last executing test programs: 52m13.700178182s ago: executing program 32 (id=17): r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt(r0, 0x200000000114, 0x2715, 0x0, &(0x7f0000000040)) openat(0xffffffffffffff9c, 0x0, 0x64440, 0x95) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x4000000400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$uinput(0xffffffffffffff9c, &(0x7f00000002c0), 0x802, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) preadv(0xffffffffffffffff, &(0x7f00000008c0)=[{0x0}, {0x0}, {&(0x7f00000005c0)=""/223, 0xdf}], 0x3, 0x8, 0x80) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r3, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x36) setsockopt$inet_int(r3, 0x0, 0x8, &(0x7f0000000280)=0x40000000, 0x4) recvmmsg(r3, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 52m13.486112047s ago: executing program 33 (id=18): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000004740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/23, 0x17}}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = getpgrp(0x0) syz_pidfd_open(r3, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=ANY=[@ANYRES8=r1], 0x114}, {&(0x7f0000000240)={0x14f8, 0x37, 0x300, 0x70bd25, 0x25dfdbfe, "", [@typed={0x8, 0xd0, 0x0, 0x0, @pid=r2}, @nested={0x13e6, 0x2, 0x0, 0x1, [@typed={0x8, 0xc4, 0x0, 0x0, @u32=0xffffffff}, @typed={0x8, 0x115, 0x0, 0x0, @pid=r3}, @generic="c232e50f3616d8b2c236657efd2847e089d59fb4fd72fd32b0735494d213a9f3f554a110bc5ce30b8154ec540c5b1b3e3de931b292adc33382feddb467a5cb787cbe76f4f4601e1592dba7aedb6663be18a41ddac4517dd9d43bf9e34e63a93239bcc47a0de106c22d7edb798f8c2f226a705f5bf1b2e40c686830cf725c5b3dc73b3c1cfd", @generic="50b98a91be253fa7955643ff8909426840857c1a2854679e9f2ae5430f77572b4f2385c0b8e91837e702d64d7ae5631b0f691e20b0d5710720cead1041e268009accafd858fd8f5ffa7b4daf8ed064af81d3d338dde656a78d9c46511981f8be99435a6686c40219e258ee4c43168f169e0944326270914c1a52ec8141c53d885d77a802796276e4f8bdd0802bb93dfac4840fa943b0f98f4a176a562d5cb38efc99dc06eb71b13a68ab8f61c3564f20e7903738ef9cca1b5f1ebe0a05b0fb9ab2b3a295f9e6ce15b561f481496a53353eeacc7d6848466b9800a9d57b651029e1ccb199131beb92720d50", @typed={0xfb, 0xc3, 0x0, 0x0, @binary="3ea0fcf404305634a7687715b9c8c41209befb4874ad1fa765ea9f6230c5648aa70992ffa2f456bd60ff7fb8c887f2b85131dc6035979be2e8f821e8528032535f46b7c550b778bd72146ec6473a8f2c5d957356f9fa58ba3614f0e92aea1eaa0ea101f60a66467905917bdb55745e7e2debe9853b36728f763e9cd04ba8a097ea06b3b9a9a69b24df3bac60c0b693723e43e31888354c01a3652af90a8fb6c9add25cdd968c314f131ba5c17edfcb830aea8b6884a3768bdd8361dba7d8b46be2553dc677eb16eab53fe3cea2748a9936543999a6960cc5fc30579caf2cbeda6e6b90479a702a97221c166ba469caa5af29d04038b5a7"}, @typed={0xc, 0x30, 0x0, 0x0, @u64=0x1}, @generic="4b30127ddde526b6c303f7dbeb76f36e2f6add823ab9be68a17fc67b7c7a0adfa1caed6622371c7db9a73a3ad3bbb1acd55662836a9924b0a57de9ab259fc3cb0fbf8282b02825aba92ba17f7cd6f716aceb889b5caf9315f84e2f2265a973bca843eab53657390aef4fbc6dd10058709db3e5cb8a146b7f46e9e6a28dc0550b618aaf22edb690f6208087fa4a167fe16768e446", @generic="98772f69a300f7a8e3e8b3590dccd82a451a02b4c39c7894b6bdb1d9b17827afd6bcf8849c1ca5360e5e796dfb3795b5c42f2c79cbdeed12d4d6fb2a826f8b8628d7d102848ecf45b1a5205153644e181a9be4d51ce09a7a4dac7a9f3f73e8ab8fe304fb07945a7a3c4bf45ff6788c7675e2624fc6faa27b9383e8fb2dddfca430bb74ff928e9e1989681539f3379bae40b10cd3fbb967478747e91159fe22e1f2f91eb8641b9f6c4abff041f4f678eac873ac0ed91a64df99c34e5f7f77b5587be051931994", @generic="29b6a983e3d05cb2bd5d39ce85966fd8464f4d7db4d94c8fc7504f3c259a874b28eee4c22bc0ac07612fe2078be041885fc1d067e73e6d08b49395f5c192500f0dc5fe579c5dac1e53ad43598c2ae1c68df6545a03d63e71bf1f942f9ff2ecf334ea9cc337b35e21653336216d684ed7a6498021b5e03b51e80f68262c9ea4a647153f0d9bf7c0d2297a372c7d985efb7b53f3ad30fada4969afff7add5e7945d1b7642aa7f78b211ac1875de23c332fa72d4a9cbdef788c5f97a233959c16062cb93c34c78492b0f5b7a4562f3dcad763d680c93ad10bd8d8d428ea665ed0122df712e19a37d8893a72b6790151ffeff87cff22db0a96f6c81abf201e74f82ac9d5cc3d659d6b1b7ed82c7e9087a4ce260638e43da238fe3284d9b5498f7510a334b66fb4d1560537018a22f7d6475ca28a724f5c507051844bda07a74eab5147e243818f0dea1733551211ccb8a9fdfa95605a062f73a46d83cfa90300e7890a78ab8bb23de12dc17c8d662ff8628aa61ab527d7a232a50a4cd5c3e2c374af61556c6ed745d75cd2700ab33dac7f0b0e2b5ba3be61903701921e3724267c46aed460c0865b40f54c1d729cf2721536f7aa69dc5256cd47199e5ea403194b91a81529823272b3a7b9d9628020a771ed02563cabc04dac6a82f73c322674ee70f8b42ae41853eca7bdadf00984e1ac7d8ccd3685c945c6bc8d36794bd37b8e4be4577277ae517f795917e0b9c39a087c13c503a93909ce26907d6aba1da9100de45ffa707febe2ea0a067f921d9017bcf9b48db49296c35024ef65a6c26321074de37f68c74618e4fd9224f56c86e76ea0a762ba36e788ca68c76fa7486b73d2b3a419442a63e23102a752543f72d82dd957f56065fecca87d10b8b201b7448a788bdce1e783a994d4ed5461a4234cd37131bc53ad454d8bef6766cb458ebb8dd10d83f7016a80e4e445ecaa6106ed0a3d032e6497c4cc0014e04d128edf654a20936da090b177337b4fc0cb0c51f0f1db2936de626dc39cb721008e1fc54db9024264d7a28020d5e5b924bacb856f69c4eb625bdff29d5656bd27ce68fe277d34f1f7de7c5466e07d15935c8807ab36792ff42f6726dddf10fc4a7555d9a134354ffacb2dccbac3de34d499f8e88074e3652934428bc4babf32f0e6f1eea245b30c9627ec6a1ffdc2da6966f8c1531a834c065a725e3ce0febcb3436965b1b1446ce4c757a10307a39546ff2eec3a9ad9ec8856e7636115b5db5d9be4b4837c628fc6aa31bc0404a90833b0894813e615eada383158d52edfaff4fcb04f7593b6b4b24b61975c81e102793383ee8bb62331678927750fee67b4eeefab4990f782e88fe1a178f28e7ca1467c0af0690c64d6ba4543c356827f5113a28f8001514647970d233aca960dc1d43e3a9fd15ce55de5223933b7216803f149e047cc1e3d24ace8b61fe8e974c9591a417d341e279ece4a344a9c807fdcb99675d399544ba2b126a11bce97b9727d6b1dc6c7a38b72fbba18da373dbb1a67fa0ee65878290e4a41882e328167af3c75c89d6b2f12ea915f6db227ad333c263de2860d3871f5c4b5abf2d796f7df7576dd72e1c57748161ed125c893840d5063a83ff91ff9d35c0841c94e6b1b356e7a2cfb707c30ef445840f50c28f40eaef514ab5061ca9453a27f493cd2c104a4618297be153b196ee933e962c54950a9c19ef7c03f5a3c7692ed0aa61196b9092d628376694e7749f4e06e20709e355447344f7ae29841b7a2c9ed582b6fd3b2b7c5db547283039b455371c5b9fd738c1accf52ca2696854e78dba179c6654ad524fcd5109226c8944ad831ffccac1dce7faa6c855b1953e5ffbac7d17cf3fa8c6e866c4747d8281139465b785b8b9019c306b80c9e6f04a9e3a38af1cf7e0d4337f7e501c648c6929342585893f8f7ea473ef1aa0200ac80eb4d492a4c2c798ae448dbc866765252bdb89d2e8924255cb507ea71714721344eb8ce9a6c859a7484b29b4dd8422089f9305840d9e0b1c5f68ce412488c71730c360f3cf035d75a7b767c5d3add0eec600bc2a3b8f74480ec6344903821fe1c68a37f0055a8f50d7aed9919a2ce3925df54e1f5cecf355ede1e5ffd8f915217bb1e472ca78d2e5de90473590cd737ae8fa9e1b38db64cf62073a6f0b26364ffcdcaff3a7bb77a6100858ac4fd4d1f27c5c9ca97f515544589cdfc5d4f2b24e2abc9f119c9e103ee6d864b32c2c6cda8222512ffc69e3e13747e9b80bbb1590a44e5efbc4468df83c3b01c86526cc1283d1f25a171fe829b57b4b9c8e4111751f491c0ff95299a9bf22a80d423eef54fc58505412817c5e0e81dde10829188bc746aa218b5a0fad739117223389102c2c1e22caa5c13054b52fa4a2ddeccf6490cdc687ecbdda80e4fcd4fe530e1a2684e2ea0d270b299a582dc49f37c972859ab8d852211b05ea2681a8fac14b983db2ec53cb7513abf2f917a8f88b6d89ebd32744ba3a915a6d81e9526130c83d6e6270bd0c66d827c7f989e0a9ff242015f9323771dc3c80c552fac650aa24951f82e63f753cf864394507c998068b4a63df8603ae3f385a82a6dc1249144b3ba72e99dd10b0d1f358723653464c6de30ea36f7b7d9fd01b9aa7129c5b3b0f575ae3161418f938d3a8c43268a332cd7bb3a03ee88fc16bcd3b7982cd55bffbca5522a36819d9bb2e81a466eafebfd87d4e4fa9d56823512943467546515f8aaa2c202cfe2fda455cacdede11e00823d3ae6764cd3ec1859563d33380c1066955f898b5534fc77b3c7ff4d416751f5dd728da58758fcfeea4d8dfe6ea4b069cee9d61248ac0e56470d03aa528bf0e335fdd283fd6f994cfbbf33e22cb867dae75287fd9ac515946aebad6502a77eaf7e06e31c2638c10c44ece7e614fb356d013e616b55c730051858e8c8744c9d2c9055ca9bad745cfcc483ce71e9963c4ea1ea8592ea55f9a328d48648bdceb43296db658120ba78882b6d1e8ba6be314bfe7cc09428bb35803a07da2e281a882715e53379309bbd470dee4b11cdeb77803c0f7103de767e016af26d75948a1477149f511c2b405b7e9fa1559081a172a2cb3ff71a1d8d2d10733608a2f2d520d741a4f7a7e28c376683d98e8e0a77707d435577f5abee55daaaf4bde1fd00e0217df7542b5c44ca26025fca29ce259b40eb1d3812bad88104c4cb35abcc8f3741f28b5e40b45151bf511e36151c75b491f608bfb4b097bbbc4237123e2c4a9724c1305f64561990e34c793b6ab4e7e85051e65511ccf8a983a5ea6fc4300867dc855ae9fee077e8e053bab10348105156b07b848fd864d597abf4254901625d04ed6f2d09de9dff1f5a00f31b7ed0db48198cf27151f7280af4ab05bc9636b0834d4e1ff41b368f0d9c9f27868322bcd1791e13a760846b339aa24eb7bb5e543c2679f7e13eb26a03a995602eaa35cec8218788eefd265d6ab426c4bac4e66840e3b566fec1e77a2eda2db72278a686164cffe658e9721fb4a1001cb5084da448288d69568e980502be528ceab74900acd6c0218aace9d08d1e1c9638c9aa131315c017d5794d1d9398f9328a00e277e1f4b49e2e23b1f5b78a1f0c27332d07e1dcdc7f0c989ca015127f7a5a3a4cb13c844abbb499528154bb4bb67cd206ddb5d2df9bdc7ab9f793d123d8de78e07236c66b7d329afede2ffd5765038f39039744830f71ff61a1c146efd64201694d4467655cc7dee4226a0af765f5c2ed80594efc9928ba23036ce7ec911aa7dba3b1c1bea965cb4b3b97567557abc3205f5d3743b9b11bcd713fc75924285de7acf626bc0ce237386582e82fee1dfd5e6865a39718b9a965be88d7c2a27b79063256cdb4499fa9f777b436b44bdf3cf0cdac0b806916f496b92da2ec11ea907fcde057a98137cd0c9960051bd82164dbc0153c27ec4cdaf868702e73bd27da3c4cde431cda2562966d80d991ac256f31b9c996ec6c70aa6b287981089d06aea39a5b4744d21afaee774b09c061775b2a6e3f23d8661809637883a4756574926d47c8d31af256b4fbbecc6f06cfa55da02274c214bc3193fcae2f4e237c818933caf9900447b019ab2de3f8592e029c989e0e74b6c9b2d16fd77ed336522addab4dd24f940e562163b6a95757a0c1231fa8391cabad99eda42b9f5207789fbc24871fd8bbd38215e1552d23eca2259abafc8a5543b5db703657bf83db4b5cfed89671e2a6186ab0c160b323dd7f38b229897fa4eda854c628f504435e3adf01e9d246ca1f27d99b6fda43cfe1a3cd48e4bbe45a4f8acffa37003305754a72572393f1acb516d97328631c96f32e821e428d3093ba1b9c1cecc537ae80c424dbf55806b97d4545e2ca2fd989adcd954442fbc2d8a0ab50b2fff125ad96ab28b05bc7450f455312f1e9e086a04aae2f2eb5805d88fae06b93c29f57b59190d087d58227295042eff399b4283e4a5abfbe8125a7d61f00e05cc9b0306372a3584f5dd51249307b530552b482ba89a33421bb6110b1db70891028f787cd302619a195466ea489ee4888bbd418e6b70b07c8cfbbdb92d83dc2f3c7a29c1cfa3ea39ed7ff63ffb20b84bfa29052b6f9c11e3a7f21e56e8bcec29db43e489fb4e8270455db4b2e4e4373aff1c05b899afa0dff6147098a73d033971c9f91ace41a01b4e5dad2a05731c1f85fb9f862e38337d0bf994788b57eb04f31a13aef497ea78840995ae4dd49b5939490fbebfa6ff12599915397228449ecabf7c2b5ab985e150223436c69e8785d4c60063175b80ff48071037cfb923e1b6a6a1efa6d72786b7b93c37a63205302014368f961b6f012419f190385d0fd4b2c133530db40f95348ec6cfca839fbcec414b9f0c4ea0e82bd9d08eabf4874c68de658f8100e45916974442ba4222574dee5669e9ce573c9d40a188350cb724536db224c5348844b93b95bdfea98576e11abaaf53afccb4c2cd6641ab964dcf4971163890914aec9784161797ce1e026545d959040760b36bc9ef7f6dbe83127cb811253022ab62286711fc55df5f624ec49b37e4f19b4bcb16030266622b1f8401f4dc3be30721067217beda1202f71afe4d5085e8220c101b04e389d320fee98a8e45a26c971eaf7e06b62befc2fa9c6efc7b46968d132d0f67d92f729e2af6d8f657b7be81f3398722db883c515568e76f11228ef80caf8ac277d860f3d3fd738f1f9bd8692f56a58589658dbc3c76af59cd30e70854c5f1bc51d97f8ecebcfe9b250abedaa6a49f29c5e4dd23a5ea70496a3964f2cfb11c70d3f0c0fc5e80426aaf83f7d7d595bfb3368c630bf1bf96f196ca702f715613b9f7ad0cae5111e420f2da8933c29214f2f94961c7a3fa919cbfd2c4d466a2a99034ce9f5f2092dec2ac5c66a27a08d1b3381d52470ecfbe477d96e19f375ee5213f80310e9bdc78866bdacf2a88cac155fe221fae2549892c64794dc7af1424c9007ac63cdd3bff88489f0859676ac5cee8c8c00d201aee4227f5424c8d321f17adf32f2833c39588cbbde6b2db71da396d4d4b922426955f2490eb3b8ceccd00ae32734145707b9564a80d067c1645390f4c74b92d1d0d324fc69beac3c96bdef7b2a92c86fbf3dbb386b5c85877f92782f061056394bd62b3808bbd22aeb4d6f87f07bfda4b8c60ef4161eba988ee541705f6f11c73b7d100cbf3f8fbee8650ec949b37beb2f3eaff4bda0664ff1ce2837a4dc99b925d842d407a715f9b62a39eedd0ad2f8160201ebfb61eeafde7eb4a76f0f6ac0fe847ab7bb4a240bba959"]}, @typed={0xc, 0xd1, 0x0, 0x0, @u64=0x9}, @nested={0x5, 0xe7, 0x0, 0x1, [@generic="94"]}, @generic="bdf6c4395f342b3c61ce99c8a12214598d5000bbc43159443ca74bd38ad92b13734aa1a574f4441c6d8c539177f85fcc6dbc58327ef274dc9fd0786b17251a729a08980c42ff048bdac0356b5b43becc1b4dca1916981a29c2e36d72a3b7ab52d4bb5db99a41cf2109e774a3c8f4f86f214a14c9f568ded356f58e8cfb3b8a141972017ef6aad0905f35d05d27c1bb9d837d396d9a334a662c77f9c9ee9003d66dd934224ea17410b57a50d8ae6d0cc11ae6532ecb55bb6dbc03091b86992e838feb", @typed={0xc, 0x2d, 0x0, 0x0, @u64=0x10000}, @typed={0x14, 0xf2, 0x0, 0x0, @ipv6=@mcast1}]}, 0x14f8}, {&(0x7f0000001b00)={0x117c, 0x28, 0x4, 0x70bd2c, 0x25dfdbfb, "", [@typed={0x6, 0xc, 0x0, 0x0, @str='3\x00'}, @nested={0x4, 0xbf}, @typed={0xc, 0x86, 0x0, 0x0, @u64=0xe039}, @typed={0xd9, 0x59, 0x0, 0x0, @binary="d0dfffa4fb44eb9c0624ff850a0f01229f2fcbd76511a43816f736fde02072f475c20db8f2aef73c45505637b05c50a72206053a8315f1b74b73a37fa322a59a75c2203dab720a9135e5b1f8825154b906f048cb7c3910729c8a0326b78e8e426fc26e5e1b42ec7fce7fb1c83d4ab694b96965f7f026eb5cad55bacf8e20132d7e184cff925e3e3c582ed617f0620e23b4052e4b8fd302f8317a2ef1c178dfa6d11b1ea9c25c0f600193cd4cfaa4d43f19ae500979ace04fe0a11e0eea1a39caefc6b7a8903d6bc93595cc3c0f47aac371625dc31f"}, @typed={0x8, 0x13, 0x0, 0x0, @ipv4=@loopback}, @nested={0x4, 0x20, 0x0, 0x1, [@generic]}, @typed={0x14, 0x5c, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1e}}, @generic="b6b913e9b814d34f2f00a3f23e6004752bfa1334234452274c3fd976dfc9d2b355b9a8410fec92091aa2b9c16dbd1d560e3a14d77ce73a2234fe2817da943844582d607fd9443a71a09bfd6d4ab9585ffb037662b22d998bda9535c2481dab817344c68becd7c07d884619e9f08e0bc5f12114b8e4c309236755b26a18f045f2d3e71259cd5ef8f25087900425f3a2b38ce1b2345320be9b89703ac2b2c752fa0a3e4134dd5a2b8f845c9b75ecd7a393d14a4178f5ed099e562c0182ad5608bef0710cd0cbce0274544e5ca774b6cc97c8d6f0aedbf9a45d49a62c2c647c0fd7326d8218a485362114c88abe9842ff7b452d235b56913a263469298bcee62405f201d3b3ad5d7b7ea0323e9a98e7f1c3d15399625bf498cfe8e612a11d193a2af3b95b7f5e3fd0db508b0db95233a222613b86cad0bb5de93b5890f6056e1116dbea488062de20e3c8bfa56b58e9080375c702315fd9e936b68b3803924a3e636efd2516927d05fe9c7fcd4cb97f1a8ca2e6393c4efa90b32b7f825f3a46c5bb2242c936bee9fd8c38580cfedebb70e9147981871ced9ca3655a18c6ead7eb2405e19bb9259beb3ad59ae3d64cb5ee09889881b0f74cb847d170db69f59ea0e1de88dffae25ae5f9c54189afd8682697df039e8be917cd95d2938ab4d64acdbdf9d7f9a4b40a4433314b9e5da7936ed14f12135434c22ff97d24298c51668ff91f1a6d3c09a69ab4d215b80a2cedf40f202cccc27a65050cbb0bfc73306523010b7c170ac5b9b7b7bbc84da670229992d793bb5a987d18c8ed22b274ca86092d675888a80e56253d824c04a47f7821c95a8afc4ab6e776c8b5a7d0a3340b50bebc89b1bb4532291837597e776496bf6a5e8231495ae4a5513d75f6ac158b3270464a274828e003ab55e540f01d589dd3f53619451df90b328b616fe7921600c91674f95bcb575e3d3f62c7637f4336e7277b434de6be26c6d00b5c2bf4f837614e4e246d87b7c9408deb5accf700639202f241c3beeb7e4c4f78aca19f1d5bf97ef15d6ceae10a1d1c6398b0a878fe5a9fac0b4dc472a5cea36b0d5025fa8d790f9046f1af5f51b35519991563f5f96043609262291345f0e0d498666135ace5802cfc97907cd95a5a18b27129fdfcecd7fb2bf3036917005de8f5b22380f9cbff5aac5fe0cf9e2d9178e14ab7c9014e5b8ab3de3a487d5aa6acd8d38aa37e13cb2d3daaa7326516faf342698a25cf221256ec0dafdd0211ff49fa9b909fc0b324b9028f882bc0f5dd4b2f48dfb8ae93abcd14f80486c93f03e5db465e2f6e78be3eb67b243edcd4f130ccc8d09b19769019a65834b58e14c978665aadbea6a5e44c91d5cbecbdc2469d5715aa0f85d948878b7268186bf5c0104b9413bdbc85d4cb2900adbb78b6a55c768a5d10076f730079795986856f7735298387949c033b3b6531e8b0ad7b6887425a061303151190413d3d67a7232331828eb404d6d8e9235b74bd0f0d0a316a8370ce87cc8be81fb8e5ae5e11aceee4cd89bbf7bbf6c3d1a0dffd489d494cfb459c45915148de13aee0220fc81c51ba0432b146c22068c8c7bd85d4fd50705fb705c07fb39f4097f0b80fad3e2121f66772cead26db9e2a61b1c66795bed94df06bbe2a319846df149a0ca1f3ae188fc0f9cee9e615eb3476224f2ac44c8b08895abf80f9c903bb896d639a06917bc2d300d42159d6ff41d5eb8b5dcdc56d47efcbf16c2805281696ecba703dfb383c4a6da1dc7fcb2370cfb4536cc3c0da000069ecb191b2bced1147f9b9ee0318144309a05dd91de46c5b45d0b8c4c4d23f98a9c6be7cc37f7f894cef0f777d87c5b236523e75516436fec9f507a8350f7dfd7a8f1796d8ca2ae619603b5c5c82dd0b238e29814b7d468ba2c7b87b2e1086947501ba515aa2ce1e6552a31741b55a4c6b96d20a60d924055d4074c31d35ebd06828aaa70680fa2bf1d1cac4de2508c5183a6c6433cb3c2e8134e9089839d4679170cb99fed7c91e651bdd67f2a6ceff13ecb7f631f2f23ef469abce8426f9da77c3cf37419f9f13b06bcc846af864db14fe3d93c4f7416530a0c8b00085bd2b5e26a3436c2deb4e84c98e6fcd0f68e3806bb1204dbe2aa61f177b661a4767842a254f702b993868d33a1cabc6a6b6475f985b2a4ff172693685d58ddf34e4dd14a4bad36a378ac490fa5ecd8d3c389a46686d64611011555438add2bd1bdeda5d45d717bdd8efa866e160fc68455b1211374b9d6aa4f42a94d5d8f201b9f86869339599f44bf6bfe5284c28f3643a091c099ebe8d9508000715ff1f80c8f7b4527e9ae71cf11a6242c5e898e74eb879846cfe83902adc6fe900ded4f648a97994a007f74d538422dddf4695f67d065d23882bc15dd078a91caeb926b3eeec6b44a53d00d445a1d3610432c8203f2a2c8bbd86ef9f0a665d9884681cf5c9af699b94b1ddd45be7f975dedeead2f7ec30fa0c4c7fe2968e9d15eb5e4c481affd4a1aa9c4a662cd2c4b3c00b297eaa076153130c645c600f5ab7fdfe6937cf301106df91242d0a7ae0ccd08b6709a107e5b135fe91d3ab0c7650eec8243bd52c048bb291728c77a7fd10c576a80af9664b7c3ac5a33b2da8a4fcd3a421d66946c4fec2c8fd5957b63b234dc3dc0a16fc0209c60db37e60a73c909ded11fa33fce3d0db86613d0c1f54ef168d7da6457a2e0791f4eb4c52f0e458496e1da8654c32089c02d74ebb11f5cf245c3b57d454cc07be22527593df26e9965b75a57d127c5fdeda86632cefddfbbfc5fadb0d3a570217af9ed9f94aff14d5c84ffe0b0f935436658c709a36582e63494642fd8fc8a408f8e5a8108a682d5ee67724a65f7da0c6a64b57acb5f3b9f25351f2171913c058a0ce3d596bc72e5f8f905077857e24224b4d04fb74c0c6848269619baa440f4473561b6e70ab8095818becc6cd650b54796abebffa903fde5d9534a3b8ac6f3dd3de30b71dc6158b2b91ef727e9071cbaaf13c74967cdf187e6bc78db0a55d59ed17eeccc1ecc0f9dba310eff311a6c39a77ea08253736ef6a7a4e33ce424b3d40e7724f62738d9de94a998520d874dfa9b1c43cfb57c5b946d76203775d6954396d7c42e5a5cba8165ef44f3dbd009c57169e6b53c44e35be4ed9df862e86fd9c671c6b2cf6f3fbdf45c2d3c28dd59cffcc8ff45c8dc4fc6eaf9eb68594ff53b9f6b64d0a1f580c38408feb762369ab0046392d32674874f4ddf52a048305cb87031bcf55d1a17219073fde825eb8fe597413de2dcccb6027afcf7ba4113baa12eb586b580c442ea07733110446d8c12147b10267e5895f7f5382d8f6c87258d45c014d5c0f7c9e2aa6af347859560c87390a037bd08620b5aa3cf6d3d1a47e3006524cce4d79de81b53af79eb685ee7e1a2268ad8dbd4b60e44418d4a447a4556d23f67e7626fe14a54f7a3759f5ddafcc5e194d72390445f344ffd19c123982e5df6de0f72a69da1d40a8c87620325193c4327d09f28f852174f15246840e4fd57745a8e3613c47b882d6c3560a0c5fda743bc01c0d8078868a3d01c91ec9884b1f80d8b4d733191614eae88e30022a07b1c843d943b5488f14e3b87ee18bfe75d918531cfea3e99a5a07a76361e052eb2f0bad5091676df51579358575689c336d5ede42a293b025badf0ef847a13783858ec386708e75e375c2daa84ed1a7ca583c6b954470d6a3f9e255978e18a32c08b6411602d0f01dbdc94738b2f6dac49375caaa2f15b00622c174f7f4efcb3502c60c94d1fc47e350e53baefaf944998992132d223ed74caa127ee0f9c00f132c1d87be55849448490826a796c9bbe0837ce062fe64953565c38f4367bc2bbf5975e9bf10a8d5a1aaf14e25d00d4a4060851e3d02cd3296106702f80a1e853ade9d7dded3ccb695ec50190f944af3d129d7ae4eb9f6ca110baa1575a9c77b4d881bd79e6d1d0a7c198c4852e26a6fa64a966d0e825a133ddf52a1b81b39a29de12ddda252bcf2c37ae0362d60fd476e575b02a04b70ac2fc8d8070b2175342c27c9eba33e10434edb40730e4b0197eed08fad1c93a8ce04ceece643544e17e0f78ba3b30a384dcccefe655b63161bbffc5d87e3881bd82ffc4028ff370b6beea3c141960b57c57f81c6d3b0a207da23a15bd351c372747bf5552b146f1b41f69cf1789d8ca2915a24a1dbf038ce1c1161892c035d802a447cc1617cb31e02c5e3ff4d6782b40fd22c399534c198c37d0c27c2639e925d0f9848a8d4134e286ca80d13db8962b177aee50c499d5f8ca8305d14a4dde772060f24aa0fec431752eb764ae752ffea0f11dc4728af2bad5aba68130108483b4b24e103698434fd34d9c7a0609d077b872e319825c76b0e1ae289103ede997574993e374039bfd7bca918770f20c4f6376dcaa126d5aac053ac007ec2d658265739c4cea410760948b61369f1d1dc38e3e8866ac7cf53c3f1f94aa7a156f3d2a7d37661c63bb5024acaa9ad184af511eda931c59e67d33ed84c8103e329bb7c7f5f8fbf1b52d98b60b265e243df3855e93dcffe79e617e699320887bc0e63468b3c7a396a08dcfa25c7a29f2fd44d9de80dc3fa14738ee3963aaeaa7d7d33ba3194a1308a238dcec54319bc945fe576aef5d4f6a3ce58e8b2ffbc3a351a60af5c8a2dc5050aad73b9c6b71c6928722fbb0e36cb41d8a7239bceccd9484ce8344fd2a120afe4dbeb06cfa42823a9dde9e53c7306d377cf745dbaf805a22dd09d8cef312aa2444ca5ecb86068e40b942e61c5b24dcb8b2c91019358663006ebd602e283404aee50f8486f839fece0e0d43fe48216b00e801d54df2322eb4be4191735893f850072f0a41ed6ecf95e49b64d880aa3c1c3832359a5cc49f989f625dac5b03de7139c0066a2382441f46c0a58bfd39e0b1ce9c85cf05f8175ecae3d24d5241352c8fdf8dd24d6bb91f55b2f1589a1d69c81249bf6824f85284bac7d992836c33120de7d87577c44b5d442b33bf86752d391fdb06f20176a8006d3616b0320e966bf0f4f84a3775ac7d8abbbd3fe651dfed327bed442f3bb79e953b6ac7d70b37f5fdb6d079a1c335bfd5bbb608868d5e147a758f82d9207c6b607ed822ee4471a21a03c1c6bcdd48f05df474c71fb7bc801d0f5d54acc0446cb7d9a3e856fc13a0fa27f7d78dd40b92ff0fae7df29abef769baab3b18285a7341b2cf921e7eb9be50bb4f71b7f83c0f3c76c4849cdae06f00f8cd32e2f15ca93d3bd508bc04bdd819b40cc711ddc69bd802e92a567d71291d3efac6720fbfb9a1ac4431c8e77ae8226317e6f59505352249125aa40ebe2a68beff227cc781284c703028beb671252836e669f3067d01d5c9926cbedd42a055fb7c9095b606e7151c212cbb782a4ad1c5e62d4025a4ab95cbd9f3a019acf7ea5a9828c2a34682a1e37f74e38d026dace4c8676e2228fc7873bc4707785260e4371a8b64599b08fb78d4f01b9f2f86e156d9c11ea2667ac2cb5e256258716730a523cd9a503eef0b43cd279370185757489bb8c66352db8fb38a97551b09ae2333d4d4951268ca26440cd88ffd88fca62a17a57daa52e841d01686c27bb626a59696eef2121b19190545c7a7370f25395fc44339613205ec2358303d88cd609139dd325d84ee35493821015e5b2c563891c5f30060ddcdc6e5aa9c6333f852e9f7a10a292459c386c3cc6aee9c6ec5496300dc813c6d65b3b158b0d2eac2b9575dc1433e829f1c743375fd708d4e7c705c659022d9c54db7caa81e569c29f8d75784ec2", @typed={0x58, 0xbb, 0x0, 0x0, @binary="62cc7682ce5948bc29c35933c19824d5514a76c4ced5fc0a6d3b442163fa33a9a5058bcac924fbfb6ef242f385b6538d83f61f858eb37b6b2d3b0d97b8023f8b4625c38ef6b3346cdb9aab883b379735d5ad3449"}]}, 0x117c}, {&(0x7f0000002d00)=ANY=[@ANYBLOB="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"], 0x184}], 0x4, 0x0, 0x0, 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_IOC_ASKUMOUNT(r5, 0x80049370, &(0x7f0000002cc0)) syz_open_procfs$namespace(r2, &(0x7f0000002c80)='ns/ipc\x00') setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="41b019b6", 0x4}], 0x1) msgrcv(0xffffffffffffffff, &(0x7f0000000180)={0x0, ""/148}, 0x9c, 0x1, 0x3800) r6 = openat$bsg(0xffffffffffffff9c, &(0x7f0000001900), 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001a00)={0xffffffffffffffff, 0x58, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000001ac0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)=@gettclass={0x24, 0x2a, 0x120, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x6, 0x2}, {0xf, 0x5}, {0x8, 0xf}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x24000880) 52m9.50128836s ago: executing program 34 (id=30): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a0000000000fa82a3fa211411fa0008000a40000000000900020073797a31000000000900010073797a300000000008000540"], 0x6c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400001210000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) 52m4.535523433s ago: executing program 35 (id=41): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0xa8601) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000000)={{0x80, 0x10}, 'port1\x00'}) 51m56.199843183s ago: executing program 36 (id=53): syslog(0x2, 0x0, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) r1 = creat(&(0x7f0000000b00)='./file0\x00', 0x0) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa3b4, 0x0, 0x0, 0x0, 0x8001}, [@map_fd={0x18, 0x7}, @exit, @ldst={0x0, 0x2, 0x0, 0xa, 0x1, 0xffffffffffffffc0}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @initr0={0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @alu={0x7, 0x1, 0x8, 0x7, 0x4, 0xc, 0xfffffffffffffff0}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x14, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000400)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x2, 0x3, 0x1, 0x8aa}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480), 0x10, 0xa8c3, @void, @value}, 0x90) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000c00)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703300000001f00000000000000040014000d000e000d0000009fe517d30760bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4000) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f0000000040)={0x0, 0xae, 0x3ff, 0x30315559, 0x2, [r5], [], [], [0x8000000000000000]}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x74, 0x74, 0x9, [@type_tag={0xb, 0x0, 0x0, 0x12, 0x4}, @float={0xa, 0x0, 0x0, 0x10, 0x1c}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x5, 0x3}, {0xf, 0x5}, {0x6}, {0x5, 0x5}, {0x2, 0x4}, {0x9, 0x3}, {0x5}]}, @const={0xf, 0x0, 0x0, 0xa, 0x3}, @func={0x6, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x5f, 0x61, 0xec841b915e5969d4, 0x61, 0x5f, 0x5f, 0x2e]}}, &(0x7f00000000c0)=""/164, 0x95, 0xa4, 0x0, 0x8000, 0x10000, @value=r0}, 0x28) 51m44.009449041s ago: executing program 37 (id=63): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x3, @private0}}}, 0x32) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000180)={0x0, 0xffffffffffffffe8, 0x0, 0x1, 0x0, 0x0, 0x14000880}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r3, 0x80000300, 0x0, 0x0) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000000)) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9cf8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_SET_SWBIT(r4, 0x4004556d, 0x10000000) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000300)={0x8, 0x461, 0x3, {0x1, @sdr={0x59565955, 0x10001}}, 0x9}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='oom_adj\x00') write$smackfs_netlabel(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="3138343436377de888fec9bf1e713535303937382e30303030303030303030303030303030303030392e30303030303030303030303030303033333331e62e30303030303030303030303030303030303030382e2f3030303030303030303030303030303632353336fb24265e2c00e4ee67f89b6e18336b20c98f6a78f27505d500245ff942aa6339b2dd27191e77d0"], 0x6f) 51m39.430639972s ago: executing program 38 (id=72): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000006c0), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="a90300000000000000003200000008004001", @ANYRES32=0x0, @ANYBLOB="d7890a00651471877dd94cb1dc940b3b0e3e3300981e5225d41fde8e2c5ada6ee64a5e8bd4b438afb7cd6ec42186754dde21f3d98e74f7cc7a4f3ebc556ce67fecb2246fbe1cb296c8b95a4a15d1ae8e652ecaefa19a627c8f0dd12b61ca76c93a5d25389bd8810844fd25841f80d1c4c0897aba9d68a46b392111925a795dd5846209b8e8c5e252f1accb21f3604c7427d7b1db4099fa19ddcf5e6fe20a4a814292858cb7719e1a35e795bb4b422ef8a0adb60231b902f62965d13eab65189f5dc18c07928b0728dce7b182f0d244a5f51750b8ab2c3414389169ad0262980ef564d75c904caff0d7c19906747252ad91a7c15e0cfd"], 0x1c}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000020000000850000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b31, &(0x7f0000000580)) r7 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r7, &(0x7f0000000540)={&(0x7f0000000300)=@ethernet={0x0, @local}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)=""/57, 0x39}, {&(0x7f00000003c0)=""/120, 0x78}, {&(0x7f0000000440)=""/48, 0x30}, {&(0x7f0000000480)=""/68, 0x44}], 0x4, &(0x7f0000000800)=""/4096, 0x1000}, 0x40002121) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(0xffffffffffffffff, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r8 = syz_usb_connect(0xfdfb, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r8, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) 51m30.359245225s ago: executing program 39 (id=83): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = dup(r0) r2 = epoll_create1(0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000000c0)) r4 = epoll_create1(0x0) ppoll(&(0x7f00000002c0)=[{r4}], 0x1, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0xa0000001}) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r5 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) dup3(r5, r1, 0x0) ioctl$EVIOCGABS0(r5, 0x40044591, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x220402, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB='no$', @ANYBLOB="b5c7d5c7b65e9737dead1a7029d57870c780fae15ddb38b0abc2194f2dbae8a3b6e74dac4d88e4bbb629d109c5c32d38b2b06e7c750f4651a4bec4996f1d6c1e213b27ef7dc66f873a8944cf6ad55c02fcb6b2588045354c4714550432341c0384c38f33501749e5f6f4a86d2dde42abc744616d837e2ae4f2112e7d57f003cb6bbdb919e97b32cb9ccb676b665af6a570d675fc6b8caa36a7b2856c4606cad5e0cc26989829dbf80a11ac7acdda86e92f9706f1c86c55"]) 51m1.030866688s ago: executing program 40 (id=124): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000000)=0x8) ioctl$SNDCTL_DSP_SUBDIVIDE(r2, 0xc0045009, &(0x7f0000000240)=0x9) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) io_uring_enter(r3, 0x1390, 0x2d6b, 0x1, &(0x7f0000000000)={[0xfffffffffffffffa]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002a20702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001440)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a0001e4ff000000000000000a000000"], 0x14}}, 0x0) recvmmsg(r4, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000000200)=""/98, 0x62}], 0x2}}], 0x1, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='ramfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x100000, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f0000001340)='./file0\x00', &(0x7f0000000240)={0x480, 0x101, 0x20}, 0x18) linkat(r5, &(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000380)='./file1\x00', 0x2000) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000040)) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000000), 0x48) mkdirat(r6, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x65000, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000004680)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb236414921510833302000000cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89a2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0262e36ace97d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478906aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297f9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000040000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00000000000000000000000000000000ec21aaa2c27c1fc9ef040d315cfcbc0e5162685965235b8d654081800dd9e8dfdfde3d5ec3da5888d8503e85853e6456b76252f641d866f9fe00e1e2e4c03c6f0caec17fc005e75a65271844f0ba2048b5bf7416486a69e5595487fb0ce0a2122446e12464ad3bee"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = eventfd2(0xffffffff, 0x1) write$eventfd(r8, &(0x7f0000000080)=0xfffffffffffffffe, 0x8) 50m24.807236218s ago: executing program 41 (id=204): r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x1a, &(0x7f00000001c0)={0x0, 0x0, 0xfffc}, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x5, 0x2, 0x35b, 0xc, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@getnexthop={0x20, 0x76, 0xd11, 0x0, 0x0, {0x3}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0) r4 = socket(0x1, 0x803, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0x5f, 0xb8, 0xe5, 0x20, 0xccd, 0x80, 0x4a83, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6f, 0x0, 0x0, 0xaa, 0xd8, 0x23}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0xa4, 0x6a, 0xf}}]}}]}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}}, 0x0) close(0x3) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, 0xffffffffffffffff}) r7 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r10, 0x0}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r7, 0xc01864b1, &(0x7f00000000c0)={r11, 0x1, 0x105, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB(r6, 0xc01c64ae, &(0x7f0000000200)={r11, 0x1, 0x99, 0x1, 0x3ff, 0x7, 0x9}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r12}, 0x10) 48m1.661009788s ago: executing program 42 (id=618): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs2/custom0\x00', 0x0, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r3, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') writev(r6, &(0x7f0000000080)=[{&(0x7f0000000040)="e0", 0x1}], 0x1) io_submit(r5, 0x1, &(0x7f00000000c0)=[&(0x7f00000001c0)={0x1000000, 0x0, 0x0, 0x8, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, r4}]) setsockopt$inet_tcp_int(r3, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r3, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getpriority(0x2, 0xffffffffffffffff) sendto$inet(r3, &(0x7f0000000200)="e1", 0x1, 0x44089, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000001800"/28], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000002000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r8}, 0x10) r9 = timerfd_create(0x0, 0x0) timerfd_gettime(r9, &(0x7f0000000140)) splice(r3, 0x0, r2, 0x0, 0x2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef25bae80066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x41, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x10, '\x00', 0x2}) ioctl$KVM_RUN(r10, 0xae80, 0x0) 47m55.552077873s ago: executing program 43 (id=636): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001500)={0x34, 0x0, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xa000000}]}, 0x34}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r8, 0x400455c8, 0x0) ioctl$sock_bt_hci(r7, 0x400448ca, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) 45m20.242572676s ago: executing program 44 (id=1154): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000003c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="0239", 0x2, 0x4000800, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in=@private, @in6=@private0, 0x0, 0x0, 0x4}]}, 0x38}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f00000004c0)={0x0, 0x7fff, 0x6, 0x4, 0x3ff, 0x3, 0xa, 0x160ff524, 0x7, 0x3, 0x4, 0x5}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000042c0)={&(0x7f0000000040)={0x6c, r6, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @loopback}}}}]}]}, 0x6c}}, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, r6, 0x1}, 0x14}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x88890) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) 43m22.384620493s ago: executing program 45 (id=1563): syz_emit_ethernet(0x86, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800450000780000000200119078000000000000000000000000006490780200000000000000000000009d42a08597d3b2f44ac89b1b52cc6728d6697d4cebc8f2f062c6f91f224aaacc99bd3410936eefeb3ea898dafab974aa96deedc95f5d10a12027128db2e9bdf6f838a300b01b0e19ecdf00b2060000000fc5b554b5f3b3c9b552323dd736a4d72125f605d107958fca7e07b0225f13c5f3d4c92b328177b7c4a1be24b7eb79c0bd4c74fc56d9bde556f2087ac4442f91464b9e983ee1d642802eedb00b7de9369cb31692c35cdcfc3318bb3bdf"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000300)=ANY=[], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='./file1\x00', &(0x7f00000001c0)='gfs2\x00', 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_emit_ethernet(0x1c, &(0x7f0000000240)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @broadcast, @void, {@llc_tr={0x11, {@llc={0xcd, 0x42, "d1", "3e7f50d0f3646d19afbf3a"}}}}}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000000)={0x10000, 0x0, 0x1, "5d002680b969d984242ee75dfb2f9cc6cad47fa8cba03aa6f82d40e632e2fdb3", 0x4745504d}) r2 = syz_open_dev$evdev(0x0, 0x200, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='net/softnet_stat\x00') sendmsg$nl_generic(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f00000005c0)={0x1120, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x15}, [@generic="3304e6b73e919d87169a204734d99fd34943afb8e48d77aba2260e5de48629752f26197d3d136e647c0daa43eaff2b8cdbeb828e7a81bc1221ee68dc813e4654257f55bc8e26bd22bc107221a8", @generic="2fc2f3f78a037916f8567d63f14c3200ed61f912a78f7e804ec54f9e9c8c9677c7d281fb8acb17b30bcdb0832ce4a404f92381fa29dd7202dad3740ce77b6da182e517c259bee795e3cb33c60fc2debdd869d6f0ee6c8d84cc24dbf2ea44606e25d61f74", @generic="2c9c5b414ed1309134b9c3cf7580e5f0f1f66c1c8ad2dbbc6ac4ae7dc7c23541ad7303770bdb761258e7cb4bc1033ac6432d056dc52d7886a3420381aa9f38f5ab6f3fc028bcd81038dd1750d15c0baa41c4961e515cf589c8", @generic="0bdec32341c66534cf031d894d3b40f19aaf3fe3bf26d239a707b0a997ba4b13abc42f8370a2d025c75bd92e53c603c83d6fe3d4077d0a505bee8a11b65576be771681bdf651eabcfc3ab2ba4d9eaf36181e2ccd6b8d5be4e7d05f42cccad10a8808a13c71a4a5ed0bf161673a75531d890eb76e483cfd2b176482150c0be058f83a65e6ae066498150a61fb8389ed7605c54864d30bc10a58bdf15a696ca0c88401e99ec20106a4b509484c98272fcb6af8e42ecc6ba965f16c33398c03e7e9718378ea222213f12c85130964895be422bfca3571076d8cbf8e3c02de5094c055a16d6df911a5081eaecf044b3301c77f242792fbac191e8a01e8d02a468ebff492afa2c0b0ede6c59c16a14008d98b409fb45a0e01ae7d023aedc257ddd1b424e62fa4996e3cfd5ef054b8909f2c4ee0e30b3d747602294f3c90b42597c3be7e1ce6125fdce337e5a539d845ba3c2dfc09b409d3917131f1d6d98503904d671ba596d86f929cb9c86dfad471f2e34f489b7705b97f4fe8d70a1ded4326f8e2980bcbc99037a4daad56aad63b8c619ce71ff788a3be79864139f7c52a457ce501093f5f5d298924fca4f0f248cb65b26f137f6aec8751a54141a0bf136aa92b55350f9739991b2d92d5113732b085e2124ef67ac4f5961fd8a8f2b48b49a01d3de1a75f193d3a349b826df9db482685aec12ef1391ded97f2630f3d2a215376b29d7d542e57ed68efbb931d89ed150440da83a1992dcd77b8a1598066ee86a04e76e062cd1278ba59784c46a9222992b85eac73d19fdc022bd777f7fb9421d7ed18d8b6acb4362ae6274cc8913de8941b8ac727d7f6fb3493db2e01704c14470cbf2cf5d038c540340e5f26c14481e7175a8955fe41cc43c07817928fbd058f14771fe7a889a51644b13970b446ee35517bdfd2479b8800c83768602cb14ad9b369dceed98d7b76c0f3f44463d97c94042dd6abecb80d70f45be6bcbd1ad6edbb1150f10f92755d97a2a9db34678832390ca458d337c5329114eb1d4313097e1c7734a481298dac2a39a3763d78c0a6e386467a6bda4893f28dddd7657b11ab87985ff1f340c2a2a13bafa76459edbd6e96cb4abfd8bcdfd522f5202171d78687b9c4a5c3ad1efafdccaabd09c1d3a96018ac52693b9e3849957b2b963ee37e3325cca58577a7fbb0fadbc32bfd5ca0fb15abd463c6d2c12ccef8760e20fddd27cb2c87d8c4dcc1d1aa7c6f0a49d855e7c01a3af67eb6c77b22d1b60492f8a6ce47ff23c43b3f2a341431a831bc0be57220b5935eabb2f453d4655e0878056d52378e3faf2ad26da50210ad1b68df46e26772b07f4abe6c4c9a79f8d5b041973a9a06463d8971d5deee3058afa1691e89331709705e7a4d67b490ec012c49203d04d6358f781172893ceb26a9a4aff09d1400d863fbafcee621ffcebbba5ec1af22e5a3a3f5fe4437e27f25a3cb2e81bf06024c7944e503e441fac3120e8543f37d2e05e3db064fb4e65a27d1a653e9d47d34899a5accf7a2ef803507aadf108a0778c590a46f3abbb68e5674bdc49140621705c3720f9a5ec03706e57e730f3d7969da2c512ec27cc0ec816423243eb8ab6dc6b5a53c95622b2ae35d90ea26cbc822e74d6f380f40c8687bd92d25b0057abad1c2a13d6b01ab0b2c3d5293f9fe4ad7614894d5981ba09cf79cf00c21f7195f6535aa5e6649d40480fa2fb0eb060e5d42e9448bf27bacc13a3c579859f2c3ef048809cc324ef680c015b4307e96a91abf921574bffea0254533f0629b9b1dd61dd01778daaaf19d17d8f37d625a7a02d965de716fc2da6662a8384f62ef85ced15cb066f3a01e9f3c3f79b8e9920ff711deeea27ca68d1d2f2a9a41be4f98d5013ca80e98649f039d3ada2570610922b6b22806f7304665beaec750c296d081e3a0d93762c7988df4d286684b2aa0530a458514b0d50d679c60d23ce1a509c329b3e83003e572e10df23baaacf87c503073d39f39620ce833a530394a3e781b8c23eba781a4bbf3feb9bcac59d6d1204048699cee65dc6e372999f38e0faa1f3a281b5602671417ab189ace34ec24a13829126b3010c5430ecad28597ac204953c19f0c06144c62c5cd35fd66a1f2e6b340c73300467f9eb27c219aa29e4b3c796a440ac89364ff2dbd395db4d3295c8647a3851edcba9eb880b73a5fcacd2a8224234bbd0a3cd23b13ead089fcf5cb0b5ace8644e2d0764edda997421ca9186870593b0930367a1e5c74ba7fc326cd657a4e1a97d44fc6ac41eacbc38461e186b161f7ed18301421790d89ffe57b7425d89e1e6f4546bd30bf000727522ceccc4f2a88f9f2d0d07aaae5162f5fd40ea704b938e4ea3f99b3b446257e2a2c06eb8b40cb4229e242f0dd8441c451b63dab3093256238331268bb7e4eecbbedd7e3b25703fbae9de353b59ca8310878844b8b57ddd3c353957bce3cd986df59ea57de65a8ce5b3aa9a19fb4f9505fce0896c2faaf4dce7cc73cf3f2e503e15bc3a8547d3334ac52abdb050f1b99ed75ad850e40dd2568305c9c1eca5a54ce328f9131a609cef3e03b99e830a3416e270f13c7af15c669cb760f92ac43c34decfa53152700d43b62908c030d272deb3768aa7ee5183aaa557bad0ebe0f569c9a439e7cf228c58872679fa0bf4d263d873b466422d1b9c77e93bc5ac86f7884b34dd0d63e92be8ee483fdaa78ea9a36493ecbbaf1a62e870ffffb14eba365c835d54b4f12519c84eddcd48dd9b686884ce2b8139237fc888fa1f1b82e47d894d39add8568f5edfac628e5ee23c9788c0ef71d69c707d90816394326f27e4e3acca23734bc5ac245a56088b779e8d103308a5e2b7e9e0ada446e4ed2d8fe37c87a5b2c826a7b5409c27b81f89f4bbcd5029c0b12f16b99111a89d575f99e2a430cb0d5a06443443a7fdb7437edff4779706bb8a49cd71a9437ef056c6dc74f62b87ad1b3d3b62a13cc9144449013e4b5339f3a1b48274653d9150dae9eafc67828b1d3ef88adac9eaa8338e66c73e280f8208b410211047f272be756db1f17f3680a5f6ab0e0dbf69abaa6a62a526b6d50bfa89e5c83748f043360a641bb07434fb2ae25f6fbd765012e5b6fcf6b678c959a4f996aa926ec4b9a1dbf599c3be76ad3931a0b7f502c9db01afe412d2c5408f9727ca3d73a34b8f7e8e5f64b1ba579db4748f2c0faa9d990e4283c21de224973a6f16ca14502df5815cfddf813fd091b169ef6c0c7ed1d344cd2149d50ee06268bbfa8ccb4871b2a3600478c07a9ace64e6316ec1a36f46e3f721d2aa6a3c8573c2c7e370697cffba9b11073dea163c7491e4c6a32553dd88eb965be271e6a4f3dcb622085a7db0984372a94f54078dcf4b84e7dd499ffb51b1cc9389d3b26aebf13ccae15dcfb46a20341c142150f8a51324bd005e5bac11318fa1c8d3f037cd10f7f774aa76ca94d53eaed9f5868a3d4cf9e30bed62091376ece6ea73facf930933e30a52de0ae3d1a7e260701d0341742c12f329953ea3bdd0d80d9c323b137b6ecc547cfbf590be26db9b2e0a1d9cfb10e61651fb7b5a161d0918265e3449638ee214709a8d5a5d0cca2e913f894c3b943092632deb3e6ee86638060e0c22fa8d6f249578e0eec7a19ec312488e4abf3b495c77ab001195ac9bf1815a1c94f156aeff53170389531f06c657245008cf887407cacf858b3229ae1760f2cc2f2c7bd564577c38bab67b89c87a17997d2a747b62a47225d022482e769f8dc84eee624e78fef23d52a14baf37ca9ebfb4e235611e894b76f7e8f02883ab280c82eee0965643cd4bf2d81df497e46bad42fa5c6aa8a1638b1eede66cfa2d2f7a2bf1df7e58498ec2d3fd61e95e7d0f07fe9b841eacf50b01995a98d61a600215b751954c6af5ac43b4116fc247342cd821be896c7bbe18966003635d927029f4a772b3582f16a52175ce21cd7d5d118926a8c34c68649380444753b332e7fae482d2d636af571cdfc73408ac24bea3374dc3a27261fe608a80c2ea746403a1dfa604ecbeeca7f7198e610a6e56491f1e81142d66598cfc15460d153ce8eaee5ecf1f899cc435b040d28901aaddf7f2b4261e988854462ac105ebf04098b8dc804567a74fb3e4572595d49b0899016de2be704d23e1e835e6247483f609744012728cc5a5da9b88f61208e03e1299e7acae67b593cbba2146279923f0768e996f79f92c64b516620bce819725c101baeec5a0e9bcb7f844d0749080ebbd00d7eaf92b56656c6ca96531cd66bd077b58b738ec0ea59ab6a1bd7533b328a6476be9f929b5fe06f288bd7b9eb23d4318fa67419165cf35911fb8a862b51c41781ca4826a8bdd9f367f7751ec39b4334ffb3c58bef5d9603495c08d980c064856e9c6b2ac8006ef6de40138b79e75a26e213ecac6fb0310d813512f9b7a1284b48d6872100631e6e41a467242c743ce28642a8a63501c0ff210febfcaef39b0dbf425aea37dbd1dcd270998a78ab352d137273f80b103b76ee468cb42708c99f31e02e4052f3c8708ebbf39438b4a4d3dc458d20af0dd709a2104384ba7079f055606d92a3d29fb37e2dc0c9312fc7a8e180689fe749f09373c422e16a00dc54ed9f9dd37ff62abaa259781c04fc8a64bc09ccd2e9c74feb7e3914e21f5fa582f77db96198264e96802948593385b1d01e4bee445845eaf7a7d97ab520bbc6a72931659210fbe18c463f3b60a4c038940701b40167928c29a3818d1fac254143565b29dedfb50df0c7849d1ed5a533a653f1b753c190bb5080454149c0520e5cc62c8b18e1f1a29b609991f5168f76f963db401455c7e967a745e9dc6060a3bc90cf70d6099ff731cc1e822b86703f8640331e95125efab7e47b7dc732bfec704b0ed2c2c3f9dabae7862d9c5a0d6d5a911af17017b78b9731e21cc5e7074352b9c93786ba7c50330eaf38d39f684ff91b98c1561a291601608f8c7fce3aba5571e6d7e313e2873606cd216b91f491f2331886a1a5be14ae1805a0c05b6593cf66e431982d4670077bdf5aa3e5008943fdc26435bad4e1f1abe2a3db983aed9b6716eb810ba496501764c193287dcbe255168c732edc7b65da4d89446f60914612b6946968be5956c0f79e648a7c9cf7cec9e9e9c83961770c9fd8d8516009aa65f28352b2a100e3db57fe2c6d95849d023b46a175d54bb397ea1fbd46daa6f8c4ac02e8d12fba505f1c64ac77a394a26f555a5f349fa3408ed4f803ecebf5ad22ac5ee7958054d9f7f707f6ae8ce5cf8438ba4173f4075ceffa80e53e8358b531183bf2d33526cd3b9907493924e9c995626f6c877a7b7242faace7c73a750f3b7682f932ec05e972f91a052a0468cdc7e4dee2f44f59767d928149735a94c3d26259d8956d2ea26a0c99d875ff387014f305e1a604501218be6315135ff0dfa46a5508075988601f6bacd40a60e3cf1ccfb5d2cafb370a1439452c9404d1b881f3e90c6958971dbe52698d40fac54e50de897d30b7a9d790d5dabdc330ff9475882a811017cfe2a154f80c5e033027f65436dc979d99a7bc550d1fe7343cadcf68ce579d566191f2d24bc47e7f6eaef979ad6a7b5e595ed1ec3c10d1b8e6ebfd9834391541906ac52bf2cea81f91489edaff1f7850d1d41e3841c749bde9acfc0f519b33159068f581f09674b47dbb91712d91b9bd9ccd12247567a9dde07a990539790c7fac4790c525325706c1b6425a0c94582da3e964efc04cc41774b4db99a7a2dccf0941fcab2fdc56e1b525ddc4d3708f2104608586d180e0b852f2"]}, 0x1120}, 0x1, 0x0, 0x0, 0x40800}, 0x10804) ioctl$EVIOCSCLOCKID(r2, 0x40084503, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000000)=ANY=[@ANYBLOB="010000"]) r5 = dup(r4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setpriority(0x0, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r5, 0x4008ae9c, &(0x7f00000000c0)={0x1, 0x4}) r6 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000040)={0x34, 0x2, 0x0, "d52b3d000000fa44966262631e8ac11e000000000000000000000000ebff00", 0x32314d54}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x126) flock(r7, 0x5) r8 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x741, 0x0) flock(r8, 0x1) flock(r8, 0x2) 42m8.472252905s ago: executing program 46 (id=1764): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000002000000000000000080000000000000", @ANYRES32, @ANYBLOB="fcff1200000000000068", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000440), 0x204001, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), 0xffffffffffffffff) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r1, &(0x7f0000000840)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="10002dbd7000fbdbdf250a000000050005008000000005000500e70000000800030004000000050005000900000005000500b40000000800030001000000"], 0x44}}, 0x800) ioperm(0x0, 0xf1, 0x7) brk(0x7fffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xb3, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000001c0), &(0x7f0000000880), 0x8, 0x5c, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r4, 0x7b0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x51, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0xa675}, [@map_fd={0x18, 0x6, 0x1, 0x0, r6}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x7}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}]}, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$inet(0xa, 0x801, 0x84) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r9, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r9, 0x29, 0x3a, &(0x7f0000000040)=0xc94, 0x4) recvmmsg(r9, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) connect$inet(r8, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r8, 0xb) r10 = accept4(r8, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r10, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x91bd, 0x20, 0x5, 0xd1e5}, &(0x7f0000000040)=0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r7, 0xfca804a0, 0x46, 0x8, &(0x7f00000008c0)="b800000502000000083b3f5991c15c566a8a86a90178f12d2f7754dd3b50854a3d60a806ae3dc8b7db27a7faee06048d1ec111e92b3b229d98ea88549fb2f550a33e43b637dd", &(0x7f0000000300)=""/8, 0xffffff06, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000400)=r0, 0x4) 40m13.552772017s ago: executing program 47 (id=2069): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000002e80), 0x2, 0x0) r3 = fcntl$dupfd(r1, 0x0, r2) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6, 0x12, r3, 0x0) syz_io_uring_setup(0x20000, &(0x7f0000000440), &(0x7f0000004000), &(0x7f0000ffb000)) 39m59.573363488s ago: executing program 48 (id=2102): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x3) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x800000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008c}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[], 0x60}, 0x1, 0x0, 0x0, 0x1200c040}, 0x379851220e6af9c4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_IRQP_SET(r2, 0x4008700c, 0xfba) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x8848, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c35000000e8fe55a1190015000600142603600e120900270000000401a80016000a00044044600000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9f4c0000004c00000006000000040000000000000e0400000000000000000000000300000d0400000001000000030000000e000000000000000a00000002000000000000000000001004000000040000000000000802000000000000003000"], 0x0, 0x6a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) mount$tmpfs(0x0, 0x0, 0x0, 0x4, &(0x7f0000000b80)=ANY=[@ANYRESHEX=r2, @ANYBLOB="048aa345649db424fd521e64128307477260e85049487117b2512ee48336d27ba0640c35583a8228ca578b714233d8cdf55d58a87852fc273281f2b4dafd3d586a8c37f41a38b6011030133c47161bdc3480201e31b5220185a4bfed680d657b6848883e89c22c57898f7895cdd3e92e6336456ee1226d89cf695de7"]) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='adfs\x00', 0x0, &(0x7f0000000340)) 39m0.865473872s ago: executing program 49 (id=2124): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x204002, 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f0000000040)='\'&#\x00', &(0x7f0000000240)="087a7c10615dc47037954106e15254d5f6beebce5cf8878f7f450d572fcf5968417516934f10d81d682af7e7e4aa2579ca7aa190f8ba5c0e5f2e6698f5d016e93a64bef664a9b83f72914a0c26ed7a7deb9f0bb667a68e6d1002f8370ffffccc1b69c7924cae419b8055abab77c19a86099fa12bcb16af", 0x77) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xfffffffffffffff8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000000180)=0x5, 0x4) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x1, @remote}, 0x10, 0x0}, 0x3000c041) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000100e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 35m3.975629512s ago: executing program 50 (id=2730): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r0 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_perm_addr={0x33, 0x9, "571ad906ab5aeaa4db"}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) pipe(&(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000005c0)='contention_end\x00', r3}, 0x10) close(0x3) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x143882) r4 = socket$inet(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003ac0), 0x0, 0x20044840) sendmmsg$inet(r4, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000100)='*', 0x1}], 0x1}}], 0x1, 0x4008845) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r4, 0x0, r5, 0x0, 0x2, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) close(0x3) socket$nl_route(0x10, 0x3, 0x0) writev(r2, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) socket$kcm(0x10, 0x0, 0x0) 34m44.111165231s ago: executing program 51 (id=2771): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, &(0x7f0000000240)="0000000000000001ff000065dd530700a2752cbf86f474fad8cb594ed9fabe9ec277bb8d", 0x24, r0) syz_open_dev$vcsu(&(0x7f0000000100), 0x7, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff6000/0x3000)=nil) memfd_create(0x0, 0x0) ptrace(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000940)={0x60, 0x20, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) 33m57.384587522s ago: executing program 52 (id=2866): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x2000) syz_clone(0x42882100, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)="bb") sendto$phonet(r1, &(0x7f00000001c0)="d2f689576cb1ee547a54485bb2f0fa01ef94155ee51e112e4f8f21ba51a26344399eaf458c035e4f36759dce7be06ef3161c88acf7915a600468bc75e6667551677ed80001e042295dfc73fec5ac2939f2ed3fb6e0411db9314f676b2520eccfe7c73223a9fc660a3085eec28fb35bcf07f7563de33b3801bdfe89c90a0ab21011d8f8964b73d62a4ae5cea465f7a869f1f1ff", 0x93, 0x8080, &(0x7f0000000040)={0x23, 0x5, 0x8, 0x9}, 0x10) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000000)={0x0, 0x4000000000, 0x8}) read$msr(r1, &(0x7f00000000c0)=""/233, 0xe9) madvise(&(0x7f0000124000/0x2000)=nil, 0x2000, 0x13) 31m19.107407283s ago: executing program 53 (id=3316): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000d, 0x13, r0, 0xc5e6a000) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e097566f5bec64466cf0925782dd", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/slabinfo\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x4f3, 0x8, 0xfeb2, 0x1100, r4, 0xc, '\x00', 0x0, r4, 0x2, 0x5, 0x3, 0xa, @void, @value, @void, @value}, 0x50) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r6, 0x300, 0x81, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}]}, 0x24}}, 0x22044800) 29m48.010620629s ago: executing program 54 (id=3645): setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xcb, &(0x7f0000000100)={0x1}, 0xc) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x800452d2, &(0x7f0000000100)) syz_usb_connect(0x6, 0x24, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="50000000100003040000000000000000f2000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100010000000c000200540a00001800000008000500", @ANYRES32=r2], 0x50}, 0x1, 0xba01}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) socketpair(0x29, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x2, 0x1}, 0x20) sendto$inet6(r6, &(0x7f0000000200)="175df210285ecf2314e7f00c20150ce10d5402bac3532c776e19d91d9d3fe076f66d383351372372c633b6ffe3a37f69017a4520101d48783e24af35893e0efdf6648940e30ad4424a133210df09c2cdc2765ba0df23588f12d8698d5027edb7b314e4958e784fb51d3922124d69165fcc30fb950da9d0d1", 0x78, 0x20000000, &(0x7f00000000c0)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xfffffff6}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, 0x0, 0x0) utimensat(0xffffffffffffffff, 0x0, 0xfffffffffffffffe, 0x2) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, &(0x7f0000000400)=""/184, &(0x7f00000004c0)=0xb8) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x2c, r7, 0x1, 0x3, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}]}, 0x2c}}, 0x0) sendmsg$SMC_PNETID_DEL(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r7, 0x4, 0x70bd26, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x20008881) write(r3, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 24m44.601100731s ago: executing program 55 (id=4437): r0 = io_uring_setup(0x137d, &(0x7f0000000080)={0x0, 0x4}) r1 = fsopen(&(0x7f0000000040)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x200) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000200)={{0x2, 0x1, 0x0, 0x1, 0xc}}) close_range(r0, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000240), 0x2, 0x0) write$cgroup_type(r5, &(0x7f0000000280), 0x9) 17m37.355680594s ago: executing program 56 (id=5748): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0}) 14m47.508008014s ago: executing program 57 (id=6210): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000020900010073797a30000000000900030073797a320000000064000000060a010400000000000000000100000008000b40000000003c000480140001800c000100636f756e7465720004000280240001800b000100657874686472000014000280080005400000000108000640000000010900010073797a30"], 0x40c}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x4b, [0x0, 0x0, 0x0, 0x2b0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x5, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x2, 0x0, 0x8fca], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0xa90d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x360b, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000340), 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) io_setup(0xbf5, &(0x7f0000000600)=0x0) r8 = creat(&(0x7f0000000640)='./file0\x00', 0x0) io_submit(r7, 0x1, &(0x7f0000000840)=[&(0x7f00000006c0)={0x0, 0x0, 0x30, 0x1, 0x0, r8, 0x0}]) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/441], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r9, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000001a00), 0x0, 0x2, 0x10, 0x8, 0x0, 0x0}}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @sack_perm, @mss={0x2, 0xfff}, @window, @timestamp], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) 14m27.799955218s ago: executing program 58 (id=6271): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x5000001, 0x13, r0, 0x88e74000) openat$mice(0xffffffffffffff9c, &(0x7f0000001080), 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x8000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_io_uring_setup(0x2912, &(0x7f0000000280)={0x0, 0x4240, 0x200, 0x0, 0x184}, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.self_freezing\x00', 0x275a, 0x0) unshare(0x22020400) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r2 = fanotify_init(0x8, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x40) fanotify_mark(r2, 0x41, 0x8000038, r3, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0xc0189436, &(0x7f0000000140)) 11m50.483045165s ago: executing program 59 (id=6703): sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) 9m53.81134044s ago: executing program 60 (id=7043): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f00000000c0)={'team0\x00', 0x2}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000200)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1414aa", @ANYRES32=r1, @ANYBLOB="0000000014000000000000002b"], 0x40}}], 0x1, 0x0) 4m36.060057763s ago: executing program 4 (id=8087): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$key(0xf, 0x3, 0x2) recvmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)=""/5, 0x5}, {&(0x7f0000000200)=""/65, 0x41}, {&(0x7f0000000300)=""/102, 0x66}, {&(0x7f0000000380)=""/89, 0x59}, {&(0x7f0000000400)=""/65, 0x41}, {&(0x7f00000005c0)=""/184, 0xb8}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000000280)=""/32, 0x20}, {&(0x7f0000001c00)=""/4096, 0x1000}], 0x9}, 0x1}, {{&(0x7f00000004c0)=@alg, 0x80, &(0x7f0000000800)=[{&(0x7f0000000740)=""/179, 0xb3}], 0x1, &(0x7f0000000840)=""/88, 0x58}}], 0x2, 0x2000000022, &(0x7f0000000940)={0x77359400}) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x2b, 0x1, 0x0, "3ad3cbcfd20fb29634b50b097fae2303506c00000700", 0x31303553}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r7, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0xa9fe0000}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='r', 0x1}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_retopts={{0x10, 0x84}}], 0x28}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000900000000000800090067f6"], 0x184}}, 0x0) ioctl$SIOCGETVIFCNT(r0, 0x8918, &(0x7f00000000c0)={0x1}) 4m35.224200028s ago: executing program 4 (id=8092): syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) io_setup(0x4, &(0x7f00000014c0)) syz_open_procfs(0x0, &(0x7f0000000140)='mountinfo\x00') epoll_create1(0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) syz_open_pts(r0, 0x101) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x200000000000000, 0x100}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e000085000000820000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) faccessat(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000240)={[{@stats}]}) 4m33.395333046s ago: executing program 4 (id=8099): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_emit_vhci(0x0, 0x8) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff0010000008003950323030300075a50f851615378e4f9f6dad80578318b8b21ba080e979a7afb0617dd2ac2d75147d80612fff92637d15b6badcf90374742a38c8e4961f66ed69d27aa78e407230c550fe3b9595e23eaca302a900c0419cf53672bb41de52283d95455bec4293afae5a2951446a19a7147b7b0a8140a662d5b596f80bce8b7d481e3658a73c84b3821d2935e5b089cfe071e5809937685f27926ec2d3a52193f587baf1f47cc8c7ba29cad3578de8e162d0c293cd67c2ce2e7712c993a5aa0f73c649d12f48fb1be6d5d4b4e2f3a91cd98db9da397ac3f41ba487226fbb979c295f4c71c49307a8b52c7a0f5b4b487af95c25f19e9dd170b231f9d10442e2644efb1597f7016120c5cede2e3b9e7bb7e425978c0fdbbbe7e95fe02665de6537de3a5aedf3066464b524dff6640848d678d20b6225684689ab0f668f6a292b58e2fb8c01714bc66fe1e17289c932786dc60e11a94ccc45a5727c00bdaf39e65aff07000000000000ed3aab9ab3f35031a7e42039cddde2dc17a48b6c172046b4091afc597165715c88bb7adb8be70c21bcf9389aa5f5154d4e0076897ff36fd735523e3b2551192bb2df37ed2b16d91fe202e16a60d8"], 0x15) r2 = dup(r0) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x0, 0x0) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) sendmsg$inet_sctp(r2, &(0x7f00000017c0)={&(0x7f00000000c0)=@in={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000540)="74ec57b82c4ebe658236eca9212c55efb717801fa01abd88aecb14d9ebb98dd4f78e892f543a21e4f392afb374c158aeef25e1ee914d93d2315c155a17068d2523539dee46d7e79ac7cbff304d5afb9a644ba18c35df4aa6b7b9d2e25bdd00cca02a5cba3edd69407e0dfd20b24695e95bfc30c5fd5f1cf99eba2e0de16f7b2195c813380d30706a3bf99440f13c7cf84a8515f0cd5c51d9e5e3fa86899b46a361c8e19f64c889", 0xa7}, {&(0x7f0000000600)="c879a469bf3f5edcfa64063fec2013cc85daffe5f533fc879dc77a794107cbcae3470b4414fc3b8d0e8df97bc0d9d43754e8c4e876fbf64b05639b19d2c0ffdcf2a00aa42b682b4e43c31f723da7d05d619b84a7704378f2330873dccac90d319625440542ce1b3b3529e87549d94b580aa18c15d572c945d05a581adeb1a453523748a7502afd57dafbf3e841ca991f0cbf0fc0aab9e5389fda", 0x9a}, {&(0x7f0000000100)="326f02ccc78c10d7926706b8ebe95b6ede9b29ecc4fe2b883638e00285b2cdf8e2ff0a4c9a7caae661ecb9c1ae464eb82527676ddd471824fb2039368bb2d0", 0x3f}, {&(0x7f0000000180)="0600b7b8f1d50a8cbff46c1b08bd71db86bf0422d2af06c27cfe82b7dc6efb", 0x1f}, {&(0x7f00000001c0)="9ff8059c03529bae3bf1ec937bcf0e639566df145af3512d2b0cea6026eef1ae62f1a365088c589b", 0x28}, {&(0x7f00000006c0)="8902d32725005d1725c79884cc2a6da29a53d51e2b5a4c299e9bdaedaf0dab71923715bc3f7d0d21c5721c3468401c91d7af045918dc77108f7c6434eb6ba218d2df175c310caec3f9b2a6508d74640ec66304fe37428eb82baf91ab47b2c4b9f22735828952411ddd17b2d082d06f", 0x6f}, {&(0x7f0000000740)="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", 0x1000}], 0x7, &(0x7f00000002c0)=[@dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, '\x00', 0xc}}], 0x20, 0x8010}, 0x8c4) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1c}, 0x3c) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000140)=0x7, 0x4) 4m33.193153318s ago: executing program 6 (id=8101): epoll_create1(0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000300)=0x10, 0x4) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x84, @loopback, 0x0, 0x0, 'sh\x00', 0x13}, 0x2c) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800fb1a9238000000000000009500000180000000000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_PIT(r4, 0x4068aea3, &(0x7f0000000080)={[{0x80, 0x95d}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, {0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x5}], 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f00000004c0)={@flat=@weak_binder={0x77622a85, 0x100, 0x2}, @fda={0x66646185, 0xa, 0x0, 0x1e}, @fda={0x66646185, 0x0, 0x2, 0xf}}, &(0x7f0000000180)={0x0, 0x18, 0x38}}, 0x400}], 0x0, 0x0, 0x0}) r5 = dup3(r1, r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) syz_usb_connect(0x4, 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r7, &(0x7f0000002380)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x8}, 0x1c, 0x0, 0x0, &(0x7f0000002180)=ANY=[@ANYBLOB="140000000000000029000000080000000f00000000000000140000000b00000000000003000000001400000000000000290000000b00"/72], 0x48}}], 0x1, 0x4040804) rseq(&(0x7f0000000140), 0x20, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) socket$unix(0x1, 0x1, 0x0) 4m33.105302829s ago: executing program 4 (id=8103): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, &(0x7f0000000700)=[{}], 0x1, 0x2}) syz_usb_connect(0x0, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b19a3640d219751284070102030109022b0002070000ac18563dd8399550bba2ef9521593300090400010079319c0009040000000202ff", @ANYRESOCT, @ANYRES64=r0], 0x0) 4m29.624262053s ago: executing program 6 (id=8110): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x24) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0x80001, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r5 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f905, 0x8000, '\x00', @p_u32=&(0x7f0000000000)=0xfffffff2}}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x0) ioctl$PTP_EXTTS_REQUEST(r5, 0x40103d02, &(0x7f0000000180)={0x8, 0x5}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) 4m29.489052442s ago: executing program 7 (id=8112): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe80, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 4m29.382607341s ago: executing program 7 (id=8113): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_emit_vhci(0x0, 0x8) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x15) r2 = dup(r0) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x0, 0x0) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) sendmsg$inet_sctp(r2, &(0x7f00000017c0)={&(0x7f00000000c0)=@in={0x2, 0x4e20, @private=0xa010101}, 0x10, &(0x7f0000001740)=[{&(0x7f0000000540)="74ec57b82c4ebe658236eca9212c55efb717801fa01abd88aecb14d9ebb98dd4f78e892f543a21e4f392afb374c158aeef25e1ee914d93d2315c155a17068d2523539dee46d7e79ac7cbff304d5afb9a644ba18c35df4aa6b7b9d2e25bdd00cca02a5cba3edd69407e0dfd20b24695e95bfc30c5fd5f1cf99eba2e0de16f7b2195c813380d30706a3bf99440f13c7cf84a8515f0cd5c51d9e5e3fa86899b46a361c8e19f64c889", 0xa7}, {&(0x7f0000000600)="c879a469bf3f5edcfa64063fec2013cc85daffe5f533fc879dc77a794107cbcae3470b4414fc3b8d0e8df97bc0d9d43754e8c4e876fbf64b05639b19d2c0ffdcf2a00aa42b682b4e43c31f723da7d05d619b84a7704378f2330873dccac90d319625440542ce1b3b3529e87549d94b580aa18c15d572c945d05a581adeb1a453523748a7502afd57dafbf3e841ca991f0cbf0fc0aab9e5389fda", 0x9a}, {&(0x7f0000000100)="326f02ccc78c10d7926706b8ebe95b6ede9b29ecc4fe2b883638e00285b2cdf8e2ff0a4c9a7caae661ecb9c1ae464eb82527676ddd471824fb2039368bb2d0", 0x3f}, {&(0x7f0000000180)="0600b7b8f1d50a8cbff46c1b08bd71db86bf0422d2af06c27cfe82b7dc6efb", 0x1f}, {&(0x7f00000001c0)="9ff8059c03529bae3bf1ec937bcf0e639566df145af3512d2b0cea6026eef1ae62f1a365088c589b", 0x28}, {&(0x7f00000006c0)="8902d32725005d1725c79884cc2a6da29a53d51e2b5a4c299e9bdaedaf0dab71923715bc3f7d0d21c5721c3468401c91d7af045918dc77108f7c6434eb6ba218d2df175c310caec3f9b2a6508d74640ec66304fe37428eb82baf91ab47b2c4b9f22735828952411ddd17b2d082d06f", 0x6f}, {&(0x7f0000000740)="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", 0x1000}], 0x7, &(0x7f00000002c0)=[@dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, '\x00', 0xc}}], 0x20, 0x8010}, 0x8c4) setsockopt$MRT_ADD_MFC(r3, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1c}, 0x3c) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000140)=0x7, 0x4) 4m28.881458054s ago: executing program 7 (id=8114): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = epoll_create1(0x0) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$key(0xf, 0x3, 0x2) recvmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)=""/5, 0x5}, {&(0x7f0000000200)=""/65, 0x41}, {&(0x7f0000000300)=""/102, 0x66}, {&(0x7f0000000380)=""/89, 0x59}, {&(0x7f0000000400)=""/65, 0x41}, {&(0x7f00000005c0)=""/184, 0xb8}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000000280)=""/32, 0x20}, {&(0x7f0000001c00)=""/4096, 0x1000}], 0x9}, 0x1}, {{&(0x7f00000004c0)=@alg, 0x80, &(0x7f0000000800)=[{&(0x7f0000000740)=""/179, 0xb3}], 0x1, &(0x7f0000000840)=""/88, 0x58}}], 0x2, 0x2000000022, &(0x7f0000000940)={0x77359400}) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000000)={0x2b, 0x1, 0x0, "3ad3cbcfd20fb29634b50b097fae2303506c00000700", 0x31303553}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r7, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0xa9fe0000}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='r', 0x1}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_retopts={{0x10, 0x84}}], 0x28}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000080009000000000008000a000000000008000a000000000008000a000000000008000900000000000800090067f6"], 0x184}}, 0x0) ioctl$SIOCGETVIFCNT(r0, 0x8918, &(0x7f00000000c0)={0x1}) 4m28.819887743s ago: executing program 8 (id=8116): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000180), &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x7, 0x3, &(0x7f0000002580)=ANY=[@ANYBLOB="6a0a00ff000000006110b4000200000095000018000000000f1f38efca791bc7067bd06fbcf98d60b8fddbad051e9861b5b85c4200876e2bbd47f38614279f90b44b75af761d56"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000a00)={0x27d6, 0x2, 0x20, 0x2, 0x5, 0x43, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b40500000000000071106b06000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r4, 0xfffffffffffffffc, 0x2a, 0x12102, 0x0) recvmmsg(r2, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@isdn, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/105, 0x69}, {&(0x7f0000000680)=""/92, 0x5c}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000340)=""/40, 0x28}, {&(0x7f00000003c0)=""/7, 0x7}], 0x5, &(0x7f0000000880)=""/96, 0x60}, 0x1}, {{&(0x7f0000000940)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000ac0)=""/218, 0xda}], 0x1, &(0x7f0000000bc0)=""/251, 0xfb}, 0x8}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f00000026c0)=""/92, 0x5c}], 0x1, &(0x7f0000000d80)=""/250, 0xfa}, 0x3}, {{&(0x7f0000000e80)=@tipc=@id, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000f00)=""/150, 0x96}, {&(0x7f0000000fc0)=""/118, 0x76}, {&(0x7f0000001040)=""/18, 0x12}, {&(0x7f0000001140)=""/149, 0x95}, {&(0x7f0000001200)=""/164, 0xa4}, {&(0x7f00000012c0)=""/64, 0x40}, {&(0x7f0000001300)=""/153, 0x99}], 0x7, &(0x7f0000001440)=""/4096, 0x1000}}], 0x5, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bridge\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x0, 0x0, 0x0, {0x0, @ether_spec={@link_local, @remote}, {}, @esp_ip6_spec={@ipv4={'\x00', '\xff\xff', @local}, @private0}, {0x0, @remote}}}}) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f00000009c0)=0x20005, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0xff6d) syz_emit_ethernet(0x32, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffffffffffff00000000000000000011907800"/37], 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b01000000000000000000f3ff7f000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002600)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000ac00a3a5e69034cb669cb545180ae1daae28bc3e066e5f171a08076df1776c8c14c04105c1515481f326afc544ca11038f94ac", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r6], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e86c0d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002740)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300d3b1943d2262746bd7f804bc9df44b762673fa1f812426e1fd686bbaf80fc40abf1910588124803c8f8073dc1ece61ec906e9ea11043842f85e0a07640b264df408e4266ce1e7e21ed65d28428e7e3a3cbaf89e82207ff6024be1db2eedc679228b10665e98443e4d8de9f4dfa713139585e6db5ba0fe4e1223f5f68bafdbfd3f6c550156ad7476f8922c1c39527e05106c76ba4ce72259dbdc8b355d691f02edcf2f6bd840f118f", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) 4m28.631049519s ago: executing program 6 (id=8117): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='9p_client_res\x00', r0}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x86) pipe2$9p(&(0x7f0000000240), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xffffffffffffff4b, &(0x7f0000000200)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r2], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) 4m26.083938301s ago: executing program 8 (id=8119): setresuid(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/dev\x00') read$FUSE(r1, &(0x7f00000007c0)={0x2020}, 0x2020) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB="00ed0021000000000000848581f0adfcf7efef00001f000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x1e, 0x4, 0x0) connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r4, &(0x7f0000004400), 0x400000000000203, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100000000000000000000200000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900ffffa60000000000a3979529c01cfd7fa975f1d1b70c9821"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r5}, 0x10) r6 = fsopen(&(0x7f0000000080)='bfs\x00', 0x1) r7 = socket$igmp(0x2, 0x3, 0x2) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000000)={0x2, 0x0, 0x81, 0x10001, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x2b}, @remote}, 0x10) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000000200)={0x1, 0x0, 0x1, 0x5, @vifc_lcl_addr=@loopback, @rand_addr=0x64010302}, 0x10) setsockopt$MRT_ADD_MFC(r7, 0x0, 0xcc, &(0x7f0000000140)={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x1, "b200a06a95c980a6154dfb1e5c22cc42e3c374637bf5d25333abb4ddbe47fa66", 0x4000cc8}, 0x3c) fsmount(r6, 0x1, 0x8) memfd_create(&(0x7f0000000480)='\x02\a\xc5(\xec[r\xe1:', 0x0) 4m23.793291017s ago: executing program 4 (id=8120): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_io_uring_setup(0x127f3, &(0x7f0000000340)={0x0, 0x400000, 0x40, 0x1, 0x4}, &(0x7f0000000200), &(0x7f00000000c0)=0x0) syz_io_uring_setup(0x1868, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000044c0)=[{{&(0x7f00000002c0)=@hci, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/73, 0x49}, {&(0x7f00000014c0)=""/4096, 0x1000}], 0x2, &(0x7f0000000500)=""/237, 0xed}, 0x4}, {{&(0x7f0000000600)=@vsock, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000680)=""/110, 0x6e}, {&(0x7f0000000780)=""/21, 0x15}, {&(0x7f0000000880)=""/250, 0xfa}, {&(0x7f0000000980)=""/177, 0xb1}, {&(0x7f0000000a40)=""/255, 0xff}, {&(0x7f0000000b40)=""/222, 0xde}, {&(0x7f00000024c0)=""/4096, 0x1000}, {&(0x7f0000000c40)=""/108, 0x6c}, {&(0x7f0000004580)=""/92, 0x5c}, {&(0x7f0000000d40)=""/178, 0xb2}], 0xa, &(0x7f0000000ec0)=""/126, 0x7e}, 0x3}, {{&(0x7f0000000f40)=@alg, 0x80, &(0x7f0000001340)=[{&(0x7f0000000fc0)=""/152, 0x98}, {&(0x7f0000001080)=""/238, 0xee}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f0000001180)=""/198, 0xc6}, {&(0x7f0000001280)=""/177, 0xb1}], 0x5, &(0x7f00000007c0)=""/61, 0x3d}, 0x7}], 0x3, 0x0, 0x0) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) read$dsp(r5, 0x0, 0x0) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(0xffffffffffffffff, 0x184c, 0x1e8d, 0x5, 0x0, 0x31) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r6, 0x6, 0x4, 0x0, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0xce}, 'port1\x00', 0xa6, 0xb1c03}) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x1) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000240)={0x3, 0x1, 0x3, 0xfffffff8, 0x7, "2ac21db04f597beb331fa225d27589cb852ddc"}) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000004, 0x42031, 0xffffffffffffffff, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8042, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000340)='J', 0x1}], 0x1}, 0x1041) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='0,0:\x00', 0x0) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r10, 0xc01c64ae, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x20, 0x18}) ioperm(0x0, 0x3, 0x2000007ffffffd) 4m23.623326599s ago: executing program 6 (id=8121): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000200)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, r4, 0x1, 0x0, 0x0, {0x22}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="0801e300", @ANYRES16=r4, @ANYBLOB="00022bbd7000ffdbdf25140000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b000100008006001100010000000800150000000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000b000600000006001100030000000800150002000000080001007063690011000200303030303a30303a31302e3000000000080003000900000008000b0001000000060011004000000008001500f8ffffff080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000000008006001100040000000800150008000000"], 0x108}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) 4m23.393729158s ago: executing program 8 (id=8122): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10) r1 = io_uring_setup(0x5bec, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES_UPDATE(r1, 0x6, 0x0, 0x0) 4m23.358382482s ago: executing program 7 (id=8123): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936"], 0xa0}}, 0x0) r2 = socket(0x22, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) 4m23.224337329s ago: executing program 7 (id=8124): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_emit_vhci(0x0, 0x8) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x15) dup(r0) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x0, 0x0) getpid() bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@multicast2, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500"}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1c}, 0x3c) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000140)=0x7, 0x4) 4m23.224092391s ago: executing program 8 (id=8125): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b35, &(0x7f0000000000)={'wlan1\x00'}) socket$rxrpc(0x21, 0x2, 0xa) 4m23.22392644s ago: executing program 6 (id=8126): r0 = syz_open_dev$admmidi(&(0x7f0000002480), 0x20, 0x101200) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x5, 0x2003b, 0xffffffffffffffff, 0x0) read$midi(r0, 0x0, 0x14) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5111) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) 4m23.078933946s ago: executing program 7 (id=8127): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2001) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ec0)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000f00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2000000000000325, 0x8, &(0x7f00000000c0)=[0x0], &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x7d, 0x8, 0x8, &(0x7f0000000f40)}}, 0x10) syz_usb_connect$uac1(0x0, 0x99, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902870003010000000904000000010100000a24010000000201020c240800000000ff533ea72909040100000102000009040101010102000007240100040000090501090000000000072501000000000900000000010200000904020101010220000e240201740200002304473ed87007240100000000090582092000000000"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x12, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/2475], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, 0x0) socket$inet(0x2, 0x6, 0x5) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r2, 0x4068aea3, &(0x7f0000000000)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = socket(0x2a, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3f}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @local}, @IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_ENCAP_FLAGS={0x6}]}}}]}, 0x58}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0xffff, 0x5}}}}]}, 0x48}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000f80), r5) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f0000001040)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, r9, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40440c4}, 0x20040000) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000140)={[0x47c, 0x3271, 0x6, 0x5, 0x8, 0xd, 0xffff, 0x80000000, 0x1, 0x3, 0x5, 0xffffffff, 0x3ff, 0x7fffffff, 0xc01, 0x3], 0xdddc1000, 0x40880}) 4m23.073484209s ago: executing program 8 (id=8128): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0x0, 0x0}) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000200)={'bond0\x00', @ifru_names='netdevsim0\x00'}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000002c0)={{0x1, 0x1, 0x5, r2, {0x6}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x15, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$packet(0x11, 0x2, 0x300) r5 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r5, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, 0x0, 0x0) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="f50226bd7000fddb0d1d3df50dcd20000008", @ANYRES32=0x0, @ANYBLOB="0600060002000000"], 0x24}, 0x1, 0x0, 0x0, 0x40094}, 0x801) add_key$user(&(0x7f0000000580), &(0x7f00000005c0)={'syz', 0x2}, &(0x7f0000000600)="82b2874f84ea8332d5644654bcf05724f7aee93abc335b", 0x17, 0xfffffffffffffffc) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="070640000000fbdbdf252d0000000c000500000000000000000008002f00020000000a0001007770616e3100000008003f0002000000"], 0x3c}, 0x1, 0xa00}, 0x0) 4m22.984203421s ago: executing program 6 (id=8129): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000180), &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x7, 0x3, &(0x7f0000002580)=ANY=[@ANYBLOB="6a0a00ff000000006110b4000200000095000018000000000f1f38efca791bc7067bd06fbcf98d60b8fddbad051e9861b5b85c4200876e2bbd47f38614279f90b44b75af761d56"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000a00)={0x27d6, 0x2, 0x20, 0x2, 0x5, 0x43, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b40500000000000071106b06000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r4, 0xfffffffffffffffc, 0x2a, 0x12102, 0x0) recvmmsg(r2, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@isdn, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/105, 0x69}, {&(0x7f0000000680)=""/92, 0x5c}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000340)=""/40, 0x28}, {&(0x7f00000003c0)=""/7, 0x7}], 0x5, &(0x7f0000000880)=""/96, 0x60}, 0x1}, {{&(0x7f0000000940)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000ac0)=""/218, 0xda}], 0x1, &(0x7f0000000bc0)=""/251, 0xfb}, 0x8}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f00000026c0)=""/92, 0x5c}], 0x1, &(0x7f0000000d80)=""/250, 0xfa}, 0x3}, {{&(0x7f0000000e80)=@tipc=@id, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000f00)=""/150, 0x96}, {&(0x7f0000000fc0)=""/118, 0x76}, {&(0x7f0000001040)=""/18, 0x12}, {&(0x7f0000001140)=""/149, 0x95}, {&(0x7f0000001200)=""/164, 0xa4}, {&(0x7f00000012c0)=""/64, 0x40}, {&(0x7f0000001300)=""/153, 0x99}], 0x7, &(0x7f0000001440)=""/4096, 0x1000}}], 0x5, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bridge\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x0, 0x0, 0x0, {0x0, @ether_spec={@link_local, @remote}, {}, @esp_ip6_spec={@ipv4={'\x00', '\xff\xff', @local}, @private0}, {0x0, @remote}}}}) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f00000009c0)=0x20005, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0xff6d) syz_emit_ethernet(0x32, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffffffffffff00000000000000000011907800"/37], 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b01000000000000000000f3ff7f000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002600)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000ac00a3a5e69034cb669cb545180ae1daae28bc3e066e5f171a08076df1776c8c14c04105c1515481f326afc544ca11038f94ac", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r6], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e86c0d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002740)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300d3b1943d2262746bd7f804bc9df44b762673fa1f812426e1fd686bbaf80fc40abf1910588124803c8f8073dc1ece61ec906e9ea11043842f85e0a07640b264df408e4266ce1e7e21ed65d28428e7e3a3cbaf89e82207ff6024be1db2eedc679228b10665e98443e4d8de9f4dfa713139585e6db5ba0fe4e1223f5f68bafdbfd3f6c550156ad7476f8922c1c39527e05106c76ba4ce72259dbdc8b355d691f02edcf2f6bd840f118f", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) 4m22.456042431s ago: executing program 4 (id=8130): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='projid_map\x00') writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)='y', 0x1}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x80800) r2 = fsopen(&(0x7f00000002c0)='rpc_pipefs\x00', 0x0) r3 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) dup2(0xffffffffffffffff, r6) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)='G', 0x1}], 0x1}, 0x0) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x1}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 4m22.450408523s ago: executing program 8 (id=8131): r0 = io_uring_setup(0x669, &(0x7f0000007940)) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) (async, rerun: 64) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0xa031, 0xffffffffffffffff, 0x63b9000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b2a, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x3, 0x8000000003c) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) (async, rerun: 64) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) (rerun: 64) accept4$ax25(r7, 0x0, 0x0, 0x80800) (async, rerun: 32) r8 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) (rerun: 32) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r8, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41}) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64) 4m6.783094509s ago: executing program 61 (id=8118): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) shutdown(r0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x7, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x9) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) process_vm_readv(r2, &(0x7f0000000280)=[{&(0x7f0000000240)=""/61, 0x3d}], 0x1, 0x0, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x4206, r3) ptrace$setregs(0xf, r3, 0x2, 0xfffffffffffffffd) socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdir(0x0, 0xf9) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r4 = io_uring_setup(0x16d3, &(0x7f0000000140)={0x0, 0xfffffffc, 0x200, 0x2, 0x2ac}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x102, 0x0) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0) mlock2(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xe}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) 4m1.097487236s ago: executing program 62 (id=8131): r0 = io_uring_setup(0x669, &(0x7f0000007940)) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) (async, rerun: 64) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0xa031, 0xffffffffffffffff, 0x63b9000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b2a, 0x0) (async, rerun: 64) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x3, 0x8000000003c) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(0xffffffffffffffff, 0x110, 0x3) (async, rerun: 64) r7 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) (rerun: 64) accept4$ax25(r7, 0x0, 0x0, 0x80800) (async, rerun: 32) r8 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) (rerun: 32) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r8, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41}) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64) 4m0.831847069s ago: executing program 63 (id=8129): prlimit64(0x0, 0xe, 0x0, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, &(0x7f0000000180), &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x7, 0x3, &(0x7f0000002580)=ANY=[@ANYBLOB="6a0a00ff000000006110b4000200000095000018000000000f1f38efca791bc7067bd06fbcf98d60b8fddbad051e9861b5b85c4200876e2bbd47f38614279f90b44b75af761d56"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=0xffffffffffffffff, 0x4) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000a00)={0x27d6, 0x2, 0x20, 0x2, 0x5, 0x43, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b40500000000000071106b06000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmmsg(r4, 0xfffffffffffffffc, 0x2a, 0x12102, 0x0) recvmmsg(r2, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@isdn, 0x80, &(0x7f0000000800)=[{&(0x7f0000000600)=""/105, 0x69}, {&(0x7f0000000680)=""/92, 0x5c}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000340)=""/40, 0x28}, {&(0x7f00000003c0)=""/7, 0x7}], 0x5, &(0x7f0000000880)=""/96, 0x60}, 0x1}, {{&(0x7f0000000940)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000ac0)=""/218, 0xda}], 0x1, &(0x7f0000000bc0)=""/251, 0xfb}, 0x8}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f00000026c0)=""/92, 0x5c}], 0x1, &(0x7f0000000d80)=""/250, 0xfa}, 0x3}, {{&(0x7f0000000e80)=@tipc=@id, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000f00)=""/150, 0x96}, {&(0x7f0000000fc0)=""/118, 0x76}, {&(0x7f0000001040)=""/18, 0x12}, {&(0x7f0000001140)=""/149, 0x95}, {&(0x7f0000001200)=""/164, 0xa4}, {&(0x7f00000012c0)=""/64, 0x40}, {&(0x7f0000001300)=""/153, 0x99}], 0x7, &(0x7f0000001440)=""/4096, 0x1000}}], 0x5, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_to_bridge\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x0, 0x0, 0x0, {0x0, @ether_spec={@link_local, @remote}, {}, @esp_ip6_spec={@ipv4={'\x00', '\xff\xff', @local}, @private0}, {0x0, @remote}}}}) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f00000009c0)=0x20005, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0xff6d) syz_emit_ethernet(0x32, &(0x7f00000005c0)=ANY=[@ANYBLOB="ffffffffffff00000000000000000011907800"/37], 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b01000000000000000000f3ff7f000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000002600)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000ac00a3a5e69034cb669cb545180ae1daae28bc3e066e5f171a08076df1776c8c14c04105c1515481f326afc544ca11038f94ac", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r6], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004500000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e86c0d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000002740)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300d3b1943d2262746bd7f804bc9df44b762673fa1f812426e1fd686bbaf80fc40abf1910588124803c8f8073dc1ece61ec906e9ea11043842f85e0a07640b264df408e4266ce1e7e21ed65d28428e7e3a3cbaf89e82207ff6024be1db2eedc679228b10665e98443e4d8de9f4dfa713139585e6db5ba0fe4e1223f5f68bafdbfd3f6c550156ad7476f8922c1c39527e05106c76ba4ce72259dbdc8b355d691f02edcf2f6bd840f118f", @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) 4m0.694274721s ago: executing program 64 (id=8127): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x2001) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ec0)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000f00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2000000000000325, 0x8, &(0x7f00000000c0)=[0x0], &(0x7f0000001080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x7d, 0x8, 0x8, &(0x7f0000000f40)}}, 0x10) syz_usb_connect$uac1(0x0, 0x99, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902870003010000000904000000010100000a24010000000201020c240800000000ff533ea72909040100000102000009040101010102000007240100040000090501090000000000072501000000000900000000010200000904020101010220000e240201740200002304473ed87007240100000000090582092000000000"], 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x12, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/2475], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, 0x0) socket$inet(0x2, 0x6, 0x5) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r2, 0x4068aea3, &(0x7f0000000000)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = socket(0x2a, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @sit={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3f}, @IFLA_IPTUN_LOCAL={0x8, 0x2, @local}, @IFLA_IPTUN_PROTO={0x5}, @IFLA_IPTUN_ENCAP_FLAGS={0x6}]}}}]}, 0x58}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0xffff, 0x5}}}}]}, 0x48}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000f80), r5) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f0000001040)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, r9, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40440c4}, 0x20040000) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000140)={[0x47c, 0x3271, 0x6, 0x5, 0x8, 0xd, 0xffff, 0x80000000, 0x1, 0x3, 0x5, 0xffffffff, 0x3ff, 0x7fffffff, 0xc01, 0x3], 0xdddc1000, 0x40880}) 4m0.446779577s ago: executing program 65 (id=8130): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='projid_map\x00') writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)='y', 0x1}], 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x2, 0x0) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x80800) r2 = fsopen(&(0x7f00000002c0)='rpc_pipefs\x00', 0x0) r3 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) dup2(0xffffffffffffffff, r6) sendmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)='G', 0x1}], 0x1}, 0x0) r7 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000040)={0x204, 0xa, 0x1}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 1m49.908200025s ago: executing program 0 (id=8453): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x20000000) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) write$UHID_INPUT(r4, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) 1m48.173505685s ago: executing program 0 (id=8456): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50032, 0xffffffffffffffff, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x25, &(0x7f00000003c0)=0xb4e, 0x4) listen(r0, 0x100000001) r1 = accept4(r0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mknod$loop(&(0x7f0000000080)='./file0/bus\x00', 0x6210, 0x0) lchown(&(0x7f0000000000)='./file0/bus\x00', 0xee00, 0x0) creat(&(0x7f0000000040)='./file0/bus\x00', 0x58) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x8}, 0xe) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004300), 0x3a4, 0x0, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r5 = add_key$keyring(&(0x7f0000000180), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r5, 0xfffffffffffffffe, r5, 0x0) 1m47.002607141s ago: executing program 0 (id=8464): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe99) mknodat$null(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x3c30bfefd670af2f, 0x103) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x0, 0x8, 0x5, 0xfffffffe, {{0x7, 0x4, 0x0, 0x3b, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x31}, {[@end, @lsrr={0x83, 0x3, 0x8f}, @end]}}}}}) unshare(0x2c020400) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f00000001c0)=ANY=[], 0x2000, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2000, 0xab00, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x20, 0x0, 0x2b, 0x2f, 0x0, @empty=0x2f, @multicast1}}}}) 1m41.762227075s ago: executing program 0 (id=8477): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, 0x0, 0x20000000) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) write$UHID_INPUT(r4, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) 1m40.288617719s ago: executing program 0 (id=8481): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000080)="22ff8d69c2d4b8e99db9f8d65c6d37f3eb656b0fe7680b7156696b699c706b35895b0426f6e49e667e9a428119be812d6ea0e35922320f41035abff455dec7bf11e062d3a70212d80802d0f7ea5adc440dcd975c40afb3903acbc564fbbee5b7e2a5c75e0b70286088d85ba800beaa69e469b1c1c29afdf5ba559becf11ee0862cb4099f61278a694d25b505e90c870345afc30ef721fb5a418ace723c84d5173b89aa51648d", 0xa6}, {&(0x7f00000001c0)="cb79dd97452ab6296c500ae44e191da212eb617f7519829c34b43c9a1c63cd530b12c0e3117ff7e95450f150c334997c89e9ebd0c4988ca1b8c5d171ea1160235bf4fdccd15e86d4b91013249ca622e74a18194700d9511854a762d96851b128b199515e2e6dbf95558339a501fee6c926eeafe614bdb7da030dfa8e511242f32f97056c947a7e65a1a34be742fc79df68966fced328d440887bab3dbe68ef25aafa200dbdbb6954b54056312ce9", 0xae}, {&(0x7f00000003c0)="99cad2810a93077a6471b16ec25f32e2b94f35b03a6cebb453a3027283de6ba1ee23000a8cefb0912a8a1eb20412077bc553a40053beeb1391dff68b90838821c473d7b5ffa4e5c90f9bc6d99a519a35c5ae280531f4d8cab5f3663e36afb488821c088ca0187cc03bd19f6b1b798e343e26a07acfb80e868afdc60192c5c2af637d1e80e7754cb0ae118a2325ca67da287b5a8cc9fd190070612bb93bbc34ae82922f6f3c03", 0xa6}, {&(0x7f00000002c0)="efb14e3755aee12844cfbfd9d06bed9e8cdc4e9e11ebba0912b93ebe7d82c01503473acca21a3617aba20adcb4ba20c1bba9d063c8", 0x35}, {&(0x7f0000000480)="2815f325ea1397c68ea690fdd45d9e452bcd91d869e8a99c24f59280b5bc1c2ca7e3fd63dd69e11f022aea1586346e7df6380974f6f9738a4cd9bcdf19c89e4c56bfa1e5c3c7f0db4988a0d90278ad2307e18137fa8f93ea4dbc2df3076cc7701b326cc0659f4de638e1096499865918aecdb3f90c717d25504b7a6ad41c6099c16d0dbc139a", 0x86}, {&(0x7f0000000540)="648e9fbe87103083dbb3f684812d81fd6b9d61d5ce2a2130448101fc6c1726ec24516ae0eb78b54d89a5832c240fbfa632867d6655354c65002fa40587c452d5eefd39ea88ae8c1ad859256570526c1a3ecb6bda689943a7b9e9427605202a38a83f1bf21dfd7aed243835a7d1d3b166c67cd4492b0421e76f3b967d6c7ff232a5ba318623748552f97479f9a424aaeb2b4cb2e51e76b88d2ba6e3f0bd900c768d4643a866566e8bd550bcf933ed1bc40429d1dfad231e630af5c14efa066d19", 0xc0}, {&(0x7f0000000600)="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", 0xff}, {&(0x7f00000012c0)="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", 0x1000}, {&(0x7f0000000700)="c582b7b3e011668f61ee053700929ac04819e481a018bc5b07e148f3612bb71e9a0861137a57c99b6f7e8c6b555e06eac9a112555bb0ce77a5423c2d399693eb45410f6e7535b6c27c186b0ebb39a093f3e03c135cc204b254d638e62bbf587ec94989787a0b87a9d3c3ddf38532ebb03731d91197a91a43e2e4fb8cdb475f824dda473c01f2f94b0e86b571a790a70e7251e464127beff936b7e82d98f63fb418f8669fd5f29088ec0e040d803909d2c585c8b3c82232763cd1ccf6ccfb6d958ff6e38a203675cc3abcdcf4f257f08c6dafae6613f9634cd513986a1f74b9dcf7679cc7b4ed5870d64d47bfa3e126bfa5f6270fd5abd1e2", 0xf8}, {&(0x7f0000000300)="7f0a266b3a4744a8b04e7910c82e08b0aaa7dea23e795e37b21ad19d9b6b5922661006a811b163c297cb5fc04e11efc4926bcb1901bdab", 0x37}], 0xa}}], 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) flistxattr(r3, 0x0, 0xdeff) (async) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000086dd6002adf700383a00fe880000000000000000000000000001ff020000000000000000000000000001050090780000000060fd906300003a00ff010000000000000000000000000001fe8000000000000000000100000000aa1e520b4c951ee12e"], 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="24000000000000002900000032000000ff11"], 0xffffffffffffff6c, 0x7ffffff7}}], 0x1, 0x8000) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$int_out(r8, 0x0, &(0x7f0000000000)) (async) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000005142106"], 0x20}}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) (async) prctl$PR_SET_MM_MAP(0x41, 0x3, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x300000e, 0x2172, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) 1m40.025188796s ago: executing program 0 (id=8483): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) writev(r0, 0x0, 0x0) (async) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r1) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) close(r1) (async) getdents64(r2, &(0x7f0000000500)=""/45, 0x2d) (async) getdents64(r2, 0x0, 0x18) (async) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x12, r5, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000380)=0x20) (async) r6 = epoll_create(0xd4e4) epoll_pwait(r6, &(0x7f00000033c0)=[{}], 0x1, 0xf54, &(0x7f0000003400)={[0xfe]}, 0x8) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xaea2, 0x0) 1m24.862563272s ago: executing program 66 (id=8483): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) writev(r0, 0x0, 0x0) (async) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r1) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) close(r1) (async) getdents64(r2, &(0x7f0000000500)=""/45, 0x2d) (async) getdents64(r2, 0x0, 0x18) (async) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x12, r5, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000380)=0x20) (async) r6 = epoll_create(0xd4e4) epoll_pwait(r6, &(0x7f00000033c0)=[{}], 0x1, 0xf54, &(0x7f0000003400)={[0xfe]}, 0x8) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r8, 0xaea2, 0x0) 7.490100351s ago: executing program 2 (id=8744): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "869a9b6f5076fc1d", "3b1d33fb37dd8f43b4ea71106a1e5a9ed9d11646da2e70abe5654ad129cd4281", "0a6cfa78", "17ea34d37cbbf5b6"}, 0x38) sendto$inet6(r0, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000001740)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x1300000000000000, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) 7.137711738s ago: executing program 2 (id=8750): mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_emit_vhci(0x0, 0x8) write$P9_RVERSION(r1, 0x0, 0x15) dup(r0) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@multicast2, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500"}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1c}, 0x3c) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000140)=0x7, 0x4) 7.091005195s ago: executing program 1 (id=8751): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f0000001040)=0x5, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$cgroup_int(r0, &(0x7f0000000200), 0xf0fe) 7.048288125s ago: executing program 9 (id=8752): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x202100, 0x0) mount(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, 0x18c7c80, 0x0) mount$bind(&(0x7f0000000180)='./bus\x00', &(0x7f0000000580)='./file0\x00', 0x0, 0x2004, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000200000000000000006b790095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x40) syz_emit_ethernet(0x32, &(0x7f0000000280)={@remote, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) close(r0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000400)={0x0, 0x100}, &(0x7f0000000440)=0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 6.274639896s ago: executing program 2 (id=8753): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x1a3c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) pselect6(0x40, &(0x7f0000000600)={0x10000000000000, 0x10000000000000}, 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) 6.22352116s ago: executing program 1 (id=8754): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r3}, 0x10) r4 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r4, &(0x7f0000000080), 0x10) listen(r4, 0x0) accept4$llc(r4, 0x0, 0x0, 0x0) sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) syz_io_uring_setup(0x5646, &(0x7f0000000580)={0x0, 0x0, 0x800, 0xfffffffe, 0x1}, &(0x7f0000004000), &(0x7f0000000540)) sendto$inet(0xffffffffffffffff, &(0x7f0000000140)="ddc232e80afc272d537b4a66f384dd15707149107e8c0ea54716df1e48a8bcac500982517e25535ba4dc71", 0x2b, 0x40041, 0x0, 0x0) ioctl$SG_SCSI_RESET(r5, 0x2201, 0x1000000000000) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b0906, 0x2b, '\x00', @p_u8=&(0x7f00000000c0)=0x1}}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 6.15321822s ago: executing program 9 (id=8755): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) 6.152519713s ago: executing program 9 (id=8756): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000200)={'syz0\x00', {0xfffe}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5854, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000440)={0xfffa, [0x0, 0xffffffff], 0x1000}, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000060000000060a010400000000000000000100000008000b40000000000900010073797a300000000038000480100001800c000100636f756e74657200240001800a00010071756575650000001400028006000140000000000600014000000000140000001100010000000000000000000000000a8db45c520505a497cb2440354d573e57cf6495b2ada1f8039960"], 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r8, 0xc4009420, &(0x7f0000001c40)={0x7a5a649e42b1b702, 0x4, {0x9, @usage=0x6, 0x0, 0x3, 0x0, 0x2, 0x7, 0x5, 0xc, @usage=0x9, 0x3, 0x1000, [0x200, 0x1, 0x2, 0x401, 0x3, 0x30b8]}, {0x9, @struct={0xffffffff}, 0x0, 0x2, 0x81, 0x8001, 0x200, 0x0, 0x3, @struct={0xfa, 0x2}, 0xb09, 0x67757e11, [0x2, 0x0, 0x2000001f, 0x4, 0x4]}, {0x0, @usage=0x3, r9, 0x0, 0x46b, 0x3, 0x7, 0x5, 0x10, @usage=0x5, 0xffffffff, 0x60000000, [0x1, 0x509ea932, 0x1f, 0x5d32, 0x800, 0x10000]}, {0x7ff}}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=r9, @ANYBLOB="3a6d0080"]) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r6, {0x5}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000003000000000000000100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018160000d2d1471d381156b7105234", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x1, 0x20, &(0x7f0000000740)=""/32, 0x40f00, 0x54b221ddab7c5750, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x1, 0xb, 0x80000001, 0x7b6}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000b00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r10], &(0x7f0000000b40)=[{0x4, 0x3, 0x10, 0x1}, {0x4, 0x5, 0xe, 0x6}, {0x2, 0x5, 0x4, 0x6}, {0x2, 0x3, 0x8, 0x3}, {0x4, 0x5, 0xa, 0xd}, {0x3, 0x3, 0x6, 0xa}, {0x4, 0x5, 0x10, 0x9}, {0x1, 0x5, 0xf, 0x2}], 0x10, 0x4, @void, @value}, 0x94) ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, 0x0) 5.268215826s ago: executing program 1 (id=8757): openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000040)={0x0, 0x93e9, 0x1, [0xda2, 0xfffffffffffffffc, 0xbfc, 0x9], [0x9, 0x101, 0x9, 0x100000001, 0x4, 0x10, 0x200, 0x7, 0x200, 0x7, 0x6, 0xfffffffffffffff8, 0x1, 0x5, 0xc, 0x3, 0x8a6, 0xa5, 0x9, 0x7, 0x860000000, 0x2, 0x8, 0x7849, 0xda, 0x80, 0xffffffffffffffff, 0x8d, 0x800, 0xffffffff, 0xf, 0x8000000000000001, 0x2, 0xfffffffffffff001, 0x6, 0x22f3, 0xe, 0x80, 0x8, 0x101, 0xfff, 0x314, 0x9, 0x1, 0x5, 0x2, 0x7, 0xff26, 0x2, 0x5, 0xc, 0x6, 0x1, 0xfffffffffffffff9, 0x3, 0xfff, 0x1, 0x5, 0x1, 0xb710, 0x0, 0x400, 0xff, 0xeefa, 0x4, 0x8, 0xc955, 0x6, 0x3, 0x8a4, 0x4, 0x80000000, 0x3ff, 0x1, 0xfffffffffffffff7, 0xb6d0, 0x4ced, 0xf, 0xfffffffffffffffb, 0xfff, 0x0, 0x0, 0xfffffffffffffffe, 0xbbe, 0x4, 0x9, 0x0, 0x5d8, 0x27a, 0xc, 0x9, 0x7f, 0x5, 0x6, 0x5, 0x5, 0xf, 0xfffffffffffff70b, 0x2, 0x9, 0x0, 0x2, 0x9, 0x100, 0x0, 0x2, 0x7fff, 0x7f, 0x3ff, 0x3, 0x0, 0x8, 0x11, 0x3ff, 0x0, 0x1ff, 0x7, 0x5, 0x9, 0x5, 0x4]}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x108) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000a9500"/32], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$inet(r0, &(0x7f0000000540)={0x2, 0x4, @local}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x20, 0x0, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={0x0}}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r5, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001500)=ANY=[@ANYBLOB="140000000307010300000000e5ffffffffffffff"], 0x14}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) socket(0x15, 0x5, 0x0) ioprio_set$pid(0x1, 0x0, 0x2000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4.732505121s ago: executing program 5 (id=8758): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x206, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0xc, &(0x7f00000006c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r5, 0x5) syz_genetlink_get_family_id$nl80211(0x0, r4) r6 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000040)) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDCTL_DSP_SETTRIGGER(r7, 0x40045010, &(0x7f0000000000)=0xa) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r8, 0x4112, 0x0) close(0x3) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r9, &(0x7f0000000f80)=""/4096, 0x1000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x802, 0x0) 4.059769144s ago: executing program 3 (id=8759): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@dev, @in6=@mcast1}}, {{@in=@broadcast}}}, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x903000, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)}, 0x0) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0x6) fstat(r1, &(0x7f00000006c0)) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000780), 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000180)={'lo\x00'}) 3.971293133s ago: executing program 3 (id=8760): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000380), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "00e0f07600", "832b4d2434b35bca8c0b78d2afff6d70d2025c7f53123828322d5af0d5c6c3a5", '`\a-N', "298f0e6df9ae9b3d"}, 0x38) sendfile(r0, r1, &(0x7f0000000100)=0xb40000, 0x100000000010001) 3.876383919s ago: executing program 3 (id=8761): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x0, 0x0, 0x7ff}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'geneve0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000040)="363c8f3fca5d66571e583e7c88a8de0688a8", 0x12, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) r4 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x0, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f0000000200)={0x9, 0x4, 0x0, 0x0, 'syz1\x00'}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc1105511, &(0x7f0000000040)={0x9, 0x1}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0xc1105511, &(0x7f0000000040)) fcntl$lock(r0, 0x25, &(0x7f0000000040)) fcntl$lock(r0, 0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x401}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(0xffffffffffffffff, 0x8010671f, &(0x7f0000000080)={&(0x7f0000000000)=""/83, 0x53}) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) 3.874628721s ago: executing program 1 (id=8762): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = syz_open_dev$media(&(0x7f0000000280), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, 0x0, &(0x7f0000000300)}) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write(r3, &(0x7f0000000300)='(', 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x86, 0xc95a, 0x3, 0x3, 0x80, 0x2, 0x1, 0x7f, 0x5, 0x4d, 0xfffffff2, 0x2, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x2006, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x3, 0x24, 0xffffffff, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x3, 0x5, 0x3c, 0x8f, 0x5, 0x6, 0x3, 0x5, 0x8, 0x3, 0x0, 0x80, 0x0, 0x5, 0xfffffff7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf6, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x9, 0x2f, 0xe, 0x101, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x800009, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0xffff, 0x9, 0x5f31, 0x0, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x2, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x6, 0x7fff, 0x0, 0x6, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1f0, 0x5, 0x8, 0x86, 0x8, 0x10000009, 0x3e7, 0x2, 0x2, 0x202, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x25, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x7, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x1, 0x1, 0x5, 0x1, 0x5, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x5, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x2, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x7, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x805, 0x8, 0xc8, 0xca2, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x80000009, 0x1, 0x6c1b, 0x0, 0x4, 0x8, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) 3.786848679s ago: executing program 5 (id=8763): mkdirat(0xffffffffffffff9c, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_emit_vhci(0x0, 0x8) write$P9_RVERSION(r1, 0x0, 0x15) dup(r0) syz_emit_ethernet(0x5a, &(0x7f0000000000)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0x8}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000280)={@multicast2, @multicast1, 0x0, "7ea97ddb2ac127ffa5b7216fe75ebaa2855a422a8bf8ec7caf003751804500"}, 0x3c) setsockopt$MRT_ADD_MFC(r2, 0x0, 0xcc, &(0x7f0000000200)={@empty, @private, 0x0, "606b177019716ea6ff1f4d7ed79c31e2e0f1da00000000230000002000", 0x3e1c}, 0x3c) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000140)=0x7, 0x4) 3.734357927s ago: executing program 3 (id=8764): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x3, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa2000000000000070200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0x7) setuid(r2) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000380)="48000000140081fb7059ae08060c04000aff0f03000004000011000300006fabca1b4e7d06a6bd7c493872f750375ed08a562ad6e74703c48f93b82a02000000461eb886a5e54e8f", 0x48}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0xa, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r5}, 0x10) r6 = dup(0xffffffffffffffff) write$nbd(r6, &(0x7f00000000c0)=ANY=[], 0x10) ioctl$USBDEVFS_SETINTERFACE(r6, 0x80085504, &(0x7f0000000040)={0xc, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb1}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 3.734132013s ago: executing program 1 (id=8765): syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000fd9e1a40f30c74933bbc0000000109021b0001040000000904000065d4695e000905", @ANYBLOB="e1", @ANYBLOB="510272"], 0x0) socket$key(0xf, 0x3, 0x2) 3.658205676s ago: executing program 3 (id=8766): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) 3.617679104s ago: executing program 9 (id=8767): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x1100, 0x0, &(0x7f0000000100), 0x0, 0x3ae, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000380)=@urb_type_bulk={0x3, {0x1, 0x1}, 0x13ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x3, 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) statx(0xffffffffffffffff, &(0x7f0000000600)='./file0\x00', 0x6000, 0x10, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000780)={0x2020}, 0x2020) r7 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fstat(r7, &(0x7f00000006c0)) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000340)=[@in6={0xa, 0x4e23, 0xfffffeff, @remote, 0x9}], 0x1c) 3.59005634s ago: executing program 3 (id=8768): socket$nl_netfilter(0x10, 0x3, 0xc) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@my=0x1}, @host, 0x0, 0x0, 0x2449, 0x0, 0x1}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000240)={{@host}, 0x20000000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xffffffffffffff4b, &(0x7f0000000200)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x170, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) dup(0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000180)={@loopback, r5}, 0x14) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r6, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4) close_range(r3, 0xffffffffffffffff, 0x0) 3.558826085s ago: executing program 5 (id=8769): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x14, 0x800, 0x1, 0xfffff801, 0x1210, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001300)={0x0, 0x0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) dup(r5) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000080)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000004c0)={0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0}) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) shutdown(r7, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x8, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r8, &(0x7f0000000400)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {0x0, 0x4}, @raw32={[0x2, 0x0, 0x1]}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x7}, {}, {}, @note={0x7e}}, {0x0, 0x0, 0x0, 0x0, @tick=0x80000000, {}, {}, @time=@tick=0xda}, {0x8, 0x0, 0x0, 0x0, @time={0x4, 0xf}, {}, {}, @result={0xffffffff}}], 0x70) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) socket$qrtr(0x2a, 0x2, 0x0) 2.732198284s ago: executing program 2 (id=8770): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103042, 0x0) llistxattr(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x22081, 0x0) quotactl_fd$Q_QUOTAON(r4, 0xffffffff80000202, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x1c, 0x41, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x2, 0x0, 0x0, @pid}]}, 0x1c}}, 0x0) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0xe6, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@updpolicy={0xb8, 0x19, 0x5, 0x0, 0x8000000, {{@in6=@rand_addr=' \x01\x00', @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x4}, {}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000300)) rt_sigqueueinfo(0x0, 0x1, &(0x7f0000000280)={0x30, 0xffffffff, 0x4304}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r7, 0x50009405, &(0x7f0000000180)) 1.933682007s ago: executing program 5 (id=8771): syz_io_uring_setup(0x444b, &(0x7f0000000100)={0x0, 0x0, 0x100}, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x406, r0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2813], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) prlimit64(0x0, 0x7, &(0x7f0000000400)={0xb, 0x56dd}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x300000000000000) 1.93235095s ago: executing program 9 (id=8772): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000880), 0x12) r7 = syz_socket_connect_nvme_tcp() ioctl$sock_SIOCDELRT(r7, 0x890c, &(0x7f00000000c0)={0x0, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x4, 0x4}}, @sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, @in={0x2, 0x4e21, @multicast1}, 0x80, 0x0, 0x0, 0x0, 0x469, &(0x7f0000000080)='tunl0\x00', 0x9, 0xb18b, 0x1d66}) ioctl$HIDIOCGUSAGES(r4, 0xd01c4813, &(0x7f0000000c80)={{0x1, 0x2, 0xf, 0x6, 0x87, 0xb67d}, 0x1f8, [0xfffffffc, 0x0, 0x9, 0x6, 0x22a7, 0x8, 0xffff, 0xd1, 0x9422, 0x0, 0x2, 0x4, 0x0, 0x0, 0x3, 0x5, 0x0, 0x7, 0x5, 0x7, 0x94, 0x93, 0x31180, 0x9, 0xffffff81, 0x4, 0xa6c0, 0x55, 0x1, 0x0, 0x5, 0x96500, 0x2, 0x7fffffff, 0xad3fe23, 0x2, 0x2, 0x1ff, 0x2, 0xffffffff, 0x1e2, 0x7fffffff, 0x8, 0x4, 0x9, 0x800, 0x0, 0x1, 0x800, 0x7, 0x4, 0x3, 0x9, 0x401, 0x8, 0x5, 0x9, 0x20, 0xb, 0x1, 0x9, 0x5, 0x3e5, 0x3, 0x3, 0x5, 0x0, 0xfffffffb, 0xee1b, 0x8000, 0x4, 0x3183, 0x8, 0x3, 0xfffffffd, 0x1, 0x81, 0x9, 0x1, 0x342, 0x76, 0x0, 0x2, 0xfea, 0x10, 0x200, 0x40, 0x1b571ae9, 0x8, 0x7ff, 0x6, 0x8, 0x7, 0x6, 0x7, 0xb0, 0x5, 0x9, 0x61, 0xfffff800, 0x8001, 0x1ff, 0x6, 0xc, 0xfffffffb, 0x101, 0x0, 0x4, 0xe23c, 0xffffffff, 0x8000, 0x1, 0x7, 0x1, 0x2, 0x6b, 0xde9, 0x80000001, 0xf1, 0x9, 0x282, 0x9, 0x5, 0x9b5, 0x141, 0x9a9c, 0x3, 0x96cd, 0x100, 0x8, 0x4, 0x3, 0x0, 0x10001, 0x4, 0x5, 0xa, 0x7, 0x960, 0x1, 0x9, 0x8, 0xfff, 0x0, 0x7, 0x44d, 0x8, 0x0, 0x2, 0x6, 0x5, 0xc, 0x7ff, 0x7ff, 0x2, 0x5, 0x200, 0x9, 0x0, 0x8, 0x800, 0x80, 0x18, 0x6, 0x6, 0x2, 0x35c, 0x8, 0xb, 0xfff, 0x60b1, 0x1, 0x2, 0xfffffff7, 0x1, 0xc, 0x1, 0xfffffffc, 0x5eb9b7e8, 0x3, 0x0, 0x5, 0x2, 0xffffc2c9, 0x1, 0xf, 0x80, 0x4, 0x4, 0xfffffc00, 0x4, 0x6, 0x9, 0x949, 0x3, 0x401, 0x8, 0x0, 0x4, 0x2, 0xb55, 0x8, 0x7, 0x5, 0x2, 0x1, 0xffff, 0x401, 0xa, 0x9, 0x6, 0xb2, 0x80, 0x54, 0x800, 0x3, 0x3ff, 0x5, 0x7, 0x2, 0x4, 0x9, 0x61f5, 0xfff, 0x80000000, 0x2, 0x876a, 0xa6, 0x5dfc, 0x3, 0xe0, 0x5, 0x6d, 0x35, 0x8, 0x6, 0x1, 0xbb8, 0x8, 0xfffffbff, 0x7, 0xff, 0x80000001, 0x18b4, 0x2, 0x9, 0x35, 0x26, 0x2, 0xb, 0xfff, 0x9, 0x2, 0x7f, 0xa, 0x5, 0x7, 0x9, 0xfffffffc, 0x7, 0x5, 0x4, 0x0, 0x2, 0xff, 0x9, 0xfff, 0x401, 0x6, 0x0, 0x0, 0x10, 0x466, 0x2, 0x4, 0x4, 0x3, 0x9, 0x1, 0x3, 0xa, 0xcdf2, 0xe, 0x6, 0x9, 0x0, 0x4, 0x4, 0x856, 0x401, 0x1, 0x40, 0xdc, 0x3, 0x1, 0x3, 0x9, 0x7, 0x984, 0xd, 0x7, 0x5, 0xcb1, 0x5, 0x4, 0xf, 0x5, 0x1, 0x7, 0x2, 0x21, 0x7, 0x922e, 0x3ff, 0x6, 0x0, 0x8, 0xe3, 0x7, 0x80, 0x22e6, 0xffffff6a, 0x0, 0x9, 0x9, 0x81, 0xd, 0x7fff, 0xffff0001, 0x6, 0xd, 0x9, 0xc, 0xfff, 0x5, 0x800, 0x0, 0xb, 0xb04, 0x3, 0xdd, 0x6, 0x2, 0x2, 0x7f, 0x6145, 0x5, 0x101, 0x3, 0x3ff, 0x71, 0x8, 0x54c, 0x1, 0x4, 0x3, 0x2, 0x9, 0x1, 0x6, 0xe, 0x1, 0x2, 0xab, 0x10001, 0x10, 0x9, 0xe, 0x6, 0x0, 0x3, 0x8, 0x0, 0x1000, 0x2, 0x9, 0x9, 0x8, 0x8, 0x5, 0x0, 0x6, 0x3, 0x2, 0x0, 0x3ff, 0x5, 0x7, 0x1, 0x5a, 0x6, 0x0, 0x7fff, 0x80000000, 0x1, 0xffff, 0xf1e2, 0xffffff01, 0x8, 0xffff9701, 0x8, 0x400, 0x3, 0x80000000, 0x80000000, 0x1, 0x6, 0xf75244d1, 0xd4ca, 0x4, 0x6, 0x7, 0xf30, 0x5, 0x0, 0x0, 0x3, 0xd1, 0x4, 0x5a4, 0x5, 0x0, 0x7, 0x6555362c, 0x3, 0x5, 0x3, 0x0, 0x592a, 0x2, 0x81, 0x5, 0x67, 0x7fffffff, 0x0, 0xffff490f, 0x200, 0x1, 0x687, 0x5, 0x7, 0xc7c, 0x2, 0x9, 0x3, 0xfff, 0x80, 0x9, 0x7, 0x5, 0x8000, 0x4, 0x3ff, 0x9, 0x6, 0xfe4, 0x9, 0x1, 0x7, 0x6, 0x1, 0xf, 0x4, 0x5cd1, 0x9, 0x8, 0x7, 0x14, 0x4, 0xb72, 0x9, 0x4, 0x80000000, 0x5, 0x0, 0x0, 0xfffffffd, 0x401, 0x2, 0x4, 0x9, 0x2, 0x0, 0xff, 0xfff, 0xfffffffe, 0x81, 0x8001, 0x5bf, 0x200, 0xffff, 0x100, 0xc, 0x7, 0x0, 0x8b78, 0x7, 0x7, 0x1, 0x8, 0xfe0a, 0x9, 0x7, 0x1ff, 0xaf, 0x0, 0xc5e, 0xe8, 0x0, 0x3, 0x4, 0x7b, 0xffffffff, 0x6, 0x3, 0x22, 0xf10, 0xfffffffc, 0xff, 0x3, 0x4, 0x77, 0x1f7, 0x80, 0x80, 0x16000000, 0x604, 0x1000, 0xffffffff, 0x1, 0x6, 0xfffffeff, 0x2, 0x6cd, 0x0, 0x3062, 0x8, 0x2, 0x3, 0xb7, 0x20000000, 0x1ff, 0x401, 0x1b, 0x5, 0x8, 0xfff, 0x461a, 0x7, 0x4, 0xd, 0x0, 0x7, 0xfffffffc, 0x4, 0xcd, 0x4, 0x2, 0x2, 0x9, 0xfffffffe, 0x8, 0x0, 0x3, 0x1, 0xffff9c8a, 0x0, 0x2, 0x0, 0x1, 0xaae, 0x7fffffff, 0xfffffffd, 0x4, 0x8, 0x50a, 0x7, 0x3, 0x7, 0x8, 0xa, 0x3, 0x200, 0x10001, 0x1, 0x7, 0x203ff, 0x1000, 0xd360000, 0xfffffff9, 0x3, 0x6, 0x0, 0x3ff, 0x3, 0x8, 0xfffffff9, 0x6d, 0xffff, 0x7e20, 0x4, 0x1, 0x1, 0x5, 0x3, 0x10001, 0x10, 0x6, 0x7, 0x26, 0x31d6, 0x4, 0x1, 0x4, 0x2, 0xa9b6, 0x3, 0x6, 0xdb9, 0x80, 0x7fffffff, 0xfffffffb, 0x1, 0x6, 0x3, 0x2eac0, 0x10, 0x6, 0x5, 0x6, 0x5, 0x6, 0x7, 0x0, 0x4, 0x1378, 0x8, 0xfffffffe, 0x9, 0x9, 0xce55, 0x7, 0xfffffffe, 0x3ff, 0x3, 0x9, 0x2, 0x5, 0x0, 0x1, 0xd, 0x9, 0x0, 0x3be, 0x7a91, 0x1, 0xfffffffc, 0xff, 0x4, 0xf, 0x3ff, 0xfffffff8, 0x24, 0x1, 0x9f2, 0xb, 0xd0, 0x6, 0x1, 0x2, 0x200, 0xa7e3, 0xa, 0x6, 0x0, 0x0, 0x778, 0x6, 0xfffff081, 0x7, 0x6, 0x40, 0x800, 0x5, 0x7fff, 0x8000, 0x3, 0x94, 0x2, 0x0, 0x2, 0xffffffff, 0x10, 0xfffffffe, 0x9, 0x8, 0x0, 0x7, 0x4, 0x2, 0x9, 0xfffffff7, 0x4, 0x8, 0xffffffb7, 0x9, 0x40000, 0x7ff, 0x5f4, 0x7, 0xa, 0x9, 0x1, 0x1, 0x8, 0x4, 0x8, 0xfffff555, 0x6, 0x5, 0x200000, 0x2, 0x7, 0x7ff, 0x4, 0x27680000, 0x3, 0xd, 0x1, 0x9e2, 0x3, 0xf, 0x80, 0x8, 0x7f, 0x2c, 0x78c, 0x5, 0xd050, 0x8, 0x1ff, 0xfff, 0x5, 0x3, 0x4, 0x7a9d, 0xd, 0x2, 0x0, 0xf6a8, 0x7, 0x6, 0xfffffffe, 0x8, 0x7, 0xc, 0x3ff, 0x4, 0x3ff, 0xfffffffe, 0x2, 0x9, 0x5, 0x2, 0xfffffffb, 0x78, 0x8, 0xcfc6, 0x1000, 0x10, 0x1, 0x800000, 0x3, 0x8, 0x5, 0x0, 0x4, 0x5aa9, 0x5, 0x0, 0x80000001, 0x6, 0x0, 0x9, 0x0, 0x7, 0x0, 0x8000, 0xd, 0x0, 0xe2, 0x7, 0x6, 0x5, 0x0, 0x1ff, 0x3e65, 0x3168, 0x1, 0x1, 0x1, 0xffffff40, 0x400, 0x7, 0xfffffff0, 0x5, 0x5, 0x800, 0x81, 0x5, 0xffffffff, 0x7, 0x4bab, 0x10000, 0x1ff, 0x1, 0x3, 0x8, 0x5, 0x1ff, 0x8, 0x1, 0x2, 0xe, 0x3ff, 0x8001, 0xfffffffa, 0x2, 0x3, 0x5, 0xfffffff7, 0xd, 0x7, 0x81, 0x5, 0x400, 0x9c1, 0x9, 0x0, 0x7, 0xfffffff0, 0x462c, 0xaf, 0x2, 0x4, 0x862, 0x2, 0x5, 0x3, 0x7, 0x1, 0x3, 0x3, 0x4, 0xc4f, 0x2e, 0x9, 0x9927, 0x8, 0x5, 0x6, 0x2, 0x9, 0x36, 0x1, 0xfff, 0x0, 0xf5, 0x8, 0x5, 0xe8f0, 0xcbb3, 0xf, 0x0, 0x747, 0x401, 0x7, 0x2, 0x0, 0x869a, 0xf5, 0x9, 0x1, 0xa5, 0x895, 0x4, 0x6, 0x3b0, 0x7, 0x9, 0x35f, 0x3, 0x1, 0x0, 0x42e2, 0x2, 0x6, 0x2, 0x98, 0x5, 0x3, 0x1, 0x9, 0xfffff959, 0x3, 0xe, 0x2, 0xc, 0xb, 0x81, 0x1, 0x8, 0x4, 0x98000000, 0xdced, 0x8001, 0x2, 0xf, 0x2ee5, 0x0, 0x3, 0x9, 0x2, 0x1, 0xa, 0xffffffff, 0x51, 0xb, 0x6, 0x3, 0x8, 0xfffffff9, 0x9, 0xa3fc, 0x9, 0x5d9, 0x7, 0x3ff, 0x1, 0xf, 0x8, 0x2793, 0x5, 0x9c99, 0x401, 0x143, 0x7, 0x2, 0x9, 0x10000, 0x3f2, 0x3, 0xc, 0x4a5, 0x8, 0x9, 0x10001, 0x9, 0x2, 0x9, 0x3, 0xfffffffd, 0x7ff, 0x2, 0xadf80, 0x5, 0x916, 0x5, 0x6347, 0x100, 0x800, 0x5, 0x5, 0xb, 0x8001, 0x1dcc, 0x9, 0x0, 0x3, 0x1, 0xfffffd52, 0xffffffff, 0x1947, 0x2aec0246, 0x455, 0xffffffff, 0x1ff, 0x8, 0x1, 0x84, 0xfc79, 0x0, 0xfffffff0, 0x4, 0x3a6c, 0x5, 0x401, 0x7, 0x1, 0xff, 0x7d8, 0x2988, 0x0, 0x0, 0x0, 0x2, 0x200, 0x80, 0x6, 0x5, 0xf, 0x5, 0x7, 0x9, 0xfffffffd, 0x3, 0x5, 0x8000, 0xc, 0xfffffffa, 0x7, 0x9, 0x6, 0x7a]}) 1.206247317s ago: executing program 2 (id=8773): bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x14, 0x800, 0x1, 0xfffff801, 0x1210, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001300)={0x0, 0x0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) dup(r5) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000080)={0x0, 0x0, "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"}) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000004c0)={0x2, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0}) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) shutdown(r7, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x8, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r8, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r8, &(0x7f0000000400)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {0x0, 0x4}, @raw32={[0x2, 0x0, 0x1]}}, {0x0, 0x0, 0x0, 0x0, @time={0x0, 0x7}, {}, {}, @note={0x7e}}, {0x0, 0x0, 0x0, 0x0, @tick=0x80000000, {}, {}, @time=@tick=0xda}, {0x8, 0x0, 0x0, 0x0, @time={0x4, 0xf}, {}, {}, @result={0xffffffff}}], 0x70) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) socket$qrtr(0x2a, 0x2, 0x0) 1.032115454s ago: executing program 5 (id=8774): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@t={0x81, 0x4, 0x4a, 0x1}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r1, &(0x7f0000000700)={'#! ', '', [{0x20, '/proc/consoles\x00'}]}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netstat\x00') ftruncate(r3, 0x7fffffffffffffff) setsockopt(0xffffffffffffffff, 0xfc2, 0x200, &(0x7f0000001480)="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", 0x1000) dup3(r2, r2, 0x80000) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$userio(0xffffffffffffff9c, &(0x7f0000000200), 0x10800, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x121301) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0x0, 0xb, 0x750, 0x182, 0xba, 0xb8, &(0x7f00000002c0)="6c0bb3bd0eaa8c864d1d3477725971dc5c65e61b745115db2b3aea3df92356da3005dfdeca82c37adb3cc1c61813744c062f9971d719af69e9f6bfcfd206fd362c2996ae2665a157f65934a94fcc5d301ed2c5fc0a61eae106454bd3594dca98b1430523275ab35125158ae63e95b8b6107a61431bc881fad3ea09b591b0af284a5ad1c9ed4aec37206d5eb9f7e0f6dc79f2171f62637ca030ab773a42421a1901bc285a710ca48cdb89a5f82ed0d89821132950327cee4f68c5"}) 156.796648ms ago: executing program 2 (id=8775): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x20}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000180)=0xfffffff7, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @private2}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2, 0x6}, 0x1c) syz_emit_ethernet(0x39, &(0x7f0000000140)=ANY=[@ANYBLOB="5b1a033f2511baaaaaaaaabb08004500002b000000000211907800000000e000000100004e200017907896b2c36fb1b77d0593a2befd1cc50c"], 0x0) socket$inet(0x2b, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000004c0)=ANY=[@ANYRES16, @ANYRES8=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_emit_ethernet(0x2c8, &(0x7f00000001c0)=ANY=[], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8922, &(0x7f0000000f00)={'veth1_macvtap\x00', &(0x7f0000000140)}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_PEC(r8, 0x708, 0x3) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f0000000140)={0x1, 0x0, 0x7, &(0x7f0000000080)={0x0, "87f541a5e62c61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r11, 0x0, 0x39000, 0x0) r12 = memfd_create(&(0x7f0000000080), 0x0) splice(r10, 0x0, r12, 0x0, 0x408cd, 0x0) socket$inet6(0xa, 0x5, 0x630c) 66.744885ms ago: executing program 9 (id=8776): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = syz_open_dev$media(&(0x7f0000000280), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, 0x0, &(0x7f0000000300)}) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = creat(&(0x7f00000001c0)='./file0\x00', 0x0) write(r3, &(0x7f0000000300)='(', 0x1) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) write$uinput_user_dev(r3, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x86, 0xc95a, 0x3, 0x3, 0x80, 0x2, 0x1, 0x7f, 0x5, 0x4d, 0xfffffff2, 0x2, 0xa, 0x3, 0xffff2d37, 0x1dd2, 0x2006, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x3, 0x24, 0xffffffff, 0x1, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x3, 0x5, 0x3c, 0x8f, 0x5, 0x6, 0x3, 0x5, 0x8, 0x3, 0x0, 0x80, 0x0, 0x5, 0xfffffff7, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf6, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x9, 0x2f, 0xe, 0x101, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x800009, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0xffff, 0x9, 0x5f31, 0x0, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0x2, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0xb, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x6, 0x7fff, 0x0, 0x6, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1f0, 0x5, 0x8, 0x86, 0x8, 0x10000009, 0x3e7, 0x2, 0x2, 0x202, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x25, 0x3b, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x7, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x1, 0x1, 0x5, 0x1, 0x5, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x5, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x2, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x7, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x805, 0x8, 0xc8, 0xca2, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x80000009, 0x1, 0x6c1b, 0x0, 0x4, 0x8, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) 12.32873ms ago: executing program 5 (id=8777): syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000002980)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000400)="1fdf67", 0x3}], 0x1}, 0x0, 0x4}) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1}}], 0xfdef, 0x0) dup2(r0, r0) 0s ago: executing program 1 (id=8778): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff10) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x802, 0x0) write$uinput_user_dev(r4, &(0x7f0000000200)={'syz0\x00', {0xfffe}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5854, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000440)={0xfffa, [0x0, 0xffffffff], 0x1000}, 0x10) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001840)=ANY=[@ANYBLOB="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"], 0xe8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000002040)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r8, 0xc4009420, &(0x7f0000001c40)={0x7a5a649e42b1b702, 0x4, {0x9, @usage=0x6, 0x0, 0x3, 0x0, 0x2, 0x7, 0x5, 0xc, @usage=0x9, 0x3, 0x1000, [0x200, 0x1, 0x2, 0x401, 0x3, 0x30b8]}, {0x9, @struct={0xffffffff}, 0x0, 0x2, 0x81, 0x8001, 0x200, 0x0, 0x3, @struct={0xfa, 0x2}, 0xb09, 0x67757e11, [0x2, 0x0, 0x2000001f, 0x4, 0x4]}, {0x0, @usage=0x3, r9, 0x0, 0x46b, 0x3, 0x7, 0x5, 0x10, @usage=0x5, 0xffffffff, 0x60000000, [0x1, 0x509ea932, 0x1f, 0x5d32, 0x800, 0x10000]}, {0x7ff}}) ioctl$BTRFS_IOC_RESIZE(0xffffffffffffffff, 0x50009403, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=r9, @ANYBLOB="3a6d0080"]) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r6, {0x5}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000003000000000000000100000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018160000d2d1471d381156b710523489450a819a2d", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000700)='GPL\x00', 0x1, 0x20, &(0x7f0000000740)=""/32, 0x40f00, 0x54b221ddab7c5750, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000880)={0x1, 0xb, 0x80000001, 0x7b6}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000b00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r10], &(0x7f0000000b40)=[{0x4, 0x3, 0x10, 0x1}, {0x4, 0x5, 0xe, 0x6}, {0x2, 0x5, 0x4, 0x6}, {0x2, 0x3, 0x8, 0x3}, {0x4, 0x5, 0xa, 0xd}, {0x3, 0x3, 0x6, 0xa}, {0x4, 0x5, 0x10, 0x9}, {0x1, 0x5, 0xf, 0x2}], 0x10, 0x4, @void, @value}, 0x94) ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, 0x0) kernel console output (not intermixed with test programs): dv_slave_1 [ 2999.138955][ T7149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2999.167108][ T7149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2999.187874][ T7149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2999.210541][ T7149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2999.226878][ T7149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2999.236703][ T7149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2999.259004][ T7149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2999.286580][ T7149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2999.306819][ T7149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2999.328062][ T7149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2999.445709][ T7149] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2999.471947][ T7149] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2999.490198][ T7149] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2999.509377][ T7149] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2999.562773][ T7151] veth0_macvtap: entered promiscuous mode [ 2999.609220][ T7151] veth1_macvtap: entered promiscuous mode [ 2999.855663][ T5311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2999.962742][ T5311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3000.176576][ T7147] veth0_macvtap: entered promiscuous mode [ 3000.210688][ T7147] veth1_macvtap: entered promiscuous mode [ 3000.230205][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3000.256903][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3000.266724][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3000.277491][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3000.288685][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3000.299253][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3000.309229][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3000.319898][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3000.329784][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3000.342543][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3000.352859][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3000.363683][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3000.373650][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3000.384168][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3000.395097][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3000.405804][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3000.415739][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3000.426426][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3000.442467][ T7151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3000.556560][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3000.583748][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3000.633654][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3000.655787][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3000.677869][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3000.702508][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3000.722847][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3000.748241][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3000.769562][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3000.785198][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3000.796723][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3000.809430][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3000.819711][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3000.830614][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3000.840624][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3000.851349][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3000.861320][ T7151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3000.871942][ T7151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3001.074457][ T7151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3001.578721][ T6834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3001.600235][ T6834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3001.691308][ T7151] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3001.702424][ T7151] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3001.711831][ T7151] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3001.723424][ T7151] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3001.756592][ T6834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3001.764628][ T6834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3001.817748][ T7147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3001.834164][ T7147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3001.844677][ T7147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3001.856923][ T7147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3001.867246][ T7147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3001.883942][ T7147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3001.893781][ T7147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3001.904441][ T7147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3001.921973][ T7147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3001.934250][ T7147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3001.944481][ T7147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3001.954960][ T7147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3001.964862][ T7147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3001.975309][ T7147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3001.985142][ T7147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3001.995610][ T7147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3002.005443][ T7147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3002.015899][ T7147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3002.029789][ T7147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3002.040360][ T7147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3002.052873][ T7147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3002.072549][ T7147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3002.084467][ T7147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3002.094390][ T7147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3002.100263][ T5890] usb 10-1: new high-speed USB device number 91 using dummy_hcd [ 3002.105592][ T7147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3002.123012][ T7147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3002.134036][ T7147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3002.145431][ T7147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3002.155931][ T7147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3002.165773][ T7147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3002.176216][ T7147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3002.186212][ T7147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3002.196727][ T7147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3002.206561][ T7147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3002.217024][ T7147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3002.226911][ T7147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3002.238115][ T7147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3002.248313][ T7147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3002.259436][ T7147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3002.269339][ T7147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3002.279806][ T5890] usb 10-1: Using ep0 maxpacket: 8 [ 3002.283218][ T5890] usb 10-1: config 168 descriptor has 1 excess byte, ignoring [ 3002.285620][ T7147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3002.303962][ T7147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3002.306513][ T5890] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 3002.329182][ T5890] usb 10-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 3002.343052][ T5890] usb 10-1: config 168 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 3002.355392][ T5890] usb 10-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 3002.366230][ T5890] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3002.376405][ T5890] usb 10-1: Product: syz [ 3002.381793][ T5890] usb 10-1: Manufacturer: syz [ 3002.391592][ T7147] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3002.425914][ T5890] usb 10-1: SerialNumber: syz [ 3002.428728][ T7147] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3002.458791][ T7147] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3002.476158][ T7147] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3003.288178][ T5890] adutux 10-1:168.0: interrupt endpoints not found [ 3003.312714][ T5890] usb 10-1: USB disconnect, device number 91 [ 3003.353571][T12142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3003.362108][T12142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3003.670862][ T7289] input: syz0 as /devices/virtual/input/input199 [ 3004.350545][T29166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3004.372500][T29166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3004.421506][ T7293] fuse: Bad value for 'fd' [ 3004.712333][ T7294] input: syz1 as /devices/virtual/input/input200 [ 3004.916121][ T3875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3004.926393][ T3875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3004.951306][ T6834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3004.971007][ T6834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3005.539615][ T7303] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 3005.650462][ T7304] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 3005.658662][ T7304] lo: entered allmulticast mode [ 3005.816902][T31998] hsr_slave_0: left promiscuous mode [ 3005.823197][T31998] hsr_slave_1: left promiscuous mode [ 3005.855751][T31998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3005.895082][T31998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3005.923802][T31998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3005.940507][ T7162] Bluetooth: hci2: command 0x1003 tx timeout [ 3005.947368][ T7158] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 3005.974173][T31998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3006.101962][T31998] batman_adv: batadv0: Removing interface: ipvlan1 [ 3006.176378][T31998] hsr_slave_0: left promiscuous mode [ 3006.206625][T31998] hsr_slave_1: left promiscuous mode [ 3006.217665][T31998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3006.226459][T31998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3006.240250][T31998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3006.250860][T31998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3006.410761][T31998] hsr_slave_0: left promiscuous mode [ 3006.431889][T31998] hsr_slave_1: left promiscuous mode [ 3006.472323][T31998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3007.437442][T31998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3007.685592][ T7332] input: syz0 as /devices/virtual/input/input201 [ 3009.023522][T31998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3009.033280][T31998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3009.053638][T31998] batman_adv: batadv0: Removing interface: ipvlan1 [ 3009.106923][T31998] hsr_slave_0: left promiscuous mode [ 3009.124274][T31998] hsr_slave_1: left promiscuous mode [ 3009.135562][T31998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3009.146729][T31998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3009.256204][T31998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3009.268571][T31998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3010.091386][T31998] veth1_macvtap: left promiscuous mode [ 3010.097287][T31998] veth0_macvtap: left promiscuous mode [ 3010.102962][T31998] veth1_vlan: left promiscuous mode [ 3010.109998][T31998] veth0_vlan: left promiscuous mode [ 3010.123489][T31998] veth1_macvtap: left promiscuous mode [ 3010.150817][T31998] veth0_macvtap: left promiscuous mode [ 3010.166289][T31998] veth1_vlan: left promiscuous mode [ 3010.171852][T31998] veth0_vlan: left promiscuous mode [ 3010.182695][T31998] team0: left allmulticast mode [ 3010.189457][T31998] team_slave_0: left allmulticast mode [ 3010.195604][T31998] team_slave_1: left allmulticast mode [ 3010.197403][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.9.8160'. [ 3010.201499][T31998] team0: left promiscuous mode [ 3010.218112][T31998] team_slave_0: left promiscuous mode [ 3010.223560][T31998] team_slave_1: left promiscuous mode [ 3010.300593][ T7158] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 3010.300773][T31998] veth1_macvtap: left promiscuous mode [ 3010.421798][T31998] veth0_macvtap: left promiscuous mode [ 3010.516528][T31998] veth1_vlan: left promiscuous mode [ 3010.613634][T31998] veth0_vlan: left promiscuous mode [ 3010.748345][T31998] veth1_vlan: left promiscuous mode [ 3011.121897][ T7365] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 3011.128431][ T7365] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 3011.135125][ T7365] FAULT_INJECTION: forcing a failure. [ 3011.135125][ T7365] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3011.150543][ T7365] CPU: 0 UID: 0 PID: 7365 Comm: syz.3.8164 Not tainted 6.12.0-rc5-syzkaller-00181-g6c52d4da1c74 #0 [ 3011.161284][ T7365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 3011.171357][ T7365] Call Trace: [ 3011.174663][ T7365] [ 3011.177604][ T7365] dump_stack_lvl+0x241/0x360 [ 3011.182316][ T7365] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3011.187546][ T7365] ? __pfx__printk+0x10/0x10 [ 3011.192172][ T7365] ? snprintf+0xda/0x120 [ 3011.196444][ T7365] should_fail_ex+0x3b0/0x4e0 [ 3011.201158][ T7365] _copy_to_user+0x31/0xb0 [ 3011.205605][ T7365] simple_read_from_buffer+0xca/0x150 [ 3011.211002][ T7365] proc_fail_nth_read+0x1e9/0x250 [ 3011.216030][ T7365] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3011.221575][ T7365] ? rw_verify_area+0x55e/0x6f0 [ 3011.226421][ T7365] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3011.231962][ T7365] vfs_read+0x1fc/0xb70 [ 3011.236131][ T7365] ? fdget_pos+0x24e/0x320 [ 3011.240548][ T7365] ? __pfx_vfs_read+0x10/0x10 [ 3011.245227][ T7365] ? __fget_files+0x3f3/0x470 [ 3011.249915][ T7365] ? fdget_pos+0x24e/0x320 [ 3011.254333][ T7365] ksys_read+0x183/0x2b0 [ 3011.258590][ T7365] ? __pfx_ksys_read+0x10/0x10 [ 3011.263363][ T7365] ? do_syscall_64+0x100/0x230 [ 3011.268131][ T7365] ? do_syscall_64+0xb6/0x230 [ 3011.272811][ T7365] do_syscall_64+0xf3/0x230 [ 3011.277310][ T7365] ? clear_bhb_loop+0x35/0x90 [ 3011.281989][ T7365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3011.287876][ T7365] RIP: 0033:0x7fbaf7d7d15c [ 3011.292284][ T7365] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 3011.311883][ T7365] RSP: 002b:00007fbaf8b4c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3011.320292][ T7365] RAX: ffffffffffffffda RBX: 00007fbaf7f35f80 RCX: 00007fbaf7d7d15c [ 3011.328255][ T7365] RDX: 000000000000000f RSI: 00007fbaf8b4c0a0 RDI: 0000000000000004 [ 3011.336218][ T7365] RBP: 00007fbaf8b4c090 R08: 0000000000000000 R09: 0000000000000000 [ 3011.344186][ T7365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 3011.352154][ T7365] R13: 0000000000000000 R14: 00007fbaf7f35f80 R15: 00007fffff569688 [ 3011.360141][ T7365] [ 3011.363234][ C0] vkms_vblank_simulate: vblank timer overrun [ 3012.928135][T31998] team0 (unregistering): Port device team_slave_1 removed [ 3013.063507][T31998] team0 (unregistering): Port device team_slave_0 removed [ 3013.734229][T31998] lo (unregistering): left allmulticast mode [ 3014.283674][T31998] team0 (unregistering): Port device team_slave_1 removed [ 3014.345204][T31998] team0 (unregistering): Port device team_slave_0 removed [ 3015.531047][T31998] team0 (unregistering): Port device team_slave_1 removed [ 3015.595980][T31998] team0 (unregistering): Port device team_slave_0 removed [ 3016.144689][T31998] lo (unregistering): left allmulticast mode [ 3016.606282][T31998] team0 (unregistering): Port device team_slave_1 removed [ 3016.663502][T31998] team0 (unregistering): Port device team_slave_0 removed [ 3017.304735][ T7334] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 3017.312881][ T7335] lo: entered allmulticast mode [ 3017.442083][ T7360] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8163'. [ 3017.451825][ T7358] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 3017.459570][ T7363] lo: entered allmulticast mode [ 3017.464649][ T7375] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 3017.676914][ T29] audit: type=1326 audit(1730531613.452:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7379 comm="syz.5.8167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25317e719 code=0x7ffc0000 [ 3017.680609][ T7386] 9pnet_fd: Insufficient options for proto=fd [ 3017.761778][ T29] audit: type=1326 audit(1730531613.452:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7379 comm="syz.5.8167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25317e719 code=0x7ffc0000 [ 3017.804804][ T7397] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.8169'. [ 3017.815048][ T7386] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8170'. [ 3017.825939][ T7386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8170'. [ 3017.838702][ T7397] netlink: 183228 bytes leftover after parsing attributes in process `syz.3.8169'. [ 3018.607078][T26944] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 3019.083592][T26944] usb 4-1: Using ep0 maxpacket: 16 [ 3019.093917][T26944] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 3019.105331][T26944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3019.113675][T26944] usb 4-1: Product: syz [ 3019.120008][T26944] usb 4-1: Manufacturer: syz [ 3019.124633][T26944] usb 4-1: SerialNumber: syz [ 3019.148701][T26944] usb 4-1: config 0 descriptor?? [ 3019.348555][T26944] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 3019.892674][ T5311] usb 4-1: Failed to submit usb control message: -71 [ 3019.899903][ T5311] usb 4-1: unable to send the bmi data to the device: -71 [ 3019.907142][ T5311] usb 4-1: unable to get target info from device [ 3019.913501][ T5311] usb 4-1: could not get target info (-71) [ 3019.921483][T26944] usb 4-1: USB disconnect, device number 89 [ 3019.926824][ T5311] usb 4-1: could not probe fw (-71) [ 3020.468410][ T7432] input: syz0 as /devices/virtual/input/input202 [ 3020.712251][T31990] Bluetooth: hci2: Frame reassembly failed (-84) [ 3020.838026][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 3021.106491][ T7436] lo: entered allmulticast mode [ 3021.327424][ T7440] netlink: 'syz.3.8183': attribute type 14 has an invalid length. [ 3021.942962][ T7445] lo: entered allmulticast mode [ 3022.741224][ T7162] Bluetooth: hci2: command 0x1003 tx timeout [ 3022.748283][ T7158] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 3022.891758][ T7451] FAULT_INJECTION: forcing a failure. [ 3022.891758][ T7451] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3022.989740][ T7457] input: syz0 as /devices/virtual/input/input203 [ 3023.246000][ T5311] Bluetooth: hci2: Frame reassembly failed (-84) [ 3023.587055][ T7451] CPU: 1 UID: 0 PID: 7451 Comm: syz.3.8184 Not tainted 6.12.0-rc5-syzkaller-00181-g6c52d4da1c74 #0 [ 3023.597790][ T7451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 3023.607848][ T7451] Call Trace: [ 3023.611131][ T7451] [ 3023.614056][ T7451] dump_stack_lvl+0x241/0x360 [ 3023.618738][ T7451] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3023.623939][ T7451] ? __pfx__printk+0x10/0x10 [ 3023.628528][ T7451] ? __pfx_lock_release+0x10/0x10 [ 3023.633561][ T7451] should_fail_ex+0x3b0/0x4e0 [ 3023.638245][ T7451] _copy_from_iter+0x4ae/0x1e70 [ 3023.643108][ T7451] ? __pfx__copy_from_iter+0x10/0x10 [ 3023.648395][ T7451] ? alloc_pages_mpol_noprof+0x417/0x680 [ 3023.654036][ T7451] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 3023.660015][ T7451] ? fuse_do_ioctl+0x3b4/0x2c20 [ 3023.664869][ T7451] ? rcu_is_watching+0x15/0xb0 [ 3023.669629][ T7451] ? page_copy_sane+0x46/0x260 [ 3023.674395][ T7451] copy_page_from_iter+0x7a/0x100 [ 3023.679420][ T7451] fuse_do_ioctl+0x13fc/0x2c20 [ 3023.684181][ T7451] ? tomoyo_path_number_perm+0x208/0x880 [ 3023.689827][ T7451] ? __pfx_fuse_do_ioctl+0x10/0x10 [ 3023.694937][ T7451] ? smack_log+0x123/0x540 [ 3023.699352][ T7451] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3023.705335][ T7451] ? __pfx_smack_log+0x10/0x10 [ 3023.710095][ T7451] ? smk_access+0x4ab/0x4e0 [ 3023.714597][ T7451] ? smk_tskacc+0x300/0x370 [ 3023.719102][ T7451] ? smack_file_ioctl+0x2f7/0x3a0 [ 3023.724134][ T7451] ? __fget_files+0x3f3/0x470 [ 3023.728814][ T7451] ? fuse_allow_current_process+0x1eb/0x3c0 [ 3023.734712][ T7451] ? fuse_ioctl_common+0xf2/0x150 [ 3023.739737][ T7451] ? __pfx_fuse_dir_ioctl+0x10/0x10 [ 3023.744941][ T7451] __se_sys_ioctl+0xf9/0x170 [ 3023.749531][ T7451] do_syscall_64+0xf3/0x230 [ 3023.754033][ T7451] ? clear_bhb_loop+0x35/0x90 [ 3023.758711][ T7451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3023.764599][ T7451] RIP: 0033:0x7fbaf7d7e719 [ 3023.769010][ T7451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3023.788610][ T7451] RSP: 002b:00007fbaf8b4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3023.797031][ T7451] RAX: ffffffffffffffda RBX: 00007fbaf7f35f80 RCX: 00007fbaf7d7e719 [ 3023.805013][ T7451] RDX: 0000000020000080 RSI: 00000000fffff000 RDI: 0000000000000005 [ 3023.812985][ T7451] RBP: 00007fbaf8b4c090 R08: 0000000000000000 R09: 0000000000000000 [ 3023.820950][ T7451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3023.828917][ T7451] R13: 0000000000000000 R14: 00007fbaf7f35f80 R15: 00007fffff569688 [ 3023.836897][ T7451] [ 3024.646293][ T7485] netlink: 256 bytes leftover after parsing attributes in process `syz.9.8194'. [ 3024.655604][ T7485] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8194'. [ 3025.099395][ T7493] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8195'. [ 3025.108842][ T7493] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8195'. [ 3025.327126][ T7158] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 3025.331613][T32755] Bluetooth: hci2: command 0x1003 tx timeout [ 3025.743631][ T7505] input: syz0 as /devices/virtual/input/input204 [ 3025.930511][T18005] Bluetooth: hci2: Frame reassembly failed (-84) [ 3026.712369][T31998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3026.735453][T31998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3027.153989][T31998] bond0 (unregistering): Released all slaves [ 3027.604146][ T7514] Bluetooth: MGMT ver 1.23 [ 3027.880611][ T7158] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 3028.095876][ T7518] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x16 (0x33424752, 8, 0, 0, 0) [ 3028.915437][T31998] bond1 (unregistering): Released all slaves [ 3029.213405][ T7529] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3029.421588][ T29] audit: type=1326 audit(1730531881.206:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7541 comm="syz.9.8205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5077e719 code=0x7ffc0000 [ 3029.473456][ T29] audit: type=1326 audit(1730531881.206:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7541 comm="syz.9.8205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e5077e719 code=0x7ffc0000 [ 3029.508701][ T29] audit: type=1326 audit(1730531881.206:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7541 comm="syz.9.8205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5077e719 code=0x7ffc0000 [ 3029.546498][ T29] audit: type=1326 audit(1730531881.206:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7541 comm="syz.9.8205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f5e5077e719 code=0x7ffc0000 [ 3029.609407][ T7552] netlink: 'syz.3.8207': attribute type 21 has an invalid length. [ 3029.609686][ T29] audit: type=1326 audit(1730531881.206:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7541 comm="syz.9.8205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5077e719 code=0x7ffc0000 [ 3029.638962][ C0] vkms_vblank_simulate: vblank timer overrun [ 3029.710689][ T7556] netlink: 'syz.3.8207': attribute type 32 has an invalid length. [ 3029.980374][ T7556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8207'. [ 3029.981303][ T29] audit: type=1326 audit(1730531881.206:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7541 comm="syz.9.8205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f5e5077e719 code=0x7ffc0000 [ 3030.196952][ T29] audit: type=1326 audit(1730531881.206:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7541 comm="syz.9.8205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5077e719 code=0x7ffc0000 [ 3030.231660][ T7556] (unnamed net_device) (uninitialized): option coupled_control: invalid value (84) [ 3030.266868][ T29] audit: type=1326 audit(1730531881.206:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7541 comm="syz.9.8205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7f5e5077e719 code=0x7ffc0000 [ 3030.288434][ C0] vkms_vblank_simulate: vblank timer overrun [ 3030.449052][ T29] audit: type=1326 audit(1730531881.206:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7541 comm="syz.9.8205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5077e719 code=0x7ffc0000 [ 3031.414981][ T29] audit: type=1326 audit(1730531881.206:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7541 comm="syz.9.8205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e5077e719 code=0x7ffc0000 [ 3032.325127][T31998] hsr_slave_0: left promiscuous mode [ 3032.334467][T31998] hsr_slave_1: left promiscuous mode [ 3032.550191][T31998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3032.658733][T31998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3033.057715][T31998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3033.065167][T31998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3033.185257][T31998] veth0_macvtap: left promiscuous mode [ 3033.197006][T31998] veth1_vlan: left promiscuous mode [ 3033.202329][T31998] veth0_vlan: left promiscuous mode [ 3033.618850][T32755] Bluetooth: hci1: command 0x0405 tx timeout [ 3034.366863][T26944] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 3034.536850][T26944] usb 4-1: Using ep0 maxpacket: 8 [ 3034.565852][T26944] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 3034.601759][T26944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3034.646863][T26944] usb 4-1: Product: syz [ 3034.660005][T26944] usb 4-1: Manufacturer: syz [ 3034.685257][T26944] usb 4-1: SerialNumber: syz [ 3034.700328][T26944] usb 4-1: config 0 descriptor?? [ 3034.991284][ T7620] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8220'. [ 3035.001703][ T7620] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8220'. [ 3035.730104][T31998] team0 (unregistering): Port device team_slave_1 removed [ 3035.825092][T31998] team0 (unregistering): Port device team_slave_0 removed [ 3036.396992][ T7609] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8213'. [ 3038.223995][T26944] usb write operation failed. (-71) [ 3038.231976][T26944] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 3038.248892][T26944] usb 4-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 3038.269037][T26944] usb 4-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 3038.502578][ T7647] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3038.524153][ T7647] netlink: 'syz.3.8230': attribute type 1 has an invalid length. [ 3038.536960][ T7647] netlink: 9392 bytes leftover after parsing attributes in process `syz.3.8230'. [ 3038.574635][T31998] IPVS: stop unused estimator thread 0... [ 3039.098911][ T7660] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8233'. [ 3039.108292][ T7660] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8233'. [ 3040.987412][ T7674] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 3045.906053][ T7716] input: syz0 as /devices/virtual/input/input206 [ 3047.470235][ T7724] netlink: 256 bytes leftover after parsing attributes in process `syz.9.8246'. [ 3047.479670][ T7724] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8246'. [ 3047.582180][ T7727] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x16 (0x33424752, 8, 0, 0, 0) [ 3048.497646][ T7734] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 3049.007105][ T7158] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 3049.657580][ T7764] netlink: 'syz.9.8262': attribute type 4 has an invalid length. [ 3049.990387][ T7772] netlink: 256 bytes leftover after parsing attributes in process `syz.2.8263'. [ 3050.000032][ T7772] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8263'. [ 3050.378323][ T7776] netlink: 'syz.9.8265': attribute type 4 has an invalid length. [ 3050.984760][ T7782] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3050.996196][ T7782] netlink: 'syz.9.8267': attribute type 1 has an invalid length. [ 3051.004105][ T7782] netlink: 9392 bytes leftover after parsing attributes in process `syz.9.8267'. [ 3051.286940][T31166] usb 10-1: new high-speed USB device number 92 using dummy_hcd [ 3051.417136][T31166] usb 10-1: device descriptor read/64, error -71 [ 3051.657061][T31166] usb 10-1: new high-speed USB device number 93 using dummy_hcd [ 3051.970066][T31166] usb 10-1: device descriptor read/64, error -71 [ 3052.097006][ T7795] input: syz0 as /devices/virtual/input/input207 [ 3052.143122][T31166] usb usb10-port1: attempt power cycle [ 3053.321914][T31166] usb 10-1: new high-speed USB device number 94 using dummy_hcd [ 3053.380719][T31166] usb 10-1: device descriptor read/8, error -71 [ 3053.424574][ T7807] input: syz0 as /devices/virtual/input/input208 [ 3053.514482][ T5740] Bluetooth: hci4: Frame reassembly failed (-84) [ 3053.802680][T31166] usb 10-1: new high-speed USB device number 95 using dummy_hcd [ 3053.879780][T31166] usb 10-1: device descriptor read/8, error -71 [ 3054.079604][T31166] usb usb10-port1: unable to enumerate USB device [ 3054.257180][ T7158] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 3055.405485][ T7818] input: syz0 as /devices/virtual/input/input209 [ 3055.495897][T31995] Bluetooth: hci2: Frame reassembly failed (-84) [ 3055.522148][ T5311] Bluetooth: hci2: Frame reassembly failed (-84) [ 3055.555513][ T7821] netlink: 256 bytes leftover after parsing attributes in process `syz.5.8279'. [ 3055.564602][ T7821] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8279'. [ 3055.585627][T32755] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 3055.592357][ T7158] Bluetooth: hci4: command 0x1003 tx timeout [ 3055.891927][ T7832] netlink: 201660 bytes leftover after parsing attributes in process `syz.0.8282'. [ 3056.343399][ T7841] netlink: 'syz.3.8283': attribute type 11 has an invalid length. [ 3056.365831][ T7841] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 3056.402673][ T7841] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 3056.432816][ T7841] gretap1: entered promiscuous mode [ 3056.447146][ T7842] xt_TCPMSS: Only works on TCP SYN packets [ 3056.450251][ T7841] gretap1: entered allmulticast mode [ 3057.679896][ T7162] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 3057.824261][ T7854] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3057.866996][ T7854] netlink: 'syz.5.8287': attribute type 1 has an invalid length. [ 3057.905657][ T7854] netlink: 9392 bytes leftover after parsing attributes in process `syz.5.8287'. [ 3058.016140][ T7856] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3058.074304][ T7856] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 3058.507720][ T7867] input: syz0 as /devices/virtual/input/input210 [ 3058.713444][T31995] Bluetooth: hci2: Frame reassembly failed (-84) [ 3059.572032][ T7886] netlink: 'syz.2.8296': attribute type 4 has an invalid length. [ 3060.326858][ T7902] input: syz0 as /devices/virtual/input/input211 [ 3060.621792][ T5740] Bluetooth: hci4: Frame reassembly failed (-84) [ 3060.869678][ T7158] Bluetooth: hci2: command 0x1003 tx timeout [ 3060.923914][T32755] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 3061.543258][ T7920] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x16 (0x33424752, 8, 0, 0, 0) [ 3062.534512][ T7926] netlink: 23998 bytes leftover after parsing attributes in process `syz.3.8305'. [ 3062.588093][ T7926] netlink: 188348 bytes leftover after parsing attributes in process `syz.3.8305'. [ 3062.639842][T31166] IPVS: starting estimator thread 0... [ 3062.657002][T32755] Bluetooth: hci4: command 0x1003 tx timeout [ 3062.664513][ T7162] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 3062.797257][ T7932] IPVS: using max 21 ests per chain, 50400 per kthread [ 3063.788836][ T7944] netlink: 'syz.2.8308': attribute type 4 has an invalid length. [ 3064.221300][ T7954] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3064.231305][ T7954] netlink: 'syz.5.8313': attribute type 1 has an invalid length. [ 3064.240376][ T7954] netlink: 9392 bytes leftover after parsing attributes in process `syz.5.8313'. [ 3066.011253][ T7968] input: syz0 as /devices/virtual/input/input212 [ 3068.697732][ T7162] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 3069.032826][ T7984] tipc: Started in network mode [ 3069.037925][ T7984] tipc: Node identity UNC_PROT, cluster identity 4711 [ 3069.044745][ T7984] tipc: Enabling of bearer rejected, failed to enable media [ 3069.081840][T31166] hid-generic 0083:0000:0000.0034: unknown main item tag 0x6 [ 3069.091036][T31166] hid-generic 0083:0000:0000.0034: unknown main item tag 0x0 [ 3069.101767][T31166] hid-generic 0083:0000:0000.0034: hidraw0: HID vffffff.ff Device [syz0] on syz1 [ 3069.114148][ T7984] 9pnet_fd: Insufficient options for proto=fd [ 3070.025180][ T8000] IPVS: set_ctl: invalid protocol: 108 10.1.1.1:20132 [ 3070.486894][T31166] usb 10-1: new high-speed USB device number 96 using dummy_hcd [ 3070.732249][ T8023] input: syz0 as /devices/virtual/input/input214 [ 3071.799488][T31166] usb 10-1: Using ep0 maxpacket: 8 [ 3071.807207][T31166] usb 10-1: too many configurations: 242, using maximum allowed: 8 [ 3071.821962][T31166] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 3071.829916][T31166] usb 10-1: can't read configurations, error -61 [ 3072.017721][T31166] usb 10-1: new high-speed USB device number 97 using dummy_hcd [ 3072.037495][ T8028] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3072.064110][ T8028] netlink: 'syz.0.8333': attribute type 1 has an invalid length. [ 3072.096087][ T8028] netlink: 9392 bytes leftover after parsing attributes in process `syz.0.8333'. [ 3072.186961][T31166] usb 10-1: Using ep0 maxpacket: 8 [ 3072.198269][T31166] usb 10-1: too many configurations: 242, using maximum allowed: 8 [ 3072.234101][T31166] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 3072.245134][ T8031] netlink: 'syz.3.8334': attribute type 2 has an invalid length. [ 3072.245364][T31166] usb 10-1: can't read configurations, error -61 [ 3072.253949][ T8031] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8334'. [ 3072.276555][T31166] usb usb10-port1: attempt power cycle [ 3072.368690][ T8037] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 3072.380706][ T8037] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 3072.389601][ T8037] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 3073.256367][T31166] usb 10-1: new high-speed USB device number 98 using dummy_hcd [ 3073.361599][T31166] usb 10-1: device descriptor read/8, error -71 [ 3073.967702][ T7162] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 3074.019367][ T8050] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3074.191173][ T8054] netlink: 202684 bytes leftover after parsing attributes in process `syz.5.8340'. [ 3074.635800][ T8059] netlink: 12 bytes leftover after parsing attributes in process `syz.9.8342'. [ 3075.782896][T32755] block nbd3: Receive control failed (result -32) [ 3075.783132][ T8060] block nbd3: shutting down sockets [ 3075.899449][ T8066] libceph: resolve '..0' (ret=-3): failed [ 3076.782374][ T8081] FAULT_INJECTION: forcing a failure. [ 3076.782374][ T8081] name failslab, interval 1, probability 0, space 0, times 0 [ 3076.795398][ T8081] CPU: 1 UID: 0 PID: 8081 Comm: syz.2.8348 Not tainted 6.12.0-rc5-syzkaller-00181-g6c52d4da1c74 #0 [ 3076.806095][ T8081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 3076.816162][ T8081] Call Trace: [ 3076.819452][ T8081] [ 3076.822395][ T8081] dump_stack_lvl+0x241/0x360 [ 3076.827105][ T8081] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3076.832329][ T8081] ? __pfx__printk+0x10/0x10 [ 3076.836942][ T8081] ? fs_reclaim_acquire+0x93/0x130 [ 3076.842072][ T8081] ? __pfx___might_resched+0x10/0x10 [ 3076.847378][ T8081] should_fail_ex+0x3b0/0x4e0 [ 3076.852076][ T8081] ? tomoyo_encode+0x26f/0x540 [ 3076.856943][ T8081] should_failslab+0xac/0x100 [ 3076.861655][ T8081] ? tomoyo_encode+0x26f/0x540 [ 3076.866433][ T8081] __kmalloc_noprof+0xd8/0x400 [ 3076.871224][ T8081] tomoyo_encode+0x26f/0x540 [ 3076.875846][ T8081] tomoyo_realpath_from_path+0x59e/0x5e0 [ 3076.881512][ T8081] tomoyo_check_open_permission+0x255/0x500 [ 3076.887426][ T8081] ? __lock_acquire+0x1384/0x2050 [ 3076.892488][ T8081] ? tomoyo_check_open_permission+0x204/0x500 [ 3076.898572][ T8081] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 3076.905048][ T8081] ? tomoyo_file_open+0x165/0x220 [ 3076.910088][ T8081] security_file_open+0x777/0x990 [ 3076.915137][ T8081] do_dentry_open+0x369/0x1460 [ 3076.919928][ T8081] vfs_open+0x3e/0x330 [ 3076.924015][ T8081] path_openat+0x2c84/0x3590 [ 3076.928653][ T8081] ? __pfx_path_openat+0x10/0x10 [ 3076.933629][ T8081] do_filp_open+0x235/0x490 [ 3076.938149][ T8081] ? __pfx_do_filp_open+0x10/0x10 [ 3076.943210][ T8081] ? _raw_spin_unlock+0x28/0x50 [ 3076.948079][ T8081] ? alloc_fd+0x5a1/0x640 [ 3076.952433][ T8081] do_sys_openat2+0x13e/0x1d0 [ 3076.957141][ T8081] ? __pfx_do_sys_openat2+0x10/0x10 [ 3076.962367][ T8081] __x64_sys_openat+0x247/0x2a0 [ 3076.967234][ T8081] ? __pfx___x64_sys_openat+0x10/0x10 [ 3076.972622][ T8081] ? do_syscall_64+0x100/0x230 [ 3076.977405][ T8081] ? do_syscall_64+0xb6/0x230 [ 3076.982102][ T8081] do_syscall_64+0xf3/0x230 [ 3076.986625][ T8081] ? clear_bhb_loop+0x35/0x90 [ 3076.991321][ T8081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3076.997230][ T8081] RIP: 0033:0x7f7d8a77e719 [ 3077.001658][ T8081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3077.021285][ T8081] RSP: 002b:00007f7d8b5f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 3077.029725][ T8081] RAX: ffffffffffffffda RBX: 00007f7d8a936130 RCX: 00007f7d8a77e719 [ 3077.037713][ T8081] RDX: 0000000000000000 RSI: 0000000020000240 RDI: ffffffffffffff9c [ 3077.045695][ T8081] RBP: 00007f7d8b5f1090 R08: 0000000000000000 R09: 0000000000000000 [ 3077.053684][ T8081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3077.061676][ T8081] R13: 0000000000000000 R14: 00007f7d8a936130 R15: 00007ffd17a64708 [ 3077.069676][ T8081] [ 3077.073743][ T8081] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3078.500897][ T8095] netlink: 202684 bytes leftover after parsing attributes in process `syz.9.8350'. [ 3079.088599][ T8104] input: syz0 as /devices/virtual/input/input215 [ 3079.402324][T31998] Bluetooth: hci2: Frame reassembly failed (-84) [ 3079.421279][T31998] Bluetooth: hci2: Frame reassembly failed (-84) [ 3080.050385][ T8101] netlink: 202684 bytes leftover after parsing attributes in process `syz.3.8354'. [ 3080.050985][ T8107] netlink: 'syz.9.8355': attribute type 4 has an invalid length. [ 3081.253245][ T8121] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 3081.376893][T32755] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 3082.307564][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 3083.581033][ T8137] netlink: 202684 bytes leftover after parsing attributes in process `syz.2.8365'. [ 3083.842202][ T8142] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3083.953816][ T8144] netlink: 'syz.0.8367': attribute type 4 has an invalid length. [ 3084.304434][ T8158] sctp: [Deprecated]: syz.9.8370 (pid 8158) Use of int in maxseg socket option. [ 3084.304434][ T8158] Use struct sctp_assoc_value instead [ 3085.409426][ T8164] input: syz0 as /devices/virtual/input/input216 [ 3085.609147][T29166] Bluetooth: hci2: Frame reassembly failed (-84) [ 3086.172118][ T8169] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 3086.397045][ T8172] input: syz0 as /devices/virtual/input/input217 [ 3088.158864][ T7158] Bluetooth: hci2: command 0x1003 tx timeout [ 3088.179954][T32755] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 3088.439150][ T8177] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3088.467880][ T8177] netlink: 'syz.2.8376': attribute type 1 has an invalid length. [ 3088.475720][ T8177] netlink: 9392 bytes leftover after parsing attributes in process `syz.2.8376'. [ 3088.544548][ T8180] FAULT_INJECTION: forcing a failure. [ 3088.544548][ T8180] name failslab, interval 1, probability 0, space 0, times 0 [ 3088.572760][ T8180] CPU: 1 UID: 0 PID: 8180 Comm: syz.9.8379 Not tainted 6.12.0-rc5-syzkaller-00181-g6c52d4da1c74 #0 [ 3088.583482][ T8180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 3088.593557][ T8180] Call Trace: [ 3088.596853][ T8180] [ 3088.599797][ T8180] dump_stack_lvl+0x241/0x360 [ 3088.604500][ T8180] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3088.609717][ T8180] ? __pfx__printk+0x10/0x10 [ 3088.614303][ T8180] ? fs_reclaim_acquire+0x93/0x130 [ 3088.619420][ T8180] ? __pfx___might_resched+0x10/0x10 [ 3088.624725][ T8180] should_fail_ex+0x3b0/0x4e0 [ 3088.629407][ T8180] ? tomoyo_encode+0x26f/0x540 [ 3088.634193][ T8180] should_failslab+0xac/0x100 [ 3088.638895][ T8180] ? tomoyo_encode+0x26f/0x540 [ 3088.643679][ T8180] __kmalloc_noprof+0xd8/0x400 [ 3088.648473][ T8180] tomoyo_encode+0x26f/0x540 [ 3088.653080][ T8180] tomoyo_realpath_from_path+0x59e/0x5e0 [ 3088.658741][ T8180] tomoyo_path_perm+0x2b7/0x740 [ 3088.663619][ T8180] ? tomoyo_path_perm+0x287/0x740 [ 3088.668664][ T8180] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 3088.674053][ T8180] ? smk_access+0x4ab/0x4e0 [ 3088.678565][ T8180] ? smk_tskacc+0x300/0x370 [ 3088.683082][ T8180] ? cap_capable+0x1b4/0x250 [ 3088.687678][ T8180] ? bpf_lsm_capable+0x9/0x10 [ 3088.692354][ T8180] ? security_capable+0x7e/0x2d0 [ 3088.697292][ T8180] security_path_chroot+0x86/0x250 [ 3088.702402][ T8180] __se_sys_chroot+0x1c5/0x2b0 [ 3088.707167][ T8180] ? __pfx___se_sys_chroot+0x10/0x10 [ 3088.712449][ T8180] ? do_syscall_64+0x100/0x230 [ 3088.717216][ T8180] ? do_syscall_64+0xb6/0x230 [ 3088.721889][ T8180] do_syscall_64+0xf3/0x230 [ 3088.726385][ T8180] ? clear_bhb_loop+0x35/0x90 [ 3088.731059][ T8180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3088.736948][ T8180] RIP: 0033:0x7f5e5077e719 [ 3088.741361][ T8180] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3088.760961][ T8180] RSP: 002b:00007f5e501ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a1 [ 3088.769376][ T8180] RAX: ffffffffffffffda RBX: 00007f5e50935f80 RCX: 00007f5e5077e719 [ 3088.777347][ T8180] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000200000c0 [ 3088.785312][ T8180] RBP: 00007f5e501ff090 R08: 0000000000000000 R09: 0000000000000000 [ 3088.793277][ T8180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3088.801246][ T8180] R13: 0000000000000000 R14: 00007f5e50935f80 R15: 00007ffc3c390808 [ 3088.809236][ T8180] [ 3088.825347][ T8180] ERROR: Out of memory at tomoyo_realpath_from_path. [ 3088.957069][ T653] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 3089.091002][ T8189] netlink: 202684 bytes leftover after parsing attributes in process `syz.9.8381'. [ 3089.117081][ T653] usb 3-1: device descriptor read/64, error -71 [ 3089.235604][ T8192] netlink: 'syz.0.8382': attribute type 4 has an invalid length. [ 3089.367137][ T653] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 3089.537053][ T653] usb 3-1: device descriptor read/64, error -71 [ 3089.563989][ T8196] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8383'. [ 3089.575026][ T8196] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8383'. [ 3089.657685][ T653] usb usb3-port1: attempt power cycle [ 3090.047061][ T653] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 3090.067582][ T653] usb 3-1: device descriptor read/8, error -71 [ 3090.177883][ T7162] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 3090.924850][ T8209] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 3090.933478][T31166] usb 10-1: new high-speed USB device number 100 using dummy_hcd [ 3091.100646][ T653] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 3091.127328][ T653] usb 3-1: device descriptor read/8, error -71 [ 3091.196868][T31166] usb 10-1: Using ep0 maxpacket: 8 [ 3091.208588][T31166] usb 10-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 3091.564585][T31166] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3091.852125][T31166] usb 10-1: config 0 descriptor?? [ 3091.886941][ T653] usb usb3-port1: unable to enumerate USB device [ 3092.335027][ T8230] netlink: 'syz.5.8393': attribute type 4 has an invalid length. [ 3093.387721][T31166] usb 10-1: string descriptor 0 read error: -71 [ 3093.451632][T31166] usb 10-1: Found UVC 0.00 device (2833:0201) [ 3093.458815][T31166] usb 10-1: No valid video chain found. [ 3093.897955][T31166] usb 10-1: USB disconnect, device number 100 [ 3094.355364][ T8249] input: syz0 as /devices/virtual/input/input218 [ 3096.653998][ T8258] input: syz0 as /devices/virtual/input/input219 [ 3096.809178][ T3875] Bluetooth: hci4: Frame reassembly failed (-84) [ 3096.815876][ T3875] Bluetooth: hci4: Frame reassembly failed (-84) [ 3097.067109][T32755] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 3097.318692][ T8252] netlink: 202684 bytes leftover after parsing attributes in process `syz.5.8395'. [ 3097.607387][ T8266] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 3098.643066][ T8274] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3098.738665][ T8276] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8405'. [ 3098.753998][ T8276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8405'. [ 3098.816981][ T7162] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 3098.820927][ T8279] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8406'. [ 3098.951252][ T8279] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8406'. [ 3099.823318][ T8296] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.8410'. [ 3100.534425][ T8302] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 3102.128833][ T8314] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8414'. [ 3102.760755][T26944] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 3102.777939][T26944] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 3102.790318][T26944] usb 4-1: USB disconnect, device number 90 [ 3102.959079][ T8326] netlink: 256 bytes leftover after parsing attributes in process `syz.3.8420'. [ 3102.968612][ T8326] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8420'. [ 3103.160470][ T8331] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8422'. [ 3103.171747][ T8331] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8422'. [ 3103.508403][ T8339] input: syz0 as /devices/virtual/input/input220 [ 3103.668043][ T8341] vivid-001: disconnect [ 3103.758396][T29166] Bluetooth: hci2: Frame reassembly failed (-84) [ 3103.800119][ T8341] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8425'. [ 3104.001946][ T8341] veth1_macvtap: left promiscuous mode [ 3104.118621][ T8335] vivid-001: reconnect [ 3104.125773][ T8341] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8425'. [ 3104.985821][ T8356] FAULT_INJECTION: forcing a failure. [ 3104.985821][ T8356] name failslab, interval 1, probability 0, space 0, times 0 [ 3104.999269][ T8356] CPU: 0 UID: 0 PID: 8356 Comm: syz.3.8429 Not tainted 6.12.0-rc5-syzkaller-00181-g6c52d4da1c74 #0 [ 3105.009961][ T8356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 3105.020027][ T8356] Call Trace: [ 3105.023317][ T8356] [ 3105.026261][ T8356] dump_stack_lvl+0x241/0x360 [ 3105.030963][ T8356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3105.036181][ T8356] ? __pfx__printk+0x10/0x10 [ 3105.040791][ T8356] ? fs_reclaim_acquire+0x93/0x130 [ 3105.045946][ T8356] ? __pfx___might_resched+0x10/0x10 [ 3105.051269][ T8356] should_fail_ex+0x3b0/0x4e0 [ 3105.055978][ T8356] should_failslab+0xac/0x100 [ 3105.060681][ T8356] ? smk_import_entry+0x2ec/0x610 [ 3105.065721][ T8356] __kmalloc_cache_noprof+0x6c/0x2c0 [ 3105.071024][ T8356] ? full_name_hash+0x93/0xe0 [ 3105.075723][ T8356] smk_import_entry+0x2ec/0x610 [ 3105.080595][ T8356] smk_write_net6addr+0x700/0x18b0 [ 3105.085740][ T8356] ? __pfx_smk_write_net6addr+0x10/0x10 [ 3105.091303][ T8356] ? rcu_read_lock_any_held+0xb7/0x160 [ 3105.096792][ T8356] ? __pfx_smk_write_net6addr+0x10/0x10 [ 3105.102362][ T8356] vfs_write+0x2a3/0xd30 [ 3105.106628][ T8356] ? fdget_pos+0x24e/0x320 [ 3105.111078][ T8356] ? __pfx_vfs_write+0x10/0x10 [ 3105.115871][ T8356] ? __fget_files+0x3f3/0x470 [ 3105.120578][ T8356] ? fdget_pos+0x24e/0x320 [ 3105.125023][ T8356] ksys_write+0x183/0x2b0 [ 3105.129377][ T8356] ? __pfx_ksys_write+0x10/0x10 [ 3105.134245][ T8356] ? do_syscall_64+0x100/0x230 [ 3105.139027][ T8356] ? do_syscall_64+0xb6/0x230 [ 3105.143724][ T8356] do_syscall_64+0xf3/0x230 [ 3105.148246][ T8356] ? clear_bhb_loop+0x35/0x90 [ 3105.152942][ T8356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3105.158884][ T8356] RIP: 0033:0x7fbaf7d7e719 [ 3105.163320][ T8356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3105.182943][ T8356] RSP: 002b:00007fbaf8b0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 3105.191378][ T8356] RAX: ffffffffffffffda RBX: 00007fbaf7f36130 RCX: 00007fbaf7d7e719 [ 3105.199364][ T8356] RDX: 00000000000000b7 RSI: 0000000020000300 RDI: 0000000000000005 [ 3105.207346][ T8356] RBP: 00007fbaf8b0a090 R08: 0000000000000000 R09: 0000000000000000 [ 3105.215324][ T8356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3105.223306][ T8356] R13: 0000000000000000 R14: 00007fbaf7f36130 R15: 00007fffff569688 [ 3105.231305][ T8356] [ 3105.234369][ C0] vkms_vblank_simulate: vblank timer overrun [ 3105.320623][T26944] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 3105.369472][ T7161] Bluetooth: hci6: command 0x0406 tx timeout [ 3105.378587][ T7161] Bluetooth: hci0: command 0x0406 tx timeout [ 3105.384622][ T7161] Bluetooth: hci5: command 0x0406 tx timeout [ 3105.391065][ T7156] Bluetooth: hci1: command 0x0405 tx timeout [ 3105.391094][ T7160] Bluetooth: hci3: command 0x0406 tx timeout [ 3105.589956][T26944] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 3105.598306][T26944] usb 3-1: config 0 has no interface number 0 [ 3105.612615][T26944] usb 3-1: config 0 interface 239 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 511 [ 3105.616936][ T7163] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 3105.623181][ T7162] Bluetooth: hci2: command 0x1003 tx timeout [ 3105.743806][T26944] usb 3-1: New USB device found, idVendor=eb1a, idProduct=e359, bcdDevice=34.64 [ 3105.771439][T26944] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3105.884217][T26944] usb 3-1: Product: syz [ 3105.916584][T26944] usb 3-1: Manufacturer: syz [ 3105.932692][ T8362] fuse: Bad value for 'fd' [ 3105.936877][T26944] usb 3-1: SerialNumber: syz [ 3105.959805][T26944] usb 3-1: config 0 descriptor?? [ 3105.973277][ T8351] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3105.984518][T26944] em28xx 3-1:0.239: New device syz syz @ 480 Mbps (eb1a:e359, interface 239, class 239) [ 3105.994873][T26944] em28xx 3-1:0.239: Video interface 239 found: bulk [ 3106.002310][ T8364] netlink: 256 bytes leftover after parsing attributes in process `syz.9.8433'. [ 3106.019745][ T8364] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8433'. [ 3107.097240][ T8376] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8435'. [ 3107.117458][T26944] em28xx 3-1:0.239: unknown em28xx chip ID (0) [ 3107.220716][T26944] em28xx 3-1:0.239: reading from i2c device at 0xa0 failed (error=-5) [ 3107.229575][T26944] em28xx 3-1:0.239: board has no eeprom [ 3107.307118][T26944] em28xx 3-1:0.239: Identified as Kworld 355 U DVB-T (card=42) [ 3107.318127][T26944] em28xx 3-1:0.239: [ 3107.318127][T26944] [ 3107.318127][T26944] The support for this board weren't valid yet. [ 3107.318127][T26944] Please send a report of having this working [ 3107.318127][T26944] not to V4L mailing list (and/or to other addresses) [ 3107.318127][T26944] [ 3107.380443][T26944] em28xx 3-1:0.239: Currently, V4L2 is not supported on this model [ 3107.389970][ T653] em28xx 3-1:0.239: Binding DVB extension [ 3108.393570][ T8346] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 3108.639952][ T8346] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 3108.647207][ T653] em28xx 3-1:0.239: no endpoint for DVB mode and transfer type 0 [ 3108.664355][ T653] em28xx 3-1:0.239: failed to pre-allocate USB transfer buffers for DVB. [ 3109.030730][ T7163] Bluetooth: hci3: command 0x0406 tx timeout [ 3109.055859][ T8346] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 3109.063497][ T8346] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 3109.070340][ T653] em28xx 3-1:0.239: Remote control support is not available for this card. [ 3109.232970][ T8346] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 3109.234363][ T8389] netlink: 202684 bytes leftover after parsing attributes in process `syz.5.8439'. [ 3109.264653][ T8346] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 3109.335671][ T8346] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 3109.343421][ T8346] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 3109.351280][ T8346] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 3109.357335][ T8346] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 3109.395719][T26944] usb 3-1: USB disconnect, device number 79 [ 3109.403961][T26944] em28xx 3-1:0.239: Disconnecting em28xx [ 3109.449413][T26944] em28xx 3-1:0.239: Closing input extension [ 3109.484805][T26944] em28xx 3-1:0.239: Freeing device [ 3109.607033][ T653] usb 10-1: new high-speed USB device number 101 using dummy_hcd [ 3109.826954][ T653] usb 10-1: Using ep0 maxpacket: 32 [ 3109.843834][ T653] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 3109.855268][ T653] usb 10-1: can't read configurations, error -61 [ 3110.195744][ T653] usb 10-1: new high-speed USB device number 102 using dummy_hcd [ 3110.979799][ T8412] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8446'. [ 3110.991056][ T8412] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8446'. [ 3111.080392][ T7163] Bluetooth: hci0: command 0x0406 tx timeout [ 3111.087138][ T7163] Bluetooth: hci3: command 0x0406 tx timeout [ 3111.300730][ T7162] Bluetooth: hci5: command 0x0406 tx timeout [ 3111.516700][ T7162] Bluetooth: hci1: command 0x0405 tx timeout [ 3111.527280][ T7162] Bluetooth: hci6: command 0x0406 tx timeout [ 3113.102771][ T8438] netlink: 202684 bytes leftover after parsing attributes in process `syz.9.8454'. [ 3113.144097][ T7163] Bluetooth: hci0: command 0x0406 tx timeout [ 3113.378157][ T7163] Bluetooth: hci5: command 0x0406 tx timeout [ 3113.387396][ T8440] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3113.502842][ T8440] netlink: 'syz.5.8455': attribute type 1 has an invalid length. [ 3113.584171][ T8440] netlink: 9392 bytes leftover after parsing attributes in process `syz.5.8455'. [ 3113.617288][ T7163] Bluetooth: hci6: command 0x0406 tx timeout [ 3113.617301][ T7162] Bluetooth: hci1: command 0x0405 tx timeout [ 3114.016933][ T7264] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 3114.167498][ T7264] usb 3-1: Using ep0 maxpacket: 32 [ 3114.175062][ T7264] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 3114.187870][ T7264] usb 3-1: can't read configurations, error -61 [ 3114.215750][ T8469] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3114.337050][ T7264] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 3115.192348][ T7264] usb 3-1: Using ep0 maxpacket: 32 [ 3115.200782][ T7264] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 3115.234439][ T7264] usb 3-1: can't read configurations, error -61 [ 3115.241761][ T7264] usb usb3-port1: attempt power cycle [ 3115.587420][ T7264] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 3115.663447][ T7264] usb 3-1: Using ep0 maxpacket: 32 [ 3115.893540][ T7264] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 3116.181376][ T7264] usb 3-1: can't read configurations, error -61 [ 3116.316953][ T7264] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 3116.337477][ T7264] usb 3-1: Using ep0 maxpacket: 32 [ 3116.344552][ T7264] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 3116.352625][ T7264] usb 3-1: can't read configurations, error -61 [ 3116.367212][ T7264] usb usb3-port1: unable to enumerate USB device [ 3116.477155][ T653] usb 10-1: new high-speed USB device number 103 using dummy_hcd [ 3116.627161][ T653] usb 10-1: Using ep0 maxpacket: 16 [ 3117.627121][ T653] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 3117.665302][ T653] usb 10-1: can't read configurations, error -61 [ 3117.875134][ T653] usb 10-1: new high-speed USB device number 104 using dummy_hcd [ 3118.256849][ T653] usb 10-1: Using ep0 maxpacket: 16 [ 3118.269603][ T653] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 3118.278734][ T653] usb 10-1: can't read configurations, error -61 [ 3118.287454][ T653] usb usb10-port1: attempt power cycle [ 3118.747472][ T653] usb 10-1: new high-speed USB device number 105 using dummy_hcd [ 3118.867474][ T653] usb 10-1: Using ep0 maxpacket: 16 [ 3118.874802][ T653] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 3118.917041][ T653] usb 10-1: can't read configurations, error -61 [ 3119.058197][ T653] usb 10-1: new high-speed USB device number 106 using dummy_hcd [ 3119.107464][ T653] usb 10-1: Using ep0 maxpacket: 16 [ 3119.189427][ T653] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 3119.216906][ T653] usb 10-1: can't read configurations, error -71 [ 3119.253616][ T653] usb usb10-port1: unable to enumerate USB device [ 3120.953708][ T8532] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3121.014656][ T8537] netlink: 'syz.2.8480': attribute type 1 has an invalid length. [ 3121.072917][ T8537] netlink: 9392 bytes leftover after parsing attributes in process `syz.2.8480'. [ 3121.511659][ T653] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 3121.560922][ T8551] FAULT_INJECTION: forcing a failure. [ 3121.560922][ T8551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3121.604287][ T8551] CPU: 0 UID: 0 PID: 8551 Comm: syz.5.8485 Not tainted 6.12.0-rc5-syzkaller-00181-g6c52d4da1c74 #0 [ 3121.614990][ T8551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 3121.625048][ T8551] Call Trace: [ 3121.628317][ T8551] [ 3121.631243][ T8551] dump_stack_lvl+0x241/0x360 [ 3121.635912][ T8551] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3121.641094][ T8551] ? __pfx__printk+0x10/0x10 [ 3121.645672][ T8551] ? __snd_timer_user_ioctl+0xd06/0x5330 [ 3121.651309][ T8551] should_fail_ex+0x3b0/0x4e0 [ 3121.655979][ T8551] _copy_to_user+0x31/0xb0 [ 3121.660385][ T8551] __snd_timer_user_ioctl+0x2cb1/0x5330 [ 3121.665927][ T8551] ? __pfx___snd_timer_user_ioctl+0x10/0x10 [ 3121.671812][ T8551] ? __mutex_trylock_common+0x183/0x2e0 [ 3121.677345][ T8551] ? __pfx___might_resched+0x10/0x10 [ 3121.682619][ T8551] ? __pfx___mutex_trylock_common+0x10/0x10 [ 3121.688503][ T8551] ? smk_access+0x4ab/0x4e0 [ 3121.692991][ T8551] ? rcu_is_watching+0x15/0xb0 [ 3121.697739][ T8551] ? trace_contention_end+0x3c/0x120 [ 3121.703009][ T8551] ? __mutex_lock+0x2ef/0xd70 [ 3121.707671][ T8551] ? smack_file_ioctl+0x2f7/0x3a0 [ 3121.712682][ T8551] ? snd_timer_user_ioctl+0x4f/0x90 [ 3121.717864][ T8551] ? __pfx_smack_file_ioctl+0x10/0x10 [ 3121.723219][ T8551] ? __pfx___mutex_lock+0x10/0x10 [ 3121.728231][ T8551] ? __fget_files+0x3f3/0x470 [ 3121.732903][ T8551] snd_timer_user_ioctl+0x5f/0x90 [ 3121.737919][ T8551] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 3121.743622][ T8551] __se_sys_ioctl+0xf9/0x170 [ 3121.748201][ T8551] do_syscall_64+0xf3/0x230 [ 3121.752691][ T8551] ? clear_bhb_loop+0x35/0x90 [ 3121.757352][ T8551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3121.763228][ T8551] RIP: 0033:0x7fc25317e719 [ 3121.767643][ T8551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3121.787233][ T8551] RSP: 002b:00007fc253f86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3121.795630][ T8551] RAX: ffffffffffffffda RBX: 00007fc253335f80 RCX: 00007fc25317e719 [ 3121.803588][ T8551] RDX: 00000000200001c0 RSI: 00000000c0145401 RDI: 0000000000000003 [ 3121.811541][ T8551] RBP: 00007fc253f86090 R08: 0000000000000000 R09: 0000000000000000 [ 3121.819499][ T8551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3121.827450][ T8551] R13: 0000000000000000 R14: 00007fc253335f80 R15: 00007ffff258bd78 [ 3121.835432][ T8551] [ 3121.937683][T31166] usb 10-1: new high-speed USB device number 107 using dummy_hcd [ 3122.156887][T31166] usb 10-1: Using ep0 maxpacket: 32 [ 3122.166140][T31166] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 3122.177266][T31166] usb 10-1: can't read configurations, error -61 [ 3122.358936][ T653] usb 3-1: device descriptor read/64, error -71 [ 3122.416902][T31166] usb 10-1: new high-speed USB device number 108 using dummy_hcd [ 3122.658878][T31166] usb 10-1: Using ep0 maxpacket: 32 [ 3122.717212][ T653] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 3122.737761][T31166] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 3123.127446][T31166] usb 10-1: can't read configurations, error -61 [ 3123.165375][T31166] usb usb10-port1: attempt power cycle [ 3123.182838][ T8562] netlink: 'syz.5.8489': attribute type 4 has an invalid length. [ 3123.256882][ T653] usb 3-1: device descriptor read/64, error -71 [ 3124.086222][ T653] usb usb3-port1: attempt power cycle [ 3124.136954][T31166] usb 10-1: new high-speed USB device number 109 using dummy_hcd [ 3124.356837][T31166] usb 10-1: device not accepting address 109, error -71 [ 3125.362057][ T7163] Bluetooth: hci1: unexpected event for opcode 0x2036 [ 3127.007063][T13804] usb 10-1: new high-speed USB device number 111 using dummy_hcd [ 3127.166972][T13804] usb 10-1: Using ep0 maxpacket: 8 [ 3127.188059][T13804] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 3127.208358][T13804] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 3127.248058][T13804] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 3127.296982][T13804] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3127.352430][T13804] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 3127.378601][T13804] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3127.559370][ T8599] netlink: 'syz.2.8501': attribute type 1 has an invalid length. [ 3127.590466][ T8599] netlink: 9392 bytes leftover after parsing attributes in process `syz.2.8501'. [ 3127.706689][T13804] usb 10-1: GET_CAPABILITIES returned 0 [ 3127.756954][T13804] usbtmc 10-1:16.0: can't read capabilities [ 3127.926954][ T7264] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 3127.930812][T31166] usb 10-1: USB disconnect, device number 111 [ 3128.056966][ T7264] usb 3-1: device descriptor read/64, error -71 [ 3128.306860][ T7264] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 3128.427392][T13804] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 3128.436869][ T7264] usb 3-1: device descriptor read/64, error -71 [ 3128.547097][ T7264] usb usb3-port1: attempt power cycle [ 3128.562792][ T8607] pim6reg: entered allmulticast mode [ 3128.568217][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 3128.568231][ T29] audit: type=1804 audit(1730534028.334:2209): pid=8606 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.9.8504" name="/newroot/90/file1" dev="fuse" ino=1 res=1 errno=0 [ 3128.597132][ T29] audit: type=1800 audit(1730534028.334:2210): pid=8606 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.9.8504" name="/" dev="fuse" ino=1 res=0 errno=0 [ 3128.600707][ T8607] pim6reg: left allmulticast mode [ 3128.616553][ T29] audit: type=1804 audit(1730534028.344:2211): pid=8606 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.9.8504" name="/newroot/90/file1" dev="fuse" ino=1 res=1 errno=0 [ 3128.641491][ T29] audit: type=1804 audit(1730534028.344:2212): pid=8606 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.9.8504" name="/newroot/90/file1" dev="fuse" ino=1 res=1 errno=0 [ 3128.661724][ T29] audit: type=1800 audit(1730534028.344:2213): pid=8606 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.9.8504" name="/" dev="fuse" ino=1 res=0 errno=0 [ 3128.685671][T13804] usb 4-1: Using ep0 maxpacket: 32 [ 3128.693085][T13804] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 3128.701957][T13804] usb 4-1: can't read configurations, error -61 [ 3128.759382][ T8612] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 3128.836921][T13804] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 3128.997021][T13804] usb 4-1: Using ep0 maxpacket: 32 [ 3129.007512][T13804] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 3129.015103][T13804] usb 4-1: can't read configurations, error -61 [ 3129.021529][ T7264] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 3129.448187][ T7163] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 3129.457710][ T7163] Bluetooth: hci1: Injecting HCI hardware error event [ 3129.473938][ T7163] Bluetooth: hci1: hardware error 0x00 [ 3129.687762][T13804] usb usb4-port1: attempt power cycle [ 3129.717263][ T7264] usb 3-1: device descriptor read/8, error -71 [ 3129.956891][ T7264] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 3130.001302][ T7264] usb 3-1: device descriptor read/8, error -71 [ 3130.033483][T13804] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 3130.058027][T13804] usb 4-1: Using ep0 maxpacket: 32 [ 3130.066052][T13804] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 3130.073979][T13804] usb 4-1: can't read configurations, error -61 [ 3130.117272][ T7264] usb usb3-port1: unable to enumerate USB device [ 3131.207151][T13804] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 3131.237196][T13804] usb 4-1: device descriptor read/8, error -71 [ 3131.245995][ T8599] overlayfs: invalid origin (000000790065762f696f6d6d75000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 3131.354407][T13804] usb usb4-port1: unable to enumerate USB device [ 3131.538373][ T7163] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 3131.689027][ T8630] input: syz0 as /devices/virtual/input/input221 [ 3132.278416][ T8633] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x16 (0x33424752, 8, 0, 0, 0) [ 3132.604122][ T8635] netlink: 'syz.9.8514': attribute type 4 has an invalid length. [ 3132.614209][ T8642] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8515'. [ 3133.685497][ T8648] tipc: Started in network mode [ 3133.718785][ T8648] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 3133.729761][ T8648] tipc: Enabled bearer , priority 10 [ 3133.741575][ T8650] mac80211_hwsim hwsim121 wlan1: entered promiscuous mode [ 3133.749201][ T8650] macvtap1: entered promiscuous mode [ 3133.773375][ T8650] mac80211_hwsim hwsim121 wlan1: left promiscuous mode [ 3133.956871][T13804] usb 10-1: new high-speed USB device number 112 using dummy_hcd [ 3134.116372][T13804] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 3134.135098][T13804] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 3134.150231][T13804] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 3134.173420][T13804] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3134.201924][T13804] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3134.212520][T13804] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3134.223513][T13804] usb 10-1: config 0 descriptor?? [ 3134.232327][ T8652] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 3134.328250][ T7264] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 3134.496302][ T7264] usb 3-1: Using ep0 maxpacket: 32 [ 3134.511125][ T7264] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 3134.519016][ T7264] usb 3-1: can't read configurations, error -61 [ 3134.657353][ T7264] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 3134.673307][T13804] plantronics 0003:047F:FFFF.0035: unknown main item tag 0xd [ 3134.695005][T13804] plantronics 0003:047F:FFFF.0035: No inputs registered, leaving [ 3134.721710][T13804] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 3134.826876][ T7264] usb 3-1: Using ep0 maxpacket: 32 [ 3134.834511][ T7264] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 3134.852967][ T7264] usb 3-1: can't read configurations, error -61 [ 3134.859687][T13804] tipc: Node number set to 10136234 [ 3134.893165][ T7264] usb usb3-port1: attempt power cycle [ 3135.180331][T13804] usb 10-1: USB disconnect, device number 112 [ 3135.246948][ T7264] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 3135.277572][ T7264] usb 3-1: Using ep0 maxpacket: 32 [ 3135.292493][ T7264] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 3135.307745][ T7264] usb 3-1: can't read configurations, error -61 [ 3135.459687][ T7264] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 3135.527546][ T7264] usb 3-1: Using ep0 maxpacket: 32 [ 3135.534779][ T7264] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 3135.554486][ T7264] usb 3-1: can't read configurations, error -61 [ 3135.579747][ T7264] usb usb3-port1: unable to enumerate USB device [ 3136.115762][ T8672] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 3136.515518][ T8684] netlink: 'syz.3.8528': attribute type 4 has an invalid length. [ 3136.717631][ T7162] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3136.776880][ T7162] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3136.791478][ T7162] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3136.804787][ T7162] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3136.817328][ T7162] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3136.824613][ T7162] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3136.877607][ T8693] FAULT_INJECTION: forcing a failure. [ 3136.877607][ T8693] name failslab, interval 1, probability 0, space 0, times 0 [ 3136.944516][ T8693] CPU: 0 UID: 0 PID: 8693 Comm: syz.3.8530 Not tainted 6.12.0-rc5-syzkaller-00181-g6c52d4da1c74 #0 [ 3136.955267][ T8693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 3136.965335][ T8693] Call Trace: [ 3136.968626][ T8693] [ 3136.971568][ T8693] dump_stack_lvl+0x241/0x360 [ 3136.976278][ T8693] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3136.981498][ T8693] ? __pfx__printk+0x10/0x10 [ 3136.986103][ T8693] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 3136.991683][ T8693] ? __pfx___might_resched+0x10/0x10 [ 3136.996998][ T8693] should_fail_ex+0x3b0/0x4e0 [ 3137.001700][ T8693] ? getname_flags+0xb7/0x540 [ 3137.006395][ T8693] should_failslab+0xac/0x100 [ 3137.011101][ T8693] ? getname_flags+0xb7/0x540 [ 3137.015794][ T8693] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 3137.021194][ T8693] getname_flags+0xb7/0x540 [ 3137.025719][ T8693] user_path_at+0x24/0x60 [ 3137.030066][ T8693] __se_sys_mount+0x297/0x3c0 [ 3137.034777][ T8693] ? __pfx___se_sys_mount+0x10/0x10 [ 3137.040001][ T8693] ? do_syscall_64+0x100/0x230 [ 3137.044791][ T8693] ? __x64_sys_mount+0x20/0xc0 [ 3137.049584][ T8693] do_syscall_64+0xf3/0x230 [ 3137.054104][ T8693] ? clear_bhb_loop+0x35/0x90 [ 3137.058806][ T8693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3137.064713][ T8693] RIP: 0033:0x7fbaf7d7e719 [ 3137.069141][ T8693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3137.088763][ T8693] RSP: 002b:00007fbaf8b4c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3137.097199][ T8693] RAX: ffffffffffffffda RBX: 00007fbaf7f35f80 RCX: 00007fbaf7d7e719 [ 3137.105185][ T8693] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 0000000000000000 [ 3137.113172][ T8693] RBP: 00007fbaf8b4c090 R08: 0000000020000900 R09: 0000000000000000 [ 3137.121166][ T8693] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3137.129156][ T8693] R13: 0000000000000000 R14: 00007fbaf7f35f80 R15: 00007fffff569688 [ 3137.137161][ T8693] [ 3138.182701][ T8686] chnl_net:caif_netlink_parms(): no params data found [ 3138.455764][ T8708] 9pnet_fd: Insufficient options for proto=fd [ 3138.576429][ T8686] bridge0: port 1(bridge_slave_0) entered blocking state [ 3138.610726][ T8686] bridge0: port 1(bridge_slave_0) entered disabled state [ 3138.636983][ T8686] bridge_slave_0: entered allmulticast mode [ 3138.643965][ T8686] bridge_slave_0: entered promiscuous mode [ 3138.665626][ T8686] bridge0: port 2(bridge_slave_1) entered blocking state [ 3138.684375][ T8686] bridge0: port 2(bridge_slave_1) entered disabled state [ 3138.698255][ T8686] bridge_slave_1: entered allmulticast mode [ 3138.709888][ T8686] bridge_slave_1: entered promiscuous mode [ 3138.863448][ T8686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3138.897126][ T7163] Bluetooth: hci2: command tx timeout [ 3138.921242][ T8686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3138.982434][ T8686] team0: Port device team_slave_0 added [ 3139.027840][ T8686] team0: Port device team_slave_1 added [ 3139.129111][ T8686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3139.146342][ T8686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3139.218582][ T8686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3139.278286][ T8686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3139.300798][ T8686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3139.356857][ T8686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3139.499465][ T8686] hsr_slave_0: entered promiscuous mode [ 3139.522022][ T8686] hsr_slave_1: entered promiscuous mode [ 3139.800059][ T29] audit: type=1326 audit(1730534295.588:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8724 comm="syz.9.8538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5077e719 code=0x7ffc0000 [ 3139.851336][ T29] audit: type=1326 audit(1730534295.618:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8724 comm="syz.9.8538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5077e719 code=0x7ffc0000 [ 3139.914433][ T29] audit: type=1326 audit(1730534295.618:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8724 comm="syz.9.8538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f5e5077e719 code=0x7ffc0000 [ 3139.985478][ T29] audit: type=1326 audit(1730534295.698:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8724 comm="syz.9.8538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5077e719 code=0x7ffc0000 [ 3140.046955][ T29] audit: type=1326 audit(1730534295.698:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8724 comm="syz.9.8538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5077e719 code=0x7ffc0000 [ 3140.097598][ T29] audit: type=1326 audit(1730534295.728:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8726 comm="syz.9.8538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5e507b0805 code=0x7ffc0000 [ 3140.168483][ T29] audit: type=1326 audit(1730534295.758:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8724 comm="syz.9.8538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5e5077e719 code=0x7ffc0000 [ 3140.225187][ T8728] netlink: 'syz.9.8539': attribute type 4 has an invalid length. [ 3140.231094][ T29] audit: type=1326 audit(1730534295.758:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8724 comm="syz.9.8538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5077e719 code=0x7ffc0000 [ 3140.297384][ T29] audit: type=1326 audit(1730534295.758:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8724 comm="syz.9.8538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e5077e719 code=0x7ffc0000 [ 3140.355072][ T29] audit: type=1326 audit(1730534295.768:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8724 comm="syz.9.8538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5e5077e719 code=0x7ffc0000 [ 3140.462633][ T8686] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3140.515902][ T8686] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3140.738336][ T7162] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 3140.748054][ T7162] Bluetooth: hci0: command 0x0406 tx timeout [ 3140.797043][T26944] usb 10-1: new high-speed USB device number 113 using dummy_hcd [ 3140.835147][ T8686] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3140.948859][ T8686] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3140.981308][ T7162] Bluetooth: hci2: command tx timeout [ 3140.991713][T26944] usb 10-1: Using ep0 maxpacket: 32 [ 3141.030676][T26944] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 3141.155255][T26944] usb 10-1: can't read configurations, error -61 [ 3141.292160][ T8686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3141.315570][ T8686] 8021q: adding VLAN 0 to HW filter on device team0 [ 3141.327105][T26944] usb 10-1: new high-speed USB device number 114 using dummy_hcd [ 3141.327939][ T2989] bridge0: port 1(bridge_slave_0) entered blocking state [ 3141.342003][ T2989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3141.373165][ T2989] bridge0: port 2(bridge_slave_1) entered blocking state [ 3141.380362][ T2989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3141.410607][ T8686] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3141.421527][ T8686] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3141.491274][T26944] usb 10-1: Using ep0 maxpacket: 32 [ 3141.519635][T26944] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 3141.527741][T26944] usb 10-1: can't read configurations, error -61 [ 3141.547662][T26944] usb usb10-port1: attempt power cycle [ 3141.620637][ T8686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3141.664765][ T8686] veth0_vlan: entered promiscuous mode [ 3141.679127][ T8686] veth1_vlan: entered promiscuous mode [ 3141.771437][ T8686] veth0_macvtap: entered promiscuous mode [ 3141.789602][ T8686] veth1_macvtap: entered promiscuous mode [ 3141.810957][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3141.821706][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3141.832834][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3141.843580][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3141.869381][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3141.880086][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3141.890764][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3141.901396][T26944] usb 10-1: new high-speed USB device number 115 using dummy_hcd [ 3141.910384][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3141.921414][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3141.932812][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3141.943981][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3141.956064][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3141.966206][T26944] usb 10-1: Using ep0 maxpacket: 32 [ 3141.975632][T26944] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 3141.993260][T26944] usb 10-1: can't read configurations, error -61 [ 3142.000945][ T8686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3142.013575][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3142.025115][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3142.035463][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3142.046057][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3142.056174][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3142.075486][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3142.086115][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3142.105766][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3142.117502][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3142.129133][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3142.139099][T26944] usb 10-1: new high-speed USB device number 116 using dummy_hcd [ 3142.147069][ T8686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3142.163844][ T8686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3142.177835][T26944] usb 10-1: Using ep0 maxpacket: 32 [ 3142.188092][T26944] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 3142.206303][T26944] usb 10-1: can't read configurations, error -61 [ 3142.217495][ T8686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3142.225595][T26944] usb usb10-port1: unable to enumerate USB device [ 3142.239326][ T8686] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3142.256535][ T8686] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3142.282823][ T8686] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3142.292878][ T8686] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3142.618350][ T3875] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3142.642585][ T3875] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3142.646488][T31995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3143.188895][ T7162] Bluetooth: hci2: command tx timeout [ 3143.717408][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 3143.725534][T31995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3144.266428][ T8770] netlink: 'syz.9.8550': attribute type 4 has an invalid length. [ 3144.469069][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8553'. [ 3145.236990][ T7162] Bluetooth: hci2: command tx timeout [ 3146.468158][ T8799] input: syz0 as /devices/virtual/input/input223 [ 3148.776226][ T7162] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 3150.521170][ T8826] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8564'. [ 3151.663524][ T8841] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x16 (0x33424752, 8, 0, 0, 0) [ 3151.707132][ T2989] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3152.493990][ T2989] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3152.716417][ T2989] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3152.739454][ T8851] FAULT_INJECTION: forcing a failure. [ 3152.739454][ T8851] name failslab, interval 1, probability 0, space 0, times 0 [ 3152.786470][ T8851] CPU: 1 UID: 0 PID: 8851 Comm: syz.2.8571 Not tainted 6.12.0-rc5-syzkaller-00181-g6c52d4da1c74 #0 [ 3152.797183][ T8851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 3152.807256][ T8851] Call Trace: [ 3152.810547][ T8851] [ 3152.813488][ T8851] dump_stack_lvl+0x241/0x360 [ 3152.818194][ T8851] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3152.823413][ T8851] ? __pfx__printk+0x10/0x10 [ 3152.828026][ T8851] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 3152.833513][ T8851] ? __pfx___might_resched+0x10/0x10 [ 3152.838828][ T8851] should_fail_ex+0x3b0/0x4e0 [ 3152.843529][ T8851] should_failslab+0xac/0x100 [ 3152.848230][ T8851] ? do_inotify_init+0xae/0x490 [ 3152.853129][ T8851] __kmalloc_cache_noprof+0x6c/0x2c0 [ 3152.858452][ T8851] do_inotify_init+0xae/0x490 [ 3152.863168][ T8851] __x64_sys_inotify_init1+0x37/0x40 [ 3152.868481][ T8851] do_syscall_64+0xf3/0x230 [ 3152.873006][ T8851] ? clear_bhb_loop+0x35/0x90 [ 3152.877701][ T8851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3152.883616][ T8851] RIP: 0033:0x7f7d8a77e719 [ 3152.888050][ T8851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3152.907681][ T8851] RSP: 002b:00007f7d8b633038 EFLAGS: 00000246 ORIG_RAX: 0000000000000126 [ 3152.916116][ T8851] RAX: ffffffffffffffda RBX: 00007f7d8a935f80 RCX: 00007f7d8a77e719 [ 3152.924108][ T8851] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 3152.932100][ T8851] RBP: 00007f7d8b633090 R08: 0000000000000000 R09: 0000000000000000 [ 3152.940089][ T8851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3152.948082][ T8851] R13: 0000000000000000 R14: 00007f7d8a935f80 R15: 00007ffd17a64708 [ 3152.956093][ T8851] [ 3153.175623][ T2989] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 3153.209179][ T2989] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3153.429374][ T8848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3153.457045][ T2989] bridge_slave_1: left allmulticast mode [ 3153.466824][ T2989] bridge_slave_1: left promiscuous mode [ 3153.472562][ T2989] bridge0: port 2(bridge_slave_1) entered disabled state [ 3153.525627][ T2989] bridge_slave_0: left allmulticast mode [ 3153.531384][ T2989] bridge_slave_0: left promiscuous mode [ 3153.537524][ T2989] bridge0: port 1(bridge_slave_0) entered disabled state [ 3153.606950][ T653] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 3154.989943][ T653] usb 3-1: Using ep0 maxpacket: 32 [ 3156.204261][ T653] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3156.245185][ T653] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 3156.254310][ T653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3156.262363][ T653] usb 3-1: Product: syz [ 3156.266543][ T653] usb 3-1: Manufacturer: syz [ 3156.271191][ T653] usb 3-1: SerialNumber: syz [ 3156.278341][ T653] usb 3-1: config 0 descriptor?? [ 3156.287674][ T653] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 3156.297960][ T7288] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 3156.396825][ T653] gspca_sunplus: reg_r err -71 [ 3156.466905][ T7288] usb 2-1: device descriptor read/64, error -71 [ 3156.757104][ T7212] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 3157.040159][ T7288] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 3157.247059][ T7288] usb 2-1: device descriptor read/64, error -71 [ 3157.398037][ T7288] usb usb2-port1: attempt power cycle [ 3157.527094][ T7212] usb 4-1: device descriptor read/64, error -71 [ 3157.574447][ T2989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3157.586509][ T2989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3157.598133][ T2989] bond0 (unregistering): Released all slaves [ 3157.613266][ T8879] netlink: 'syz.9.8577': attribute type 4 has an invalid length. [ 3157.759411][ T7288] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 3157.799732][ T7288] usb 2-1: device descriptor read/8, error -71 [ 3157.950302][ T7212] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 3157.977697][ T8894] netlink: 256 bytes leftover after parsing attributes in process `syz.9.8582'. [ 3157.991603][ T8894] netlink: 24 bytes leftover after parsing attributes in process `syz.9.8582'. [ 3158.086916][ T7288] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 3158.097089][ T7212] usb 4-1: device descriptor read/64, error -71 [ 3158.167519][ T7288] usb 2-1: device descriptor read/8, error -71 [ 3158.211432][ T7212] usb usb4-port1: attempt power cycle [ 3158.220495][ T8900] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x16 (0x33424752, 8, 0, 0, 0) [ 3158.294465][ T7288] usb usb2-port1: unable to enumerate USB device [ 3158.327019][ T653] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 3158.336667][ T653] usb 3-1: USB disconnect, device number 95 [ 3158.382842][ T2989] hsr_slave_0: left promiscuous mode [ 3158.399110][ T2989] hsr_slave_1: left promiscuous mode [ 3158.410355][ T2989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3158.431639][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3158.450251][ T2989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3158.466876][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3158.517421][ T2989] veth1_macvtap: left promiscuous mode [ 3158.526084][ T2989] veth0_macvtap: left promiscuous mode [ 3158.543385][ T2989] veth1_vlan: left promiscuous mode [ 3158.548981][ T2989] veth0_vlan: left promiscuous mode [ 3158.556994][ T7212] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 3158.587441][ T7212] usb 4-1: device descriptor read/8, error -71 [ 3158.847002][ T7212] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 3158.887764][ T7212] usb 4-1: device descriptor read/8, error -71 [ 3159.008110][ T7212] usb usb4-port1: unable to enumerate USB device [ 3160.815226][ T8924] input: syz0 as /devices/virtual/input/input224 [ 3160.913778][T31990] Bluetooth: hci4: Frame reassembly failed (-84) [ 3161.009215][ T6349] Bluetooth: hci4: Frame reassembly failed (-84) [ 3161.713920][ T2989] team0 (unregistering): Port device team_slave_1 removed [ 3161.782068][ T2989] team0 (unregistering): Port device team_slave_0 removed [ 3162.055345][ T8928] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8590'. [ 3162.295000][ T2989] lo (unregistering): left allmulticast mode [ 3162.303662][ T8909] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 3162.311322][ T8910] lo: entered allmulticast mode [ 3162.316648][ T8917] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 3162.325690][ T8917] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 3162.492225][ T8934] netlink: 'syz.3.8592': attribute type 4 has an invalid length. [ 3162.608095][ T8939] netlink: 202684 bytes leftover after parsing attributes in process `syz.9.8593'. [ 3162.830599][ T8943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8594'. [ 3162.906929][ T7162] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 3163.518002][ T653] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 3163.596365][ T8942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3164.086830][ T653] usb 3-1: Using ep0 maxpacket: 8 [ 3164.175790][ T653] usb 3-1: config 4 has an invalid interface number: 231 but max is 0 [ 3164.184532][ T653] usb 3-1: config 4 has no interface number 0 [ 3164.268057][ T653] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 3164.308143][ T653] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3164.332806][ T653] usb 3-1: Product: syz [ 3164.343706][ T653] usb 3-1: Manufacturer: syz [ 3164.354431][ T653] usb 3-1: SerialNumber: syz [ 3164.404875][ T653] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 3164.413007][ T8963] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x16 (0x33424752, 8, 0, 0, 0) [ 3164.592360][ T653] vp7045: USB control message 'out' went wrong. [ 3164.604222][ T653] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 3164.615465][ T653] dvbdev: DVB: registering new adapter (DigitalNow TinyUSB 2 DVB-t Receiver) [ 3164.643338][ T653] usb 3-1: media controller created [ 3164.660640][ T653] vp7045: USB control message 'out' went wrong. [ 3164.681594][ T653] dvb-usb: MAC address reading failed. [ 3164.753862][ T653] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 3164.820891][ T653] vp7045: USB control message 'out' went wrong. [ 3164.845965][ T653] vp7045: USB control message 'out' went wrong. [ 3164.902594][ T653] vp7045: USB control message 'out' went wrong. [ 3164.910096][ T653] usb 3-1: DVB: registering adapter 1 frontend 0 (Twinhan VP7045/46 USB DVB-T)... [ 3164.933124][ T653] dvbdev: dvb_create_media_entity: media entity 'Twinhan VP7045/46 USB DVB-T' registered. [ 3165.197662][ T653] rc_core: IR keymap rc-twinhan1027 not found [ 3165.203780][ T653] Registered IR keymap rc-empty [ 3165.247634][ T653] rc rc0: DigitalNow TinyUSB 2 DVB-t Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 3165.312570][ T653] input: DigitalNow TinyUSB 2 DVB-t Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input225 [ 3165.331203][ T653] dvb-usb: schedule remote query interval to 400 msecs. [ 3165.339391][ T653] vp7045: USB control message 'out' went wrong. [ 3165.345660][ T653] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver successfully initialized and connected. [ 3165.395742][ T653] usb 3-1: USB disconnect, device number 96 [ 3165.586470][ T653] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver successfully deinitialized and disconnected. [ 3165.901739][ T8980] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 3166.505530][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 3166.505548][ T29] audit: type=1326 audit(1730534578.285:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8984 comm="syz.5.8605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25317e719 code=0x7ffc0000 [ 3166.533834][ T29] audit: type=1326 audit(1730534578.305:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8984 comm="syz.5.8605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7fc25317e719 code=0x7ffc0000 [ 3166.556486][ T29] audit: type=1326 audit(1730534578.305:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8984 comm="syz.5.8605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25317e719 code=0x7ffc0000 [ 3166.622220][ T8994] syz.1.8606: attempt to access beyond end of device [ 3166.622220][ T8994] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 3166.857749][ T29] audit: type=1326 audit(1730534578.305:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8984 comm="syz.5.8605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25317e719 code=0x7ffc0000 [ 3167.020654][ T29] audit: type=1326 audit(1730534578.305:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8984 comm="syz.5.8605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fc25317e719 code=0x7ffc0000 [ 3167.539190][ T29] audit: type=1326 audit(1730534578.305:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8984 comm="syz.5.8605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25317e719 code=0x7ffc0000 [ 3167.561164][ T29] audit: type=1326 audit(1730534578.305:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8984 comm="syz.5.8605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fc25317e719 code=0x7ffc0000 [ 3167.583037][ T29] audit: type=1326 audit(1730534578.305:2250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8984 comm="syz.5.8605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25317e719 code=0x7ffc0000 [ 3167.604745][ T29] audit: type=1326 audit(1730534578.305:2251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8984 comm="syz.5.8605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fc25317e719 code=0x7ffc0000 [ 3167.627092][ T29] audit: type=1326 audit(1730534578.475:2252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8984 comm="syz.5.8605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc25317e719 code=0x7ffc0000 [ 3168.887955][ T653] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 3169.110645][ T653] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3169.311098][ T653] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3169.321419][ T653] usb 2-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 3169.330666][ T653] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3169.341199][ T653] usb 2-1: config 0 descriptor?? [ 3170.114218][ T653] lenovo 0003:17EF:6062.0036: unknown main item tag 0x4 [ 3170.144272][ T653] lenovo 0003:17EF:6062.0036: unknown main item tag 0x2 [ 3170.172004][ T653] lenovo 0003:17EF:6062.0036: hidraw0: USB HID v0.00 Device [HID 17ef:6062] on usb-dummy_hcd.1-1/input0 [ 3170.805415][ T9025] netlink: 202684 bytes leftover after parsing attributes in process `syz.5.8613'. [ 3172.238065][ T8991] netlink: 'syz.9.8604': attribute type 4 has an invalid length. [ 3172.379714][ T653] usb 2-1: USB disconnect, device number 79 [ 3172.516873][T29166] bridge_slave_1: left allmulticast mode [ 3172.536929][T29166] bridge_slave_1: left promiscuous mode [ 3172.542639][T29166] bridge0: port 2(bridge_slave_1) entered disabled state [ 3172.587411][T29166] €Â: left allmulticast mode [ 3172.603401][T29166] €Â: left promiscuous mode [ 3172.623208][T29166] bridge0: port 1(€Â) entered disabled state [ 3172.796941][ T7264] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 3172.804946][ T9037] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x16 (0x33424752, 8, 0, 0, 0) [ 3172.992970][ T7264] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3173.033785][ T7264] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3173.095099][ T7264] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 3173.130333][ T7264] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3173.206254][ T7264] usb 3-1: config 0 descriptor?? [ 3173.634578][ T7264] sony 0003:054C:024B.0037: unexpected long global item [ 3173.652780][ T7264] sony 0003:054C:024B.0037: parse failed [ 3173.663388][ T7264] sony 0003:054C:024B.0037: probe with driver sony failed with error -22 [ 3173.846889][ T7264] usb 3-1: USB disconnect, device number 97 [ 3174.153909][T29166] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3174.166476][T29166] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3174.207559][T29166] bond0 (unregistering): Released all slaves [ 3174.984118][ T9049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8619'. [ 3175.095292][ T9049] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8619'. [ 3175.245630][T29166] hsr_slave_0: left promiscuous mode [ 3175.369168][T29166] hsr_slave_1: left promiscuous mode [ 3175.405162][T29166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3175.555449][T29166] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3175.583933][T29166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3175.614735][T29166] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3175.625664][T29166] batman_adv: batadv0: Removing interface: ipvlan1 [ 3175.870685][ T9070] input: syz0 as /devices/virtual/input/input226 [ 3175.965667][T29166] veth1_macvtap: left promiscuous mode [ 3176.012686][T29166] veth0_macvtap: left promiscuous mode [ 3176.029194][T29166] veth1_vlan: left promiscuous mode [ 3176.064008][T31998] Bluetooth: hci4: Frame reassembly failed (-84) [ 3176.070244][T29166] veth0_vlan: left promiscuous mode [ 3176.070507][T31998] Bluetooth: hci4: Frame reassembly failed (-84) [ 3176.086218][T31998] Bluetooth: hci4: Frame reassembly failed (-84) [ 3176.183711][ T9071] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 3176.258740][ T9077] netlink: 'syz.1.8626': attribute type 5 has an invalid length. [ 3177.294160][ T9081] netlink: 202684 bytes leftover after parsing attributes in process `syz.5.8627'. [ 3177.608992][ T7288] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 3178.167923][ T7162] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 3178.686986][ T7288] usb 2-1: Using ep0 maxpacket: 32 [ 3178.893315][ T7288] usb 2-1: too many configurations: 128, using maximum allowed: 8 [ 3179.075451][ T7288] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 3179.091209][ T7288] usb 2-1: can't read configurations, error -61 [ 3179.246910][ T7288] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 3180.333235][ T7288] usb 2-1: device not accepting address 81, error -71 [ 3180.341409][ T7288] usb usb2-port1: attempt power cycle [ 3180.581003][T29166] team0 (unregistering): Port device team_slave_1 removed [ 3180.670642][T29166] team0 (unregistering): Port device team_slave_0 removed [ 3182.320595][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8639'. [ 3183.043447][ T9141] input: syz0 as /devices/virtual/input/input227 [ 3183.943430][ T9150] netlink: 277 bytes leftover after parsing attributes in process `syz.1.8645'. [ 3184.185749][ T9162] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 3184.190287][ T9163] FAULT_INJECTION: forcing a failure. [ 3184.190287][ T9163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3184.195098][ T7288] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 3184.354704][ T9163] CPU: 1 UID: 0 PID: 9163 Comm: syz.5.8650 Not tainted 6.12.0-rc5-syzkaller-00181-g6c52d4da1c74 #0 [ 3184.365398][ T9163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 3184.375446][ T9163] Call Trace: [ 3184.378720][ T9163] [ 3184.381645][ T9163] dump_stack_lvl+0x241/0x360 [ 3184.386315][ T9163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3184.391504][ T9163] ? __pfx__printk+0x10/0x10 [ 3184.396083][ T9163] ? snprintf+0xda/0x120 [ 3184.400320][ T9163] should_fail_ex+0x3b0/0x4e0 [ 3184.404996][ T9163] _copy_to_user+0x31/0xb0 [ 3184.409416][ T9163] simple_read_from_buffer+0xca/0x150 [ 3184.414784][ T9163] proc_fail_nth_read+0x1e9/0x250 [ 3184.419806][ T9163] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3184.425349][ T9163] ? rw_verify_area+0x55e/0x6f0 [ 3184.430189][ T9163] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 3184.435723][ T9163] vfs_read+0x1fc/0xb70 [ 3184.439872][ T9163] ? fdget_pos+0x24e/0x320 [ 3184.444283][ T9163] ? __pfx_vfs_read+0x10/0x10 [ 3184.448959][ T9163] ? __fget_files+0x3f3/0x470 [ 3184.453632][ T9163] ? fdget_pos+0x24e/0x320 [ 3184.458042][ T9163] ksys_read+0x183/0x2b0 [ 3184.462274][ T9163] ? __pfx_ksys_read+0x10/0x10 [ 3184.467030][ T9163] ? do_syscall_64+0x100/0x230 [ 3184.471782][ T9163] ? do_syscall_64+0xb6/0x230 [ 3184.476450][ T9163] do_syscall_64+0xf3/0x230 [ 3184.480948][ T9163] ? clear_bhb_loop+0x35/0x90 [ 3184.485614][ T9163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3184.491496][ T9163] RIP: 0033:0x7fc25317d15c [ 3184.495897][ T9163] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 3184.515492][ T9163] RSP: 002b:00007fc253f86030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 3184.523901][ T9163] RAX: ffffffffffffffda RBX: 00007fc253335f80 RCX: 00007fc25317d15c [ 3184.531864][ T9163] RDX: 000000000000000f RSI: 00007fc253f860a0 RDI: 0000000000000005 [ 3184.539822][ T9163] RBP: 00007fc253f86090 R08: 0000000000000000 R09: 0000000000000000 [ 3184.547778][ T9163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3184.555733][ T9163] R13: 0000000000000000 R14: 00007fc253335f80 R15: 00007ffff258bd78 [ 3184.563701][ T9163] [ 3184.586950][ T7288] usb 2-1: Using ep0 maxpacket: 32 [ 3185.917721][ T9170] Bluetooth: MGMT ver 1.23 [ 3186.530927][ T7288] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=88.ea [ 3186.540318][ T7288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3186.548563][ T7288] usb 2-1: Product: syz [ 3186.553486][ T7288] usb 2-1: Manufacturer: syz [ 3186.558799][ T7288] usb 2-1: SerialNumber: syz [ 3186.739184][ T7288] usb 2-1: config 0 descriptor?? [ 3186.776581][ T7288] ati_remote 2-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 3186.935413][ T4234] usb 2-1: USB disconnect, device number 83 [ 3187.503341][ T9183] input: syz0 as /devices/virtual/input/input228 [ 3189.023400][ T653] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 3189.157118][ T9203] afs: Unknown parameter 'd3nçE' [ 3189.197152][ T653] usb 4-1: Using ep0 maxpacket: 32 [ 3189.214529][ T653] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 3189.278135][ T653] usb 4-1: can't read configurations, error -61 [ 3189.527081][ T653] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 3189.848939][ T9208] netlink: 'syz.2.8663': attribute type 4 has an invalid length. [ 3189.936943][ T653] usb 4-1: Using ep0 maxpacket: 32 [ 3189.948253][ T653] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 3189.964364][ T653] usb 4-1: can't read configurations, error -61 [ 3189.977104][ T653] usb usb4-port1: attempt power cycle [ 3190.112156][ T7163] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 3190.202061][ T9220] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 3190.252412][ T9220] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 3190.269791][ T9221] netlink: 'syz.1.8667': attribute type 4 has an invalid length. [ 3190.288700][ T9221] veth1_macvtap: left promiscuous mode [ 3190.326941][ T653] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 3190.357725][ T653] usb 4-1: Using ep0 maxpacket: 32 [ 3190.364724][ T653] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 3190.372754][ T653] usb 4-1: can't read configurations, error -61 [ 3191.486457][ T653] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 3191.705285][ T9237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3191.714357][ T9237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3191.739355][ T653] usb 4-1: device descriptor read/8, error -71 [ 3191.958161][ T653] usb usb4-port1: unable to enumerate USB device [ 3192.036970][ T7288] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 3192.077201][ T9245] netlink: 'syz.3.8674': attribute type 4 has an invalid length. [ 3192.177684][ T9249] can0: slcan on pty27. [ 3192.183033][ T9252] veth1_macvtap: entered promiscuous mode [ 3192.190981][ T9252] veth1_macvtap: entered allmulticast mode [ 3192.202044][ T7288] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3192.223749][ T7288] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3192.235068][ T7288] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3192.244660][ T7288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3192.257901][ T9242] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3192.268746][ T7288] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 3192.278267][ T9252] can0 (unregistered): slcan off pty27. [ 3192.617860][ T4234] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 3192.705471][ T7288] usb 3-1: USB disconnect, device number 98 [ 3192.777035][ T4234] usb 4-1: Using ep0 maxpacket: 16 [ 3192.783879][ T4234] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3192.797226][ T4234] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 3192.807011][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3192.816336][ T4234] usb 4-1: config 0 descriptor?? [ 3192.823328][ T4234] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 3193.364353][ T9263] input: syz0 as /devices/virtual/input/input229 [ 3193.448130][ T6349] Bluetooth: hci4: Frame reassembly failed (-84) [ 3195.382112][ T9322] netlink: 'syz.9.8685': attribute type 4 has an invalid length. [ 3195.462208][ T7162] Bluetooth: hci4: command 0x1003 tx timeout [ 3195.471764][ T7163] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 3195.472892][ T7288] usb 4-1: USB disconnect, device number 103 [ 3195.795956][ T9331] ptrace attach of "./syz-executor exec"[8686] was attempted by "./syz-executor exec"[9331] [ 3196.097998][ T7288] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 3196.357591][ T7288] usb 4-1: Using ep0 maxpacket: 16 [ 3196.379797][ T7288] usb 4-1: config 0 has an invalid interface number: 39 but max is 0 [ 3196.422815][ T7288] usb 4-1: config 0 has no interface number 0 [ 3196.511021][ T7288] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=70.6d [ 3196.531928][ T7288] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3196.553115][ T7288] usb 4-1: Product: syz [ 3196.563007][ T7288] usb 4-1: Manufacturer: syz [ 3196.645249][ T7288] usb 4-1: SerialNumber: syz [ 3196.670135][ T7288] usb 4-1: config 0 descriptor?? [ 3196.700703][ T7288] i2c-tiny-usb 4-1:0.39: version 70.6d found at bus 004 address 104 [ 3197.874479][ T7288] (null): failure reading functionality [ 3197.885362][ T7288] i2c i2c-1: failure reading functionality [ 3197.904379][ T7288] i2c i2c-1: connected i2c-tiny-usb device [ 3197.947807][ T7288] usb 4-1: USB disconnect, device number 104 [ 3198.513353][ T9383] netlink: 'syz.1.8696': attribute type 4 has an invalid length. [ 3198.878563][ T3875] bridge0: port 1(bridge_slave_0) entered disabled state [ 3199.940126][ T7162] Bluetooth: hci2: command 0x0405 tx timeout [ 3202.443883][ T9403] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3202.454874][ T9403] netlink: 'syz.2.8703': attribute type 1 has an invalid length. [ 3202.463064][ T9403] netlink: 9392 bytes leftover after parsing attributes in process `syz.2.8703'. [ 3202.805679][T13804] usb 10-1: new high-speed USB device number 117 using dummy_hcd [ 3202.994660][T13804] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3203.050146][T13804] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3203.159224][T13804] usb 10-1: New USB device found, idVendor=0eef, idProduct=c002, bcdDevice= 0.00 [ 3203.304225][ T653] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 3203.376923][ T7212] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 3203.421991][T13804] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3203.435814][T13804] usb 10-1: config 0 descriptor?? [ 3203.457656][ T653] usb 3-1: device descriptor read/64, error -71 [ 3203.527052][ T7212] usb 4-1: Using ep0 maxpacket: 32 [ 3203.538789][ T7212] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 3203.546400][ T7212] usb 4-1: can't read configurations, error -61 [ 3203.707314][ T653] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 3203.715125][ T7212] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 3203.849696][ T653] usb 3-1: device descriptor read/64, error -71 [ 3203.866875][ T7212] usb 4-1: Using ep0 maxpacket: 32 [ 3203.930858][ T7212] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 3203.939192][ T7212] usb 4-1: can't read configurations, error -61 [ 3203.946234][ T7212] usb usb4-port1: attempt power cycle [ 3203.962949][ T9401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3203.976502][ T653] usb usb3-port1: attempt power cycle [ 3203.984933][ T9401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3204.228621][T13804] usbhid 10-1:0.0: can't add hid device: -71 [ 3204.234732][T13804] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 3204.244673][T13804] usb 10-1: USB disconnect, device number 117 [ 3204.297046][ T7212] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 3204.317395][ T7212] usb 4-1: Using ep0 maxpacket: 32 [ 3204.324332][ T7212] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 3204.332043][ T7212] usb 4-1: can't read configurations, error -61 [ 3204.338461][ T653] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 3204.387432][ T653] usb 3-1: device descriptor read/8, error -71 [ 3204.467166][ T7212] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 3204.488699][ T7212] usb 4-1: Using ep0 maxpacket: 32 [ 3204.496633][ T7212] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 3204.505439][ T7212] usb 4-1: can't read configurations, error -61 [ 3204.517593][ T7212] usb usb4-port1: unable to enumerate USB device [ 3204.564244][ T9425] netlink: 'syz.1.8711': attribute type 2 has an invalid length. [ 3204.701804][ T653] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 3204.861552][ T653] usb 3-1: device descriptor read/8, error -71 [ 3204.987993][ T653] usb usb3-port1: unable to enumerate USB device [ 3205.157856][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 3206.194495][ T9438] input: syz0 as /devices/virtual/input/input230 [ 3206.264974][T12142] Bluetooth: hci4: Frame reassembly failed (-84) [ 3207.557157][ T9448] input: syz0 as /devices/virtual/input/input231 [ 3207.987247][ T9450] input: syz1 as /devices/virtual/input/input232 [ 3208.258370][T32755] Bluetooth: hci4: command 0x1003 tx timeout [ 3208.258564][ T7163] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 3208.541204][ T9456] fuse: Bad value for 'group_id' [ 3208.546278][ T9456] fuse: Bad value for 'group_id' [ 3208.811016][ T653] IPVS: starting estimator thread 0... [ 3208.913865][ T9471] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:16x16 (0x33424752, 8, 0, 0, 0) [ 3208.987125][ T9469] IPVS: using max 18 ests per chain, 43200 per kthread [ 3209.621516][ T7162] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 3209.710170][ T9474] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3209.729905][ T9474] netlink: 'syz.2.8724': attribute type 1 has an invalid length. [ 3209.741172][ T9474] netlink: 9392 bytes leftover after parsing attributes in process `syz.2.8724'. [ 3209.751990][ T9475] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3210.187239][ T653] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 3211.584805][ T9501] input: syz0 as /devices/virtual/input/input233 [ 3212.682860][ T653] usb 3-1: device descriptor read/64, error -71 [ 3212.736947][ T7212] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 3212.938283][ T653] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 3212.957027][ T7212] usb 2-1: Using ep0 maxpacket: 16 [ 3213.033970][ T7212] usb 2-1: unable to read config index 0 descriptor/all [ 3213.041275][ T7212] usb 2-1: can't read configurations, error -71 [ 3213.186224][ T9511] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3213.262676][ T9516] FAULT_INJECTION: forcing a failure. [ 3213.262676][ T9516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 3213.277452][ T9516] CPU: 0 UID: 0 PID: 9516 Comm: syz.2.8741 Not tainted 6.12.0-rc5-syzkaller-00181-g6c52d4da1c74 #0 [ 3213.288144][ T9516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 3213.298189][ T9516] Call Trace: [ 3213.301458][ T9516] [ 3213.304376][ T9516] dump_stack_lvl+0x241/0x360 [ 3213.309049][ T9516] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3213.314240][ T9516] ? __pfx__printk+0x10/0x10 [ 3213.318818][ T9516] ? lockdep_hardirqs_on+0x99/0x150 [ 3213.324001][ T9516] ? __pfx_lock_release+0x10/0x10 [ 3213.329022][ T9516] should_fail_ex+0x3b0/0x4e0 [ 3213.333709][ T9516] _copy_from_user+0x2f/0xc0 [ 3213.338323][ T9516] do_pagemap_cmd+0x10f/0x1200 [ 3213.343100][ T9516] ? tomoyo_path_number_perm+0x208/0x880 [ 3213.348731][ T9516] ? smack_log+0x123/0x540 [ 3213.353144][ T9516] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 3213.359121][ T9516] ? __pfx_smack_log+0x10/0x10 [ 3213.363881][ T9516] ? smk_access+0x4ab/0x4e0 [ 3213.368387][ T9516] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 3213.373593][ T9516] ? __fget_files+0x3f3/0x470 [ 3213.378275][ T9516] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 3213.383472][ T9516] __se_sys_ioctl+0xf9/0x170 [ 3213.388066][ T9516] do_syscall_64+0xf3/0x230 [ 3213.392569][ T9516] ? clear_bhb_loop+0x35/0x90 [ 3213.397244][ T9516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3213.403130][ T9516] RIP: 0033:0x7f7d8a77e719 [ 3213.407539][ T9516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3213.427138][ T9516] RSP: 002b:00007f7d8b633038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 3213.435546][ T9516] RAX: ffffffffffffffda RBX: 00007f7d8a935f80 RCX: 00007f7d8a77e719 [ 3213.443510][ T9516] RDX: 0000000020000140 RSI: 00000000c0606610 RDI: 0000000000000003 [ 3213.451475][ T9516] RBP: 00007f7d8b633090 R08: 0000000000000000 R09: 0000000000000000 [ 3213.459442][ T9516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 3213.467404][ T9516] R13: 0000000000000000 R14: 00007f7d8a935f80 R15: 00007ffd17a64708 [ 3213.475383][ T9516] [ 3213.697265][ T7162] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 3213.894729][ T9523] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 3215.260333][ T9555] input: syz0 as /devices/virtual/input/input234 [ 3215.374484][ T6349] Bluetooth: hci4: Frame reassembly failed (-84) [ 3217.377380][ T7163] Bluetooth: hci4: command 0x1003 tx timeout [ 3217.377936][ T7162] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 3217.995235][ T7288] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 3219.929746][ T7288] usb 2-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 3219.959366][ T7288] usb 2-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xE1, changing to 0x81 [ 3219.975042][ T7288] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3219.999357][ T7288] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25090, setting to 1024 [ 3220.026892][ T7288] usb 2-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 3220.196421][ T7288] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 3220.874078][ T7288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3220.882365][ T9613] tty tty2: ldisc open failed (-12), clearing slot 1 [ 3221.004116][ T9592] sctp: [Deprecated]: syz.3.8768 (pid 9592) Use of int in maxseg socket option. [ 3221.004116][ T9592] Use struct sctp_assoc_value instead [ 3221.019222][ T9618] veth1_macvtap: mtu greater than device maximum [ 3221.072858][ T7288] ath6kl: Failed to submit usb control message: -71 [ 3221.088135][ T7288] ath6kl: unable to send the bmi data to the device: -71 [ 3221.095262][ T7288] ath6kl: Unable to send get target info: -71 [ 3221.132671][ T7288] ath6kl: Failed to init ath6kl core: -71 [ 3221.134162][ T9622] ieee802154 phy1 wpan1: encryption failed: -22 [ 3221.139338][ T7288] ath6kl_usb 2-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 3221.146784][ T9622] ieee802154 phy1 wpan1: encryption failed: -22 [ 3221.172259][ T9625] [ 3221.174604][ T9625] ====================================================== [ 3221.181618][ T9625] WARNING: possible circular locking dependency detected [ 3221.188622][ T9625] 6.12.0-rc5-syzkaller-00181-g6c52d4da1c74 #0 Not tainted [ 3221.195714][ T9625] ------------------------------------------------------ [ 3221.202713][ T9625] syz.2.8775/9625 is trying to acquire lock: [ 3221.208669][ T9625] ffff888029e0a868 (&pipe->mutex){+.+.}-{3:3}, at: iter_file_splice_write+0x330/0x1510 [ 3221.218311][ T9625] [ 3221.218311][ T9625] but task is already holding lock: [ 3221.225657][ T9625] ffff88801be82420 (sb_writers#5){.+.+}-{0:0}, at: do_splice+0xce4/0x18e0 [ 3221.234176][ T9625] [ 3221.234176][ T9625] which lock already depends on the new lock. [ 3221.234176][ T9625] [ 3221.244561][ T9625] [ 3221.244561][ T9625] the existing dependency chain (in reverse order) is: [ 3221.253556][ T9625] [ 3221.253556][ T9625] -> #4 (sb_writers#5){.+.+}-{0:0}: [ 3221.260946][ T9625] lock_acquire+0x1ed/0x550 [ 3221.265962][ T9625] sb_start_write+0x4d/0x1c0 [ 3221.271059][ T9625] mnt_want_write+0x3f/0x90 [ 3221.276085][ T9625] ovl_create_object+0x13a/0x3a0 [ 3221.281546][ T9625] path_openat+0x1c03/0x3590 [ 3221.286671][ T9625] do_filp_open+0x235/0x490 [ 3221.291683][ T9625] do_sys_openat2+0x13e/0x1d0 [ 3221.296861][ T9625] __x64_sys_openat+0x247/0x2a0 [ 3221.302230][ T9625] do_syscall_64+0xf3/0x230 [ 3221.307238][ T9625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3221.313629][ T9625] [ 3221.313629][ T9625] -> #3 (&ovl_i_mutex_dir_key[depth]){++++}-{3:3}: [ 3221.322300][ T9625] lock_acquire+0x1ed/0x550 [ 3221.327313][ T9625] down_read+0xb1/0xa40 [ 3221.331977][ T9625] lookup_slow+0x45/0x70 [ 3221.336718][ T9625] walk_component+0x2e1/0x410 [ 3221.341898][ T9625] path_lookupat+0x16f/0x450 [ 3221.346992][ T9625] filename_lookup+0x256/0x610 [ 3221.352254][ T9625] kern_path+0x35/0x50 [ 3221.356825][ T9625] lookup_bdev+0xc5/0x290 [ 3221.361656][ T9625] resume_store+0x1a0/0x710 [ 3221.366659][ T9625] kernfs_fop_write_iter+0x3a0/0x500 [ 3221.372453][ T9625] vfs_write+0xaeb/0xd30 [ 3221.377200][ T9625] ksys_write+0x183/0x2b0 [ 3221.382033][ T9625] do_syscall_64+0xf3/0x230 [ 3221.387039][ T9625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3221.393435][ T9625] [ 3221.393435][ T9625] -> #2 (&of->mutex){+.+.}-{3:3}: [ 3221.400623][ T9625] lock_acquire+0x1ed/0x550 [ 3221.405646][ T9625] __mutex_lock+0x136/0xd70 [ 3221.410650][ T9625] kernfs_seq_start+0x53/0x3b0 [ 3221.415915][ T9625] seq_read_iter+0x3cc/0xd70 [ 3221.421007][ T9625] copy_splice_read+0x663/0xb60 [ 3221.426357][ T9625] splice_direct_to_actor+0x4af/0xc80 [ 3221.432229][ T9625] do_splice_direct+0x289/0x3e0 [ 3221.437580][ T9625] do_sendfile+0x561/0xe10 [ 3221.442497][ T9625] __se_sys_sendfile64+0x17c/0x1e0 [ 3221.448117][ T9625] do_syscall_64+0xf3/0x230 [ 3221.453121][ T9625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3221.459513][ T9625] [ 3221.459513][ T9625] -> #1 (&p->lock){+.+.}-{3:3}: [ 3221.466526][ T9625] lock_acquire+0x1ed/0x550 [ 3221.471536][ T9625] __mutex_lock+0x136/0xd70 [ 3221.476542][ T9625] seq_read_iter+0xb4/0xd70 [ 3221.481547][ T9625] proc_reg_read_iter+0x1c2/0x290 [ 3221.487075][ T9625] copy_splice_read+0x663/0xb60 [ 3221.492427][ T9625] splice_file_to_pipe+0x290/0x500 [ 3221.498039][ T9625] do_sendfile+0x509/0xe10 [ 3221.502952][ T9625] __se_sys_sendfile64+0x17c/0x1e0 [ 3221.508565][ T9625] do_syscall_64+0xf3/0x230 [ 3221.513566][ T9625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3221.519960][ T9625] [ 3221.519960][ T9625] -> #0 (&pipe->mutex){+.+.}-{3:3}: [ 3221.527323][ T9625] validate_chain+0x18ef/0x5920 [ 3221.532673][ T9625] __lock_acquire+0x1384/0x2050 [ 3221.538031][ T9625] lock_acquire+0x1ed/0x550 [ 3221.543035][ T9625] __mutex_lock+0x136/0xd70 [ 3221.548038][ T9625] iter_file_splice_write+0x330/0x1510 [ 3221.553994][ T9625] do_splice+0xd68/0x18e0 [ 3221.558823][ T9625] __se_sys_splice+0x331/0x4a0 [ 3221.564089][ T9625] do_syscall_64+0xf3/0x230 [ 3221.569092][ T9625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3221.575489][ T9625] [ 3221.575489][ T9625] other info that might help us debug this: [ 3221.575489][ T9625] [ 3221.585694][ T9625] Chain exists of: [ 3221.585694][ T9625] &pipe->mutex --> &ovl_i_mutex_dir_key[depth] --> sb_writers#5 [ 3221.585694][ T9625] [ 3221.599234][ T9625] Possible unsafe locking scenario: [ 3221.599234][ T9625] [ 3221.606663][ T9625] CPU0 CPU1 [ 3221.612006][ T9625] ---- ---- [ 3221.617352][ T9625] rlock(sb_writers#5); [ 3221.621581][ T9625] lock(&ovl_i_mutex_dir_key[depth]); [ 3221.629541][ T9625] lock(sb_writers#5); [ 3221.636199][ T9625] lock(&pipe->mutex); [ 3221.640334][ T9625] [ 3221.640334][ T9625] *** DEADLOCK *** [ 3221.640334][ T9625] [ 3221.648471][ T9625] 1 lock held by syz.2.8775/9625: [ 3221.653470][ T9625] #0: ffff88801be82420 (sb_writers#5){.+.+}-{0:0}, at: do_splice+0xce4/0x18e0 [ 3221.662416][ T9625] [ 3221.662416][ T9625] stack backtrace: [ 3221.668289][ T9625] CPU: 1 UID: 0 PID: 9625 Comm: syz.2.8775 Not tainted 6.12.0-rc5-syzkaller-00181-g6c52d4da1c74 #0 [ 3221.678943][ T9625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 3221.688976][ T9625] Call Trace: [ 3221.692237][ T9625] [ 3221.695155][ T9625] dump_stack_lvl+0x241/0x360 [ 3221.699817][ T9625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3221.704996][ T9625] ? __pfx__printk+0x10/0x10 [ 3221.709568][ T9625] print_circular_bug+0x13a/0x1b0 [ 3221.714577][ T9625] check_noncircular+0x36a/0x4a0 [ 3221.719497][ T9625] ? __pfx_check_noncircular+0x10/0x10 [ 3221.724935][ T9625] ? queued_spin_lock_slowpath+0x42/0x50 [ 3221.730545][ T9625] ? lockdep_lock+0x1b0/0x2b0 [ 3221.735206][ T9625] ? __lock_acquire+0x1384/0x2050 [ 3221.740222][ T9625] validate_chain+0x18ef/0x5920 [ 3221.745059][ T9625] ? __pfx_validate_chain+0x10/0x10 [ 3221.750247][ T9625] ? mark_lock+0x9a/0x360 [ 3221.754559][ T9625] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 3221.760522][ T9625] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 3221.766834][ T9625] ? mark_lock+0x9a/0x360 [ 3221.771141][ T9625] ? lockdep_hardirqs_on+0x99/0x150 [ 3221.776319][ T9625] __lock_acquire+0x1384/0x2050 [ 3221.781162][ T9625] lock_acquire+0x1ed/0x550 [ 3221.785652][ T9625] ? iter_file_splice_write+0x330/0x1510 [ 3221.791268][ T9625] ? __pfx_lock_acquire+0x10/0x10 [ 3221.796279][ T9625] ? __pfx___might_resched+0x10/0x10 [ 3221.801551][ T9625] __mutex_lock+0x136/0xd70 [ 3221.806036][ T9625] ? iter_file_splice_write+0x330/0x1510 [ 3221.811650][ T9625] ? iter_file_splice_write+0x330/0x1510 [ 3221.817264][ T9625] ? __pfx___mutex_lock+0x10/0x10 [ 3221.822269][ T9625] ? iter_file_splice_write+0x303/0x1510 [ 3221.827882][ T9625] ? iter_file_splice_write+0x303/0x1510 [ 3221.833491][ T9625] ? rcu_is_watching+0x15/0xb0 [ 3221.838242][ T9625] ? iter_file_splice_write+0x303/0x1510 [ 3221.843852][ T9625] ? iter_file_splice_write+0x303/0x1510 [ 3221.849463][ T9625] ? __kmalloc_noprof+0x21a/0x400 [ 3221.854470][ T9625] iter_file_splice_write+0x330/0x1510 [ 3221.859917][ T9625] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3221.865969][ T9625] ? rcu_read_lock_any_held+0xb7/0x160 [ 3221.871410][ T9625] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 3221.877299][ T9625] ? __pfx_iter_file_splice_write+0x10/0x10 [ 3221.883191][ T9625] do_splice+0xd68/0x18e0 [ 3221.887515][ T9625] ? __pfx_lock_release+0x10/0x10 [ 3221.892527][ T9625] ? pipe_clear_nowait+0x196/0x220 [ 3221.897631][ T9625] ? __pfx_do_splice+0x10/0x10 [ 3221.902386][ T9625] __se_sys_splice+0x331/0x4a0 [ 3221.907138][ T9625] ? __pfx___se_sys_splice+0x10/0x10 [ 3221.912408][ T9625] ? do_syscall_64+0x100/0x230 [ 3221.917156][ T9625] ? __x64_sys_splice+0x21/0xf0 [ 3221.921989][ T9625] do_syscall_64+0xf3/0x230 [ 3221.926473][ T9625] ? clear_bhb_loop+0x35/0x90 [ 3221.931135][ T9625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3221.937010][ T9625] RIP: 0033:0x7f7d8a77e719 [ 3221.941407][ T9625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3221.960995][ T9625] RSP: 002b:00007f7d8b612038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 3221.969396][ T9625] RAX: ffffffffffffffda RBX: 00007f7d8a936058 RCX: 00007f7d8a77e719 [ 3221.977353][ T9625] RDX: 000000000000000e RSI: 0000000000000000 RDI: 000000000000000c [ 3221.985313][ T9625] RBP: 00007f7d8a7f132e R08: 00000000000408cd R09: 0000000000000000 [ 3221.993269][ T9625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3222.001229][ T9625] R13: 0000000000000000 R14: 00007f7d8a936058 R15: 00007ffd17a64708 [ 3222.009191][ T9625] [ 3222.024898][ T7288] usb 2-1: USB disconnect, device number 86 [ 3222.229101][ T9631] input: syz0 as /devices/virtual/input/input235 [ 3222.240802][ T6349] Bluetooth: hci4: Frame reassembly failed (-84) [ 3224.256875][ T7162] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 3224.256937][ T7163] Bluetooth: hci4: command 0x1003 tx timeout