22070] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1838.410563][T22070] ? __schedule+0x16c0/0x4cb0 [ 1838.410598][T22070] ? rcu_read_unlock_special+0x3fe/0x4c0 [ 1838.410648][T22070] ? __rcu_read_unlock+0x84/0xe0 [ 1838.410671][T22070] ? __fget_files+0x2a/0x420 [ 1838.410695][T22070] ? __fget_files+0x3a0/0x420 [ 1838.410719][T22070] ? __fget_files+0x2a/0x420 [ 1838.410749][T22070] security_file_ioctl+0xcb/0x2d0 [ 1838.410777][T22070] __se_sys_ioctl+0x47/0x170 [ 1838.410802][T22070] do_syscall_64+0xfa/0x3b0 [ 1838.410822][T22070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1838.410840][T22070] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1838.410859][T22070] ? clear_bhb_loop+0x60/0xb0 [ 1838.410883][T22070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1838.410903][T22070] RIP: 0033:0x7f8538d8e929 [ 1838.410922][T22070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1838.410939][T22070] RSP: 002b:00007f8539b1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1838.410962][T22070] RAX: ffffffffffffffda RBX: 00007f8538fb6080 RCX: 00007f8538d8e929 [ 1838.410977][T22070] RDX: 0000200000000000 RSI: 0000000000005412 RDI: 0000000000000003 [ 1838.410990][T22070] RBP: 00007f8539b1f090 R08: 0000000000000000 R09: 0000000000000000 [ 1838.411002][T22070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1838.411015][T22070] R13: 0000000000000000 R14: 00007f8538fb6080 R15: 00007ffc6aef85b8 [ 1838.411047][T22070] [ 1838.688098][ C0] vkms_vblank_simulate: vblank timer overrun [ 1838.728037][T22070] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1838.779242][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1838.812755][T22046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1838.824150][T22046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1838.836903][T22046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1838.849346][T22046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1838.883123][T22046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1838.934168][T22046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1838.961302][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1838.969811][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1839.008703][T22046] netlink: 'syz.5.4260': attribute type 3 has an invalid length. [ 1839.139645][ T5945] usb 6-1: USB disconnect, device number 65 [ 1839.193873][T22072] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 1839.618613][T13324] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1839.849509][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1839.929143][ C0] TC_ACT_REPEAT abuse ? [ 1840.179223][T13324] usb 1-1: Using ep0 maxpacket: 32 [ 1840.207703][T13324] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1840.280019][T13324] usb 1-1: config 128 contains an unexpected descriptor of type 0x2, skipping [ 1840.303347][T13324] usb 1-1: config 128 has an invalid descriptor of length 190, skipping remainder of the config [ 1840.324465][T13324] usb 1-1: config 128 has 0 interfaces, different from the descriptor's value: 4 [ 1840.347596][T13324] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1840.362314][T13324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.376199][T13324] usb 1-1: Product: syz [ 1840.385761][T13324] usb 1-1: Manufacturer: syz [ 1840.391453][T13324] usb 1-1: SerialNumber: syz [ 1841.312216][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1841.387338][T13324] usb 1-1: USB disconnect, device number 67 [ 1842.014066][T13324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1842.196098][T22115] 9pnet_fd: Insufficient options for proto=fd [ 1842.440936][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1842.918901][T13324] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1843.119691][T13324] usb 1-1: Using ep0 maxpacket: 16 [ 1843.198668][T13324] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1843.363822][T13324] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1843.723605][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1843.759931][T13324] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1843.766923][T13324] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 1843.776200][T13324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1843.919297][T13324] usb 1-1: config 0 descriptor?? [ 1844.539683][T22141] cgroup: No subsys list or none specified [ 1844.731811][ T9928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1845.071306][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1845.494561][T22147] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4288'. [ 1845.551772][T22153] bridge0: port 3(syz_tun) entered blocking state [ 1845.558700][T22153] bridge0: port 3(syz_tun) entered disabled state [ 1845.565683][T22153] syz_tun: entered allmulticast mode [ 1845.577020][T22153] syz_tun: entered promiscuous mode [ 1845.583618][T22153] bridge0: port 3(syz_tun) entered blocking state [ 1845.590351][T22153] bridge0: port 3(syz_tun) entered forwarding state [ 1845.630127][T22153] netlink: 'syz.1.4291': attribute type 10 has an invalid length. [ 1845.639255][T22153] bridge0: port 3(syz_tun) entered disabled state [ 1845.645979][T22153] bridge0: port 2(bridge_slave_1) entered disabled state [ 1845.653859][T22153] bridge0: port 1(bridge_slave_0) entered disabled state [ 1845.673866][T22153] bridge0: port 3(syz_tun) entered blocking state [ 1845.680583][T22153] bridge0: port 3(syz_tun) entered forwarding state [ 1845.687673][T22153] bridge0: port 2(bridge_slave_1) entered blocking state [ 1845.694913][T22153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1845.702333][T22153] bridge0: port 1(bridge_slave_0) entered blocking state [ 1845.709575][T22153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1845.731600][T22153] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1845.784377][ T9928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1845.809214][T13324] usbhid 1-1:0.0: can't add hid device: -71 [ 1845.823051][T13324] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1845.865354][T13324] usb 1-1: USB disconnect, device number 68 [ 1845.886437][T22155] bridge0: port 3(syz_tun) entered blocking state [ 1845.897534][T22155] bridge0: port 3(syz_tun) entered disabled state [ 1845.904361][T22155] syz_tun: entered allmulticast mode [ 1845.923123][T22155] syz_tun: entered promiscuous mode [ 1845.938045][T22155] bridge0: port 3(syz_tun) entered blocking state [ 1845.944711][T22155] bridge0: port 3(syz_tun) entered forwarding state [ 1845.997073][T22155] netlink: 'syz.0.4292': attribute type 10 has an invalid length. [ 1846.007785][T22155] bridge0: port 3(syz_tun) entered disabled state [ 1846.014488][T22155] bridge0: port 2(bridge_slave_1) entered disabled state [ 1846.021793][T22155] bridge0: port 1(bridge_slave_0) entered disabled state [ 1846.036072][T22155] bridge0: port 3(syz_tun) entered blocking state [ 1846.042816][T22155] bridge0: port 3(syz_tun) entered forwarding state [ 1846.049860][T22155] bridge0: port 2(bridge_slave_1) entered blocking state [ 1846.057140][T22155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1846.064778][T22155] bridge0: port 1(bridge_slave_0) entered blocking state [ 1846.072078][T22155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1846.186431][T22155] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1846.944679][ T9928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1846.982628][T13324] TC_ACT_REPEAT abuse ? [ 1847.635102][ T10] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 1847.844868][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1847.873078][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1847.898209][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1847.955391][ T10] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1847.968979][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.977271][ T10] usb 1-1: Product: syz [ 1847.981568][ T10] usb 1-1: Manufacturer: syz [ 1847.986191][ T10] usb 1-1: SerialNumber: syz [ 1847.994310][ T10] usb 1-1: config 0 descriptor?? [ 1848.000387][T22166] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1848.008205][T22166] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1848.032031][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1848.170074][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1848.219931][ T10] usb 1-1: ucan: probing device on interface #0 [ 1848.991418][T13324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1849.082133][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1849.355127][ T10] usb 1-1: ucan: failed to retrieve device info [ 1849.373773][ T10] usb 1-1: ucan: probe failed; try to update the device firmware [ 1849.424067][ T10] usb 1-1: USB disconnect, device number 69 [ 1850.089288][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1850.241490][T22192] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4300'. [ 1850.254468][T22192] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1850.266037][T22192] fuse: Bad value for 'fd' [ 1851.209601][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1851.345287][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1852.324575][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1853.371630][T19016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1853.381195][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.429010][ T5945] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1853.659677][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1853.788942][ T5945] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1853.798187][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.926630][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1853.976802][ T5945] usb 1-1: config 0 descriptor?? [ 1854.410406][ T9928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1854.418627][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1854.718030][T22212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1854.769551][T22212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1854.800259][ T5945] usbhid 1-1:0.0: can't add hid device: -71 [ 1854.806407][ T5945] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1854.839849][ T5945] usb 1-1: USB disconnect, device number 70 [ 1855.017804][T22241] netlink: 'syz.6.4318': attribute type 30 has an invalid length. [ 1855.086834][T22217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4311'. [ 1855.102324][T22217] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 1855.113973][T22217] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 1855.391946][T22250] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4322'. [ 1855.450483][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1855.460985][T22250] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode [ 1856.499394][T19016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1856.569453][T13324] TC_ACT_REPEAT abuse ? [ 1857.009435][ T980] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1857.169084][ T980] usb 4-1: Using ep0 maxpacket: 32 [ 1857.333995][ T980] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1857.362239][ T980] usb 4-1: config 128 contains an unexpected descriptor of type 0x2, skipping [ 1857.377039][ T980] usb 4-1: config 128 has an invalid descriptor of length 190, skipping remainder of the config [ 1857.397468][ T980] usb 4-1: config 128 has 0 interfaces, different from the descriptor's value: 4 [ 1857.411743][ T980] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1857.427061][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1857.435769][ T980] usb 4-1: Product: syz [ 1857.444449][ T980] usb 4-1: Manufacturer: syz [ 1857.450028][T13324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1857.464888][ T980] usb 4-1: SerialNumber: syz [ 1857.530951][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1857.708276][ T980] usb 4-1: USB disconnect, device number 36 [ 1857.945911][T22308] random: crng reseeded on system resumption [ 1858.011412][T22309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1858.019517][T22309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1858.130580][T13324] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1858.221447][T22309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1858.229357][T22309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1858.579086][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1859.015278][T13324] usb 1-1: Using ep0 maxpacket: 32 [ 1859.054279][T13324] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1859.066014][T13324] usb 1-1: config 0 has no interface number 0 [ 1859.075993][T13324] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1859.090627][T13324] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1859.136377][T13324] usb 1-1: Product: syz [ 1859.285884][T13324] usb 1-1: Manufacturer: syz [ 1859.294867][T13324] usb 1-1: SerialNumber: syz [ 1859.313777][T22317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1859.314132][T13324] usb 1-1: config 0 descriptor?? [ 1859.322334][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1859.450207][T22317] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1859.885581][T13324] smsc95xx v2.0.0 [ 1860.072651][T22315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1860.082911][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1860.106662][T19016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1860.149104][T22315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1860.508095][T22335] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4345'. [ 1860.642012][T22335] team0: No ports can be present during mode change [ 1860.661531][T13324] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1860.693993][T13324] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1861.121533][T13324] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 1861.688661][T13324] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 1861.702531][T13324] usb 1-1: USB disconnect, device number 71 [ 1861.808840][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 1861.808857][ T30] audit: type=1326 audit(1750557413.389:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22340 comm="syz.3.4347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246818e929 code=0x7ffc0000 [ 1861.955847][ T30] audit: type=1326 audit(1750557413.479:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22340 comm="syz.3.4347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246818e929 code=0x7ffc0000 [ 1862.086126][ T30] audit: type=1326 audit(1750557413.489:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22340 comm="syz.3.4347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f246818e929 code=0x7ffc0000 [ 1862.126855][ T30] audit: type=1326 audit(1750557413.489:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22340 comm="syz.3.4347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246818e929 code=0x7ffc0000 [ 1862.148757][ T30] audit: type=1326 audit(1750557413.489:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22340 comm="syz.3.4347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f246818e929 code=0x7ffc0000 [ 1862.222866][ T30] audit: type=1326 audit(1750557413.489:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22340 comm="syz.3.4347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246818e929 code=0x7ffc0000 [ 1862.319684][ T30] audit: type=1326 audit(1750557413.489:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22340 comm="syz.3.4347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f246818e929 code=0x7ffc0000 [ 1862.346808][ T30] audit: type=1326 audit(1750557413.489:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22340 comm="syz.3.4347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246818e929 code=0x7ffc0000 [ 1862.377341][ T30] audit: type=1326 audit(1750557413.489:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22340 comm="syz.3.4347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7f246818e929 code=0x7ffc0000 [ 1862.463642][ T30] audit: type=1326 audit(1750557413.489:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22340 comm="syz.3.4347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246818e929 code=0x7ffc0000 [ 1862.561629][T22360] binder: 22356:22360 ioctl c018620b 200000000700 returned -14 [ 1863.159030][T22365] overlay: ./file0 is not a directory [ 1863.546376][ T5945] net_ratelimit: 3 callbacks suppressed [ 1863.546399][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1863.707715][T13324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1863.716383][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1864.569343][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1865.329934][T22388] No control pipe specified [ 1865.609368][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1866.755188][ T9928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1866.767417][ T5915] TC_ACT_REPEAT abuse ? [ 1866.775393][T13324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1867.179578][ T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1867.648801][ T10] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1867.766551][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1867.813602][ T10] usb 2-1: Product: syz [ 1867.833611][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1867.842777][ T10] usb 2-1: Manufacturer: syz [ 1867.864149][ T10] usb 2-1: SerialNumber: syz [ 1867.933510][ T10] usb 2-1: config 0 descriptor?? [ 1868.563269][ T10] usb 2-1: Firmware: major: 0, minor: 1, hardware type: ATUSB (1) [ 1868.582944][ T10] usb 2-1: Firmware version (0.1) predates our first public release. [ 1868.599940][ T10] usb 2-1: Please update to version 0.2 or newer [ 1868.854559][ T10] usb 2-1: USB disconnect, device number 20 [ 1868.899780][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1869.403376][T22440] (syz.0.4376,22440,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1869.452249][T22440] (syz.0.4376,22440,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 1869.769255][T13324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1870.486818][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1870.559034][ T5945] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 1870.649254][ C0] TC_ACT_REPEAT abuse ? [ 1870.720470][ T5945] usb 6-1: Using ep0 maxpacket: 8 [ 1870.789192][ T5945] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1870.811653][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1870.829885][ T5945] usb 6-1: Product: syz [ 1870.834360][ T5945] usb 6-1: Manufacturer: syz [ 1870.864873][ T5945] usb 6-1: SerialNumber: syz [ 1870.888382][ T5945] usb 6-1: config 0 descriptor?? [ 1870.911570][ T5945] gspca_main: se401-2.14.0 probing 047d:5003 [ 1871.136844][ T5898] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1871.685901][ T9928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1871.720880][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1871.769972][ T5898] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1871.797720][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1871.848081][ T5898] usb 1-1: config 0 descriptor?? [ 1871.854272][T22465] FAULT_INJECTION: forcing a failure. [ 1871.854272][T22465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1871.899095][T22465] CPU: 1 UID: 0 PID: 22465 Comm: syz.1.4383 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(full) [ 1871.899132][T22465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1871.899145][T22465] Call Trace: [ 1871.899154][T22465] [ 1871.899163][T22465] dump_stack_lvl+0x189/0x250 [ 1871.899198][T22465] ? __pfx____ratelimit+0x10/0x10 [ 1871.899228][T22465] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1871.899257][T22465] ? __pfx__printk+0x10/0x10 [ 1871.899292][T22465] should_fail_ex+0x414/0x560 [ 1871.899322][T22465] _copy_to_user+0x31/0xb0 [ 1871.899345][T22465] simple_read_from_buffer+0xe1/0x170 [ 1871.899375][T22465] proc_fail_nth_read+0x1df/0x250 [ 1871.899407][T22465] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1871.899439][T22465] ? rw_verify_area+0x258/0x650 [ 1871.899461][T22465] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1871.899490][T22465] vfs_read+0x200/0x980 [ 1871.899518][T22465] ? __pfx___mutex_lock+0x10/0x10 [ 1871.899549][T22465] ? __pfx_vfs_read+0x10/0x10 [ 1871.899573][T22465] ? __fget_files+0x2a/0x420 [ 1871.899605][T22465] ? __fget_files+0x3a0/0x420 [ 1871.899629][T22465] ? __fget_files+0x2a/0x420 [ 1871.899665][T22465] ksys_read+0x145/0x250 [ 1871.899684][T22465] ? __fget_files+0x2a/0x420 [ 1871.899711][T22465] ? __pfx_ksys_read+0x10/0x10 [ 1871.899740][T22465] ? do_syscall_64+0xbe/0x3b0 [ 1871.899763][T22465] do_syscall_64+0xfa/0x3b0 [ 1871.899779][T22465] ? lockdep_hardirqs_on+0x9c/0x150 [ 1871.899806][T22465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1871.899826][T22465] ? clear_bhb_loop+0x60/0xb0 [ 1871.899850][T22465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1871.899869][T22465] RIP: 0033:0x7f1c7878d33c [ 1871.899889][T22465] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1871.899906][T22465] RSP: 002b:00007f1c796d4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1871.899928][T22465] RAX: ffffffffffffffda RBX: 00007f1c789b5fa0 RCX: 00007f1c7878d33c [ 1871.899943][T22465] RDX: 000000000000000f RSI: 00007f1c796d40a0 RDI: 0000000000000004 [ 1871.899955][T22465] RBP: 00007f1c796d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1871.899968][T22465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1871.899981][T22465] R13: 0000000000000000 R14: 00007f1c789b5fa0 R15: 00007ffe21321458 [ 1871.900014][T22465] [ 1872.160578][T22467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1872.169308][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1872.209472][T22467] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1872.217927][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1872.477401][T22458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1872.577175][T22458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1872.729890][T19016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1872.866919][T22458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1872.986877][T22458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1873.422046][ T5945] gspca_se401: read req failed req 0x06 error -19 [ 1873.431004][ T5898] usbhid 1-1:0.0: can't add hid device: -71 [ 1873.437381][ T5898] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1873.447799][ T5945] usb 6-1: USB disconnect, device number 66 [ 1873.456779][ T5898] usb 1-1: USB disconnect, device number 72 [ 1873.611800][T22482] netlink: 'syz.6.4390': attribute type 25 has an invalid length. [ 1873.620736][T22482] netlink: 'syz.6.4390': attribute type 8 has an invalid length. [ 1873.997598][ T5905] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1874.036579][ T5905] dvb_usb_az6027 7-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1874.269527][ T5905] usb 7-1: USB disconnect, device number 96 [ 1875.787862][ T980] net_ratelimit: 3 callbacks suppressed [ 1875.787877][ T980] TC_ACT_REPEAT abuse ? [ 1875.799079][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1875.849034][T13324] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1876.319083][ T980] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1876.509445][ T980] usb 1-1: Using ep0 maxpacket: 32 [ 1876.591004][ T980] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1876.677549][ T980] usb 1-1: config 128 contains an unexpected descriptor of type 0x2, skipping [ 1876.777627][ T980] usb 1-1: config 128 has an invalid descriptor of length 190, skipping remainder of the config [ 1876.815397][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1876.868279][ T980] usb 1-1: config 128 has 0 interfaces, different from the descriptor's value: 4 [ 1876.905470][T22510] input: syz1 as /devices/virtual/input/input104 [ 1876.926677][ T980] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1876.957759][ T980] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1876.966743][ T980] usb 1-1: Product: syz [ 1876.974594][ T980] usb 1-1: Manufacturer: syz [ 1876.979453][ T980] usb 1-1: SerialNumber: syz [ 1877.803360][T22511] ALSA: mixer_oss: invalid OSS volume '' [ 1877.899208][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1877.928534][ T980] usb 1-1: USB disconnect, device number 73 [ 1877.979797][T22517] FAULT_INJECTION: forcing a failure. [ 1877.979797][T22517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1877.993331][T22517] CPU: 0 UID: 0 PID: 22517 Comm: syz.3.4401 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(full) [ 1877.993360][T22517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1877.993373][T22517] Call Trace: [ 1877.993383][T22517] [ 1877.993392][T22517] dump_stack_lvl+0x189/0x250 [ 1877.993425][T22517] ? __pfx____ratelimit+0x10/0x10 [ 1877.993454][T22517] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1877.993482][T22517] ? __pfx__printk+0x10/0x10 [ 1877.993503][T22517] ? __might_fault+0xb0/0x130 [ 1877.993541][T22517] should_fail_ex+0x414/0x560 [ 1877.993571][T22517] _copy_from_user+0x2d/0xb0 [ 1877.993593][T22517] ___sys_sendmsg+0x158/0x2a0 [ 1877.993621][T22517] ? __pfx____sys_sendmsg+0x10/0x10 [ 1877.993692][T22517] ? __might_fault+0xb0/0x130 [ 1877.993726][T22517] __sys_sendmmsg+0x227/0x430 [ 1877.993757][T22517] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1877.993779][T22517] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1877.993839][T22517] ? ksys_write+0x22a/0x250 [ 1877.993866][T22517] ? __pfx_ksys_write+0x10/0x10 [ 1877.993895][T22517] __x64_sys_sendmmsg+0xa0/0xc0 [ 1877.993919][T22517] do_syscall_64+0xfa/0x3b0 [ 1877.993936][T22517] ? lockdep_hardirqs_on+0x9c/0x150 [ 1877.993962][T22517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1877.993982][T22517] ? clear_bhb_loop+0x60/0xb0 [ 1877.994006][T22517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1877.994025][T22517] RIP: 0033:0x7f246818e929 [ 1877.994044][T22517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1877.994061][T22517] RSP: 002b:00007f2469019038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1877.994084][T22517] RAX: ffffffffffffffda RBX: 00007f24683b6080 RCX: 00007f246818e929 [ 1877.994098][T22517] RDX: 03fffffffffffe3d RSI: 0000200000003e40 RDI: 0000000000000007 [ 1877.994112][T22517] RBP: 00007f2469019090 R08: 0000000000000000 R09: 0000000000000000 [ 1877.994124][T22517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1877.994136][T22517] R13: 0000000000000000 R14: 00007f24683b6080 R15: 00007ffedea13118 [ 1877.994178][T22517] [ 1878.979613][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1878.987937][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1880.009520][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1881.131261][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1882.179355][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1882.320938][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1882.498797][ T5945] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 1883.159993][T22533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4408'. [ 1883.190209][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1883.218764][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1883.241872][ T5945] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1883.449180][ T5945] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1883.466594][ T5945] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1883.542121][ T5945] usb 7-1: config 0 descriptor?? [ 1883.884109][T22550] ALSA: mixer_oss: invalid OSS volume '' [ 1883.890161][T22550] ALSA: mixer_oss: invalid OSS volume 'IGAI' [ 1884.090086][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1884.249247][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1884.510795][T22523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1884.692311][T22523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1884.751594][T22523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1884.806593][T22523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1884.896288][ T5945] usbhid 7-1:0.0: can't add hid device: -71 [ 1884.919866][ T5945] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1884.961227][ T5945] usb 7-1: USB disconnect, device number 97 [ 1885.093062][T22552] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4413'. [ 1885.371026][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1885.402515][ T980] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1885.420393][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1885.429350][ T10] TC_ACT_REPEAT abuse ? [ 1886.411336][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1886.428935][ T980] usb 2-1: Using ep0 maxpacket: 32 [ 1886.459380][ T980] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1886.578877][ T980] usb 2-1: config 128 contains an unexpected descriptor of type 0x2, skipping [ 1886.588035][ T980] usb 2-1: config 128 has an invalid descriptor of length 190, skipping remainder of the config [ 1886.609029][ T980] usb 2-1: config 128 has 0 interfaces, different from the descriptor's value: 4 [ 1886.631296][ T980] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1886.643440][ T980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1886.653021][ T980] usb 2-1: Product: syz [ 1886.668497][ T980] usb 2-1: Manufacturer: syz [ 1886.673344][ T980] usb 2-1: SerialNumber: syz [ 1887.466801][T22588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4422'. [ 1887.544289][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1887.839986][ T980] usb 2-1: USB disconnect, device number 21 [ 1888.491509][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1888.525063][T22598] IPVS: ovf: UDP 224.0.0.2:20004 - no destination available [ 1888.571786][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1888.801581][T22606] 9pnet_fd: Insufficient options for proto=fd [ 1888.850003][T22606] syz.3.4431: attempt to access beyond end of device [ 1888.850003][T22606] loop3: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 1888.863687][T22606] gfs2: error -5 reading superblock [ 1890.118091][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1891.139900][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1891.358998][ T980] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1891.633745][T22625] 9pnet_fd: Insufficient options for proto=fd [ 1891.642046][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1891.790716][T22599] ALSA: mixer_oss: invalid OSS volume '' [ 1892.170650][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1892.424272][ T5814] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1892.441155][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1892.468867][ T10] usb 7-1: new low-speed USB device number 98 using dummy_hcd [ 1892.478319][ T980] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1892.487869][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1892.610882][ T980] usb 2-1: config 0 descriptor?? [ 1892.767221][T22635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1892.808272][T22635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1892.861791][T22639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4437'. [ 1893.130084][T22635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1893.389410][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1893.444605][T22635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1893.453283][T22635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1893.483620][T22635] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1893.502661][T22617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1893.538555][T22617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1893.624525][T22617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1893.638582][T22617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1893.699686][ T980] usbhid 2-1:0.0: can't add hid device: -71 [ 1893.717527][ T980] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1893.737421][ T980] usb 2-1: USB disconnect, device number 22 [ 1894.545517][ T5945] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1894.609035][ T5898] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 1894.819544][ T5945] usb 4-1: Using ep0 maxpacket: 32 [ 1894.848474][ T5898] usb 7-1: Using ep0 maxpacket: 32 [ 1894.860629][ T5945] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1894.878826][ T5898] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1894.896135][ T5898] usb 7-1: config 128 contains an unexpected descriptor of type 0x2, skipping [ 1894.908324][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1894.917992][ T5898] usb 7-1: config 128 has an invalid descriptor of length 190, skipping remainder of the config [ 1894.934746][ T5945] usb 4-1: config 0 descriptor?? [ 1894.946459][ T5898] usb 7-1: config 128 has 0 interfaces, different from the descriptor's value: 4 [ 1894.959620][ T5945] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1894.981924][ T5898] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1894.995984][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1895.004311][ T5898] usb 7-1: Product: syz [ 1895.008656][ T5898] usb 7-1: Manufacturer: syz [ 1895.017804][ T5898] usb 7-1: SerialNumber: syz [ 1895.188677][T22670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4450'. [ 1895.680932][ T5945] gspca_sq930x: ucbus_write failed -110 [ 1895.931492][ T5945] sq930x 4-1:0.0: probe with driver sq930x failed with error -110 [ 1895.968505][ T5898] usb 7-1: USB disconnect, device number 99 [ 1896.104512][T22679] dlm: non-version read from control device 36 [ 1896.955850][ T5945] net_ratelimit: 6 callbacks suppressed [ 1896.955872][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1896.988075][T22668] block nbd1: shutting down sockets [ 1897.689106][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1897.797187][T22692] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4453'. [ 1898.485182][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1898.581206][ T10] usb 4-1: USB disconnect, device number 37 [ 1899.353355][T22712] TC_ACT_REPEAT abuse ? [ 1899.419062][ T5898] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 1899.450415][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1899.632373][ T9928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1900.097525][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1900.171049][ T5898] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1900.231958][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.294072][ T5898] usb 6-1: config 0 descriptor?? [ 1900.579138][ T5915] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1900.652485][ T9928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1900.729071][ T5915] usb 4-1: Using ep0 maxpacket: 32 [ 1900.734437][T22699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1900.743879][T22699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1900.790140][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1900.813045][ T5915] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1900.888640][ T5915] usb 4-1: config 128 contains an unexpected descriptor of type 0x2, skipping [ 1900.897892][ T5915] usb 4-1: config 128 has an invalid descriptor of length 190, skipping remainder of the config [ 1900.939170][ T5915] usb 4-1: config 128 has 0 interfaces, different from the descriptor's value: 4 [ 1901.357725][ T5915] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1901.366914][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.375090][ T5915] usb 4-1: Product: syz [ 1901.379397][ T5915] usb 4-1: Manufacturer: syz [ 1901.384799][ T5915] usb 4-1: SerialNumber: syz [ 1901.386678][T22699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1901.471717][T22699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1901.661402][ T5915] usb 4-1: USB disconnect, device number 38 [ 1901.688631][ T5898] usbhid 6-1:0.0: can't add hid device: -71 [ 1901.695066][ T9928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1901.708893][ T5898] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1901.729354][ T5898] usb 6-1: USB disconnect, device number 67 [ 1901.921300][T22738] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1902.176990][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 1902.177010][ T30] audit: type=1326 audit(1750557453.789:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22744 comm="syz.0.4469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8538d8e929 code=0x7ffc0000 [ 1902.221507][ T30] audit: type=1326 audit(1750557453.789:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22744 comm="syz.0.4469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8538d8e929 code=0x7ffc0000 [ 1902.249031][ T30] audit: type=1326 audit(1750557453.789:869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22744 comm="syz.0.4469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8538d8e929 code=0x7ffc0000 [ 1902.274757][ T30] audit: type=1326 audit(1750557453.789:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22744 comm="syz.0.4469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f8538d8e929 code=0x7ffc0000 [ 1902.296929][ T30] audit: type=1326 audit(1750557453.789:871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22744 comm="syz.0.4469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8538d8e929 code=0x7ffc0000 [ 1902.412893][T22747] sp0: Synchronizing with TNC [ 1902.433988][T22747] sp0: Found TNC [ 1902.818454][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1903.047940][T22761] TC_ACT_REPEAT abuse ? [ 1903.669444][T22766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4476'. [ 1903.974980][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1903.983303][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1904.009973][T22774] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4479'. [ 1904.120519][ T30] audit: type=1326 audit(1750557455.739:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22779 comm="syz.3.4481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246818e929 code=0x7ffc0000 [ 1904.144830][T22781] FAULT_INJECTION: forcing a failure. [ 1904.144830][T22781] name failslab, interval 1, probability 0, space 0, times 0 [ 1904.158974][T22781] CPU: 1 UID: 0 PID: 22781 Comm: syz.0.4471 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(full) [ 1904.159002][T22781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1904.159015][T22781] Call Trace: [ 1904.159024][T22781] [ 1904.159033][T22781] dump_stack_lvl+0x189/0x250 [ 1904.159067][T22781] ? __pfx____ratelimit+0x10/0x10 [ 1904.159096][T22781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1904.159123][T22781] ? __pfx__printk+0x10/0x10 [ 1904.159151][T22781] ? __pfx___might_resched+0x10/0x10 [ 1904.159184][T22781] should_fail_ex+0x414/0x560 [ 1904.159215][T22781] should_failslab+0xa8/0x100 [ 1904.159242][T22781] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 1904.159268][T22781] ? __get_vm_area_node+0x13f/0x300 [ 1904.159298][T22781] __get_vm_area_node+0x13f/0x300 [ 1904.159328][T22781] __vmalloc_node_range_noprof+0x301/0x12f0 [ 1904.159354][T22781] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 1904.159383][T22781] ? preempt_schedule_common+0x83/0xd0 [ 1904.159439][T22781] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1904.159466][T22781] ? __might_fault+0xb0/0x130 [ 1904.159497][T22781] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 1904.159521][T22781] __vmalloc_noprof+0xb1/0xf0 [ 1904.159545][T22781] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 1904.159575][T22781] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 1904.159606][T22781] bpf_prog_alloc+0x3c/0x1a0 [ 1904.159635][T22781] __get_filter+0xff/0x400 [ 1904.159669][T22781] sk_reuseport_attach_filter+0x24/0x210 [ 1904.159701][T22781] sk_setsockopt+0x209a/0x2d30 [ 1904.159732][T22781] ? __pfx_sk_setsockopt+0x10/0x10 [ 1904.159754][T22781] ? vfs_write+0x8d8/0xa90 [ 1904.159794][T22781] ? __lock_acquire+0xab9/0xd20 [ 1904.159831][T22781] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1904.159860][T22781] do_sock_setsockopt+0x201/0x3e0 [ 1904.159887][T22781] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1904.159916][T22781] ? __fget_files+0x2a/0x420 [ 1904.159965][T22781] __x64_sys_setsockopt+0x18b/0x220 [ 1904.159997][T22781] do_syscall_64+0xfa/0x3b0 [ 1904.160014][T22781] ? lockdep_hardirqs_on+0x9c/0x150 [ 1904.160042][T22781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1904.160061][T22781] ? clear_bhb_loop+0x60/0xb0 [ 1904.160085][T22781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1904.160105][T22781] RIP: 0033:0x7f8538d8e929 [ 1904.160123][T22781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1904.160140][T22781] RSP: 002b:00007f8536bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1904.160162][T22781] RAX: ffffffffffffffda RBX: 00007f8538fb6160 RCX: 00007f8538d8e929 [ 1904.160176][T22781] RDX: 0000000000000033 RSI: 0000000000000001 RDI: 0000000000000003 [ 1904.160189][T22781] RBP: 00007f8536bf6090 R08: 0000000000000010 R09: 0000000000000000 [ 1904.160202][T22781] R10: 00002000000a2000 R11: 0000000000000246 R12: 0000000000000001 [ 1904.160215][T22781] R13: 0000000000000001 R14: 00007f8538fb6160 R15: 00007ffc6aef85b8 [ 1904.160249][T22781] [ 1904.161219][T22781] syz.0.4471: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null) [ 1904.407815][ T5915] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1904.413450][T22781] ,cpuset= [ 1904.446657][ T6698] Bluetooth: (null): Too short H5 packet [ 1904.455580][T22781] /,mems_allowed=0-1 [ 1904.493358][T22781] CPU: 1 UID: 0 PID: 22781 Comm: syz.0.4471 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(full) [ 1904.493385][T22781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1904.493396][T22781] Call Trace: [ 1904.493405][T22781] [ 1904.493414][T22781] dump_stack_lvl+0x189/0x250 [ 1904.493446][T22781] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 1904.493471][T22781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1904.493499][T22781] ? __pfx__printk+0x10/0x10 [ 1904.493520][T22781] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1904.493551][T22781] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1904.493590][T22781] warn_alloc+0x214/0x310 [ 1904.493624][T22781] ? __pfx_warn_alloc+0x10/0x10 [ 1904.493653][T22781] ? __get_vm_area_node+0x13f/0x300 [ 1904.493682][T22781] ? __get_vm_area_node+0x2b5/0x300 [ 1904.493724][T22781] __vmalloc_node_range_noprof+0x326/0x12f0 [ 1904.493752][T22781] ? preempt_schedule_common+0x83/0xd0 [ 1904.493810][T22781] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1904.493838][T22781] ? __might_fault+0xb0/0x130 [ 1904.493868][T22781] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 1904.493893][T22781] __vmalloc_noprof+0xb1/0xf0 [ 1904.493917][T22781] ? bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 1904.493946][T22781] bpf_prog_alloc_no_stats+0x4a/0x4e0 [ 1904.493974][T22781] bpf_prog_alloc+0x3c/0x1a0 [ 1904.494003][T22781] __get_filter+0xff/0x400 [ 1904.494035][T22781] sk_reuseport_attach_filter+0x24/0x210 [ 1904.494067][T22781] sk_setsockopt+0x209a/0x2d30 [ 1904.494101][T22781] ? __pfx_sk_setsockopt+0x10/0x10 [ 1904.494122][T22781] ? vfs_write+0x8d8/0xa90 [ 1904.494162][T22781] ? __lock_acquire+0xab9/0xd20 [ 1904.494198][T22781] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1904.494225][T22781] do_sock_setsockopt+0x201/0x3e0 [ 1904.494251][T22781] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1904.494278][T22781] ? __fget_files+0x2a/0x420 [ 1904.494311][T22781] __x64_sys_setsockopt+0x18b/0x220 [ 1904.494341][T22781] do_syscall_64+0xfa/0x3b0 [ 1904.494356][T22781] ? lockdep_hardirqs_on+0x9c/0x150 [ 1904.494383][T22781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1904.494403][T22781] ? clear_bhb_loop+0x60/0xb0 [ 1904.494428][T22781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1904.494446][T22781] RIP: 0033:0x7f8538d8e929 [ 1904.494466][T22781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1904.494483][T22781] RSP: 002b:00007f8536bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1904.494504][T22781] RAX: ffffffffffffffda RBX: 00007f8538fb6160 RCX: 00007f8538d8e929 [ 1904.494519][T22781] RDX: 0000000000000033 RSI: 0000000000000001 RDI: 0000000000000003 [ 1904.494531][T22781] RBP: 00007f8536bf6090 R08: 0000000000000010 R09: 0000000000000000 [ 1904.494543][T22781] R10: 00002000000a2000 R11: 0000000000000246 R12: 0000000000000001 [ 1904.494556][T22781] R13: 0000000000000001 R14: 00007f8538fb6160 R15: 00007ffc6aef85b8 [ 1904.494590][T22781] [ 1904.494598][T22781] Mem-Info: [ 1904.502479][ T6698] Bluetooth: (null): Invalid header checksum [ 1904.506883][T22781] active_anon:14 inactive_anon:10320 isolated_anon:0 [ 1904.506883][T22781] active_file:6093 inactive_file:9135 isolated_file:0 [ 1904.506883][T22781] unevictable:768 dirty:100 writeback:0 [ 1904.506883][T22781] slab_reclaimable:11778 slab_unreclaimable:104549 [ 1904.506883][T22781] mapped:36143 shmem:7136 pagetables:1061 [ 1904.506883][T22781] sec_pagetables:0 bounce:0 [ 1904.506883][T22781] kernel_misc_reclaimable:0 [ 1904.506883][T22781] free:1337458 free_pcp:9105 free_cma:0 [ 1904.564512][ T6698] Bluetooth: (null): Invalid header checksum [ 1904.681222][T22781] Node 0 active_anon:56kB inactive_anon:29780kB active_file:24372kB inactive_file:36404kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133172kB dirty:400kB writeback:0kB shmem:15608kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11372kB pagetables:4104kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1904.773841][ T6698] Bluetooth: (null): Invalid header checksum [ 1904.775563][T22781] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1904.848323][ T5915] usb 2-1: Using ep0 maxpacket: 32 [ 1904.854284][T22781] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1904.854349][T22781] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 1904.854397][T22781] Node 0 DMA32 free:1421088kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:29684kB active_file:22812kB inactive_file:36360kB unevictable:1536kB writepending:400kB present:3129332kB managed:2561488kB mlocked:0kB bounce:0kB free_pcp:30452kB local_pcp:16000kB free_cma:0kB [ 1904.854455][T22781] lowmem_reserve[]: 0 0 1 1 1 [ 1904.854500][T22781] Node 0 Normal free:12kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:196kB active_file:1560kB inactive_file:44kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:84kB local_pcp:32kB free_cma:0kB [ 1904.854556][T22781] lowmem_reserve[]: 0 0 0 0 0 [ 1904.854603][T22781] Node 1 Normal free:3921372kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:8868kB local_pcp:0kB free_cma:0kB [ 1904.854659][T22781] lowmem_reserve[]: 0 0 0 0 0 [ 1904.854706][T22781] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB [ 1904.901276][ T6698] Bluetooth: (null): Invalid header checksum [ 1904.929903][T22781] (M) 3*4096kB (M) = 15360kB [ 1904.929946][T22781] Node 0 DMA32: 1192*4kB (UM) 826*8kB (UME) 473*16kB (UME) 565*32kB (UME) 275*64kB (UM) 164*128kB (UME) 106*256kB (M) 69*512kB (UM) 59*1024kB (UME) 19*2048kB (UME) 289*4096kB (UM) = 1421152kB [ 1904.930157][T22781] Node 0 Normal: 4*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1904.930287][T22781] Node 1 Normal: 3*4kB (ME) 4*8kB (ME) 43*16kB (UME) 216*32kB (UME) 88*64kB (UME) 40*128kB (UME) 8*256kB (UM) 1*512kB (M) 1*1024kB [ 1904.949799][ T5915] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1904.966041][T22781] (M) 2*2048kB (UM) [ 1905.078367][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1905.079307][ T10] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 1905.083642][T22781] 951*4096kB [ 1905.178626][ T5814] TC_ACT_REPEAT abuse ? [ 1905.178661][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1905.199783][ T30] audit: type=1326 audit(1750557456.049:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22779 comm="syz.3.4481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f246818e929 code=0x7ffc0000 [ 1905.221931][ T30] audit: type=1326 audit(1750557456.049:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22779 comm="syz.3.4481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246818e929 code=0x7ffc0000 [ 1905.243656][T22781] (ME) = 3921372kB [ 1905.247426][T22781] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1905.257094][T22781] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1905.267021][T22781] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1905.278747][T22781] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1905.288175][T22781] 19497 total pagecache pages [ 1905.293005][T22781] 0 pages in swap cache [ 1905.297190][T22781] Free swap = 124996kB [ 1905.301414][T22781] Total swap = 124996kB [ 1905.305774][T22781] 2097051 pages RAM [ 1905.309622][T22781] 0 pages HighMem/MovableOnly [ 1905.314311][T22781] 424572 pages reserved [ 1905.318479][T22781] 0 pages cma reserved [ 1905.426738][ T30] audit: type=1326 audit(1750557456.049:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22779 comm="syz.3.4481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246818e929 code=0x7ffc0000 [ 1905.453741][ T30] audit: type=1326 audit(1750557456.049:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22779 comm="syz.3.4481" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f246818e929 code=0x7ffc0000 [ 1905.456665][ T5915] usb 2-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1905.492946][ T5898] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1905.500829][ T6698] Bluetooth: (null): Invalid header checksum [ 1905.507080][ T6698] Bluetooth: (null): Invalid header checksum [ 1905.513310][ T6698] Bluetooth: (null): Invalid header checksum [ 1905.519709][ T6698] Bluetooth: (null): Invalid header checksum [ 1905.525925][ T6698] Bluetooth: (null): Invalid header checksum [ 1905.526452][T22789] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4484'. [ 1905.532225][ T5915] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1905.541524][T22789] openvswitch: netlink: Flow actions attr not present in new flow. [ 1905.563910][ T6698] Bluetooth: (null): Invalid header checksum [ 1905.573831][ T6698] Bluetooth: (null): Invalid header checksum [ 1905.581228][ T6698] Bluetooth: (null): Invalid header checksum [ 1905.589248][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1905.600538][ T10] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1905.609777][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1905.618909][ T6698] Bluetooth: (null): Invalid header checksum [ 1905.620269][ T5915] usb 2-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.40 [ 1905.626756][ T6698] Bluetooth: (null): Invalid header checksum [ 1905.635650][ T5915] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1905.649355][ T7076] Bluetooth: (null): Invalid header checksum [ 1905.654511][ T10] usb 7-1: config 0 descriptor?? [ 1905.658957][ T5898] usb 6-1: Using ep0 maxpacket: 32 [ 1905.660987][ T5915] usb 2-1: Product: syz [ 1905.671209][ T5898] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1905.679429][ T5915] usb 2-1: Manufacturer: 㜽뢥Ž덂忶὿犩溆똁废ㆇ弚뷙ⳟ⋾⢾쮷줇ﬦ [ 1905.691284][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1905.708206][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1905.710076][ T5915] usb 2-1: SerialNumber: syz [ 1905.728059][ T5898] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1905.737491][ T5905] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1905.748934][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1905.955492][T17899] Bluetooth: (null): Invalid header checksum [ 1905.969386][T17899] Bluetooth: (null): Invalid header checksum [ 1905.979434][ T5898] usb 6-1: config 0 descriptor?? [ 1905.985284][T22778] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1906.017609][ T5898] hub 6-1:0.0: USB hub found [ 1906.252126][ T9928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1906.775710][ T36] Bluetooth: (null): Invalid header checksum [ 1906.798128][T22784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1906.798845][ T36] Bluetooth: (null): Invalid header checksum [ 1906.806814][ T5905] usb 4-1: Using ep0 maxpacket: 32 [ 1906.819040][ T36] Bluetooth: (null): Invalid header checksum [ 1906.819165][ T36] Bluetooth: (null): Invalid header checksum [ 1906.819286][ T36] Bluetooth: (null): Invalid header checksum [ 1906.819407][ T36] Bluetooth: (null): Invalid header checksum [ 1906.825866][ T5898] hub 6-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1906.835623][ T36] Bluetooth: (null): Invalid header checksum [ 1906.868137][ T5915] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input106 [ 1906.878354][T22784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1906.897809][T22784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1906.908604][T22784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1906.921839][ T5175] bcm5974 2-1:1.0: could not read from device [ 1906.928782][ T36] Bluetooth: (null): Invalid header checksum [ 1906.936539][ T36] Bluetooth: (null): Invalid header checksum [ 1906.955277][ T5905] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1906.967235][ T5175] bcm5974 2-1:1.0: could not read from device [ 1906.970278][ T5905] usb 4-1: config 128 contains an unexpected descriptor of type 0x2, skipping [ 1906.979052][ T5915] usb 2-1: USB disconnect, device number 23 [ 1906.993150][ T5905] usb 4-1: config 128 has an invalid descriptor of length 190, skipping remainder of the config [ 1907.045574][ T5905] usb 4-1: config 128 has 0 interfaces, different from the descriptor's value: 4 [ 1907.234687][ T1159] Bluetooth: (null): Invalid header checksum [ 1907.249416][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 1907.290812][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1907.360055][T22801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4486'. [ 1907.979558][ T9928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1908.080410][ T5175] bcm5974 2-1:1.0: could not read from device [ 1908.099300][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1908.108115][ T1159] Bluetooth: (null): Invalid header checksum [ 1908.117068][ T1159] Bluetooth: (null): Invalid header checksum [ 1908.126170][ T1159] Bluetooth: (null): Invalid header checksum [ 1908.167646][ T1159] Bluetooth: (null): Invalid header checksum [ 1908.699721][ T10] usb 7-1: USB disconnect, device number 100 [ 1908.729412][ T1159] Bluetooth: (null): Invalid header checksum [ 1908.759028][ T5905] usb 4-1: string descriptor 0 read error: -71 [ 1908.765438][ T1159] Bluetooth: (null): Invalid header checksum [ 1908.779024][ T5905] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1908.789373][ T1159] Bluetooth: (null): Invalid header checksum [ 1908.814720][ T1159] Bluetooth: (null): Invalid header checksum [ 1908.821694][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1908.838231][ T1159] Bluetooth: (null): Invalid header checksum [ 1908.861740][ T5905] usb 4-1: can't set config #128, error -71 [ 1908.867905][ T1159] Bluetooth: (null): Invalid header checksum [ 1908.907741][ T1159] Bluetooth: (null): Invalid header checksum [ 1908.917089][ T5905] usb 4-1: USB disconnect, device number 39 [ 1908.936546][ T1159] Bluetooth: (null): Invalid header checksum [ 1908.957403][ T1159] Bluetooth: (null): Invalid header checksum [ 1908.983702][ T1159] Bluetooth: (null): Invalid header checksum [ 1909.007948][ T1159] Bluetooth: (null): Invalid header checksum [ 1909.012778][T22810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1909.017585][ T1159] Bluetooth: (null): Invalid header checksum [ 1909.029243][ T1159] Bluetooth: (null): Invalid header checksum [ 1909.049659][T19016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1909.057846][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1909.069756][T22810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1909.091787][ T5898] usbhid 6-1:0.0: can't add hid device: -71 [ 1909.101492][ T5898] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1909.142089][ T5898] usb 6-1: USB disconnect, device number 68 [ 1909.233090][ T5945] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1909.355335][ T10] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 1909.375972][T22821] TC_ACT_REPEAT abuse ? [ 1909.381157][ C0] TC_ACT_REPEAT abuse ? [ 1909.519103][ T5945] usb 1-1: Using ep0 maxpacket: 32 [ 1909.645304][ T5945] usb 1-1: config 1 has an invalid interface number: 242 but max is 0 [ 1909.725995][ T5945] usb 1-1: config 1 has no interface number 0 [ 1909.782931][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1909.825638][ T5945] usb 1-1: config 1 interface 242 has no altsetting 0 [ 1909.923267][ T5945] usb 1-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 1909.939692][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1909.968774][ T5945] usb 1-1: Product: syz [ 1909.984110][ T5945] usb 1-1: Manufacturer: syz [ 1909.988943][ T5945] usb 1-1: SerialNumber: syz [ 1910.028999][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1910.029019][ T30] audit: type=1326 audit(1750557461.639:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22825 comm="syz.1.4492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7878e929 code=0x7ffc0000 [ 1910.093233][T19016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1910.138880][ T30] audit: type=1326 audit(1750557461.679:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22825 comm="syz.1.4492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1c7878e929 code=0x7ffc0000 [ 1910.200848][ T30] audit: type=1326 audit(1750557461.679:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22825 comm="syz.1.4492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7878e929 code=0x7ffc0000 [ 1910.224034][ T30] audit: type=1326 audit(1750557461.679:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22825 comm="syz.1.4492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f1c7878e929 code=0x7ffc0000 [ 1910.259249][ T5945] aqc111 1-1:1.242: probe with driver aqc111 failed with error -71 [ 1910.298238][ T5945] usb 1-1: USB disconnect, device number 74 [ 1910.307383][ T30] audit: type=1326 audit(1750557461.679:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22825 comm="syz.1.4492" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c7878e929 code=0x7ffc0000 [ 1910.438983][ T10] usb 7-1: device descriptor read/64, error -71 [ 1911.087308][T22847] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4498'. [ 1911.130387][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1911.315858][ T10] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 1911.343375][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1911.559202][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 1911.632205][ T10] usb 7-1: config 31 has an invalid interface number: 134 but max is 0 [ 1911.640906][ T10] usb 7-1: config 31 contains an unexpected descriptor of type 0x2, skipping [ 1911.666342][ T10] usb 7-1: config 31 contains an unexpected descriptor of type 0x1, skipping [ 1911.686478][ T10] usb 7-1: config 31 has an invalid descriptor of length 6, skipping remainder of the config [ 1911.709304][ T980] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1911.721296][ T10] usb 7-1: config 31 has no interface number 0 [ 1911.738430][ T10] usb 7-1: config 31 interface 134 altsetting 41 has an invalid endpoint descriptor of length 5, skipping [ 1911.791505][ T10] usb 7-1: config 31 interface 134 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1911.830066][ T10] usb 7-1: config 31 interface 134 has no altsetting 0 [ 1911.843357][ T10] usb 7-1: string descriptor 0 read error: -22 [ 1911.849783][ T10] usb 7-1: New USB device found, idVendor=0499, idProduct=1052, bcdDevice=a4.d0 [ 1911.860723][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1911.887677][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1911.901956][ T980] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1911.912191][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1911.929278][ T5915] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 1911.944290][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1911.965316][ T980] usb 4-1: config 0 descriptor?? [ 1912.084576][ T10] snd-usb-audio 7-1:31.134: probe with driver snd-usb-audio failed with error -2 [ 1912.100763][ T5915] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 1912.111938][ T5915] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1912.134705][ T5915] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1912.146341][ T5915] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1912.175273][ T5915] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1912.218666][ T5915] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1912.398844][T22850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1912.408476][T22850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1912.419109][T22850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1912.428394][ T5915] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1912.438437][ T5915] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1912.447917][T22850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1913.309023][ T5915] usb 2-1: Product: syz [ 1913.313341][ T5915] usb 2-1: Manufacturer: syz [ 1913.318030][ T5915] usb 2-1: SerialNumber: syz [ 1913.346693][ T5945] net_ratelimit: 1 callbacks suppressed [ 1913.346715][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1913.352189][ T5915] usb 2-1: config 0 descriptor?? [ 1913.421512][ T980] usbhid 4-1:0.0: can't add hid device: -71 [ 1913.430311][ T980] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1913.439840][T22852] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1913.450598][ T5915] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1913.471458][ T980] usb 4-1: USB disconnect, device number 40 [ 1913.494479][ T5915] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1913.653239][T22852] syz.1.4501 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1913.734537][T22860] x_tables: duplicate underflow at hook 1 [ 1913.810184][ T30] audit: type=1326 audit(1750557465.429:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22861 comm="syz.0.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8538d8e929 code=0x7ffc0000 [ 1913.872851][ T30] audit: type=1326 audit(1750557465.449:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22861 comm="syz.0.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8538d8e929 code=0x7ffc0000 [ 1913.912109][ T5905] usb 2-1: USB disconnect, device number 24 [ 1913.939710][ T30] audit: type=1326 audit(1750557465.449:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22861 comm="syz.0.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8538d8e929 code=0x7ffc0000 [ 1913.973685][ T5905] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 1913.987097][T22866] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4505'. [ 1914.026539][ T30] audit: type=1326 audit(1750557465.449:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22861 comm="syz.0.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f8538d8e929 code=0x7ffc0000 [ 1914.063466][ T30] audit: type=1326 audit(1750557465.449:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22861 comm="syz.0.4504" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8538d8e929 code=0x7ffc0000 [ 1914.121694][T22869] TC_ACT_REPEAT abuse ? [ 1914.126895][ C0] TC_ACT_REPEAT abuse ? [ 1914.194657][T22871] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1914.376645][ T5905] usb 7-1: USB disconnect, device number 102 [ 1914.409161][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1914.428731][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1914.536255][T22882] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4511'. [ 1914.638082][T22883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4510'. [ 1914.694751][T22885] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4508'. [ 1914.725418][T22883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4510'. [ 1914.870168][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.881884][ T980] TC_ACT_REPEAT abuse ? [ 1915.462017][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1915.470830][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1915.694367][ T30] audit: type=1326 audit(1750557467.309:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22893 comm="syz.3.4515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246818e929 code=0x7ffc0000 [ 1915.839262][ T30] audit: type=1326 audit(1750557467.309:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22893 comm="syz.3.4515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246818e929 code=0x7ffc0000 [ 1915.885594][ T30] audit: type=1326 audit(1750557467.329:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22893 comm="syz.3.4515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f246818e929 code=0x7ffc0000 [ 1915.972803][ T30] audit: type=1326 audit(1750557467.329:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22893 comm="syz.3.4515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246818e929 code=0x7ffc0000 [ 1916.015471][ T30] audit: type=1326 audit(1750557467.329:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22893 comm="syz.3.4515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246818e929 code=0x7ffc0000 [ 1916.072866][ T30] audit: type=1326 audit(1750557467.329:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22893 comm="syz.3.4515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=148 compat=0 ip=0x7f246818e929 code=0x7ffc0000 [ 1916.107483][ T30] audit: type=1326 audit(1750557467.329:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22893 comm="syz.3.4515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246818e929 code=0x7ffc0000 [ 1916.131031][ T5915] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 1916.151102][ T30] audit: type=1326 audit(1750557467.329:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22893 comm="syz.3.4515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f246818e929 code=0x7ffc0000 [ 1916.302642][ T5915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1916.464338][ T5915] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1916.489593][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1916.495212][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1917.230243][ T5915] usb 7-1: config 0 descriptor?? [ 1917.665560][T22900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1917.709389][T22900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1917.752117][T22900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1917.779472][T22900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1917.830042][ T5915] usbhid 7-1:0.0: can't add hid device: -71 [ 1917.836131][ T5915] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1917.881789][ T5915] usb 7-1: USB disconnect, device number 103 [ 1919.136742][ T5915] net_ratelimit: 1 callbacks suppressed [ 1919.136761][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1919.150501][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1919.289202][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1919.378797][ T30] audit: type=1326 audit(1750557470.979:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22932 comm="syz.6.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e09f8e929 code=0x7ffc0000 [ 1919.441477][ T30] audit: type=1326 audit(1750557470.979:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22932 comm="syz.6.4527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e09f8e929 code=0x7ffc0000 [ 1920.171863][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1920.689497][T22950] autofs: Unknown parameter '0x0000000000000000' [ 1921.611992][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1922.294973][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1922.303655][ T5915] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1922.472382][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1922.529356][ T5915] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1922.538567][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1922.784322][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1922.786793][ T5915] usb 4-1: config 0 descriptor?? [ 1923.394579][T22961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1923.500291][T22961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1923.531758][T22961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1923.565509][T22961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1923.611226][ T5915] usbhid 4-1:0.0: can't add hid device: -71 [ 1923.649408][ T5915] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1923.689177][ T5915] usb 4-1: USB disconnect, device number 41 [ 1923.749514][ T5898] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1923.816703][T22988] autofs: Unknown parameter '0x0000000000000000' [ 1923.850383][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1923.910259][ T5898] usb 2-1: Using ep0 maxpacket: 8 [ 1923.934342][ T5898] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1923.948779][ T5898] usb 2-1: can't read configurations, error -61 [ 1924.103222][ T5898] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1924.884783][ T5915] TC_ACT_REPEAT abuse ? [ 1924.889901][T19016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1925.003357][ T5898] usb 2-1: Using ep0 maxpacket: 8 [ 1925.028548][ T5898] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1925.084802][T23002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1925.098116][ T5898] usb 2-1: can't read configurations, error -61 [ 1925.106766][T23002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1925.115887][ T5898] usb usb2-port1: attempt power cycle [ 1925.191079][T23002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1925.294826][T23002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1925.377464][T23011] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4551'. [ 1925.593883][ T5915] IPVS: starting estimator thread 0... [ 1925.779440][T23012] IPVS: using max 21 ests per chain, 50400 per kthread [ 1925.929112][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1925.965726][T19016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1925.979840][T23002] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1926.067969][T23002] netlink: 182 bytes leftover after parsing attributes in process `syz.5.4550'. [ 1926.077989][T23002] block nbd0: not configured, cannot reconfigure [ 1926.148666][T23001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1927.568885][ T5915] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1927.671515][T23029] autofs: Unknown parameter 'fd0x0000000000000000' [ 1927.759307][ T5915] usb 4-1: Using ep0 maxpacket: 32 [ 1927.793553][ T5915] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1927.838747][ T5915] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1927.871951][ T5915] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1927.892869][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1928.519806][ T5915] hub 4-1:4.0: USB hub found [ 1928.542276][ T5915] hub 4-1:4.0: config failed, can't read hub descriptor (err -90) [ 1929.446371][T23042] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4562'. [ 1929.903042][ T5915] net_ratelimit: 4 callbacks suppressed [ 1929.903063][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1929.927029][ T980] usb 4-1: USB disconnect, device number 42 [ 1930.179232][ C0] TC_ACT_REPEAT abuse ? [ 1930.899092][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1931.303946][T23051] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4563'. [ 1932.104897][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1932.619547][ T5898] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1932.819196][T23065] netlink: 152 bytes leftover after parsing attributes in process `syz.6.4568'. [ 1933.048720][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1933.308593][T19016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1933.340685][ T5898] usb 4-1: config 0 has an invalid interface number: 153 but max is 0 [ 1933.366513][ T5898] usb 4-1: config 0 has no interface number 0 [ 1933.391974][T23069] FAULT_INJECTION: forcing a failure. [ 1933.391974][T23069] name failslab, interval 1, probability 0, space 0, times 0 [ 1933.414577][ T5898] usb 4-1: too many endpoints for config 0 interface 153 altsetting 255: 255, using maximum allowed: 30 [ 1933.447928][ T5898] usb 4-1: config 0 interface 153 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1933.463746][T23069] CPU: 1 UID: 0 PID: 23069 Comm: syz.5.4569 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(full) [ 1933.463766][T23069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1933.463774][T23069] Call Trace: [ 1933.463779][T23069] [ 1933.463784][T23069] dump_stack_lvl+0x189/0x250 [ 1933.463807][T23069] ? __pfx____ratelimit+0x10/0x10 [ 1933.463824][T23069] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1933.463840][T23069] ? __pfx__printk+0x10/0x10 [ 1933.463856][T23069] ? __pfx___might_resched+0x10/0x10 [ 1933.463875][T23069] should_fail_ex+0x414/0x560 [ 1933.463893][T23069] should_failslab+0xa8/0x100 [ 1933.463909][T23069] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1933.463924][T23069] ? __alloc_skb+0x112/0x2d0 [ 1933.463940][T23069] __alloc_skb+0x112/0x2d0 [ 1933.463955][T23069] netlink_dump+0x22b/0xe20 [ 1933.463976][T23069] ? __pfx_netlink_dump+0x10/0x10 [ 1933.463998][T23069] ? kmem_cache_free+0x18f/0x400 [ 1933.464015][T23069] netlink_recvmsg+0x676/0xa30 [ 1933.464034][T23069] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1933.464050][T23069] ? __lock_acquire+0xab9/0xd20 [ 1933.464067][T23069] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1933.464080][T23069] ? security_socket_recvmsg+0x7e/0x2e0 [ 1933.464093][T23069] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1933.464107][T23069] sock_recvmsg+0x229/0x270 [ 1933.464127][T23069] ____sys_recvmsg+0x1c9/0x460 [ 1933.464147][T23069] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1933.464172][T23069] ? import_iovec+0x74/0xa0 [ 1933.464186][T23069] ___sys_recvmsg+0x1b5/0x510 [ 1933.464204][T23069] ? __pfx____sys_recvmsg+0x10/0x10 [ 1933.464234][T23069] ? __fget_files+0x3a0/0x420 [ 1933.464256][T23069] do_recvmmsg+0x307/0x770 [ 1933.464277][T23069] ? __pfx_do_recvmmsg+0x10/0x10 [ 1933.464299][T23069] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1933.464327][T23069] __x64_sys_recvmmsg+0x190/0x240 [ 1933.464344][T23069] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1933.464357][T23069] ? rcu_is_watching+0x15/0xb0 [ 1933.464377][T23069] ? do_syscall_64+0xbe/0x3b0 [ 1933.464390][T23069] do_syscall_64+0xfa/0x3b0 [ 1933.464399][T23069] ? lockdep_hardirqs_on+0x9c/0x150 [ 1933.464414][T23069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1933.464426][T23069] ? clear_bhb_loop+0x60/0xb0 [ 1933.464440][T23069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1933.464452][T23069] RIP: 0033:0x7fbc8698e929 [ 1933.464463][T23069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1933.464473][T23069] RSP: 002b:00007fbc878cb038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1933.464496][T23069] RAX: ffffffffffffffda RBX: 00007fbc86bb5fa0 RCX: 00007fbc8698e929 [ 1933.464504][T23069] RDX: 0000000000000004 RSI: 0000200000000dc0 RDI: 0000000000000003 [ 1933.464512][T23069] RBP: 00007fbc878cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1933.464519][T23069] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 1933.464527][T23069] R13: 0000000000000000 R14: 00007fbc86bb5fa0 R15: 00007ffd7d512c38 [ 1933.464545][T23069] [ 1933.764596][ T5898] usb 4-1: config 0 interface 153 has no altsetting 0 [ 1933.780466][ T5898] usb 4-1: New USB device found, idVendor=1199, idProduct=6852, bcdDevice=57.34 [ 1933.792140][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1933.800175][ T5898] usb 4-1: Product: syz [ 1933.804418][ T5898] usb 4-1: Manufacturer: syz [ 1933.809087][ T5898] usb 4-1: SerialNumber: syz [ 1933.815649][ T5898] usb 4-1: config 0 descriptor?? [ 1933.951398][T23071] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1934.324172][T23060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4565'. [ 1934.333621][T23060] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4565'. [ 1934.659300][ T5915] TC_ACT_REPEAT abuse ? [ 1934.671350][ T6698] TC_ACT_REPEAT abuse ? [ 1934.684003][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1934.688972][T23071] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1934.704252][ T5915] TC_ACT_REPEAT abuse ? [ 1934.713267][T23071] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1934.726993][T23071] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1934.754580][T23060] gretap1: entered promiscuous mode [ 1934.778825][T23080] netlink: 'syz.0.4570': attribute type 29 has an invalid length. [ 1934.796093][T23081] netlink: 'syz.0.4570': attribute type 29 has an invalid length. [ 1934.811717][T23071] netlink: 500 bytes leftover after parsing attributes in process `syz.0.4570'. [ 1934.879579][ T5898] hub 4-1:0.153: bad descriptor, ignoring hub [ 1934.888564][ T5898] hub 4-1:0.153: probe with driver hub failed with error -5 [ 1934.930713][ T5898] sierra 4-1:0.153: Sierra USB modem converter detected [ 1934.939207][T23071] overlay: filesystem on ./bus not supported as upperdir [ 1934.982490][ T5898] usb 4-1: USB disconnect, device number 43 [ 1935.001922][ T5898] sierra 4-1:0.153: device disconnected [ 1935.689236][ T5898] net_ratelimit: 1 callbacks suppressed [ 1935.689252][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1936.139450][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1936.647367][T23104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4578'. [ 1937.332861][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1937.731606][T23114] netlink: 'syz.1.4581': attribute type 10 has an invalid length. [ 1937.813414][T23114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1937.905890][T23114] team0: Port device bond0 added [ 1938.693824][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1938.721442][ T36] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1938.749570][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1938.775775][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1938.784159][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1939.072518][T23126] IPVS: set_ctl: invalid protocol: 147 100.1.1.1:20003 [ 1939.235696][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1940.066757][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1940.645057][T23145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4589'. [ 1941.479478][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1942.257865][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1942.284556][ T8686] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1942.294339][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1942.419735][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1942.432851][ T5890] usb 7-1: new low-speed USB device number 104 using dummy_hcd [ 1943.293588][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1943.441973][ T5890] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1943.754032][ T5890] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1944.255413][ T980] TC_ACT_REPEAT abuse ? [ 1944.606721][T17899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1944.751224][ T5890] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1945.000181][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1945.634178][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1945.716887][ T5890] usb 7-1: string descriptor 0 read error: -22 [ 1945.741102][ T5890] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1945.750696][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1945.794783][T23177] (syz.0.4597,23177,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 1945.803824][T23177] (syz.0.4597,23177,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 1946.294212][ T5890] usb 7-1: invalid UAC_HEADER (v1) [ 1946.397909][ T5890] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1946.912134][ T5890] usb 7-1: USB disconnect, device number 104 [ 1947.089763][T23198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4602'. [ 1947.818890][ T5898] net_ratelimit: 3 callbacks suppressed [ 1947.818906][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1947.835377][T23192] FAULT_INJECTION: forcing a failure. [ 1947.835377][T23192] name failslab, interval 1, probability 0, space 0, times 0 [ 1948.007494][T23192] CPU: 1 UID: 0 PID: 23192 Comm: syz.0.4599 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(full) [ 1948.007525][T23192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1948.007538][T23192] Call Trace: [ 1948.007546][T23192] [ 1948.007555][T23192] dump_stack_lvl+0x189/0x250 [ 1948.007589][T23192] ? __pfx____ratelimit+0x10/0x10 [ 1948.007618][T23192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1948.007645][T23192] ? __pfx__printk+0x10/0x10 [ 1948.007669][T23192] ? __pfx___might_resched+0x10/0x10 [ 1948.007690][T23192] ? fs_reclaim_acquire+0x7d/0x100 [ 1948.007716][T23192] should_fail_ex+0x414/0x560 [ 1948.007742][T23192] should_failslab+0xa8/0x100 [ 1948.007767][T23192] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 1948.007789][T23192] ? kasprintf+0xd4/0x120 [ 1948.007816][T23192] kvasprintf+0xdc/0x190 [ 1948.007839][T23192] ? __pfx_kvasprintf+0x10/0x10 [ 1948.007858][T23192] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1948.007884][T23192] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1948.007906][T23192] ? call_usermodehelper_exec+0x341/0x4b0 [ 1948.007940][T23192] kasprintf+0xd4/0x120 [ 1948.007960][T23192] ? up+0xde/0x150 [ 1948.007981][T23192] ? __pfx_kasprintf+0x10/0x10 [ 1948.008018][T23192] logfc+0x142/0x4f0 [ 1948.008047][T23192] ? do_raw_spin_lock+0x121/0x290 [ 1948.008072][T23192] ? __pfx_logfc+0x10/0x10 [ 1948.008110][T23192] ? _raw_spin_unlock+0x28/0x50 [ 1948.008138][T23192] udf_parse_param+0xc69/0xf40 [ 1948.008171][T23192] ? __pfx_udf_parse_param+0x10/0x10 [ 1948.008209][T23192] ? static_key_count+0x41/0x70 [ 1948.008241][T23192] vfs_parse_fs_param+0x1a9/0x420 [ 1948.008271][T23192] __se_sys_fsconfig+0x78e/0x8d0 [ 1948.008298][T23192] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 1948.008325][T23192] ? ksys_write+0x22a/0x250 [ 1948.008349][T23192] ? __pfx_ksys_write+0x10/0x10 [ 1948.008366][T23192] ? rcu_is_watching+0x15/0xb0 [ 1948.008399][T23192] ? do_syscall_64+0xbe/0x3b0 [ 1948.008425][T23192] ? __x64_sys_fsconfig+0x20/0xc0 [ 1948.008454][T23192] do_syscall_64+0xfa/0x3b0 [ 1948.008469][T23192] ? lockdep_hardirqs_on+0x9c/0x150 [ 1948.008494][T23192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1948.008513][T23192] ? clear_bhb_loop+0x60/0xb0 [ 1948.008538][T23192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1948.008556][T23192] RIP: 0033:0x7f8538d8e929 [ 1948.008575][T23192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1948.008592][T23192] RSP: 002b:00007f8539b1f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1948.008614][T23192] RAX: ffffffffffffffda RBX: 00007f8538fb6080 RCX: 00007f8538d8e929 [ 1948.008629][T23192] RDX: 0000200000000080 RSI: 0000000000000001 RDI: 0000000000000007 [ 1948.008642][T23192] RBP: 00007f8539b1f090 R08: 0000000000000000 R09: 0000000000000000 [ 1948.008654][T23192] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 1948.008672][T23192] R13: 0000000000000000 R14: 00007f8538fb6080 R15: 00007ffc6aef85b8 [ 1948.008702][T23192] [ 1948.305244][ T7051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1948.319563][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1948.528046][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1948.783198][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1948.889236][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1949.599849][T23222] overlayfs: failed to resolve './file0': -2 [ 1949.788866][ T5898] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1949.928746][T23228] netlink: 'syz.0.4610': attribute type 1 has an invalid length. [ 1949.968931][ T5898] usb 4-1: device descriptor read/64, error -71 [ 1949.975828][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1950.080683][ T5890] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1950.367256][ T5898] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1950.481192][T23231] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1950.739069][T23231] CIFS mount error: No usable UNC path provided in device string! [ 1950.739069][T23231] [ 1950.759027][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 1950.759667][T23231] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1950.820048][ T5890] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1950.851912][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1950.878928][ T5898] usb 4-1: device descriptor read/64, error -71 [ 1950.990497][ T5898] usb usb4-port1: attempt power cycle [ 1951.026436][ T5890] usb 2-1: Product: syz [ 1951.049242][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1951.144211][ T5890] usb 2-1: Manufacturer: syz [ 1951.172121][ T5890] usb 2-1: SerialNumber: syz [ 1951.193523][ T5890] usb 2-1: config 0 descriptor?? [ 1951.303241][T17899] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1951.315016][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1951.339506][ T5898] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1951.370003][ T5898] usb 4-1: device descriptor read/8, error -71 [ 1951.709001][ T5898] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1951.753821][ T5898] usb 4-1: device descriptor read/8, error -71 [ 1952.209490][ T5898] usb usb4-port1: unable to enumerate USB device [ 1953.369090][T19016] net_ratelimit: 3 callbacks suppressed [ 1953.369111][T19016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1953.382946][ T5890] usb 2-1: USB disconnect, device number 28 [ 1953.542049][T23262] syzkaller1: entered promiscuous mode [ 1953.559111][T23262] syzkaller1: entered allmulticast mode [ 1954.510711][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1954.510804][ T10] TC_ACT_REPEAT abuse ? [ 1954.669058][ T5915] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1954.840731][ T5915] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1954.856137][ T5915] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1954.882125][T23288] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1954.886408][ T5915] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1954.905836][ T5915] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1954.917098][T23288] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1954.937791][T23292] netlink: 'syz.0.4631': attribute type 1 has an invalid length. [ 1954.943298][ T5915] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1954.965961][ T5915] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1954.968882][T23292] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4631'. [ 1954.991795][T23292] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4631'. [ 1954.997525][ T5915] usb 6-1: invalid MIDI out EP 0 [ 1955.019021][ T5898] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 1955.052259][ T5915] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1955.158866][ T5898] usb 7-1: device descriptor read/64, error -71 [ 1955.179025][ T10] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 1956.125343][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1956.139964][T23269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1956.149506][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1956.186951][T23269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1956.273110][T23269] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1956.285084][T23269] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1956.504398][T19016] usb 6-1: USB disconnect, device number 69 [ 1956.775228][ T5898] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 1957.049110][ T5898] usb 7-1: device descriptor read/64, error -71 [ 1957.056894][ T6952] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1957.066100][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1957.088072][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1957.162595][ T5898] usb usb7-port1: attempt power cycle [ 1957.909205][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1957.939229][ T7051] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1957.964013][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1957.973267][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1958.001408][ T10] usb 2-1: config 0 descriptor?? [ 1958.019403][ T10] usb 2-1: can't set config #0, error -71 [ 1958.031612][ T10] usb 2-1: USB disconnect, device number 29 [ 1959.883672][ T5905] net_ratelimit: 3 callbacks suppressed [ 1959.883693][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1959.946050][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1960.928446][T19016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1961.058917][ T10] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 1961.068908][ T5898] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1961.220713][ T10] usb 1-1: config 0 has an invalid descriptor of length 33, skipping remainder of the config [ 1961.238855][ T5890] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 1961.252913][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1961.279828][ T10] usb 1-1: New USB device found, idVendor=05ac, idProduct=0632, bcdDevice= 0.00 [ 1961.305272][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1961.319266][ T5898] usb 4-1: device descriptor read/64, error -71 [ 1961.339805][ T10] usb 1-1: config 0 descriptor?? [ 1961.351720][ T10] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1961.421867][ T5890] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1961.436164][ T5890] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1961.484489][ T5890] usb 7-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice=cd.0d [ 1961.508906][ T5890] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1961.538784][ T5890] usb 7-1: Product: syz [ 1961.558831][ T5890] usb 7-1: Manufacturer: syz [ 1961.573715][ T5890] usb 7-1: SerialNumber: syz [ 1961.588335][ T5890] usb 7-1: config 0 descriptor?? [ 1961.639658][ T5898] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1961.684186][T23380] kAFS: No cell specified [ 1961.868866][ T5898] usb 4-1: device descriptor read/64, error -71 [ 1962.675471][ T5945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1962.692384][ T5898] usb usb4-port1: attempt power cycle [ 1962.697807][ T10] usb 7-1: USB disconnect, device number 108 [ 1962.969468][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1963.692690][T19016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1963.769289][ T5898] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1963.999338][ T5898] usb 4-1: device not accepting address 50, error -71 [ 1964.095200][ T5915] TC_ACT_REPEAT abuse ? [ 1964.661522][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1964.661541][ T30] audit: type=1326 audit(1750557516.279:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23405 comm="syz.3.4667" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f246818e929 code=0x0 [ 1964.730001][T19016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1965.528542][ T5915] usb 1-1: USB disconnect, device number 75 [ 1965.733897][T23423] FAULT_INJECTION: forcing a failure. [ 1965.733897][T23423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1965.769186][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1966.118218][T23423] CPU: 1 UID: 0 PID: 23423 Comm: syz.1.4670 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(full) [ 1966.118252][T23423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1966.118265][T23423] Call Trace: [ 1966.118274][T23423] [ 1966.118283][T23423] dump_stack_lvl+0x189/0x250 [ 1966.118318][T23423] ? __pfx____ratelimit+0x10/0x10 [ 1966.118347][T23423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1966.118376][T23423] ? __pfx__printk+0x10/0x10 [ 1966.118397][T23423] ? __might_fault+0xb0/0x130 [ 1966.118434][T23423] should_fail_ex+0x414/0x560 [ 1966.118464][T23423] _copy_from_user+0x2d/0xb0 [ 1966.118485][T23423] do_sock_getsockopt+0x1cd/0x650 [ 1966.118513][T23423] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1966.118536][T23423] ? do_syscall_64+0x80/0x3b0 [ 1966.118553][T23423] ? __fget_files+0x3a0/0x420 [ 1966.118579][T23423] ? __fget_files+0x2a/0x420 [ 1966.118612][T23423] __x64_sys_getsockopt+0x1a5/0x250 [ 1966.118636][T23423] ? do_syscall_64+0x80/0x3b0 [ 1966.118656][T23423] ? do_syscall_64+0x80/0x3b0 [ 1966.118682][T23423] do_syscall_64+0xfa/0x3b0 [ 1966.118698][T23423] ? lockdep_hardirqs_on+0x9c/0x150 [ 1966.118725][T23423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1966.118745][T23423] ? clear_bhb_loop+0x60/0xb0 [ 1966.118770][T23423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1966.118790][T23423] RIP: 0033:0x7f1c7878e929 [ 1966.118809][T23423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1966.118826][T23423] RSP: 002b:00007f1c796b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1966.118849][T23423] RAX: ffffffffffffffda RBX: 00007f1c789b6080 RCX: 00007f1c7878e929 [ 1966.118864][T23423] RDX: 000000000000000e RSI: 0000000000000084 RDI: 0000000000000003 [ 1966.118876][T23423] RBP: 00007f1c796b3090 R08: 0000200000000380 R09: 0000000000000000 [ 1966.118889][T23423] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 1966.118902][T23423] R13: 0000000000000001 R14: 00007f1c789b6080 R15: 00007ffe21321458 [ 1966.118934][T23423] [ 1966.514575][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1967.554270][T19016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1967.562588][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1967.844962][T23439] TC_ACT_REPEAT abuse ? [ 1967.851876][T23439] TC_ACT_REPEAT abuse ? [ 1967.932034][T23439] TC_ACT_REPEAT abuse ? [ 1967.941810][T23439] TC_ACT_REPEAT abuse ? [ 1967.948019][T23439] TC_ACT_REPEAT abuse ? [ 1967.989560][T23439] TC_ACT_REPEAT abuse ? [ 1969.897716][T23455] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4681'. [ 1970.132332][T23457] overlay: Unknown parameter '/' [ 1970.170134][T23465] FAULT_INJECTION: forcing a failure. [ 1970.170134][T23465] name failslab, interval 1, probability 0, space 0, times 0 [ 1970.193988][T23465] CPU: 0 UID: 0 PID: 23465 Comm: syz.5.4683 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(full) [ 1970.194021][T23465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1970.194033][T23465] Call Trace: [ 1970.194042][T23465] [ 1970.194051][T23465] dump_stack_lvl+0x189/0x250 [ 1970.194086][T23465] ? __pfx____ratelimit+0x10/0x10 [ 1970.194116][T23465] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1970.194143][T23465] ? __pfx__printk+0x10/0x10 [ 1970.194172][T23465] ? __pfx___might_resched+0x10/0x10 [ 1970.194208][T23465] ? fs_reclaim_acquire+0x7d/0x100 [ 1970.194241][T23465] should_fail_ex+0x414/0x560 [ 1970.194273][T23465] should_failslab+0xa8/0x100 [ 1970.194301][T23465] __kmalloc_noprof+0xcb/0x4f0 [ 1970.194323][T23465] ? kfree+0x4d/0x440 [ 1970.194341][T23465] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1970.194376][T23465] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1970.194407][T23465] ? tomoyo_domain+0xda/0x130 [ 1970.194442][T23465] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1970.194465][T23465] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1970.194493][T23465] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1970.194539][T23465] ? __lock_acquire+0xab9/0xd20 [ 1970.194590][T23465] ? __fget_files+0x2a/0x420 [ 1970.194620][T23465] ? __fget_files+0x2a/0x420 [ 1970.194644][T23465] ? __fget_files+0x3a0/0x420 [ 1970.194667][T23465] ? __fget_files+0x2a/0x420 [ 1970.194698][T23465] security_file_ioctl+0xcb/0x2d0 [ 1970.194727][T23465] __se_sys_ioctl+0x47/0x170 [ 1970.194751][T23465] do_syscall_64+0xfa/0x3b0 [ 1970.194769][T23465] ? lockdep_hardirqs_on+0x9c/0x150 [ 1970.194797][T23465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1970.194817][T23465] ? clear_bhb_loop+0x60/0xb0 [ 1970.194841][T23465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1970.194861][T23465] RIP: 0033:0x7fbc8698e929 [ 1970.194880][T23465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1970.194896][T23465] RSP: 002b:00007fbc878cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1970.194920][T23465] RAX: ffffffffffffffda RBX: 00007fbc86bb5fa0 RCX: 00007fbc8698e929 [ 1970.194935][T23465] RDX: 0000200000000040 RSI: 0000000000003b86 RDI: 0000000000000003 [ 1970.194949][T23465] RBP: 00007fbc878cb090 R08: 0000000000000000 R09: 0000000000000000 [ 1970.194961][T23465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1970.194974][T23465] R13: 0000000000000000 R14: 00007fbc86bb5fa0 R15: 00007ffd7d512c38 [ 1970.195008][T23465] [ 1970.195019][T23465] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1971.137139][T19016] net_ratelimit: 46 callbacks suppressed [ 1971.137162][T19016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1972.179960][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1972.900885][ T980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1973.302119][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1973.759958][ T980] TC_ACT_REPEAT abuse ? [ 1974.332245][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1975.372435][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1975.780747][ T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1975.822813][T23514] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4697'. [ 1975.941767][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1975.952291][ T10] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1975.976150][ T10] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1976.008984][ T10] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1976.034881][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1976.048993][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1976.067882][T23502] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1976.098888][ T980] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 1976.262835][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.289291][ T980] usb 7-1: Using ep0 maxpacket: 32 [ 1976.525682][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1976.912896][ T980] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1976.961225][ T980] usb 7-1: config 0 has no interface number 0 [ 1976.978019][ T5890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1977.000196][T23523] binder: 23517:23523 ioctl c0306201 0 returned -14 [ 1977.020096][ T980] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1977.034453][ T980] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1977.044167][ T980] usb 7-1: Product: syz [ 1977.060280][ T980] usb 7-1: Manufacturer: syz [ 1977.070644][ T980] usb 7-1: SerialNumber: syz [ 1977.089900][ T980] usb 7-1: config 0 descriptor?? [ 1977.101575][ T980] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1977.149739][ T10] aiptek 2-1:17.0: Aiptek using 400 ms programming speed [ 1977.155616][T23531] netlink: 'syz.0.4705': attribute type 13 has an invalid length. [ 1977.181962][ T10] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input107 [ 1977.271891][ C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1977.282140][ T10] usb 2-1: USB disconnect, device number 30 [ 1978.199029][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1978.202620][ T980] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1978.285775][ T980] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1978.338075][T23536] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 1978.363336][T23531] bridge0: port 3(syz_tun) entered disabled state [ 1978.973773][ T5915] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1979.089554][T23531] bridge0: port 2(bridge_slave_1) entered disabled state [ 1979.096938][T23531] bridge0: port 1(bridge_slave_0) entered disabled state [ 1979.119897][ T30] audit: type=1326 audit(1750557530.739:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23541 comm="syz.5.4706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8698e929 code=0x7fc00000 [ 1979.223236][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1979.346537][T23531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1979.363173][T23531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1979.376595][T23560] vxcan0: tx drop: invalid sa for name 0x0000001000000000 [ 1979.486336][T23531] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1979.496515][T23531] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1979.505934][T23531] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1979.516674][T23531] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1979.543199][ T30] audit: type=1326 audit(1750557531.159:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23559 comm="syz.5.4712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8698e929 code=0x7ffc0000 [ 1979.570903][ T30] audit: type=1326 audit(1750557531.159:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23559 comm="syz.5.4712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8698e929 code=0x7ffc0000 [ 1979.606629][ T30] audit: type=1326 audit(1750557531.159:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23559 comm="syz.5.4712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbc8698d290 code=0x7ffc0000 [ 1979.631185][T23531] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1979.644710][T23531] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1979.645010][ T30] audit: type=1326 audit(1750557531.159:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23559 comm="syz.5.4712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbc8698d290 code=0x7ffc0000 [ 1979.675656][T23531] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1979.675693][T23531] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1979.697941][ T30] audit: type=1326 audit(1750557531.159:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23559 comm="syz.5.4712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8698e929 code=0x7ffc0000 [ 1979.727542][T23505] hsr0: entered promiscuous mode [ 1979.783054][ T30] audit: type=1326 audit(1750557531.159:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23559 comm="syz.5.4712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc8698e929 code=0x7ffc0000 [ 1979.833864][ T30] audit: type=1326 audit(1750557531.159:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23559 comm="syz.5.4712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8698e929 code=0x7ffc0000 [ 1979.895726][ T30] audit: type=1326 audit(1750557531.159:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23559 comm="syz.5.4712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbc8698e929 code=0x7ffc0000 [ 1979.955364][ T30] audit: type=1326 audit(1750557531.159:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23559 comm="syz.5.4712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc8698e929 code=0x7ffc0000 [ 1980.091097][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1980.097222][ T5905] usb 7-1: USB disconnect, device number 109 [ 1980.117971][ T5905] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1980.170683][ T5905] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1980.210737][ T5905] quatech2 7-1:0.51: device disconnected [ 1980.249523][T19016] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1980.272322][T23579] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4718'. [ 1980.330292][T23579] ieee802154 phy1 wpan1: encryption failed: -22 [ 1980.583571][T19016] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1981.317973][ T5905] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1981.340819][T19016] usb 6-1: Using ep0 maxpacket: 16 [ 1981.464950][T19016] usb 6-1: config 8 has too many interfaces: 131, using maximum allowed: 32 [ 1981.474736][T19016] usb 6-1: config 8 has an invalid descriptor of length 135, skipping remainder of the config [ 1981.492329][T23601] Cannot find del_set index 1 as target [ 1981.493528][T19016] usb 6-1: config 8 has 0 interfaces, different from the descriptor's value: 131 [ 1981.517699][T19016] usb 6-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=3f.90 [ 1981.526939][T19016] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1981.538752][T19016] usb 6-1: Product: syz [ 1981.542954][T19016] usb 6-1: Manufacturer: syz [ 2086.498627][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2086.505643][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14519/1:b..l [ 2086.514300][ C1] rcu: (detected by 1, t=10502 jiffies, g=141649, q=119 ncpus=2) [ 2086.522128][ C1] task:syz-executor state:R running task stack:21960 pid:14519 tgid:14519 ppid:14496 task_flags:0x400140 flags:0x00004000 [ 2086.536592][ C1] Call Trace: [ 2086.539898][ C1] [ 2086.542855][ C1] __schedule+0x16a2/0x4cb0 [ 2086.547412][ C1] ? preempt_schedule_common+0x83/0xd0 [ 2086.552909][ C1] ? __pfx___schedule+0x10/0x10 [ 2086.557791][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 2086.563141][ C1] ? __pfx___schedule+0x10/0x10 [ 2086.568048][ C1] ? preempt_schedule+0xae/0xc0 [ 2086.572943][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 2086.578284][ C1] preempt_schedule_irq+0xb5/0x150 [ 2086.583442][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 2086.589219][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 2086.595063][ C1] irqentry_exit+0x6f/0x90 [ 2086.599525][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 2086.605013][ C1] RIP: 0010:lock_is_held_type+0x137/0x190 [ 2086.610770][ C1] Code: 01 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 05 89 83 3a 07 <48> 3b 44 24 08 75 43 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 2086.630580][ C1] RSP: 0018:ffffc90003fd7c38 EFLAGS: 00000206 [ 2086.636682][ C1] RAX: 37f4dc0a908b6400 RBX: 0000000000000000 RCX: 37f4dc0a908b6400 [ 2086.644771][ C1] RDX: ffff88802a950000 RSI: ffffffff8db5aaa7 RDI: ffffffff8be1b7c0 [ 2086.652773][ C1] RBP: 00000000ffffffff R08: 0000000000000000 R09: ffffffff893d8d2f [ 2086.660780][ C1] R10: dffffc0000000000 R11: ffffed100cb36384 R12: 0000000000000246 [ 2086.668774][ C1] R13: ffff88802a950000 R14: ffffffff8e13ee60 R15: 0000000000000001 [ 2086.676775][ C1] ? sock_update_netprioidx+0x4f/0x3a0 [ 2086.682287][ C1] rcu_read_lock_sched_held+0x89/0x100 [ 2086.687802][ C1] ? __pfx_rcu_read_lock_sched_held+0x10/0x10 [ 2086.693931][ C1] ? sock_update_netprioidx+0x4f/0x3a0 [ 2086.699446][ C1] ? sock_update_netprioidx+0x4f/0x3a0 [ 2086.704945][ C1] sock_update_netprioidx+0x12e/0x3a0 [ 2086.710383][ C1] sk_alloc+0x246/0x370 [ 2086.714582][ C1] inet_create+0x76b/0x1000 [ 2086.719218][ C1] ? inet_create+0x97/0x1000 [ 2086.723845][ C1] __sock_create+0x4b3/0x9f0 [ 2086.728482][ C1] __sys_socket+0xd7/0x1b0 [ 2086.732959][ C1] __x64_sys_socket+0x7a/0x90 [ 2086.737686][ C1] do_syscall_64+0xfa/0x3b0 [ 2086.742219][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2086.747446][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2086.753651][ C1] ? clear_bhb_loop+0x60/0xb0 [ 2086.758382][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2086.764310][ C1] RIP: 0033:0x7f8538d90847 [ 2086.768759][ C1] RSP: 002b:00007ffc6aef8258 EFLAGS: 00000206 ORIG_RAX: 0000000000000029 [ 2086.777212][ C1] RAX: ffffffffffffffda RBX: 00007f8538f7e2e0 RCX: 00007f8538d90847 [ 2086.785212][ C1] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 2086.793213][ C1] RBP: 00007ffc6aef897c R08: 0000000000000000 R09: 00007ffc6aef8687 [ 2086.801227][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000022d [ 2086.809311][ C1] R13: 00000000000927c0 R14: 0000000000000000 R15: 00007ffc6aef89d0 [ 2086.817345][ C1] [ 2086.820490][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g141649 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 2086.832926][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=156923 [ 2086.840947][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g141649 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 2086.852632][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2086.862630][ C1] rcu: RCU grace-period kthread stack dump: [ 2086.868540][ C1] task:rcu_preempt state:I stack:27000 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 2086.880764][ C1] Call Trace: [ 2086.884066][ C1] [ 2086.887062][ C1] __schedule+0x16a2/0x4cb0 [ 2086.891659][ C1] ? schedule+0x165/0x360 [ 2086.896039][ C1] ? __pfx___schedule+0x10/0x10 [ 2086.900968][ C1] ? schedule+0x91/0x360 [ 2086.905253][ C1] schedule+0x165/0x360 [ 2086.909451][ C1] schedule_timeout+0x12b/0x270 [ 2086.914432][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 2086.920008][ C1] ? __pfx_process_timeout+0x10/0x10 [ 2086.925347][ C1] ? prepare_to_swait_event+0x341/0x380 [ 2086.930945][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 2086.935860][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 2086.940860][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2086.946116][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2086.951455][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 2086.956709][ C1] ? finish_swait+0xcd/0x1f0 [ 2086.961343][ C1] rcu_gp_kthread+0x99/0x390 [ 2086.966057][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2086.971290][ C1] ? __kthread_parkme+0x7b/0x200 [ 2086.976265][ C1] ? __kthread_parkme+0x1a1/0x200 [ 2086.981337][ C1] kthread+0x70e/0x8a0 [ 2086.985444][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2086.990673][ C1] ? __pfx_kthread+0x10/0x10 [ 2086.995388][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2087.000715][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2087.005955][ C1] ? __pfx_kthread+0x10/0x10 [ 2087.010577][ C1] ret_from_fork+0x3f9/0x770 [ 2087.015206][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2087.020362][ C1] ? __switch_to_asm+0x39/0x70 [ 2087.025322][ C1] ? __switch_to_asm+0x33/0x70 [ 2087.030114][ C1] ? __pfx_kthread+0x10/0x10 [ 2087.034741][ C1] ret_from_fork_asm+0x1a/0x30 [ 2087.039552][ C1] [ 2087.042600][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 2087.048941][ C1] Sending NMI from CPU 1 to CPUs 0: [ 2087.054441][ C0] NMI backtrace for cpu 0 [ 2087.054455][ C0] CPU: 0 UID: 0 PID: 23601 Comm: syz.3.4724 Not tainted 6.16.0-rc2-syzkaller-00278-g3f75bfff44be #0 PREEMPT(full) [ 2087.054474][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2087.054483][ C0] RIP: 0010:taprio_set_budgets+0x21/0x3b0 [ 2087.054506][ C0] Code: 90 90 90 90 90 90 90 90 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 38 49 89 d7 49 89 f6 48 89 fb 48 bd 00 00 00 00 00 fc ff df ba 68 41 f8 49 89 dd 4c 8d 63 08 4c 89 e0 48 c1 e8 03 80 3c 28 [ 2087.054520][ C0] RSP: 0018:ffffc90000007c00 EFLAGS: 00000086 [ 2087.054535][ C0] RAX: 1ffff1100b7fe6aa RBX: ffff8880114572c0 RCX: dffffc0000000000 [ 2087.054547][ C0] RDX: ffff88805bff3400 RSI: ffff88805a482c00 RDI: ffff8880114572c0 [ 2087.054559][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 2087.054569][ C0] R10: dffffc0000000000 R11: fffff52000000f7c R12: ffff888011457340 [ 2087.054580][ C0] R13: ffff888011457000 R14: ffff88805a482c00 R15: ffff88805bff3400 [ 2087.054592][ C0] FS: 00007f24690196c0(0000) GS:ffff888125c83000(0000) knlGS:0000000000000000 [ 2087.054605][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2087.054616][ C0] CR2: 0000000000000000 CR3: 0000000066d86000 CR4: 00000000003526f0 [ 2087.054631][ C0] DR0: 000000000000634b DR1: 0000000000000000 DR2: 0000000000000000 [ 2087.054642][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2087.054652][ C0] Call Trace: [ 2087.054659][ C0] [ 2087.054671][ C0] advance_sched+0x963/0xc90 [ 2087.054695][ C0] ? __pfx_advance_sched+0x10/0x10 [ 2087.054713][ C0] __hrtimer_run_queues+0x529/0xc60 [ 2087.054743][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2087.054761][ C0] ? read_tsc+0x9/0x20 [ 2087.054782][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 2087.054814][ C0] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 2087.054836][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 2087.054857][ C0] [ 2087.054862][ C0] [ 2087.054869][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2087.054885][ C0] RIP: 0010:console_flush_all+0x7f7/0xc40 [ 2087.054902][ C0] Code: 48 21 c3 0f 85 e9 01 00 00 e8 05 24 1f 00 48 8b 5c 24 20 4d 85 f6 75 07 e8 f6 23 1f 00 eb 06 e8 ef 23 1f 00 fb 48 8b 44 24 28 <42> 80 3c 20 00 74 08 48 89 df e8 3a 77 80 00 48 8b 1b 48 8b 44 24 [ 2087.054914][ C0] RSP: 0018:ffffc9000b58f2a0 EFLAGS: 00000283 [ 2087.054927][ C0] RAX: 1ffffffff1d345df RBX: ffffffff8e9a2ef8 RCX: 0000000000080000 [ 2087.054938][ C0] RDX: ffffc9001f600000 RSI: 0000000000001ae9 RDI: 0000000000001aea [ 2087.054949][ C0] RBP: ffffc9000b58f3f0 R08: ffffffff8f9fe2f7 R09: 1ffffffff1f3fc5e [ 2087.054961][ C0] R10: dffffc0000000000 R11: fffffbfff1f3fc5f R12: dffffc0000000000 [ 2087.054972][ C0] R13: 0000000000000001 R14: 0000000000000200 R15: ffffffff8e9a2ea0 [ 2087.054993][ C0] ? console_flush_all+0x13a/0xc40 [ 2087.055012][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 2087.055027][ C0] ? __is_module_percpu_address+0x28/0x3f0 [ 2087.055053][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 2087.055072][ C0] console_unlock+0xc4/0x270 [ 2087.055094][ C0] ? __pfx_console_unlock+0x10/0x10 [ 2087.055117][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 2087.055135][ C0] vprintk_emit+0x5b7/0x7a0 [ 2087.055157][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 2087.055177][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2087.055196][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2087.055222][ C0] _printk+0xcf/0x120 [ 2087.055237][ C0] ? __pfx____ratelimit+0x10/0x10 [ 2087.055258][ C0] ? __pfx__printk+0x10/0x10 [ 2087.055276][ C0] ? ip_set_nfnl_get_byindex+0x1cb/0x230 [ 2087.055299][ C0] set_target_v1_checkentry+0x3ea/0x500 [ 2087.055318][ C0] xt_check_target+0x3c0/0xa90 [ 2087.055339][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2087.055361][ C0] ? __pfx_xt_check_target+0x10/0x10 [ 2087.055388][ C0] ? pcpu_alloc_noprof+0xfdd/0x16b0 [ 2087.055411][ C0] ? xt_find_target+0x1f3/0x240 [ 2087.055432][ C0] translate_table+0x186b/0x2040 [ 2087.055462][ C0] ? __pfx_translate_table+0x10/0x10 [ 2087.055481][ C0] ? __might_fault+0xb0/0x130 [ 2087.055507][ C0] ? _copy_from_user+0x94/0xb0 [ 2087.055525][ C0] do_ip6t_set_ctl+0x970/0xce0 [ 2087.055547][ C0] ? rcu_is_watching+0x15/0xb0 [ 2087.055567][ C0] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 2087.055595][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 2087.055615][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 2087.055645][ C0] nf_setsockopt+0x26f/0x290 [ 2087.055665][ C0] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2087.055681][ C0] do_sock_setsockopt+0x257/0x3e0 [ 2087.055701][ C0] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 2087.055720][ C0] ? __fget_files+0x2a/0x420 [ 2087.055743][ C0] __x64_sys_setsockopt+0x18b/0x220 [ 2087.055763][ C0] do_syscall_64+0xfa/0x3b0 [ 2087.055776][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2087.055795][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2087.055810][ C0] ? clear_bhb_loop+0x60/0xb0 [ 2087.055827][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2087.055841][ C0] RIP: 0033:0x7f246818e929 [ 2087.055856][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2087.055868][ C0] RSP: 002b:00007f2469019038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2087.055884][ C0] RAX: ffffffffffffffda RBX: 00007f24683b6080 RCX: 00007f246818e929 [ 2087.055895][ C0] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000000b [ 2087.055905][ C0] RBP: 00007f2468210b39 R08: 00000000000003e8 R09: 0000000000000000 [ 2087.055915][ C0] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2087.055925][ C0] R13: 0000000000000000 R14: 00007f24683b6080 R15: 00007ffedea13118 [ 2087.055944][ C0]