last executing test programs: 16m31.748042227s ago: executing program 32 (id=82): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mkdir(&(0x7f00000001c0)='./cgroup/../file0/file0\x00', 0x100) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r3 = getpgid(0x0) syz_pidfd_open(r3, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40)=r3, 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) unshare(0x22020400) r7 = inotify_init1(0x0) inotify_add_watch(r7, &(0x7f0000000200)='.\x00', 0x10000a0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000080)=r5, 0x12) 2m12.136972772s ago: executing program 33 (id=3376): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c00000010000304000000000000020000000000", @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00"], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 1m37.553753582s ago: executing program 34 (id=3513): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x2, 0x0, 0x25dfdbfe, {{@in6=@private0, @in=@remote, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x3b, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x9}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x4000000, 0x0, 0x9}, {0x0, 0x5}}}, 0xb8}}, 0x4000) 1m31.705872023s ago: executing program 35 (id=3527): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x208000, 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000180)={0x0, 0x0, '\x00', @raw_data=[0x5, 0x1, 0x8339, 0xa41, 0x2, 0x5, 0xff, 0x6, 0x200, 0x4a, 0x5, 0x205, 0x5, 0x8, 0x101, 0x8, 0xde8, 0xcc00, 0x9, 0x3ff, 0x1, 0x3e, 0x7f6, 0x6f, 0x1, 0x6, 0x1, 0x7, 0x4, 0x5, 0xfd, 0x8]}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) eventfd(0xc) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r1], 0x28}}, 0x802) 1m31.439482378s ago: executing program 2 (id=3529): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1m31.247319174s ago: executing program 2 (id=3530): arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f00000002c0)) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000000000053000000000000000000440f22c0410f32400f06664a0faef0660fc5c304c462853ad8440f015ffc67"], 0x53}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x7, 0xfffffffffffffffe, 0x3e, 0x0, 0x7, 0x2000000000044, 0x2000, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x7, 0x1], 0x6000, 0x3c2a10}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x2001714, &(0x7f0000002040)={0x0, 0x20a6, 0x5963d214dab3df13, 0x2, 0xa2c}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0) add_key$user(&(0x7f0000000440), 0x0, 0x0, 0x0, 0xffffffffffffffff) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x2c, 0x2, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0}}) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000480), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r6, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r7}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040) sendmsg$can_bcm(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r7}, 0x10, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="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"], 0x48}}, 0x0) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setreuid(0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000301400010000000000fcdbdf25061f49cb", @ANYRES32=r9, @ANYBLOB="08000200e000000214000300"/28], 0x34}}, 0x0) sendmmsg$unix(r1, &(0x7f000000f7c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8081}}], 0x1, 0x800) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) r13 = socket$alg(0x26, 0x5, 0x0) bind$alg(r13, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) 1m30.650918252s ago: executing program 2 (id=3533): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r4, &(0x7f0000000000)=0x8, 0x12) close(r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) splice(r3, 0x0, r4, &(0x7f00000002c0)=0x87ffffe, 0x6, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000002500)={0x14, 0x0, 0x3, 0x301, 0x70bd25, 0x25dfdbfb, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20008002}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000100000000000000b703000008000000b7040000000467938e6d05de04", @ANYRES64=r0, @ANYRES64=r0], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', r7, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0}) r9 = socket(0x2, 0x80805, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)='freezer.self_freezing\x00', &(0x7f0000000400)='\xd1\x00', 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x7a, &(0x7f0000000340)={r11, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) ioctl$BTRFS_IOC_SCRUB(r10, 0xc400941b, &(0x7f0000000740)={0x0, 0x4, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000000b40)={r12, 0x1, 0x1, [0x40, 0x80, 0x100000001, 0x9, 0x200], [0xfffffffffffffff7, 0x0, 0x2, 0x5, 0x8000000000000001, 0x437af466, 0xcb, 0x75fb, 0x3, 0x6, 0x3, 0x7, 0x1, 0xaf, 0xff800000000, 0x5, 0x0, 0x5, 0x3, 0xffff, 0xd, 0x8, 0x3, 0x40, 0x60000000000000, 0x0, 0x2222, 0x2, 0x2, 0xffff, 0x0, 0xd85d, 0xb, 0x3, 0x8, 0xa1, 0xe, 0x4, 0x0, 0x8000000000000001, 0x0, 0x6, 0x9, 0x7, 0x2, 0x9, 0x1, 0x5, 0x9, 0xd, 0xa9e6, 0x0, 0x3ff, 0x1000000000000, 0x2, 0x10, 0x5, 0xe, 0x401, 0x7, 0x54b4, 0x7, 0x6, 0x8, 0x8c, 0x8, 0x7, 0xfffffffffffffc01, 0xe4, 0x1e1b, 0x1400000000000000, 0x8, 0x6, 0x14, 0x6, 0x8, 0x80, 0x0, 0x2, 0x6, 0x5, 0x3, 0x6, 0x1, 0x5, 0xfffffffffffffffa, 0x4, 0x6, 0x5, 0x6, 0x1, 0x4, 0x7fff, 0xff, 0xffffffffffffffff, 0x4, 0xfffffffffffeffff, 0x8, 0x7, 0xff, 0x80000000, 0xb75, 0xfffffffffffffff8, 0x7, 0x3, 0x6, 0xfd67, 0x3, 0xec, 0x8, 0x4, 0x4, 0x4, 0x8, 0x7, 0x9, 0x6cec, 0x9, 0xc8c, 0x6, 0x5c]}) sendmmsg$inet_sctp(r9, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r9, 0x84, 0x19, &(0x7f0000000480)={r11, 0x7}, 0x8) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x13, r8, 0x0, r1}) 1m30.294001987s ago: executing program 2 (id=3534): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="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", 0x165) accept$alg(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x112) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r3 = open_tree(r2, &(0x7f0000000000)='\x00', 0x89901) unshare(0x6020000) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) rmdir(&(0x7f0000000300)='./file0\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000204000b80200001"], 0x118}, 0x1, 0x0, 0x0, 0xc890}, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x2, &(0x7f0000000140)=[&(0x7f000067f000/0x1000)=nil, &(0x7f00003ed000/0x2000)=nil], 0x0, &(0x7f0000000040), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') 1m29.328688373s ago: executing program 2 (id=3535): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendfile(r1, r1, 0x0, 0x40008) read(r0, &(0x7f00000002c0)=""/113, 0x20) (fail_nth: 4) 1m29.025334453s ago: executing program 2 (id=3536): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x10021, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000180)={@private=0xa010101, @private=0xa010102, 0x0, 0x2, [@loopback, @rand_addr=0x64010101]}, 0x18) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2286, &(0x7f0000000040)) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0xffca}}, 0x1014) ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, &(0x7f0000000a80)={{r1}, "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"}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) ioctl$KVM_RUN(r4, 0xae80, 0x0) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r8, 0x100000000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x80000001, 0x35315258, 0x5, 0xff, 0x8, 0x0, 0x6, 0x0, 0x0, 0x2}}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000018002000ffffffff000000000a600000ff00000600000000a533afb09db48fa8a48dbe78c3de03fba0313c94bc695e5fe6e4e025bc284a5a5556e2e83e82f5844923b2b1554b0de058106063bb74816514dca0979887e3c6eb110367401260a13129511146e576d2f73bb6103751c10b62453f3d74a4bd1756c21e53cec4a5787569a8a160b1ddea66a1"], 0x1c}}, 0x0) 1m28.51462566s ago: executing program 36 (id=3536): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x10021, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000180)={@private=0xa010101, @private=0xa010102, 0x0, 0x2, [@loopback, @rand_addr=0x64010101]}, 0x18) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_GET_REQUEST_TABLE(r6, 0x2286, &(0x7f0000000040)) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0xffca}}, 0x1014) ioctl$BTRFS_IOC_RM_DEV(r3, 0x5000940b, &(0x7f0000000a80)={{r1}, "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"}) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) ioctl$KVM_RUN(r4, 0xae80, 0x0) set_mempolicy(0x4003, &(0x7f0000000200)=0x7, 0x3) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r8, 0x100000000) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x80000001, 0x35315258, 0x5, 0xff, 0x8, 0x0, 0x6, 0x0, 0x0, 0x2}}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000018002000ffffffff000000000a600000ff00000600000000a533afb09db48fa8a48dbe78c3de03fba0313c94bc695e5fe6e4e025bc284a5a5556e2e83e82f5844923b2b1554b0de058106063bb74816514dca0979887e3c6eb110367401260a13129511146e576d2f73bb6103751c10b62453f3d74a4bd1756c21e53cec4a5787569a8a160b1ddea66a1"], 0x1c}}, 0x0) 57.622610819s ago: executing program 8 (id=3610): syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') read$FUSE(r0, &(0x7f0000000bc0)={0x2020}, 0xfd3) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x4440) 55.960892746s ago: executing program 8 (id=3618): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000440)=ANY=[@ANYBLOB="020000000000000002004e20ac1414350000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000049209470000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x210) 55.190731241s ago: executing program 8 (id=3619): socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$I2C(&(0x7f0000000040), 0x82, 0x42081) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, r1) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) (fail_nth: 13) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 53.410429733s ago: executing program 8 (id=3626): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="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", 0x165) accept$alg(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x112) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r3 = open_tree(r2, &(0x7f0000000000)='\x00', 0x89901) unshare(0x6020000) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) rmdir(&(0x7f0000000300)='./file0\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000204000b80200001"], 0x118}, 0x1, 0x0, 0x0, 0xc890}, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') 53.116425379s ago: executing program 5 (id=3628): r0 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000180)=0x86) (async) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000180)=0x86) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x62bd78ad0d3f34a3}) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000240)={0x62bd78ad0d3f34a3}) r3 = syz_open_pts(r1, 0x0) ioctl$TCFLSH(r3, 0x540b, 0x2) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 51.618253454s ago: executing program 8 (id=3633): connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x4000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0xef}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x8}]}, 0x3c}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1010000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) lsm_get_self_attr(0x65, 0x0, &(0x7f0000000180), 0x0) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0xd, 0x5000, 0x13a, 0x800, 0xa, 0x3}, 0x1c) r4 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r4, 0x0, 0x0) socket(0x8000000010, 0x2, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) sendmmsg$inet(r5, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="010000000d", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) getresuid(0x0, &(0x7f0000000340), &(0x7f0000000380)) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x6000) gettid() 51.069481809s ago: executing program 8 (id=3635): syz_usb_connect(0x6, 0x189, &(0x7f0000000380)={{0x12, 0x1, 0x250, 0x25, 0x52, 0x3d, 0x20, 0x86a, 0x110, 0x1503, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x177, 0x1, 0x0, 0x0, 0xf0, 0x2, [{{0x9, 0x4, 0x26, 0xdf, 0x3, 0x2a, 0xb0, 0x52, 0x5, [@generic={0xb0, 0x8, "195a6214ca20311a31b2f209abbd78745827b99bd9c6730da7c2429fde180d8aab15229aa28600c2db43b07e54b2fdf7a7a353b30f3c42f8339e23354793f174041bba924da7aa271f80fc8594d6cdf832fffda4f5bff149e06ae84b79ee794fb4ee9a579149e2515539f9038c1ea76bc3d01786b0fdd99233eea6b88c0c645dfe08b85ab926f39c58944528641366f79c5b65d27bc0a2ddfe408435af3be617b17b42557c169598b33c2fac20fb"}], [{{0x9, 0x5, 0xb, 0xc, 0x20, 0xf3, 0x3, 0x1}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x3, 0xe, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x9}, @generic={0x93, 0xb, "3379e9cdfbfcff6d14ab2190e50fca8bd7d0176c34684ade19a5ab8359cfca1dbf2e2c3d1aa211f416817afc1829a2f123609e274077020fa4072066248ceffdd0ebf6e829718dad2a4b9e7a3ad078dcba04bc8be2fa3a4bf3aa1424ca278b1b2a60b06bbdbdfe61872f97a7e2bc63a7fe0f7e7b3265c0a6745ce12b32228c36fb7e390b2b141728c4006f6d89c38dd068"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x0, 0x2, 0x8, 0xa8}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x6, 0xd, 0x51, 0x60, 0x80}, 0x34, &(0x7f0000000540)={0x5, 0xf, 0x34, 0x5, [@ptm_cap={0x3}, @generic={0x10, 0x10, 0x3, "e1e4dcdb809f0d9108b7e4ad3b"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x14, 0x9, 0x5}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0x2, 0x6, 0x7ff, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x4, 0x1}]}, 0x7, [{0xdd, &(0x7f0000000580)=@string={0xdd, 0x3, "0edbc716d3d248939eb8d7245897c4d494d75ae9819b7bb489ba949dcd0847a6373724dbb0773e33f325dc5fde23546abd340d91be0b21c1ddb1683b3ecc95e0dd8e1e09a7c136b865953cc883e80d6228aeb6301e9f40b77a6441c15b256d834035a9a258a9f990b75f9ef1464335f178d1f83ff02d00581cfbbbaf470f987ae26108476027204f443c96a926289e4afcdf2560112fdaf4a8b9322603b8e377c1b89afe4a5a2c394672a63931fbfe5581cca2113add57248130414b09fae69ddacea3c8e35d69aad933e4df364c9b8c4ded0ebaa5b5cf2305894e"}}, {0xf6, &(0x7f0000000680)=@string={0xf6, 0x3, "c58d3f0809ea487da34c854d7a54bf563d3c2a0458178ffb30fc79a2778409107566eb33740bfd478576527f38d5de0028913496e1f09177c0dcd37a354dae464f91f0848c73bedc53b1fb0b9fdcad4ec79e5cb1cbae47292adc4f4eec8b4d9f09386edd0a9bc5257e6894627689c03ff401584594c2eb9669d052fac6e46f3dfacf907393c59d4f35f597a782019aca646b68cc2f8ea577c9c38ab2086f083560e65abcccc196ada49da73a9e7dc50618ef8435a74b94838c0f1c89f797076c9644b24bb34e5a8b47cfbdc74aa4a6c3e66b0cb6d933a6c7062032397149e19b60190543062e9b55d8771c97bd9040f011dc0566"}}, {0xdd, &(0x7f0000000880)=@string={0xdd, 0x3, "1d8791bddf6b7d702ac98e59b346d7dbe9378adb3b17d4b4942b793989403a0a96c83fc99273d9142faac9d91bf7acad94a3ee648d1de10d6e649f6c4b8b87b4398dd05200963b71b6b2524796d08457e470c78c771f0446317b33e28b358df5296659e2975895e8ca68e10d4df677a7d055674451e023a52de1ef038109cf4295558b27d006ce1bbb182b18dc568a4f41f4ab918bb9041555b9120e0f7a270aca9265afc9a8d101894718436ec2999da62368d55ddac66a6d7818c7ed83735f0dd9e507335da29436f92bf6dd04fa18c9d7a07205fa301a4d74d1"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4}}, {0xab, &(0x7f0000000a00)=@string={0xab, 0x3, "900d6560d3c35e27a411787da63a5a6c5958f5710786b750942763a6550a23521a24668ef61bee467ac6aeb95c2a675d968bdabe34a8ee910e103b42beb2d88c4e9376d365c286acb0cff93bc7e8f4a6b741e5a6313f78dcefe0ace84b2bf8afb13747fdd6f565bb9918c41cee8ce4287f70580716bad50ea6f2cab65bcee492863a841e2a08d8da7a76e0aea1ee96d112cfc0f89c4927742072ccec4d615589916156fb00c88e4695"}}, {0xa0, &(0x7f0000000ac0)=@string={0xa0, 0x3, "2f605052fa1caa54176623bb2af83fd1089605da4585cceccdd906d632425c1870705e3a13c78b98ed75ecf510f423fce4fed94b82b48d1201dcf36f4f6fc77351a4ec7c8deee2746dca6bc39e85e243f5ffabc0089787433bc9872f131a87818c53605c3df4054a8d21b1561ae786dc9a40c71524b607b52b55f8cfc5e06b5c2313d650ccb2237aa7fd6204be46c1c8c0ac0fe13e2818bfefbe4ed65adf"}}]}) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x460543, 0x18, 0x2c}, 0x18) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x22402, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x0, 0x9bc, 0x4, 0x0, 0x1a, '\t\x00'}) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000180)='\r', 0x1}], 0x1) symlinkat(&(0x7f0000000280)='./file0\x00', r0, &(0x7f0000000340)='./file0\x00') r2 = syz_usb_connect(0x0, 0x202, &(0x7f0000000780)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x0, 0x60, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e, 0x1, 0x1, 0x5, 0x20, 0x68, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x69, {{0x7, 0x24, 0x6, 0x0, 0x0, "708e"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x0, 0x8, 0xa3}, [@obex={0x5, 0x24, 0x15, 0x3}, @mbim={0xc, 0x24, 0x1b, 0xd, 0x1ff, 0x3, 0x10, 0xd, 0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0x9, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x4, 0x1, 0x6}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x2, 0xb9, 0x87, 0x8, 0xff}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x1, [{0xe0, &(0x7f0000000140)=@string={0xe0, 0x3, "5e71163253f777dc06c665f5d88e74855e45aa4cd24be6d33e846263bdf26e1f4ee216f6bfbf327bb5220fd2b44037d9896a5511fe1f293263e69f6d694d6f7f91d47be52b8a9c4581d1861c1b0de8c94e847a68281cd7141371b4c9c27b57593dba07ef706660514448909c9461df74018120a349483f7f7c38f9f182ce39fa1b0e5c82063254a77270cb16ddde7fb8a6036afcaaa78f96968ae3738abe00bc9170a65d01517b5b8421052b7e76264ee313fed9dce993326f6092a0674300a2140395da55d4e618dca0e823ad7635dafb48ab71ca9819c2084ed6d34397"}}]}) 50.363647865s ago: executing program 37 (id=3635): syz_usb_connect(0x6, 0x189, &(0x7f0000000380)={{0x12, 0x1, 0x250, 0x25, 0x52, 0x3d, 0x20, 0x86a, 0x110, 0x1503, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x177, 0x1, 0x0, 0x0, 0xf0, 0x2, [{{0x9, 0x4, 0x26, 0xdf, 0x3, 0x2a, 0xb0, 0x52, 0x5, [@generic={0xb0, 0x8, "195a6214ca20311a31b2f209abbd78745827b99bd9c6730da7c2429fde180d8aab15229aa28600c2db43b07e54b2fdf7a7a353b30f3c42f8339e23354793f174041bba924da7aa271f80fc8594d6cdf832fffda4f5bff149e06ae84b79ee794fb4ee9a579149e2515539f9038c1ea76bc3d01786b0fdd99233eea6b88c0c645dfe08b85ab926f39c58944528641366f79c5b65d27bc0a2ddfe408435af3be617b17b42557c169598b33c2fac20fb"}], [{{0x9, 0x5, 0xb, 0xc, 0x20, 0xf3, 0x3, 0x1}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff, 0x3, 0xe, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x9}, @generic={0x93, 0xb, "3379e9cdfbfcff6d14ab2190e50fca8bd7d0176c34684ade19a5ab8359cfca1dbf2e2c3d1aa211f416817afc1829a2f123609e274077020fa4072066248ceffdd0ebf6e829718dad2a4b9e7a3ad078dcba04bc8be2fa3a4bf3aa1424ca278b1b2a60b06bbdbdfe61872f97a7e2bc63a7fe0f7e7b3265c0a6745ce12b32228c36fb7e390b2b141728c4006f6d89c38dd068"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x0, 0x2, 0x8, 0xa8}}]}}]}}]}}, &(0x7f0000000b80)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x6, 0xd, 0x51, 0x60, 0x80}, 0x34, &(0x7f0000000540)={0x5, 0xf, 0x34, 0x5, [@ptm_cap={0x3}, @generic={0x10, 0x10, 0x3, "e1e4dcdb809f0d9108b7e4ad3b"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x14, 0x9, 0x5}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0x2, 0x6, 0x7ff, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0x4, 0x1}]}, 0x7, [{0xdd, &(0x7f0000000580)=@string={0xdd, 0x3, "0edbc716d3d248939eb8d7245897c4d494d75ae9819b7bb489ba949dcd0847a6373724dbb0773e33f325dc5fde23546abd340d91be0b21c1ddb1683b3ecc95e0dd8e1e09a7c136b865953cc883e80d6228aeb6301e9f40b77a6441c15b256d834035a9a258a9f990b75f9ef1464335f178d1f83ff02d00581cfbbbaf470f987ae26108476027204f443c96a926289e4afcdf2560112fdaf4a8b9322603b8e377c1b89afe4a5a2c394672a63931fbfe5581cca2113add57248130414b09fae69ddacea3c8e35d69aad933e4df364c9b8c4ded0ebaa5b5cf2305894e"}}, {0xf6, &(0x7f0000000680)=@string={0xf6, 0x3, "c58d3f0809ea487da34c854d7a54bf563d3c2a0458178ffb30fc79a2778409107566eb33740bfd478576527f38d5de0028913496e1f09177c0dcd37a354dae464f91f0848c73bedc53b1fb0b9fdcad4ec79e5cb1cbae47292adc4f4eec8b4d9f09386edd0a9bc5257e6894627689c03ff401584594c2eb9669d052fac6e46f3dfacf907393c59d4f35f597a782019aca646b68cc2f8ea577c9c38ab2086f083560e65abcccc196ada49da73a9e7dc50618ef8435a74b94838c0f1c89f797076c9644b24bb34e5a8b47cfbdc74aa4a6c3e66b0cb6d933a6c7062032397149e19b60190543062e9b55d8771c97bd9040f011dc0566"}}, {0xdd, &(0x7f0000000880)=@string={0xdd, 0x3, "1d8791bddf6b7d702ac98e59b346d7dbe9378adb3b17d4b4942b793989403a0a96c83fc99273d9142faac9d91bf7acad94a3ee648d1de10d6e649f6c4b8b87b4398dd05200963b71b6b2524796d08457e470c78c771f0446317b33e28b358df5296659e2975895e8ca68e10d4df677a7d055674451e023a52de1ef038109cf4295558b27d006ce1bbb182b18dc568a4f41f4ab918bb9041555b9120e0f7a270aca9265afc9a8d101894718436ec2999da62368d55ddac66a6d7818c7ed83735f0dd9e507335da29436f92bf6dd04fa18c9d7a07205fa301a4d74d1"}}, {0x4, &(0x7f0000000980)=@lang_id={0x4}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4}}, {0xab, &(0x7f0000000a00)=@string={0xab, 0x3, "900d6560d3c35e27a411787da63a5a6c5958f5710786b750942763a6550a23521a24668ef61bee467ac6aeb95c2a675d968bdabe34a8ee910e103b42beb2d88c4e9376d365c286acb0cff93bc7e8f4a6b741e5a6313f78dcefe0ace84b2bf8afb13747fdd6f565bb9918c41cee8ce4287f70580716bad50ea6f2cab65bcee492863a841e2a08d8da7a76e0aea1ee96d112cfc0f89c4927742072ccec4d615589916156fb00c88e4695"}}, {0xa0, &(0x7f0000000ac0)=@string={0xa0, 0x3, "2f605052fa1caa54176623bb2af83fd1089605da4585cceccdd906d632425c1870705e3a13c78b98ed75ecf510f423fce4fed94b82b48d1201dcf36f4f6fc77351a4ec7c8deee2746dca6bc39e85e243f5ffabc0089787433bc9872f131a87818c53605c3df4054a8d21b1561ae786dc9a40c71524b607b52b55f8cfc5e06b5c2313d650ccb2237aa7fd6204be46c1c8c0ac0fe13e2818bfefbe4ed65adf"}}]}) r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x460543, 0x18, 0x2c}, 0x18) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x22402, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000080)={0x0, 0x9bc, 0x4, 0x0, 0x1a, '\t\x00'}) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000180)='\r', 0x1}], 0x1) symlinkat(&(0x7f0000000280)='./file0\x00', r0, &(0x7f0000000340)='./file0\x00') r2 = syz_usb_connect(0x0, 0x202, &(0x7f0000000780)=ANY=[@ANYBLOB="1201100152018b401e040740185d000000010902f00101040000030904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x0, 0x60, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4e, 0x1, 0x1, 0x5, 0x20, 0x68, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0x69, {{0x7, 0x24, 0x6, 0x0, 0x0, "708e"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x0, 0x8, 0xa3}, [@obex={0x5, 0x24, 0x15, 0x3}, @mbim={0xc, 0x24, 0x1b, 0xd, 0x1ff, 0x3, 0x10, 0xd, 0x5}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0x9, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x4, 0x1, 0x6}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0x2, 0xb9, 0x87, 0x8, 0xff}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x1, [{0xe0, &(0x7f0000000140)=@string={0xe0, 0x3, "5e71163253f777dc06c665f5d88e74855e45aa4cd24be6d33e846263bdf26e1f4ee216f6bfbf327bb5220fd2b44037d9896a5511fe1f293263e69f6d694d6f7f91d47be52b8a9c4581d1861c1b0de8c94e847a68281cd7141371b4c9c27b57593dba07ef706660514448909c9461df74018120a349483f7f7c38f9f182ce39fa1b0e5c82063254a77270cb16ddde7fb8a6036afcaaa78f96968ae3738abe00bc9170a65d01517b5b8421052b7e76264ee313fed9dce993326f6092a0674300a2140395da55d4e618dca0e823ad7635dafb48ab71ca9819c2084ed6d34397"}}]}) 49.866682266s ago: executing program 5 (id=3639): socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000240)=ANY=[@ANYBLOB="0500000000e3fef9150001c0"]) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000000400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000100)={0x1, 0xe3b, 0xe00}) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r5, 0x114, 0x8, 0x0, 0x0) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) r6 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x29cc, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{0x0}], 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0}, 0x18) io_uring_enter(r6, 0x567, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2000b) 49.097675365s ago: executing program 5 (id=3640): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r0}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) gettid() r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000040)={0xa, {"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", 0x1000}}, 0x1006) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) 48.669686664s ago: executing program 9 (id=3642): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x57e, 0x2017, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0xb, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xb, 0xf, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x6, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="00240b000000010393f1ffdb6ca9da45"], 0x0, 0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x35, 0x0, 0x0) r4 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x48f, &(0x7f0000000000)={0x11, @rand_addr=0x64010100, 0x0, 0x0, 'lc\x00', 0x0, 0x0, 0x78}, 0x2c) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @local}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x0, 0x18}, 0x41) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x4e21, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x4}, {0x0, 0x0, 0x200000000010}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0x2, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) ioctl$int_in(r9, 0x5452, &(0x7f0000000000)=0x5) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r9) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r10, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000df94100029bd7000ffdbdf2507920a00", @ANYRES32=0x0, @ANYBLOB="4002000082000000"], 0x20}, 0x1, 0x0, 0x0, 0x20008004}, 0x20008080) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000940)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6f8, 0x328, 0x230, 0x328, 0x230, 0x328, 0x628, 0x628, 0x628, 0x628, 0x628, 0x6, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@rt={{0x138}, {0x10000, [0x2, 0x3], 0x1, 0x1, 0x5, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @loopback, @empty, @empty, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @local, @ipv4={'\x00', '\xff\xff', @local}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'], 0x8}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x6}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x21}, @ipv4=@loopback, 0x37, 0x24, 0x10}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x9, 0x0, 0x1, [0x6, 0x6, 0x779, 0x7, 0x1, 0x2e, 0x7, 0x9, 0x8, 0x4, 0x8, 0x0, 0x3, 0x6, 0x5, 0x3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x530}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x30}, @empty, [0xff000000, 0x0, 0xffffffff], [0xff, 0xffffffff, 0xffffffff, 0xff000000], 'ipvlan0\x00', 'batadv0\x00', {}, {}, 0x11, 0xd, 0x1, 0x23}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x758) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x41) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 48.457424661s ago: executing program 5 (id=3643): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="b011d0cfce62e9195a2a2d9c41189f5896679b21a1f6a2c8a136d01bf5c619a454412add4000000000008dce8f40d431a4bc40c08817580cc44552bb7a51a79b8ba1aeb810fff495b92ea020dd31a08924aff3fce0d3c0bebdec0b579c35d118215bdf0088e0bb4ca944150cc88324c99f99f101d018570b942338ee73c8c79650bdce6391830c8dcee7698b0b32e9a1e84eb8ae700b50b392b01491a3007775cc7ca6c1abdf1dbd3c84f1a7a9ea3851b329e9b31d6acdde1eccc956b9ed4bcdabfe05db80e0857a4b9c5d71f24568d6cc64ee55813078a2eb781a6c642de741b1b4fd381da301a50db8cb1d0ff1c3a09b44f3e15fa8eadf69aae8b87dd552abb1ab1828fc3f6550533f8386b30f5c4c7c19abf29a348f377d144b2629ac952145481e21140170b502d328566a93278185b0ecbaccd77a3f1df88ea04b7901967a92f107c7a4d01e145d426c158d79c389d9b469d2263697b88b5cec8cb01b598e968b6b62", 0x165) accept$alg(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x112) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r3 = open_tree(r2, &(0x7f0000000000)='\x00', 0x89901) unshare(0x6020000) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) rmdir(&(0x7f0000000300)='./file0\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000204000b80200001"], 0x118}, 0x1, 0x0, 0x0, 0xc890}, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') 47.441831891s ago: executing program 5 (id=3644): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) socket$inet6(0xa, 0xa, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000002c00)=@buf={0x500, &(0x7f0000002bc0)}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0xc00, &(0x7f0000000000)=ANY=[@ANYBLOB="8500000000000000000027000000efffffff9400"/32], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) stat(0x0, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xc9, 0x2ea068d3, 0x0, 0x0, 0x7, 0x0, 0x43, 0x0, 0xffffffffffffdfff, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x9, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x80000, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffbffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x3, 0x203, 0x0, 0x40000000000, 0x801, 0x0, 0x5241, 0x0, 0x4, 0x0, 0x6, 0x0, 0x40000, 0x767e, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x8, 0x0, 0xff, 0x0, 0x0, 0x2000000000000000, 0xa7a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000001]}) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000280)={&(0x7f0000000440)=""/71, 0x1000000, 0x0, 0x2, 0x1}, 0x20) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000000000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) bind$inet6(r7, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x6a, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffff8}], 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1400000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="001000000400000000000000f7ff9d0f098484280000000000"], 0x48) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0xd0, 0x0, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_FILTER={0x24, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x49}, @CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x30}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x801}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x754}]}, @CTA_LABELS={0x14, 0x16, 0x1, 0x0, [0x5, 0x2, 0xa5, 0x3]}, @CTA_LABELS_MASK={0x18, 0x17, [0x1, 0x7, 0x6, 0x2, 0x84]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8}, @CTA_TUPLE_MASTER={0x4c, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2000}, @CTA_LABELS_MASK={0x8, 0x17, [0x5]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x8040}, 0x2000080) 46.938530096s ago: executing program 5 (id=3646): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x18, 0x4e, 0x1, 0x0, 0x0, {0x0, 0x3}, [@generic="04da9d0e"]}, 0x18}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000000), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="900200001000130727bd700004000000fe8000000000000000000000000000bbfe8000000000000000000000000000bb000000004e240000000000002f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000133000000200100000000fbc7492986f38246f2d1000000000000000000010000000000000000000000000000000001000000400000000200000000000000000000000000000102000000000000007e7208000000000000000000000000000000000100000000fbfffff7ffdfffff0600000000000000050000000000000001000000090000000800000000000080023500000a00040021"], 0x290}}, 0x0) recvmmsg(r2, &(0x7f0000001140), 0x700, 0x2, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="80000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038014000180080001000000000008000200ac1414000c00028005000100000000002400018014000180080001"], 0x80}, 0x1, 0x0, 0x0, 0x20000004}, 0x48004) syz_emit_ethernet(0x26, &(0x7f0000000080)={@remote, @broadcast, @val={@val={0x88a8, 0x6, 0x0, 0x2}, {0x8100, 0x6, 0x1, 0x1}}, {@can={0xc, {{0x3, 0x1, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "adcc6b654aeb6348"}}}}, &(0x7f0000000140)={0x0, 0x2, [0x62b, 0x308, 0xdce, 0xcf9]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000000101010100000000000000000200ffff06001240000400003c0001800c00028005000100210000002c0001801400030000000000000000000000ffff0000000014000400bc01000000000000000000dd000000050c0019800800010005"], 0x64}}, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000180)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0x89, {}, {0x5, 0x8, 0xc1, 0x6a, 0x9, 0x5, "a8ed9837"}, 0xfff, 0x2, {&(0x7f00000000c0)=[{0x0, 0x8000, {0x0}, 0xa}, {0x9fb, 0xd4, {0x0}, 0xfff}]}, 0x5}) 46.277530578s ago: executing program 38 (id=3646): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x18, 0x4e, 0x1, 0x0, 0x0, {0x0, 0x3}, [@generic="04da9d0e"]}, 0x18}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) setsockopt$sock_int(r2, 0x1, 0x2a, &(0x7f0000000000), 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="900200001000130727bd700004000000fe8000000000000000000000000000bbfe8000000000000000000000000000bb000000004e240000000000002f000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000010000000000000000000000000000000133000000200100000000fbc7492986f38246f2d1000000000000000000010000000000000000000000000000000001000000400000000200000000000000000000000000000102000000000000007e7208000000000000000000000000000000000100000000fbfffff7ffdfffff0600000000000000050000000000000001000000090000000800000000000080023500000a00040021"], 0x290}}, 0x0) recvmmsg(r2, &(0x7f0000001140), 0x700, 0x2, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="80000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038014000180080001000000000008000200ac1414000c00028005000100000000002400018014000180080001"], 0x80}, 0x1, 0x0, 0x0, 0x20000004}, 0x48004) syz_emit_ethernet(0x26, &(0x7f0000000080)={@remote, @broadcast, @val={@val={0x88a8, 0x6, 0x0, 0x2}, {0x8100, 0x6, 0x1, 0x1}}, {@can={0xc, {{0x3, 0x1, 0x1, 0x1}, 0x5, 0x0, 0x0, 0x0, "adcc6b654aeb6348"}}}}, &(0x7f0000000140)={0x0, 0x2, [0x62b, 0x308, 0xdce, 0xcf9]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000000101010100000000000000000200ffff06001240000400003c0001800c00028005000100210000002c0001801400030000000000000000000000ffff0000000014000400bc01000000000000000000dd000000050c0019800800010005"], 0x64}}, 0x0) ioctl$VIDIOC_PREPARE_BUF(r4, 0xc058565d, &(0x7f0000000180)=@multiplanar_userptr={0x7, 0xa, 0x4, 0x0, 0x89, {}, {0x5, 0x8, 0xc1, 0x6a, 0x9, 0x5, "a8ed9837"}, 0xfff, 0x2, {&(0x7f00000000c0)=[{0x0, 0x8000, {0x0}, 0xa}, {0x9fb, 0xd4, {0x0}, 0xfff}]}, 0x5}) 45.415158511s ago: executing program 9 (id=3649): socket$nl_netfilter(0x10, 0x3, 0xc) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/reserved_size', 0x141a82, 0x22) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x92e1, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000540)={0x14, &(0x7f0000000500)={0x0, 0xf, 0x2f, {0x2f, 0x5, "55cec57c1affb8ff9bee7f50bc4d0da5d90684a8b66ab920ff8834ca05defd93518f1a8337848395c097a9fdd5"}}, 0x0}, &(0x7f0000000a00)={0x44, &(0x7f0000000800)={0x20, 0x17}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x4}, 0x0, 0x0, &(0x7f0000000900)={0x20, 0x82, 0x1, "82"}, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x85, 0x3, "e61bd2"}}) socket$kcm(0x29, 0x7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 43.415281194s ago: executing program 9 (id=3652): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x7, 0x0, 0x0, @fd=r0}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) gettid() r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) 42.06286939s ago: executing program 9 (id=3653): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="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", 0x165) accept$alg(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x112) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r3 = open_tree(r2, &(0x7f0000000000)='\x00', 0x89901) unshare(0x6020000) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) rmdir(&(0x7f0000000300)='./file0\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000204000b80200001"], 0x118}, 0x1, 0x0, 0x0, 0xc890}, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') 40.523244866s ago: executing program 9 (id=3657): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x57e, 0x2017, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0xb, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xb, 0xf, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x6, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="00240b000000010393f1ffdb6ca9da45"], 0x0, 0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x35, 0x0, 0x0) r4 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x48f, &(0x7f0000000000)={0x11, @rand_addr=0x64010100, 0x0, 0x0, 'lc\x00', 0x0, 0x0, 0x78}, 0x2c) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @local}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, 0x0, 0x18}, 0x41) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x4e21, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x4}, {0x0, 0x0, 0x200000000010}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0x2, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) ioctl$int_in(r9, 0x5452, &(0x7f0000000000)=0x5) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r9) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r10, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000df94100029bd7000ffdbdf2507920a00", @ANYRES32=0x0, @ANYBLOB="4002000082000000"], 0x20}, 0x1, 0x0, 0x0, 0x20008004}, 0x20008080) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000940)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6f8, 0x328, 0x230, 0x328, 0x230, 0x328, 0x628, 0x628, 0x628, 0x628, 0x628, 0x6, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@rt={{0x138}, {0x10000, [0x2, 0x3], 0x1, 0x1, 0x5, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @loopback, @empty, @empty, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @local, @ipv4={'\x00', '\xff\xff', @local}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'], 0x8}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x6}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x21}, @ipv4=@loopback, 0x37, 0x24, 0x10}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x9, 0x0, 0x1, [0x6, 0x6, 0x779, 0x7, 0x1, 0x2e, 0x7, 0x9, 0x8, 0x4, 0x8, 0x0, 0x3, 0x6, 0x5, 0x3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x530}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x30}, @empty, [0xff000000, 0x0, 0xffffffff], [0xff, 0xffffffff, 0xffffffff, 0xff000000], 'ipvlan0\x00', 'batadv0\x00', {}, {}, 0x11, 0xd, 0x1, 0x23}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x758) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x41) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 40.113570373s ago: executing program 9 (id=3659): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x20}}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xfc, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xb, 0x41}}}}, [@acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x3}], @NL80211_ATTR_SSID={0x22, 0x34, @random="222ce492fb75e7475dec18867294b1a8c0d23868786d264447c0be92e987"}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x3}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xec, 0x464, 0x400, 0x70bd28, 0x25dfdbfe, "da7628a295ad662de5a0d42374f778798ff26444ecb9c7bcbf611e0be81fb2ef47037981553959ceef88dc9281d195cb5728c5288d75b0dba0fefc32b594dfe1f1a72554b737397a2207e7a997ea17deecf7b644d65b856a3dd48e090992b549b96936119c1f7409db0eb2f6fe1f64cafcf1613ac01ba3a33ea51544339232c67211106034201b6f39398177aa1c46d54da6b31b74914401f89e832f8d711be40dd45922b247ab36ae23e7dcb92c397b3b6295a344049ad452bdfeb652ccbd5147263d7891d0aa99ae0c3dd98e541669cccfde192431fb139b04", ["", ""]}, 0xec}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000500)=0x0) fcntl$setown(r0, 0x8, r3) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000540)={0x2, 0x9}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, r1, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x5c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @random="5348d02d0204"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0xc8c1) r4 = syz_open_dev$sg(&(0x7f00000006c0), 0xdc87, 0x163102) syz_open_dev$usbfs(&(0x7f0000000700), 0x6, 0x201) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) rt_sigprocmask(0x0, &(0x7f0000000740)={[0xdc11925]}, &(0x7f0000000780), 0x8) bind$packet(r0, &(0x7f00000007c0)={0x11, 0x15, 0x0, 0x1, 0xf, 0x6, @remote}, 0x14) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000001, 0x4010, r5, 0x690a2000) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='./file0\x00', 0x0, 0x10, r0}, 0x18) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000880)={r6, 0x4, 0x0, 0x7f}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000900)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x48055}, 0x4004090) ioctl$TCSBRK(r7, 0x5409, 0x9) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r1, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) socket$pppoe(0x18, 0x1, 0x0) madvise(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x63) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a40)={'wlan0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)=""/109, 0x6d}, {&(0x7f0000000b00)=""/171, 0xab}, {&(0x7f0000000bc0)=""/122, 0x7a}, {&(0x7f0000000c40)=""/21, 0x15}], 0x4) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, &(0x7f0000000cc0)) sendmsg$NFT_MSG_GETGEN(r7, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000) syz_clone(0x80000000, &(0x7f0000000e00)="cbd1558af152f7369e439613c5ac5668f86c94dde37a7cab1fe2c3cabc48caf30909370974ed02f5ad298eba5c3e079cde4a2cd074ced2932d2e444e3ece56d3abe4e21454c00b338d66455c6cbd70445d1d7c90bed3d4f5e6f08d863e6554ee6e518ada3f789e19fbd754c683799085669c5d3b8c9ef796e359501140d1fbce8daf5758354fde545a4848e1b0507ab992bea2de04e66d41c4e537c390353181c626246066c0705d25f3a3adeb57b3a2e4966cca41c2ae3c58d05ae9f49655fa968df1a83c1f7996a38f4590aae2d2318fbf13", 0xd3, &(0x7f0000000f00), &(0x7f0000000f40), &(0x7f0000000f80)="b22afa266b707ceb49174186956fb53de30a20eb26da8a9fcbc73f6889df739fab9993aff1b2097ae131") bind$packet(r7, &(0x7f0000001040)={0x11, 0x1a, 0x0, 0x1, 0x2, 0x6, @multicast}, 0x14) 39.524465849s ago: executing program 39 (id=3659): r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x300, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}]}, 0x20}}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xfc, r1, 0x100, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0xb, 0x41}}}}, [@acl_policy=[@NL80211_ATTR_MAC_ADDRS={0x4c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x3}], @NL80211_ATTR_SSID={0x22, 0x34, @random="222ce492fb75e7475dec18867294b1a8c0d23868786d264447c0be92e987"}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7f}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x3}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0xfc}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) sendmsg$AUDIT_USER_TTY(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xec, 0x464, 0x400, 0x70bd28, 0x25dfdbfe, "da7628a295ad662de5a0d42374f778798ff26444ecb9c7bcbf611e0be81fb2ef47037981553959ceef88dc9281d195cb5728c5288d75b0dba0fefc32b594dfe1f1a72554b737397a2207e7a997ea17deecf7b644d65b856a3dd48e090992b549b96936119c1f7409db0eb2f6fe1f64cafcf1613ac01ba3a33ea51544339232c67211106034201b6f39398177aa1c46d54da6b31b74914401f89e832f8d711be40dd45922b247ab36ae23e7dcb92c397b3b6295a344049ad452bdfeb652ccbd5147263d7891d0aa99ae0c3dd98e541669cccfde192431fb139b04", ["", ""]}, 0xec}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000500)=0x0) fcntl$setown(r0, 0x8, r3) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000540)={0x2, 0x9}) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, r1, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x3, 0x5c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x9}, @NL80211_ATTR_MAC={0xa, 0x6, @random="5348d02d0204"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000010}, 0xc8c1) r4 = syz_open_dev$sg(&(0x7f00000006c0), 0xdc87, 0x163102) syz_open_dev$usbfs(&(0x7f0000000700), 0x6, 0x201) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) rt_sigprocmask(0x0, &(0x7f0000000740)={[0xdc11925]}, &(0x7f0000000780), 0x8) bind$packet(r0, &(0x7f00000007c0)={0x11, 0x15, 0x0, 0x1, 0xf, 0x6, @remote}, 0x14) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000001, 0x4010, r5, 0x690a2000) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000840)=@o_path={&(0x7f0000000800)='./file0\x00', 0x0, 0x10, r0}, 0x18) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000880)={r6, 0x4, 0x0, 0x7f}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000900)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x48055}, 0x4004090) ioctl$TCSBRK(r7, 0x5409, 0x9) sendmsg$NL80211_CMD_LEAVE_OCB(r0, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x1c, r1, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) socket$pppoe(0x18, 0x1, 0x0) madvise(&(0x7f0000ff2000/0xe000)=nil, 0xe000, 0x63) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000a40)={'wlan0\x00'}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000a80)=""/109, 0x6d}, {&(0x7f0000000b00)=""/171, 0xab}, {&(0x7f0000000bc0)=""/122, 0x7a}, {&(0x7f0000000c40)=""/21, 0x15}], 0x4) ioctl$VHOST_VDPA_GET_GROUP_NUM(r0, 0x8004af81, &(0x7f0000000cc0)) sendmsg$NFT_MSG_GETGEN(r7, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x2}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000) syz_clone(0x80000000, &(0x7f0000000e00)="cbd1558af152f7369e439613c5ac5668f86c94dde37a7cab1fe2c3cabc48caf30909370974ed02f5ad298eba5c3e079cde4a2cd074ced2932d2e444e3ece56d3abe4e21454c00b338d66455c6cbd70445d1d7c90bed3d4f5e6f08d863e6554ee6e518ada3f789e19fbd754c683799085669c5d3b8c9ef796e359501140d1fbce8daf5758354fde545a4848e1b0507ab992bea2de04e66d41c4e537c390353181c626246066c0705d25f3a3adeb57b3a2e4966cca41c2ae3c58d05ae9f49655fa968df1a83c1f7996a38f4590aae2d2318fbf13", 0xd3, &(0x7f0000000f00), &(0x7f0000000f40), &(0x7f0000000f80)="b22afa266b707ceb49174186956fb53de30a20eb26da8a9fcbc73f6889df739fab9993aff1b2097ae131") bind$packet(r7, &(0x7f0000001040)={0x11, 0x1a, 0x0, 0x1, 0x2, 0x6, @multicast}, 0x14) 37.58373693s ago: executing program 6 (id=3662): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1, 0x0, 0x0, 0x500d0000}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/94, 0x5e}], 0x1}}], 0x1, 0x0, 0x0) close(0x3) recvmmsg(0xffffffffffffffff, 0x0, 0xfffffe49, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) pipe2$9p(0x0, 0x0) write$P9_RREMOVE(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x7b, 0x1}, 0x7) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xc010) 37.270644985s ago: executing program 6 (id=3663): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x503, 0xf3ffffff, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0xfffffffa}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) 37.033980411s ago: executing program 6 (id=3664): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f00000005c0)={'ip6tnl0\x00', 0x53}) sendmmsg$unix(r1, &(0x7f00000061c0)=[{{&(0x7f0000000440)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f00000018c0)=[{&(0x7f00000004c0)="9b9b6361e9a4d7ca328043424f458a83d563c8cd3d1a119435124c5e97e0bd17f53b187d6d937d78046c9b05a74d7f79c140a72d65f4a15e874bc72599512fc1de8fbb3b31bd5bcf069c48f3f50d8170ae8c69e633734eb0636db7e57dabe5c57d1bf5fed1cd638ac1330854878eadfaf792ccaf95bcfe3c00ec", 0x7a}, {&(0x7f0000000640)="09f1d9486cc2c6338b393551a9b2991983226ff54933089ad8fdae8f5f6e7b1e0ce4dbb11465685ba27650cfaa3ac42552bed10dfe860ea3bfc2824433b95bbedc649295b7bcfa27c1b7aaef899eed3182692369420c588896dc4d219287a84ec1b061165bcb3f2c4228171319588a1a5b7a72d97baf1970265298195f50aebf7a6988cae3f90b8a4d1c08ff9d24a2b30e27862953bccdd16c2820c824b4c774049092147b4aaef1a20ce60003b8387d901aae77f3bd8a3d9aaaa0b375e765bd902b26031c62e0be", 0xc8}, {&(0x7f0000000740)="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", 0x1000}, {&(0x7f0000001740)="ad42d18d310f6c5180a0d6f0fb9135421787d051b393edc5d15172ca81bbdb0fe10efce51851014ac88dbcbf5f6b89c2abf44ce143d392a40e5f98d74af54a7d4c74fe34d2543e2639d8fb70c2f590985827403496d027cb96faa047", 0x5c}, {&(0x7f00000017c0)="be81328bde204ec7a7195c5575912db4ad31ff9f381c1080e8cae60a50160e2b162c0926c7186b112b2f26ee8cb622de70d209791de32395461e1145f075198cacf6593f2417aea4c9ac4e54dde4b182bb19a8eed687f4e6fb38e8abc3da0f7f76408f91a6b6f3808c4084d6e8c205185a3943b5058622333fdf4a0b618d2abca03909996b75ee427f2d7e530aff2278f774b0e0108268e63636d6eb226deda4df6314e3b4f626eb957bdf26d7349b2192bf17191a05ea1c0e95f7594aeff9c89061a471c62e9c861fce1123ae88797218ac8eca257e1674e8f2ebd945bd822e0c2d6793cdad63f8cec9afd52b77dddeb4", 0xf1}], 0x5, 0x0, 0x0, 0x4c011}}, {{&(0x7f0000001940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001cc0)=[{&(0x7f0000000180)="b0c7", 0x2}, {&(0x7f00000019c0)="a76861c79c91534575f1a1857a2545b0ff63cf238fa646c23a2c6f3fe41d7080dbba406bae66f32dae14d132c7ac33dab692b27adff52531b73dfaab1d01c36ac33f97df6bc8b336a739558346e7d716d1305c1403109b0b4e51a9989a6758885ea6d33d9e383fb1a779908ed1fe729de7cdd68dbabbfaa87e3d2d78c48131e5cb00dee5b4b5d5bd97d6b56ef3455b593db87088b9a85c95be1ba6344eab39fccbe9a7b4e3df90c31d91983cb31e363ed1a115", 0xb3}, {&(0x7f0000000340)="2fe3aa29e6c0baec44f8186ec1685040cdb24c9641b3ac7753c33c5c3dc7f1e6f1541b3b4db4fb27", 0x28}, {&(0x7f0000001a80)="5698c900662198b6358b21e58320711acdcb398bf6ad3524fda1fb5b8ce0db6746c460f5b183965acf70c88219f77135634471a9ab8d395ec7f3eb4e08e205106aed92ce84f228060dbe134e44b648cbd005beb8226527ff0353f76ca0a7a49dac234ad306365ac88765c64118a10b31223156609e549157f601fd9da23c4ca7ffe4094502b0d4285fd291628172a99e6dd2e96aa75e06c9138bbbbdf8edfe540aab4760c334178ca2d37497d6c6225ae58c8adc0ef4f9d4467a7e1a429a383dee3b2ca162", 0xc5}, {&(0x7f00000003c0)="b301a26c3757fdd6da691ef4727136791011247c37f41e01d7ba70364a", 0x1d}, {&(0x7f0000001b80)="cc5d259f05f7a586432b61a25ad939283ad9c1e02aca5ec25ed4343ba2c701d7842284ebd21282edb3fa772d154ad58fdd21209cc5a9f8a6b5ee5df9a310c83b0f1ab09153e62aca600f54c29a2349c5f6559097933da6faafd65c1d3776b2b7743bdcde3ae127c293", 0x69}, {&(0x7f0000001c00)="3617bfd669058ddcfd19e1c0a8afb9996115535ca8de3f00560c5d32ba8a4dfd18ae72dcca382d4be8cb497393e9cde7b4e4ca83f97c7b23e3533bb0762373af8cc5ea00979fb6afd3014d64dfd980505dd40d1b9a455368f1d3a39006848a3c85f5eb55864df1755b408962f2c4f8538f459b322ac9c065f1586c6899033e3c3d6de684c64b9c09c5bfb5a3aa180857332418b0099fe323eed5dbecd765742b31f25c72974522a6d1eac2a56429df167718710fdda9cd073c84071733e68e", 0xbf}], 0x7, 0x0, 0x0, 0x10}}, {{&(0x7f0000001d40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000000540)="7a90bbb2", 0x4}], 0x1, &(0x7f00000020c0)=[@rights={{0x2c, 0x1, 0x1, [r0, r2, 0xffffffffffffffff, r1, r1, r0, r1]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r1, r0, r2, r0, r0, r0, 0xffffffffffffffff]}}], 0x80, 0x20000040}}, {{&(0x7f0000004280)=@file={0x88bcb42e6b04b57e, './file0\x00'}, 0x6e, &(0x7f00000041c0)=[{&(0x7f0000004300)="c33b422a1d62ae3133666747e44c9827a9c52fdb60bafaf41f528646a782379ea757b380e00f2803e583d75cfc43ccf3e12fe96adc14ffc91351b9b5fcfabdcb26b15497d2d200e0724a44d5a816f7bdd3d433d0bd5d2fa79214e83589508005543448aebf4c8a7ea19fb80086054666103b7424d7470dc3043248ff13423cd3756346602981448c54003d4eb1c73170d653e1ce12221c92e05abd6ee5d4c5eb9a587f8c3b06b55c7b1c596f0ef644c0f94f66f832279590a88dae7543ec5c6ccc5900a2c15136131757ea90e0d33c932e4a06e7db4098e0b98163a83660fe13830e942f3c01245ba56b4372331809e20e7375b4c12eaccc6baec23e3a20bdef702023da365cbf1de1d7cc08f91bac11045307cce57b8a2190a040b07d4128994933a5aac5a13ddaf36b1c5cb0e7ca359c99473116d271144677fdcb1213b7ecc7a3e4c84099ad09db92c5d335ee534e5d6d80a628322edd0c8aea0ed2a0d6e7b1cadc2987b0abe85c1963855a54dd4d24f5b99739ccaaac68a30e6560c8c5c93638ded2600d5a3513fa5d92325746cd88bad2b85a320b95deac806790a497482ddf16a8441dc485dfdbafc809f26893a2088223b1b3144df28478ef31e850cc78a7f2e026ae46373fa12c64f7451f5d28fe8fc52b6f10ec23e64bb43bb4d2006c204fac76a96ac8d4510704e0d8bb986598e81d2767374339962dc13c55448fa209bd0957b906da55f861bb5e11efb6f793cf69ee907678b4a5139baea35f8cac71e1ec78bf88a7eb9033bebd9135cfb6c27f9072b3c4bef2d1dec3677ef6ac0b685a3a4121c3343f1b23c5c9772584a7056546a96ef84fbae9bd88ddf11a16899f989d09d663624373d1ce5b6ac87fade1a63de481a4cb3be25f0b0791f285a5d8769aa662d090303f000ba82cbba7f81fa3bbe75fd76d87cdaf5a8cf0236d7fdd51a48b5b137edf2381297d87626b1c60b0d30573c5579ac811391989f8bdc8eab641703b31b5edaa85fef5784e6007ecccca2734714a6a88a040a7341995c16f5fb94770fc65ec6035fc7b6c24a9534dee61ce923b4b2392bfedd8a5c356f1e5242423ddc4b36093053bb781163ede0802f031ed4aaf67046ea5a8ba7ebb0ff83591ba25a48dcf9e35f36feb368dd6b359bc2c109f42284f386a1fbba5b9dd4af2bb92960f692a364312dc7161051f811d1b69edee2fe2015a5ee6876695a4cae09ba3698cd92686f1b7a48a031f69906c7d1994f7f30284244f0f830312b3538c6bde215b9837583f0ff2d2c78e1eed098d6c187717082d0b121e6019834bdde8e4559469b2004da0e448df3f80db008379d7b9381f08c93254ca536f1436f98a3784b15c2170fe4d6b8df6d71cb38181f00d1ae89a59fb0fe5c7ba428599e6bf2cd782698545c81bd398ed02a14f9327b9ec5305da126dc7c5a113b451896af6337f93181a26d35ac9df4039665e7309d6d8372bb738d8833724084d8ee5d1e9299e77248a51946966eac818a6ba9fbd6101ca11c8741b5270a842eba3ad265fcf6597d9749430531842db530b51c6671923c9da490057f880682100030fdd8b74d570c7442744bdb870d53e5e297433ce2c19e2407e3a22a05a0316af914a7de53ca13be3833643e1e14552bad432e4fe1fa2e04e69161ca68ee97fd2f778274aae304cb6322cf3d58944e5c088b02391534de3239cbed57dd663f5c820739d8d4f3a1b7c93da988dbf92d31df5dc376eb8297d9704d00a55fd7f7b7cf4291c2853ddab19d95907b81283623ba53da2a78caef0f152f422a7c4bb5b817ea038b214ffd2e5fe9396454d047fd1b2393efca745ebb3e3370c7353d7fe015014b4791209ed1862bdd778b07369557bb29b115d10c28f13f2d4109a045dd915195805d1fd30fd29a918cedccdec3ff19c872e62a0e2fd06541e2cbe063145f076eb8bf6e87c3add0592af017f5fde0c12cebc611f1f2f4895ea6573ee914d565f05eef3d0a7b1dfb42e918b9190ed63ea06aaf6dce46432bba0639d86fe3005c6ee76942f0c0a84ad28f817efee9f54149391389c5f2fb78c8ada5cf0d98a8b684cc6fbdf260aaa8e757908da835f598cf1b721472e1e00b729a711c3a486708148159014c1b5ef43dffd28c40e9a69feb68940caf4b446e46c25192c06ad188d21f73bf561f03ef2d96b86033c3681021a0f6b4d1fdbaf30e86099bc18b5cb3c70c2ae03675cb131a2996a2af4b183d205c294faa3471372a29e33f2f8033b3bdf7293c79507572ec66dfe9ca6ad6d3cd34458d6d8426bf16fbae2911f75a9e7cf07c17abb09d0611dfe6cf76c8fb8f94dc3c2219fb413603db7b84f0e45aff53b6d3486aa70c3b2fbd52d8c944bec14c006b905991bcd3225d6d377343e13c2b96c41cf50789486d4e33ef19150f76de0113f6f780c627c2e911a17f2fe7ddf896902ffe086747545faaf9a4e03febf3778dfdd20a544cc2ed07c1f8a14aad7712e595c2bb25544990aec647d79b9548068b871632bcb0bea6de6a8970512914965b98d8027e03abaf66afeed8e5e3b1f74441f19fdaf1370b0ce7ccc5caa1f8f6a4a87c9b2b547bda7f36cda0e9202ab29ec2b9a6b2cbc879f19e6a7e9db9ffa58a03f137da11b2ab521952d9d40dee26b2183b8e7fc79d58a285a1e254ea5eee7442bbbd6d60136bcbe6162d1aee8e4764cad2e9e41ddd570d66af8bda46d725fcdb03a0172ead8ed2a22a489f74a06987df615bd6398c295d98b66aa6545199104e903c2c4e50101a3bfb626da9bf01c0c24cd57ccb3b292e96f3682c7e3f8d7f9bca95512f52c301079f6ff104c9ceb88212e291c5edab9e840e8a56204ad2b49868f0059725eba610d0cedffb181670a3dc05d6ef5a73691eb958340a7ca1597c57ce7d8f404025dd548eb1aa623810219bc38b46a1416e6448878f7aa011a546b29c38c258c798a52dc26e89bd7b1b179a6ca69dfefcf6a97f34a90da183b3dade18aaf0cb9af63278010e792283a2295f35a620d4144e22743452b62d51d618274f6dad6e45c8e64919f2768b55a3563066a07be62cf79d7172d0d1eab927ab309e0cfe3773f9bca1c7b8fa92f065971f74e7314890cdf2225e0c4d6bd9a6013fe6cec2905c0327f38d3e6388a7267dc2c6eb3339fe393c234600eaaa2b296c82d9db9e9b11f8956ffee7b14a6bbf99971bdb64face57f1ebea5f44bb9d0713392f2db173308457d8cd5b9220a6630e2a15c327e493231964b1fafb91dc3375bb555e442d8e528233b8cf020b90a840fd1de6406861e1a4fd3c6cba30f2581e2a030adfa65c3b1354787382f22e0f874106e90baf50998146687fd5ac9300ddc2cfb0e03eadb33e710ac9f1042d0aca0d9ac969a79a058fb2d93a231f7e2c7a2bcd4941c04ab42cfb6a1814bd71a3c7b80240a4b86b3d95bc13bbfb7d200e2fe15bcb2c565553c53e5a92fb84797be151f359c5683902642b3f71b8902cf466dee98699ecaaba10dc066bea742de1e18fbfae6c2b32d1a50a48679d520ce9d23b3026fe9f05d45f594e348f221ef5fc5666e7b8e5a878a8214a35bee73736b339ae3a88f3dd60724a8b6f0fbe437c686f1f58a9ead0c93ac27f11ad3b40f5033a566413480ecf2e8bc25baa0d52ae804b3820896d4c2555ea5026fe9f8b3c62e65e4d490379698104ee312678e9846b00cbc8e87b34e0499daa98be55a6b67877469e0ef755716a40266387fc1d46dce3a9af1b53a7cc7c86b50546a25da952888b1a19a9cd675a1e64839c5b2f9fb84da713fa833ebefcb48ae4b82662b85663e0c4997c41105b681a9d79669847a89c97f9ba194cfec309e768448f485459f9fcf415506e7b8a7539b8943c424653ac851a6aae2acd2e553ecc994c4a361920fd5d1cb1e4292acf0ccee2f305532a48ebac1d2b969345c22a201f3859ba368a53652f2cef552a6fda34d8bf4cde563810ef8319b1df92d046d8cad96444ac5f3dd1e8f5edf8bcc800e2aa4461bec7da1589ae01813af2648cad05d526cf215a26c6cb9b65e19544d211616a4f14c38eb1b348076b6b556b6432fcc3800cbd9a2e7d4c190f9cb916e94cc964c8a4e08e3a7e82921a7ed62c4b21f5642f92f23231fddca9b62a002555b710d74aaea6707ecb827b9b6264967b2eb48ea33dc9bb4876ba46ce420365380dd6d635e9f95d4cfc73fa05d266c3d7f03a1c67661a685d783867dc7b7fddc3d86c718a1261e4c3569bbf55fe2e63af5cc81258cc7220e5c6daa55257c8986d437a0ae011fe2b71921587ef89d53e7af84c13013544860407f2627f5bc1a06525a498b44b0c29e418dd683f538069e182d4f5b3b3ad3fceaacc3dc3d2ab994c314ce8cb45c46bfda9fd2bd792f3053f9e44a73e33f9f7f11428a3e5e08440a91bdf14cb23159841dfbc74140e02df7a80f8a8a1024e71b94aa71577eda5d0ca63f1304ff86bccf2c8581ce24a5f383896780a69dbdf36f24dc6916138faa887e52f4802afde2a52cb5b18df0c04505c54469c03bd84f4bdb7defbe51c6752d7a1a7ae131e3e858430f1ff2717efbe0df6637d9cae514ffb5be3c96b70129d275fec57634459b40768dbd024490224e31a7aca1aecaaed0edd005916b00c92e73bb7f7b2110a2934d05a09544f1c437d1569dcc34685dee00b0e66a84ae1efdbf46ed45aa9c1dc7fce114f613255a908a9a4fced0e35091df9693be3b9c8ba1275cf274c0750224a2948f6faf227da55e58d972ed466b1c91a5be154f251ffc4229149fa588cd5a40e3fbf373ba2be60c84428cf01ad690d70fc9bd93e6ded1453404576f74a6f514c5468e50abdfcb9953d5574ec47a99eebbe46159f12502ad2ead9c921a5e4c0905f47cc63ad77458dca56173409f4f12e56b10a6440d671bdbe95b0d74c46b7f5cf3a673a87cb95c46527aac0b86d02d05a019be02ed8fad76b3c128d3c8bbe8dfe0e48419c6dbf2cb40bea55768bb1d41281fa246e67ebf3e1c568b16d19b891489bbb8b4687b1abca5b357bdc52afff27285b67b4445143fbafb6bc93d2db540514390f1eb9d01600d63a65022f44b825edcae1102981752b3f0f5ef3086fb9a8cf3a022d6816ea9827e3ce2835f924de9b5eb38a851ddfe07db91cffd853de924b6b2a30dcf80035928f4ede80dda670af1b08dc17d40550f863db2b8171dad92bff59984f6fe958f3f92437090a2d7a283b90940a2df68df89b494845439c1785e918a441fe6f8a191dc329a708e934352850a44683249295792ccc5bc4ad927acf0d43cb676a566fa80f4905816f1b37180d1b523f86f4a510169dab256aed3c5beb28676f62e1c507f1b43ed9751f5f3732ea1442de64c6bbc88fd9470cfce19e0e84babc329ff582fdb61ad1979d2db822de1e295949dd7974016093a1fe5e303b15b23ab4c1984e180c9f2ecf2d70845b9c3619cc6d641a9429099820885a26cd05f3340c3f361baa3bf1d56002cf7f36a504a3ced24a38fde76d16533e22ea6b0707aa87acb3b43efbefe352453a865d1a0cc166d4903c511b5e4efee5d1e160b1e4c179024e06a8d4498aeb16bce5b813bac53f10a4fb495681225324752a536af9efbb8dbcdd020b015f9f7d6c884b1868649fb984719a98cda538a87b60db0f050ed74d51972695d9ccc1496ba92cfa582ea7afdd56e26eaa41e5c7f031d609c4e76cec799157b03c86e3b102db6e4b433a5a4cbae6bde684cf28ccdbc2d4ba3fa21d347bfac5bd70f7adce0755dee4f6786ac840dccf446e1090d1f4683ffe73e29", 0x1000}], 0x1, &(0x7f0000005340)=[@rights={{0x20, 0x1, 0x1, [r0, r0, r0, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r2, r2]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78, 0x40402}}, {{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f00000053c0)="0da29341452bf78ec41c0c0966281ad4fb1d28f8a557b643672c8d3634eb86b0bd777ea6a1a679a613b4b229c80b3574db4c21094bc6f5181cbb7ed759ce96a50596642f5e67429d7bb01f67313f18d38297a3", 0x53}, {&(0x7f0000005440)="7d51eb596751f2c63b8943645bcb00187291f9dd42fea61ec0b969", 0x1b}, {&(0x7f0000005480)="f6d9bb688fcf008f2f268df66c97db27b0c1b710bc023770ab94fb820d177455d076bd3c283aeb35f5f4065e25a7b9a11c91e0d0dc24513754cc3068b4013815a89c84c103e70bedd23b61508ee10e372c9d27128168b912219dedfdb5fe7fb6ba0b320b9dda6ec094ab6e353839ed4abeabc17ae4569a9f14a9234e9892f07a90d290555ffbb8dfcef8b8cfc109985d506e6bb2a9b36f2850e759db833dea4a", 0xa0}, {&(0x7f0000005540)="5429a01d7cbef5d9835e55ef2930492be4a1508c34e122eac4a4cb0ae752575b4d08ac0dfab77e7d891dffae2a1e11c25b1191363edf5a82a9fa711acf9f0d298c8df847482e3740bb7601d5f38ac9ead583bcce99c30b88004170b85c59607b17cfdd102e3920c34565ada1f97a378fb8a8b78a8434aebe7a617844f1cb83652ed3d5ef5f0158d2d88b3b5782645ad647eb26e2bd2793693554a6d975919c97348de7abd010d6648699a50dea9736a89e114d6cd68a69619abb21b986ded9d1421d464e65a180d3f92b2c8daac3f7a54854ed837dda213308c6a8e289ebab45c9d5af5b7812280039a9044caa", 0xed}, {&(0x7f0000005640)="12a2b3f2c141c50e9efba520c8badeba0d68dfd41122a03b4a843ec718583324d02cd1930f94656685d4eea5fbf04500af6209258fde73f38755f9f24a8c219ddf0a8d672bbac76582ae38c394a14975e17f6a97f75701ad8f4c", 0x5a}], 0x5, &(0x7f0000005980)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78, 0x40000}}, {{&(0x7f0000005a00)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000005c40)=[{&(0x7f0000005a80)="b15e200f3cd97cbe57b7f8b29e40b2d5fe83cb613daa656e3ed5744f352b9548b08299afd9263b6a58dfd5a15645224bd687b62e7f6feb3be00c625e1d520bcb3a0a1afc6e22fd1f72b217f67cc8f8c03b530b47eff8961249ba92c146768814edadc4bd6334b4b952", 0x69}, {&(0x7f0000005b00)="1c6722e5b7f7c71ff465fd490cdb17d3ff89f5da9ab201080999f8f787a9c9295a49cbb02bef4c4fac66842b2e5e3dd1be3891bb2638230d82c48792768208c91cd6aeb878c9d394ae2f186c49ee0c6147a04c240fec7a94946175bb62393b6b9065f09e00782f19b0cd84aefa331092ccac0f50f2bd1a63fe68ffb5881afc616f944f31c69fb9189722d6ab2509", 0x8e}, {&(0x7f0000005bc0)="36c3b86fc42588b8c71d244819f7635b05cd348b4f3d2b9da3043685bd39a6ea61d4531e73644acbd4a2bc6feb64c0dde78b91df4d704249dbd4acb2641aae4050bf6d8ce3d8b83f727370849c53da1e33ac0e9e4199e67e", 0x58}], 0x3, &(0x7f0000005d40)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x30, 0x1, 0x1, [r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90, 0x4000}}, {{&(0x7f0000005e00)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001fc0)=[{&(0x7f0000005e80)="31f7b57a067acb1300085f9b77f67eceab75087b84e4b2917a468447", 0x1c}, {&(0x7f0000001e00)='\v', 0x1}, {&(0x7f0000001e40)="97694731e79133cd126e042a5d345880bf842fa1fe153d24853f9c6a6dc52b81039b3a52435239dedd3aaa1138b6d792bccd9c2b7d65c642464140878148117dc67591a9c714bf86f044eea43c28ef7cfb0a9245efc7667d655d0121986eb8bf9d8e3acfd075a9a1bfa44edf4e8ff4bf9e179ded107a58f0b8caa16a401294e90e0f0e81f6200df1cc73f3ec67", 0x8d}, {&(0x7f0000001f00)="6a59b85524b05e232de723a95df733bad0749a596ca19bf96606f378df0bc75e555479e88682b634d852a88c21fc93deadd5658f3bac34be25a0ef4028759b759d4f33b9e51ec1477962d98865cc9093d67267476653365caf4e802e07214bd3469ae51a97169bf02b2003def472c71f13cde7e8e8ad92d4b7e83f335059a261990dafbbab9cfb6d0d1c060fd631230badaaf42568dcd20795e4305207f654c2a4f41c279d414a6e20fb77d360851d3722a8b1", 0xb3}], 0x4, &(0x7f0000005fc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x80, 0x80}}, {{0x0, 0x0, &(0x7f0000006080)=[{&(0x7f0000006040)="d7bf762e3363c4fd9107e9550c36896277f56049bd", 0x15}], 0x1, &(0x7f0000006100)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88, 0x10}}], 0x8, 0x800) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a06580200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000200ffffffff", 0x58}], 0x1) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) pipe2(0x0, 0x80) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000380)}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000002c0)={0x0, 0x0}) sched_setattr(r5, &(0x7f0000000140)={0x38, 0x5, 0x9, 0x0, 0x0, 0xb49, 0x7, 0xe0a, 0x0, 0x1}, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x4, 0xfffffffffffffffd) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000001c0)="430fc73f0f2390b9800000c00f32420f01c20f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e0046a0f8000000000000002d1aa80000460f1c460041ae", 0x4e}], 0x1, 0x74, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) execve(0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$KVM_CAP_SYNC_REGS(r8, 0x4068aea3, &(0x7f0000000240)) setsockopt$CAN_RAW_FD_FRAMES(r9, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) 35.947311888s ago: executing program 6 (id=3665): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="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", 0x165) accept$alg(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x112) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r3 = open_tree(r2, &(0x7f0000000000)='\x00', 0x89901) unshare(0x6020000) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) rmdir(&(0x7f0000000300)='./file0\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000204000b80200001"], 0x118}, 0x1, 0x0, 0x0, 0xc890}, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') 34.290777248s ago: executing program 6 (id=3668): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$inet6(0xa, 0x2, 0x0) fsopen(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYRESHEX=r0, @ANYBLOB="fd84667f1cea4b9d828fce6b8795db0379ad6894b2c9406de3f36f882e5dd3bd2542fd7607f1ebdf853ae2d5da0054d37df6d9bff46d7958d3133d00d74fa6121f3033cf5636e74b6fbe80472bdd82807e0235f99635f63e6f8df0742178c526c15b1bef69812ac4024173510f12d34a545952b44fd62b97943ca60e6e3f5485a95370e55b31e4f57668e77b2c3411a25c7962a6f5d4713b5d76db0add730420bc0a41807f1325ba9ea8ee16960430d0361a2a6bccc0bd"], 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f00000000c0)=0xf, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x8000, 0x40) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r3, &(0x7f0000000100), 0x10) ioctl$IOMMU_GET_HW_INFO(0xffffffffffffffff, 0x3b8a, &(0x7f0000000180)={0x28, 0x0, 0x0, 0x1000, &(0x7f0000001540)=""/4096}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000140)={0x28, 0x1, 0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil, 0x1000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20000894}, 0x44011) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x9}}}, 0x24}}, 0x0) 33.70626299s ago: executing program 6 (id=3670): syz_usb_connect(0x4, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102ae299820fc0d0100ac240102030109022b0001fffa10170904510302ffffff01090507100800060808070593ff"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e000"], 0x40}}, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x918) write$UHID_CREATE2(r1, &(0x7f0000000d80)=ANY=[@ANYBLOB="0b00000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b00b4776402000000400200030000007c030000108784e83171cd437e242bcbb3008cc13a03b44f53e38b1d32ef524c532304a14261c8dced30528ed16e3ad61ad7b34c69885e1a4bd233aac510f7676c87e25a0017b732165693230deb"], 0x163) io_setup(0x3ff, 0x0) read(r0, &(0x7f0000000b00)=""/63, 0x3f) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r3, 0x7a6, &(0x7f0000000040)={0x4, 0x100000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) r4 = socket(0x3, 0x1, 0x20000003) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r8, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d5499, 0x0, [0xffffffffffffffff, 0x6, 0x2, 0x9, 0x5, 0x73, 0xfffffffffffffffc, 0x800000]}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000140)="b805000000b9614e300d0f01c1f080245f81c4a15d73ff490f025c86aa3e3e0f01c82e26430fc739c423955fd0e148b825530000000000000f23d00f21f835300000090f23f8b9800000c00f3235000400000f300f01c9", 0x57}], 0x1, 0x24, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002"], 0x122}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="000000000000000050020c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd0"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) 32.940869221s ago: executing program 40 (id=3670): syz_usb_connect(0x4, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010102ae299820fc0d0100ac240102030109022b0001fffa10170904510302ffffff01090507100800060808070593ff"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e000"], 0x40}}, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x918) write$UHID_CREATE2(r1, &(0x7f0000000d80)=ANY=[@ANYBLOB="0b00000073797a30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004b00b4776402000000400200030000007c030000108784e83171cd437e242bcbb3008cc13a03b44f53e38b1d32ef524c532304a14261c8dced30528ed16e3ad61ad7b34c69885e1a4bd233aac510f7676c87e25a0017b732165693230deb"], 0x163) io_setup(0x3ff, 0x0) read(r0, &(0x7f0000000b00)=""/63, 0x3f) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r3, 0x7a6, &(0x7f0000000040)={0x4, 0x100000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'dummy0\x00'}) r4 = socket(0x3, 0x1, 0x20000003) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r8, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d4d5499, 0x0, [0xffffffffffffffff, 0x6, 0x2, 0x9, 0x5, 0x73, 0xfffffffffffffffc, 0x800000]}) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f00000ab000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000140)="b805000000b9614e300d0f01c1f080245f81c4a15d73ff490f025c86aa3e3e0f01c82e26430fc739c423955fd0e148b825530000000000000f23d00f21f835300000090f23f8b9800000c00f3235000400000f300f01c9", 0x57}], 0x1, 0x24, 0x0, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c08000140000000020800014000000030080002"], 0x122}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r9, @ANYBLOB="000000000000000050020c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd0"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) 18.037605643s ago: executing program 1 (id=3699): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x2c, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x33}, {0x0, 0x973, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0}, 0x20) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback={0x3000000}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x10}, {0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, 0x0, 0x6e6bb5, 0x0, 0x1}}, 0xb8}}, 0x0) 17.65073811s ago: executing program 1 (id=3700): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket(0x1, 0x1, 0x3a) unlink(0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.max\x00', 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000600)={0x0, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x113, 0x4a, 0x0, 0x0, r2}) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000002040)=0x4, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) socket(0x1, 0x1, 0x3a) (async) unlink(0x0) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='memory.max\x00', 0x2, 0x0) (async) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000600)={0x0, &(0x7f0000000a80)=[{}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x113, 0x4a, 0x0, 0x0, r2}) (async) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000002040)=0x4, 0x4) (async) 17.565951575s ago: executing program 1 (id=3701): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x311101, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x4000, {0x0, 0x0, 0x0, 0x2ead, 0x7fff, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200"}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) sigaltstack(&(0x7f0000000540)={0x0, 0x2}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="0a01000005af9e08d2106528c9a4000000010902120001000000000904"], 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000005c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0xfffe, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x9, 0x4, 0x2, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x200, 0xd}, @exp_smc={0xfe, 0x6}]}}}}}}}, 0x0) 16.920871961s ago: executing program 1 (id=3703): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000400)="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", 0x165) accept$alg(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x112) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') r3 = open_tree(r2, &(0x7f0000000000)='\x00', 0x89901) unshare(0x6020000) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) rmdir(&(0x7f0000000300)='./file0\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a3000000000680003806400dec6080003400000000204000b80200001"], 0x118}, 0x1, 0x0, 0x0, 0xc890}, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') 13.781949384s ago: executing program 1 (id=3710): unshare(0x28020480) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x68, 0x0, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000040)={0x0, @private, @multicast2}, &(0x7f0000000100)=0xc) r4 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) r7 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r7, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) r8 = socket$kcm(0x2b, 0x1, 0x0) r9 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x101000) ioctl$LOOP_CHANGE_FD(r9, 0x4c03, 0xffffffffffffffff) sendmsg$sock(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@mark={{0x14, 0x1, 0x4f, 0x594}}], 0x18}, 0x20008855) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x22, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000004b2991c3161e66e900000066050000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 12.318474622s ago: executing program 1 (id=3714): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c000000100003040000000000000ffe00000000", @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x4c}, 0x1, 0xba01}, 0x0) 11.154597497s ago: executing program 41 (id=3714): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c000000100003040000000000000ffe00000000", @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x4c}, 0x1, 0xba01}, 0x0) 11.144506641s ago: executing program 0 (id=3718): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0x8601, 0x2}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = syz_io_uring_setup(0x1237, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x2b9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) io_uring_enter(r3, 0x47bc, 0x0, 0x99ffffffffffffff, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) dup2(r6, r2) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000087f2bb4024042c017e2201"], 0x0) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x4000) fcntl$lock(0xffffffffffffffff, 0x5, 0x0) 7.95853544s ago: executing program 0 (id=3724): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="7a0a00ff0000010271108e000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 7.314449527s ago: executing program 4 (id=3727): socket$netlink(0x10, 0x3, 0xb) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000980), 0x101900, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4d, 0x9, 0x6, 0x0, 0x3}, 0x0) r2 = add_key(&(0x7f00000000c0)='ceph\x00', 0x0, &(0x7f0000000140)="100c06", 0x3, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000340)="1400000016001963d25a80648c56915a19aa2bfe", 0x14}], 0x1}, 0x0) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000001580)=""/4074, 0xfea}], 0x1}, 0x0) syz_pidfd_open(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x8417f, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x41100, 0x3c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x448, 0x2f0, 0x220, 0x180, 0x3b0, 0x180, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x3b0, 0x6, &(0x7f0000000380), {[{{@ip={@broadcast, @multicast1, 0xff, 0xff, 'ip_vti0\x00', 'team_slave_1\x00', {}, {0xff}, 0xbf, 0x3, 0x2}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xfff}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@ttl={{0x28}, {0x2, 0xc}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x2}}}, {{@ip={@loopback, @empty, 0xffffff00, 0xffffffff, 'veth0_to_bridge\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0xff, 0x2, 0x6}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x6, @broadcast, 0x4e23}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="b210b8810e69", 0xff, 0x9, [0x2e, 0x34, 0x2d, 0x19, 0x3a, 0x24, 0x33, 0x1b, 0x21, 0x17, 0x1d, 0x2f, 0xf, 0x32, 0x30, 0x10], 0x1, 0xf75, 0xffff}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) getpid() openat$sndseq(0xffffffffffffff9c, 0x0, 0x48100) syz_emit_ethernet(0x4a, &(0x7f00000001c0)=ANY=[@ANYRES16=r2], 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) capset(&(0x7f0000000680)={0x19980330}, &(0x7f00000006c0)={0x0, 0x0, 0x101}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x40022000, 0x0, 0x3) prctl$PR_CAPBSET_DROP(0x18, 0x4) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, 0x0) socket(0x10, 0x3, 0x0) 6.190996099s ago: executing program 7 (id=3728): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mount$fuseblk(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x1151400, 0x0) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 5.615078673s ago: executing program 7 (id=3729): r0 = syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x20}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/122, 0x7a}], 0x1) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x38}}, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e", 0x19}], 0x1, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x8}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000380)={[0x100, 0x6, 0x1, 0xfffffffffffffffc, 0x7fff, 0x2, 0x5, 0x8000, 0x1, 0x2, 0x3, 0xc8d, 0x2c00, 0x4, 0x9, 0x3], 0x3000, 0x138105}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FALLOCATE={0x11, 0x10, 0x0, @fd_index=0x8, 0xfff, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x2936, 0x0, 0x0, 0x0) 5.19865393s ago: executing program 7 (id=3731): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005e05b14021040203e8450000000109025100010000000009040900000202ff00052406000105240000000d24b8fe3f9ea3a0e8ca0800ff06241a05002a052401010305240600010524"], 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1e00000005000000010000000104000000040000", @ANYRES32=0x1, @ANYBLOB="cee06f7000001500"/20, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0200000004000000030000000500"/28], 0x50) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@delchain={0x24, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {}, {0xfff2, 0xffff}, {0xffff, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 4.844641968s ago: executing program 4 (id=3732): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0x14}}, 0x0) 4.722310558s ago: executing program 3 (id=3733): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8103}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000040)=""/180, 0xb4}, {&(0x7f0000000500)=""/253, 0xfd}, {&(0x7f0000001340)=""/4125, 0x101d}, {&(0x7f00000011c0)=""/243, 0xf3}], 0x4}, 0x6}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)=""/134, 0x86}, {&(0x7f0000003e40)=""/4117, 0x1015}, {&(0x7f0000000000)=""/44, 0x2c}, {&(0x7f0000002e00)=""/4102, 0x1006}, {&(0x7f0000000480)=""/90, 0x5a}], 0x5}, 0x20000b0}, {{0x0, 0x0, 0x0}, 0x800006}], 0x8, 0x20, 0x0) 4.602751372s ago: executing program 0 (id=3734): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040), 0x2, 0x9}}, 0x20) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="1502ffffffa100001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x4c}, 0x1, 0xba01}, 0x0) 4.544583382s ago: executing program 4 (id=3735): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x57e, 0x2017, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0xb, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0xb, 0xf, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x6, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000000c0)={0x2c, &(0x7f00000003c0)=ANY=[@ANYBLOB="00240b000000010393f1ffdb6ca9da45"], 0x0, 0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r3, 0x29, 0x35, 0x0, 0x0) r4 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x48f, &(0x7f0000000000)={0x11, @rand_addr=0x64010100, 0x0, 0x0, 'lc\x00', 0x0, 0x0, 0x78}, 0x2c) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @local}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x18}, 0x41) sendmsg$nl_xfrm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x4e21, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x4}, {0x0, 0x0, 0x200000000010}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0x2, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) ioctl$int_in(r9, 0x5452, &(0x7f0000000000)=0x5) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r9) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r10, &(0x7f0000000140)='cpu.pressure\x00', 0x2, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000df94100029bd7000ffdbdf2507920a00", @ANYRES32=0x0, @ANYBLOB="4002000082000000"], 0x20}, 0x1, 0x0, 0x0, 0x20008004}, 0x20008080) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000940)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6f8, 0x328, 0x230, 0x328, 0x230, 0x328, 0x628, 0x628, 0x628, 0x628, 0x628, 0x6, &(0x7f00000001c0), {[{{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@rt={{0x138}, {0x10000, [0x2, 0x3], 0x1, 0x1, 0x5, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @loopback, @empty, @empty, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @local, @ipv4={'\x00', '\xff\xff', @local}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'], 0x8}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x6}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@dev={0xac, 0x14, 0x14, 0x21}, @ipv4=@loopback, 0x37, 0x24, 0x10}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x9, 0x0, 0x1, [0x6, 0x6, 0x779, 0x7, 0x1, 0x2e, 0x7, 0x9, 0x8, 0x4, 0x8, 0x0, 0x3, 0x6, 0x5, 0x3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x530}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x30}, @empty, [0xff000000, 0x0, 0xffffffff], [0xff, 0xffffffff, 0xffffffff, 0xff000000], 'ipvlan0\x00', 'batadv0\x00', {}, {}, 0x11, 0xd, 0x1, 0x23}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x9}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x758) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x41) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) 4.202717149s ago: executing program 3 (id=3736): r0 = syz_open_procfs(0x0, &(0x7f0000000540)='ns\x00') r1 = syz_open_procfs(0x0, &(0x7f0000001540)='uid_map\x00') read$ptp(r1, &(0x7f0000000040)=""/148, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f0008000300"], 0x78) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) pread64(r1, &(0x7f0000002240)=""/237, 0xed, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x83, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @tipc_packet={0xc, 0x6, "c2963c", 0x4d, 0x6, 0xff, @empty, @mcast2, {[@hopopts={0x87, 0x4, '\x00', [@padn, @generic={0xc, 0x1e, "83a402805af7b91170fdf1a9568400c1a5ea05b3892d3ad46c65c8625e80"}]}], @payload_conn={{{0x1d, 0x0, 0x0, 0x1, 0x0, 0x6, 0x0, 0x2, 0x8, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4e23, 0x4e24}}, [0x0, 0x0, 0x0, 0x0, 0x0]}}}}}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3e0, 0x3d8, 0x3d8, 0x3e0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x3f00, {}, [@common=@inet=@recent0={{0xf8}, {0x200000, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x80, 0x0}, 'virt_wifi0\x00', {0x6dbf}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x1}, {0xffffffffffffffff, 0x3, 0x6}, 0x5, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xf00, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080088a80000060027"], 0x44}}, 0x0) lseek(r0, 0x100000e00000, 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x3, 0x18100}) ioctl$VIDIOC_S_FREQUENCY(0xffffffffffffffff, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x4009}) 4.145950498s ago: executing program 0 (id=3737): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) sysfs$3(0x3) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) write$tcp_mem(r1, &(0x7f00000000c0)={0x6, 0x20, 0x4, 0x20, 0x6b7c}, 0x48) r2 = syz_open_dev$amidi(&(0x7f0000000240), 0x3e0, 0x123c80) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000080)) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x40045731, &(0x7f00000010c0)) 3.786618284s ago: executing program 3 (id=3738): setxattr$incfs_metadata(&(0x7f0000000080)='./cgroup\x00', &(0x7f0000000280), 0x0, 0x0, 0x200000000000000) 3.560831378s ago: executing program 3 (id=3739): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @local, 0x7}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) listen(r3, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast1}, 0x10) listen(r4, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100090808004149004001040800", 0x58}], 0x1) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x28, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="17090000000000000000010000000500070000000000080009000000001b08000a0000000000060002000100000014001f0000000000000000000100000000000000140020"], 0x64}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000300)='yeah\x00', 0x5) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) 3.109428395s ago: executing program 0 (id=3740): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0x4e26, 0x80000, @loopback={0xff00000000000000}, 0xfffffffd}, 0x1c, 0x0}, 0x20040081) 1.98273175s ago: executing program 0 (id=3741): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x2400, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000002000128008000100677470001400028008000200", @ANYRES32=r3, @ANYBLOB="03000010b412c9e909817f52a4", @ANYRES32=r4, @ANYBLOB], 0x40}, 0x1, 0xba01}, 0x0) fspick(r1, &(0x7f00000000c0)='./file0\x00', 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x70000, 0x90, [0x0, 0x0, 0x0, 0x0, 0x400000001300, 0x400000001330], 0x0, 0x0, &(0x7f0000001300)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0x7fffffffffffffff, 0x700}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000340)='.\x00', 0xa50003d1) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000, @value=r6}, 0x28) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f0000000140)=0x5, 0x4) r7 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r10, 0x2) ppoll(&(0x7f0000000c80)=[{r10, 0x2}], 0x1, 0x0, 0x0, 0x0) io_uring_enter(r7, 0x48e9, 0x225e, 0x2, 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x8cff) syz_usb_connect(0x0, 0x24, &(0x7f000000a680)={{0x12, 0x1, 0x201, 0xa2, 0x9f, 0x5d, 0x10, 0x2c7c, 0x306, 0x3c51, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x8, 0x70, 0x9, [{{0x9, 0x4, 0x7d, 0x2, 0x0, 0xff, 0xff, 0xff, 0x6}}]}}]}}, &(0x7f000000acc0)={0x0, 0x0, 0x0, 0x0}) r11 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r11, 0x0, 0x0) 1.906355823s ago: executing program 7 (id=3742): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000340), 0x0, 0x20048850) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6(0x10, 0x80000, 0x3) sendmsg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x80, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendto$inet(r6, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) r7 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x88080, 0x0) ppoll(&(0x7f0000000200)=[{r7, 0x40}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r3) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRESDEC=r6, @ANYRESDEC=r2, @ANYRESDEC=r1], 0x2c}, 0x1, 0x0, 0x0, 0x200c015}, 0x880) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r4, @ANYRES32=r7, @ANYRES16=0x0, @ANYRES8=0x0, @ANYRESOCT=r6], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x400c800) 1.457796766s ago: executing program 4 (id=3743): io_uring_setup(0x30d3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x0, @dev={0xfe, 0x80, '\x00', 0x36}}}}, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000000000)=0xfd9) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r4, 0x2}, &(0x7f0000000040)=0x8) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f00000003c0)={0x2, 0x200000000004e23, @broadcast}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000002000010700000000fedbdf250a0014000000000108000000080004000900000014000200ff01000000000000000000000000000108000d002900000008000e"], 0x50}}, 0x90) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x9, &(0x7f0000000100)=0x40000002, 0xd) write$binfmt_elf64(r5, &(0x7f0000000400)=ANY=[], 0x100000530) execveat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000240)={[&(0x7f00000000c0)='\x00', &(0x7f0000000180)='\x00', &(0x7f0000000200)='\x00']}, &(0x7f0000000480)={[&(0x7f0000000280)='\x00', &(0x7f0000000340)='\x00', &(0x7f0000000380)='}:]$\x8c$-)!(@^\x00', &(0x7f0000000400)='(%\x00', &(0x7f0000000440)='\x00']}, 0x400) close_range(r5, 0xffffffffffffffff, 0x2) r7 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f00000004c0)={0xff, 0x3, {0x2, 0x0, 0x80000000, 0x2, 0x3}, 0x1}) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e3, 0x0) 1.302691961s ago: executing program 7 (id=3744): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100000000ff000000000000000a20000000000a03000000000000000000010000000900010073797a300002000068000000090a010400000000fcff00000100000008000a"], 0xb0}}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ptrace(0x10, r2) ptrace$getregset(0x4205, r2, 0x202, &(0x7f0000000240)={0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="0c0001800800010003000100200001"], 0x44}}, 0x0) 1.070335507s ago: executing program 7 (id=3745): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r4, @ANYBLOB="02000000000080008000120008000100767469367400020060"], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fchdir(0xffffffffffffffff) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f00001b4000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f00000002c0)=ANY=[]) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f0000000000)) r7 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000300)=0xd, 0x4) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x10000006) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000001000010000000000000000000000000a040000001200010000000001"], 0x64}}, 0x0) r10 = io_uring_setup(0x7e68, &(0x7f0000000340)={0x0, 0x0, 0x80, 0xffffffff}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=@newae={0x1b0, 0x1e, 0x20, 0x70bd2b, 0x25dfdbfc, {{@in6=@loopback, 0x4d2, 0xa, 0x6c}, @in=@broadcast, 0x5c}, [@user_kmaddress={0x2c, 0x13, {@in6=@private0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x2}}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_crypt={0x9e, 0x2, {{'cts(ctr-aes-neon)\x00'}, 0x2b0, "ac1b4415ffaeda5721b65a0bf7e27ee58aac92ffabbc3410d967a71dded9f8a765c6e478da08d0f7efcf84f035456f5bc5250e1dfc39451967b04dca40f80cf649cabcc4f73c5dee3e3fd25e6bfa3dc9eed8864c7379"}}, @migrate={0x9c, 0x11, [{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@rand_addr=0x64010101, @in=@remote, 0x2b, 0x1, 0x0, 0x3501, 0x2, 0xa}, {@in6=@mcast2, @in6=@empty, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@loopback, 0x2b, 0x2, 0x0, 0x3504, 0x2, 0x2}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x85}, 0x4044080) io_uring_register$IORING_REGISTER_BUFFERS(r10, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002700)=""/4098, 0x1002}], 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 487.140007ms ago: executing program 4 (id=3746): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, r1, 0x40ca9}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x9}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10, 0x0, 0x97ff, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880) 345.826192ms ago: executing program 3 (id=3747): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001380)={&(0x7f0000000380)="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", &(0x7f0000000080)=""/80, &(0x7f0000000140)="bde5c9ff07b77c3e2c53878934a403335d47f9de64f99f3e1dd0e36e7ba184f7d5a9757bf8f8c235c500e75643fe6f7ec4cd1d8fa39bff846bf290206697524b0112fc6d55537c08396463abc3617f1f62b6db3622a9eafd654c24c16269231a14c32802f66c882818bddf2c73afd276170637bf834c00fa33c6c97e09ab448692105e754e7369c438fe7da088a3cd2363da51c2eab6b75e18b440819a7561825b04aafdc1e3a62aae4ba2089aade3d680bc556b", &(0x7f0000000240)="73f18667cac018ceb905e74bd97bdc209393d7a6e094e30a7a472a2d79df924e27f5272ce061c268e7c41c66befe5bb7db4013b32af31348", 0x8, r1, 0x4}, 0x38) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x2, {0xa, 0x0, 0x20, 0x40, 0x0, 0x0, 0x0, 0x8}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'veth1_vlan\x00'}, @FRA_SRC={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) setxattr$system_posix_acl(0x0, &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) write$P9_RGETLOCK(r0, &(0x7f0000000000)={0x20, 0x37, 0x1, {0x1, 0x40, 0x5, r4, 0x2, '}$'}}, 0x20) r5 = openat(r3, &(0x7f00000013c0)='./file0\x00', 0x22a042, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r5}, @IFLA_GTP_FD0={0x8, 0x1, @udp=r3}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) 74.563177ms ago: executing program 4 (id=3748): ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000040)={0x28, 0x4, 0x0, 0xdeff, 0x0, 0x0, 0x100000000}) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x302, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x300, 0x0, &(0x7f00000000c0), 0x3000000) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc38, &(0x7f00000000c0)=ANY=[]) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, &(0x7f0000000080)=[0x15b40747, 0x7]) r1 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004085}, 0x200400c0) socket$packet(0x11, 0x2, 0x300) r2 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newtclass={0x38, 0x28, 0x2, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xa, 0xe}, {0x1, 0x4}, {0xffe0, 0x5}}, [@tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0x82, 0xa9}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 0s ago: executing program 3 (id=3749): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="a5fda988009ce85d360012800a000100767863616e000000fdfe028014000100000000004e5c00003f162cf5287afafca5000000000000000000", @ANYRES32=0x0, @ANYBLOB="20d000000000050008001300", @ANYRES32=r2, @ANYBLOB="08000400e1ff0000"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140200003e000701feffffffffdbdf25017c0000c05b50d84568e828974308d2dc4d5d12d7e7f74add4a2602f9588aff171fd7c546f3e5d8abe707005875780b78a5f7b63e5c0b5b5de43b4c609654d6b52491935a4c5abc635bcb8239773934185edd934b52ee42ab33468e7e33f11820f060b0a69bb3ea066003c2c116803b6013cb4dc23ce09d3e7e77b2f670878e4d3917dd371e105b3dd406a644ebf4eb5b393e4ec5ec22618950f30085fe018008000600", @ANYRES32=r0, @ANYBLOB="51015f800056bbb5d0bdb7cb18cadf8b52cce6317c74985cb94de61b4109a06daf45a9932db04a37754bb4b5e69d2a420ad8e1181f37c615af3757d1be6078c00b85974431c3866c7485b0665d91aa811a993f4448e34dccf63c2e9f6fba8bb75855f0388a97cb1c9f9c7e0b1fa6d0c02d6b0737a9bb534fe6b43431d7eccaa2f98bc68af879d52048dc9be03bd222fe380247f6c7781a57a4303fef3ab011c7ffe2a460d8001f38272e1c9312a3d020f7becee4ee32e779fc0993254bfbc779da76ff91c9094ef9e5096f40b2e274d9214761bcc60f68a31e7327f5ef8c6408ccae72fbbe49fa1ed5482c38704a56e78b8b26dd5955992267e01f32b10e780904dc52f9ef8c762a128bdddb273c4daffd3c62e73b5e30b5bc4e796306d075e2b944b646b19ecc312fe2cba4edc7259cfb8c739dee8c4c83efed399bb900ec762598380a482fa9e24649c09760fd5cf80c0000000800028004000c80"], 0x214}, 0x1, 0x0, 0x0, 0x4000}, 0xc010) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x41e43, 0x14) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397b5b22d0000b420a1a93cffffffffffffefff7d3d458dc4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xfffffffffffffff8]}}) sched_setaffinity(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000002060500000000000000000007000000140007800800110000000000080012400000ffff0500010006000000050005000200000005000400000000000900020073797a310000000013000300686173683a6e65742c696661636500"], 0x60}, 0x1, 0x0, 0x0, 0x810}, 0x4000850) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000600)={0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}}, 0x5, 0x12, 0x0, 0x0, 0x26f4bf140f7d0564}, 0xfffffe83) syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000001340), &(0x7f0000000140)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) syz_open_dev$video(&(0x7f0000000100), 0x2, 0xc80) kernel console output (not intermixed with test programs): 86] CPU: 0 UID: 0 PID: 18686 Comm: syz.2.3526 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 1011.743779][T18686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1011.743793][T18686] Call Trace: [ 1011.743801][T18686] [ 1011.743811][T18686] dump_stack_lvl+0x189/0x250 [ 1011.743851][T18686] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1011.743883][T18686] ? __pfx__printk+0x10/0x10 [ 1011.743908][T18686] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1011.743932][T18686] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1011.743957][T18686] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1011.743984][T18686] warn_alloc+0x214/0x310 [ 1011.744009][T18686] ? stack_depot_save_flags+0x40/0x900 [ 1011.744052][T18686] ? __pfx_warn_alloc+0x10/0x10 [ 1011.744079][T18686] ? kasan_save_track+0x4f/0x80 [ 1011.744099][T18686] ? xskq_create+0x56/0x170 [ 1011.744123][T18686] ? xsk_init_queue+0xb0/0x110 [ 1011.744143][T18686] ? xsk_setsockopt+0x43f/0x710 [ 1011.744161][T18686] ? do_sock_setsockopt+0x25a/0x3e0 [ 1011.744179][T18686] ? __x64_sys_setsockopt+0x18b/0x220 [ 1011.744196][T18686] ? do_syscall_64+0xfa/0x3b0 [ 1011.744217][T18686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.744246][T18686] __vmalloc_node_range_noprof+0x125/0x12f0 [ 1011.744301][T18686] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1011.744328][T18686] ? xskq_create+0x56/0x170 [ 1011.744355][T18686] ? __kasan_kmalloc+0x93/0xb0 [ 1011.744412][T18686] vmalloc_user_noprof+0xad/0xf0 [ 1011.744431][T18686] ? xskq_create+0xbf/0x170 [ 1011.744449][T18686] xskq_create+0xbf/0x170 [ 1011.744468][T18686] xsk_init_queue+0xb0/0x110 [ 1011.744488][T18686] xsk_setsockopt+0x43f/0x710 [ 1011.744510][T18686] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1011.744528][T18686] ? __lock_acquire+0xab9/0xd20 [ 1011.744566][T18686] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1011.744589][T18686] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1011.744614][T18686] do_sock_setsockopt+0x25a/0x3e0 [ 1011.744640][T18686] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1011.744666][T18686] ? __fget_files+0x2a/0x420 [ 1011.744699][T18686] __x64_sys_setsockopt+0x18b/0x220 [ 1011.744728][T18686] do_syscall_64+0xfa/0x3b0 [ 1011.744753][T18686] ? lockdep_hardirqs_on+0x9c/0x150 [ 1011.744828][T18686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.744860][T18686] ? clear_bhb_loop+0x60/0xb0 [ 1011.744885][T18686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.744903][T18686] RIP: 0033:0x7fa589b8e929 [ 1011.744922][T18686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1011.744938][T18686] RSP: 002b:00007fa58a9f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1011.744958][T18686] RAX: ffffffffffffffda RBX: 00007fa589db6080 RCX: 00007fa589b8e929 [ 1011.744971][T18686] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 1011.744980][T18686] RBP: 00007fa589c10b39 R08: 0000000000000004 R09: 0000000000000000 [ 1011.744989][T18686] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1011.744998][T18686] R13: 0000000000000000 R14: 00007fa589db6080 R15: 00007fa589edfa28 [ 1011.745027][T18686] [ 1011.745043][T18654] hsr_slave_1: entered promiscuous mode [ 1011.751568][T18654] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1011.913518][T18686] Mem-Info: [ 1011.918424][T18654] Cannot create hsr debugfs directory [ 1012.100034][T14823] Bluetooth: hci4: command tx timeout [ 1012.103315][ T51] Bluetooth: hci3: command tx timeout [ 1012.140023][T18686] active_anon:6795 inactive_anon:2 isolated_anon:0 [ 1012.140023][T18686] active_file:20523 inactive_file:40269 isolated_file:0 [ 1012.140023][T18686] unevictable:768 dirty:149 writeback:0 [ 1012.140023][T18686] slab_reclaimable:6314 slab_unreclaimable:114598 [ 1012.140023][T18686] mapped:26017 shmem:1373 pagetables:1310 [ 1012.140023][T18686] sec_pagetables:0 bounce:0 [ 1012.140023][T18686] kernel_misc_reclaimable:0 [ 1012.140023][T18686] free:1290864 free_pcp:11984 free_cma:0 [ 1012.140090][T18686] Node 0 active_anon:27180kB inactive_anon:8kB active_file:82060kB inactive_file:160872kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104044kB dirty:596kB writeback:0kB shmem:3956kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13616kB pagetables:5120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1012.140149][T18686] Node 1 active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1012.140203][T18686] Node 0 DMA free:15356kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1012.140268][T18686] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 1012.140320][T18686] Node 0 DMA32 free:1242600kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:27136kB inactive_anon:8kB active_file:82060kB inactive_file:159040kB unevictable:1536kB writepending:596kB present:3129332kB managed:2561080kB mlocked:0kB bounce:0kB free_pcp:35656kB local_pcp:14196kB free_cma:0kB [ 1012.140384][T18686] lowmem_reserve[]: 0 0 1 1 1 [ 1012.140431][T18686] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1012.140489][T18686] lowmem_reserve[]: 0 0 0 0 0 [ 1012.140536][T18686] Node 1 Normal free:3905484kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:12272kB local_pcp:0kB free_cma:0kB [ 1012.140596][T18686] lowmem_reserve[]: 0 0 0 0 0 [ 1012.140643][T18686] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 1012.140891][T18686] Node 0 DMA32: 1171*4kB (UME) 357*8kB (UME) 865*16kB (UME) 607*32kB (UME) 325*64kB (UME) 101*128kB (UME) 161*256kB (UME) 121*512kB (UME) 32*1024kB (UME) 2*2048kB (U) 251*4096kB (UM) = 1242660kB [ 1012.142426][T18686] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1012.142563][T18686] Node 1 Normal: 70*4kB (UM) 41*8kB (UE) 42*16kB (UME) 100*32kB (UE) 72*64kB (UME) 31*128kB (UME) 9*256kB (UME) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 948*4096kB (UM) = 3905536kB [ 1012.142777][T18686] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1012.142797][T18686] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1012.142932][T18686] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1012.142951][T18686] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1012.142970][T18686] 62164 total pagecache pages [ 1012.142981][T18686] 3 pages in swap cache [ 1012.142991][T18686] Free swap = 124984kB [ 1012.143002][T18686] Total swap = 124996kB [ 1012.143013][T18686] 2097051 pages RAM [ 1012.143023][T18686] 0 pages HighMem/MovableOnly [ 1012.143033][T18686] 424675 pages reserved [ 1012.143044][T18686] 0 pages cma reserved [ 1012.399124][T18585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1012.418956][T18585] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.418984][T18585] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.419002][T18585] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.419030][T18585] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1013.045178][T13540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.045206][T13540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.200210][T18654] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1013.246365][T13540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.250011][T18654] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1013.274525][T13540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.317380][T18654] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1013.364744][T18654] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1013.550395][T18698] futex_wake_op: syz.6.3491 tries to shift op by 32; fix this program [ 1013.730580][T14823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1013.740911][T14823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1013.751206][T14823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1013.764322][T14823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1013.785506][T14823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1013.885504][T18654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1013.969178][T18654] 8021q: adding VLAN 0 to HW filter on device team0 [ 1013.982843][T18706] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3531'. [ 1014.039958][T13540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.047303][T13540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1014.179601][T18714] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1014.201702][ T51] Bluetooth: hci3: command tx timeout [ 1014.203044][T13053] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.214329][T13053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1014.278730][ T43] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1014.438243][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 1014.449865][ T43] usb 7-1: too many configurations: 22, using maximum allowed: 8 [ 1014.470930][T18721] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3534'. [ 1014.509521][T18721] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3534'. [ 1014.522230][ T43] usb 7-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=69.88 [ 1014.532237][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.542968][ T43] usb 7-1: Product: syz [ 1014.547313][ T43] usb 7-1: Manufacturer: syz [ 1014.552583][ T43] usb 7-1: SerialNumber: syz [ 1014.561656][ T43] usb 7-1: config 0 descriptor?? [ 1014.586031][ T43] as10x_usb: device has been detected [ 1014.601315][ T43] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1014.630535][ T43] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1014.657192][ T43] as10x_usb: error during firmware upload part1 [ 1014.664620][ T43] Registered device Abilis Systems DVB-Titan [ 1015.214195][T18654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1015.334814][T18707] chnl_net:caif_netlink_parms(): no params data found [ 1015.868575][ T51] Bluetooth: hci2: command tx timeout [ 1015.890357][T18707] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.897706][T18707] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.936487][T18707] bridge_slave_0: entered allmulticast mode [ 1015.944964][T18707] bridge_slave_0: entered promiscuous mode [ 1016.002968][T18707] bridge0: port 2(bridge_slave_1) entered blocking state [ 1016.021463][T18707] bridge0: port 2(bridge_slave_1) entered disabled state [ 1016.036805][T18707] bridge_slave_1: entered allmulticast mode [ 1016.045733][T18707] bridge_slave_1: entered promiscuous mode [ 1016.170983][T18707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1016.204877][T18707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1016.268169][ T51] Bluetooth: hci3: command tx timeout [ 1016.296277][ T43] usb 7-1: USB disconnect, device number 5 [ 1016.371914][T18654] veth0_vlan: entered promiscuous mode [ 1016.391310][ T43] Unregistered device Abilis Systems DVB-Titan [ 1016.398906][ T43] as10x_usb: device has been disconnected [ 1016.527388][T18707] team0: Port device team_slave_0 added [ 1016.556787][T18707] team0: Port device team_slave_1 added [ 1016.571156][T18654] veth1_vlan: entered promiscuous mode [ 1016.721452][T18707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1016.738636][T18707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.767816][T18743] fuse: Unknown parameter 'roo|mÙ}©wy' [ 1016.777225][T18743] netlink: 'syz.5.3540': attribute type 13 has an invalid length. [ 1016.785693][T18743] netlink: 'syz.5.3540': attribute type 27 has an invalid length. [ 1016.897361][T18707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1016.941337][T18707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1016.948523][T18707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.976140][T18707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1017.284825][T18707] hsr_slave_0: entered promiscuous mode [ 1017.357868][T18707] hsr_slave_1: entered promiscuous mode [ 1017.364460][T14823] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1017.378622][T14823] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1017.387363][T14823] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1017.400215][T14823] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1017.409528][T14823] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1017.481703][T18707] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1017.544903][T18707] Cannot create hsr debugfs directory [ 1017.585009][T18654] veth0_macvtap: entered promiscuous mode [ 1017.670381][T18654] veth1_macvtap: entered promiscuous mode [ 1017.952132][ T51] Bluetooth: hci2: command tx timeout [ 1018.621016][T18654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1018.649140][T18654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1018.869077][T18654] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.906244][T18654] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.923023][T18654] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.932147][T18654] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.222336][T18707] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1019.275771][T18707] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1019.290520][T18707] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1019.306587][T18749] chnl_net:caif_netlink_parms(): no params data found [ 1019.331377][T18707] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1019.468638][ T51] Bluetooth: hci0: command tx timeout [ 1019.552166][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1019.565435][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1019.672043][T18749] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.682444][T18749] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.690231][T18749] bridge_slave_0: entered allmulticast mode [ 1019.702533][T18749] bridge_slave_0: entered promiscuous mode [ 1019.712409][T18749] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.720867][T18749] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.729102][T18749] bridge_slave_1: entered allmulticast mode [ 1019.737646][T18749] bridge_slave_1: entered promiscuous mode [ 1019.805912][T13541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1019.811457][T18749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1019.843512][T13541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1019.855096][T18749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1019.971884][T18749] team0: Port device team_slave_0 added [ 1019.993527][T18749] team0: Port device team_slave_1 added [ 1020.028954][ T51] Bluetooth: hci2: command tx timeout [ 1020.135131][T18749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1020.143168][T18749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.172735][T18749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1020.185021][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 1020.185040][ T30] audit: type=1326 audit(1749229796.157:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18768 comm="syz.7.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054878e929 code=0x7ffc0000 [ 1020.190533][T18749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1020.221922][T18749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.234574][ T30] audit: type=1326 audit(1749229796.157:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18768 comm="syz.7.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f054878e929 code=0x7ffc0000 [ 1020.252137][T18749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1020.288741][T18772] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1020.301194][ T30] audit: type=1326 audit(1749229796.157:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18768 comm="syz.7.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054878e929 code=0x7ffc0000 [ 1020.312902][T18707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1020.383922][ T30] audit: type=1326 audit(1749229796.157:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18768 comm="syz.7.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f054878e929 code=0x7ffc0000 [ 1020.429038][ T30] audit: type=1326 audit(1749229796.267:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18768 comm="syz.7.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054878e929 code=0x7ffc0000 [ 1020.458118][ T30] audit: type=1326 audit(1749229796.267:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18768 comm="syz.7.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054878e929 code=0x7ffc0000 [ 1020.695247][T18749] hsr_slave_0: entered promiscuous mode [ 1020.719254][T18749] hsr_slave_1: entered promiscuous mode [ 1020.725493][T18749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1020.742276][T18749] Cannot create hsr debugfs directory [ 1020.846628][T18707] 8021q: adding VLAN 0 to HW filter on device team0 [ 1020.908720][T12679] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1021.000358][T13541] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.007788][T13541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1021.034925][T13541] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.042304][T13541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1021.075154][T12679] usb 7-1: New USB device found, idVendor=046d, idProduct=08b4, bcdDevice= e.32 [ 1021.084647][T12679] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.105636][T12679] usb 7-1: Product: syz [ 1021.110467][T12679] usb 7-1: Manufacturer: syz [ 1021.129394][T12679] usb 7-1: SerialNumber: syz [ 1021.151896][T12679] usb 7-1: config 0 descriptor?? [ 1021.172747][T12679] pwc: Logitech QuickCam Zoom (new model) USB webcam detected. [ 1021.553362][ T51] Bluetooth: hci0: command tx timeout [ 1021.602497][T18788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1021.752793][T18788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.081344][T12679] pwc: Failed to set LED on/off time (-71) [ 1022.103103][T12679] pwc: send_video_command error -71 [ 1022.109803][ T51] Bluetooth: hci2: command tx timeout [ 1022.127596][T12679] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1022.157539][T12679] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 1022.170805][T12679] usb 7-1: USB disconnect, device number 6 [ 1022.281371][T18707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1022.397335][T18749] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1022.470480][T18749] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1022.500473][T18749] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1022.578612][T18749] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1022.745468][T18707] veth0_vlan: entered promiscuous mode [ 1022.863105][T18707] veth1_vlan: entered promiscuous mode [ 1022.984543][T18802] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1023.179218][T18707] veth0_macvtap: entered promiscuous mode [ 1023.220692][T18749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1023.267354][T18707] veth1_macvtap: entered promiscuous mode [ 1023.414330][T18749] 8021q: adding VLAN 0 to HW filter on device team0 [ 1023.516232][T18707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1023.613456][T13541] bridge0: port 1(bridge_slave_0) entered blocking state [ 1023.620629][T13541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1023.629263][ T51] Bluetooth: hci0: command tx timeout [ 1023.723712][T18707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1023.741896][T13541] bridge0: port 2(bridge_slave_1) entered blocking state [ 1023.749214][T13541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1023.855917][T18707] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.946718][T18707] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.977739][T18707] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.987463][T18707] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.070401][T18749] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1024.094263][T18749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1024.238501][T18817] fuse: Unknown parameter 'roo|mÙ}©wy' [ 1024.259164][T18817] netlink: 'syz.5.3551': attribute type 13 has an invalid length. [ 1024.297330][T18817] netlink: 'syz.5.3551': attribute type 27 has an invalid length. [ 1024.540765][T13053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.556880][T13053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1024.632229][T18749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1024.933882][T13535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1024.954334][T13535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1025.121962][T18749] veth0_vlan: entered promiscuous mode [ 1025.539843][T18749] veth1_vlan: entered promiscuous mode [ 1025.708100][ T51] Bluetooth: hci0: command tx timeout [ 1025.736436][T18749] veth0_macvtap: entered promiscuous mode [ 1025.854975][T18749] veth1_macvtap: entered promiscuous mode [ 1025.882614][T18749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1025.919773][T18749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1025.956043][T18749] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.097063][T18749] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.112608][ T30] audit: type=1326 audit(1749229802.047:2120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18827 comm="syz.8.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5258e929 code=0x7ffc0000 [ 1026.177310][ T30] audit: type=1326 audit(1749229802.047:2121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18827 comm="syz.8.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7f7d5258e929 code=0x7ffc0000 [ 1026.262668][ T30] audit: type=1326 audit(1749229802.047:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18827 comm="syz.8.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5258e929 code=0x7ffc0000 [ 1026.295553][T18749] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.321572][T18749] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.448129][ T3083] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1026.472711][ T30] audit: type=1326 audit(1749229802.047:2123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18827 comm="syz.8.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f7d5258e929 code=0x7ffc0000 [ 1026.664985][T13053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1026.675294][ T3083] usb 9-1: Using ep0 maxpacket: 16 [ 1026.687265][ T30] audit: type=1326 audit(1749229802.047:2124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18827 comm="syz.8.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5258e929 code=0x7ffc0000 [ 1026.718329][T13053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1026.764684][ T3083] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1026.802542][ T3083] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1026.866957][ T30] audit: type=1326 audit(1749229802.047:2125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18827 comm="syz.8.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f7d5258e929 code=0x7ffc0000 [ 1026.893584][ T3083] usb 9-1: Product: syz [ 1026.908438][ T3083] usb 9-1: Manufacturer: syz [ 1026.949236][ T3083] usb 9-1: SerialNumber: syz [ 1027.004510][ T3083] usb 9-1: config 0 descriptor?? [ 1027.026237][T13535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1027.027029][ T30] audit: type=1326 audit(1749229802.047:2126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18827 comm="syz.8.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5258e929 code=0x7ffc0000 [ 1027.096188][T13535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1027.225141][ T30] audit: type=1326 audit(1749229802.047:2127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18827 comm="syz.8.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f7d5258e929 code=0x7ffc0000 [ 1027.274488][ T3083] usb 9-1: USB disconnect, device number 2 [ 1027.365045][ T6055] udevd[6055]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1027.398301][ T30] audit: type=1326 audit(1749229802.047:2128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18827 comm="syz.8.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d5258e929 code=0x7ffc0000 [ 1027.707571][ T30] audit: type=1326 audit(1749229802.047:2129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18827 comm="syz.8.3528" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7d5258e929 code=0x7ffc0000 [ 1027.772161][T18836] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3554'. [ 1028.167757][T18848] CUSE: DEVNAME unspecified [ 1029.187523][T18857] netlink: 'syz.5.3557': attribute type 8 has an invalid length. [ 1029.302573][T18844] FAULT_INJECTION: forcing a failure. [ 1029.302573][T18844] name failslab, interval 1, probability 0, space 0, times 0 [ 1029.315729][T18844] CPU: 1 UID: 0 PID: 18844 Comm: syz.7.3556 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 1029.315747][T18844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1029.315754][T18844] Call Trace: [ 1029.315759][T18844] [ 1029.315765][T18844] dump_stack_lvl+0x189/0x250 [ 1029.315833][T18844] ? __pfx____ratelimit+0x10/0x10 [ 1029.315849][T18844] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1029.315866][T18844] ? __pfx__printk+0x10/0x10 [ 1029.315884][T18844] ? is_bpf_text_address+0x26/0x2b0 [ 1029.315899][T18844] should_fail_ex+0x414/0x560 [ 1029.315918][T18844] should_failslab+0xa8/0x100 [ 1029.315932][T18844] __kmalloc_noprof+0xcb/0x4f0 [ 1029.315943][T18844] ? dev_prep_valid_name+0x193/0x610 [ 1029.315962][T18844] dev_prep_valid_name+0x193/0x610 [ 1029.315980][T18844] ? __pfx___might_resched+0x10/0x10 [ 1029.315991][T18844] ? __pfx_dev_prep_valid_name+0x10/0x10 [ 1029.316011][T18844] ? __raw_spin_lock_init+0x45/0x100 [ 1029.316026][T18844] register_netdevice+0x542/0x1ae0 [ 1029.316050][T18844] ? __pfx_register_netdevice+0x10/0x10 [ 1029.316069][T18844] ? ip_tunnel_newlink+0x237/0x8b0 [ 1029.316089][T18844] ip_tunnel_newlink+0x261/0x8b0 [ 1029.316108][T18844] ? __pfx_ip_tunnel_newlink+0x10/0x10 [ 1029.316124][T18844] ? __asan_memset+0x22/0x50 [ 1029.316147][T18844] ? ipgre_netlink_parms+0x666/0x9c0 [ 1029.316164][T18844] ipgre_newlink+0x354/0x420 [ 1029.316179][T18844] ? __pfx_ipgre_newlink+0x10/0x10 [ 1029.316202][T18844] ? __pfx_ipgre_newlink+0x10/0x10 [ 1029.316216][T18844] rtnl_newlink_create+0x30d/0xb00 [ 1029.316232][T18844] ? __mutex_lock+0x51b/0xe80 [ 1029.316250][T18844] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1029.316261][T18844] ? rtnl_newlink+0x8db/0x1c70 [ 1029.316278][T18844] ? __pfx___mutex_lock+0x10/0x10 [ 1029.316300][T18844] ? ns_capable+0x8a/0xf0 [ 1029.316319][T18844] rtnl_newlink+0x16d6/0x1c70 [ 1029.316336][T18844] ? netlink_sendmsg+0x805/0xb30 [ 1029.316355][T18844] ? __pfx_rtnl_newlink+0x10/0x10 [ 1029.316385][T18844] ? kasan_quarantine_put+0xdd/0x220 [ 1029.316401][T18844] ? lockdep_hardirqs_on+0x9c/0x150 [ 1029.316419][T18844] ? nlmon_xmit+0xb0/0x100 [ 1029.316428][T18844] ? kmem_cache_free+0x18f/0x400 [ 1029.316445][T18844] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1029.316461][T18844] ? lockdep_hardirqs_on+0x9c/0x150 [ 1029.316475][T18844] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1029.316492][T18844] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1029.316510][T18844] ? __dev_queue_xmit+0x27e/0x3a70 [ 1029.316532][T18844] ? __lock_acquire+0xab9/0xd20 [ 1029.316563][T18844] ? __pfx_rtnl_newlink+0x10/0x10 [ 1029.316579][T18844] rtnetlink_rcv_msg+0x7cc/0xb70 [ 1029.316598][T18844] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1029.316614][T18844] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1029.316628][T18844] ? ref_tracker_free+0x63a/0x7d0 [ 1029.316643][T18844] ? __copy_skb_header+0xa7/0x550 [ 1029.316657][T18844] ? __pfx_ref_tracker_free+0x10/0x10 [ 1029.316679][T18844] netlink_rcv_skb+0x205/0x470 [ 1029.316692][T18844] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1029.316715][T18844] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1029.316734][T18844] ? netlink_deliver_tap+0x2e/0x1b0 [ 1029.316745][T18844] ? netlink_deliver_tap+0x2e/0x1b0 [ 1029.316760][T18844] netlink_unicast+0x758/0x8d0 [ 1029.316789][T18844] netlink_sendmsg+0x805/0xb30 [ 1029.316807][T18844] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1029.316820][T18844] ? aa_sock_msg_perm+0x94/0x160 [ 1029.316836][T18844] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1029.316850][T18844] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1029.316862][T18844] __sock_sendmsg+0x219/0x270 [ 1029.316880][T18844] ____sys_sendmsg+0x505/0x830 [ 1029.316896][T18844] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1029.316914][T18844] ? import_iovec+0x74/0xa0 [ 1029.316929][T18844] ___sys_sendmsg+0x21f/0x2a0 [ 1029.316944][T18844] ? __pfx____sys_sendmsg+0x10/0x10 [ 1029.316979][T18844] ? __fget_files+0x2a/0x420 [ 1029.316992][T18844] ? __fget_files+0x3a0/0x420 [ 1029.317012][T18844] __x64_sys_sendmsg+0x19b/0x260 [ 1029.317026][T18844] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1029.317045][T18844] ? __pfx_ksys_write+0x10/0x10 [ 1029.317055][T18844] ? rcu_is_watching+0x15/0xb0 [ 1029.317069][T18844] ? do_syscall_64+0xbe/0x3b0 [ 1029.317087][T18844] do_syscall_64+0xfa/0x3b0 [ 1029.317100][T18844] ? lockdep_hardirqs_on+0x9c/0x150 [ 1029.317114][T18844] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.317125][T18844] ? clear_bhb_loop+0x60/0xb0 [ 1029.317139][T18844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.317151][T18844] RIP: 0033:0x7f054878e929 [ 1029.317163][T18844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1029.317173][T18844] RSP: 002b:00007f05495bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1029.317188][T18844] RAX: ffffffffffffffda RBX: 00007f05489b5fa0 RCX: 00007f054878e929 [ 1029.317196][T18844] RDX: 0000000000040000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1029.317204][T18844] RBP: 00007f05495bb090 R08: 0000000000000000 R09: 0000000000000000 [ 1029.317212][T18844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1029.317219][T18844] R13: 0000000000000000 R14: 00007f05489b5fa0 R15: 00007f0548adfa28 [ 1029.317237][T18844] [ 1030.409082][T18862] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3558'. [ 1030.879279][T18869] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3559'. [ 1031.234553][T18878] binder: 18870:18878 ioctl c0306201 2000000003c0 returned -14 [ 1031.258897][T18875] binder: 18870:18875 ioctl 40284504 200000000700 returned -22 [ 1032.214373][T18888] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3563'. [ 1032.308313][ T43] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1032.685440][ T43] usb 9-1: Using ep0 maxpacket: 16 [ 1032.701107][ T43] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1032.719730][ T43] usb 9-1: config 0 has no interface number 0 [ 1032.803234][ T43] usb 9-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1032.853277][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.902673][ T43] usb 9-1: Product: syz [ 1032.916812][ T43] usb 9-1: Manufacturer: syz [ 1032.947321][ T43] usb 9-1: SerialNumber: syz [ 1032.996448][ T43] usb 9-1: config 0 descriptor?? [ 1033.047609][ T43] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1033.600113][T18902] fuse: Unknown parameter 'roo|mÙ}©wy' [ 1033.618308][T18902] netlink: 'syz.9.3567': attribute type 13 has an invalid length. [ 1033.661757][T18902] netlink: 'syz.9.3567': attribute type 27 has an invalid length. [ 1034.525491][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1034.525548][ T30] audit: type=1326 audit(1749229810.357:2132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18899 comm="syz.5.3568" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe5e318e929 code=0x0 [ 1034.573883][T18914] batadv1: entered promiscuous mode [ 1036.268350][ T43] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1036.534372][ T43] usb 7-1: config 0 has no interfaces? [ 1036.548339][ T43] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 1036.559533][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.574572][ T43] usb 7-1: Product: syz [ 1036.593518][ T43] usb 7-1: Manufacturer: syz [ 1036.615344][ T43] usb 7-1: SerialNumber: syz [ 1036.881782][ T43] usb 7-1: config 0 descriptor?? [ 1036.933509][ T9] usb 9-1: USB disconnect, device number 3 [ 1037.139166][T18931] netlink: 'syz.8.3576': attribute type 1 has an invalid length. [ 1037.154207][T18931] nlmon0: entered promiscuous mode [ 1037.160450][T18931] nlmon0: entered allmulticast mode [ 1037.401893][T18933] syz.5.3577: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 1037.422356][T18933] CPU: 0 UID: 0 PID: 18933 Comm: syz.5.3577 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 1037.422389][T18933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1037.422402][T18933] Call Trace: [ 1037.422411][T18933] [ 1037.422422][T18933] dump_stack_lvl+0x189/0x250 [ 1037.422462][T18933] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1037.422489][T18933] ? __pfx__printk+0x10/0x10 [ 1037.422509][T18933] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1037.422531][T18933] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1037.422552][T18933] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1037.422577][T18933] warn_alloc+0x214/0x310 [ 1037.422599][T18933] ? stack_depot_save_flags+0x40/0x900 [ 1037.422629][T18933] ? __pfx_warn_alloc+0x10/0x10 [ 1037.422653][T18933] ? kasan_save_track+0x4f/0x80 [ 1037.422673][T18933] ? xskq_create+0x56/0x170 [ 1037.422692][T18933] ? xsk_init_queue+0xb0/0x110 [ 1037.422712][T18933] ? xsk_setsockopt+0x43f/0x710 [ 1037.422731][T18933] ? do_sock_setsockopt+0x25a/0x3e0 [ 1037.422748][T18933] ? __x64_sys_setsockopt+0x18b/0x220 [ 1037.422765][T18933] ? do_syscall_64+0xfa/0x3b0 [ 1037.422787][T18933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.422815][T18933] __vmalloc_node_range_noprof+0x125/0x12f0 [ 1037.422867][T18933] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1037.422892][T18933] ? xskq_create+0x56/0x170 [ 1037.422918][T18933] ? __kasan_kmalloc+0x93/0xb0 [ 1037.422941][T18933] vmalloc_user_noprof+0xad/0xf0 [ 1037.422964][T18933] ? xskq_create+0xbf/0x170 [ 1037.422990][T18933] xskq_create+0xbf/0x170 [ 1037.423015][T18933] xsk_init_queue+0xb0/0x110 [ 1037.423038][T18933] xsk_setsockopt+0x43f/0x710 [ 1037.423061][T18933] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1037.423090][T18933] ? __lock_acquire+0xab9/0xd20 [ 1037.423126][T18933] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1037.423150][T18933] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1037.423174][T18933] do_sock_setsockopt+0x25a/0x3e0 [ 1037.423198][T18933] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1037.423225][T18933] ? __fget_files+0x2a/0x420 [ 1037.423258][T18933] __x64_sys_setsockopt+0x18b/0x220 [ 1037.423287][T18933] do_syscall_64+0xfa/0x3b0 [ 1037.423312][T18933] ? lockdep_hardirqs_on+0x9c/0x150 [ 1037.423334][T18933] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.423352][T18933] ? clear_bhb_loop+0x60/0xb0 [ 1037.423375][T18933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.423394][T18933] RIP: 0033:0x7fe5e318e929 [ 1037.423414][T18933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1037.423432][T18933] RSP: 002b:00007fe5e3f5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1037.423456][T18933] RAX: ffffffffffffffda RBX: 00007fe5e33b5fa0 RCX: 00007fe5e318e929 [ 1037.423471][T18933] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1037.423484][T18933] RBP: 00007fe5e3210b39 R08: 0000000000000004 R09: 0000000000000000 [ 1037.423498][T18933] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1037.423511][T18933] R13: 0000000000000000 R14: 00007fe5e33b5fa0 R15: 00007fe5e34dfa28 [ 1037.423545][T18933] [ 1037.835048][T18933] Mem-Info: [ 1037.840767][T18933] active_anon:7135 inactive_anon:2 isolated_anon:0 [ 1037.840767][T18933] active_file:20523 inactive_file:40286 isolated_file:0 [ 1037.840767][T18933] unevictable:768 dirty:182 writeback:0 [ 1037.840767][T18933] slab_reclaimable:6558 slab_unreclaimable:124261 [ 1037.840767][T18933] mapped:31162 shmem:1375 pagetables:1478 [ 1037.840767][T18933] sec_pagetables:0 bounce:0 [ 1037.840767][T18933] kernel_misc_reclaimable:0 [ 1037.840767][T18933] free:1280833 free_pcp:10262 free_cma:0 [ 1038.048019][ T9] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1038.128570][T18933] Node 0 active_anon:29656kB inactive_anon:8kB active_file:82060kB inactive_file:160940kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:124584kB dirty:728kB writeback:0kB shmem:3960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14768kB pagetables:5880kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1038.198316][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 1038.213057][T18933] Node 1 active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1038.250471][T18933] Node 0 DMA free:15356kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1038.264479][ T9] usb 9-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1038.328180][T18933] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 1038.349991][T18933] Node 0 DMA32 free:1200312kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29612kB inactive_anon:8kB active_file:82060kB inactive_file:159108kB unevictable:1536kB writepending:724kB present:3129332kB managed:2561080kB mlocked:0kB bounce:0kB free_pcp:30276kB local_pcp:21604kB free_cma:0kB [ 1038.406393][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1038.413392][ T9] usb 9-1: New USB device found, idVendor=057e, idProduct=2017, bcdDevice= 0.00 [ 1038.422730][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.443978][T18933] lowmem_reserve[]: 0 0 1 1 1 [ 1038.453610][T18933] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1038.491624][T18933] lowmem_reserve[]: 0 0 0 0 0 [ 1038.493239][ T9] usb 9-1: config 0 descriptor?? [ 1038.496704][T18933] Node 1 Normal free:3907520kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:204kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:10252kB local_pcp:0kB free_cma:0kB [ 1038.556223][T18933] lowmem_reserve[]: 0 0 0 0 0 [ 1038.562682][T18933] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 1038.584703][T18933] Node 0 DMA32: 1168*4kB (UME) 385*8kB (UME) 687*16kB (UME) 603*32kB (UME) 271*64kB (UME) 92*128kB (ME) 41*256kB (ME) 113*512kB (UME) 32*1024kB (UME) 2*2048kB (U) 251*4096kB (UM) = 1200472kB [ 1038.623161][T18933] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1038.638231][T18933] Node 1 Normal: 70*4kB (UM) 41*8kB (UE) 42*16kB (UME) 162*32kB (UE) 72*64kB (UME) 31*128kB (UME) 9*256kB (UME) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 948*4096kB (UM) = 3907520kB [ 1038.656936][T18933] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1038.680914][T18933] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1038.690946][ T3083] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 1038.712875][T18933] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1038.735764][T18933] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1038.745999][T18933] 62182 total pagecache pages [ 1038.751802][T18933] 3 pages in swap cache [ 1038.762377][T18933] Free swap = 124984kB [ 1038.766591][T18933] Total swap = 124996kB [ 1038.773315][T18933] 2097051 pages RAM [ 1038.777793][T18933] 0 pages HighMem/MovableOnly [ 1038.791204][T18933] 424675 pages reserved [ 1038.795485][T18933] 0 pages cma reserved [ 1038.861013][ T3083] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1038.873629][ T3083] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1038.904007][ T3083] usb 10-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 1038.930717][ T3083] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.944784][ T3083] usb 10-1: config 0 descriptor?? [ 1038.956871][T18945] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 1038.981797][ T9] nintendo 0003:057E:2017.0018: unknown main item tag 0x0 [ 1038.990603][ T9] nintendo 0003:057E:2017.0018: unbalanced delimiter at end of report description [ 1039.002346][ T9] nintendo 0003:057E:2017.0018: HID parse failed [ 1039.023464][ T9] nintendo 0003:057E:2017.0018: probe - fail = -22 [ 1039.030606][ T9] nintendo 0003:057E:2017.0018: probe with driver nintendo failed with error -22 [ 1039.158558][T18716] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1039.327246][T18716] usb 6-1: Using ep0 maxpacket: 8 [ 1039.350671][T18716] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1039.361494][T18716] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.369958][T18716] usb 6-1: Product: syz [ 1039.374625][T18716] usb 6-1: Manufacturer: syz [ 1039.380002][T18716] usb 6-1: SerialNumber: syz [ 1039.393361][T18716] usb 6-1: config 0 descriptor?? [ 1039.496460][ T9] usb 7-1: USB disconnect, device number 7 [ 1039.587132][ T3083] hid (null): unknown global tag 0xe [ 1039.657570][T18716] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1039.684617][ T3083] asus 0003:0B05:18C6.0019: reserved main item tag 0xe [ 1039.698149][ T3083] asus 0003:0B05:18C6.0019: unknown main item tag 0x4 [ 1039.717136][ T3083] asus 0003:0B05:18C6.0019: unknown main item tag 0x1 [ 1039.737725][ T30] audit: type=1326 audit(1749229815.697:2133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18952 comm="syz.6.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7038e929 code=0x7ffc0000 [ 1039.774074][ T3083] asus 0003:0B05:18C6.0019: unknown global tag 0xe [ 1039.795681][ T3083] asus 0003:0B05:18C6.0019: item 0 0 1 14 parsing failed [ 1039.811429][T18951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1039.843002][T18951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1039.855245][ T3083] asus 0003:0B05:18C6.0019: Asus hid parse failed: -22 [ 1039.864518][ T30] audit: type=1326 audit(1749229815.697:2134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18952 comm="syz.6.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f8b7038e929 code=0x7ffc0000 [ 1039.894934][ T3083] asus 0003:0B05:18C6.0019: probe with driver asus failed with error -22 [ 1039.912140][ T30] audit: type=1326 audit(1749229815.697:2135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18952 comm="syz.6.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7038e929 code=0x7ffc0000 [ 1039.944220][ T30] audit: type=1326 audit(1749229815.697:2136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18952 comm="syz.6.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8b7038e929 code=0x7ffc0000 [ 1040.030216][ T30] audit: type=1326 audit(1749229815.697:2137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18952 comm="syz.6.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7038e929 code=0x7ffc0000 [ 1040.087521][T18951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1040.130777][T18951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.134954][ T30] audit: type=1326 audit(1749229815.697:2138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18952 comm="syz.6.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f8b7038e929 code=0x7ffc0000 [ 1040.160567][T18951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1040.216820][T18951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1040.250338][ T30] audit: type=1326 audit(1749229815.697:2139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18952 comm="syz.6.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7038e929 code=0x7ffc0000 [ 1040.350596][ T30] audit: type=1326 audit(1749229815.697:2140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18952 comm="syz.6.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8b7038e929 code=0x7ffc0000 [ 1040.376188][ T30] audit: type=1326 audit(1749229815.697:2141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18952 comm="syz.6.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8b7038e929 code=0x7ffc0000 [ 1040.400484][ T30] audit: type=1326 audit(1749229815.697:2142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18952 comm="syz.6.3583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8b7038e929 code=0x7ffc0000 [ 1040.794037][ T5894] usb 9-1: USB disconnect, device number 4 [ 1041.209054][T18970] fuse: Unknown parameter 'roo|mÙ}©wy' [ 1041.216514][T18970] netlink: 'syz.8.3589': attribute type 13 has an invalid length. [ 1041.224762][T18970] netlink: 'syz.8.3589': attribute type 27 has an invalid length. [ 1041.384271][T18716] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1041.485696][T18716] usb 6-1: USB disconnect, device number 18 [ 1041.993550][T18716] usb 10-1: USB disconnect, device number 2 [ 1042.376510][T18980] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3590'. [ 1042.389399][T18980] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3590'. [ 1043.120714][T18990] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3594'. [ 1043.131725][T18990] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 1043.248631][T18990] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 1043.363104][T18990] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1044.258562][T19007] FAULT_INJECTION: forcing a failure. [ 1044.258562][T19007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1044.290390][T19007] CPU: 1 UID: 0 PID: 19007 Comm: syz.9.3600 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 1044.290412][T19007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1044.290419][T19007] Call Trace: [ 1044.290425][T19007] [ 1044.290431][T19007] dump_stack_lvl+0x189/0x250 [ 1044.290454][T19007] ? __pfx____ratelimit+0x10/0x10 [ 1044.290469][T19007] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1044.290486][T19007] ? __pfx__printk+0x10/0x10 [ 1044.290499][T19007] ? __might_fault+0xb0/0x130 [ 1044.290518][T19007] should_fail_ex+0x414/0x560 [ 1044.290537][T19007] _copy_from_user+0x2d/0xb0 [ 1044.290551][T19007] snd_pcm_oss_write+0x84f/0x11a0 [ 1044.290579][T19007] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 1044.290595][T19007] ? bpf_lsm_file_permission+0x9/0x20 [ 1044.290611][T19007] ? security_file_permission+0x75/0x290 [ 1044.290625][T19007] ? rw_verify_area+0x258/0x650 [ 1044.290642][T19007] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 1044.290658][T19007] vfs_write+0x27e/0xa90 [ 1044.290675][T19007] ? __pfx_vfs_write+0x10/0x10 [ 1044.290687][T19007] ? __fget_files+0x2a/0x420 [ 1044.290702][T19007] ? __fget_files+0x2a/0x420 [ 1044.290713][T19007] ? __fget_files+0x3a0/0x420 [ 1044.290725][T19007] ? __fget_files+0x2a/0x420 [ 1044.290743][T19007] ksys_write+0x145/0x250 [ 1044.290756][T19007] ? __pfx_ksys_write+0x10/0x10 [ 1044.290774][T19007] ? do_syscall_64+0xbe/0x3b0 [ 1044.290792][T19007] do_syscall_64+0xfa/0x3b0 [ 1044.290806][T19007] ? lockdep_hardirqs_on+0x9c/0x150 [ 1044.290820][T19007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.290831][T19007] ? clear_bhb_loop+0x60/0xb0 [ 1044.290845][T19007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.290857][T19007] RIP: 0033:0x7fc86e58e929 [ 1044.290868][T19007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1044.290879][T19007] RSP: 002b:00007fc86f445038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1044.290893][T19007] RAX: ffffffffffffffda RBX: 00007fc86e7b6080 RCX: 00007fc86e58e929 [ 1044.290901][T19007] RDX: 0000000000004000 RSI: 00002000000012c0 RDI: 0000000000000005 [ 1044.290909][T19007] RBP: 00007fc86f445090 R08: 0000000000000000 R09: 0000000000000000 [ 1044.290916][T19007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1044.290923][T19007] R13: 0000000000000001 R14: 00007fc86e7b6080 R15: 00007fc86e8dfa28 [ 1044.290941][T19007] [ 1044.678317][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1044.858129][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 1044.885014][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1044.926887][ T9] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 1044.957359][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.002062][ T9] usb 7-1: config 0 descriptor?? [ 1045.128723][T19016] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3604'. [ 1045.233521][T19018] FAULT_INJECTION: forcing a failure. [ 1045.233521][T19018] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1045.233583][T19018] CPU: 0 UID: 0 PID: 19018 Comm: syz.5.3605 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 1045.233603][T19018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1045.233614][T19018] Call Trace: [ 1045.233621][T19018] [ 1045.233629][T19018] dump_stack_lvl+0x189/0x250 [ 1045.233659][T19018] ? __pfx____ratelimit+0x10/0x10 [ 1045.233684][T19018] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1045.233715][T19018] ? __pfx__printk+0x10/0x10 [ 1045.233736][T19018] ? __might_fault+0xb0/0x130 [ 1045.233768][T19018] should_fail_ex+0x414/0x560 [ 1045.233798][T19018] _copy_from_iter+0x1db/0x16f0 [ 1045.233830][T19018] ? rcu_is_watching+0x15/0xb0 [ 1045.233850][T19018] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1045.233882][T19018] ? __pfx__copy_from_iter+0x10/0x10 [ 1045.233912][T19018] ? __build_skb_around+0x257/0x3e0 [ 1045.233936][T19018] ? netlink_sendmsg+0x642/0xb30 [ 1045.233953][T19018] ? skb_put+0x11b/0x210 [ 1045.233976][T19018] netlink_sendmsg+0x6b2/0xb30 [ 1045.234004][T19018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1045.234037][T19018] ? aa_sock_msg_perm+0x94/0x160 [ 1045.234065][T19018] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1045.234090][T19018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1045.234111][T19018] __sock_sendmsg+0x219/0x270 [ 1045.234140][T19018] ____sys_sendmsg+0x52d/0x830 [ 1045.234169][T19018] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1045.234200][T19018] ? import_iovec+0x74/0xa0 [ 1045.234225][T19018] ___sys_sendmsg+0x21f/0x2a0 [ 1045.234250][T19018] ? __pfx____sys_sendmsg+0x10/0x10 [ 1045.234332][T19018] ? __fget_files+0x2a/0x420 [ 1045.234367][T19018] ? __fget_files+0x3a0/0x420 [ 1045.234430][T19018] __sys_sendmmsg+0x227/0x430 [ 1045.234459][T19018] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1045.234478][T19018] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1045.234547][T19018] ? ksys_write+0x22a/0x250 [ 1045.234568][T19018] ? __pfx_ksys_write+0x10/0x10 [ 1045.234596][T19018] __x64_sys_sendmmsg+0xa0/0xc0 [ 1045.234617][T19018] do_syscall_64+0xfa/0x3b0 [ 1045.234643][T19018] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.234660][T19018] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1045.234679][T19018] ? clear_bhb_loop+0x60/0xb0 [ 1045.234700][T19018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.234719][T19018] RIP: 0033:0x7fe5e318e929 [ 1045.234737][T19018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1045.234752][T19018] RSP: 002b:00007fe5e3f5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1045.234774][T19018] RAX: ffffffffffffffda RBX: 00007fe5e33b5fa0 RCX: 00007fe5e318e929 [ 1045.234788][T19018] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1045.234802][T19018] RBP: 00007fe5e3f5b090 R08: 0000000000000000 R09: 0000000000000000 [ 1045.234814][T19018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1045.234826][T19018] R13: 0000000000000000 R14: 00007fe5e33b5fa0 R15: 00007fe5e34dfa28 [ 1045.234858][T19018] [ 1045.535747][T19021] fuse: Invalid rootmode [ 1046.023940][T19006] tty tty32: ldisc open failed (-12), clearing slot 31 [ 1046.200456][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 1046.221201][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1046.676370][ T9] usb 7-1: USB disconnect, device number 8 [ 1047.428707][ T5894] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1047.642525][ T5894] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1047.692559][T19041] fuse: Unknown parameter 'roo|mÙ}©wy' [ 1047.700002][T19041] netlink: 'syz.7.3612': attribute type 13 has an invalid length. [ 1047.708097][T19041] netlink: 'syz.7.3612': attribute type 27 has an invalid length. [ 1047.813795][ T5894] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1047.866102][ T5894] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1047.866123][ T5894] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1047.866137][ T5894] usb 9-1: Product: syz [ 1047.866146][ T5894] usb 9-1: Manufacturer: syz [ 1047.866156][ T5894] usb 9-1: SerialNumber: syz [ 1047.868492][ T5894] usb 9-1: config 0 descriptor?? [ 1047.902876][ T5894] usb 9-1: selecting invalid altsetting 0 [ 1048.106916][ T5894] usb 9-1: USB disconnect, device number 5 [ 1048.215711][ T5891] udevd[5891]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1048.757254][T19052] FAULT_INJECTION: forcing a failure. [ 1048.757254][T19052] name failslab, interval 1, probability 0, space 0, times 0 [ 1048.849883][T19052] CPU: 0 UID: 0 PID: 19052 Comm: syz.5.3616 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 1048.849912][T19052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1048.849923][T19052] Call Trace: [ 1048.849930][T19052] [ 1048.849940][T19052] dump_stack_lvl+0x189/0x250 [ 1048.849975][T19052] ? __pfx____ratelimit+0x10/0x10 [ 1048.850000][T19052] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1048.850028][T19052] ? __pfx__printk+0x10/0x10 [ 1048.850054][T19052] ? __pfx___might_resched+0x10/0x10 [ 1048.850076][T19052] should_fail_ex+0x414/0x560 [ 1048.850107][T19052] should_failslab+0xa8/0x100 [ 1048.850131][T19052] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1048.850150][T19052] ? __alloc_skb+0x112/0x2d0 [ 1048.850173][T19052] __alloc_skb+0x112/0x2d0 [ 1048.850197][T19052] netlink_sendmsg+0x5c6/0xb30 [ 1048.850227][T19052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1048.850252][T19052] ? aa_sock_msg_perm+0x94/0x160 [ 1048.850278][T19052] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1048.850303][T19052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1048.850323][T19052] __sock_sendmsg+0x219/0x270 [ 1048.850354][T19052] ____sys_sendmsg+0x505/0x830 [ 1048.850383][T19052] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1048.850414][T19052] ? import_iovec+0x74/0xa0 [ 1048.850439][T19052] ___sys_sendmsg+0x21f/0x2a0 [ 1048.850463][T19052] ? __pfx____sys_sendmsg+0x10/0x10 [ 1048.850523][T19052] ? __fget_files+0x2a/0x420 [ 1048.850544][T19052] ? __fget_files+0x3a0/0x420 [ 1048.850577][T19052] __x64_sys_sendmsg+0x19b/0x260 [ 1048.850602][T19052] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1048.850634][T19052] ? __pfx_ksys_write+0x10/0x10 [ 1048.850651][T19052] ? rcu_is_watching+0x15/0xb0 [ 1048.850675][T19052] ? do_syscall_64+0xbe/0x3b0 [ 1048.850705][T19052] do_syscall_64+0xfa/0x3b0 [ 1048.850727][T19052] ? lockdep_hardirqs_on+0x9c/0x150 [ 1048.850750][T19052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.850768][T19052] ? clear_bhb_loop+0x60/0xb0 [ 1048.850792][T19052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.850822][T19052] RIP: 0033:0x7fe5e318e929 [ 1048.850841][T19052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1048.850858][T19052] RSP: 002b:00007fe5e3f5b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1048.850879][T19052] RAX: ffffffffffffffda RBX: 00007fe5e33b5fa0 RCX: 00007fe5e318e929 [ 1048.850894][T19052] RDX: 0000000000000080 RSI: 0000200000000380 RDI: 0000000000000003 [ 1048.850907][T19052] RBP: 00007fe5e3f5b090 R08: 0000000000000000 R09: 0000000000000000 [ 1048.850920][T19052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1048.850932][T19052] R13: 0000000000000000 R14: 00007fe5e33b5fa0 R15: 00007fe5e34dfa28 [ 1048.850963][T19052] [ 1049.986087][ T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1050.158369][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 1050.198842][ T9] usb 7-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1050.363990][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1050.398666][ T9] usb 7-1: New USB device found, idVendor=057e, idProduct=2017, bcdDevice= 0.00 [ 1050.572589][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.643637][ T9] usb 7-1: config 0 descriptor?? [ 1051.109727][ T9] nintendo 0003:057E:2017.001A: unknown main item tag 0x0 [ 1051.117132][ T9] nintendo 0003:057E:2017.001A: unbalanced delimiter at end of report description [ 1051.158540][ T9] nintendo 0003:057E:2017.001A: HID parse failed [ 1051.186373][ T9] nintendo 0003:057E:2017.001A: probe - fail = -22 [ 1051.209205][ T9] nintendo 0003:057E:2017.001A: probe with driver nintendo failed with error -22 [ 1051.676221][T19091] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3626'. [ 1051.676292][T19091] netlink: 52 bytes leftover after parsing attributes in process `syz.8.3626'. [ 1051.999710][ T5894] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 1052.175072][ T5894] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1052.226544][T19097] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3629'. [ 1052.354436][ T5894] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 1052.374524][ T5894] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.408051][ T5894] usb 6-1: Product: syz [ 1052.412369][ T5894] usb 6-1: Manufacturer: syz [ 1052.417309][ T5894] usb 6-1: SerialNumber: syz [ 1052.493893][ T5894] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 1052.753781][T18716] usb 7-1: USB disconnect, device number 9 [ 1052.929663][ T5894] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 1053.158658][T19105] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3632'. [ 1053.179277][T19105] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3632'. [ 1054.678272][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.695670][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.702115][T18716] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 1054.742906][ T5894] usb 6-1: USB disconnect, device number 19 [ 1054.860023][T18716] usb 7-1: config 0 has an invalid interface number: 81 but max is 0 [ 1054.868490][T18716] usb 7-1: config 0 has no interface number 0 [ 1054.900512][T18716] usb 7-1: config 0 interface 81 altsetting 6 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1054.924173][T18716] usb 7-1: config 0 interface 81 has no altsetting 0 [ 1054.942594][T18716] usb 7-1: New USB device found, idVendor=07b0, idProduct=0006, bcdDevice=40.a8 [ 1054.952199][T18716] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.963299][T18716] usb 7-1: Product: syz [ 1054.972269][T18716] usb 7-1: Manufacturer: syz [ 1054.982428][T18716] usb 7-1: SerialNumber: syz [ 1055.003712][T18716] usb 7-1: config 0 descriptor?? [ 1055.020164][T19115] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1055.105884][T14823] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1055.117397][T14823] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1055.136196][T14823] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1055.153258][T14823] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1055.166983][T14823] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1055.282896][T18716] HFC-S_USB 7-1:0.81: probe with driver HFC-S_USB failed with error -5 [ 1055.312961][T18716] usb 7-1: USB disconnect, device number 10 [ 1055.555686][T19121] chnl_net:caif_netlink_parms(): no params data found [ 1055.750040][T19121] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.750239][T19121] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.750437][T19121] bridge_slave_0: entered allmulticast mode [ 1055.752781][T19121] bridge_slave_0: entered promiscuous mode [ 1055.758139][T19121] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.758326][T19121] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.758840][T19121] bridge_slave_1: entered allmulticast mode [ 1055.761018][T19121] bridge_slave_1: entered promiscuous mode [ 1055.864267][T19121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1055.885810][T19121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1056.086380][T19121] team0: Port device team_slave_0 added [ 1056.099978][T19121] team0: Port device team_slave_1 added [ 1056.240825][T19121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1056.280494][T19121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1056.325174][T19121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1056.350862][T19121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1056.366323][T19121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1056.397168][T19141] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3643'. [ 1056.408245][ T3083] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1056.416346][T19121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.416511][T19141] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3643'. [ 1056.619602][ T3083] usb 10-1: Using ep0 maxpacket: 8 [ 1056.640083][ T3083] usb 10-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1056.683156][ T3083] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1056.702160][ T3083] usb 10-1: New USB device found, idVendor=057e, idProduct=2017, bcdDevice= 0.00 [ 1056.719471][ T3083] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1056.725243][T19121] hsr_slave_0: entered promiscuous mode [ 1056.745411][T19121] hsr_slave_1: entered promiscuous mode [ 1056.776118][ T3083] usb 10-1: config 0 descriptor?? [ 1057.007401][T19121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1057.026425][T19121] Cannot create hsr debugfs directory [ 1057.244761][ T51] Bluetooth: hci2: command tx timeout [ 1057.405076][ T3083] nintendo 0003:057E:2017.001B: unknown main item tag 0x0 [ 1057.418190][ T3083] nintendo 0003:057E:2017.001B: unbalanced delimiter at end of report description [ 1057.530401][ T3083] nintendo 0003:057E:2017.001B: HID parse failed [ 1057.595296][ T3083] nintendo 0003:057E:2017.001B: probe - fail = -22 [ 1057.611412][ T3083] nintendo 0003:057E:2017.001B: probe with driver nintendo failed with error -22 [ 1057.743673][T19145] trusted_key: encrypted_key: insufficient parameters specified [ 1058.808765][ T5894] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1058.968235][ T5894] usb 7-1: Using ep0 maxpacket: 8 [ 1058.989871][ T5894] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.028604][ T5894] usb 7-1: config 0 has no interfaces? [ 1059.041332][ T5894] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1059.088602][ T5894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.135557][ T5894] usb 7-1: config 0 descriptor?? [ 1059.192232][ T5908] usb 10-1: USB disconnect, device number 3 [ 1059.308350][ T51] Bluetooth: hci2: command tx timeout [ 1059.331730][T14823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1059.342142][T14823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1059.357718][T14823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1059.370201][T14823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1059.378872][T14823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1059.459709][T19121] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1059.494313][T19121] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1059.532299][T19121] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1059.582843][T19121] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1060.505169][T19121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1060.736561][T19193] xfrm0: entered promiscuous mode [ 1060.778744][T19193] xfrm0: entered allmulticast mode [ 1060.800118][T19196] FAULT_INJECTION: forcing a failure. [ 1060.800118][T19196] name failslab, interval 1, probability 0, space 0, times 0 [ 1060.822406][T19196] CPU: 0 UID: 0 PID: 19196 Comm: syz.7.3650 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 1060.822438][T19196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1060.822450][T19196] Call Trace: [ 1060.822459][T19196] [ 1060.822468][T19196] dump_stack_lvl+0x189/0x250 [ 1060.822503][T19196] ? __pfx____ratelimit+0x10/0x10 [ 1060.822530][T19196] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1060.822563][T19196] ? __pfx__printk+0x10/0x10 [ 1060.822589][T19196] ? __pfx___might_resched+0x10/0x10 [ 1060.822608][T19196] ? fs_reclaim_acquire+0x7d/0x100 [ 1060.822636][T19196] should_fail_ex+0x414/0x560 [ 1060.822667][T19196] should_failslab+0xa8/0x100 [ 1060.822690][T19196] __kmalloc_cache_noprof+0x70/0x3d0 [ 1060.822710][T19196] ? tomoyo_dump_page+0xe6/0x6b0 [ 1060.822738][T19196] tomoyo_dump_page+0xe6/0x6b0 [ 1060.822765][T19196] ? __pfx_tomoyo_dump_page+0x10/0x10 [ 1060.822796][T19196] ? __kasan_kmalloc+0x93/0xb0 [ 1060.822825][T19196] ? tomoyo_find_next_domain+0x10ea/0x1aa0 [ 1060.822854][T19196] tomoyo_find_next_domain+0x1141/0x1aa0 [ 1060.822896][T19196] ? __pfx_tomoyo_find_next_domain+0x10/0x10 [ 1060.822929][T19196] ? tomoyo_bprm_check_security+0xf0/0x180 [ 1060.822957][T19196] tomoyo_bprm_check_security+0x11c/0x180 [ 1060.822991][T19196] security_bprm_check+0x89/0x270 [ 1060.823018][T19196] bprm_execve+0x8ee/0x1450 [ 1060.823065][T19196] ? __pfx_bprm_execve+0x10/0x10 [ 1060.823085][T19196] ? copy_string_kernel+0x25f/0x2a0 [ 1060.823120][T19196] do_execveat_common+0x510/0x6a0 [ 1060.823154][T19196] __x64_sys_execve+0x94/0xb0 [ 1060.823177][T19196] do_syscall_64+0xfa/0x3b0 [ 1060.823201][T19196] ? lockdep_hardirqs_on+0x9c/0x150 [ 1060.823225][T19196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.823245][T19196] ? clear_bhb_loop+0x60/0xb0 [ 1060.823269][T19196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.823289][T19196] RIP: 0033:0x7f054878e929 [ 1060.823307][T19196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1060.823325][T19196] RSP: 002b:00007f05495bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1060.823347][T19196] RAX: ffffffffffffffda RBX: 00007f05489b5fa0 RCX: 00007f054878e929 [ 1060.823362][T19196] RDX: 0000200000000800 RSI: 0000000000000000 RDI: 0000200000000180 [ 1060.823375][T19196] RBP: 00007f05495bb090 R08: 0000000000000000 R09: 0000000000000000 [ 1060.823387][T19196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1060.823399][T19196] R13: 0000000000000000 R14: 00007f05489b5fa0 R15: 00007f0548adfa28 [ 1060.823433][T19196] [ 1061.097726][T19169] chnl_net:caif_netlink_parms(): no params data found [ 1061.363991][T19121] 8021q: adding VLAN 0 to HW filter on device team0 [ 1061.398917][T14823] Bluetooth: hci2: command tx timeout [ 1061.470817][T14823] Bluetooth: hci1: command tx timeout [ 1061.586550][T19206] warn_alloc: 2 callbacks suppressed [ 1061.586571][T19206] syz.9.3652: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz9,mems_allowed=0-1 [ 1061.686192][T19206] CPU: 0 UID: 0 PID: 19206 Comm: syz.9.3652 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 1061.686224][T19206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1061.686236][T19206] Call Trace: [ 1061.686246][T19206] [ 1061.686255][T19206] dump_stack_lvl+0x189/0x250 [ 1061.686296][T19206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1061.686327][T19206] ? __pfx__printk+0x10/0x10 [ 1061.686351][T19206] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1061.686375][T19206] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1061.686401][T19206] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1061.686429][T19206] warn_alloc+0x214/0x310 [ 1061.686453][T19206] ? stack_depot_save_flags+0x40/0x900 [ 1061.686486][T19206] ? __pfx_warn_alloc+0x10/0x10 [ 1061.686514][T19206] ? kasan_save_track+0x4f/0x80 [ 1061.686533][T19206] ? xskq_create+0x56/0x170 [ 1061.686557][T19206] ? xsk_init_queue+0xb0/0x110 [ 1061.686579][T19206] ? xsk_setsockopt+0x43f/0x710 [ 1061.686599][T19206] ? do_sock_setsockopt+0x25a/0x3e0 [ 1061.686618][T19206] ? __x64_sys_setsockopt+0x18b/0x220 [ 1061.686637][T19206] ? do_syscall_64+0xfa/0x3b0 [ 1061.686662][T19206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.686692][T19206] __vmalloc_node_range_noprof+0x125/0x12f0 [ 1061.686750][T19206] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1061.686775][T19206] ? xskq_create+0x56/0x170 [ 1061.686803][T19206] ? __kasan_kmalloc+0x93/0xb0 [ 1061.686828][T19206] vmalloc_user_noprof+0xad/0xf0 [ 1061.686850][T19206] ? xskq_create+0xbf/0x170 [ 1061.686876][T19206] xskq_create+0xbf/0x170 [ 1061.686906][T19206] xsk_init_queue+0xb0/0x110 [ 1061.686934][T19206] xsk_setsockopt+0x43f/0x710 [ 1061.686971][T19206] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1061.686993][T19206] ? __lock_acquire+0xab9/0xd20 [ 1061.687034][T19206] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1061.687060][T19206] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1061.687094][T19206] do_sock_setsockopt+0x25a/0x3e0 [ 1061.687118][T19206] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1061.687143][T19206] ? __fget_files+0x2a/0x420 [ 1061.687182][T19206] __x64_sys_setsockopt+0x18b/0x220 [ 1061.687212][T19206] do_syscall_64+0xfa/0x3b0 [ 1061.687234][T19206] ? lockdep_hardirqs_on+0x9c/0x150 [ 1061.687258][T19206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.687277][T19206] ? clear_bhb_loop+0x60/0xb0 [ 1061.687302][T19206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.687322][T19206] RIP: 0033:0x7fc86e58e929 [ 1061.687342][T19206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1061.687360][T19206] RSP: 002b:00007fc86f466038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1061.687382][T19206] RAX: ffffffffffffffda RBX: 00007fc86e7b5fa0 RCX: 00007fc86e58e929 [ 1061.687398][T19206] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 1061.687411][T19206] RBP: 00007fc86e610b39 R08: 0000000000000004 R09: 0000000000000000 [ 1061.687424][T19206] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1061.687437][T19206] R13: 0000000000000000 R14: 00007fc86e7b5fa0 R15: 00007fc86e8dfa28 [ 1061.687471][T19206] [ 1062.008422][T19206] Mem-Info: [ 1062.011703][T19206] active_anon:6268 inactive_anon:2 isolated_anon:0 [ 1062.011703][T19206] active_file:20523 inactive_file:40296 isolated_file:0 [ 1062.011703][T19206] unevictable:770 dirty:202 writeback:0 [ 1062.011703][T19206] slab_reclaimable:6508 slab_unreclaimable:126143 [ 1062.011703][T19206] mapped:34187 shmem:1363 pagetables:1431 [ 1062.011703][T19206] sec_pagetables:0 bounce:0 [ 1062.011703][T19206] kernel_misc_reclaimable:0 [ 1062.011703][T19206] free:1275956 free_pcp:12830 free_cma:0 [ 1062.060154][T19206] Node 0 active_anon:25172kB inactive_anon:8kB active_file:82060kB inactive_file:160980kB unevictable:1544kB isolated(anon):0kB isolated(file):0kB mapped:136816kB dirty:800kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:15344kB pagetables:5604kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1062.095132][T19206] Node 1 active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:32kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1062.128365][T19206] Node 0 DMA free:15356kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1062.158194][T19206] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 1062.166214][T19206] Node 0 DMA32 free:1179168kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25176kB inactive_anon:8kB active_file:82060kB inactive_file:159156kB unevictable:1544kB writepending:880kB present:3129332kB managed:2561080kB mlocked:8kB bounce:0kB free_pcp:42696kB local_pcp:19644kB free_cma:0kB [ 1062.201325][T19206] lowmem_reserve[]: 0 0 1 1 1 [ 1062.206316][T19206] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1832kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 1062.236136][T19206] lowmem_reserve[]: 0 0 0 0 0 [ 1062.241081][T19206] Node 1 Normal free:3909484kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:32kB inactive_file:204kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:8232kB local_pcp:8232kB free_cma:0kB [ 1062.275002][T19206] lowmem_reserve[]: 0 0 0 0 0 [ 1062.281343][T19206] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 1062.296787][T19206] Node 0 DMA32: 34*4kB (UE) 81*8kB (ME) 377*16kB (UME) 616*32kB (UME) 276*64kB (UME) 94*128kB (UME) 43*256kB (UME) 85*512kB (UME) 34*1024kB (UME) 3*2048kB (U) 251*4096kB (UM) = 1179808kB [ 1062.316039][T19206] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1062.336247][T19206] Node 1 Normal: 70*4kB (UM) 41*8kB (UE) 40*16kB (UME) 226*32kB (UE) 72*64kB (UME) 31*128kB (UME) 9*256kB (UME) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 948*4096kB (UM) = 3909536kB [ 1062.354367][T13540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.356452][T19206] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1062.362060][T13540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1062.404645][T19206] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1062.414439][T19206] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1062.424988][T19206] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1062.451213][T19206] 62182 total pagecache pages [ 1062.482720][T19206] 3 pages in swap cache [ 1062.489174][T19206] Free swap = 124984kB [ 1062.496922][T19206] Total swap = 124996kB [ 1062.500065][T13053] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.501473][T19206] 2097051 pages RAM [ 1062.508656][T13053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1062.512411][T19206] 0 pages HighMem/MovableOnly [ 1062.533667][T19169] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.537251][T19206] 424675 pages reserved [ 1062.546296][T19206] 0 pages cma reserved [ 1062.560952][T19169] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.577501][T19169] bridge_slave_0: entered allmulticast mode [ 1062.597748][T19169] bridge_slave_0: entered promiscuous mode [ 1062.713504][T19169] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.734967][T19169] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.760118][T19169] bridge_slave_1: entered allmulticast mode [ 1062.791397][T19169] bridge_slave_1: entered promiscuous mode [ 1062.838779][T19221] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3653'. [ 1062.884552][T19221] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3653'. [ 1062.998124][ T5894] usb 7-1: USB disconnect, device number 11 [ 1063.034728][T19169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1063.096566][T19169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1063.401649][T19169] team0: Port device team_slave_0 added [ 1063.440767][T19169] team0: Port device team_slave_1 added [ 1063.468640][T14823] Bluetooth: hci2: command tx timeout [ 1063.550780][T14823] Bluetooth: hci1: command tx timeout [ 1063.654226][T19169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1063.669782][T19169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1063.702750][T19169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1063.731188][T19169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1063.744898][T19169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1063.787542][T19169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1064.070694][T19169] hsr_slave_0: entered promiscuous mode [ 1064.087802][T19169] hsr_slave_1: entered promiscuous mode [ 1064.105515][T19169] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1064.129073][T19169] Cannot create hsr debugfs directory [ 1064.285818][T19242] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3656'. [ 1064.300478][T19246] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3658'. [ 1064.375742][T19246] 8021q: VLANs not supported on gre0 [ 1065.435110][T19121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1065.548960][T19169] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.629147][T14823] Bluetooth: hci1: command tx timeout [ 1065.793597][T19169] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.975201][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1065.992199][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1066.001487][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1066.010434][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1066.021217][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1066.091945][T19169] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.183859][T19121] veth0_vlan: entered promiscuous mode [ 1066.211973][T19267] netlink: 'syz.7.3661': attribute type 3 has an invalid length. [ 1066.212001][T19267] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3661'. [ 1066.290699][T19169] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1066.313898][T19121] veth1_vlan: entered promiscuous mode [ 1066.674387][T19121] veth0_macvtap: entered promiscuous mode [ 1066.777188][T19121] veth1_macvtap: entered promiscuous mode [ 1066.885641][T19169] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1066.945761][T19169] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1066.995055][T19121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1067.169211][T19169] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1067.221207][T19169] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1067.292841][T19121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1067.392855][T19271] chnl_net:caif_netlink_parms(): no params data found [ 1067.471089][T19121] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.487578][T19121] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.507694][T19121] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.519671][T19121] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.532968][T19296] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1067.709407][ T51] Bluetooth: hci1: command tx timeout [ 1068.058914][T19271] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.066307][T19271] bridge0: port 1(bridge_slave_0) entered disabled state [ 1068.091795][T19271] bridge_slave_0: entered allmulticast mode [ 1068.112527][ T51] Bluetooth: hci0: command tx timeout [ 1068.122939][T19271] bridge_slave_0: entered promiscuous mode [ 1068.136291][T19271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.153414][T19271] bridge0: port 2(bridge_slave_1) entered disabled state [ 1068.174316][T19271] bridge_slave_1: entered allmulticast mode [ 1068.184041][T19271] bridge_slave_1: entered promiscuous mode [ 1068.382554][T19271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1068.474223][T19169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1068.532533][T19271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1068.706289][T19271] team0: Port device team_slave_0 added [ 1068.739815][T13535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.755059][T13535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1068.824956][T19271] team0: Port device team_slave_1 added [ 1068.911915][T19324] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3665'. [ 1068.940682][T19324] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3665'. [ 1069.113591][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1069.113612][ T30] audit: type=1326 audit(1749229845.077:2151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19326 comm="syz.7.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054878e929 code=0x7ffc0000 [ 1069.225352][T19271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1069.236054][ T30] audit: type=1326 audit(1749229845.137:2152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19326 comm="syz.7.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f054878e929 code=0x7ffc0000 [ 1069.247953][T19271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1069.332566][ T30] audit: type=1326 audit(1749229845.137:2153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19326 comm="syz.7.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054878e929 code=0x7ffc0000 [ 1069.355780][T19271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1069.420623][T19271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1069.422346][ T30] audit: type=1326 audit(1749229845.137:2154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19326 comm="syz.7.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054878e929 code=0x7ffc0000 [ 1069.438095][T13053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.468104][T19271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1069.516661][T13053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.547050][T19271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1069.598700][ T30] audit: type=1326 audit(1749229845.137:2155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19326 comm="syz.7.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f054878e929 code=0x7ffc0000 [ 1069.666915][T19169] 8021q: adding VLAN 0 to HW filter on device team0 [ 1069.698412][ T30] audit: type=1326 audit(1749229845.137:2156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19326 comm="syz.7.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054878e929 code=0x7ffc0000 [ 1069.755179][ T3068] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.762452][ T3068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1069.826829][ T30] audit: type=1326 audit(1749229845.137:2157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19326 comm="syz.7.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054878e929 code=0x7ffc0000 [ 1069.942606][ T3068] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.949873][ T3068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1069.990734][ T30] audit: type=1326 audit(1749229845.137:2158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19326 comm="syz.7.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f054878e929 code=0x7ffc0000 [ 1070.096819][ T30] audit: type=1326 audit(1749229845.137:2159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19326 comm="syz.7.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054878e929 code=0x7ffc0000 [ 1070.171459][ T30] audit: type=1326 audit(1749229845.137:2160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19326 comm="syz.7.3666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f054878e929 code=0x7ffc0000 [ 1070.198382][ T51] Bluetooth: hci0: command tx timeout [ 1070.259123][T19271] hsr_slave_0: entered promiscuous mode [ 1070.266294][T19271] hsr_slave_1: entered promiscuous mode [ 1070.292243][T19271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1070.307945][T19271] Cannot create hsr debugfs directory [ 1070.818599][ T5894] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1070.998096][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 1071.010360][ T5894] usb 4-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1071.047979][ T5894] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1071.072679][ T5894] usb 4-1: New USB device found, idVendor=057e, idProduct=2017, bcdDevice= 0.00 [ 1071.099298][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.132944][ T5894] usb 4-1: config 0 descriptor?? [ 1071.487644][T19169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1071.583770][ T5894] nintendo 0003:057E:2017.001C: unknown main item tag 0x0 [ 1071.598591][ T5894] nintendo 0003:057E:2017.001C: unbalanced delimiter at end of report description [ 1071.610342][ T5894] nintendo 0003:057E:2017.001C: HID parse failed [ 1071.623365][ T5894] nintendo 0003:057E:2017.001C: probe - fail = -22 [ 1071.633594][ T5894] nintendo 0003:057E:2017.001C: probe with driver nintendo failed with error -22 [ 1071.690660][T19271] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.952703][T19271] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.013417][T19169] veth0_vlan: entered promiscuous mode [ 1072.097035][T19271] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.205969][T19169] veth1_vlan: entered promiscuous mode [ 1072.278119][ T51] Bluetooth: hci0: command tx timeout [ 1072.310640][T19271] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.473769][T19169] veth0_macvtap: entered promiscuous mode [ 1072.534128][T14823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1072.555166][T14823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1072.564873][T14823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1072.576124][T14823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1072.585745][T14823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1072.651675][T19169] veth1_macvtap: entered promiscuous mode [ 1072.931992][T19169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1073.000086][T19271] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1073.060470][T19169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1073.076541][T19271] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1073.132583][T19169] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.149730][T19169] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.161003][T19169] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.170464][T19169] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.182564][T19271] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1073.204079][T19271] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1073.488641][ T5908] usb 4-1: USB disconnect, device number 5 [ 1073.920999][ T3068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1073.934854][ T5908] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1073.970476][ T3068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1074.102407][T19371] chnl_net:caif_netlink_parms(): no params data found [ 1074.128112][ T5908] usb 4-1: Using ep0 maxpacket: 8 [ 1074.147327][T13541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1074.178252][T13541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1074.178807][ T5908] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1074.221119][ T5908] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1074.232438][T19271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1074.251418][ T5908] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1074.267711][ T5908] usb 4-1: Product: syz [ 1074.287298][ T5908] usb 4-1: Manufacturer: syz [ 1074.307076][ T5908] usb 4-1: SerialNumber: syz [ 1074.361085][T14823] Bluetooth: hci0: command tx timeout [ 1074.553454][ T5908] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 1074.572216][ T5908] usb 4-1: Handspring Visor / Palm OS: port 100, is for unknown use [ 1074.581956][ T5908] usb 4-1: Handspring Visor / Palm OS: port 185, is for unknown use [ 1074.594898][ T5908] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1074.605623][T19414] netlink: 'syz.1.3647': attribute type 10 has an invalid length. [ 1074.671888][T14823] Bluetooth: hci4: command tx timeout [ 1074.707430][T19271] 8021q: adding VLAN 0 to HW filter on device team0 [ 1074.758329][ T5908] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 1074.768903][ T5908] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 1074.862617][ T5908] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1074.921752][ T5908] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1074.962731][ T5908] usb 4-1: USB disconnect, device number 6 [ 1074.995285][T19420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3675'. [ 1075.107444][ T5908] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1075.199883][ T5908] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1075.202063][T19420] bridge_slave_0: left allmulticast mode [ 1075.245682][ T5908] visor 4-1:1.0: device disconnected [ 1075.255212][T19420] bridge_slave_0: left promiscuous mode [ 1075.284654][T19420] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.358443][ T5901] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 1075.384710][T19420] bridge_slave_1: left allmulticast mode [ 1075.405562][T19420] bridge_slave_1: left promiscuous mode [ 1075.435973][T19420] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.521955][T19420] bond0: (slave bond_slave_0): Releasing backup interface [ 1075.546679][T19420] bond0: (slave bond_slave_1): Releasing backup interface [ 1075.563116][ T5901] usb 2-1: Using ep0 maxpacket: 8 [ 1075.659675][ T5901] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1075.688854][ T5901] usb 2-1: config 4 interface 0 has no altsetting 0 [ 1075.697062][T19420] team0: Port device team_slave_0 removed [ 1075.834392][ T5901] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1075.844635][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.850180][T19420] team0: Port device team_slave_1 removed [ 1075.861732][ T5901] usb 2-1: Product: syz [ 1075.866261][ T5901] usb 2-1: Manufacturer: syz [ 1075.873242][ T5901] usb 2-1: SerialNumber: syz [ 1075.890613][T19439] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3678'. [ 1075.944913][T19420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1075.954483][T19420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1075.966898][T19420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1075.975531][T19420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1076.007236][T19371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.014981][T19371] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.025925][T19371] bridge_slave_0: entered allmulticast mode [ 1076.054513][T19371] bridge_slave_0: entered promiscuous mode [ 1076.137181][ T5901] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1076.148210][T19371] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.163549][T19371] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.178614][ T5901] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1076.192367][T19371] bridge_slave_1: entered allmulticast mode [ 1076.204949][ T5901] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1076.216049][T19371] bridge_slave_1: entered promiscuous mode [ 1076.222435][ T5901] usb 2-1: media controller created [ 1076.493296][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1076.565219][ T3068] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.572597][ T3068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1076.628634][ T5901] zl10353_read_register: readreg error (reg=127, ret==0) [ 1076.687860][T19371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1076.748175][T14823] Bluetooth: hci4: command tx timeout [ 1076.762281][ T3068] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.769566][ T3068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1076.894889][T19371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1076.904982][ T5901] usb 2-1: USB disconnect, device number 115 [ 1077.234756][T19371] team0: Port device team_slave_0 added [ 1077.289291][T19452] fuse: Unknown parameter 'f$' [ 1077.303689][T19371] team0: Port device team_slave_1 added [ 1077.519766][T19371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1077.528560][T19371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1077.569268][T19458] usb usb8: usbfs: process 19458 (syz.3.3680) did not claim interface 0 before use [ 1077.582114][T19371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1077.631427][T19371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1077.642410][T19371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1077.669667][T19371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1078.247130][T19371] hsr_slave_0: entered promiscuous mode [ 1078.265480][T19371] hsr_slave_1: entered promiscuous mode [ 1078.281230][T19371] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1078.297852][T19371] Cannot create hsr debugfs directory [ 1078.480497][T19472] netlink: 'syz.1.3681': attribute type 1 has an invalid length. [ 1078.839350][T14823] Bluetooth: hci4: command tx timeout [ 1079.540173][T19271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1079.728791][T19371] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.777999][T19371] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1080.312950][T19371] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.424573][T19371] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1080.827538][T19371] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.878491][T19371] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1080.909716][T14823] Bluetooth: hci4: command tx timeout [ 1080.931000][T19506] FAULT_INJECTION: forcing a failure. [ 1080.931000][T19506] name failslab, interval 1, probability 0, space 0, times 0 [ 1081.027241][T19271] veth0_vlan: entered promiscuous mode [ 1081.041478][T19506] CPU: 0 UID: 0 PID: 19506 Comm: syz.1.3686 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 1081.041510][T19506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1081.041523][T19506] Call Trace: [ 1081.041531][T19506] [ 1081.041539][T19506] dump_stack_lvl+0x189/0x250 [ 1081.041574][T19506] ? __pfx____ratelimit+0x10/0x10 [ 1081.041600][T19506] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1081.041629][T19506] ? __pfx__printk+0x10/0x10 [ 1081.041657][T19506] ? __pfx___might_resched+0x10/0x10 [ 1081.041681][T19506] should_fail_ex+0x414/0x560 [ 1081.041712][T19506] should_failslab+0xa8/0x100 [ 1081.041737][T19506] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1081.041759][T19506] ? __alloc_skb+0x112/0x2d0 [ 1081.041783][T19506] __alloc_skb+0x112/0x2d0 [ 1081.041817][T19506] netlink_sendmsg+0x5c6/0xb30 [ 1081.041849][T19506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1081.041874][T19506] ? aa_sock_msg_perm+0x94/0x160 [ 1081.041901][T19506] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1081.041926][T19506] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1081.041947][T19506] __sock_sendmsg+0x219/0x270 [ 1081.041977][T19506] ____sys_sendmsg+0x505/0x830 [ 1081.042005][T19506] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1081.042037][T19506] ? import_iovec+0x74/0xa0 [ 1081.042060][T19506] ___sys_sendmsg+0x21f/0x2a0 [ 1081.042085][T19506] ? __pfx____sys_sendmsg+0x10/0x10 [ 1081.042146][T19506] ? __fget_files+0x2a/0x420 [ 1081.042167][T19506] ? __fget_files+0x3a0/0x420 [ 1081.042200][T19506] __x64_sys_sendmsg+0x19b/0x260 [ 1081.042226][T19506] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1081.042258][T19506] ? __pfx_ksys_write+0x10/0x10 [ 1081.042276][T19506] ? rcu_is_watching+0x15/0xb0 [ 1081.042299][T19506] ? do_syscall_64+0xbe/0x3b0 [ 1081.042329][T19506] do_syscall_64+0xfa/0x3b0 [ 1081.042353][T19506] ? lockdep_hardirqs_on+0x9c/0x150 [ 1081.042377][T19506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.042397][T19506] ? clear_bhb_loop+0x60/0xb0 [ 1081.042421][T19506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.042440][T19506] RIP: 0033:0x7f6b5278e929 [ 1081.042459][T19506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1081.042476][T19506] RSP: 002b:00007f6b53687038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1081.042499][T19506] RAX: ffffffffffffffda RBX: 00007f6b529b5fa0 RCX: 00007f6b5278e929 [ 1081.042513][T19506] RDX: 0000000000004800 RSI: 0000200000000300 RDI: 0000000000000003 [ 1081.042526][T19506] RBP: 00007f6b53687090 R08: 0000000000000000 R09: 0000000000000000 [ 1081.042538][T19506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1081.042550][T19506] R13: 0000000000000000 R14: 00007f6b529b5fa0 R15: 00007f6b52adfa28 [ 1081.042582][T19506] [ 1081.340468][T19271] veth1_vlan: entered promiscuous mode [ 1081.375181][T19271] veth0_macvtap: entered promiscuous mode [ 1081.386613][T19271] veth1_macvtap: entered promiscuous mode [ 1081.415679][T19271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1081.429354][T19271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1081.441605][T19271] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.450488][T19271] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.459545][T19271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.468532][T19271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1081.623221][T19511] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3688'. [ 1081.691330][T19371] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.740063][T19371] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 1081.810274][ T5908] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 1081.991002][ T5908] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1082.012475][ T5908] usb 4-1: can't read configurations, error -61 [ 1082.065722][T19521] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3690'. [ 1082.130533][ T980] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 1082.178251][ T5908] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 1082.180553][T13053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.218337][T13053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.290629][ T980] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1082.312169][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1082.341203][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1082.364901][ T5908] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1082.371689][ T980] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1082.395451][ T5908] usb 4-1: can't read configurations, error -61 [ 1082.401499][T19371] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1082.412398][ T980] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1082.416401][ T5908] usb usb4-port1: attempt power cycle [ 1082.422699][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.446017][T13541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.457222][T19371] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1082.472344][T13541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.488576][ T980] usb 2-1: config 0 descriptor?? [ 1082.493833][T19371] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1082.551398][T19371] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1082.788536][ T5908] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 1082.837585][ T5908] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1082.861470][ T5908] usb 4-1: can't read configurations, error -61 [ 1082.885209][T19371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1082.966275][T19515] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 1082.985472][T19515] pim6reg0: linktype set to 773 [ 1082.999015][ T5908] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 1083.022175][ T980] plantronics 0003:047F:FFFF.001D: ignoring exceeding usage max [ 1083.037108][T19371] 8021q: adding VLAN 0 to HW filter on device team0 [ 1083.042307][ T980] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 1083.087847][T13053] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.095192][T13053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1083.114207][ T5908] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 1083.124454][ T5908] usb 4-1: can't read configurations, error -61 [ 1083.131650][ T980] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1083.134765][ T5908] usb usb4-port1: unable to enumerate USB device [ 1083.206222][T13053] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.213594][T13053] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1083.586010][T19371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1083.756135][ T5822] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1083.776118][T19548] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 1083.835098][T19371] veth0_vlan: entered promiscuous mode [ 1083.925273][T19371] veth1_vlan: entered promiscuous mode [ 1084.063511][T19371] veth0_macvtap: entered promiscuous mode [ 1084.144613][T19371] veth1_macvtap: entered promiscuous mode [ 1084.548104][T18716] usb 2-1: reset high-speed USB device number 116 using dummy_hcd [ 1084.566779][T19371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1084.676659][T19371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1084.767680][T19371] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.811764][T19371] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.851075][T19371] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.899944][T19371] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.471741][ T5908] usb 2-1: USB disconnect, device number 116 [ 1085.588727][ T43] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1085.744098][T19590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3698'. [ 1085.778065][T19590] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3698'. [ 1085.811438][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 1085.831654][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1085.888478][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1085.955719][ T43] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1086.068230][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.086935][ T43] usb 5-1: config 0 descriptor?? [ 1086.105461][T19590] dummy0: entered promiscuous mode [ 1086.201776][T19590] team0: entered promiscuous mode [ 1086.211154][T19590] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1086.278452][T19590] Cannot create hsr debugfs directory [ 1086.314675][T19590] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 1086.480087][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.708467][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.863016][T19599] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3699'. [ 1087.014664][T13541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.053637][T13541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.412881][T19611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3671'. [ 1087.704085][T19615] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3702'. [ 1088.051074][T19623] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3703'. [ 1088.167282][T19623] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3703'. [ 1088.692870][ T43] usbhid 5-1:0.0: can't add hid device: -71 [ 1088.723051][ T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1088.795006][ T43] usb 5-1: USB disconnect, device number 66 [ 1088.822462][T19634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3706'. [ 1092.178023][ T43] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 1092.418090][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1092.459903][ T43] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1092.572772][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1092.604205][ T43] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1092.622133][T19663] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3713'. [ 1092.663648][T19662] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3715'. [ 1092.664744][ T43] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1092.778773][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1092.786957][ T43] usb 5-1: Product: syz [ 1092.862499][ T43] usb 5-1: Manufacturer: syz [ 1092.867222][ T43] usb 5-1: SerialNumber: syz [ 1092.893827][ T43] usb 5-1: config 0 descriptor?? [ 1092.910404][ T43] radio-si470x 5-1:0.0: could not find interrupt in endpoint [ 1092.918198][ T43] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 1092.927400][ T43] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1094.332406][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1094.344657][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1094.357445][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1094.366273][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1094.377375][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1094.458060][ T5908] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1094.652685][ T5908] usb 4-1: Using ep0 maxpacket: 8 [ 1094.663154][ T5908] usb 4-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1094.678283][ T5908] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1094.685008][ T5908] usb 4-1: New USB device found, idVendor=057e, idProduct=2017, bcdDevice= 0.00 [ 1094.696054][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1094.720963][ T5908] usb 4-1: config 0 descriptor?? [ 1094.884315][ T5894] usb 5-1: USB disconnect, device number 67 [ 1094.890794][T19652] delete_channel: no stack [ 1095.102692][T19690] chnl_net:caif_netlink_parms(): no params data found [ 1095.109234][T19701] FAULT_INJECTION: forcing a failure. [ 1095.109234][T19701] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.122856][T19701] CPU: 1 UID: 0 PID: 19701 Comm: syz.4.3721 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 1095.122884][T19701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1095.122896][T19701] Call Trace: [ 1095.122906][T19701] [ 1095.122914][T19701] dump_stack_lvl+0x189/0x250 [ 1095.122955][T19701] ? __pfx____ratelimit+0x10/0x10 [ 1095.122981][T19701] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1095.123019][T19701] ? __pfx__printk+0x10/0x10 [ 1095.123048][T19701] ? ref_tracker_alloc+0x318/0x460 [ 1095.123079][T19701] should_fail_ex+0x414/0x560 [ 1095.123110][T19701] should_failslab+0xa8/0x100 [ 1095.123135][T19701] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1095.123155][T19701] ? skb_clone+0x212/0x3a0 [ 1095.123182][T19701] skb_clone+0x212/0x3a0 [ 1095.123209][T19701] __netlink_deliver_tap+0x404/0x850 [ 1095.123244][T19701] ? netlink_deliver_tap+0x2e/0x1b0 [ 1095.123266][T19701] netlink_deliver_tap+0x19c/0x1b0 [ 1095.123287][T19701] netlink_unicast+0x72f/0x8d0 [ 1095.123329][T19701] netlink_sendmsg+0x805/0xb30 [ 1095.123361][T19701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1095.123385][T19701] ? aa_sock_msg_perm+0x94/0x160 [ 1095.123413][T19701] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1095.123438][T19701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1095.123460][T19701] __sock_sendmsg+0x219/0x270 [ 1095.123491][T19701] ____sys_sendmsg+0x505/0x830 [ 1095.123520][T19701] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1095.123553][T19701] ? import_iovec+0x74/0xa0 [ 1095.123579][T19701] ___sys_sendmsg+0x21f/0x2a0 [ 1095.123602][T19701] ? __pfx____sys_sendmsg+0x10/0x10 [ 1095.123666][T19701] ? __fget_files+0x2a/0x420 [ 1095.123687][T19701] ? __fget_files+0x3a0/0x420 [ 1095.123721][T19701] __x64_sys_sendmsg+0x19b/0x260 [ 1095.123746][T19701] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1095.123778][T19701] ? __pfx_ksys_write+0x10/0x10 [ 1095.123794][T19701] ? rcu_is_watching+0x15/0xb0 [ 1095.123819][T19701] ? do_syscall_64+0xbe/0x3b0 [ 1095.123850][T19701] do_syscall_64+0xfa/0x3b0 [ 1095.123874][T19701] ? lockdep_hardirqs_on+0x9c/0x150 [ 1095.123898][T19701] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.123917][T19701] ? clear_bhb_loop+0x60/0xb0 [ 1095.123941][T19701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.123960][T19701] RIP: 0033:0x7f375d98e929 [ 1095.123977][T19701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1095.124003][T19701] RSP: 002b:00007f375e775038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1095.124024][T19701] RAX: ffffffffffffffda RBX: 00007f375dbb5fa0 RCX: 00007f375d98e929 [ 1095.124038][T19701] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000006 [ 1095.124051][T19701] RBP: 00007f375e775090 R08: 0000000000000000 R09: 0000000000000000 [ 1095.124063][T19701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1095.124075][T19701] R13: 0000000000000000 R14: 00007f375dbb5fa0 R15: 00007f375dcdfa28 [ 1095.124108][T19701] [ 1095.443277][ T5908] nintendo 0003:057E:2017.001E: unknown main item tag 0x0 [ 1095.450700][ T5908] nintendo 0003:057E:2017.001E: unbalanced delimiter at end of report description [ 1095.461013][ T5908] nintendo 0003:057E:2017.001E: HID parse failed [ 1095.468484][ T5908] nintendo 0003:057E:2017.001E: probe - fail = -22 [ 1095.475205][ T5908] nintendo 0003:057E:2017.001E: probe with driver nintendo failed with error -22 [ 1095.901606][T19690] bridge0: port 1(bridge_slave_0) entered blocking state [ 1095.938697][T19690] bridge0: port 1(bridge_slave_0) entered disabled state [ 1095.968296][T19690] bridge_slave_0: entered allmulticast mode [ 1095.994993][T19690] bridge_slave_0: entered promiscuous mode [ 1096.021267][T19690] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.038545][T19690] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.132134][T19690] bridge_slave_1: entered allmulticast mode [ 1096.446032][ T51] Bluetooth: hci1: command tx timeout [ 1096.494359][T19690] bridge_slave_1: entered promiscuous mode [ 1096.635547][T19722] bridge0: entered promiscuous mode [ 1096.675776][T19722] vlan2: entered promiscuous mode [ 1097.160880][ T5894] usb 4-1: USB disconnect, device number 11 [ 1097.286285][T19690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1097.347620][T19690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1097.946560][T19690] team0: Port device team_slave_0 added [ 1098.023818][T19690] team0: Port device team_slave_1 added [ 1098.519172][ T51] Bluetooth: hci1: command tx timeout [ 1098.951880][T19690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1099.003958][T19690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1099.258370][T19690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1099.354761][T19690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1099.403877][T19690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1099.594006][T19690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1100.151171][T19690] hsr_slave_0: entered promiscuous mode [ 1100.178668][T19690] hsr_slave_1: entered promiscuous mode [ 1100.196202][T19690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1100.229215][T19690] Cannot create hsr debugfs directory [ 1100.295950][T19765] bridge0: port 3(vlan2) entered blocking state [ 1100.314822][T19765] bridge0: port 3(vlan2) entered disabled state [ 1100.324772][T19765] vlan2: entered allmulticast mode [ 1100.330488][T19765] gretap0: entered allmulticast mode [ 1100.342378][T19765] vlan2: entered promiscuous mode [ 1100.368506][T19765] gretap0: entered promiscuous mode [ 1100.381795][T19765] bridge0: port 3(vlan2) entered blocking state [ 1100.388330][T19765] bridge0: port 3(vlan2) entered forwarding state [ 1100.514498][ T10] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1100.595971][ T51] Bluetooth: hci1: command tx timeout [ 1100.691056][T19781] Cannot find add_set index 0 as target [ 1100.718510][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 1100.731800][T19776] netlink: 'syz.3.3736': attribute type 8 has an invalid length. [ 1100.755803][ T10] usb 5-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1100.793212][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1100.805522][ T10] usb 5-1: New USB device found, idVendor=057e, idProduct=2017, bcdDevice= 0.00 [ 1100.815489][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.835865][ T10] usb 5-1: config 0 descriptor?? [ 1101.333300][ T10] nintendo 0003:057E:2017.001F: unknown main item tag 0x0 [ 1101.341911][ T10] nintendo 0003:057E:2017.001F: unbalanced delimiter at end of report description [ 1101.355976][ T10] nintendo 0003:057E:2017.001F: HID parse failed [ 1101.395088][ T10] nintendo 0003:057E:2017.001F: probe - fail = -22 [ 1101.427366][ T10] nintendo 0003:057E:2017.001F: probe with driver nintendo failed with error -22 [ 1101.443868][T19690] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.721754][T19797] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3739'. [ 1101.781984][T19690] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1102.678200][ T51] Bluetooth: hci1: command tx timeout [ 1102.901321][T19803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3741'. [ 1102.989011][T19690] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.238589][ T5908] usb 5-1: USB disconnect, device number 68 [ 1103.350962][T19813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3743'. [ 1103.485884][T19690] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1103.779213][T19823] netlink: 'syz.7.3745': attribute type 2 has an invalid length. [ 1103.792726][T19823] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3745'. [ 1104.341108][T19690] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1104.413671][T19690] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1104.460208][T19690] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1104.513013][T19690] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1104.541966][T19831] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3747'. [ 1104.797562][T19840] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3748'. [ 1104.808033][T19843] netlink: 38 bytes leftover after parsing attributes in process `syz.3.3749'. [ 1104.895978][T19848] netlink: 508 bytes leftover after parsing attributes in process `syz.3.3749'. [ 1104.926422][T19848] openvswitch: netlink: Flow key attr not present in new flow. [ 1105.096366][T19690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1105.212430][T19690] 8021q: adding VLAN 0 to HW filter on device team0 [ 1105.231823][ T31] INFO: task kworker/u8:14:13539 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1105.259963][T13536] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.267234][T13536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1105.278602][ T31] Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 [ 1105.285955][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1105.337565][T13536] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.344942][T13536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1105.375984][ T31] task:kworker/u8:14 state:D stack:21160 pid:13539 tgid:13539 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1105.597982][ T31] Workqueue: netns cleanup_net [ 1105.608041][ T31] Call Trace: [ 1105.611501][ T31] [ 1105.704390][ T31] __schedule+0x16f5/0x4d00 [ 1105.733813][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1105.870499][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1105.917959][ T31] ? schedule+0x165/0x360 [ 1105.922397][ T31] ? __lock_acquire+0xab9/0xd20 [ 1105.927305][ T31] ? __pfx___schedule+0x10/0x10 [ 1105.978140][ T31] ? schedule+0x91/0x360 [ 1105.987472][ T31] schedule+0x165/0x360 [ 1106.048076][ T31] afs_cell_purge+0x3d9/0x540 [ 1106.052863][ T31] ? __pfx_afs_cell_purge+0x10/0x10 [ 1106.158082][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 1106.177995][ T31] ? afs_net+0x45/0x270 [ 1106.182257][ T31] ? afs_net+0x45/0x270 [ 1106.218028][ T31] afs_net_exit+0x50/0x100 [ 1106.222543][ T31] ops_undo_list+0x497/0x990 [ 1106.287964][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1106.308015][ T31] cleanup_net+0x4c5/0x800 [ 1106.312503][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 1106.317489][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1106.378117][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1106.397959][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1106.403804][ T31] process_scheduled_works+0xae1/0x17b0 [ 1106.428765][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1106.434967][ T31] worker_thread+0x8a0/0xda0 [ 1106.477821][ T31] kthread+0x70e/0x8a0 [ 1106.483090][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1106.497708][ T31] ? __pfx_kthread+0x10/0x10 [ 1106.509400][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1106.514861][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1106.548595][ T31] ? __pfx_kthread+0x10/0x10 [ 1106.553489][ T31] ret_from_fork+0x3f9/0x770 [ 1106.578321][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1106.583720][ T31] ? __switch_to_asm+0x39/0x70 [ 1106.608092][ T31] ? __switch_to_asm+0x33/0x70 [ 1106.612980][ T31] ? __pfx_kthread+0x10/0x10 [ 1106.617710][ T31] ret_from_fork_asm+0x1a/0x30 [ 1106.634823][ T31] [ 1106.710287][ T31] [ 1106.710287][ T31] Showing all locks held in the system: [ 1106.758196][ T31] 3 locks held by kworker/0:0/9: [ 1106.763306][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1106.860776][ T31] #1: ffff8880b8623f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0 [ 1106.970344][ T31] #2: ffff888030520fe0 (&r->consumer_lock#2){+.+.}-{3:3}, at: wg_packet_decrypt_worker+0x87a/0xd10 [ 1107.078000][ T31] 2 locks held by kworker/u8:0/12: [ 1107.083216][ T31] 3 locks held by kworker/u8:1/13: [ 1107.122886][ T31] #0: ffff88814ba8e148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1107.168058][ T31] #1: ffffc90000127bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1107.208035][ T31] #2: ffffffff8f50f648 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 1107.288237][ T31] 1 lock held by khungtaskd/31: [ 1107.293193][ T31] #0: ffffffff8e13f060 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1107.388097][ T31] 3 locks held by kworker/1:2/3083: [ 1107.393657][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1107.458086][ T31] #1: ffffc9000bef7bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1107.532877][ T31] #2: ffffffff8e144b78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 1107.577950][ T31] 2 locks held by getty/5595: [ 1107.582718][ T31] #0: ffff88814cc7c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1107.646331][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1107.676133][ T31] 3 locks held by kworker/u8:14/13539: [ 1107.686060][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1107.738053][ T31] #1: ffffc900047efbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1107.781425][ T31] #2: ffffffff8f502a50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 1107.805891][ T31] 2 locks held by kworker/u8:15/13540: [ 1107.819170][ T31] 3 locks held by kworker/u8:16/13541: [ 1107.832661][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1107.844786][ T31] #1: ffffc900034f7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1107.856211][ T31] #2: ffffffff8f50f648 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1107.865367][ T31] 4 locks held by syz-executor/19254: [ 1107.871256][ T31] #0: ffff88807afd8d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x1fe/0x500 [ 1107.881991][ T31] #1: ffff88807afd8078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1107.903679][ T31] #2: ffffffff8f677668 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1107.918339][ T31] #3: ffff8880587b3b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 1107.931801][ T31] 2 locks held by syz-executor/19271: [ 1107.937403][ T31] #0: ffffffff8f50f648 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1107.946567][ T31] #1: ffffffff8e144b78 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 1107.957849][ T31] 3 locks held by syz-executor/19690: [ 1107.963589][ T31] #0: ffff888051ed8d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x1fe/0x500 [ 1107.974050][ T31] #1: ffff888051ed8078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1107.984074][ T31] #2: ffffffff8f677668 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1107.994544][ T31] 3 locks held by syz.0.3741/19809: [ 1108.000161][ T31] #0: ffff88807a198d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x1fe/0x500 [ 1108.010707][ T31] #1: ffff88807a198078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1108.023966][ T31] #2: ffffffff8f677668 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1108.049037][ T31] 3 locks held by syz.7.3745/19823: [ 1108.054307][ T31] #0: ffff888024368d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x1fe/0x500 [ 1108.064899][ T31] #1: ffff888024368078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1108.087319][ T31] #2: ffffffff8f677668 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1108.108498][ T31] 3 locks held by syz.3.3749/19849: [ 1108.113783][ T31] #0: ffff88805390cd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x1fe/0x500 [ 1108.154493][ T31] #1: ffff88805390c078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1108.189223][ T31] #2: ffffffff8f677668 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1108.248038][ T31] [ 1108.250446][ T31] ============================================= [ 1108.250446][ T31] [ 1108.281545][ T31] NMI backtrace for cpu 0 [ 1108.281566][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 1108.281585][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1108.281595][ T31] Call Trace: [ 1108.281601][ T31] [ 1108.281608][ T31] dump_stack_lvl+0x189/0x250 [ 1108.281635][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1108.281655][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1108.281677][ T31] ? __pfx__printk+0x10/0x10 [ 1108.281703][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1108.281722][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1108.281736][ T31] ? _printk+0xcf/0x120 [ 1108.281755][ T31] ? __pfx__printk+0x10/0x10 [ 1108.281772][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1108.281794][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1108.281812][ T31] watchdog+0xfee/0x1030 [ 1108.281834][ T31] ? watchdog+0x1de/0x1030 [ 1108.281859][ T31] kthread+0x70e/0x8a0 [ 1108.281878][ T31] ? __pfx_watchdog+0x10/0x10 [ 1108.281897][ T31] ? __pfx_kthread+0x10/0x10 [ 1108.281915][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1108.281932][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1108.281957][ T31] ? __pfx_kthread+0x10/0x10 [ 1108.281975][ T31] ret_from_fork+0x3f9/0x770 [ 1108.281998][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1108.282022][ T31] ? __switch_to_asm+0x39/0x70 [ 1108.282037][ T31] ? __switch_to_asm+0x33/0x70 [ 1108.282050][ T31] ? __pfx_kthread+0x10/0x10 [ 1108.282067][ T31] ret_from_fork_asm+0x1a/0x30 [ 1108.282094][ T31] [ 1108.282103][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1108.459010][ C1] NMI backtrace for cpu 1 [ 1108.459029][ C1] CPU: 1 UID: 0 PID: 13536 Comm: kworker/u8:11 Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 1108.459049][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1108.459060][ C1] Workqueue: bat_events batadv_nc_worker [ 1108.459084][ C1] RIP: 0010:lock_acquire+0x154/0x360 [ 1108.459107][ C1] Code: 8d e8 a0 9d c7 09 b8 ff ff ff ff 65 0f c1 05 93 ba fe 10 83 f8 01 0f 85 c9 00 00 00 48 c7 44 24 30 00 00 00 00 9c 8f 44 24 30 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 [ 1108.459121][ C1] RSP: 0018:ffffc90003dcf8d0 EFLAGS: 00000046 [ 1108.459135][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: d20284a45f037c00 [ 1108.459146][ C1] RDX: 0000000000000000 RSI: ffffffff8db6970d RDI: ffffffff8be28340 [ 1108.459157][ C1] RBP: ffffffff8b33e947 R08: 0000000000000000 R09: ffffffff8b33e947 [ 1108.459168][ C1] R10: dffffc0000000000 R11: fffffbfff1f4203f R12: 0000000000000000 [ 1108.459178][ C1] R13: ffff88804e559d18 R14: 0000000000000001 R15: 0000000000000246 [ 1108.459189][ C1] FS: 0000000000000000(0000) GS:ffff888125d55000(0000) knlGS:0000000000000000 [ 1108.459202][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1108.459213][ C1] CR2: 00007fb64eaf9000 CR3: 000000004e43e000 CR4: 00000000003526f0 [ 1108.459229][ C1] DR0: 0000000000000007 DR1: 0000000000000002 DR2: 0000000000000008 [ 1108.459239][ C1] DR3: 1000000100000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1108.459250][ C1] Call Trace: [ 1108.459257][ C1] [ 1108.459265][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1108.459290][ C1] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 1108.459308][ C1] _raw_spin_lock_bh+0x36/0x50 [ 1108.459326][ C1] ? batadv_nc_purge_paths+0xe7/0x3b0 [ 1108.459343][ C1] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 1108.459361][ C1] batadv_nc_purge_paths+0xe7/0x3b0 [ 1108.459385][ C1] batadv_nc_worker+0x328/0x610 [ 1108.459403][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1108.459426][ C1] process_scheduled_works+0xae1/0x17b0 [ 1108.459458][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1108.459486][ C1] worker_thread+0x8a0/0xda0 [ 1108.459511][ C1] kthread+0x70e/0x8a0 [ 1108.459530][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1108.459544][ C1] ? __pfx_kthread+0x10/0x10 [ 1108.459562][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1108.459579][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1108.459597][ C1] ? __pfx_kthread+0x10/0x10 [ 1108.459613][ C1] ret_from_fork+0x3f9/0x770 [ 1108.459635][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1108.459673][ C1] ? __switch_to_asm+0x39/0x70 [ 1108.459689][ C1] ? __switch_to_asm+0x33/0x70 [ 1108.459704][ C1] ? __pfx_kthread+0x10/0x10 [ 1108.459720][ C1] ret_from_fork_asm+0x1a/0x30 [ 1108.459744][ C1] [ 1108.796077][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1108.803137][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-12426-ge271ed52b344 #0 PREEMPT(full) [ 1108.814728][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1108.825087][ T31] Call Trace: [ 1108.828402][ T31] [ 1108.831375][ T31] dump_stack_lvl+0x99/0x250 [ 1108.836013][ T31] ? __asan_memcpy+0x40/0x70 [ 1108.840646][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1108.846000][ T31] ? __pfx__printk+0x10/0x10 [ 1108.850651][ T31] panic+0x2db/0x790 [ 1108.854701][ T31] ? __pfx_panic+0x10/0x10 [ 1108.859245][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1108.865189][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1108.870707][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1108.877076][ T31] watchdog+0x102d/0x1030 [ 1108.881475][ T31] ? watchdog+0x1de/0x1030 [ 1108.886137][ T31] kthread+0x70e/0x8a0 [ 1108.890351][ T31] ? __pfx_watchdog+0x10/0x10 [ 1108.895158][ T31] ? __pfx_kthread+0x10/0x10 [ 1108.899878][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1108.905110][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1108.910409][ T31] ? __pfx_kthread+0x10/0x10 [ 1108.915024][ T31] ret_from_fork+0x3f9/0x770 [ 1108.919899][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1108.925042][ T31] ? __switch_to_asm+0x39/0x70 [ 1108.929815][ T31] ? __switch_to_asm+0x33/0x70 [ 1108.934594][ T31] ? __pfx_kthread+0x10/0x10 [ 1108.939283][ T31] ret_from_fork_asm+0x1a/0x30 [ 1108.944144][ T31] [ 1108.947518][ T31] Kernel Offset: disabled [ 1108.951854][ T31] Rebooting in 86400 seconds..