last executing test programs: 19m45.878082514s ago: executing program 32 (id=2079): r0 = memfd_create(&(0x7f0000000180)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00\xf4l\xed\x1c\xe4\xa0bi\xd9\xe9\xe6X\xa4@\xf8\xfcZH\x94\xd1\xb4\xbb\'\xfbM\x8a\a\x00\x00\x00h\x11\x1ft\xf1\xdc*T\xa7\xb3\xf2\x8cK\xa4y\x88\xe6\x92\x0f\xbdUS,2\xc5\xff\x83~\xa7\xb8\x9a\xa1\x9e\xf5\xbc_\x8b.\xb0\xd0\x82\xce1\xcd\xfe\b\xcf\t\xf7Jf,<.)F[\f%\x00\xca5\x06\x84J\x05\xcdo<\xcf\x98rK\xf6\x97Tk\x827Q\xb1\rnL\xd7\xb5/:\xab5\xf8\xc7\x13\xf7\xe6\xf1\xdd\xac\x93\xb0\x80\xe1\x92GUr>\x0f\x96\x83\xbd\xcf\xfe\xb3\xe2r\t*G.\xf5]\xdc\x9c\xd80\xd1\x1a\xedh\x1b\xfc\xd1\x9dQ0\x1c\xbd\x183\xe4\x00\xca\x19\xbd9h\x9b\xf1O\x03\xc8\xea\xe7@\x91&\xe6\xd9\xe9\x87@\xaby\xb8\xfc\xbbL~\x0e\xe7,\xa3\xe9\xb9\x8f@\x04\x981w?\xd8zx\x84)\r\xc4\xc2?o\'\xcag\xc7\x00\xfe\xff\xff\xff\xff\xff\xff\xb3\xe5\xb5\xc6\xae\x00\x00\x00', 0x3) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x1, &(0x7f0000000080)="010000000000060000071a80000001cc", 0x10) close(0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000006, 0x11, r0, 0x0) fcntl$addseals(r0, 0x409, 0xa) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000100)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x7fff, 0x3a, '/', 0x3a, '\xf4', 0x3a, './file0'}, 0x29) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000001c0)={0x1000, 0x108000, 0x28}) socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) socket(0x2b, 0x1, 0x1) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) 14m1.076406189s ago: executing program 33 (id=3090): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_io_uring_setup(0x491, &(0x7f0000000f80)={0x0, 0x79af, 0x3180, 0x0, 0x400251}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_TIMEOUT={0xb, 0x4c, 0x0, 0x0, 0x9, &(0x7f0000000140)={0x0, 0x989680}, 0x1, 0x4}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="5c00000011006bcc9e3be35c6e17aa31076b876c0400000000000000160af36514001ac00400020208000200030000000400000000b556a705a51e618294ff0051f60a84c9", 0xa5}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x15, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000280), 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x180, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'netpci0\x00', 0x5}) ioctl$TUNSETPERSIST(r8, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETTXFILTER(r8, 0x400454d1, 0x0) syz_io_uring_setup(0x24f6, &(0x7f0000000b80)={0x0, 0x3c0e, 0x10100, 0x1, 0x33a, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x104, &(0x7f0000000240)=0x4, 0x0, 0x4) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r11, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x0, 0x8, 0x1, 0x8}, {0x0, 0xf, 0x6, 0x100}, {0x6297, 0x81, 0x80, 0x2}, {0x101, 0x0, 0x3, 0x8}]}) 10m14.240218567s ago: executing program 34 (id=3713): prctl$PR_SET_SECUREBITS(0x1c, 0x2c) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) flock(0xffffffffffffffff, 0x2) setuid(0xee00) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000240), 0x8000000000, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000280)={0x6, 0x0, 0x4, {0x2, @sdr={0xb5315258, 0x6}}, 0xb146}) fcntl$notify(r0, 0x402, 0x91ea6c1af182532) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r4, 0xb) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000080)=""/123) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newtaction={0x2348, 0x30, 0x309, 0x0, 0x2, {}, [{0x2334, 0x1, [@m_ct={0x174, 0x1, 0x0, 0x0, {{0x7}, {0x5c, 0x2, 0x0, 0x1, [@TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e22}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_PARMS={0x18, 0x1, {0x4, 0xc8, 0x20000000, 0x3, 0x4}}, @TCA_CT_PARMS={0x18, 0x1, {0x40, 0x5, 0x3, 0x0, 0x6}}, @TCA_CT_ACTION={0x6, 0x3, 0x2}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x35}]}, {0xf3, 0x6, "f57d835d59e41255002c1fb21799b6c9afad4b9bfc8632fa053653637ba9e0a3a247d20a87cecb81507d1d31c8e124ed274ff35c867aff7a82b7809e8cbe1c5a5060579a528437ca0f0720328ab058cdfe8b14d9282f7e42830598d2c86aa2938867eaa7c55202889a6c50590b1ded7622cfb9309e40ae153d7ec48715788edce16d7c11b95a8814035acae4147c604c88efa1628740fe5e40b7ebaf77caf715883cb9ff30aead2e9cde88b9fb27b21a7f9bd2cb561b936dde21ca9fcf0ab55c4530e9a955a39f9875cfdaec2841d286b7cdadfc9fe6d97d21fc5313e238ed5440678733f3ae6691417a4a2f849da9"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_pedit={0x1f10, 0x1a, 0x0, 0x0, {{0xa}, {0x1df8, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe38, 0x2, {{{0x12, 0x8, 0x2}, 0x81, 0x2, [{0x7, 0x8, 0x5, 0x8, 0x8, 0xffffff3a}]}, [{0x3432, 0x4a9, 0xe74, 0x1, 0xee1, 0x7}, {0xff, 0x1788, 0x1, 0x6, 0x6, 0x80000000}, {0xc6, 0x10001, 0x7ff, 0x2, 0xfffff377, 0x361a}, {0xa, 0x7b7de5ad, 0x1ff, 0x3, 0x89, 0x90}, {0xf, 0x4, 0x10000, 0xc7, 0x400000, 0x1}, {0x8, 0xfa, 0x4, 0x3, 0x6, 0x7f}, {0x9a, 0x4, 0x4, 0x2, 0x2, 0x80}, {0x0, 0xffffffff, 0xfffff485, 0x4, 0xfffffffe, 0x4}, {0xfff, 0x7, 0x7fffffff, 0xff, 0x1}, {0xffffff2b, 0x4819, 0x1bf8, 0xfff, 0xd, 0x80000001}, {0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x6, 0x12, 0x7, 0x1, 0x7, 0xd9}, {0x530f, 0x400, 0x6, 0x88, 0x656d11e5, 0x2}, {0x3, 0xfffffffa, 0x4, 0x401, 0xc, 0xffffffff}, {0x200, 0x1, 0x4, 0x3, 0xc40, 0x8}, {0x6, 0x7f, 0x0, 0x0, 0x8000, 0x6}, {0x1, 0x5, 0xfffffffc, 0xd377, 0x7, 0xfffffffd}, {0x74af, 0x3, 0xa, 0x80000000, 0x9, 0x21f}, {0x0, 0x3, 0x4f, 0x8, 0x4, 0x4}, {0x5, 0x0, 0x948044a9, 0x1ff, 0xfffffff9, 0x200}, {0x21782130, 0x6615, 0xb2f, 0x7, 0xffffff4f, 0x29}, {0x6, 0x9, 0xf, 0xfffffffd, 0xe3a, 0xb}, {0x76, 0x3, 0x621, 0x81, 0x0, 0x80}, {0xda9d, 0xfcc, 0x5, 0xa4, 0x3, 0x7}, {0xb, 0x8, 0x0, 0x3ff, 0x3, 0xc7d0}, {0x3, 0x5, 0x8, 0x6, 0x3, 0xc7bf}, {0x5, 0x4, 0x9, 0x6e9f, 0x10, 0x1000}, {0x80, 0x1, 0xb, 0x70c, 0x7fff, 0x10}, {0x8, 0x1, 0x1a06, 0x1000, 0x5, 0x8}, {0x7, 0xfffffff8, 0x9, 0x3, 0x9, 0x7}, {0x8, 0x401, 0x5, 0xc, 0x4, 0x6}, {0x3, 0xffffff06, 0x0, 0x8, 0x8, 0x8}, {0xa, 0xfff, 0x200, 0x6, 0x5, 0xda}, {0x6, 0xa, 0x2, 0x8, 0x5, 0x9}, {0x56, 0xffff, 0x9, 0x1, 0x634b, 0x1}, {0x3, 0xfc, 0x1, 0x8, 0x1, 0xff}, {0x1, 0x4, 0x6, 0x6e8, 0x1, 0x7}, {0x4, 0x15da, 0x5, 0x0, 0x4, 0x7fffffff}, {0x2, 0x1, 0x1, 0x1ff8, 0x0, 0xc61}, {0x80000000, 0x80000000, 0x8, 0x2, 0xb98b, 0x2}, {0x5, 0x9, 0x0, 0x5, 0x4, 0xfffffff9}, {0x0, 0x8, 0xaebc, 0x9, 0xab, 0x1}, {0x10000, 0x496, 0xfffffff7, 0x120, 0x81, 0x3}, {0xfffffffd, 0xb, 0x4, 0x4e, 0x200, 0x4}, {0x1ff, 0x5, 0x1, 0x2, 0x8, 0x8}, {0x9, 0x15b, 0xffffffff, 0x5c, 0x3, 0x1}, {0x1, 0x9, 0xffffffff, 0x1, 0x401, 0xad89}, {0x7f, 0x9a1, 0x9, 0x1, 0x81, 0x4}, {0x5, 0x8000, 0x488, 0x2, 0x7, 0x9}, {0x95, 0x1, 0x35a, 0x200, 0x4, 0x1}, {0x3, 0x4, 0x8, 0x100, 0xa5bb, 0xf165}, {0x10, 0x1, 0x1, 0x587, 0x5, 0x7a8ac55a}, {0x1, 0x4, 0x7, 0x8, 0x6a6, 0x3}, {0x6, 0x7fffffff, 0xf9d2, 0x3, 0x2e, 0xffff}, {0x9, 0x3, 0x7fff, 0xfe82, 0x10001, 0xd0d}, {0xc, 0xfffffb00, 0xd, 0x2, 0x8, 0x8}, {0x9, 0x400, 0x7, 0xb, 0x7, 0x3}, {0xffffffff, 0x5, 0x5, 0x1, 0x8, 0x1fcc}, {0x0, 0x0, 0x64af, 0x41f, 0x6, 0x6}, {0x7, 0x1, 0xcc2, 0xfffffbce, 0xb4a, 0x9}, {0x10, 0x1, 0x3ff, 0x0, 0xa744, 0x5734}, {0x1, 0x7, 0x2, 0x3, 0x2, 0x5}, {0x4919, 0x7, 0x80, 0x4, 0x6, 0x800}, {0x8000, 0x43e6, 0x8d27, 0x40, 0x5, 0x3}, {0x8000, 0x400, 0x4, 0x7, 0x2, 0xfffffffb}, {0x9, 0x5, 0x1000, 0x1, 0x1, 0x9}, {0x1, 0x36, 0x4, 0x101, 0x6, 0xbfd}, {0x4, 0x600, 0x986, 0xfffffff9, 0xc4, 0x1}, {0xc, 0x0, 0x8, 0x11, 0x1, 0x972}, {0x6, 0xffffff00, 0x5179e172, 0x70000000, 0x2, 0xac46}, {0x0, 0x10, 0x6, 0x7, 0xded4765, 0x4}, {0xee79, 0x7fff, 0x4, 0x1, 0x1, 0x9}, {0x7fff, 0x1, 0xb739, 0xfffffff9, 0x1, 0x8}, {0xc9, 0x8, 0xaa, 0x8, 0x4, 0x3}, {0x5, 0x7fff, 0xffffffff, 0x10, 0x400, 0x9}, {0x1000, 0x9, 0x0, 0x8, 0x4, 0x2}, {0x1, 0x15a8, 0x2, 0xfffffff6, 0x2, 0x400}, {0x7, 0x401, 0x10001, 0x4, 0x3, 0x2}, {0x647, 0x7, 0x0, 0xff, 0xa62d, 0x7}, {0x3, 0xc5e, 0x3, 0x400, 0x7, 0x4229}, {0xf6, 0x3de, 0x3, 0x6, 0x8, 0x28c}, {0x7fff, 0x0, 0x7, 0x3, 0x4, 0x32ffd437}, {0x2, 0x1000, 0xfff, 0x7ff, 0xf, 0x7}, {0x3, 0x0, 0xc, 0x2, 0x2, 0x100}, {0x5, 0xffff, 0x800, 0x5, 0x401, 0x3}, {0x5, 0x14, 0x7d, 0x7, 0x8001, 0x1400}, {0xd86, 0x7, 0xd, 0x9f, 0xd2f, 0x100}, {0x4, 0x3, 0x8, 0x0, 0x1, 0x80000001}, {0x80000001, 0x7, 0x3, 0x6, 0x8, 0xfffffffb}, {0x10001, 0x93cd, 0xfb, 0xc9, 0xd3a1, 0x32}, {0x9d, 0x80000000, 0x43b, 0x8, 0xe, 0x5}, {0x34, 0x4, 0x4, 0x53c8ca9, 0x8, 0xff}, {0x2, 0x1, 0x9, 0x0, 0x6000000, 0x10001}, {0x40, 0x7, 0x5, 0x2, 0x1, 0x3}, {0x80000000, 0x3, 0x2, 0x0, 0x0, 0xfffffe00}, {0x2, 0x5, 0x10000, 0x6b, 0xfffffffe, 0xfffffffa}, {0xb, 0xfffffcaf, 0x0, 0xfffffffd, 0x7ff, 0x6029}, {0x5, 0xdc, 0xfffffff7, 0x7, 0x6319, 0x921d}, {0x2, 0x8, 0x2, 0x2, 0x5, 0xed4}, {0x800, 0xe90a, 0x6, 0x4, 0x0, 0x6}, {0x2, 0x270a, 0x7, 0xb, 0x700, 0xffff}, {0x3, 0x40, 0x80000000, 0x1, 0x341, 0xfffffff0}, {0xfc0, 0xc00000, 0xdb7e, 0x2, 0x76, 0xa14}, {0x7, 0x137c, 0x7ff, 0xffffffb0, 0x280000, 0x6}, {0x80, 0x80000000, 0x4, 0x81, 0x7, 0x7ff}, {0x0, 0x5, 0x2, 0xa4cc, 0x8003}, {0x7, 0x40, 0x2e9, 0x7, 0x6, 0xffffff47}, {0x400, 0x5, 0x9, 0x7, 0xffffff52, 0x1000}, {0xa, 0x8, 0x0, 0xff, 0x80000000, 0x2}, {0xffff, 0x5, 0x1000, 0xffffffff, 0x4, 0x6}, {0x7, 0x0, 0x3, 0x4, 0x3}, {0x4, 0x10e1, 0x10, 0x5, 0x7, 0x101}, {0x3, 0x8, 0x5, 0x0, 0x1, 0x7}, {0x6, 0x401, 0x400, 0x0, 0x47a, 0x2}, {0xffffffff, 0x0, 0x5, 0x6, 0x7, 0x7ff}, {0x9, 0xffffff56, 0x2, 0x7ff, 0x8000, 0xc}, {0x2, 0x2f6, 0x3, 0x80, 0x1ff, 0x4}, {0x6, 0x0, 0x1, 0x3, 0x8, 0x8}, {0x2a54, 0x9, 0x4, 0x4, 0x4, 0x7fffffff}, {0x9, 0x80, 0x3, 0xdb8a, 0x7, 0x6}, {0x0, 0x8, 0x7721, 0x9, 0x10, 0x2bc}, {0x325, 0x5, 0x9, 0x3, 0x0, 0x8}, {0x7ff, 0x6, 0x200, 0x0, 0x1, 0xba7e}, {0x5, 0x5, 0x10000, 0x8, 0x4, 0x97c0}, {0x7fffffff, 0x9c32, 0x5, 0x8, 0xe9f8, 0x7}, {0x4, 0x42d, 0x7, 0x3bb2eeaf, 0x61a4, 0xfffff801}, {0x81, 0xffff, 0x8, 0x1ff, 0x344, 0x2}, {0xffff, 0x8, 0x2, 0x800000, 0x401, 0x100}], [{0xf545a6d4259b24c7, 0x1}, {0x2}, {0x2}, {0x2}, {}, {0x4}, {0x1}, {0x3}, {0x6}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x6, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x2, 0x1}, {}, {0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x4}, {0x4}, {0x5, 0x1}, {0x19440a6cbb684194, 0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x33c5b3f14ce42a0c}, {0x5, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x5}, {0x4}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x2}, {0x7}, {0x0, 0x1}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x5, 0x1}, {0x5}, {0x4}, {}, {0x5, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x6}, {0x4}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x3}, {0x2}, {0x2}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {0x3}, {0x3}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x7}, {0x4, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x124, 0x5, 0x0, 0x1, [{0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS={0xe98, 0x2, {{{0xffffff05, 0x7, 0x10000000, 0x3, 0x4}, 0x1, 0x7, [{0x3, 0xe, 0x2ce, 0x2, 0x65, 0x7}, {0x4, 0xfffffff1, 0x88, 0x81, 0x3, 0x4}, {0x6, 0x1, 0xb, 0x0, 0x4, 0x3ff}, {0x7, 0x3, 0x0, 0x3, 0x3, 0x7ff}, {0x7, 0x3, 0x3, 0x200, 0x80000001, 0x3}]}, [{0x6, 0x0, 0x2, 0x1000, 0xc8ea, 0x200000}, {0xb, 0x4, 0x3, 0x8, 0xe, 0x1d2c7291}, {0xe32, 0xf64, 0x5, 0x80000000, 0xfff, 0x7f}, {0x0, 0x0, 0x5, 0xee72, 0x1, 0x9}, {0x8, 0x0, 0x91, 0x8, 0x80, 0xf6d2}, {0x5, 0x5, 0x6, 0x8, 0x3, 0x5}, {0xffffffff, 0x9, 0x2, 0x6, 0x5, 0x2}, {0x9, 0xb4, 0x5, 0x4, 0x7, 0x6}, {0x1, 0x0, 0x4, 0x2, 0x2, 0x8}, {0x6, 0xfffffe0a, 0x1, 0x7, 0xfffffffc, 0x80000000}, {0x7, 0x7ff, 0x1, 0xbaa, 0x2, 0xa}, {0x4, 0xfff, 0x3, 0x3, 0xf, 0x10}, {0x3, 0x1, 0x4, 0x8, 0x82, 0x6}, {0x1, 0x8, 0x636f, 0xfffffff8, 0xc, 0x6}, {0x4, 0x6, 0x1, 0x0, 0x9, 0xfbb}, {0xfffffffd, 0x1, 0x78e, 0x80000000, 0x2, 0xfffffffc}, {0x7, 0x8001, 0x0, 0x9a, 0x2, 0x8}, {0x400, 0x876b9a1, 0x5, 0x13, 0x400, 0x6}, {0x9, 0x5, 0xe4, 0xfffff801, 0x3, 0x9450418b}, {0x5, 0x6, 0x3, 0x27, 0x729, 0xffff8001}, {0x0, 0x0, 0x8, 0x6, 0x6468, 0x1}, {0xa9, 0x5, 0x8, 0x8000, 0x7, 0x6}, {0x9b, 0x6, 0x5, 0x0, 0x0, 0xe0f}, {0x4, 0xfc, 0xffc, 0x401, 0x3, 0x7}, {0x4, 0x0, 0x11, 0x9, 0x4, 0x1076}, {0x8, 0xfffffffd, 0x9, 0x3, 0xffff6343, 0x7}, {0x1, 0x5, 0x4a, 0x4, 0x12, 0x6}, {0xfffffffa, 0x7fff, 0xa, 0x1000, 0x4c, 0x7}, {0xbc59, 0x7fffffff, 0x2, 0x8, 0x1, 0x3}, {0xf90, 0x5, 0x4, 0x6, 0xb, 0x5}, {0xc2b, 0x5, 0x800, 0xbea4, 0x3, 0x4}, {0x1, 0x9, 0x0, 0x8, 0x1ff, 0x5}, {0x3, 0x81, 0x7f, 0xfffffffb, 0xfa6, 0x1}, {0x7, 0x5, 0x1, 0x3, 0x7fff}, {0x2, 0x80, 0x6cf, 0x6, 0x1a22, 0x9}, {0x8001, 0x3, 0x27, 0x80000000, 0x1, 0x2}, {0x200, 0x8, 0x1, 0x5, 0x5, 0x7fff}, {0x1, 0x8001, 0xcfa, 0x1000, 0x1, 0x3}, {0xfffffff9, 0x5, 0x1, 0xfffff306, 0x9, 0x4}, {0x7, 0x2, 0x6, 0xc4e, 0x9, 0x9}, {0x1, 0x2400000, 0x401, 0x7fffffff, 0x9, 0x5}, {0x4, 0x2, 0x6, 0xc, 0x8000, 0xc62}, {0x8, 0x6, 0x1, 0x8, 0x23c, 0x7423}, {0x3, 0xfffffffe, 0x4469cdf, 0xfe, 0x0, 0xff}, {0x3, 0x4, 0x2, 0x8000, 0x44, 0x9}, {0x0, 0x3, 0x3, 0x2, 0x2, 0x9}, {0x2, 0x7, 0x0, 0x40, 0x101, 0x9}, {0x1, 0x4, 0x6c000000, 0x800, 0x0, 0x10}, {0x9, 0x9, 0xfffffff7, 0x4, 0x9}, {0x3, 0x9, 0xd, 0x80000001, 0xffffff01, 0x7}, {0x8, 0xfffffff8, 0x275f, 0xe, 0x800, 0x2}, {0x8, 0x2, 0x10, 0x2, 0x0, 0x10}, {0xa, 0x6, 0xb95, 0x10, 0xa, 0x6a3}, {0x101, 0x9, 0x2, 0x5f1d, 0x6, 0x3}, {0xe88b, 0x2, 0x0, 0x7, 0xb}, {0x5, 0x3, 0x3ff, 0x2, 0x40000000, 0x7}, {0x9, 0x5, 0x3, 0x800, 0x1, 0x612674b3}, {0x5, 0x7b9aea1b, 0x8, 0xfae, 0x8, 0x1}, {0xfff, 0x9, 0x3, 0x2, 0x8001, 0x7f}, {0x1ff, 0x0, 0x1, 0x0, 0x1, 0x1}, {0xfffffff8, 0x6, 0xb, 0x7, 0x7360e5bc, 0x40}, {0x1ff, 0x7, 0x5bf, 0x0, 0x8, 0x6}, {0x3, 0x2, 0x4, 0x7fffffff, 0x583, 0xff}, {0x3a95, 0x7, 0x7, 0x7f, 0x8, 0x7}, {0xff, 0x0, 0x5, 0x2, 0x5, 0x3}, {0x7ab7, 0x0, 0x1, 0xfffffff6, 0x7, 0x4}, {0x7fffffff, 0x9, 0xd5, 0x9, 0x3, 0x5}, {0x9, 0x4, 0x13bf, 0x7f, 0x3, 0x9}, {0x9, 0x2a08601e, 0x4, 0x0, 0x1000, 0x4}, {0x10, 0x7f, 0x29da, 0x40, 0x1b2000, 0x80}, {0x3ff, 0x7ff, 0x4, 0x4, 0x9, 0x1}, {0x9, 0x5, 0x2, 0x12b6, 0xa06, 0x4}, {0xa, 0x621c, 0x7ff, 0x3, 0xcd, 0xffffffff}, {0x9, 0x9, 0x1, 0x1, 0x6, 0x9}, {0x0, 0x19, 0x1ff, 0xf6, 0x2}, {0x7fff, 0x7ff, 0x6, 0x9, 0x1, 0x8}, {0x4, 0x0, 0x5, 0x5, 0x8, 0x7}, {0x7, 0x5, 0x200, 0x7, 0x9, 0x32}, {0x2, 0x5, 0x8, 0x200, 0x503, 0x1}, {0x1000, 0x36bb, 0x65f5, 0x9, 0x6, 0x4}, {0xfffffffc, 0x0, 0x80, 0x4, 0x41c, 0x280}, {0x6, 0x3, 0x9, 0x6, 0x7, 0x6}, {0x11, 0x42, 0xee2, 0x7fffffff, 0x5}, {0x7, 0x8, 0xed1c, 0x2, 0x3, 0xbc73}, {0xfffffffb, 0x7, 0x8, 0x2, 0x5, 0x5}, {0x28, 0x9b, 0x6, 0x2, 0x44685ebd, 0x1}, {0x7fffffff, 0xfa6, 0x7ff, 0x50000, 0x6, 0x10}, {0x9b, 0xfffff801, 0x6, 0x3ff, 0xfffffffa, 0xa}, {0x9b8, 0xbc, 0x1, 0x4, 0x5, 0x1}, {0x3d, 0x3, 0x9b, 0xffffff7a, 0x8, 0x5}, {0x5, 0x0, 0xe6, 0x2, 0x7f, 0x2}, {0x7ad9, 0x9, 0x4, 0x9, 0x8b8, 0x3}, {0x0, 0x7f, 0x7ff, 0xe, 0x0, 0x9}, {0x1, 0x4, 0x2e6, 0x9, 0x9, 0x1df05d7}, {0x74, 0x800, 0x0, 0x6, 0x7}, {0x1, 0x1c5, 0x6, 0xa, 0x2, 0x4bbc6ff3}, {0x884a, 0x8, 0x8000, 0x10, 0x100, 0x80}, {0x10, 0x4, 0x4e53cda9, 0x7cb60932, 0x8001, 0x7}, {0x7fff, 0x401, 0x0, 0x81, 0x4, 0xba5}, {0x20, 0x80000000, 0xfffffffd, 0x3, 0x4, 0xa}, {0x0, 0x5, 0xfffffffa, 0x6, 0xfffffff8, 0x5bac8cc6}, {0x6, 0x5, 0x60000, 0x5, 0x7f, 0x5}, {0x2, 0x200, 0x1, 0xf6a8, 0x5, 0x81}, {0x9, 0x80000001, 0x5, 0x2, 0x5, 0x1}, {0x9, 0xc, 0x6, 0x0, 0x6, 0x8}, {0x8, 0x3, 0x1000, 0x80000001, 0x4, 0x5}, {0x6, 0x2, 0x1, 0x8, 0x7, 0x400}, {0x8, 0xffffffff, 0x5, 0x6, 0xd31, 0x9}, {0x7, 0x1, 0x2, 0x0, 0x6, 0xfffffffa}, {0x13, 0x10000, 0x0, 0xfff, 0x8, 0xa}, {0x4, 0x8, 0x9, 0x63d, 0x4, 0x9}, {0x1, 0x9ac, 0x0, 0x9, 0x81, 0x5fe7}, {0xfffffffe, 0x0, 0xe, 0x1, 0x1, 0x82a}, {0x5, 0xffff, 0x91d, 0x2, 0x2}, {0x3, 0xffffffff, 0x5, 0x9, 0x8, 0x10}, {0x6, 0x6, 0x7fffffff, 0x1, 0x6, 0xfffffffc}, {0x8, 0x800, 0x5, 0x7f, 0xffff, 0x80}, {0x400, 0x81, 0x5, 0x8, 0x4, 0x9}, {0x4, 0x81, 0x2, 0x7, 0x7, 0x3}, {0xff, 0x9, 0x2, 0x0, 0x0, 0xf2b}, {0x9, 0x1, 0x4, 0x1, 0x7ff, 0x2}, {0x2, 0x7ff, 0x9, 0xed, 0xcacc, 0xcbd}, {0x8, 0x4e, 0x400, 0x4, 0x7, 0x1ff}, {0x5, 0x80, 0xfffffff7, 0x3600000, 0x5, 0x7}, {0x9, 0xabea, 0x10001, 0x80000001, 0x1000, 0x80000000}, {0x3, 0x2e09, 0xfffffbff, 0x5, 0x400, 0x8000}, {0x8, 0x7, 0x4b, 0x7, 0x1, 0x6}, {0xa, 0x0, 0x4, 0xfffffff4, 0xffffffff, 0x53}], [{0x3}, {0x1}, {0x4, 0x1}, {0x5}, {}, {}, {0x3}, {0x1}, {0x5}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x6}, {0x3}, {}, {0x6, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x9, 0x1}, {0x3}, {0x4}, {}, {0x6}, {0x1}, {0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x3}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x3}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x4}, {0x5}, {0x4}, {0x4}, {0x1, 0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x5}, {0x2}, {0x5}, {0x4}, {0x1}, {}, {}, {}, {0x0, 0x1}, {0x7}, {0x5}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x4}, {0x3}, {}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x2}, {0x4, 0x1}, {0x1, 0x1}, {0x4}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x3}, {0x5}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {}, {0x3}, {0x2, 0x1}, {0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {}, {}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x3}, {0x4, 0x1}, {0x5}, {0x4}, {0x8134f80dff0cfafb}]}}]}, {0xee, 0x6, "a9203d3a31f5a89b46face106394b14095433f38d12e3717f9e9f4fe815a3115410365b118d87470a471ff12412f34aec874cc14e08415cfbcd15cfa4a5ab295cf40eb8ff0de8027129f8e56d87c3ce8dcf9c385263edb58e62b165ffc61e19b95e54673e3372197360706001b4fea065f73b8c0f65ed20238092a9593bc6737cfdd6467ee8c1f46ed838df63dcc1922a939615c3f1f629c6167fe3b1972adb1abeb510e161a97d1c6cea8810fbceff5e0add868a3fa583384708b05e5008bb54a4c24d9a59548b9bdc462e68c62db1233665a7f05b0c372fc99da33bd7ca8350da7672b40532092f639"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ct={0x110, 0xa, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x1, 0x101, 0xc3fad1fb8b26b085, 0x81, 0x7}}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e21}]}, {0xc5, 0x6, "727f6a1f0b10c0f65045943a07167ace8c8502e11186319aa92ca50e4ed01abdb48ee685060935531068083af69cf0cb058d12c82c2b29c49c1758a3414da2174aa95515fe342b36168a42c39a7ddf83581c5fe30afef520acdf3e75a9cfbfc128222a32e78a53218a7b699919cc6ec0a5d2c8f0520a3b48c96026302985b2892140d0e4f2460fdfe124bc3998416108c3d699f4c763f4b95695bcdae28a8a5d3f295c5709c8b957e7c30404e7b8c2df760423a98a2ae2c7f305f83f4c0e7353b9"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ct={0xd0, 0x18, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV6_MAX={0x14, 0xc, @local}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_PARMS={0x18, 0x1, {0x4, 0x5, 0x10000000, 0x5, 0x1aa6}}, @TCA_CT_LABELS_MASK={0x14, 0x8, "e23280a2c7091bd8f2246c635295a931"}]}, {0x56, 0x6, "3b642b6e30207d357f100d2e7b54da8d12612cea3e247b1874689e8f421b2b952b28b2df5ac593d51f35e1e32090ba8c8c2ab511fd5681043e9e0939b77c715028cc565664fc43a75cc3829c100455e27047"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_bpf={0xcc, 0x17, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}]}, {0x8c, 0x6, "5a3b08ac97de329a920c2ea651f8c9e7b6bc0722fd7be40ad8baa7e628e0331ccd8cdba0b606c83c9171ec48bf188493b0e6ede3f1864acf5dd530354b7d112ec2c92e61115c2d96d20472460481eb8bfaf1137ac519e26a0c97d4793b4c9fcce02e4d830c0155ab2a3e40b2fca3f50a653d3ea8fe7a2d3a8c15d0dd58f566f2559e4aa4fa6b80a1"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x2348}, 0x1, 0x0, 0x0, 0x20040801}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 10m13.064647627s ago: executing program 35 (id=3720): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000008c0)={'bond_slave_0\x00', &(0x7f0000000880)=@ethtool_channels={0x3d, 0x800, 0x5, 0x7, 0x8, 0x2, 0x8c8, 0x1, 0x5}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pipe(0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00'], 0x3}}, 0x0) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10d00, 0xf) 9m52.188308152s ago: executing program 4 (id=3799): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x4001, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRES16=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=0x0]) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES16=r4, @ANYBLOB="01000003000000000000040000000800000006f0ffffff"], 0x24}}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x74, r4, 0x800, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_DOMAIN={0xa, 0x1, 'bond0\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xfffffffffffffffc}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x74}, 0x1, 0x0, 0x0, 0x8040}, 0x20000083) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) statx(0xffffffffffffff9c, &(0x7f0000000680)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x4900, 0x7fd, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$cgroup(0x0, &(0x7f00000004c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000640), 0x84000, &(0x7f00000007c0)={[{@none}, {@favordynmods}, {@none}, {@release_agent={'release_agent', 0x3d, '\xe9\x1fq\x89Y\x1e\x923aK'}}, {@nofavordynmods}, {}], [{@smackfsfloor}, {@uid_eq={'uid', 0x3d, r7}}]}) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x24, r6, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x3}, @ETHTOOL_A_RINGS_TX={0x8, 0x9, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x800) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x151200, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r8) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, r9, 0x1, 0x0, 0x0, {0x4, 0x74, 0x609}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x2}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'bond0\x00'}]}, 0x30}, 0x1, 0xffffffff00000003}, 0x0) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000004000000000000000010"], 0x28) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000580)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)={0x64, 0x0, 0x20, 0x70bdaa, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x9}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x64}, 0x1, 0x0, 0x0, 0x48001}, 0x4811) 9m51.497822569s ago: executing program 4 (id=3802): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 9m50.762802951s ago: executing program 4 (id=3803): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000b00)={0x0, 0x1, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0xf4c, '\x00', @p_u16=&(0x7f00000000c0)=0x400}}) syz_usb_connect$cdc_ecm(0x5, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a440000000010109024400010100000009040000120206000005240600000524"], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) readv(r2, &(0x7f00000012c0)=[{&(0x7f0000001640)=""/107, 0x6b}], 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_udp_int(r3, 0x11, 0x66, 0x0, &(0x7f0000000100)) syz_open_dev$usbfs(&(0x7f0000000240), 0x10, 0x80100) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5c114b6f, 0x12, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x4, 0x89727a31546dcc4f, 0x4}) ioctl$VIDIOC_S_AUDOUT(r4, 0x40345632, &(0x7f0000000040)={0x9edb, "477333bf5c1574e83622aff42392e87db83427543f3e6ea0247204b09f58b955", 0x1, 0x1}) socketpair$unix(0x1, 0x2, 0x0, 0x0) 9m48.413502387s ago: executing program 4 (id=3808): socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f00000020c0)="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", 0x2000, &(0x7f00000006c0)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x772d42, 0x0, 0xfffc, 0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004300)="e05acff62a41134e0f28a6ba227995b05776c837ab3a066a329e33b775d4586b7a0c48f3471ede96c5e03e1f347acdb576b1b8c75ad4fe76f3ceb2331adb9676968ebcc8bc70b50acd984f9067e2499ec9e28061d978efb1ebbb90d82d973c7b4bdadf6dcf1cd1ba8a4b8882779ab3c5a956791fcf5097ee4b0da8d910938b1edf34fbb493d106ad0270110e14f0c94d02e722ba66bc7e3d90197f4fc676d18723513482dbaa39e68b3a4c0d23f9706f67f76202f16de2f3a40b48a2de184a15f89b2935a65017dbd8783a3d9153c275b72470d0fc15920a659c531d6ca85c36012deb6bf650f9d0a598707c1798a3636b7339a0a5b0a3a62073dbc94eaeecccc58722b8d76d0a447fe0ec7c122ee5d028f5dd17813e62da599f209c621c06c98e0440c008b8678dd65ec6ae2b0b659d6883ff1170ff904db86d0748e8dd1e870c6255ddfc90cbb5aba594c593f64f518d69ab7e02425299303d7d37d5ed28afde8fa2daa4627855dba7c4ab12209d5a836ea0c4592cba568dabd5453382eb5f7e6ce5bd0489b876d4d1dabe18f0440190f5898675bff139d7e8c953abb31383b932a67808cc2a2f67cb714b9a2c8e75f68c21fbe56ecb49f39136b7a0b7b6a53a93f33f9987fb7e7437a0852b9194cb75bb84f3b40f4617ae8ce9a8da6ca74d4e7c737bbc5126b0b8bd0c86f4fb861fea02fd7b8649fb1c0523b30f28a24bd7f58495f29cd2e092f5b6ff29f4de5ce56894fbd9fa78df0fb93efe2192e966e14bc9bd4671b0a2c6873d7750773a8aef7f1d35cad742e64664dcd277b2d604f564fdc519911c0749575c7136226cd68f2ec02a1563c727c1eac916cc426da130ac5c5fd6c0169161c2d7f79fb16b9d8025a6c74e14abccaaf30e5e39806a8b1866cc62e8e238c38036cbcb0abf003861103634409202ffac458605f599ae67db8f4cbd45f72ac9bfd126783135f552dd6639937ff0f77e15ebf8a49fe3d6a7da4fd6faf018b62956957c13ae52537c5ffbb4b2c28f3076468b1d11b018b6af74ff706f17c4babd4987bf9afe98a4b9aa357137d9383b8fb6ca370dd2fdc582aa701e85d926bf3087565231d6089911b2cf578786607ec5849d3d58dd423ff4558092c9a22a1153b787f37c9075555e1d06bc99b95b03bb0862da5be4f8d4718b1c6b892c1ad1138cded558e910553a70699e9d6ac935c227bd3326bfe40f389b16517801826d0ba7a1d74528fa273eca268a74e11423f0ea00e2745abbb7342c846566cf067b38a308babc8a45e607f39b66ddd2e772867cee3e14b3e7dd8844c3651330d15db8aa51d94c98ece900f4443bcbbf8849c3fafd4e5d4e1e5ea4306c081438e1694c59bdafa3b6bf80302b48f09a541dd30db6026ac247303db3facce171b64b48a74a1865db29a15db73f6989f7e5d6b6f39431511246b2ac2873dcdbea3fa5636af6813c83a7fe8b3b7936911a6a47f10823188d0ad18dbf3e4c45c296210e5bfc3abc3dc3836fd60a691005857db271290243709c57fc1ca3ad9a7938550b81b473c66e614fdf7ff35b8e19e60f7616ed19af91e4818c5b2c30f5ff903a3da9c7b7debc5d1b9e41f4a12f122a727a627cc5e6a0f8d81161088a93e4d0e592b7e977287833ec9446a6b44aba303e12ecc19c7fda316f6049db6bf1617f6fefeebcded95f75371fbd6db605ed7b77f8f91ea27468a68e068d1aad50a4118bd619aa85d1f5ee0eb9bbdfcad7335628e3ae1340681ce824204a9997f8aad87c8ce0534482cd748148689ec331002203b94af4ecd11d5b75d80838478c26cfee0fa076c5baaa82483b04898ead705bdb37247956ee25db667ea6668a4f3082332070489da02c3b5d25091e3a00f884265185a28757cdeedb3a1e4a0ada801d4a386fbab0c1de6f35fbb6c7d81fd15370909a387eabd3415f146129647a13f20ccfa69e436ce067ed1a9e0dfb877c85f0b8032e64f5379a9f5a92967533f9b45584ce1a04b962306d2d707e0e462d9d2ce94dbf4c52835c2bc005d1c21fd4e64b0f2578a072d8c442c49bb9450a8fcb49a4b2167912ff1f5946585983087deffee403a0c079ba90a0b644584137c58626afc604ab684650aac5ede8632f3e035da41c511bfb25a62d0a283e35fdd67dc0ef135d428297805b5fd0ad62294531f46171f546c61eb6475fd9fc7c8357e65737d39a741417f8a0a7e035f696c1a83d44837e360592db9ae7afd2ae7be9859f062d274b0862746c9ad804eb1c72aecf6ef9cfbbed33f68f38f25eb493d165f3012c04ec02d42421e2232aa4b30910f9d4fb91b9ba2e7b40ea4fdb60f6957e3afed8cab6d076b2f5ac59ea53bd1e9d944cb53deaa2b8ba097664fca77ab97666c6add05e7556b92d8ad11d19887e83a8ae9dc086bbb4d23cabb3615fdc05e35c61fc3e28315659509df1cbaf449ac909f36c69f5366f1bbe9b3bf9899533f06a6161c986607292a202bfcfeb2508aa18dd993d2d239b32e4f06ba1321d607c154965b9d1f52c940777e69430967d456cafabf236a2f8cea019cc87b350a5bc2aed7f1469ae6cadbcd579864d2194e3bc71e2596c690226b15c86aa0c2aede98cec57c4e752edb6fbe58046ca59546511805a71aa187ce4bcd5399c36eb3f76681a63e5a1d948a9cf98703aebda62c0759477f1be96841d60256bb2d7140fe4481d4d5180df9595fae750da2a9178c89fab47766ae30cd3d8ffcb94eb4b4245ef19ee3d95b89094f528c16ed7289703afd5805e923ce48bb5e451a93ceadbef1443e61b6b59fc13e79ed418dc73cf12b302ff40aa09994374eeabec532bc98b820c21d15f2cd10f755132b12c824a8875387c6682e991dfc01280ce1619c23593659de590b080c7f2eac12ec00704ab8b3bc2052ba9ba6f59a2312b9ebf62c6ea1ec5250435c25215f87350903140a4a12d8e3f8e233f0d63002dbbbd12a7ba9282768dc2b2b9aceb9e45e9da4a2d4a8da83e72bf0cf91bc12324b544a1d6145525dd9cf44199d7448d839bc67b1d33d7da10a9abc08f8f08a894edbd42c1baf8482feb06d68f25c4405a624998bd4c28cb9b845712ba307ca9b9ff56131617ceccd2927ecd57796eb103b6b15dfa12b3e8e9aa2ac8af20cde7877501a98d8b04dbd96d606661066dd80ef55d45fbd5c410d4a0d59ad53cfe3779350e71f109118bccb61121bb8eefced8feaa72c95ed737490c7318e7db86d94eda2ce5f9b04f2308dadbd8a2be6991309a56959c6be4312623a04483bd72a64c210bc6ea600d887aeb3781030a0c4a6ee06f38896bb95688ba5c735180ed50f1fce6c321aa0503f714a000b6e10f22d019e0c5bdbf982bc0a3b15ee59e9c573f77073ac64394f3610f68eca10092a7b7544bc1e643c30017133fec103af1111536ec6b37472157ef7a57186d4b64812ee20f51257d2cdaa19b5508fc40824aeb678c368149387f9083d645c9b616fdf08459aa792897293e7dabfab1144ea74d39a2f0d3632d16ce8a8373717eb83d217250646903207ccd9804e584c12bd98be5096c2a43f21161547f6b2fcf244f12a3c6863a90b45901379a1df5948dba63c34aedb7b877c675dec404acdc0348482502c3e9a886d0829a17c06457a2bb3b6c843285b1aecb4c917d9d586b5b47be2895dad99e620cc824f4d0c577f8b737c20c39c40b77db27e8e72d83c6d220011e7e304c97e281697afe31e077f490f0e632a3fb5125351051543125d7895e86007e0be5527f57f98db8235bfaa3c4d25514ae88d06289261b49013f25326461a5672c0fd975af977d9e9725d14c923decf5b60cb800a267644e0fb5e8dfc734c5b1ba810ff276f24f8fd0608bda3ab335252fbfce4e75c533bf44d2f6a2d14314b5bf24ab3d3dc0794a120379264d2bdfb4111e614b4f68d36f930b4802863bd47dc7b8520f8e95b9673a9bac79dd4e68b7dd9e095d87eb8004f19763459171142145ff6ba160709fa7732579c48bbd4ace904fed83603de20179c6d230b1b098b2800749c1836b222b52da56a2d47dcd9a87e4ea2a2fc3da46b05fb446d1b6e134d5979c43c1e79b00ce0909a020fa2e0377e19bbbeb5c4453a0f04a09242a477bcf0fdf824b58b196d7ee987ed68092c6696cf2dbf942310ebb2d674512a4428e9e194127eb44828f9a812c762460486889d715dc6dc4377e557834f31cab1db1b276a5e3c14618c233ae523f1e3f3c0078fe150354855b3c31d0f333928efff70c7383cf65880420cf7ec307b708307fed0745032cb81891b85d67fb55303a30da8f4b3bedeabddc6bd38d92edeec80aff10f0d29f116cfe31f1b1a96962a713300635329c04977ab606e50b93cb1305f5a82c826febf41318f1ddb7e6fd0eaf37936f6950f841c8853bf1acbb96ba04dcc4fa5a23d8eb8e5b22fea5b5784453d51799442c665df83b45ed6fa99401ceec8e0f62b89fab9fadaa0d51e845fcf2ec20676b3d867304b7f893054490af7a0080bdaacfddd54fee4349e03dff156c9f08ceffa31e3701d333251f7cd4b07c52a9901d4fd32bb01261544c7842df78b420b99645e7c2695fcc6dc4e402ddc0ac039bdaf4129a4ae70b37b1c61ebd47e6cb7d6dfde13e7e972c74b706e8a3ad7fddd50cf581d2055ff5b127695d6f5c8fc67df49aaa56afb789a9fa384125f13d928feea35139cd9153b254c6b39f838c0f0367c5efa13c5fbdcbec5c9f88d7d2ff54aaf8d0c4db4cada8b74ea780d32aa0e66942e936061692182be3c5b21fcd99dfbfd22467d4d3ce3d78e88f1481bc2ed388f0dc3f262a079bdcf41d2f21f1de75202fac6b4f8f9f8a7ee0bdb646ce582f6fd358461fc4266f980f33138c41daa3c8a82088eccb8a2944b6dc432f8149414115f209282945e51e5d0a999d518a32fec37e64e8618879f7d65e088514efed5104ead3fab91c017447a645575a50dba5f28a3a6359a9d591ee2c7eadd08b86e733a6a8723880890d3158e527b4d9a676b02ef0faabff71865c487641c6c104c15178106d878c6cd588b2c6f834a4a2ebb9d129ab28eb7dc6a556f3d868e2765034bb146c7be493d19302b31881a11257ed202bd20d53f05d7b5c96954b55cfb933fcf0945a10b460bf7e276ddb6fa313225b7bee647e8e6d5c1ef68dae19d4cca98f00d3a860602b66b09a1392ad01739a5ddb7117dcb0053e9c31602727101225c627225674aa1e49f3c3abeffada9f5ac76b5f10a2de55951de24b1fb144f4c1eae80e27bc36e5da70e01ff37ca465190180644a27eb9a96a15d6fb4eace5e652176a02d4ef8228bd72df5142351a6f1b08981a5c66eeab943983277c1bb192b668ff25cecae19229da67e2d8e3655c409f597b68260c70c47c5843082d94a94e72fc42ed11eed5a0cc5c9eb57de53947d2823cedbd9e417682b7b19ed3be8d27b3a887795b062c88317a0dc04bd6a62cf05fb78b2955af0514a99e3fe0e0f382c9fc2ff820af6451e0915722162c53b060250890c381ebe2edbb63359643ebd780a32770e78c6af810f341f3e07781ee25c92275ab427de063326239514c6623c9a3a2ee2c80da4c77404607cd208e2e9a273cfff2cf9c6cac6ed4cd6641d8890ce82f229cec11b483db0e4fe70161829bebcdc65351e75eef29d4ec70495415927aa6be603dfb8c5c34f4d2a0afe0bd0700540b8ccd9e0421efb4d449225fe38cf4ea8145e7e1ecdcfda0c1b8a6439b3535a7c853065f665cd28c86fcf4b47ce321edc9ba1bed1a6e4160e62819cc8f9d0914ca7c8f54c6392d9b8d8a9e23e6877e240cf50208b5dc085cbf5932d730dde94314d269f8e4730e72c62ebf1100b423e7c02c0c7b3d579fe738a75bf3d29264bc27009673ebc5fd0d777e2b43d4b738addf5e1c1d084270f5ad6441d10e723331ef5d41d1da2597817968e3c33324fd876bb2c4829921fb5c835ed01e78d0fa88d1f4043693a5cbf592f350505d37efd84845feb77ed38a25df0e98678047f320080972ae011d5ecc9b9cb1aa519fc661c3c909ccf1002844a4f3a9ff21dcb3e861cec427cea26eb765e3d30c532f3c67aead616cca4ed0ef627e3edec6a98e0f0866af49b0019ef8c50104b4e21c17b17b36b0bd5d785c0a46dd5e84dc7327d46c73637602f159900ddc1e6bd3f9afddf45ca54cc7958a6fc0a7e9b93c7e91da8afba0a63238f3847860ebe9403ff3b80e067493d34c55e7562b8b0fb06a2f8c1ddc9cd0f785aa9814cd40aa66ded541de15e647303864b27b5cb7631666f4166b6daf929fbff41fd95bf16994a6f9bc8ce579da13442357cd500f10c392ec78b0c161c99742c03b4d745262d86500e2a981586627350cfe1bcf4710b0824070abca21e1a53a36bfbc12ea7fe8336f741784746abef46f52ad131eafd02ac24c1d1636fa30337251a5f169cdb8c57fa214f2a900af0ee866748661f1a67a6c2c6a6e49ce1939139e45a456c7dbbec8a09be48853cd9b1feeefc6729740dde9de04dd1e0f9c774d387a902174274729e6349a7effd237e63c40bdbccb72e44dab5ac1eab96eb75a6ea8f2f7dd362159131072dd8d733fe9c54d1ea4771e85e7cc0b0455dae0a5c8ece44aeff7e2d247e94639c9a74f48e690c02e89d0377fe3afce5d6abc706dd3e23d19809dfa948b010b6d66556ea81ca3690c3322478dfa1e9ef6de5e4d21b6e9867c611fc4e78abc94bd3c9f112739f8d2996834f54d1137f34ff5442c2432746c37031bc7e9201fdeb7d73a24163fe423fdf3e8e22b655ec159664e905675d8bb80d651d4dda22dfed198d02c2b8ff5b0760fd2aea35e5196193930200b048b59d4e6cf398652a4726925c8a1936ee29cde1bd70fdeeec0aa1e9289711c57ab8ba170c427173fada71e9a1f0fc4cbe23c248f5340db3f9ba4f8c23da230ef4c1013ba0ffaaf5bfc58cc2eb5084f96bcdce7c1ce76c4206189bfbc9d8f1238aed641c39693363762f2cbb1b3433cb01fba42dfbc7b1aa6a46cb9bfcc98a8d8f46cde8a5dc9d74de7fc73aa22420acd949a26c2bd0c8c6f05fcac03a88e622c851454f583623b35f825038ab1aaa3091d05018c2179f473a889219e3414bbbf4eb62333df13ca9eef4dd987358c90d6bdc113aa2972cbff9b7d7e5a76fa182609401567889febe7f2443b338982c3be4328caa199f4b14652ff609b3012fc66cd7a02d8e837bf85f7d2ee7f5061b359104a90e5a74179f6fe7ea44acaf2e8531b05875e041a7f42f6551e89518dd06f04ceaa5140fee9535cc3de18ca42721661d395e23828b07d449e4e09614c8aa753d28215608a56dbb66a929a47fe1beddc6123afad8d4f64cc5602138a289ef1287548d914647d144c3010cb5e3a90753aafebb70703a4f0eb4edbb991f47ed529b219a9fd421782a8a9d73d18e9ac69768791f408ee65af8f78ca3986e878276993c8dc140949f7410c8aee7b57739ffd57e5096ef3c1edc9d242d8ed7d0b5c8f7d4ff37b4ef76a6d4ca8960793508313c751a194ce0dcd0b08e3c3b91f06cb9f158347af1689fa86e9229970ab49bd44bf99da76818f7deb102bffbc575cf53966e247ce3558f77937d822ab74a437c5575dbcbd907199d5b645ee6ee122dc77090960302f8fce044fcb5d19a803b92a95950c262ea117522e6cbe44f5c277d6d7e36890eb7702136dc78abfdc5105f138b9415ee6ed0b4e1f805b3bdb5d0e7aba7d0aaf7c6c100edae89b8496804a7cc9e61d002ba42abb6ada2fdb12f672a15f2f3ef7d23330a5d411195bd2e3caf54d7c29a4ac9e13db64d88c35587059465e59507acd1ed7393f3557b8991116fdbb675f7f4a30acfa0cce3e31b817834a3037a18479aa764a83820f7186460fb96e07adcd529cdf66d0f6dad80260f51d3a9a1ebe213d03b9b71c9c522b4b8bdfe40b06a9da4c722f9a73d43423b456b2464bbb546b0527f71cbe600478169bab6caab15b98d4383552cf0dbf3c4b5208d901873f79901d174410ccd887073c1c9c6091f01c1772123f8354efdd6646d1e5373ef0e7750406b2c9acc1315c9fe1e9b0dba050717ee4f1ed17fc73357150921e5092c8edeb79f25a5b5e142e6813f20871252ebf52752d643a2965058509271b370bf98ef0fe8983a4725d39685647416757b85f87cef3ed7265d67a479d7752dcb3fb78447e6dff107a51365cba79fdf6edba21db2d3b52bf70579a398c36847bb3ec5e8ced0ad82c68c22d422335f73ea5297a95c5263d2403e06b7fb1d30804efd4d535894e0e0fb4747bd77caf3e92fd23d0bc8c73e09374ca42b52fa8c02f1ff3d19d8eaa78ef2ba7b3b1bea75faabf2658cf0a49f59bdd1fc49618fb60260053033184ede8c6a10fbf5f295a8a96553d469b160b17d9dbef52a651afd41fa87a169e5b34c8f3f0299aab066bcfadb07055502432b285f42e369606c4217f10f947fab6bd24889ca0aafad8be5ecbf11462b3a1cfd0c93c80e0a5611d6248a0a4fcc3a2307a7de22d1e301aae233155bd10d11f6b37d89a34c5104049bfe242ceba72e5968ead5ec6ec6b7056c8a1c390f6c6640ec92afbd76fb1072784ad7349ca30b605d6e755f0a21703724394a7681709f7b73aa34f6f44dea15264ef10e86a1079d64f98f6f7bb50bd2e0caca18df8b09a51ca436834ddc235d60fa9500bfb09fbb1dba93c95e1406086f83f6950a0cb9a4cd8ba97333b0de1e658d42469ac93529c596712231f8e0410992d789d326a127bc8c0d901f4dc99b36948c782410052229769f5177b328a6ca68df9e4fc4638cf090d17a4704cf142271418c5a85c7cd292b6fe1ac9e1f2a1858d17e5318d4d75cad3c4e7f2b3d3da458e4581217a07b28ca94043cd0d31d1af5264b8170ef325855a5b5863f01541dd1428cac12793e9080919f6d4b6f9f1255032b44daf64d2ae7b1084384d0d9eb76b7aa18c70b8ce5a174f2a3f73b31f98a9dc329c3f5e1a4ff04c6b85ab3e2eb95f8e265915937b5bad0088c7ab15e2c9cc97707039045758b56f613f58d8100ab0a829c2672e99624494ae81983c23dced6381e718454e714c00d6df6d76f502bc2bc7dd8dd67279418cc4855e33d9250dfd9eff61c98fb06d578d92d1510c1589025dc2bba8208b8d4554d9718bc846666c984ecd7442c60c3437dc9adb4a8bb671cb828ae0a1be34a4db662ef440fce64a6194a296726e7fd6c2b0d2dd52c785d01b26c66b363c6be384471c0e5e60aacb8c1c47751f8c689892ea1ead15f157dc7b567243cc298583e5f37a6bd4ff9d947e2ae56a466f0c27408cdb8b2b7036598aaef45c995b4b1bcb7f110b5c5aa87fdd652e30998796982fcfa0911558395ec8f63e7fc898221d6a9b904951600f1caf077870db43f5e1c59907e4d5c50c9b51e365cf82f4a77c5bccbfaf90b1ce51aef03675e7c45e2bf46f98bfc0d140273dc2ad2e1c25c74ca2edd2efca89aa1432d1c5450125b8a0c19326b0a8c845e657bf69481918a75502de4fff5db8c706fb0e6d0d7263f3b213171f478b71a67257924a8f5ffbf29215783d21d379f50722972cd7c96c4577dfd958155d15214fe704e73effd98092f640b4e376804013028539422407156de850d0cf7797383d0c9c7e7a0c79718003d5748b5393eb3cd8c18f314cd94139f432f4bc82f908533cdaa7c80d0d6d26e1228f8d00a8882b9b07fc6a177d20231e7f42eb40eaa029a1576cd0cd32d7da652d01824077bcf175d7f9540522f38a815aa0e2267588d9ddc6ab5188e45decb68c93091a3607c0d8f158387e0e152bb4a8da4e66fc3c6fde1fb8f4d00f03885b7822a8587abd72c36d10c77e1c7222d24e2bf1992a17c07d586540a0ae2631687cb9197a655fb66690c3b0a0de8808945ba66ffa1e60e0d9623d067fc6f8a233ab53332478d538597fd798f0abfcc97182ff22249f95bce4a07d9f410ae919fd3e0d313a5b12c03f58de66ff5d211e25c791c108ff82ade5be2d59cdb15c6a4759dca915ddf3c07bda00b13018bdb95caea0bf170a15b6cf53a230ef717e1c90233735b9693379e7ef711a367ce42fd7c3ffe25496789342517332a68350a46a3a8da15bfbb63c45f8dc7c5d25db7ab473da177398443857e81bb58d9aa6d97e0bc685e1b40a0704c330e1c0850b9e799207be79508f927fcd5df193b929e0aad5a426990f7c19c50c50427c66a73347fc0937f091c98668f1ece95fa029dcce72977d51a836b6d7e5c93084968ffbca70619eee8700b1a9cc5056b5485ae3d5440b4711b8600fd10fd814cadde2ed11cc6b241464a002fb06ade3ceb7e89fb74462c9abdeb3d88eb9e57eb4f9abbabd23fea5f970417a7fa8a0e78f96b233ec75c6ff89c0068dac52bbafbdc1636f8156a1681acc405b52c65960ad32bac32189c074390c11385dec2b6bad34e95de5e848845adab92a7edf2e60f3c70fda609cb76662a4b98b187b93a739bbe139054b09f5488428b2c8b462e8f5cea5df40290f2dab5ed51cf9e719688ecec4ab1c72b8497efa1746d1bc9b3dff2dabfcb1092f1856f17c2a9a7c37656eb3ec485ffdb0f51149391d6131dd1d8554310c60598e49afad834f5e5255f21c432abb377f54cdf2ea82148d73475214e28346785d797bc4e657d9a2f1f4ce54da741f8caf8262335e284e2f8a04a823de564e553474c39ec1e763700bce1bf030eacaedd345fbe3c3af2120f3fa962ceb2b1427663d791b5936a80b336941c6079f468f92d5c10deab0dfefe9593b76b673a71ad499c5d0fff4a9db2a5f5a0caa0c2c5620abf503deb905d8cb7b6c66865ee69bf31982ef6d9ae8834d361dce14d535a2025db065f5429f3945d5615886163892e1e41fd34c44949cd97592f1a378027de0e81637c11594609c1808da0cdb64de43a871b2b2640f2642d6c1aae34d83b0b0eb73aedf94ce7c1daeddf8cf684672edaf1ce0c7757f163dae3a4350cef5803a60f1e1f3d5eb277a17d38cc32ca8b6fdf536720ce186e7be6507d720810ce8801be2cc5488c7a6f0e398878ebb2ee530d62b61bf67fd4a7fdc811ecb119e4a6e7c6555685850656cf52dbc2a1da93d8550a7941a8a7716fa348f2cbcd6f58489051bf01c0ad0745b8a1e9a10fb748a9ae9f7897dfa81efc7fe240959a3857385f8be3a8102efb0791e1e01e539b370b8ea57d3b7b747bfce3a206612410c0a9aa9130320d80a912434c5a47048c1ab6901e7806c72fef1f4f59322bbf5a79f444a0eec2397a76ae63a22c5bc76a98c4e65212258f963709c07c54dc36ac15d16d7f34c6becd2de54a3ca98babdbe1068275e18585abd3a1fb4e889ea087d918ce2e791098a3e337926a408e9301f2e8f681c50b700cfc240d2a692516e491b7f4774309953b34372fc5425832d4206079872e4387f2343de66525c63c71b1c9625e7649adcc92f279d51d55fc771f7c8b81c02e8a7a6b2bb6f0170d6e5552882434382163f07ea5e4c5971bff35f530e04ca0247f5bdd27929eee90e2078141cfd2d45a1cc2a1bf47012025fa808b9e849978011e482fb7e851e5efcb02796b6a4ce2b72e8e83bba54670b912668723803b", 0x2000, &(0x7f0000000dc0)={&(0x7f00000002c0)={0xff0c, 0xfffffffffffffff5, 0x0, {0x7, 0x29, 0xb, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000780)=ANY=[@ANYBLOB="02"], 0x4, 0x1) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) 9m47.689553963s ago: executing program 4 (id=3811): r0 = syz_io_uring_setup(0x2f90, &(0x7f0000000180)={0x0, 0xc474, 0x3850, 0x2, 0x200004}, &(0x7f0000000100), &(0x7f0000000040)) r1 = epoll_create(0x3f7bb6e9) epoll_pwait2(r1, &(0x7f0000000280)=[{}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0xe000200f}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000140)={0x634801, 0x2, 0x4}, 0x18) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) r2 = open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x106) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$rds(0x15, 0x5, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50) r5 = dup2(r2, r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x16, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4e}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @jmp={0x5, 0x0, 0x7, 0x8, 0x53fbed55f3e16d25, 0xffffffffffffffc0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xd4, &(0x7f0000000440)=""/212, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xa, 0x5, 0x10001}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[r2, r4, r5], &(0x7f00000005c0)=[{0x0, 0x4, 0x10, 0x5}, {0x5, 0x7fffffff, 0xd, 0x1}, {0x3, 0x2, 0xb, 0xc}, {0x3, 0x1, 0x2, 0x5}], 0x10, 0x7}, 0x94) statx(0xffffffffffffffff, &(0x7f0000006f40)='./file0\x00', 0x1000, 0xefe853999b2b0902, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r6 = dup3(r3, r3, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r6, 0xd0009411, &(0x7f0000000880)={{0x0, 0xa1, 0x3, 0xce, 0x9, 0x387a, 0x8, 0x9, 0x7, 0x0, 0x7, 0xdbb, 0x3, 0x7fffffffffffffff, 0x1}}) syz_usb_connect$rtl8150(0x0, 0x3d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfffffffffffffd7c}}]}}, 0x0) 9m43.504569919s ago: executing program 4 (id=3820): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000080)=""/255, 0x38}], 0x2}, 0x8000}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r0, 0x0, 0x0) 9m28.78720386s ago: executing program 36 (id=3820): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{0x0}, {&(0x7f0000000080)=""/255, 0x38}], 0x2}, 0x8000}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r0, 0x0, 0x0) 8m42.223710971s ago: executing program 6 (id=3934): syz_open_dev$media(&(0x7f0000000000), 0x8000009, 0x8800) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r2, 0x4b45, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000900)=ANY=[@ANYBLOB="180000002e00010026bdf000fcdbdf250400000004001d"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x4000010) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x14, 0x17, 0xa, 0x1907, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x2000300, 0xe, 0x0, &(0x7f0000000040)="63eced8e46dc3f0adf3389f7b986", 0x0, 0xfeffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x50) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}]) 8m33.883567322s ago: executing program 6 (id=3945): r0 = socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008f}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048801) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r1, @ANYRES32, @ANYBLOB='\a'], 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB="540000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="15020000fe0f00001c00128009000100766c616e000000000c000280060001000500000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004"], 0x54}, 0x1, 0xba01, 0x0, 0x4010}, 0x4000000) 8m33.13950561s ago: executing program 6 (id=3948): openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x22020400) r2 = fsopen(&(0x7f00000000c0)='cifs\x00', 0x0) r3 = fsmount(r2, 0x0, 0x4) r4 = openat$cgroup_ro(r3, &(0x7f0000001100)='cpu.stat\x00', 0x5000000, 0x0) readv(r4, &(0x7f00000012c0)=[{0x0}], 0x1) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r5, 0x6, 0xd, &(0x7f0000000000)='O', 0x1) setsockopt$inet6_tcp_int(r5, 0x6, 0x22, &(0x7f0000000100)=0x2000005, 0x4) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, 0x0) setsockopt$inet_int(r6, 0x0, 0x12, &(0x7f0000000300)=0x1, 0x4) sendto$inet(r6, &(0x7f0000000000)="f461c5bbd75c3583", 0x8, 0x20040000, &(0x7f0000000100)={0x2, 0x4e22, @empty}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x6) 8m32.011579275s ago: executing program 6 (id=3950): socket$nl_route(0x10, 0x3, 0x0) listen(0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008f}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048801) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB='\a'], 0x10) 8m31.358409859s ago: executing program 6 (id=3951): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f00000002c0)=0x79f, 0x4) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x509800, 0x0) ioctl$KDFONTOP_SET_DEF(r1, 0x4b72, &(0x7f0000000480)={0x2, 0x0, 0x8, 0x8, 0x18e, &(0x7f0000000080)="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"}) 8m31.194531014s ago: executing program 6 (id=3952): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x240040b0}, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000240)={0xa, @pix_mp={0xc0000000, 0x0, 0x31364d4e, 0x34565348, 0x7, [{}, {}, {0x0, 0x2000}, {0x0, 0xffffffff}, {0x0, 0xfffffffe}, {0x1}, {}, {0x9, 0x6}], 0x0, 0xfc, 0x7, 0x0, 0x6}}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UI_BEGIN_FF_ERASE(r4, 0xc00c55ca, &(0x7f0000000100)={0x10, 0xfffffffe, 0x21c00000}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000004000000040000009200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000004aa50c95c8cc000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r5, 0x0, &(0x7f0000000300)=""/249}, 0x20) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x0, 0x0}], 0x1}) r7 = accept4(r3, 0x0, 0x0, 0x800) r8 = syz_open_dev$mouse(&(0x7f0000000040), 0x5, 0x40) syz_io_uring_setup(0x4537, &(0x7f0000000100)={0x0, 0x7c2, 0x2, 0x1, 0x13b, 0x0, r8}, &(0x7f0000000180), &(0x7f0000000340)) r9 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) listen(r9, 0x9) sendmsg$inet_sctp(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000000000008400000002", @ANYRES32], 0x20, 0x6044}, 0x6) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001ec0)=[{0x0}, {&(0x7f0000000540)=""/113, 0x71}], 0x2}, 0x40000000) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f0000000000)=0x6, 0x4) r11 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r11, 0xc03864bc, &(0x7f0000000cc0)={0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}) 8m16.579931944s ago: executing program 37 (id=3952): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c010000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000000c00060001000000010000000c01308014000400976f1044852bca665354bd217b6b9037200001800c0005000400000200000200080001000300000005000200030000000500020008000000240003"], 0x12c}, 0x1, 0x0, 0x0, 0x240040b0}, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000240)={0xa, @pix_mp={0xc0000000, 0x0, 0x31364d4e, 0x34565348, 0x7, [{}, {}, {0x0, 0x2000}, {0x0, 0xffffffff}, {0x0, 0xfffffffe}, {0x1}, {}, {0x9, 0x6}], 0x0, 0xfc, 0x7, 0x0, 0x6}}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000011620140480b05101e8c00000001090212000100000000090401"], 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x802, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UI_BEGIN_FF_ERASE(r4, 0xc00c55ca, &(0x7f0000000100)={0x10, 0xfffffffe, 0x21c00000}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000004000000040000009200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000004aa50c95c8cc000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r5, 0x0, &(0x7f0000000300)=""/249}, 0x20) r6 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000a40)={&(0x7f0000000380)=[{0x3, 0x6000, 0x0, 0x0}], 0x1}) r7 = accept4(r3, 0x0, 0x0, 0x800) r8 = syz_open_dev$mouse(&(0x7f0000000040), 0x5, 0x40) syz_io_uring_setup(0x4537, &(0x7f0000000100)={0x0, 0x7c2, 0x2, 0x1, 0x13b, 0x0, r8}, &(0x7f0000000180), &(0x7f0000000340)) r9 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) listen(r9, 0x9) sendmsg$inet_sctp(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000000000008400000002", @ANYRES32], 0x20, 0x6044}, 0x6) recvmsg(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001ec0)=[{0x0}, {&(0x7f0000000540)=""/113, 0x71}], 0x2}, 0x40000000) r10 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r10, &(0x7f0000000080)={0x28, 0x0, 0x2711}, 0x10) setsockopt$sock_int(r10, 0x1, 0x6, &(0x7f0000000000)=0x6, 0x4) r11 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r11, 0xc03864bc, &(0x7f0000000cc0)={0x501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}) 2m35.483004314s ago: executing program 7 (id=4853): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x5, 0xe, 0x0, &(0x7f0000000040)="6121eed4cd50bb2b01e841acde1a", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x73}, 0x50) 2m35.292917579s ago: executing program 9 (id=4856): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e281ad6e747033a0093", 0x3d}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0000"], 0x50) 2m35.24077353s ago: executing program 7 (id=4858): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000f01f00810000007f00000003000400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000f200"/27], 0x57) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf20000000000000160006003f1b48013d030100000000009500000000000000bc26000000000000bf67000000000000070600000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r1}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r1}, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @random="06000000ffff"}) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={0x0, &(0x7f0000000740)=""/32, 0x17e, 0x20, 0x1, 0xffff, 0x10000}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000840)={0x1, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1d, 0x22, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xd6a, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_val={0x18, 0x1, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x51}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}}}, &(0x7f0000000480)='syzkaller\x00', 0x67e54106, 0xf8, &(0x7f00000004c0)=""/248, 0x40f00, 0x2, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f00000007c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0xd, 0x8, 0x6}, 0x10, r4, 0x0, 0x5, &(0x7f0000000880)=[r0, r0, r0, r0], &(0x7f00000008c0)=[{0x0, 0x3, 0xa, 0x8}, {0x0, 0x2, 0x7, 0x1}, {0x5, 0x1, 0x2}, {0x0, 0x2, 0x10, 0x5}, {0x0, 0x1, 0xd, 0x6}], 0x10, 0x7fffffff}, 0x94) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r0, &(0x7f0000000280)="ff7ad14626b78e82477e000e4e9b40c2bc1a75c6298576b2a5d5f72d3e8dda1e9e46c74f696177b2a6c87a6113d1a273d55af2ecca74fcc19b1e723877a530a74a378fec101669db388ee95bee97a69432aa22895c0853c9f63a0782df58873898f63acb76f5ad83454f2cf684bc10427d4fc5e3db763bffa31d5f22c44e18cd3830db11ce5c779d67f82c4c9c375e4595c9da0814fe258cc66f43f537fc4ce841da5da70303af11454a9dca", &(0x7f0000000080)=""/126, 0x4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r0, 0xfffffffffffffffe, 0x0}, 0x20) 2m35.164793108s ago: executing program 9 (id=4860): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0xe80, 0x0, &(0x7f0000000840)="f8ad48cc020000000000000086dd19159d0242c0e3f09a5aff72ba0f5cf6678e0f8fedc700fc703c", 0x0, 0x3, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2m35.032378561s ago: executing program 9 (id=4862): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}}, 0xb8}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=@migrate={0x138, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0xe8, 0x11, [{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in=@rand_addr=0x64010102, @in=@local, @in6=@remote, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}, {@in=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@local, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6c, 0x2, 0x0, 0x3507, 0x0, 0xa}, {@in6=@dev={0xfe, 0x80, '\x00', 0x42}, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@empty, @in=@empty, 0x32, 0x3, 0x0, 0x0, 0xf, 0x6}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="100000001d0001"], 0x10}}, 0x0) 2m34.89607906s ago: executing program 9 (id=4865): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0100000002020000ec0b000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000000), 0x105, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000580), &(0x7f0000000240)=""/255}, 0x20) 2m34.641809676s ago: executing program 9 (id=4869): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000f00000007"], 0x13) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 2m34.544963542s ago: executing program 7 (id=4872): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000020101010000ca000000000002000000240002"], 0x38}}, 0x0) 2m34.448107742s ago: executing program 9 (id=4874): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) 2m34.440365522s ago: executing program 7 (id=4875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)={0x58, 0x9, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 2m34.226059137s ago: executing program 7 (id=4879): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0xc0) 2m34.049988281s ago: executing program 8 (id=4883): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000003dc0)={&(0x7f0000002180)={0x2, 0x4e23, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000041}, 0x4000040) 2m33.960855772s ago: executing program 7 (id=4884): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000f80)=@newqdisc={0x54, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_TARGET={0x8}, @TCA_CAKE_RTT={0x8, 0x7, 0xfffff800}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0080c0}, 0x4000880) 2m33.758328266s ago: executing program 8 (id=4887): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000010000000000000000000000850000008700000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000200)="1000110ec1e9abc89b0046b30000", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2m33.618891921s ago: executing program 8 (id=4889): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100001, 0x5, 0x5, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x20) 2m33.31345738s ago: executing program 8 (id=4893): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x19, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8005a21, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x803ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0xe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 2m33.107616358s ago: executing program 8 (id=4897): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000600)=@hci={0x1f, 0x2f89, 0x3}, 0x80, 0x0}, 0x4000000) 2m32.926435073s ago: executing program 8 (id=4901): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f73660014000280"], 0xd4}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="200000006a001f03000000000000000008000000", @ANYRES32, @ANYBLOB="080005"], 0x20}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) 2m20.099433198s ago: executing program 38 (id=4874): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) 2m19.666088186s ago: executing program 39 (id=4884): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000f80)=@newqdisc={0x54, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}, @TCA_CAKE_TARGET={0x8}, @TCA_CAKE_RTT={0x8, 0x7, 0xfffff800}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0080c0}, 0x4000880) 2m18.56474958s ago: executing program 40 (id=4901): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f73660014000280"], 0xd4}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="200000006a001f03000000000000000008000000", @ANYRES32, @ANYBLOB="080005"], 0x20}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) 39.676638162s ago: executing program 3 (id=6646): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x80085665, &(0x7f00000000c0)={0x3, 0x1ff, 0x2}) r1 = syz_open_dev$vcsu(&(0x7f0000000200), 0x3, 0x4200) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xcc, 0x9, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x5}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="d54c9f370285"}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_ADT={0x50, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xffffffffffffffff}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x2}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0xcc}}, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000030601000000a000000000000200000505000100070000001e1d1b38334010a821dd91451c015619292dcc792791659160a384b32526f44fe6a011a4b4845940dec22817ed78a9e85d7ce211db8ffca5864637388cb0c2fca9a3f1c5a63495939ee981280c1f5c1395e343df1dac40ca67239e174c5cc89369f0fddb6c3a6849e322a9cc40b311a7d290e7cebe5d4f41a851153fa4a23ce6334afccc0e3162ba3841fa9c3f2f27404fbdc44578b8089fd3ff5d403f62ff6800000000c9f0ce"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 39.528848904s ago: executing program 3 (id=6649): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, 0x0) syz_emit_ethernet(0xb9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x3) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f10000000bfc000000020000000002"], 0x0) io_uring_enter(r7, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) sendmsg$IPSET_CMD_FLUSH(r11, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x40, 0x4, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x84) lseek(r11, 0x7fffffffffffffff, 0x1) getsockname$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) 39.476468288s ago: executing program 3 (id=6651): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$kcm(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483ad4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000000000bcc3fbe7d90de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad04a82ff3cfadcf65eb92adc6c68d66b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a9a362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e2486472b5cba1f3346c1e8e23deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a825360423c1cbc8b5d19167152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd246128f41bcb02000000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca450139c558000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de42957ffe9bb6d752e68d2bc2ce777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f5024df1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfde3be9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118afdba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141489ed926b822becead7a0a2b4a4c008ab16b616d60f347e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c442ad2fe9baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc00000000002364bbd93964a8d0bdc802b9be2563838a91802e"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(r0, 0x29, 0x48, &(0x7f0000000100)=r1, 0x120) sendmsg$kcm(r0, &(0x7f0000000240)={&(0x7f00000001c0)=@in6={0xa, 0x4e21, 0x0, @mcast2}, 0x80, 0x0}, 0x0) 39.207227285s ago: executing program 3 (id=6653): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async, rerun: 32) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async, rerun: 32) r3 = getpid() (rerun: 32) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) (async, rerun: 32) socket$igmp(0x2, 0x3, 0x2) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x200, 0x61, 0x11, 0xd0}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r7, @ANYBLOB="24005a8020000180140009"], 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_GET_SURVEY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x3a9, 0x3, 0x0, {{}, {@val={0x8, 0x140}, @void}}}, 0x1c}}, 0x4004050) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r12 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r12, 0x29, 0x30, 0x0, &(0x7f0000001000)=0x8b00) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r10, 0x1, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x39d}, {0xffffffffffffffa7, 0x0, 0x8}]}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x5}]}, 0x38}}, 0x22000000) 38.969364951s ago: executing program 3 (id=6656): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902120001000010000904430000317d554f7acd00de45583118e39b791adaea544ee95f2a0ba1f4f2ae9a7df6b221d5cdfe0a12e25d7ee8201daca9d50595b8d698d15848d02142150126bc49edca66f8b468649ef49c17bfbafd9b2dd1c37c5f451ae5c3379042956a9197742cbbf9f732d425c7a8402b3191b0630c66a89f7cd172236cae2ffd55933b6437d178b8a4fbdeba64d533abe148cdd7e17b0d9c12bc68dbb47949a2535ae99a"], 0x0) r0 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/pid_for_children\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc}, [@call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_misc(r1, 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x7]}}) 38.723151564s ago: executing program 3 (id=6659): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, 0x0) syz_emit_ethernet(0xb9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x3) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f10000000bfc000000020000000002"], 0x0) io_uring_enter(r7, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) sendmsg$IPSET_CMD_FLUSH(r11, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x40, 0x4, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x84) lseek(r11, 0x7fffffffffffffff, 0x1) getsockname$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) 8.231701454s ago: executing program 0 (id=6757): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)={0x0, 0x1, 0x20, [0x2]}, 0xa) 8.060120018s ago: executing program 0 (id=6759): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0xfffffffb}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e24, 0x1, @local, 0x9d}}, 0x1, 0x2, 0x9, 0x8, 0x9}, &(0x7f0000000180)=0x98) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0xa, 0x801, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=ANY=[@ANYBLOB="040100001a00010000000000000000000a0101010000000000000000000000007f0000010000000000000000000000010000000000c977000000000032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000000003c000000fe8000000000000000000000000000bb00000000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000033500000a0002fd2c0000000000000014000e00ffffffff00"/188], 0x104}, 0x1, 0x0, 0x0, 0x50}, 0x0) 6.866970457s ago: executing program 0 (id=6762): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.swap.current\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r0, 0x5, &(0x7f0000000180)={0x0, 0x1, 0x86, 0x80000000}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0xa080, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x804525, 0x1000, 0x2, 0x12d}, &(0x7f0000000440)=0x0, &(0x7f0000000640)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8200}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MSG_RING={0x28, 0x20, 0x0, r1, 0x0, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x22d0, 0x20, 0x0, 0x0, 0x0) 6.526769013s ago: executing program 0 (id=6764): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="d8000000100081414e81f782db010000001d080b01008100e8fe55a1010115000600142603600e120800040000001101a80012000500014006000d30514d3afab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef6aa98516277ce06bbace8017cbec040000000000000000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4688df216265e5dbf66f282ac027812cfbd3f1aeb4edbb57a7025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40d", 0xd8}], 0x1}, 0xc000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) 5.656582555s ago: executing program 5 (id=6767): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) 3.647823794s ago: executing program 2 (id=6775): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x45, 0x0, 0x1, 0xfffffffc}, {}, {0x6, 0x0, 0x0, 0x7fff0000}]}) 2.855869107s ago: executing program 2 (id=6776): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000440)=0x9, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) openat(r2, &(0x7f00000000c0)='./file1\x00', 0x86403, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) 2.608785776s ago: executing program 1 (id=6777): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b0000000800", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0x0, 0x0, 0x8010}, 0x0) socket$inet6(0xa, 0x1, 0x0) close(r1) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r7, 0xc0605345, &(0x7f0000000180)={0xffff, 0x2, {0x3, 0x2, 0x4, 0x0, 0xb7}, 0x8}) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @link_local}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r8}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x74]}, 0x8, 0x800) r9 = fsopen(&(0x7f0000000000)='udf\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='-\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f00000000800000", @ANYRES32], 0x24}}, 0x0) 2.301541041s ago: executing program 0 (id=6778): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, 0x0) syz_emit_ethernet(0xb9, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x3) r7 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_SPLICE={0x1e, 0x48, 0x0, @fd, 0x3, {}, 0xa6, 0x3}) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f10000000bfc000000020000000002"], 0x0) io_uring_enter(r7, 0x47f9, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) sendmsg$IPSET_CMD_FLUSH(r11, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x40, 0x4, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008000}, 0x84) lseek(r11, 0x7fffffffffffffff, 0x1) getsockname$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) 2.256730978s ago: executing program 5 (id=6779): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000000340)={0x0, 0x0, 0xfffffffa, 0x2, 0xb, 0x201, 0x7c}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) io_submit(0x0, 0x0, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff08000400", 0x32}], 0x1) writev(r3, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01080000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002404c426f6208000140000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480340001800a0001006c696d6974000000240002800c00024000000000ffffffff0c000140000000000000000808f8ffffff000001140000001100010000"], 0xe8}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000080)={@broadcast, @empty, @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @udp={0x0, 0x6, "8bb78c", 0xc, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x7, 0x0, @void}}}}}}}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)={0x0, 0x1, 0x1, [0x2]}, 0xa) 1.906536428s ago: executing program 1 (id=6780): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) io_uring_setup(0x7567, &(0x7f0000000180)={0x0, 0xffffffff, 0x4000, 0x1004004, 0x3c}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x7, 0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x3) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000400)='S', 0x1}], 0x1) getsockopt$MRT(r2, 0x0, 0xcd, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000000)='sys_enter\x00', r4}, 0x18) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r6, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x41624800ab11328a, 0x4}) writev(r5, &(0x7f00000003c0)=[{&(0x7f00000002c0)="d0", 0x1}], 0x1) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000003c0)=ANY=[@ANYBLOB="180000e855000100000000000000000007"], 0x38}}, 0x0) 1.788533855s ago: executing program 2 (id=6781): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b0000000800", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0x0, 0x0, 0x8010}, 0x0) socket$inet6(0xa, 0x1, 0x0) close(r1) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000000140)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r7, 0xc0605345, &(0x7f0000000180)={0xffff, 0x2, {0x3, 0x2, 0x4, 0x0, 0xb7}, 0x8}) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @link_local}) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r8}, 0x18) mremap(&(0x7f0000000000/0x9000)=nil, 0x200003, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x74]}, 0x8, 0x800) r9 = fsopen(&(0x7f0000000000)='udf\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='-\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f00000000800000", @ANYRES32], 0x24}}, 0x0) 1.273170044s ago: executing program 1 (id=6782): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 1.253230518s ago: executing program 2 (id=6783): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='memory.swap.current\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r0, 0x5, &(0x7f0000000180)={0x0, 0x1, 0x86, 0x80000000}) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0xa080, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80040, 0x0) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x804525, 0x1000, 0x2, 0x12d}, &(0x7f0000000440)=0x0, &(0x7f0000000640)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8200}, 0x94) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MSG_RING={0x28, 0x20, 0x0, r1, 0x0, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r1, 0x22d0, 0x20, 0x0, 0x0, 0x0) 1.158947704s ago: executing program 5 (id=6784): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)={0x3c, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x3c}}, 0x0) (fail_nth: 5) 1.048155607s ago: executing program 2 (id=6785): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000440)=0x9, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040)={0x181203, 0x6, 0x4}, 0x18) openat(r2, &(0x7f00000000c0)='./file1\x00', 0x86403, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) 976.868629ms ago: executing program 1 (id=6786): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20008000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) sendto(r1, &(0x7f00000001c0)="8d99fb0c8d3ea518bfe2dcfcaa6a9b90", 0x10, 0x8000, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, 0x0, 0x0) 751.035205ms ago: executing program 1 (id=6787): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000580)='1', &(0x7f00000002c0)=""/135}, 0x20) 698.00595ms ago: executing program 5 (id=6788): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) 568.84846ms ago: executing program 1 (id=6789): unshare(0x2c020400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000380)={0x0, 0x2ee, 0x0, 0x1, 0x8, 0x400, 0xe0000000, 0x40}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) rt_sigaction(0x29, &(0x7f00000000c0)={&(0x7f0000000000)="c48259aed7c4a27d315953edc4c1716be4c4c12cc6cb42410fba290047ddbd00b0000066400f1bf8c4a3097845eaec66f0f710", 0x90000000, &(0x7f0000000040)="c481e16cf6db6e000fae1b65f3430faeddc40220f77ee0c4617d50c00f73d600420f2a8300080000f245aac4217c290c3500000100", {[0xddd]}}, &(0x7f00000001c0)={&(0x7f0000000100)="c4a1297647e340e543c483e969900000000000660f38358500008000c402f92144c20cf08644ed00c4e2c1aa7308f30f58c8c4a1e25e33660f3adfd938", 0x0, &(0x7f0000000140)="c4c1fde64800c4a269924ccbf8660f6ec6c4227d0f232ef346afc461785b2b26d3530fc402a8f35b0566470f62048f6566e5c9"}, 0x8, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0x80045b10, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) 254.179003ms ago: executing program 5 (id=6790): syz_open_dev$vim2m(&(0x7f0000000040), 0x2000000800, 0x2) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049c8) close(r0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') fchdir(r1) r2 = memfd_create(&(0x7f00000000c0)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYS', 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) fadvise64(r3, 0x0, 0x7fffffffffffffff, 0x4) bind$tipc(r3, &(0x7f0000000080)=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}}}, 0x10) write(r2, &(0x7f0000000140)="6967ae42cbea486d00a74e3deec6fcb4391f745de504000000000000007190ba2b6d59c8958d6f1501000000c4677b000900ffffffffffffff200000f8bf54da33", 0x41) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x4000, 0x12, 0x20}, 0x18) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x40) 185.276729ms ago: executing program 0 (id=6791): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unlink(0x0) r7 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r7, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_QUEUE(r8, 0x7c80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000100007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r3, @ANYBLOB="0000000002000000b705000008000000850000005e00000095", @ANYRES16], &(0x7f0000000300)='GPL\x00', 0x2}, 0x94) r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r9, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x6, "2313"}, @main=@item_012={0x2, 0x0, 0x8, '{|'}, @global=@item_4={0x3, 0x1, 0x8, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @local=@item_4={0x3, 0x2, 0x9, "eb212189"}, @main=@item_4={0x3, 0x0, 0x8}, @main=@item_4={0x3, 0x0, 0x9, "cdd2f361"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r1, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) 13.052185ms ago: executing program 5 (id=6792): openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) syz_usb_connect(0x6, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x27, 0xe7, 0x13, 0x20, 0x502, 0x16e3, 0xa9b0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x45, 0x5, 0x98, 0xe, [{{0x9, 0x4, 0x41, 0x9, 0x2, 0xfe, 0x16, 0xb6, 0x7, [@hid_hid={0x9, 0x21, 0x9, 0x9, 0x1, {0x22, 0x4d1}}], [{{0x9, 0x5, 0xb, 0x2, 0x76badab25367007f, 0x62, 0xcb, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x6, 0x2}]}}, {{0x9, 0x5, 0xa, 0x3, 0x3ff, 0x5, 0xfe, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x100, 0x9, 0x3}]}}]}}]}}]}}, 0x0) 0s ago: executing program 2 (id=6793): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0xfffffffb}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e24, 0x1, @local, 0x9d}}, 0x1, 0x2, 0x9, 0x8, 0x9}, &(0x7f0000000180)=0x98) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=ANY=[@ANYBLOB="040100001a00010000000000000000000a0101010000000000000000000000007f0000010000000000000000000000010000000000c977000000000032000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000000003c000000fe8000000000000000000000000000bb00000000000000000000000000000000feffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000033500000a0002fd2c0000000000000014000e00ffffffff00"/188], 0x104}, 0x1, 0x0, 0x0, 0x50}, 0x0) kernel console output (not intermixed with test programs): ank_simulate: vblank timer overrun [ 1697.489464][T21543] FAULT_INJECTION: forcing a failure. [ 1697.489464][T21543] name failslab, interval 1, probability 0, space 0, times 0 [ 1697.489489][T21543] CPU: 0 UID: 0 PID: 21543 Comm: syz.9.4762 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1697.489502][T21543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1697.489509][T21543] Call Trace: [ 1697.489514][T21543] [ 1697.489519][T21543] dump_stack_lvl+0x189/0x250 [ 1697.489540][T21543] ? __pfx____ratelimit+0x10/0x10 [ 1697.489554][T21543] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1697.489570][T21543] ? __pfx__printk+0x10/0x10 [ 1697.489586][T21543] ? __pfx___might_resched+0x10/0x10 [ 1697.489599][T21543] ? fs_reclaim_acquire+0x7d/0x100 [ 1697.489616][T21543] should_fail_ex+0x46c/0x600 [ 1697.489634][T21543] ? alloc_empty_file+0x55/0x1d0 [ 1697.489644][T21543] should_failslab+0xa8/0x100 [ 1697.489660][T21543] ? alloc_empty_file+0x55/0x1d0 [ 1697.489668][T21543] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 1697.489681][T21543] ? rt_spin_unlock+0x150/0x200 [ 1697.489697][T21543] alloc_empty_file+0x55/0x1d0 [ 1697.489707][T21543] alloc_file_pseudo+0x13d/0x210 [ 1697.489719][T21543] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1697.489728][T21543] ? evm_inode_alloc_security+0x40/0xb0 [ 1697.489740][T21543] ? security_inode_alloc+0xd5/0x330 [ 1697.489760][T21543] sock_alloc_file+0xb8/0x2f0 [ 1697.489777][T21543] do_accept+0x351/0x680 [ 1697.489791][T21543] ? __pfx_do_accept+0x10/0x10 [ 1697.489814][T21543] io_accept+0x307/0x790 [ 1697.489839][T21543] ? __pfx_io_accept+0x10/0x10 [ 1697.489856][T21543] ? __fget_files+0x2a/0x420 [ 1697.489871][T21543] ? __fget_files+0x3a6/0x420 [ 1697.489887][T21543] __io_issue_sqe+0x181/0x4b0 [ 1697.489901][T21543] ? io_file_get_normal+0x104/0x300 [ 1697.489916][T21543] io_issue_sqe+0x165/0x1060 [ 1697.489935][T21543] io_submit_sqes+0xa54/0x1e60 [ 1697.489965][T21543] __se_sys_io_uring_enter+0x2db/0x2b70 [ 1697.489985][T21543] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1697.490007][T21543] ? lockdep_hardirqs_on+0x9c/0x150 [ 1697.490022][T21543] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1697.490036][T21543] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1697.490053][T21543] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1697.490066][T21543] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1697.490078][T21543] ? rt_mutex_slowunlock+0x1be/0x2e0 [ 1697.490089][T21543] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1697.490106][T21543] ? fput+0xa0/0xd0 [ 1697.490117][T21543] ? ksys_write+0x230/0x260 [ 1697.490131][T21543] ? __pfx_ksys_write+0x10/0x10 [ 1697.490146][T21543] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1697.490163][T21543] do_syscall_64+0xfa/0xfa0 [ 1697.490176][T21543] ? lockdep_hardirqs_on+0x9c/0x150 [ 1697.490190][T21543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1697.490200][T21543] ? clear_bhb_loop+0x60/0xb0 [ 1697.490213][T21543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1697.490223][T21543] RIP: 0033:0x7fe34c83efc9 [ 1697.490234][T21543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1697.490245][T21543] RSP: 002b:00007fe34aaa6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1697.490259][T21543] RAX: ffffffffffffffda RBX: 00007fe34ca95fa0 RCX: 00007fe34c83efc9 [ 1697.490267][T21543] RDX: 000000000000c2de RSI: 0000000000003517 RDI: 0000000000000004 [ 1697.490274][T21543] RBP: 00007fe34aaa6090 R08: 0000000000000000 R09: 0000000000000000 [ 1697.490281][T21543] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 1697.490288][T21543] R13: 00007fe34ca96038 R14: 00007fe34ca95fa0 R15: 00007fffd47593d8 [ 1697.490306][T21543] [ 1700.219495][T15126] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1700.477334][T15126] usb 8-1: Using ep0 maxpacket: 32 [ 1700.586666][T15126] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1700.600909][T15126] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1700.600946][T15126] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.600968][T15126] usb 8-1: Product: syz [ 1700.600984][T15126] usb 8-1: Manufacturer: syz [ 1700.600999][T15126] usb 8-1: SerialNumber: syz [ 1701.412430][T15126] usb 8-1: config 0 descriptor?? [ 1702.617742][T15126] gs_usb 8-1:0.0: Couldn't get device config: (err=-110) [ 1702.617788][T15126] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -110 [ 1704.042605][T21660] FAULT_INJECTION: forcing a failure. [ 1704.042605][T21660] name failslab, interval 1, probability 0, space 0, times 0 [ 1704.042680][T21660] CPU: 1 UID: 0 PID: 21660 Comm: syz.8.4810 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1704.042702][T21660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1704.042713][T21660] Call Trace: [ 1704.042720][T21660] [ 1704.042728][T21660] dump_stack_lvl+0x189/0x250 [ 1704.042758][T21660] ? __pfx____ratelimit+0x10/0x10 [ 1704.042782][T21660] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1704.042806][T21660] ? __pfx__printk+0x10/0x10 [ 1704.042831][T21660] ? __pfx_sctp_v4_scope+0x10/0x10 [ 1704.042854][T21660] ? fs_reclaim_acquire+0x7d/0x100 [ 1704.042888][T21660] should_fail_ex+0x46c/0x600 [ 1704.042918][T21660] should_failslab+0xa8/0x100 [ 1704.042944][T21660] __kmalloc_cache_noprof+0x6f/0x6c0 [ 1704.042969][T21660] ? sctp_association_new+0x89/0x25f0 [ 1704.043001][T21660] sctp_association_new+0x89/0x25f0 [ 1704.043028][T21660] ? sctp_do_bind+0x65a/0x940 [ 1704.043068][T21660] sctp_connect_new_asoc+0x2c5/0x690 [ 1704.043099][T21660] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1704.043128][T21660] ? rt_spin_unlock+0x161/0x200 [ 1704.043148][T21660] ? lock_sock_nested+0x5f/0x130 [ 1704.043172][T21660] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1704.043190][T21660] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1704.043214][T21660] sctp_sendmsg+0x14fd/0x2590 [ 1704.043252][T21660] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1704.043286][T21660] ? irqentry_exit+0x74/0x90 [ 1704.043327][T21660] ? sock_rps_record_flow+0x19/0x410 [ 1704.043356][T21660] ? inet_sendmsg+0x2f4/0x370 [ 1704.043385][T21660] __sock_sendmsg+0x19c/0x270 [ 1704.043415][T21660] ____sys_sendmsg+0x534/0x820 [ 1704.043444][T21660] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1704.043477][T21660] ? import_iovec+0x74/0xa0 [ 1704.043502][T21660] ___sys_sendmsg+0x21f/0x2a0 [ 1704.043527][T21660] ? __pfx____sys_sendmsg+0x10/0x10 [ 1704.043589][T21660] ? __fget_files+0x2a/0x420 [ 1704.043612][T21660] ? __fget_files+0x3a6/0x420 [ 1704.043648][T21660] __sys_sendmmsg+0x22d/0x430 [ 1704.043675][T21660] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1704.043711][T21660] ? trace_irq_disable+0x37/0x110 [ 1704.043750][T21660] ? lockdep_hardirqs_on+0x9c/0x150 [ 1704.043790][T21660] __x64_sys_sendmmsg+0xa0/0xc0 [ 1704.043814][T21660] do_syscall_64+0xfa/0xfa0 [ 1704.043838][T21660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.043854][T21660] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1704.043872][T21660] ? clear_bhb_loop+0x60/0xb0 [ 1704.043898][T21660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.043915][T21660] RIP: 0033:0x7f2a26f3efc9 [ 1704.043934][T21660] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1704.043951][T21660] RSP: 002b:00007f2a251a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1704.043973][T21660] RAX: ffffffffffffffda RBX: 00007f2a27195fa0 RCX: 00007f2a26f3efc9 [ 1704.043987][T21660] RDX: 0000000000000002 RSI: 0000200000000900 RDI: 0000000000000003 [ 1704.043999][T21660] RBP: 00007f2a251a6090 R08: 0000000000000000 R09: 0000000000000000 [ 1704.044012][T21660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1704.044025][T21660] R13: 00007f2a27196038 R14: 00007f2a27195fa0 R15: 00007fff3791d2f8 [ 1704.044061][T21660] [ 1704.344108][ T1246] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1704.481025][T15126] usb 8-1: USB disconnect, device number 14 [ 1704.522592][ T1246] usb 1-1: Using ep0 maxpacket: 8 [ 1704.524961][ T1246] usb 1-1: config 0 has an invalid interface number: 239 but max is 0 [ 1704.524988][ T1246] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1704.525007][ T1246] usb 1-1: config 0 has no interface number 0 [ 1704.525054][ T1246] usb 1-1: config 0 interface 239 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1704.565371][ T1246] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 1704.565403][ T1246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1704.565423][ T1246] usb 1-1: Product: syz [ 1704.565438][ T1246] usb 1-1: Manufacturer: syz [ 1704.565453][ T1246] usb 1-1: SerialNumber: syz [ 1704.570808][ T1246] usb 1-1: config 0 descriptor?? [ 1704.609009][T21670] netlink: 72 bytes leftover after parsing attributes in process `syz.8.4812'. [ 1704.787341][ T1246] ath6kl: Failed to submit usb control message: -71 [ 1704.787389][ T1246] ath6kl: unable to send the bmi data to the device: -71 [ 1704.787406][ T1246] ath6kl: Unable to send get target info: -71 [ 1704.836196][ T1246] ath6kl: Failed to init ath6kl core: -71 [ 1704.837715][ T1246] ath6kl_usb 1-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 1704.888258][ T1246] usb 1-1: USB disconnect, device number 83 [ 1704.984938][T21683] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4817'. [ 1705.024732][T21683] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4817'. [ 1705.457527][T15126] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1705.814787][T21700] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4823'. [ 1705.867711][T15126] usb 9-1: Using ep0 maxpacket: 32 [ 1705.871175][T15126] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1705.871209][T15126] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1705.871249][T15126] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1705.871273][T15126] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.872519][T21709] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4828'. [ 1705.875083][T15126] usb 9-1: config 0 descriptor?? [ 1705.946335][T15126] hub 9-1:0.0: USB hub found [ 1706.140264][T15391] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1706.277289][T15391] usb 4-1: device descriptor read/64, error -71 [ 1706.427623][T15126] hub 9-1:0.0: 1 port detected [ 1707.287441][T15126] hub 9-1:0.0: hub_hub_status failed (err = -71) [ 1707.287471][T15126] hub 9-1:0.0: config failed, can't get hub status (err -71) [ 1707.330833][T15391] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1707.353953][T21717] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1707.525200][T15391] usb 4-1: device descriptor read/64, error -71 [ 1707.581421][T21731] bond0: entered promiscuous mode [ 1707.581446][T21731] bond_slave_0: entered promiscuous mode [ 1707.581671][T21731] bond_slave_1: entered promiscuous mode [ 1707.581887][T21731] bond0: entered allmulticast mode [ 1707.581901][T21731] bond_slave_0: entered allmulticast mode [ 1707.581921][T21731] bond_slave_1: entered allmulticast mode [ 1707.631020][T15391] usb usb4-port1: attempt power cycle [ 1707.850031][T15126] usbhid 9-1:0.0: can't add hid device: -71 [ 1707.850153][T15126] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1707.878179][T15126] usb 9-1: USB disconnect, device number 22 [ 1707.973079][T15391] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1708.168043][T15391] usb 4-1: device descriptor read/8, error -71 [ 1708.392047][T15391] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1708.422707][T15391] usb 4-1: device descriptor read/8, error -71 [ 1708.525429][T17098] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1708.528442][T15391] usb usb4-port1: unable to enumerate USB device [ 1708.553937][ T1246] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1708.677780][T17098] usb 1-1: Using ep0 maxpacket: 16 [ 1708.680919][T17098] usb 1-1: config 2 has an invalid interface number: 251 but max is 0 [ 1708.680937][T17098] usb 1-1: config 2 has no interface number 0 [ 1708.680968][T17098] usb 1-1: config 2 interface 251 altsetting 126 bulk endpoint 0xB has invalid maxpacket 8 [ 1708.680983][T17098] usb 1-1: config 2 interface 251 has no altsetting 0 [ 1708.683913][T17098] usb 1-1: New USB device found, idVendor=05da, idProduct=00a3, bcdDevice=9f.70 [ 1708.683931][T17098] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1708.683942][T17098] usb 1-1: Product: syz [ 1708.683951][T17098] usb 1-1: Manufacturer: syz [ 1708.683959][T17098] usb 1-1: SerialNumber: syz [ 1708.715661][ T1246] usb 9-1: Using ep0 maxpacket: 8 [ 1708.719977][ T1246] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1708.721080][ T1246] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEF, changing to 0x8F [ 1708.721110][ T1246] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1708.721133][ T1246] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1708.726983][ T1246] usb 9-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1708.727547][ T1246] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1708.727570][ T1246] usb 9-1: SerialNumber: syz [ 1708.857575][T21745] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1708.918382][ T1246] usb 9-1: config 0 descriptor?? [ 1708.945622][ T1246] hso 9-1:0.0: Can't find BULK IN endpoint [ 1709.254836][T15126] usb 9-1: USB disconnect, device number 23 [ 1709.353824][ T1839] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1709.400025][T21756] FAULT_INJECTION: forcing a failure. [ 1709.400025][T21756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1709.400062][T21756] CPU: 1 UID: 0 PID: 21756 Comm: syz.3.4841 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1709.400084][T21756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1709.400096][T21756] Call Trace: [ 1709.400106][T21756] [ 1709.400115][T21756] dump_stack_lvl+0x189/0x250 [ 1709.400147][T21756] ? __pfx____ratelimit+0x10/0x10 [ 1709.400171][T21756] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1709.400198][T21756] ? __pfx__printk+0x10/0x10 [ 1709.400222][T21756] ? __might_fault+0xb0/0x130 [ 1709.400260][T21756] should_fail_ex+0x46c/0x600 [ 1709.400291][T21756] _copy_to_iter+0x1de/0x1790 [ 1709.400332][T21756] ? __pfx__copy_to_iter+0x10/0x10 [ 1709.400349][T21756] ? __pfx_woken_wake_function+0x10/0x10 [ 1709.400372][T21756] tty_read+0x29e/0x690 [ 1709.400395][T21756] ? __pfx_tty_read+0x10/0x10 [ 1709.400440][T21756] vfs_read+0x563/0xa30 [ 1709.400473][T21756] ? __pfx_vfs_read+0x10/0x10 [ 1709.400509][T21756] ? __fget_files+0x2a/0x420 [ 1709.400534][T21756] ksys_read+0x14b/0x260 [ 1709.400548][T21756] ? __pfx_ksys_read+0x10/0x10 [ 1709.400563][T21756] ? do_syscall_64+0xbe/0xfa0 [ 1709.400590][T21756] do_syscall_64+0xfa/0xfa0 [ 1709.400613][T21756] ? lockdep_hardirqs_on+0x9c/0x150 [ 1709.400637][T21756] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1709.400658][T21756] ? clear_bhb_loop+0x60/0xb0 [ 1709.400682][T21756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1709.400699][T21756] RIP: 0033:0x7f77a524efc9 [ 1709.400711][T21756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1709.400720][T21756] RSP: 002b:00007f77a3474038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1709.400732][T21756] RAX: ffffffffffffffda RBX: 00007f77a54a6180 RCX: 00007f77a524efc9 [ 1709.400743][T21756] RDX: 0000000000002020 RSI: 0000200000002600 RDI: 0000000000000003 [ 1709.400755][T21756] RBP: 00007f77a3474090 R08: 0000000000000000 R09: 0000000000000000 [ 1709.400767][T21756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1709.400779][T21756] R13: 00007f77a54a6218 R14: 00007f77a54a6180 R15: 00007ffd3f473598 [ 1709.400814][T21756] [ 1709.506702][ T1839] usb 8-1: Using ep0 maxpacket: 32 [ 1709.606404][ T1839] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 1709.606422][ T1839] usb 8-1: config 0 has no interface number 0 [ 1709.626850][ T1839] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1709.626870][ T1839] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.626882][ T1839] usb 8-1: Product: syz [ 1709.626896][ T1839] usb 8-1: Manufacturer: syz [ 1709.626911][ T1839] usb 8-1: SerialNumber: syz [ 1709.736590][ T1839] usb 8-1: config 0 descriptor?? [ 1709.999545][T21752] loop6: detected capacity change from 0 to 7 [ 1710.010480][T21752] Dev loop6: unable to read RDB block 7 [ 1710.010526][T21752] loop6: unable to read partition table [ 1710.010846][T21752] loop6: partition table beyond EOD, truncated [ 1710.010867][T21752] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1710.093857][ T1839] smsc95xx v2.0.0 [ 1710.093877][ T1839] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1710.094312][ T1839] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -22 [ 1710.126627][ T1839] usb 8-1: USB disconnect, device number 15 [ 1710.357979][T17098] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 9 is not bulk. [ 1710.357994][T17098] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 15 is not bulk. [ 1710.358001][T17098] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 1710.374863][T17098] usb 1-1: USB disconnect, device number 84 [ 1710.797292][T21777] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4851'. [ 1711.760712][T21822] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4872'. [ 1712.037370][T21832] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4876'. [ 1720.666973][T18763] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1720.672729][T18763] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1720.676106][T18763] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1720.690936][T18763] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1720.691668][T18763] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1722.727604][ T5121] Bluetooth: hci1: command tx timeout [ 1724.718317][ T5121] Bluetooth: hci1: command tx timeout [ 1726.690503][ T5121] Bluetooth: hci1: command tx timeout [ 1726.788452][T18763] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1726.818951][T18763] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1726.820660][T18763] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1726.821782][T18763] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1726.822558][T18763] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1727.182945][ T5121] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1727.189759][ T5121] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1727.201110][ T5121] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1727.203090][ T5121] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1727.203950][ T5121] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1728.201450][ T5121] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1728.269518][ T5121] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1728.288462][ T5121] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1728.350340][ T5121] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1728.351295][ T5121] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1728.695189][ T5121] Bluetooth: hci1: command tx timeout [ 1728.854886][ T5121] Bluetooth: hci3: command tx timeout [ 1729.130413][ T5121] Bluetooth: hci5: command tx timeout [ 1730.363313][ T5121] Bluetooth: hci7: command tx timeout [ 1730.829369][ T5121] Bluetooth: hci3: command tx timeout [ 1731.137619][ T5121] Bluetooth: hci5: command tx timeout [ 1732.331257][ T5121] Bluetooth: hci7: command tx timeout [ 1732.795615][T18763] Bluetooth: hci3: command tx timeout [ 1733.101935][T18763] Bluetooth: hci5: command tx timeout [ 1734.324408][T18763] Bluetooth: hci7: command tx timeout [ 1734.783174][T18763] Bluetooth: hci3: command tx timeout [ 1734.783356][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1734.783421][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.107656][T18763] Bluetooth: hci5: command tx timeout [ 1736.291444][T18763] Bluetooth: hci7: command tx timeout [ 1736.403212][ T87] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1736.772247][ T87] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1737.133892][ T87] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1737.495461][ T87] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1737.999650][T22184] chnl_net:caif_netlink_parms(): no params data found [ 1738.130176][T22375] chnl_net:caif_netlink_parms(): no params data found [ 1738.455576][T22366] chnl_net:caif_netlink_parms(): no params data found [ 1738.547295][T22406] chnl_net:caif_netlink_parms(): no params data found [ 1739.169136][ T87] bridge_slave_1: left allmulticast mode [ 1739.169182][ T87] bridge_slave_1: left promiscuous mode [ 1739.169416][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 1739.255165][ T87] bridge_slave_0: left allmulticast mode [ 1739.255194][ T87] bridge_slave_0: left promiscuous mode [ 1739.255445][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 1742.083435][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1742.159738][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1742.230832][ T87] bond0 (unregistering): Released all slaves [ 1742.516708][T22184] bridge0: port 1(bridge_slave_0) entered blocking state [ 1742.516853][T22184] bridge0: port 1(bridge_slave_0) entered disabled state [ 1742.517112][T22184] bridge_slave_0: entered allmulticast mode [ 1742.519916][T22184] bridge_slave_0: entered promiscuous mode [ 1742.545846][T22375] bridge0: port 1(bridge_slave_0) entered blocking state [ 1742.545978][T22375] bridge0: port 1(bridge_slave_0) entered disabled state [ 1742.546216][T22375] bridge_slave_0: entered allmulticast mode [ 1742.549559][T22375] bridge_slave_0: entered promiscuous mode [ 1742.602315][T22184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1742.602477][T22184] bridge0: port 2(bridge_slave_1) entered disabled state [ 1742.602732][T22184] bridge_slave_1: entered allmulticast mode [ 1742.605497][T22184] bridge_slave_1: entered promiscuous mode [ 1742.616655][T22375] bridge0: port 2(bridge_slave_1) entered blocking state [ 1742.616792][T22375] bridge0: port 2(bridge_slave_1) entered disabled state [ 1742.617054][T22375] bridge_slave_1: entered allmulticast mode [ 1742.619771][T22375] bridge_slave_1: entered promiscuous mode [ 1743.723225][T22366] bridge0: port 1(bridge_slave_0) entered blocking state [ 1743.723450][T22366] bridge0: port 1(bridge_slave_0) entered disabled state [ 1743.723676][T22366] bridge_slave_0: entered allmulticast mode [ 1743.726474][T22366] bridge_slave_0: entered promiscuous mode [ 1744.043286][T22184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1744.137077][T22375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1744.137414][T22366] bridge0: port 2(bridge_slave_1) entered blocking state [ 1744.137561][T22366] bridge0: port 2(bridge_slave_1) entered disabled state [ 1744.137729][T22366] bridge_slave_1: entered allmulticast mode [ 1744.172748][T22366] bridge_slave_1: entered promiscuous mode [ 1744.185464][T22184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1744.228830][T22406] bridge0: port 1(bridge_slave_0) entered blocking state [ 1744.228968][T22406] bridge0: port 1(bridge_slave_0) entered disabled state [ 1744.229237][T22406] bridge_slave_0: entered allmulticast mode [ 1744.270273][T22406] bridge_slave_0: entered promiscuous mode [ 1744.314629][T22375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1744.542295][T22406] bridge0: port 2(bridge_slave_1) entered blocking state [ 1744.542428][T22406] bridge0: port 2(bridge_slave_1) entered disabled state [ 1744.542657][T22406] bridge_slave_1: entered allmulticast mode [ 1744.545405][T22406] bridge_slave_1: entered promiscuous mode [ 1744.999338][T22366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1745.108674][T22184] team0: Port device team_slave_0 added [ 1745.254599][ T87] hsr_slave_0: left promiscuous mode [ 1745.273492][ T87] hsr_slave_1: left promiscuous mode [ 1745.274534][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1745.274560][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1745.322165][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1745.322194][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1745.459932][ T87] veth1_macvtap: left promiscuous mode [ 1745.460042][ T87] veth0_macvtap: left promiscuous mode [ 1745.460321][ T87] veth1_vlan: left promiscuous mode [ 1745.460519][ T87] veth0_vlan: left promiscuous mode [ 1748.810284][ T87] team0 (unregistering): Port device team_slave_1 removed [ 1749.151196][ T87] team0 (unregistering): Port device team_slave_0 removed [ 1751.420637][T18763] Bluetooth: hci2: command 0x0406 tx timeout [ 1753.001570][T22375] team0: Port device team_slave_0 added [ 1753.006254][T22366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1753.152606][T22406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1753.156848][T22184] team0: Port device team_slave_1 added [ 1753.251057][T22375] team0: Port device team_slave_1 added [ 1753.263188][T22406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1753.852166][T22366] team0: Port device team_slave_0 added [ 1754.064421][T22366] team0: Port device team_slave_1 added [ 1754.075055][T22184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1754.075072][T22184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1754.075100][T22184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1754.085206][T22375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1754.085221][T22375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1754.085244][T22375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1754.400902][T22184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1754.400919][T22184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1754.400946][T22184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1754.402510][T22375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1754.402523][T22375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1754.402549][T22375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1754.405796][T22406] team0: Port device team_slave_0 added [ 1754.636094][T22406] team0: Port device team_slave_1 added [ 1754.638076][T22366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1754.638092][T22366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1754.638118][T22366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1754.778590][T22366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1754.778605][T22366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1754.778629][T22366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1755.134129][T22406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1755.134146][T22406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1755.134172][T22406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1755.384261][T22406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1755.384280][T22406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1755.384307][T22406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1755.397293][T22375] hsr_slave_0: entered promiscuous mode [ 1755.399020][T22375] hsr_slave_1: entered promiscuous mode [ 1755.410172][T22184] hsr_slave_0: entered promiscuous mode [ 1755.412931][T22184] hsr_slave_1: entered promiscuous mode [ 1755.413919][T22184] debugfs: 'hsr0' already exists in 'hsr' [ 1755.413943][T22184] Cannot create hsr debugfs directory [ 1755.671807][T22366] hsr_slave_0: entered promiscuous mode [ 1755.673260][T22366] hsr_slave_1: entered promiscuous mode [ 1755.674260][T22366] debugfs: 'hsr0' already exists in 'hsr' [ 1755.674284][T22366] Cannot create hsr debugfs directory [ 1756.327296][T22406] hsr_slave_0: entered promiscuous mode [ 1756.328661][T22406] hsr_slave_1: entered promiscuous mode [ 1756.329446][T22406] debugfs: 'hsr0' already exists in 'hsr' [ 1756.329465][T22406] Cannot create hsr debugfs directory [ 1757.635444][ T87] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1758.272596][ T87] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1758.718329][ T87] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1759.244087][ T87] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1759.964273][ T87] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1760.299282][ T87] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1760.548254][T22184] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1760.802849][ T87] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1761.031298][T22184] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1761.223915][ T87] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1761.478300][T22184] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1761.794164][T22184] team0: Port device netdevsim0 removed [ 1761.798818][T22184] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1762.039421][ T87] bridge_slave_1: left allmulticast mode [ 1762.039452][ T87] bridge_slave_1: left promiscuous mode [ 1762.039720][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 1762.172334][ T87] bridge_slave_0: left allmulticast mode [ 1762.172353][ T87] bridge_slave_0: left promiscuous mode [ 1762.172506][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 1762.268821][ T87] bridge_slave_1: left allmulticast mode [ 1762.268842][ T87] bridge_slave_1: left promiscuous mode [ 1762.269003][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 1762.353552][ T87] bridge_slave_0: left allmulticast mode [ 1762.353580][ T87] bridge_slave_0: left promiscuous mode [ 1762.353832][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 1765.371839][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1765.403410][ T87] bond_slave_0: left promiscuous mode [ 1765.403622][ T87] bond_slave_0: left allmulticast mode [ 1765.439072][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1765.477777][ T87] bond_slave_1: left promiscuous mode [ 1765.478013][ T87] bond_slave_1: left allmulticast mode [ 1765.481710][ T87] bond0 (unregistering): Released all slaves [ 1765.500178][ T87] bond1 (unregistering): Released all slaves [ 1767.964117][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1768.050080][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1768.090152][ T87] bond0 (unregistering): Released all slaves [ 1768.122077][T24007] FAULT_INJECTION: forcing a failure. [ 1768.122077][T24007] name failslab, interval 1, probability 0, space 0, times 0 [ 1768.122103][T24007] CPU: 0 UID: 0 PID: 24007 Comm: syz.3.5949 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1768.122116][T24007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1768.122124][T24007] Call Trace: [ 1768.122129][T24007] [ 1768.122135][T24007] dump_stack_lvl+0x189/0x250 [ 1768.122157][T24007] ? __pfx____ratelimit+0x10/0x10 [ 1768.122172][T24007] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1768.122188][T24007] ? __pfx__printk+0x10/0x10 [ 1768.122205][T24007] ? __pfx___might_resched+0x10/0x10 [ 1768.122225][T24007] ? fs_reclaim_acquire+0x7d/0x100 [ 1768.122244][T24007] should_fail_ex+0x46c/0x600 [ 1768.122261][T24007] ? __alloc_skb+0x112/0x2d0 [ 1768.122272][T24007] should_failslab+0xa8/0x100 [ 1768.122289][T24007] ? __alloc_skb+0x112/0x2d0 [ 1768.122298][T24007] kmem_cache_alloc_node_noprof+0x78/0x6e0 [ 1768.122314][T24007] ? netlink_autobind+0xdb/0x300 [ 1768.122329][T24007] __alloc_skb+0x112/0x2d0 [ 1768.122342][T24007] netlink_sendmsg+0x5c6/0xb30 [ 1768.122353][T24007] ? is_bpf_text_address+0x26/0x2b0 [ 1768.122374][T24007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1768.122390][T24007] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1768.122405][T24007] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1768.122417][T24007] __sock_sendmsg+0x21c/0x270 [ 1768.122434][T24007] ____sys_sendmsg+0x508/0x820 [ 1768.122450][T24007] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1768.122468][T24007] ? import_iovec+0x74/0xa0 [ 1768.122482][T24007] ___sys_sendmsg+0x21f/0x2a0 [ 1768.122496][T24007] ? __pfx____sys_sendmsg+0x10/0x10 [ 1768.122527][T24007] ? __fget_files+0x2a/0x420 [ 1768.122542][T24007] ? __fget_files+0x3a6/0x420 [ 1768.122562][T24007] __x64_sys_sendmsg+0x1a1/0x260 [ 1768.122576][T24007] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1768.122594][T24007] ? __pfx_ksys_write+0x10/0x10 [ 1768.122610][T24007] ? do_syscall_64+0xbe/0xfa0 [ 1768.122626][T24007] do_syscall_64+0xfa/0xfa0 [ 1768.122639][T24007] ? lockdep_hardirqs_on+0x9c/0x150 [ 1768.122653][T24007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1768.122664][T24007] ? clear_bhb_loop+0x60/0xb0 [ 1768.122677][T24007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1768.122688][T24007] RIP: 0033:0x7f77a524efc9 [ 1768.122699][T24007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1768.122709][T24007] RSP: 002b:00007f77a34b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1768.122721][T24007] RAX: ffffffffffffffda RBX: 00007f77a54a5fa0 RCX: 00007f77a524efc9 [ 1768.122729][T24007] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1768.122736][T24007] RBP: 00007f77a34b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1768.122743][T24007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1768.122750][T24007] R13: 00007f77a54a6038 R14: 00007f77a54a5fa0 R15: 00007ffd3f473598 [ 1768.122767][T24007] [ 1771.601292][ T87] hsr_slave_0: left promiscuous mode [ 1771.639557][ T87] hsr_slave_1: left promiscuous mode [ 1771.640657][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1771.640683][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1771.678373][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1771.678402][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1771.887395][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1771.887425][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1771.935464][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1771.935490][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1772.102376][ T87] veth1_macvtap: left promiscuous mode [ 1772.102486][ T87] veth0_macvtap: left promiscuous mode [ 1772.102815][ T87] veth1_vlan: left promiscuous mode [ 1772.102998][ T87] veth0_vlan: left promiscuous mode [ 1772.260527][ T87] batadv_slave_1: left promiscuous mode [ 1772.260678][ T87] veth1_macvtap: left promiscuous mode [ 1772.260783][ T87] veth0_macvtap: left promiscuous mode [ 1772.261053][ T87] veth1_vlan: left promiscuous mode [ 1772.264535][ T87] veth0_vlan: left promiscuous mode [ 1773.025269][T24224] FAULT_INJECTION: forcing a failure. [ 1773.025269][T24224] name failslab, interval 1, probability 0, space 0, times 0 [ 1773.025310][T24224] CPU: 0 UID: 0 PID: 24224 Comm: syz.3.6056 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1773.025334][T24224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1773.025346][T24224] Call Trace: [ 1773.025355][T24224] [ 1773.025364][T24224] dump_stack_lvl+0x189/0x250 [ 1773.025396][T24224] ? __pfx____ratelimit+0x10/0x10 [ 1773.025421][T24224] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1773.025443][T24224] ? __pfx__printk+0x10/0x10 [ 1773.025461][T24224] ? __lock_acquire+0xab9/0xd20 [ 1773.025481][T24224] should_fail_ex+0x46c/0x600 [ 1773.025499][T24224] ? skb_clone+0x212/0x3a0 [ 1773.025527][T24224] should_failslab+0xa8/0x100 [ 1773.025545][T24224] ? skb_clone+0x212/0x3a0 [ 1773.025557][T24224] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 1773.025576][T24224] skb_clone+0x212/0x3a0 [ 1773.025592][T24224] __netlink_deliver_tap+0x404/0x850 [ 1773.025612][T24224] ? netlink_deliver_tap+0x2e/0x1b0 [ 1773.025624][T24224] netlink_deliver_tap+0x19c/0x1b0 [ 1773.025636][T24224] netlink_unicast+0x811/0xa10 [ 1773.025658][T24224] ? __pfx_netlink_unicast+0x10/0x10 [ 1773.025675][T24224] ? netlink_sendmsg+0x642/0xb30 [ 1773.025685][T24224] ? skb_put+0x11b/0x210 [ 1773.025698][T24224] netlink_sendmsg+0x805/0xb30 [ 1773.025708][T24224] ? is_bpf_text_address+0x26/0x2b0 [ 1773.025730][T24224] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1773.025745][T24224] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1773.025762][T24224] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1773.025776][T24224] __sock_sendmsg+0x21c/0x270 [ 1773.025795][T24224] ____sys_sendmsg+0x508/0x820 [ 1773.025812][T24224] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1773.025830][T24224] ? import_iovec+0x74/0xa0 [ 1773.025845][T24224] ___sys_sendmsg+0x21f/0x2a0 [ 1773.025859][T24224] ? __pfx____sys_sendmsg+0x10/0x10 [ 1773.025891][T24224] ? __fget_files+0x2a/0x420 [ 1773.025907][T24224] ? __fget_files+0x3a6/0x420 [ 1773.025927][T24224] __x64_sys_sendmsg+0x1a1/0x260 [ 1773.025941][T24224] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1773.025960][T24224] ? __pfx_ksys_write+0x10/0x10 [ 1773.025976][T24224] ? do_syscall_64+0xbe/0xfa0 [ 1773.025993][T24224] do_syscall_64+0xfa/0xfa0 [ 1773.026006][T24224] ? lockdep_hardirqs_on+0x9c/0x150 [ 1773.026020][T24224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1773.026031][T24224] ? clear_bhb_loop+0x60/0xb0 [ 1773.026044][T24224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1773.026055][T24224] RIP: 0033:0x7f77a524efc9 [ 1773.026066][T24224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1773.026082][T24224] RSP: 002b:00007f77a34b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1773.026099][T24224] RAX: ffffffffffffffda RBX: 00007f77a54a5fa0 RCX: 00007f77a524efc9 [ 1773.026108][T24224] RDX: 0000000006008000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1773.026115][T24224] RBP: 00007f77a34b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1773.026122][T24224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1773.026129][T24224] R13: 00007f77a54a6038 R14: 00007f77a54a5fa0 R15: 00007ffd3f473598 [ 1773.026147][T24224] [ 1773.026236][T24224] netlink: 5364 bytes leftover after parsing attributes in process `syz.3.6056'. [ 1776.338198][ T87] team0 (unregistering): Port device team_slave_1 removed [ 1776.465311][T24321] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 1776.671128][ T87] team0 (unregistering): Port device team_slave_0 removed [ 1776.770514][T24335] syz.3.6108 (24335): attempted to duplicate a private mapping with mremap. This is not supported. [ 1776.770546][T24335] FAULT_INJECTION: forcing a failure. [ 1776.770546][T24335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1776.770577][T24335] CPU: 1 UID: 0 PID: 24335 Comm: syz.3.6108 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1776.770596][T24335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1776.770606][T24335] Call Trace: [ 1776.770613][T24335] [ 1776.770621][T24335] dump_stack_lvl+0x189/0x250 [ 1776.770651][T24335] ? __pfx____ratelimit+0x10/0x10 [ 1776.770673][T24335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1776.770695][T24335] ? __pfx__printk+0x10/0x10 [ 1776.770732][T24335] should_fail_ex+0x46c/0x600 [ 1776.770767][T24335] _copy_to_user+0x31/0xb0 [ 1776.770787][T24335] simple_read_from_buffer+0xe1/0x170 [ 1776.770812][T24335] proc_fail_nth_read+0x1b6/0x220 [ 1776.770833][T24335] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1776.770860][T24335] ? rw_verify_area+0x2ac/0x4e0 [ 1776.770883][T24335] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1776.770906][T24335] vfs_read+0x206/0xa30 [ 1776.770932][T24335] ? __pfx_vfs_read+0x10/0x10 [ 1776.770947][T24335] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1776.770972][T24335] ? mutex_lock_nested+0x154/0x1d0 [ 1776.770988][T24335] ? fdget_pos+0x253/0x320 [ 1776.771017][T24335] ksys_read+0x14b/0x260 [ 1776.771037][T24335] ? __pfx_ksys_read+0x10/0x10 [ 1776.771059][T24335] ? do_syscall_64+0xbe/0xfa0 [ 1776.771084][T24335] do_syscall_64+0xfa/0xfa0 [ 1776.771102][T24335] ? lockdep_hardirqs_on+0x9c/0x150 [ 1776.771123][T24335] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1776.771146][T24335] ? clear_bhb_loop+0x60/0xb0 [ 1776.771166][T24335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1776.771181][T24335] RIP: 0033:0x7f77a524d9dc [ 1776.771202][T24335] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1776.771216][T24335] RSP: 002b:00007f77a34b6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1776.771234][T24335] RAX: ffffffffffffffda RBX: 00007f77a54a5fa0 RCX: 00007f77a524d9dc [ 1776.771246][T24335] RDX: 000000000000000f RSI: 00007f77a34b60a0 RDI: 0000000000000003 [ 1776.771256][T24335] RBP: 00007f77a34b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1776.771266][T24335] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1776.771276][T24335] R13: 00007f77a54a6038 R14: 00007f77a54a5fa0 R15: 00007ffd3f473598 [ 1776.771312][T24335] [ 1777.923199][T18763] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1777.942575][T18763] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1777.949889][T18763] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1777.951951][T18763] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1777.952748][T18763] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1779.964042][T18763] Bluetooth: hci0: command tx timeout [ 1781.658934][T24472] FAULT_INJECTION: forcing a failure. [ 1781.658934][T24472] name failslab, interval 1, probability 0, space 0, times 0 [ 1781.658995][T24472] CPU: 1 UID: 0 PID: 24472 Comm: syz.3.6174 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1781.659019][T24472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1781.659031][T24472] Call Trace: [ 1781.659039][T24472] [ 1781.659049][T24472] dump_stack_lvl+0x189/0x250 [ 1781.659081][T24472] ? __pfx____ratelimit+0x10/0x10 [ 1781.659106][T24472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1781.659134][T24472] ? __pfx__printk+0x10/0x10 [ 1781.659160][T24472] ? fs_reclaim_acquire+0x7d/0x100 [ 1781.659196][T24472] should_fail_ex+0x46c/0x600 [ 1781.659226][T24472] ? alloc_empty_file+0x55/0x1d0 [ 1781.659244][T24472] should_failslab+0xa8/0x100 [ 1781.659276][T24472] ? alloc_empty_file+0x55/0x1d0 [ 1781.659291][T24472] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 1781.659323][T24472] alloc_empty_file+0x55/0x1d0 [ 1781.659343][T24472] path_openat+0x10d/0x3840 [ 1781.659375][T24472] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1781.659406][T24472] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1781.659430][T24472] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1781.659470][T24472] ? __pfx_path_openat+0x10/0x10 [ 1781.659491][T24472] ? do_raw_spin_lock+0x121/0x290 [ 1781.659526][T24472] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1781.659551][T24472] ? lockdep_hardirqs_on+0x9c/0x150 [ 1781.659577][T24472] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1781.659609][T24472] do_filp_open+0x1fa/0x410 [ 1781.659633][T24472] ? __pfx_do_filp_open+0x10/0x10 [ 1781.659652][T24472] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1781.659698][T24472] ? alloc_fd+0x64f/0x6c0 [ 1781.659735][T24472] do_sys_openat2+0x121/0x1c0 [ 1781.659761][T24472] ? __pfx___schedule+0x10/0x10 [ 1781.659785][T24472] ? __pfx_do_sys_openat2+0x10/0x10 [ 1781.659806][T24472] ? ksys_write+0x230/0x260 [ 1781.659837][T24472] __x64_sys_open+0x11e/0x150 [ 1781.659861][T24472] do_syscall_64+0xfa/0xfa0 [ 1781.659886][T24472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1781.659905][T24472] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1781.659924][T24472] ? clear_bhb_loop+0x60/0xb0 [ 1781.659947][T24472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1781.659966][T24472] RIP: 0033:0x7f77a524efc9 [ 1781.659984][T24472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1781.660002][T24472] RSP: 002b:00007f77a3474038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1781.660023][T24472] RAX: ffffffffffffffda RBX: 00007f77a54a6180 RCX: 00007f77a524efc9 [ 1781.660039][T24472] RDX: 0000000000000004 RSI: 0000000000101002 RDI: 0000200000000000 [ 1781.660053][T24472] RBP: 00007f77a3474090 R08: 0000000000000000 R09: 0000000000000000 [ 1781.660066][T24472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1781.660078][T24472] R13: 00007f77a54a6218 R14: 00007f77a54a6180 R15: 00007ffd3f473598 [ 1781.660113][T24472] [ 1781.935913][T18763] Bluetooth: hci0: command tx timeout [ 1782.312786][T24475] FAULT_INJECTION: forcing a failure. [ 1782.312786][T24475] name failslab, interval 1, probability 0, space 0, times 0 [ 1782.312809][T24475] CPU: 0 UID: 0 PID: 24475 Comm: syz.3.6175 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1782.312823][T24475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1782.312830][T24475] Call Trace: [ 1782.312835][T24475] [ 1782.312840][T24475] dump_stack_lvl+0x189/0x250 [ 1782.312861][T24475] ? __pfx____ratelimit+0x10/0x10 [ 1782.312875][T24475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1782.312891][T24475] ? __pfx__printk+0x10/0x10 [ 1782.312907][T24475] ? __pfx___might_resched+0x10/0x10 [ 1782.312922][T24475] should_fail_ex+0x46c/0x600 [ 1782.312940][T24475] should_failslab+0xa8/0x100 [ 1782.312958][T24475] __kmalloc_cache_noprof+0x6f/0x6c0 [ 1782.312972][T24475] ? _copy_from_user+0x94/0xb0 [ 1782.312983][T24475] ? __se_sys_mount+0x166/0x410 [ 1782.312998][T24475] ? memdup_user+0x99/0xd0 [ 1782.313013][T24475] __se_sys_mount+0x166/0x410 [ 1782.313031][T24475] ? __pfx___se_sys_mount+0x10/0x10 [ 1782.313048][T24475] ? do_syscall_64+0xbe/0xfa0 [ 1782.313061][T24475] ? __x64_sys_mount+0x20/0xc0 [ 1782.313076][T24475] do_syscall_64+0xfa/0xfa0 [ 1782.313091][T24475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1782.313101][T24475] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1782.313112][T24475] ? clear_bhb_loop+0x60/0xb0 [ 1782.313124][T24475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1782.313134][T24475] RIP: 0033:0x7f77a524efc9 [ 1782.313144][T24475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1782.313154][T24475] RSP: 002b:00007f77a3495038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1782.313166][T24475] RAX: ffffffffffffffda RBX: 00007f77a54a6090 RCX: 00007f77a524efc9 [ 1782.313174][T24475] RDX: 00002000000003c0 RSI: 0000200000000000 RDI: 0000200000002440 [ 1782.313181][T24475] RBP: 00007f77a3495090 R08: 0000200000002340 R09: 0000000000000000 [ 1782.313188][T24475] R10: 000000000200c40c R11: 0000000000000246 R12: 0000000000000001 [ 1782.313195][T24475] R13: 00007f77a54a6128 R14: 00007f77a54a6090 R15: 00007ffd3f473598 [ 1782.313213][T24475] [ 1783.917262][T18763] Bluetooth: hci0: command tx timeout [ 1783.935341][ T5121] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1783.986916][ T5121] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1783.993349][ T5121] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1784.051298][ T5121] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1784.052102][ T5121] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1784.239407][T24511] FAULT_INJECTION: forcing a failure. [ 1784.239407][T24511] name failslab, interval 1, probability 0, space 0, times 0 [ 1784.239441][T24511] CPU: 0 UID: 0 PID: 24511 Comm: syz.3.6191 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1784.239465][T24511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1784.239476][T24511] Call Trace: [ 1784.239485][T24511] [ 1784.239494][T24511] dump_stack_lvl+0x189/0x250 [ 1784.239527][T24511] ? __pfx____ratelimit+0x10/0x10 [ 1784.239562][T24511] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1784.239595][T24511] ? __pfx__printk+0x10/0x10 [ 1784.239624][T24511] ? __lock_acquire+0xab9/0xd20 [ 1784.239658][T24511] should_fail_ex+0x46c/0x600 [ 1784.239689][T24511] ? skb_clone+0x212/0x3a0 [ 1784.239713][T24511] should_failslab+0xa8/0x100 [ 1784.239741][T24511] ? skb_clone+0x212/0x3a0 [ 1784.239761][T24511] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 1784.239794][T24511] skb_clone+0x212/0x3a0 [ 1784.239820][T24511] __netlink_deliver_tap+0x404/0x850 [ 1784.239856][T24511] ? netlink_deliver_tap+0x2e/0x1b0 [ 1784.239878][T24511] netlink_deliver_tap+0x19c/0x1b0 [ 1784.239899][T24511] netlink_unicast+0x811/0xa10 [ 1784.239936][T24511] ? __pfx_netlink_unicast+0x10/0x10 [ 1784.239965][T24511] ? netlink_sendmsg+0x642/0xb30 [ 1784.239983][T24511] ? skb_put+0x11b/0x210 [ 1784.240007][T24511] netlink_sendmsg+0x805/0xb30 [ 1784.240026][T24511] ? is_bpf_text_address+0x26/0x2b0 [ 1784.240063][T24511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1784.240093][T24511] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1784.240119][T24511] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1784.240140][T24511] __sock_sendmsg+0x21c/0x270 [ 1784.240171][T24511] ____sys_sendmsg+0x508/0x820 [ 1784.240200][T24511] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1784.240233][T24511] ? import_iovec+0x74/0xa0 [ 1784.240260][T24511] ___sys_sendmsg+0x21f/0x2a0 [ 1784.240286][T24511] ? __pfx____sys_sendmsg+0x10/0x10 [ 1784.240346][T24511] ? __fget_files+0x2a/0x420 [ 1784.240369][T24511] ? __fget_files+0x3a6/0x420 [ 1784.240407][T24511] __x64_sys_sendmsg+0x1a1/0x260 [ 1784.240430][T24511] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1784.240459][T24511] ? __pfx_ksys_write+0x10/0x10 [ 1784.240483][T24511] ? do_syscall_64+0xbe/0xfa0 [ 1784.240511][T24511] do_syscall_64+0xfa/0xfa0 [ 1784.240534][T24511] ? lockdep_hardirqs_on+0x9c/0x150 [ 1784.240564][T24511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1784.240584][T24511] ? clear_bhb_loop+0x60/0xb0 [ 1784.240607][T24511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1784.240627][T24511] RIP: 0033:0x7f77a524efc9 [ 1784.240645][T24511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1784.240662][T24511] RSP: 002b:00007f77a34b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1784.240684][T24511] RAX: ffffffffffffffda RBX: 00007f77a54a5fa0 RCX: 00007f77a524efc9 [ 1784.240698][T24511] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1784.240711][T24511] RBP: 00007f77a34b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1784.240724][T24511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1784.240736][T24511] R13: 00007f77a54a6038 R14: 00007f77a54a5fa0 R15: 00007ffd3f473598 [ 1784.240770][T24511] [ 1784.651236][ T5121] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1784.657223][ T5121] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1784.658784][ T5121] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1784.663535][ T5121] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1784.664286][ T5121] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1785.298821][ T87] team0 (unregistering): Port device team_slave_1 removed [ 1785.552576][ T5121] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1785.572680][ T5121] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1785.578346][ T5121] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1785.579465][ T5121] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1785.580178][ T5121] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1785.708819][ T87] team0 (unregistering): Port device team_slave_0 removed [ 1785.904308][ T5121] Bluetooth: hci0: command tx timeout [ 1786.050568][ T5121] Bluetooth: hci4: command tx timeout [ 1786.688579][ T5121] Bluetooth: hci6: command tx timeout [ 1787.536440][ T5121] Bluetooth: hci8: command tx timeout [ 1788.031879][ T5121] Bluetooth: hci4: command tx timeout [ 1788.647636][ T5121] Bluetooth: hci6: command tx timeout [ 1789.479817][ T5121] Bluetooth: hci8: command tx timeout [ 1790.029565][ T5121] Bluetooth: hci4: command tx timeout [ 1790.623443][ T5121] Bluetooth: hci6: command tx timeout [ 1791.460716][ T5121] Bluetooth: hci8: command tx timeout [ 1791.617577][T24361] chnl_net:caif_netlink_parms(): no params data found [ 1791.664571][T24515] chnl_net:caif_netlink_parms(): no params data found [ 1791.691186][T24512] chnl_net:caif_netlink_parms(): no params data found [ 1792.016352][ T5121] Bluetooth: hci4: command tx timeout [ 1793.099651][ T5121] Bluetooth: hci6: command tx timeout [ 1793.745509][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1793.745585][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.746802][ T5121] Bluetooth: hci8: command tx timeout [ 1794.097850][T24502] chnl_net:caif_netlink_parms(): no params data found [ 1794.926738][T24662] FAULT_INJECTION: forcing a failure. [ 1794.926738][T24662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1794.926762][T24662] CPU: 1 UID: 0 PID: 24662 Comm: syz.3.6253 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1794.926775][T24662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1794.926783][T24662] Call Trace: [ 1794.926788][T24662] [ 1794.926793][T24662] dump_stack_lvl+0x189/0x250 [ 1794.926814][T24662] ? __pfx____ratelimit+0x10/0x10 [ 1794.926828][T24662] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1794.926844][T24662] ? __pfx__printk+0x10/0x10 [ 1794.926864][T24662] should_fail_ex+0x46c/0x600 [ 1794.926882][T24662] _copy_to_user+0x31/0xb0 [ 1794.926895][T24662] sctp_getsockopt_auth_supported+0x21e/0x2e0 [ 1794.926920][T24662] ? __pfx_sctp_getsockopt_auth_supported+0x10/0x10 [ 1794.926935][T24662] ? rt_spin_unlock+0x161/0x200 [ 1794.926948][T24662] ? lock_sock_nested+0x5f/0x130 [ 1794.926963][T24662] ? lock_sock_nested+0xdd/0x130 [ 1794.926980][T24662] sctp_getsockopt+0x6cc/0xb60 [ 1794.926994][T24662] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1794.927011][T24662] do_sock_getsockopt+0x372/0x450 [ 1794.927025][T24662] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1794.927037][T24662] ? do_syscall_64+0xa0/0xfa0 [ 1794.927051][T24662] ? __fget_files+0x2a/0x420 [ 1794.927066][T24662] ? __fget_files+0x3a6/0x420 [ 1794.927079][T24662] ? __fget_files+0x2a/0x420 [ 1794.927105][T24662] __x64_sys_getsockopt+0x1ab/0x250 [ 1794.927116][T24662] ? do_syscall_64+0xa0/0xfa0 [ 1794.927136][T24662] ? do_syscall_64+0xa0/0xfa0 [ 1794.927155][T24662] do_syscall_64+0xfa/0xfa0 [ 1794.927168][T24662] ? lockdep_hardirqs_on+0x9c/0x150 [ 1794.927182][T24662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1794.927192][T24662] ? clear_bhb_loop+0x60/0xb0 [ 1794.927205][T24662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1794.927217][T24662] RIP: 0033:0x7f77a524efc9 [ 1794.927229][T24662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1794.927238][T24662] RSP: 002b:00007f77a34b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1794.927250][T24662] RAX: ffffffffffffffda RBX: 00007f77a54a5fa0 RCX: 00007f77a524efc9 [ 1794.927258][T24662] RDX: 0000000000000081 RSI: 0000000000000084 RDI: 0000000000000003 [ 1794.927265][T24662] RBP: 00007f77a34b6090 R08: 0000200000000300 R09: 0000000000000000 [ 1794.927272][T24662] R10: 0000200000003340 R11: 0000000000000246 R12: 0000000000000001 [ 1794.927279][T24662] R13: 00007f77a54a6038 R14: 00007f77a54a5fa0 R15: 00007ffd3f473598 [ 1794.927297][T24662] [ 1795.747905][T24361] bridge0: port 1(bridge_slave_0) entered blocking state [ 1795.748049][T24361] bridge0: port 1(bridge_slave_0) entered disabled state [ 1795.748186][T24361] bridge_slave_0: entered allmulticast mode [ 1795.758661][T24361] bridge_slave_0: entered promiscuous mode [ 1795.898671][T24515] bridge0: port 1(bridge_slave_0) entered blocking state [ 1795.898832][T24515] bridge0: port 1(bridge_slave_0) entered disabled state [ 1795.899238][T24515] bridge_slave_0: entered allmulticast mode [ 1795.919385][T24515] bridge_slave_0: entered promiscuous mode [ 1795.922941][T24361] bridge0: port 2(bridge_slave_1) entered blocking state [ 1795.923015][T24361] bridge0: port 2(bridge_slave_1) entered disabled state [ 1795.923153][T24361] bridge_slave_1: entered allmulticast mode [ 1795.927715][T24361] bridge_slave_1: entered promiscuous mode [ 1795.933411][T24512] bridge0: port 1(bridge_slave_0) entered blocking state [ 1795.933557][T24512] bridge0: port 1(bridge_slave_0) entered disabled state [ 1795.933797][T24512] bridge_slave_0: entered allmulticast mode [ 1795.936952][T24512] bridge_slave_0: entered promiscuous mode [ 1796.014528][T24515] bridge0: port 2(bridge_slave_1) entered blocking state [ 1796.014623][T24515] bridge0: port 2(bridge_slave_1) entered disabled state [ 1796.014759][T24515] bridge_slave_1: entered allmulticast mode [ 1796.017873][T24515] bridge_slave_1: entered promiscuous mode [ 1796.150636][T24512] bridge0: port 2(bridge_slave_1) entered blocking state [ 1796.150769][T24512] bridge0: port 2(bridge_slave_1) entered disabled state [ 1796.151010][T24512] bridge_slave_1: entered allmulticast mode [ 1796.155901][T24512] bridge_slave_1: entered promiscuous mode [ 1796.624494][T24502] bridge0: port 1(bridge_slave_0) entered blocking state [ 1796.624694][T24502] bridge0: port 1(bridge_slave_0) entered disabled state [ 1796.624907][T24502] bridge_slave_0: entered allmulticast mode [ 1796.628602][T24502] bridge_slave_0: entered promiscuous mode [ 1796.776719][T24361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1796.910550][T24502] bridge0: port 2(bridge_slave_1) entered blocking state [ 1796.910703][T24502] bridge0: port 2(bridge_slave_1) entered disabled state [ 1796.910918][T24502] bridge_slave_1: entered allmulticast mode [ 1796.912710][T24502] bridge_slave_1: entered promiscuous mode [ 1796.949123][T24515] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1797.254516][T24361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1797.374932][T24512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1797.485771][T24515] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1797.684767][T24512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1798.404965][T24502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1798.521498][T24361] team0: Port device team_slave_0 added [ 1798.636942][T24502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1798.640592][T24515] team0: Port device team_slave_0 added [ 1798.644387][T24361] team0: Port device team_slave_1 added [ 1798.765139][T24512] team0: Port device team_slave_0 added [ 1798.951902][T24515] team0: Port device team_slave_1 added [ 1798.955344][T24512] team0: Port device team_slave_1 added [ 1799.139123][T24791] FAULT_INJECTION: forcing a failure. [ 1799.139123][T24791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1799.139146][T24791] CPU: 0 UID: 0 PID: 24791 Comm: syz.3.6313 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1799.139159][T24791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1799.139166][T24791] Call Trace: [ 1799.139171][T24791] [ 1799.139176][T24791] dump_stack_lvl+0x189/0x250 [ 1799.139197][T24791] ? __pfx____ratelimit+0x10/0x10 [ 1799.139211][T24791] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1799.139226][T24791] ? __pfx__printk+0x10/0x10 [ 1799.139240][T24791] ? __might_fault+0xb0/0x130 [ 1799.139261][T24791] should_fail_ex+0x46c/0x600 [ 1799.139279][T24791] _copy_from_user+0x2d/0xb0 [ 1799.139292][T24791] ___sys_sendmsg+0x158/0x2a0 [ 1799.139307][T24791] ? __pfx____sys_sendmsg+0x10/0x10 [ 1799.139338][T24791] ? __fget_files+0x2a/0x420 [ 1799.139353][T24791] ? __fget_files+0x3a6/0x420 [ 1799.139372][T24791] __x64_sys_sendmsg+0x1a1/0x260 [ 1799.139386][T24791] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1799.139404][T24791] ? __pfx_ksys_write+0x10/0x10 [ 1799.139419][T24791] ? do_syscall_64+0xbe/0xfa0 [ 1799.139435][T24791] do_syscall_64+0xfa/0xfa0 [ 1799.139449][T24791] ? lockdep_hardirqs_on+0x9c/0x150 [ 1799.139462][T24791] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1799.139473][T24791] ? clear_bhb_loop+0x60/0xb0 [ 1799.139486][T24791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1799.139496][T24791] RIP: 0033:0x7f77a524efc9 [ 1799.139506][T24791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1799.139516][T24791] RSP: 002b:00007f77a34b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1799.139528][T24791] RAX: ffffffffffffffda RBX: 00007f77a54a5fa0 RCX: 00007f77a524efc9 [ 1799.139537][T24791] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1799.139544][T24791] RBP: 00007f77a34b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1799.139551][T24791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1799.139557][T24791] R13: 00007f77a54a6038 R14: 00007f77a54a5fa0 R15: 00007ffd3f473598 [ 1799.139574][T24791] [ 1799.570141][T24502] team0: Port device team_slave_0 added [ 1799.572618][T24361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1799.572633][T24361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1799.572660][T24361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1799.923616][T24502] team0: Port device team_slave_1 added [ 1799.925215][T24361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1799.925229][T24361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1799.925255][T24361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1799.927045][T24515] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1799.927059][T24515] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1799.927085][T24515] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1799.928637][T24512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1799.928651][T24512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1799.928675][T24512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1800.190749][T24515] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1800.190766][T24515] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1800.190794][T24515] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1800.192234][T24512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1800.192247][T24512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1800.192274][T24512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1800.371534][T24502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1800.371552][T24502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1800.371579][T24502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1800.527948][T24853] FAULT_INJECTION: forcing a failure. [ 1800.527948][T24853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1800.527970][T24853] CPU: 0 UID: 0 PID: 24853 Comm: syz.3.6344 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1800.527983][T24853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1800.527991][T24853] Call Trace: [ 1800.527996][T24853] [ 1800.528001][T24853] dump_stack_lvl+0x189/0x250 [ 1800.528023][T24853] ? __pfx____ratelimit+0x10/0x10 [ 1800.528038][T24853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1800.528054][T24853] ? __pfx__printk+0x10/0x10 [ 1800.528068][T24853] ? __might_fault+0xb0/0x130 [ 1800.528095][T24853] should_fail_ex+0x46c/0x600 [ 1800.528122][T24853] _copy_from_iter+0x1de/0x1790 [ 1800.528146][T24853] ? _sctp_make_chunk+0x14e/0x430 [ 1800.528171][T24853] ? _sctp_make_chunk+0x14e/0x430 [ 1800.528190][T24853] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 1800.528211][T24853] ? sctp_addto_chunk+0xf2/0x230 [ 1800.528238][T24853] ? __pfx__copy_from_iter+0x10/0x10 [ 1800.528261][T24853] ? __asan_memcpy+0x40/0x70 [ 1800.528283][T24853] ? sctp_make_datafrag_empty+0x17c/0x230 [ 1800.528311][T24853] ? skb_put+0x11b/0x210 [ 1800.528334][T24853] sctp_user_addto_chunk+0x87/0x240 [ 1800.528362][T24853] sctp_datamsg_from_user+0x748/0xef0 [ 1800.528398][T24853] ? __genradix_ptr+0x1e1/0x220 [ 1800.528415][T24853] sctp_sendmsg_to_asoc+0xffe/0x1810 [ 1800.528446][T24853] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 1800.528465][T24853] ? rt_spin_unlock+0x161/0x200 [ 1800.528477][T24853] ? sctp_sendmsg_check_sflags+0x18d/0x2e0 [ 1800.528496][T24853] sctp_sendmsg+0x174f/0x2590 [ 1800.528519][T24853] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1800.528536][T24853] ? __might_fault+0xb0/0x130 [ 1800.528558][T24853] ? sock_rps_record_flow+0x19/0x410 [ 1800.528575][T24853] ? inet_sendmsg+0x2f4/0x370 [ 1800.528590][T24853] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1800.528607][T24853] __sock_sendmsg+0x19c/0x270 [ 1800.528624][T24853] sock_write_iter+0x27f/0x370 [ 1800.528640][T24853] ? __pfx_sock_write_iter+0x10/0x10 [ 1800.528668][T24853] vfs_write+0x5d5/0xb40 [ 1800.528685][T24853] ? __pfx_sock_write_iter+0x10/0x10 [ 1800.528700][T24853] ? __pfx_vfs_write+0x10/0x10 [ 1800.528719][T24853] ? __fget_files+0x2a/0x420 [ 1800.528739][T24853] ksys_write+0x14b/0x260 [ 1800.528753][T24853] ? __pfx_ksys_write+0x10/0x10 [ 1800.528768][T24853] ? do_syscall_64+0xbe/0xfa0 [ 1800.528784][T24853] do_syscall_64+0xfa/0xfa0 [ 1800.528797][T24853] ? lockdep_hardirqs_on+0x9c/0x150 [ 1800.528811][T24853] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1800.528821][T24853] ? clear_bhb_loop+0x60/0xb0 [ 1800.528834][T24853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1800.528844][T24853] RIP: 0033:0x7f77a524efc9 [ 1800.528855][T24853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1800.528871][T24853] RSP: 002b:00007f77a34b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1800.528883][T24853] RAX: ffffffffffffffda RBX: 00007f77a54a5fa0 RCX: 00007f77a524efc9 [ 1800.528891][T24853] RDX: 0000000000029fdf RSI: 0000200000000180 RDI: 0000000000000004 [ 1800.528898][T24853] RBP: 00007f77a34b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1800.528904][T24853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1800.528911][T24853] R13: 00007f77a54a6038 R14: 00007f77a54a5fa0 R15: 00007ffd3f473598 [ 1800.528928][T24853] [ 1800.712333][T24859] FAULT_INJECTION: forcing a failure. [ 1800.712333][T24859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1800.712369][T24859] CPU: 0 UID: 0 PID: 24859 Comm: syz.3.6347 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1800.712390][T24859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1800.712402][T24859] Call Trace: [ 1800.712411][T24859] [ 1800.712419][T24859] dump_stack_lvl+0x189/0x250 [ 1800.712450][T24859] ? __pfx____ratelimit+0x10/0x10 [ 1800.712473][T24859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1800.712500][T24859] ? __pfx__printk+0x10/0x10 [ 1800.712538][T24859] should_fail_ex+0x46c/0x600 [ 1800.712576][T24859] _copy_to_user+0x31/0xb0 [ 1800.712599][T24859] simple_read_from_buffer+0xe1/0x170 [ 1800.712629][T24859] proc_fail_nth_read+0x1b6/0x220 [ 1800.712654][T24859] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1800.712677][T24859] ? rw_verify_area+0x2ac/0x4e0 [ 1800.712699][T24859] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1800.712721][T24859] vfs_read+0x206/0xa30 [ 1800.712752][T24859] ? __pfx_vfs_read+0x10/0x10 [ 1800.712769][T24859] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1800.712800][T24859] ? mutex_lock_nested+0x154/0x1d0 [ 1800.712818][T24859] ? fdget_pos+0x253/0x320 [ 1800.712851][T24859] ksys_read+0x14b/0x260 [ 1800.712874][T24859] ? __pfx_ksys_read+0x10/0x10 [ 1800.712897][T24859] ? do_syscall_64+0xbe/0xfa0 [ 1800.712924][T24859] do_syscall_64+0xfa/0xfa0 [ 1800.712945][T24859] ? lockdep_hardirqs_on+0x9c/0x150 [ 1800.712969][T24859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1800.712988][T24859] ? clear_bhb_loop+0x60/0xb0 [ 1800.713010][T24859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1800.713028][T24859] RIP: 0033:0x7f77a524d9dc [ 1800.713046][T24859] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1800.713063][T24859] RSP: 002b:00007f77a34b6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1800.713083][T24859] RAX: ffffffffffffffda RBX: 00007f77a54a5fa0 RCX: 00007f77a524d9dc [ 1800.713097][T24859] RDX: 000000000000000f RSI: 00007f77a34b60a0 RDI: 0000000000000004 [ 1800.713110][T24859] RBP: 00007f77a34b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1800.713122][T24859] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1800.713135][T24859] R13: 00007f77a54a6038 R14: 00007f77a54a5fa0 R15: 00007ffd3f473598 [ 1800.713168][T24859] [ 1800.833107][T24502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1800.833124][T24502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1800.833150][T24502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1801.378611][T24361] hsr_slave_0: entered promiscuous mode [ 1801.383625][T24361] hsr_slave_1: entered promiscuous mode [ 1801.384691][T24361] debugfs: 'hsr0' already exists in 'hsr' [ 1801.384716][T24361] Cannot create hsr debugfs directory [ 1801.589891][T24512] hsr_slave_0: entered promiscuous mode [ 1801.591298][T24512] hsr_slave_1: entered promiscuous mode [ 1801.592137][T24512] debugfs: 'hsr0' already exists in 'hsr' [ 1801.592159][T24512] Cannot create hsr debugfs directory [ 1801.612047][T24515] hsr_slave_0: entered promiscuous mode [ 1801.613759][T24515] hsr_slave_1: entered promiscuous mode [ 1801.629827][T24515] debugfs: 'hsr0' already exists in 'hsr' [ 1801.629855][T24515] Cannot create hsr debugfs directory [ 1802.188263][T24502] hsr_slave_0: entered promiscuous mode [ 1802.189775][T24502] hsr_slave_1: entered promiscuous mode [ 1802.190865][T24502] debugfs: 'hsr0' already exists in 'hsr' [ 1802.190888][T24502] Cannot create hsr debugfs directory [ 1802.566253][T24940] FAULT_INJECTION: forcing a failure. [ 1802.566253][T24940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1802.566281][T24940] CPU: 1 UID: 0 PID: 24940 Comm: syz.3.6386 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1802.566298][T24940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1802.566308][T24940] Call Trace: [ 1802.566314][T24940] [ 1802.566321][T24940] dump_stack_lvl+0x189/0x250 [ 1802.566347][T24940] ? __pfx____ratelimit+0x10/0x10 [ 1802.566366][T24940] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1802.566386][T24940] ? __pfx__printk+0x10/0x10 [ 1802.566403][T24940] ? __might_fault+0xb0/0x130 [ 1802.566441][T24940] should_fail_ex+0x46c/0x600 [ 1802.566465][T24940] _copy_from_iter+0x1de/0x1790 [ 1802.566491][T24940] ? kmalloc_reserve+0xbd/0x290 [ 1802.566506][T24940] ? rcu_is_watching+0x15/0xb0 [ 1802.566521][T24940] ? kmalloc_reserve+0xbd/0x290 [ 1802.566534][T24940] ? __alloc_skb+0x112/0x2d0 [ 1802.566549][T24940] ? __pfx__copy_from_iter+0x10/0x10 [ 1802.566572][T24940] ? __build_skb_around+0x262/0x3f0 [ 1802.566589][T24940] ? netlink_sendmsg+0x642/0xb30 [ 1802.566604][T24940] ? skb_put+0x11b/0x210 [ 1802.566622][T24940] netlink_sendmsg+0x6b2/0xb30 [ 1802.566637][T24940] ? is_bpf_text_address+0x26/0x2b0 [ 1802.566666][T24940] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1802.566690][T24940] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1802.566711][T24940] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1802.566728][T24940] __sock_sendmsg+0x21c/0x270 [ 1802.566754][T24940] ____sys_sendmsg+0x508/0x820 [ 1802.566777][T24940] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1802.566803][T24940] ? import_iovec+0x74/0xa0 [ 1802.566823][T24940] ___sys_sendmsg+0x21f/0x2a0 [ 1802.566842][T24940] ? __pfx____sys_sendmsg+0x10/0x10 [ 1802.566885][T24940] ? __fget_files+0x2a/0x420 [ 1802.566908][T24940] ? __fget_files+0x3a6/0x420 [ 1802.566940][T24940] __x64_sys_sendmsg+0x1a1/0x260 [ 1802.566959][T24940] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1802.566985][T24940] ? __pfx_ksys_write+0x10/0x10 [ 1802.567007][T24940] ? do_syscall_64+0xbe/0xfa0 [ 1802.567032][T24940] do_syscall_64+0xfa/0xfa0 [ 1802.567050][T24940] ? lockdep_hardirqs_on+0x9c/0x150 [ 1802.567070][T24940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1802.567086][T24940] ? clear_bhb_loop+0x60/0xb0 [ 1802.567105][T24940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1802.567120][T24940] RIP: 0033:0x7f77a524efc9 [ 1802.567134][T24940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1802.567149][T24940] RSP: 002b:00007f77a34b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1802.567166][T24940] RAX: ffffffffffffffda RBX: 00007f77a54a5fa0 RCX: 00007f77a524efc9 [ 1802.567178][T24940] RDX: 0000000020024090 RSI: 0000200000000040 RDI: 0000000000000004 [ 1802.567189][T24940] RBP: 00007f77a34b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1802.567200][T24940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1802.567210][T24940] R13: 00007f77a54a6038 R14: 00007f77a54a5fa0 R15: 00007ffd3f473598 [ 1802.567238][T24940] [ 1803.087138][T24946] FAULT_INJECTION: forcing a failure. [ 1803.087138][T24946] name failslab, interval 1, probability 0, space 0, times 0 [ 1803.087205][T24946] CPU: 1 UID: 0 PID: 24946 Comm: syz.3.6388 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1803.087230][T24946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1803.087242][T24946] Call Trace: [ 1803.087251][T24946] [ 1803.087260][T24946] dump_stack_lvl+0x189/0x250 [ 1803.087292][T24946] ? __pfx____ratelimit+0x10/0x10 [ 1803.087316][T24946] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1803.087343][T24946] ? __pfx__printk+0x10/0x10 [ 1803.087379][T24946] ? __pfx___might_resched+0x10/0x10 [ 1803.087400][T24946] ? fs_reclaim_acquire+0x7d/0x100 [ 1803.087437][T24946] should_fail_ex+0x46c/0x600 [ 1803.087467][T24946] ? security_file_alloc+0x34/0x330 [ 1803.087486][T24946] should_failslab+0xa8/0x100 [ 1803.087513][T24946] ? security_file_alloc+0x34/0x330 [ 1803.087530][T24946] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 1803.087563][T24946] security_file_alloc+0x34/0x330 [ 1803.087585][T24946] init_file+0x99/0x320 [ 1803.087608][T24946] alloc_empty_file+0x6e/0x1d0 [ 1803.087686][T24946] alloc_file_pseudo+0x13d/0x210 [ 1803.087718][T24946] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1803.087735][T24946] ? evm_inode_alloc_security+0x40/0xb0 [ 1803.087755][T24946] ? security_inode_alloc+0xd5/0x330 [ 1803.087791][T24946] sock_alloc_file+0xb8/0x2f0 [ 1803.087822][T24946] do_accept+0x351/0x680 [ 1803.087848][T24946] ? __pfx_do_accept+0x10/0x10 [ 1803.087892][T24946] __sys_accept4+0x11c/0x1c0 [ 1803.087911][T24946] ? irqentry_exit+0x74/0x90 [ 1803.087937][T24946] ? __pfx___sys_accept4+0x10/0x10 [ 1803.087969][T24946] __x64_sys_accept4+0x9a/0xb0 [ 1803.087991][T24946] do_syscall_64+0xfa/0xfa0 [ 1803.088018][T24946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1803.088037][T24946] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1803.088057][T24946] ? clear_bhb_loop+0x60/0xb0 [ 1803.088080][T24946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1803.088100][T24946] RIP: 0033:0x7f77a524efc9 [ 1803.088119][T24946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1803.088137][T24946] RSP: 002b:00007f77a3474038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 1803.088159][T24946] RAX: ffffffffffffffda RBX: 00007f77a54a6180 RCX: 00007f77a524efc9 [ 1803.088174][T24946] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 1803.088187][T24946] RBP: 00007f77a3474090 R08: 0000000000000000 R09: 0000000000000000 [ 1803.088200][T24946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1803.088212][T24946] R13: 00007f77a54a6218 R14: 00007f77a54a6180 R15: 00007ffd3f473598 [ 1803.088246][T24946] [ 1804.305329][T24970] FAULT_INJECTION: forcing a failure. [ 1804.305329][T24970] name failslab, interval 1, probability 0, space 0, times 0 [ 1804.305363][T24970] CPU: 1 UID: 0 PID: 24970 Comm: syz.3.6400 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1804.305386][T24970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1804.305398][T24970] Call Trace: [ 1804.305406][T24970] [ 1804.305416][T24970] dump_stack_lvl+0x189/0x250 [ 1804.305447][T24970] ? __pfx____ratelimit+0x10/0x10 [ 1804.305470][T24970] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1804.305497][T24970] ? __pfx__printk+0x10/0x10 [ 1804.305526][T24970] ? __pfx___might_resched+0x10/0x10 [ 1804.305552][T24970] should_fail_ex+0x46c/0x600 [ 1804.305583][T24970] should_failslab+0xa8/0x100 [ 1804.305611][T24970] __kmalloc_noprof+0xcc/0x7d0 [ 1804.305636][T24970] ? copy_splice_read+0x143/0xa60 [ 1804.305666][T24970] copy_splice_read+0x143/0xa60 [ 1804.305690][T24970] ? __pfx_pipe_to_null+0x10/0x10 [ 1804.305715][T24970] ? pipe_unlock+0x56/0x80 [ 1804.305739][T24970] ? splice_from_pipe+0x108/0x160 [ 1804.305763][T24970] ? __pfx_pipe_to_null+0x10/0x10 [ 1804.305786][T24970] ? __pfx_copy_splice_read+0x10/0x10 [ 1804.305809][T24970] ? look_up_lock_class+0x74/0x170 [ 1804.305846][T24970] ? file_end_write+0xdb/0x250 [ 1804.305871][T24970] ? direct_splice_actor+0x10f/0x160 [ 1804.305898][T24970] ? __pfx_copy_splice_read+0x10/0x10 [ 1804.305921][T24970] splice_direct_to_actor+0x4b4/0xcd0 [ 1804.305966][T24970] ? __pfx_direct_splice_actor+0x10/0x10 [ 1804.305990][T24970] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1804.306027][T24970] do_splice_direct+0x187/0x270 [ 1804.306055][T24970] ? __pfx_do_splice_direct+0x10/0x10 [ 1804.306080][T24970] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1804.306114][T24970] ? rw_verify_area+0x25b/0x4e0 [ 1804.306140][T24970] do_sendfile+0x4ec/0x7f0 [ 1804.306166][T24970] ? __pfx_vfs_write+0x10/0x10 [ 1804.306195][T24970] ? __pfx_do_sendfile+0x10/0x10 [ 1804.306244][T24970] __se_sys_sendfile64+0x13e/0x190 [ 1804.306273][T24970] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 1804.306303][T24970] ? do_syscall_64+0xbe/0xfa0 [ 1804.306331][T24970] do_syscall_64+0xfa/0xfa0 [ 1804.306353][T24970] ? lockdep_hardirqs_on+0x9c/0x150 [ 1804.306376][T24970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1804.306395][T24970] ? clear_bhb_loop+0x60/0xb0 [ 1804.306419][T24970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1804.306438][T24970] RIP: 0033:0x7f77a524efc9 [ 1804.306456][T24970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1804.306471][T24970] RSP: 002b:00007f77a34b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1804.306492][T24970] RAX: ffffffffffffffda RBX: 00007f77a54a5fa0 RCX: 00007f77a524efc9 [ 1804.306507][T24970] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 1804.306519][T24970] RBP: 00007f77a34b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1804.306532][T24970] R10: 000000040000f63c R11: 0000000000000246 R12: 0000000000000001 [ 1804.306545][T24970] R13: 00007f77a54a6038 R14: 00007f77a54a5fa0 R15: 00007ffd3f473598 [ 1804.306579][T24970] [ 1806.019963][ T1246] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1806.181041][ T1246] usb 4-1: config 0 has no interfaces? [ 1806.181085][ T1246] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1806.181108][ T1246] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1806.189129][ T1246] usb 4-1: config 0 descriptor?? [ 1806.245135][ T87] bridge_slave_1: left allmulticast mode [ 1806.245166][ T87] bridge_slave_1: left promiscuous mode [ 1806.245513][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 1806.297951][ T87] bridge_slave_0: left allmulticast mode [ 1806.297979][ T87] bridge_slave_0: left promiscuous mode [ 1806.298236][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 1806.351292][ T87] bridge_slave_1: left allmulticast mode [ 1806.351312][ T87] bridge_slave_1: left promiscuous mode [ 1806.351467][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 1806.406795][ T87] bridge_slave_0: left allmulticast mode [ 1806.406815][ T87] bridge_slave_0: left promiscuous mode [ 1806.407031][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 1806.484426][ T87] bridge_slave_1: left allmulticast mode [ 1806.484449][ T87] bridge_slave_1: left promiscuous mode [ 1806.484597][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 1806.549333][ T87] bridge_slave_0: left allmulticast mode [ 1806.549354][ T87] bridge_slave_0: left promiscuous mode [ 1806.549516][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 1806.834891][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1806.910892][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1806.979399][ T87] bond0 (unregistering): Released all slaves [ 1807.177649][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1807.254254][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1807.312576][ T87] bond0 (unregistering): Released all slaves [ 1807.520782][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1807.596769][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1807.655829][ T87] bond0 (unregistering): Released all slaves [ 1807.779793][ T1246] usb 4-1: USB disconnect, device number 39 [ 1808.653725][ T87] hsr_slave_0: left promiscuous mode [ 1808.739462][ T87] hsr_slave_1: left promiscuous mode [ 1808.740490][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1808.769362][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1808.920389][ T87] hsr_slave_0: left promiscuous mode [ 1808.939408][ T87] hsr_slave_1: left promiscuous mode [ 1808.940091][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1808.978547][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1809.130166][ T87] hsr_slave_0: left promiscuous mode [ 1809.168156][ T87] hsr_slave_1: left promiscuous mode [ 1809.169268][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1809.218990][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1809.405467][T25084] FAULT_INJECTION: forcing a failure. [ 1809.405467][T25084] name failslab, interval 1, probability 0, space 0, times 0 [ 1809.405498][T25084] CPU: 0 UID: 0 PID: 25084 Comm: syz.3.6455 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1809.405517][T25084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1809.405527][T25084] Call Trace: [ 1809.405533][T25084] [ 1809.405541][T25084] dump_stack_lvl+0x189/0x250 [ 1809.405569][T25084] ? __pfx____ratelimit+0x10/0x10 [ 1809.405590][T25084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1809.405612][T25084] ? __pfx__printk+0x10/0x10 [ 1809.405636][T25084] ? __pfx___might_resched+0x10/0x10 [ 1809.405657][T25084] should_fail_ex+0x46c/0x600 [ 1809.405689][T25084] should_failslab+0xa8/0x100 [ 1809.405713][T25084] __kmalloc_noprof+0xcc/0x7d0 [ 1809.405734][T25084] ? kfree+0x51/0x950 [ 1809.405748][T25084] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1809.405770][T25084] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1809.405797][T25084] tomoyo_check_open_permission+0x1c1/0x3b0 [ 1809.405820][T25084] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 1809.405840][T25084] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1809.405888][T25084] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1809.405908][T25084] ? tomoyo_file_open+0x169/0x230 [ 1809.405931][T25084] security_file_open+0xb1/0x270 [ 1809.405950][T25084] do_dentry_open+0x378/0x1350 [ 1809.405973][T25084] ? devcgroup_check_permission+0x2f/0x950 [ 1809.406001][T25084] vfs_open+0x3b/0x350 [ 1809.406014][T25084] ? path_openat+0x2ed9/0x3840 [ 1809.406033][T25084] path_openat+0x2ef1/0x3840 [ 1809.406055][T25084] ? try_to_take_rt_mutex+0x840/0xb00 [ 1809.406095][T25084] ? __pfx_path_openat+0x10/0x10 [ 1809.406113][T25084] ? do_raw_spin_lock+0x121/0x290 [ 1809.406140][T25084] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1809.406161][T25084] ? lockdep_hardirqs_on+0x9c/0x150 [ 1809.406183][T25084] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1809.406209][T25084] do_filp_open+0x1fa/0x410 [ 1809.406231][T25084] ? __pfx_do_filp_open+0x10/0x10 [ 1809.406247][T25084] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1809.406289][T25084] ? alloc_fd+0x64f/0x6c0 [ 1809.406318][T25084] do_sys_openat2+0x121/0x1c0 [ 1809.406337][T25084] ? __pfx_do_sys_openat2+0x10/0x10 [ 1809.406356][T25084] ? ksys_write+0x230/0x260 [ 1809.406376][T25084] ? __pfx_ksys_write+0x10/0x10 [ 1809.406396][T25084] __x64_sys_openat+0x138/0x170 [ 1809.406417][T25084] do_syscall_64+0xfa/0xfa0 [ 1809.406438][T25084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1809.406453][T25084] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1809.406468][T25084] ? clear_bhb_loop+0x60/0xb0 [ 1809.406487][T25084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1809.406503][T25084] RIP: 0033:0x7f77a524efc9 [ 1809.406521][T25084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1809.406536][T25084] RSP: 002b:00007f77a3495038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1809.406555][T25084] RAX: ffffffffffffffda RBX: 00007f77a54a6090 RCX: 00007f77a524efc9 [ 1809.406568][T25084] RDX: 00000000000a2000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1809.406580][T25084] RBP: 00007f77a3495090 R08: 0000000000000000 R09: 0000000000000000 [ 1809.406591][T25084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1809.406602][T25084] R13: 00007f77a54a6128 R14: 00007f77a54a6090 R15: 00007ffd3f473598 [ 1809.406633][T25084] [ 1809.407103][T25084] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1810.513287][ T87] team0 (unregistering): Port device team_slave_1 removed [ 1810.713659][ T87] team0 (unregistering): Port device team_slave_0 removed [ 1811.557006][T25127] FAULT_INJECTION: forcing a failure. [ 1811.557006][T25127] name failslab, interval 1, probability 0, space 0, times 0 [ 1811.557030][T25127] CPU: 0 UID: 0 PID: 25127 Comm: syz.3.6475 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1811.557043][T25127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1811.557051][T25127] Call Trace: [ 1811.557056][T25127] [ 1811.557061][T25127] dump_stack_lvl+0x189/0x250 [ 1811.557082][T25127] ? __pfx____ratelimit+0x10/0x10 [ 1811.557097][T25127] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1811.557113][T25127] ? __pfx__printk+0x10/0x10 [ 1811.557128][T25127] ? __lock_acquire+0xab9/0xd20 [ 1811.557147][T25127] should_fail_ex+0x46c/0x600 [ 1811.557164][T25127] ? skb_clone+0x212/0x3a0 [ 1811.557177][T25127] should_failslab+0xa8/0x100 [ 1811.557194][T25127] ? skb_clone+0x212/0x3a0 [ 1811.557206][T25127] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 1811.557224][T25127] skb_clone+0x212/0x3a0 [ 1811.557240][T25127] __netlink_deliver_tap+0x404/0x850 [ 1811.557259][T25127] ? netlink_deliver_tap+0x2e/0x1b0 [ 1811.557271][T25127] netlink_deliver_tap+0x19c/0x1b0 [ 1811.557282][T25127] netlink_unicast+0x811/0xa10 [ 1811.557304][T25127] ? __pfx_netlink_unicast+0x10/0x10 [ 1811.557321][T25127] ? netlink_sendmsg+0x642/0xb30 [ 1811.557331][T25127] ? skb_put+0x11b/0x210 [ 1811.557344][T25127] netlink_sendmsg+0x805/0xb30 [ 1811.557354][T25127] ? is_bpf_text_address+0x26/0x2b0 [ 1811.557376][T25127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1811.557391][T25127] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1811.557407][T25127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1811.557419][T25127] __sock_sendmsg+0x21c/0x270 [ 1811.557436][T25127] ____sys_sendmsg+0x508/0x820 [ 1811.557452][T25127] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1811.557470][T25127] ? import_iovec+0x74/0xa0 [ 1811.557484][T25127] ___sys_sendmsg+0x21f/0x2a0 [ 1811.557498][T25127] ? __pfx____sys_sendmsg+0x10/0x10 [ 1811.557536][T25127] ? __fget_files+0x2a/0x420 [ 1811.557551][T25127] ? __fget_files+0x3a6/0x420 [ 1811.557571][T25127] __x64_sys_sendmsg+0x1a1/0x260 [ 1811.557585][T25127] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1811.557603][T25127] ? __pfx_ksys_write+0x10/0x10 [ 1811.557619][T25127] ? do_syscall_64+0xbe/0xfa0 [ 1811.557635][T25127] do_syscall_64+0xfa/0xfa0 [ 1811.557648][T25127] ? lockdep_hardirqs_on+0x9c/0x150 [ 1811.557662][T25127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1811.557673][T25127] ? clear_bhb_loop+0x60/0xb0 [ 1811.557686][T25127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1811.557696][T25127] RIP: 0033:0x7f77a524efc9 [ 1811.557707][T25127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1811.557717][T25127] RSP: 002b:00007f77a34b6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1811.557730][T25127] RAX: ffffffffffffffda RBX: 00007f77a54a5fa0 RCX: 00007f77a524efc9 [ 1811.557738][T25127] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 1811.557745][T25127] RBP: 00007f77a34b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1811.557752][T25127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1811.557758][T25127] R13: 00007f77a54a6038 R14: 00007f77a54a5fa0 R15: 00007ffd3f473598 [ 1811.557776][T25127] [ 1812.292573][ T87] team0 (unregistering): Port device team_slave_1 removed [ 1812.454799][ T87] team0 (unregistering): Port device team_slave_0 removed [ 1813.664781][ T87] team0 (unregistering): Port device team_slave_1 removed [ 1813.829275][ T87] team0 (unregistering): Port device team_slave_0 removed [ 1816.249947][T24361] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1816.339305][T24361] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1816.421345][T24361] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1816.611964][T24361] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1816.891409][T24515] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1816.979938][T24515] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1817.079750][T24515] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1817.127298][T24515] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1817.497404][T24512] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1817.575434][T24512] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1817.624013][T24512] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1817.719871][T24512] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1818.001240][ T87] bridge_slave_1: left allmulticast mode [ 1818.001269][ T87] bridge_slave_1: left promiscuous mode [ 1818.001520][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 1818.065996][ T87] bridge_slave_0: left allmulticast mode [ 1818.066028][ T87] bridge_slave_0: left promiscuous mode [ 1818.066320][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 1818.467069][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1818.739731][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1818.885667][T25278] FAULT_INJECTION: forcing a failure. [ 1818.885667][T25278] name failslab, interval 1, probability 0, space 0, times 0 [ 1818.885725][T25278] CPU: 1 UID: 0 PID: 25278 Comm: syz.3.6539 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1818.885749][T25278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1818.885762][T25278] Call Trace: [ 1818.885771][T25278] [ 1818.885780][T25278] dump_stack_lvl+0x189/0x250 [ 1818.885812][T25278] ? __pfx____ratelimit+0x10/0x10 [ 1818.885837][T25278] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1818.885871][T25278] ? __pfx__printk+0x10/0x10 [ 1818.885900][T25278] ? __pfx___might_resched+0x10/0x10 [ 1818.885921][T25278] ? fs_reclaim_acquire+0x7d/0x100 [ 1818.885952][T25278] should_fail_ex+0x46c/0x600 [ 1818.885982][T25278] ? security_file_alloc+0x34/0x330 [ 1818.886001][T25278] should_failslab+0xa8/0x100 [ 1818.886029][T25278] ? security_file_alloc+0x34/0x330 [ 1818.886046][T25278] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 1818.886079][T25278] security_file_alloc+0x34/0x330 [ 1818.886101][T25278] init_file+0x99/0x320 [ 1818.886123][T25278] alloc_empty_file+0x6e/0x1d0 [ 1818.886143][T25278] alloc_file_pseudo+0x13d/0x210 [ 1818.886165][T25278] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1818.886182][T25278] ? evm_inode_alloc_security+0x40/0xb0 [ 1818.886204][T25278] ? security_inode_alloc+0xd5/0x330 [ 1818.886239][T25278] sock_alloc_file+0xb8/0x2f0 [ 1818.886269][T25278] do_accept+0x351/0x680 [ 1818.886294][T25278] ? __pfx_do_accept+0x10/0x10 [ 1818.886311][T25278] ? __rcu_read_unlock+0x84/0xe0 [ 1818.886356][T25278] __sys_accept4+0x11c/0x1c0 [ 1818.886378][T25278] ? __pfx___sys_accept4+0x10/0x10 [ 1818.886410][T25278] __x64_sys_accept4+0x9a/0xb0 [ 1818.886432][T25278] do_syscall_64+0xfa/0xfa0 [ 1818.886457][T25278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1818.886476][T25278] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1818.886495][T25278] ? clear_bhb_loop+0x60/0xb0 [ 1818.886519][T25278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1818.886537][T25278] RIP: 0033:0x7f77a524efc9 [ 1818.886556][T25278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1818.886573][T25278] RSP: 002b:00007f77a3474038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 1818.886595][T25278] RAX: ffffffffffffffda RBX: 00007f77a54a6180 RCX: 00007f77a524efc9 [ 1818.886609][T25278] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 1818.886621][T25278] RBP: 00007f77a3474090 R08: 0000000000000000 R09: 0000000000000000 [ 1818.886635][T25278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1818.886647][T25278] R13: 00007f77a54a6218 R14: 00007f77a54a6180 R15: 00007ffd3f473598 [ 1818.886681][T25278] [ 1818.967675][ T87] bond0 (unregistering): Released all slaves [ 1819.329939][T24502] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1819.564284][T24502] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1819.638497][T24502] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1819.797769][T24502] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1819.969050][ T87] hsr_slave_0: left promiscuous mode [ 1820.007236][ T87] hsr_slave_1: left promiscuous mode [ 1820.008554][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1820.046632][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1821.075151][ T87] team0 (unregistering): Port device team_slave_1 removed [ 1821.256623][ T87] team0 (unregistering): Port device team_slave_0 removed [ 1822.327402][T24361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1822.472975][T24515] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1822.479291][T24361] 8021q: adding VLAN 0 to HW filter on device team0 [ 1822.575258][T20706] bridge0: port 1(bridge_slave_0) entered blocking state [ 1822.575822][T20706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1822.716971][T20706] bridge0: port 2(bridge_slave_1) entered blocking state [ 1822.717130][T20706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1822.725267][T24512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1822.739485][T24515] 8021q: adding VLAN 0 to HW filter on device team0 [ 1822.848544][ T7631] bridge0: port 1(bridge_slave_0) entered blocking state [ 1822.848786][ T7631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1822.941062][T16678] bridge0: port 2(bridge_slave_1) entered blocking state [ 1822.941610][T16678] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1823.033827][T24512] 8021q: adding VLAN 0 to HW filter on device team0 [ 1823.120063][ T7631] bridge0: port 1(bridge_slave_0) entered blocking state [ 1823.120419][ T7631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1823.174184][T16795] bridge0: port 2(bridge_slave_1) entered blocking state [ 1823.174292][T16795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1823.204362][T24502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1823.348087][T24502] 8021q: adding VLAN 0 to HW filter on device team0 [ 1823.387338][ T87] bridge0: port 1(bridge_slave_0) entered blocking state [ 1823.390802][ T87] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1823.443730][ T87] bridge0: port 2(bridge_slave_1) entered blocking state [ 1823.443947][ T87] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1823.945933][T24361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1823.980574][T24515] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1824.107454][T24512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1824.229020][T24361] veth0_vlan: entered promiscuous mode [ 1824.324033][T24361] veth1_vlan: entered promiscuous mode [ 1824.329491][T24515] veth0_vlan: entered promiscuous mode [ 1824.371853][T24515] veth1_vlan: entered promiscuous mode [ 1824.423184][T24502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1824.543667][T24361] veth0_macvtap: entered promiscuous mode [ 1824.583356][T24361] veth1_macvtap: entered promiscuous mode [ 1824.621314][T24515] veth0_macvtap: entered promiscuous mode [ 1824.659718][T24515] veth1_macvtap: entered promiscuous mode [ 1824.716828][T24361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1824.743599][T24502] veth0_vlan: entered promiscuous mode [ 1824.768873][T24361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1824.819893][T24502] veth1_vlan: entered promiscuous mode [ 1824.822961][ T7631] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1824.830349][T24515] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1824.851086][ T7631] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1824.860174][ T7631] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1824.866837][ T7631] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1824.873388][T24515] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1824.951831][T16795] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1824.955225][T16795] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1824.959032][T16795] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1824.960412][T16795] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1825.367730][T24502] veth0_macvtap: entered promiscuous mode [ 1825.528268][T24502] veth1_macvtap: entered promiscuous mode [ 1825.568196][ T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1825.568218][ T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1825.588275][T24512] veth0_vlan: entered promiscuous mode [ 1825.644007][T20706] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1825.644029][T20706] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1825.697914][T24512] veth1_vlan: entered promiscuous mode [ 1825.708365][T24502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1825.765928][T20706] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1825.765948][T20706] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1825.797382][T24502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1825.865981][ T87] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1825.866003][ T87] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1825.910519][ T1404] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1825.912581][ T1404] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1825.922657][ T1404] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1825.941896][ T1404] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.035963][T24512] veth0_macvtap: entered promiscuous mode [ 1826.139662][T24512] veth1_macvtap: entered promiscuous mode [ 1826.446999][T24512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1826.460064][T16678] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1826.460086][T16678] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1826.501164][T24512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1826.590375][ T87] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.613550][ T87] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.634184][ T87] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.651991][ T1404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1826.652011][ T1404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1826.654418][ T87] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.989536][T15129] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1827.094059][ T87] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1827.094078][ T87] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1827.162167][T15129] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1827.162232][T15129] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1827.162256][T15129] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1827.178139][T15129] usb 3-1: config 0 descriptor?? [ 1827.199718][T15129] pwc: Askey VC010 type 2 USB webcam detected. [ 1827.243216][T16678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1827.243238][T16678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1827.580581][T15129] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1827.593201][T15129] pwc: recv_control_msg error -32 req 02 val 2700 [ 1827.600182][T15129] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1827.601116][T15129] pwc: recv_control_msg error -32 req 04 val 1000 [ 1827.602067][T15129] pwc: recv_control_msg error -32 req 04 val 1300 [ 1827.602921][T15129] pwc: recv_control_msg error -32 req 04 val 1400 [ 1827.603874][T15129] pwc: recv_control_msg error -32 req 02 val 2000 [ 1827.604738][T15129] pwc: recv_control_msg error -32 req 02 val 2100 [ 1827.605676][T15129] pwc: recv_control_msg error -32 req 04 val 1500 [ 1827.606636][T15129] pwc: recv_control_msg error -32 req 02 val 2500 [ 1827.608344][T15129] pwc: recv_control_msg error -32 req 02 val 2400 [ 1827.610575][T25529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1827.612632][T25529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1828.023109][T15129] pwc: recv_control_msg error -32 req 02 val 2900 [ 1828.024925][T15129] pwc: recv_control_msg error -32 req 02 val 2800 [ 1829.901218][T18763] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1830.047351][T18763] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1830.051094][T18763] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1830.052917][T18763] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1830.053693][T18763] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1831.262093][T15129] pwc: recv_control_msg error -71 req 04 val 1200 [ 1831.283903][T15129] pwc: Registered as video103. [ 1831.287339][T15129] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input37 [ 1831.409671][T15129] usb 3-1: USB disconnect, device number 44 [ 1832.603357][T25609] FAULT_INJECTION: forcing a failure. [ 1832.603357][T25609] name failslab, interval 1, probability 0, space 0, times 0 [ 1832.603380][T25609] CPU: 0 UID: 0 PID: 25609 Comm: syz.2.6677 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1832.603394][T25609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1832.603401][T25609] Call Trace: [ 1832.603406][T25609] [ 1832.603414][T25609] dump_stack_lvl+0x189/0x250 [ 1832.603435][T25609] ? __pfx____ratelimit+0x10/0x10 [ 1832.603449][T25609] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1832.603465][T25609] ? __pfx__printk+0x10/0x10 [ 1832.603482][T25609] ? __pfx___might_resched+0x10/0x10 [ 1832.603494][T25609] ? fs_reclaim_acquire+0x7d/0x100 [ 1832.603513][T25609] should_fail_ex+0x46c/0x600 [ 1832.603530][T25609] ? getname_flags+0xb8/0x540 [ 1832.603546][T25609] should_failslab+0xa8/0x100 [ 1832.603562][T25609] ? getname_flags+0xb8/0x540 [ 1832.603576][T25609] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 1832.603594][T25609] getname_flags+0xb8/0x540 [ 1832.603609][T25609] ? _copy_from_user+0x94/0xb0 [ 1832.603623][T25609] user_path_at+0x24/0x60 [ 1832.603635][T25609] __se_sys_mount+0x2d4/0x410 [ 1832.603660][T25609] ? __pfx___se_sys_mount+0x10/0x10 [ 1832.603677][T25609] ? do_syscall_64+0xbe/0xfa0 [ 1832.603690][T25609] ? __x64_sys_mount+0x20/0xc0 [ 1832.603706][T25609] do_syscall_64+0xfa/0xfa0 [ 1832.603719][T25609] ? lockdep_hardirqs_on+0x9c/0x150 [ 1832.603734][T25609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1832.603744][T25609] ? clear_bhb_loop+0x60/0xb0 [ 1832.603761][T25609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1832.603771][T25609] RIP: 0033:0x7f1e837befc9 [ 1832.603782][T25609] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1832.603792][T25609] RSP: 002b:00007f1e81a26038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1832.603804][T25609] RAX: ffffffffffffffda RBX: 00007f1e83a15fa0 RCX: 00007f1e837befc9 [ 1832.603812][T25609] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000900 [ 1832.603820][T25609] RBP: 00007f1e81a26090 R08: 0000000000000000 R09: 0000000000000000 [ 1832.603827][T25609] R10: 0000000001408009 R11: 0000000000000246 R12: 0000000000000001 [ 1832.603834][T25609] R13: 00007f1e83a16038 R14: 00007f1e83a15fa0 R15: 00007fff54250fc8 [ 1832.603852][T25609] [ 1833.103716][T18763] Bluetooth: hci1: command tx timeout [ 1833.762133][T25627] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1834.266517][T17406] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1834.421478][T17406] usb 6-1: config 0 has an invalid interface number: 197 but max is 0 [ 1834.421507][T17406] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1834.421528][T17406] usb 6-1: config 0 has no interface number 0 [ 1834.421587][T17406] usb 6-1: config 0 interface 197 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1834.425960][T17406] usb 6-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=bb.42 [ 1834.425991][T17406] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1834.426012][T17406] usb 6-1: Product: syz [ 1834.426027][T17406] usb 6-1: Manufacturer: syz [ 1834.426042][T17406] usb 6-1: SerialNumber: syz [ 1834.437619][T12874] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1834.528800][T17406] usb 6-1: config 0 descriptor?? [ 1834.603846][T12874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1834.603897][T12874] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 1834.603920][T12874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1834.640093][T12874] usb 2-1: config 0 descriptor?? [ 1835.047225][T18763] Bluetooth: hci1: command tx timeout [ 1835.255275][T12874] usbhid 2-1:0.0: can't add hid device: -71 [ 1835.255401][T12874] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1835.266746][T12874] usb 2-1: USB disconnect, device number 14 [ 1835.768735][ T1181] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1835.986245][T17406] qmi_wwan 6-1:0.197: invalid descriptor buffer length [ 1835.989330][T17406] qmi_wwan 6-1:0.197: probe with driver qmi_wwan failed with error -22 [ 1836.026663][T25576] chnl_net:caif_netlink_parms(): no params data found [ 1836.087054][T17406] usb 6-1: USB disconnect, device number 17 [ 1836.369112][ T1181] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1837.028594][T18763] Bluetooth: hci1: command tx timeout [ 1837.114323][T20101] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1837.377189][T20101] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1837.377244][T20101] usb 2-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 1837.377269][T20101] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1837.386014][T20101] usb 2-1: config 0 descriptor?? [ 1837.445303][ T1181] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1837.808939][T20101] usbhid 2-1:0.0: can't add hid device: -71 [ 1837.809088][T20101] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1837.950727][T20101] usb 2-1: USB disconnect, device number 15 [ 1839.069389][T18763] Bluetooth: hci1: command tx timeout [ 1839.951198][T15129] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1840.770520][ T1181] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1840.930702][T15129] usb 2-1: Using ep0 maxpacket: 16 [ 1840.940163][T15129] usb 2-1: config index 0 descriptor too short (expected 53, got 18) [ 1840.940192][T15129] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1840.940213][T15129] usb 2-1: config 0 has no interfaces? [ 1840.973307][T15129] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1840.973339][T15129] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.973360][T15129] usb 2-1: Product: syz [ 1840.973374][T15129] usb 2-1: Manufacturer: syz [ 1840.973390][T15129] usb 2-1: SerialNumber: syz [ 1841.023388][T15129] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1841.023418][T15129] r8152-cfgselector 2-1: config 0 descriptor?? [ 1841.080134][T25576] bridge0: port 1(bridge_slave_0) entered blocking state [ 1841.080348][T25576] bridge0: port 1(bridge_slave_0) entered disabled state [ 1841.080580][T25576] bridge_slave_0: entered allmulticast mode [ 1841.082935][T25576] bridge_slave_0: entered promiscuous mode [ 1841.095433][T25576] bridge0: port 2(bridge_slave_1) entered blocking state [ 1841.095977][T25576] bridge0: port 2(bridge_slave_1) entered disabled state [ 1841.096254][T25576] bridge_slave_1: entered allmulticast mode [ 1841.099828][T25576] bridge_slave_1: entered promiscuous mode [ 1841.232076][ T1246] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1841.371373][T25576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1841.382952][T25576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1841.421226][ T1246] usb 3-1: Using ep0 maxpacket: 8 [ 1841.444411][ T1246] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1841.444472][ T1246] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1841.444501][ T1246] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 1841.444529][ T1246] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1841.444553][ T1246] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1841.529345][T25731] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.6726'. [ 1841.530785][ T1246] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1841.530822][ T1246] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1841.530843][ T1246] usb 3-1: Product: syz [ 1841.530857][ T1246] usb 3-1: Manufacturer: syz [ 1841.530873][ T1246] usb 3-1: SerialNumber: syz [ 1841.615206][ T1246] usb 3-1: config 0 descriptor?? [ 1841.812069][ T1246] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1841.812100][ T1246] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1841.944733][T25576] team0: Port device team_slave_0 added [ 1841.993460][T25576] team0: Port device team_slave_1 added [ 1842.015749][ T1246] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 1842.015787][ T1246] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1842.015810][ T1246] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1842.361399][ T1246] radio-si470x 3-1:0.0: submitting int urb failed (-90) [ 1842.484001][T25739] netlink: 'syz.0.6729': attribute type 1 has an invalid length. [ 1842.484072][T25739] netlink: 224 bytes leftover after parsing attributes in process `syz.0.6729'. [ 1842.484137][T25739] NCSI netlink: No device for ifindex 0 [ 1843.150974][ T1246] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -110 [ 1843.151369][ T1246] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22 [ 1843.217691][ T1246] usb 3-1: USB disconnect, device number 45 [ 1844.025857][ T1246] r8152-cfgselector 2-1: USB disconnect, device number 16 [ 1844.178729][T25749] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253 [ 1844.178752][T25749] PKCS7: Only support pkcs7_signedData type [ 1844.222878][ C0] vkms_vblank_simulate: vblank timer overrun [ 1844.529316][T25576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1844.529334][T25576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1844.529361][T25576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1845.609789][ C0] vkms_vblank_simulate: vblank timer overrun [ 1845.688744][T25576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1845.688760][T25576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1845.688787][T25576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1846.010265][ C0] vkms_vblank_simulate: vblank timer overrun [ 1846.049968][ T1181] bridge_slave_1: left allmulticast mode [ 1846.049996][ T1181] bridge_slave_1: left promiscuous mode [ 1846.050249][ T1181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1846.381398][ C0] vkms_vblank_simulate: vblank timer overrun [ 1846.961383][T25785] netlink: 'syz.1.6740': attribute type 1 has an invalid length. [ 1846.961408][T25785] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6740'. [ 1846.961425][T25785] NCSI netlink: No device for ifindex 0 [ 1847.456586][ T1181] bridge_slave_0: left allmulticast mode [ 1847.456615][ T1181] bridge_slave_0: left promiscuous mode [ 1847.456907][ T1181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1847.465252][T25787] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6742'. [ 1848.356326][ C0] vkms_vblank_simulate: vblank timer overrun [ 1848.442498][ C0] vkms_vblank_simulate: vblank timer overrun [ 1848.805152][ C0] vkms_vblank_simulate: vblank timer overrun [ 1854.026637][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1854.026736][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1856.654634][T25822] netlink: 'syz.1.6752': attribute type 1 has an invalid length. [ 1856.654707][T25822] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6752'. [ 1856.654771][T25822] NCSI netlink: No device for ifindex 0 [ 1859.366733][T12874] Process accounting resumed [ 1859.959400][T25855] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6764'. [ 1861.172670][T25872] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6770'. [ 1863.576944][ T1181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1863.636811][ T1181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1863.669624][T25893] netlink: 'syz.1.6777': attribute type 72 has an invalid length. [ 1863.669646][T25893] netlink: 'syz.1.6777': attribute type 8 has an invalid length. [ 1863.676688][ T1181] bond0 (unregistering): Released all slaves [ 1864.088331][T25901] netlink: 'syz.5.6779': attribute type 4 has an invalid length. [ 1864.163128][T25576] hsr_slave_0: entered promiscuous mode [ 1864.164551][T25576] hsr_slave_1: entered promiscuous mode [ 1864.412019][T25904] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6779'. [ 1864.535782][T25908] netlink: 'syz.2.6781': attribute type 72 has an invalid length. [ 1864.535802][T25908] netlink: 'syz.2.6781': attribute type 8 has an invalid length. [ 1865.050131][ C1] vkms_vblank_simulate: vblank timer overrun [ 1865.115735][T25921] FAULT_INJECTION: forcing a failure. [ 1865.115735][T25921] name failslab, interval 1, probability 0, space 0, times 0 [ 1865.115773][T25921] CPU: 0 UID: 0 PID: 25921 Comm: syz.5.6784 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1865.115796][T25921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1865.115809][T25921] Call Trace: [ 1865.115818][T25921] [ 1865.115828][T25921] dump_stack_lvl+0x189/0x250 [ 1865.115861][T25921] ? __pfx____ratelimit+0x10/0x10 [ 1865.115886][T25921] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1865.115913][T25921] ? __pfx__printk+0x10/0x10 [ 1865.115942][T25921] ? __lock_acquire+0xab9/0xd20 [ 1865.115975][T25921] should_fail_ex+0x46c/0x600 [ 1865.116005][T25921] ? skb_clone+0x212/0x3a0 [ 1865.116028][T25921] should_failslab+0xa8/0x100 [ 1865.116057][T25921] ? skb_clone+0x212/0x3a0 [ 1865.116077][T25921] kmem_cache_alloc_noprof+0x6f/0x6b0 [ 1865.116111][T25921] skb_clone+0x212/0x3a0 [ 1865.116137][T25921] __netlink_deliver_tap+0x404/0x850 [ 1865.116173][T25921] ? netlink_deliver_tap+0x2e/0x1b0 [ 1865.116195][T25921] netlink_deliver_tap+0x19c/0x1b0 [ 1865.116218][T25921] netlink_unicast+0x811/0xa10 [ 1865.116255][T25921] ? __pfx_netlink_unicast+0x10/0x10 [ 1865.116284][T25921] ? netlink_sendmsg+0x642/0xb30 [ 1865.116302][T25921] ? skb_put+0x11b/0x210 [ 1865.116327][T25921] netlink_sendmsg+0x805/0xb30 [ 1865.116345][T25921] ? is_bpf_text_address+0x26/0x2b0 [ 1865.116389][T25921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1865.116420][T25921] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1865.116445][T25921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1865.116467][T25921] __sock_sendmsg+0x21c/0x270 [ 1865.116497][T25921] ____sys_sendmsg+0x508/0x820 [ 1865.116527][T25921] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1865.116560][T25921] ? import_iovec+0x74/0xa0 [ 1865.116586][T25921] ___sys_sendmsg+0x21f/0x2a0 [ 1865.116611][T25921] ? __pfx____sys_sendmsg+0x10/0x10 [ 1865.116674][T25921] ? __fget_files+0x2a/0x420 [ 1865.116697][T25921] ? __fget_files+0x3a6/0x420 [ 1865.116734][T25921] __x64_sys_sendmsg+0x1a1/0x260 [ 1865.116760][T25921] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1865.116794][T25921] ? __pfx_ksys_write+0x10/0x10 [ 1865.116822][T25921] ? do_syscall_64+0xbe/0xfa0 [ 1865.116850][T25921] do_syscall_64+0xfa/0xfa0 [ 1865.116872][T25921] ? lockdep_hardirqs_on+0x9c/0x150 [ 1865.116896][T25921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1865.116916][T25921] ? clear_bhb_loop+0x60/0xb0 [ 1865.116940][T25921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1865.116959][T25921] RIP: 0033:0x7f2f2fe5efc9 [ 1865.116977][T25921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1865.116994][T25921] RSP: 002b:00007f2f2e0be038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1865.117016][T25921] RAX: ffffffffffffffda RBX: 00007f2f300b5fa0 RCX: 00007f2f2fe5efc9 [ 1865.117031][T25921] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 1865.117044][T25921] RBP: 00007f2f2e0be090 R08: 0000000000000000 R09: 0000000000000000 [ 1865.117057][T25921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1865.117070][T25921] R13: 00007f2f300b6038 R14: 00007f2f300b5fa0 R15: 00007ffc94c6d8c8 [ 1865.117105][T25921] [ 1865.706492][ C1] vkms_vblank_simulate: vblank timer overrun [ 1866.108422][ C1] vkms_vblank_simulate: vblank timer overrun [ 1866.118455][T17098] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1866.289923][T17098] usb 2-1: Using ep0 maxpacket: 8 [ 1866.292548][T17098] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1866.292580][T17098] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1866.292607][T17098] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1866.292633][T17098] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1866.292678][T17098] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1866.292703][T17098] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1866.587984][ C1] vkms_vblank_simulate: vblank timer overrun [ 1866.756290][ C1] vkms_vblank_simulate: vblank timer overrun [ 1867.716795][ C0] ------------[ cut here ]------------ [ 1867.716816][ C0] WARNING: CPU: 0 PID: 16 at kernel/time/timer.c:1785 __run_timer_base+0x777/0x970 [ 1867.716870][ C0] Modules linked in: [ 1867.716891][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1867.716918][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1867.716932][ C0] RIP: 0010:__run_timer_base+0x777/0x970 [ 1867.716960][ C0] Code: 26 4d 85 e4 74 7d e8 68 f6 12 00 e9 48 fe ff ff e8 5e f6 12 00 48 8b 5c 24 28 43 80 7c 3d 00 00 75 d4 eb da e8 4a f6 12 00 90 <0f> 0b 90 48 8b 44 24 40 42 80 3c 38 00 48 8b 5c 24 28 74 a9 48 89 [ 1867.716982][ C0] RSP: 0018:ffffc900001579a0 EFLAGS: 00010046 [ 1867.717001][ C0] RAX: ffffffff81abc9d6 RBX: 0000000000000000 RCX: ffff88801b2d5a00 [ 1867.717018][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1867.717032][ C0] RBP: ffffc90000157b10 R08: 0000000000000000 R09: 0000000000000100 [ 1867.717048][ C0] R10: dffffc0000000000 R11: fffffbfff1dac5ef R12: ffff8880599b2010 [ 1867.717065][ C0] R13: 1ffff9200002af4c R14: ffffc90000157a60 R15: dffffc0000000000 [ 1867.717083][ C0] FS: 0000000000000000(0000) GS:ffff888126df9000(0000) knlGS:0000000000000000 [ 1867.717102][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1867.717117][ C0] CR2: 00007ff2dd477f6f CR3: 0000000069fac000 CR4: 00000000003526f0 [ 1867.717138][ C0] Call Trace: [ 1867.717146][ C0] [ 1867.717178][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1867.717228][ C0] run_timer_softirq+0xb7/0x180 [ 1867.717256][ C0] handle_softirqs+0x22f/0x710 [ 1867.717297][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1867.717337][ C0] run_ktimerd+0xcf/0x190 [ 1867.717366][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 1867.717397][ C0] ? smpboot_thread_fn+0x2d6/0xa60 [ 1867.717426][ C0] ? check_preemption_disabled+0x1/0x120 [ 1867.717462][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1867.717488][ C0] smpboot_thread_fn+0x542/0xa60 [ 1867.717518][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1867.717557][ C0] kthread+0x711/0x8a0 [ 1867.717592][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1867.717620][ C0] ? __pfx_kthread+0x10/0x10 [ 1867.717648][ C0] ? rt_spin_unlock+0x150/0x200 [ 1867.717678][ C0] ? rt_spin_unlock+0x161/0x200 [ 1867.717700][ C0] ? __pfx_kthread+0x10/0x10 [ 1867.717733][ C0] ret_from_fork+0x4bc/0x870 [ 1867.717763][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1867.717798][ C0] ? __switch_to_asm+0x39/0x70 [ 1867.717820][ C0] ? __switch_to_asm+0x33/0x70 [ 1867.717842][ C0] ? __pfx_kthread+0x10/0x10 [ 1867.717880][ C0] ret_from_fork_asm+0x1a/0x30 [ 1867.717920][ C0] [ 1867.717936][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1867.717953][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1867.717978][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1867.717992][ C0] Call Trace: [ 1867.718001][ C0] [ 1867.718011][ C0] dump_stack_lvl+0x99/0x250 [ 1867.718043][ C0] ? __asan_memcpy+0x40/0x70 [ 1867.718071][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1867.718104][ C0] ? __pfx__printk+0x10/0x10 [ 1867.718147][ C0] vpanic+0x237/0x6d0 [ 1867.718169][ C0] ? __pfx_vpanic+0x10/0x10 [ 1867.718205][ C0] panic+0xb9/0xc0 [ 1867.718226][ C0] ? __pfx_panic+0x10/0x10 [ 1867.718266][ C0] __warn+0x31b/0x4b0 [ 1867.718287][ C0] ? __run_timer_base+0x777/0x970 [ 1867.718316][ C0] ? __run_timer_base+0x777/0x970 [ 1867.718340][ C0] report_bug+0x2be/0x4f0 [ 1867.718368][ C0] ? __run_timer_base+0x777/0x970 [ 1867.718396][ C0] ? __run_timer_base+0x777/0x970 [ 1867.718422][ C0] ? __run_timer_base+0x779/0x970 [ 1867.718449][ C0] handle_bug+0x84/0x160 [ 1867.718482][ C0] exc_invalid_op+0x1a/0x50 [ 1867.718514][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1867.718536][ C0] RIP: 0010:__run_timer_base+0x777/0x970 [ 1867.718563][ C0] Code: 26 4d 85 e4 74 7d e8 68 f6 12 00 e9 48 fe ff ff e8 5e f6 12 00 48 8b 5c 24 28 43 80 7c 3d 00 00 75 d4 eb da e8 4a f6 12 00 90 <0f> 0b 90 48 8b 44 24 40 42 80 3c 38 00 48 8b 5c 24 28 74 a9 48 89 [ 1867.718583][ C0] RSP: 0018:ffffc900001579a0 EFLAGS: 00010046 [ 1867.718602][ C0] RAX: ffffffff81abc9d6 RBX: 0000000000000000 RCX: ffff88801b2d5a00 [ 1867.718619][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 1867.718633][ C0] RBP: ffffc90000157b10 R08: 0000000000000000 R09: 0000000000000100 [ 1867.718649][ C0] R10: dffffc0000000000 R11: fffffbfff1dac5ef R12: ffff8880599b2010 [ 1867.718668][ C0] R13: 1ffff9200002af4c R14: ffffc90000157a60 R15: dffffc0000000000 [ 1867.718693][ C0] ? __run_timer_base+0x776/0x970 [ 1867.718749][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 1867.718797][ C0] run_timer_softirq+0xb7/0x180 [ 1867.718825][ C0] handle_softirqs+0x22f/0x710 [ 1867.718871][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1867.718911][ C0] run_ktimerd+0xcf/0x190 [ 1867.718941][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 1867.718972][ C0] ? smpboot_thread_fn+0x2d6/0xa60 [ 1867.719000][ C0] ? check_preemption_disabled+0x1/0x120 [ 1867.719036][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1867.719061][ C0] smpboot_thread_fn+0x542/0xa60 [ 1867.719091][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1867.719129][ C0] kthread+0x711/0x8a0 [ 1867.719165][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1867.719192][ C0] ? __pfx_kthread+0x10/0x10 [ 1867.719220][ C0] ? rt_spin_unlock+0x150/0x200 [ 1867.719250][ C0] ? rt_spin_unlock+0x161/0x200 [ 1867.719271][ C0] ? __pfx_kthread+0x10/0x10 [ 1867.719304][ C0] ret_from_fork+0x4bc/0x870 [ 1867.719334][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1867.719370][ C0] ? __switch_to_asm+0x39/0x70 [ 1867.719392][ C0] ? __switch_to_asm+0x33/0x70 [ 1867.719413][ C0] ? __pfx_kthread+0x10/0x10 [ 1867.719446][ C0] ret_from_fork_asm+0x1a/0x30 [ 1867.719490][ C0] [ 1867.719623][ C0] Kernel Offset: disabled