last executing test programs: 10m40.854695363s ago: executing program 32 (id=148): socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x1, 0x84) r0 = socket$inet6(0xa, 0x3, 0x3) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r0}, 0x2) sendmsg$inet6(r1, &(0x7f0000000600)={&(0x7f0000000080)={0xa, 0x4e20, 0x1000000080000, @dev={0xfe, 0x80, '\x00', 0x25}}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000029000000040000002b00000000000007120000000000000029"], 0x30}, 0x0) (fail_nth: 5) 9m15.583746046s ago: executing program 33 (id=368): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x18, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000815}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x4a}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0xf, 0x0, &(0x7f0000000640)) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendfile(r4, r4, 0x0, 0x40008) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x80}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cd0606000000000000006b943e8bb0ac60081e33dff8150835f7519d5f73b4f5d80e40000900ffff000000005d092392f816d0fdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd9) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000006000/0x2000)=nil, 0x2000, 0x1000, 0x1c29c3582c7db197, &(0x7f0000ffe000/0x1000)=nil) 8m52.412650384s ago: executing program 2 (id=453): socket$xdp(0x2c, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x2, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000980)={0x1, @pix_mp={0xfffff001, 0x20007, 0x30314742, 0x5, 0x6, [{0xb, 0x94}, {0x2, 0x8000}, {0x100, 0x1}, {0x2}, {0x800, 0x7ffb}, {0x8, 0xfffffffd}, {0x6, 0x9}, {0x7, 0xfffffffa}], 0x3, 0x9, 0x7, 0x1}}) socket$kcm(0x2c, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d1fdc7c2bb2033907904d755b9f95ef9db52b7fa087c4df248af66ebe2be9763966507a60fb994d9f79534ca6682eef50f2bef96c014fa01bf25e6fe1b1bc6e4fdb451d51b3a62d9e957371bdd9a62e0ce7b71e7503effde8d0402df31d5176422f1e444c81e3321cff3a49130abcb61b82dfd79b1478029e64001e788d9a46786cc425b568cf69ea33454166c5d166a48042", 0xee}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x72, 0x101301) ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, 0x0) 8m50.014914413s ago: executing program 2 (id=457): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ(r3, 0xaea2, 0x80000000) ioctl$KVM_RUN(r3, 0xae80, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x8b, &(0x7f0000000140)={@remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @val={@void, {0x8100, 0x4, 0x1, 0x2}}, {@llc={0x4, {@llc={0x2, 0x42, "888f", "59032c9768da9069eb80715a1775a93700740de6b6eadac82b2bd10b1675174bfc814ca6946c0fb69cb001e0da0244e9eefbeefdbb1adff2e50b68a89daab45a4bf7468d2a5d0f87f6486c564e9b0ece11152351d27a7b78aaf42a9320d87b73ad9b6592024a144e30a904ff4f0860a105d1b1791a"}}}}}, 0x0) 8m49.526958416s ago: executing program 2 (id=459): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_clone3(&(0x7f0000000380)={0x120000180, &(0x7f0000000040), &(0x7f0000000100)=0x0, 0x0, {0x28}, &(0x7f00000001c0)=""/4, 0x4, &(0x7f0000000200)=""/9, 0x0, 0x0, {r2}}, 0x58) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)) prlimit64(r3, 0xe, &(0x7f0000000300)={0xffff, 0x7}, &(0x7f0000000440)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r6, 0x11b, 0x1, &(0x7f0000001380), &(0x7f0000000000)=0xfcce) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000000480)="343552fdddb6ce216683202ba6af16077121d85557517b9648d8a75ece89fbbacd41541a1bebaf78d5") r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@cgroup=r7, 0x8, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="120100009cb5984071042903dadb0000000109021200010000000009"], 0x0) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000280)={0x7, 0x100, "77c638b05041a0115f44304807e55536b7fc5ae52727d800", 0x1ff, 0x5, 0x79, 0xdf4}) r10 = dup(r9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r10, 0x2000) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000000)=0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r8, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 8m44.074598888s ago: executing program 2 (id=473): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x3c20, 0x0, &(0x7f0000000140)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x104, &(0x7f00000001c0)=0x800, 0x0, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000480)={'wlan1\x00', @random="0600"}) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='tlb_flush\x00', r5, 0x0, 0x51}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x4000000002, 0x2) pwritev(r4, &(0x7f0000000280)=[{&(0x7f00000000c0)="7711", 0x2}], 0x1, 0x8, 0x1) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r6 = dup(0xffffffffffffffff) write$FUSE_BMAP(r6, &(0x7f0000000000)={0x18}, 0x18) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="0100000000006ffd0f008200000008000300", @ANYRES32=r9, @ANYBLOB], 0x1c}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r10}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, 0x0) 8m41.208218797s ago: executing program 2 (id=477): openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x539200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xffdffffffffffff9, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000004a2acea1b10000389a6f15a725645100000000000000000000fdfd8791a6993ce04dc5106800db6143ac574505769c29fb5a2c9942911159cf83c177dba8d7a64e4da52f497c9167781097f17a89dcec83bff02b4979d2fc5a7ee0436db3b25f8187806d3e49e9301ff6b22ad242e139a5a1d3"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x439, 0x70bd2d, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010100}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x4}]}}}]}, 0x40}}, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r3) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000240)=0x1, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x1000, 0x3fd, 0x1}, 0x48) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) pwritev2(r5, 0x0, 0x0, 0xfffffffe, 0xf, 0x8) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r4}, 0x18) r6 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$smackfs_change_rule(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="44727f8800"/20], 0x1d) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r6}}, './file1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 8m40.104892354s ago: executing program 2 (id=480): syz_io_uring_setup(0xa25, &(0x7f0000000000)={0x0, 0x6a0f, 0x40, 0x4, 0x22f}, &(0x7f0000000080), 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="02000000", 0x4) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x6, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8m31.079397217s ago: executing program 34 (id=467): socket$xdp(0x2c, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x2, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002240), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000040)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x2000}}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000980)={0x1, @pix_mp={0xfffff001, 0x20007, 0x30314742, 0x5, 0x6, [{0xb, 0x94}, {0x2, 0x8000}, {0x100, 0x1}, {0x2}, {0x800, 0x7ffb}, {0x8, 0xfffffffd}, {0x6, 0x9}, {0x7, 0xfffffffa}], 0x3, 0x9, 0x7, 0x1}}) socket$kcm(0x2c, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d1fdc7c2bb2033907904d755b9f95ef9db52b7fa087c4df248af66ebe2be9763966507a60fb994d9f79534ca6682eef50f2bef96c014fa01bf25e6fe1b1bc6e4fdb451d51b3a62d9e957371bdd9a62e0ce7b71e7503effde8d0402df31d5176422f1e444c81e3321cff3a49130abcb61b82dfd79b1478029e64001e788d9a46786cc425b568cf69ea33454166c5d166a48042", 0xee}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00'}, 0x18) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x72, 0x101301) ioctl$USBDEVFS_CLAIM_PORT(r5, 0x80045518, 0x0) 8m24.784997329s ago: executing program 35 (id=480): syz_io_uring_setup(0xa25, &(0x7f0000000000)={0x0, 0x6a0f, 0x40, 0x4, 0x22f}, &(0x7f0000000080), 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x9) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="02000000", 0x4) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = fsopen(&(0x7f0000000200)='ecryptfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r5, 0x6, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8m3.518011147s ago: executing program 3 (id=553): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0xa020480) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x11, 0x7efffeff00000000) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000f00)={'dummy0\x00', &(0x7f0000000600)=@ethtool_perm_addr={0x4b, 0x7, "4372071aea695b"}}) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x7fffffffffffffff, 0x400400) r4 = syz_open_dev$dri(&(0x7f0000000340), 0x9, 0x88000) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000380)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000440)={r7, 0x8, 0x7dc, 0x10000000, 0x0, [0x0], [0x8001, 0x27, 0x2], [0x0, 0x2], [0x0, 0x1, 0xfffffffffffffffd, 0x8000]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000580)={r7, 0xc1, 0x10, 0x34325241, 0x2, [0x2, 0x0, r8], [0x80ffff, 0x0, 0x0, 0xfffffffe], [0x0, 0x8, 0x0, 0x3], [0xfff, 0x0, 0x0, 0x608]}) ioctl$DRM_IOCTL_MODE_DIRTYFB(r3, 0xc01864b1, &(0x7f0000000300)={r7, 0x3, 0xf50, 0x7, &(0x7f00000002c0)=[{0x4, 0x4a0b, 0xfffe, 0x1}, {0xffff, 0xbc, 0x5, 0x1}, {0xff, 0x5, 0x8, 0x3}, {0x6, 0xf3, 0x1, 0x6}, {0x2, 0x20da, 0xfff9, 0x7f}, {0x4, 0xfffa, 0x2fff, 0x2}, {0x6, 0x2, 0x8, 0x7}]}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x40081}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRESHEX=r9], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000030a03030000000000000000020000000c00024000000000000000020900010073797a30"], 0x54}}, 0x0) r10 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) ioctl$MON_IOCX_MFETCH(r10, 0xc0109207, &(0x7f0000000180)={0x0, 0x0, 0xfffffffd}) 8m2.559335401s ago: executing program 3 (id=558): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0x6b4}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000000000000000000050000000000000000000000030000000000f100ffffffff"]) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast=0xe0000001}, {0x0, 0xe21, 0x1}}}}}, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x0, 0x408c}) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000003c0)='rcu_utilization\x00', r2}, 0x18) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0x100}, 0x6) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000000000000007, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, 0x0) 8m0.22538497s ago: executing program 3 (id=559): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x28801, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="cf3f8aa0c286aeeb99196a", @ANYRES64=0x0], 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@base={0x12, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r7, &(0x7f0000000300), 0x0}, 0x20) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) sendto$inet(r8, 0x0, 0x0, 0x4004004, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r9 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r9, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f00000006c0), &(0x7f00000001c0)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) 7m59.466533225s ago: executing program 3 (id=562): io_setup(0x8, &(0x7f0000004200)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/3\x00') readv(r4, &(0x7f0000001440)=[{0x0}], 0x1) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4040044) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 7m58.051727776s ago: executing program 3 (id=564): openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x539200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xffdffffffffffff9, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000004a2acea1b10000389a6f15a725645100000000000000000000fdfd8791a6993ce04dc5106800db6143ac574505769c29fb5a2c9942911159cf83c177dba8d7a64e4da52f497c9167781097f17a89dcec83bff02b4979d2fc5a7ee0436db3b25f8187806d3e49e9301ff6b22ad242e139a5a1d3"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket(0x10, 0x803, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) setpgid(0x0, r2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000240)=0x1, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x1000, 0x3fd, 0x1}, 0x48) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) pwritev2(r4, 0x0, 0x0, 0xfffffffe, 0xf, 0x8) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r3}, 0x18) r5 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$smackfs_change_rule(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="44727f8800"/20], 0x1d) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r6, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r5}}, './file1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 7m57.554480069s ago: executing program 3 (id=565): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x28, 0x68, 0x1, 0x100003, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}, @NHA_BLACKHOLE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (fail_nth: 5) 7m41.887643514s ago: executing program 36 (id=565): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x28, 0x68, 0x1, 0x100003, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}, @NHA_BLACKHOLE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (fail_nth: 5) 5m58.800204212s ago: executing program 6 (id=900): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvfrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)="1121e5", 0x2b}, 0x1, 0x0, 0x0, 0x20008801}, 0xc0f4) 5m57.615834862s ago: executing program 6 (id=905): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000100)={0xfffffffc, 0xe7, 0x6, 0x2, 0x7, "ea7174ddb80fc70000020000000000d3a2d975", 0x2, 0x4}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x2) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) 5m57.137745393s ago: executing program 6 (id=906): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000200)={0x10000802, 0x0, 0x40000, 0x40000}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB], 0x5c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x90}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r3, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) listen(r3, 0x83) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000780)={0x64, r4, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@beacon, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x5}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xff800000}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_HE_OBSS_PD={0x1c, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x14}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x10}]}]}, 0x64}}, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5m55.631093208s ago: executing program 6 (id=910): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'sit0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x8002, 0x10, 0x0, 0x7, {{0x5, 0x4, 0x0, 0x13, 0x14, 0x78, 0xfffc, 0xfd, 0x5e55b37311de6d89, 0x0, @empty, @empty}}}}) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) r2 = socket$inet(0x2b, 0x801, 0x0) connect$inet(r2, &(0x7f00000002c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x48f, &(0x7f0000000000)={0x11, @private=0xa010100, 0x4e24, 0x3, 'nq\x00', 0x1d, 0x2, 0x18}, 0x2c) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x4e23, @private=0xa018101}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x101, 0x0, 0x0, 0x0, 0x7f, &(0x7f0000000000)='wg0\x00', 0x1, 0x40df56e9, 0xd4b}) 5m55.24268366s ago: executing program 6 (id=915): openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x539200, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x3, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0xffdffffffffffff9, 0x0) ioctl$VIDIOC_LOG_STATUS(0xffffffffffffffff, 0x5646, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000004a2acea1b10000389a6f15a725645100000000000000000000fdfd8791a6993ce04dc5106800db6143ac574505769c29fb5a2c9942911159cf83c177dba8d7a64e4da52f497c9167781097f17a89dcec83bff02b4979d2fc5a7ee0436db3b25f8187806d3e49e9301ff6b22ad242e139a5a1d3"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x439, 0x70bd2d, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x0, 0x610c3}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010100}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x4}]}}}]}, 0x40}}, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, 0x0) setpgid(0x0, r3) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000240)=0x1, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x1000, 0x3fd, 0x1}, 0x48) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) pwritev2(r5, 0x0, 0x0, 0xfffffffe, 0xf, 0x8) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={&(0x7f00000000c0)='./file0/file0\x00', r4}, 0x18) r6 = openat$smackfs_change_rule(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$smackfs_change_rule(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="44727f8800"/20], 0x1d) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000000200)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r6}}, './file1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 5m53.934958674s ago: executing program 6 (id=922): mkdir(&(0x7f0000000280)='./file0\x00', 0x51) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x4047b013}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x78, 0x0, 0x35a74, {0x2, 0x42, 0x0, {0x0, 0x68, 0xfffffffffffffff7, 0x6, 0x8, 0x0, 0x200, 0xe81d, 0xfffffff9, 0x4000, 0xd, r2, 0x0, 0x6, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents(r3, 0x0, 0x0) 5m37.922428172s ago: executing program 37 (id=922): mkdir(&(0x7f0000000280)='./file0\x00', 0x51) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x4047b013}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003c58b3bd0000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1e}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x78, 0x0, 0x35a74, {0x2, 0x42, 0x0, {0x0, 0x68, 0xfffffffffffffff7, 0x6, 0x8, 0x0, 0x200, 0xe81d, 0xfffffff9, 0x4000, 0xd, r2, 0x0, 0x6, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents(r3, 0x0, 0x0) 2m43.635926959s ago: executing program 5 (id=1513): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000003f40)=@newtfilter={0x12c, 0x2c, 0xd27, 0x70bd2a, 0x8008, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x7}, {}, {0x4, 0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xfc, 0x2, [@TCA_CGROUP_EMATCHES={0x14, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfff7}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xc}}]}, @TCA_CGROUP_ACT={0xe4, 0x1, [@m_csum={0x30, 0x14, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0x5, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_mirred={0x80, 0x11, 0x0, 0x0, {{0xb}, {0x4}, {0x54, 0x6, "1193b08b79313320ff9fd6a8597d6002244062e11742656d231138278f86b3aac30596c6ac3c9c3f66897084bf2c3597ddba7810e19602d0279ab055821db5924d3f766250117f38f12661615f251606"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_gact={0x30, 0x11, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x6}}}}]}]}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) 2m43.221083112s ago: executing program 5 (id=1515): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100020a000000000000d90b22178b2b02f7003320000002004e20ac141429000000000000000005000500000000000a0000000000000000000000000000000000ffffffffffff0000000000000000"], 0x50}, 0x1, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r3) sendmsg$NLBL_CALIPSO_C_ADD(r3, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc8c0}, 0x9a1ea7263e15feb3) sendmsg$NLBL_CALIPSO_C_REMOVE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x8000) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x16) close(r7) fcntl$setstatus(r6, 0x4, 0x42000) accept4(r6, &(0x7f0000000180)=@alg, &(0x7f0000000240)=0x80, 0x800) r8 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r8, &(0x7f0000002a00)={0xa, 0x0, 0x0, @remote}, 0x1c) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m40.54802229s ago: executing program 9 (id=1522): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000400)={0x1, @pix_mp={0x0, 0x0, 0x32315258, 0x2, 0x0, [{0x5, 0xffffffff}, {}, {}, {0x10000000, 0xffff}, {0x0, 0xffffffff}, {0xfffffffe}], 0x0, 0x8, 0x0, 0x0, 0x1}}) socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) timer_create(0x0, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x18, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800"], 0x68}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, 0x0, 0x44815) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x500, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e31000000000000", @ANYRES32=0x0, @ANYBLOB="ff498411a1f8c7048c50af66854b"], 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x0) setxattr$security_capability(0x0, &(0x7f00000000c0), &(0x7f0000000100)=@v1={0x1000000, [{0xac4, 0x59a1}]}, 0xc, 0x3) socket$nl_generic(0x10, 0x3, 0x10) 2m40.510424564s ago: executing program 5 (id=1523): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10a, 0x1}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xf}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, 0x24}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0x31) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="040100001000070000000000000000e8fe020000000c00000000000000000001e0000002000000000000000000000000ffff0000000000000000000002000000217479daa574fb1eb1ad0ceebc37248f618a6a", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000070000000000000000000000000000000000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) fanotify_init(0x1, 0x400) r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000280)=@abs, &(0x7f0000000200)=0x6e) sendmmsg$unix(r4, &(0x7f0000000300), 0x0, 0xc8) socket$kcm(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x400000002, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xfff1}, {0xffff, 0x9}}}, 0x24}}, 0x4000) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x34, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000014}, 0x20084084) recvfrom(r5, 0x0, 0x0, 0x40000000, 0x0, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) 2m39.178777589s ago: executing program 5 (id=1527): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000008000000080000000100000040140400", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000400000001700"/28], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000240), &(0x7f00000001c0)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x3, &(0x7f0000000440)=ANY=[@ANYRES64], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x51}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000040)={0x7, 0x0, 0x0, 0x4000}) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async) socket(0x25, 0x1, 0x2) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) r6 = socket$can_raw(0x1d, 0x3, 0x1) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008060001080006040009000000000000ac1414020000000000000014"], 0x0) (async) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000100)="f257a8ea7bc273", 0x7, 0x0, &(0x7f0000000200)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(0xffffffffffffffff, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) (async) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) 2m38.328237239s ago: executing program 5 (id=1532): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x130, 0x0, 0x400, {0x0, 0x0, 0x0, '\x00', {0x7ff, 0x1, 0xadf, 0x800, 0xee01, 0x0, 0x2000, '\x00', 0x6, 0x0, 0xb4e9, 0x3, {0x8001, 0x8}, {0x4000000000006, 0x3}, {0x0, 0x7}, {0x0, 0xa00}, 0x80008003, 0xa, 0x0, 0x6}}}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8000002, 0x3d7}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000000080)=""/4111, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1546010029040000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB="08100a0104939935c3c8c52cdb1da643c4f7281bfdf5c4b2e976cb94ebb650472adb3c37f7234fa37df342873ee2db825ac6cacbcc19273bf826bc34e2b37f7107d179fccbae24e2b1204ec88658ece9877bb4de2abd31ab9fe20d6a24112b7ef048b03503219656d12389a5f9f4b81c84722cfb3156a70694f52f7dcef396661c500c06cfb6cc9f66ee403ba78057987811af47dcc5ec550e20a9d0af79ea3d0f4804006bd2296fab9b3da2dff991ac4fb21a355447274521", @ANYRES32=r1, @ANYBLOB], 0x44}}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000440)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x0, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e24, @empty}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4b59, 0x7, 0x7}) 2m38.304586725s ago: executing program 9 (id=1533): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f0000000140)=0x1, 0x4) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, 0x0, &(0x7f0000000500)) syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, &(0x7f0000000240)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x310, 0x82, 0x7, 0xbb, 0xff, 0x1}, 0x0, 0x0}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r4, 0x4004ae8b, &(0x7f0000000040)=ANY=[@ANYBLOB='\b\x00\x00\x00']) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) preadv(r0, &(0x7f00000010c0)=[{&(0x7f0000000040)=""/74, 0x4a}, {0x0}], 0x2, 0x951, 0x2) 2m38.099898899s ago: executing program 5 (id=1535): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, &(0x7f0000000140)}) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="3474279b293f4e9e000067004f0b30350300d58d783c9b29a8232f43b8d9fd6747a709907f3b63a063d081d4428e58063376db05ecacbaa817af46786a38c4f9388b71c5cee7c95c570cf5e886f097d2eafdc7a6bd69bb5d7e41f72c9571aca85614b998a214f15424151b3f0b1fc5a90384a9acf3debc0db3fc46078018ebc74d565e4006298d7e8091fd6b7ec5fe9bd495495495647612c3209e352ad532a7aa6d5fd85204e43aef3e65ad6c7ac7e1531a6524fd4fe64591ab2d1edfcc9575887bd8dc26a1f9352236725325231ea9022975882c11da6130227a61b8fb47745c6a7eb67b649d942043fd22412a538614da24f8df0a9ee0d96b2a94f6a9dcc00f6a576fc7c1d75aed395de74a6a52e25bfdde93a5", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800c300741300000800c400010000000400c500"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r9, 0x4080aea2, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0xfe42, 0x5, 0x0, {0x0, 0x0, 0xbf7c}}, 0x30) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="04005080050008000200000005000800030000002000508011000100b73e004ff28fdedcf4d95ee14d00000005000900020000000a00060008021100000100000e000a003af8c6e3c5a2c313a57b0000"], 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) stat(&(0x7f00000001c0)='./file0\x00', 0x0) stat(&(0x7f0000000280)='./file0\x00', 0x0) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b12d25a80648c2594f90124fc60100c03400f000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r11, &(0x7f0000000400), 0x8) listen(r11, 0x0) shutdown(r11, 0x0) 2m34.54139763s ago: executing program 9 (id=1543): socket$pptp(0x18, 0x1, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4048010) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050800000000000000000000000005000400000000000900020073797a3000000000140007800800134000000000080006400000000005000500"], 0x5c}}, 0x0) socket$kcm(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x90}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000920000001"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xcd1d, 0x10100, 0x1}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r8, r9, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index=0x5, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) io_uring_enter(r7, 0x26c3, 0xdffffffb, 0x4c, 0x0, 0x0) 2m32.896062798s ago: executing program 9 (id=1548): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) r1 = syz_io_uring_setup(0xd6, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x3}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) 2m31.569797175s ago: executing program 9 (id=1552): r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000a80), 0x281, 0x0) write$vga_arbiter(r2, &(0x7f00000000c0)=ANY=[], 0x14) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, &(0x7f0000000340)}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40840) r4 = syz_io_uring_setup(0xb7f, &(0x7f0000000180)={0x0, 0x38ab, 0x80, 0x0, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0xd}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r7, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r8, 0x0, 0x0, 0x0) shutdown(r8, 0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r8, 0x84, 0xd, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 2m29.606234614s ago: executing program 9 (id=1556): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="140100001b000100000000000000000001010d00000000000000140003002001000000000000000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58100034be31d750351dc076eb43d9621dc08c029d1608a487f26fbe5856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd000000475ef96069f5bbb775e6d4592708880d36264c19f18556f06fd2c2e251aca1e550c026cf9849f3a3a10c66f28d14121ffaed230f483e8ffa62ae6c3ace25c321312f7ef248a19e03f39a0b7f7b387fa50ae8f8eb010a81fcae41884d408e1fe4c284a833743d9c1448fd1a1f7f67296dc82b8b0284cb8fd5fa"], 0x114}], 0x1}, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8880) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x200800) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000500)={r5, 0x1, 0x0, 0x14000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}]}, 0x48}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400004902bf43e9e8c9065e438d6a8e7d4301", @ANYRES16=r1, @ANYBLOB="0100ffffffff00000000010000000c000200040000000000000004000780"], 0x24}}, 0x20000000) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="0100259d7000fcdbdf250200000008000100", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r11, 0x200, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000000}, 0x4) 2m22.980021565s ago: executing program 38 (id=1535): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x0, &(0x7f0000000140)}) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800c300741300000800c400010000000400c500"], 0x3c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r9, 0x4080aea2, 0x0) write$FUSE_DIRENTPLUS(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0xfe42, 0x5, 0x0, {0x0, 0x0, 0xbf7c}}, 0x30) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="04005080050008000200000005000800030000002000508011000100b73e004ff28fdedcf4d95ee14d00000005000900020000000a00060008021100000100000e000a003af8c6e3c5a2c313a57b0000"], 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) stat(&(0x7f00000001c0)='./file0\x00', 0x0) stat(&(0x7f0000000280)='./file0\x00', 0x0) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030033000b12d25a80648c2594f90124fc60100c03400f000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r11, &(0x7f0000000400), 0x8) listen(r11, 0x0) shutdown(r11, 0x0) 2m12.635112914s ago: executing program 39 (id=1556): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x8880) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000480), 0x200800) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000500)={r5, 0x1, 0x0, 0x14000}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}}]}, 0x48}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400004902bf43e9e8c9065e438d6a8e7d4301", @ANYRES16=r1, @ANYBLOB="0100ffffffff00000000010000000c000200040000000000000004000780"], 0x24}}, 0x20000000) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="0100259d7000fcdbdf250200000008000100", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8004) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r11, 0x200, 0x70bd2d, 0x25dfdbfe, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000000}, 0x4) 1m57.758688025s ago: executing program 7 (id=1640): socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="02"], 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f00000002c0)='cgroup\x00'}, 0x30) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x60, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1ff}, 0x94) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB="020000007f250c10c4872da4b2fc99cedbeefca3f46640506d12", @ANYRESHEX=r2, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) sendmmsg$inet(r9, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r10, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 1m57.569203663s ago: executing program 7 (id=1641): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x7, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, 0x10) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x1, 0x2, 0xa}, {0x2}], 0x10, 0x8}, 0x94) r3 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x32}, 0x20) setsockopt$sock_attach_bpf(r3, 0x84, 0x6e, &(0x7f0000000000)=r6, 0x10) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r7, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r7, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0, 0x18}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x10, &(0x7f0000000000)=r10, 0x8) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r11, &(0x7f0000001c80)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x8000001, @private0, 0x3}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e24, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x7}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000800)='M', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r11, 0x1) getsockopt$inet_sctp6_SCTP_MAX_BURST(r11, 0x84, 0x83, &(0x7f00000002c0)=@assoc_value, &(0x7f0000000180)=0x8) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 1m57.319455439s ago: executing program 7 (id=1642): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) prlimit64(r0, 0xd, &(0x7f0000000140)={0x8, 0xa}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000480)={0x9, 0x9, {0x56, 0x7, 0x2, {0x5, 0x10}, {0x8, 0x80}, @cond=[{0x9, 0x8, 0x89cb, 0x2, 0xac09, 0x9}, {0x8, 0xfff1, 0x4, 0x8, 0x4, 0x40}]}, {0x53, 0x3, 0x3, {0x1000, 0x8}, {0x5, 0x169e}, @const={0x2, {0x8, 0xa12e, 0x7, 0xb9}}}}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000200)='source', &(0x7f00000007c0)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R\x11\xad\x89\xd1\xb8\xe0h\\.\xa3`fv\xdc\x8b\x18r\x8e\x9ac\x182q\xb8\xca\xb09Blk\x8e\xb1\xc3j\x03\xb7\x00\x00\x00\x00\x00\x00\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\b\xe0R\x9d\x18\x19a:\xa2\xa1\xcb\xd7jx\x94\v1\xb7\xb5\xdb\x9a\b\xf9\xb4\x8c\xab{\x1dU \r\xc1\x19!\x86~\xa9\x01\xda\x020\xe7\xc0\x9b\xf8NtV\xf5\xe7\xb2\xc6\x16A\xa9\xe8\xea\x95?I\xf9}\a\xc66}a)\xb4\xa9C\xc4\xfa\xf9L\x8d}\xf2>\xc5p4\x16\x91G\xe3\x9ef\xe7\xdc9;\x1c|\x1b.q\xb2\xc7\xed\xa8{\xac\x0e\xe5\xb7\x9d\xa4\xa6\xdd\xe4\x16\a\x13+\'\x05i\x7f\xd2\xc0\xd0f&\xbc\xd0M\xe9\x0e\x819\x02\x9b\xe6\xef\xe0\x1fD=A\xdf\x10\xd5]\xcbL|-\xe8\xf4Q\xd1\x0e\x81v]\xb9\xfc\xf0\x89\"\xc2]{\xa7\xe6:\x87\r\xf2-\xd1Z\xbd\xef\xe04\xa2\'\xca\x92\xe1\x91uy\xe1\x1d\xa7\x00\x00\x00\x00\x00\x00\xbeE\a\xd2\x96\xb3_)*\x1c\xf8Z\xbd\xfaI\xe4\x9c\xc93f\xe5\xd8\xdeXh\x9a\xd5\xd9n\x80\x00\x02\xc0 =W\xbcq\x19\x90\xd9\xdb\x87!\xees\xcajZ^\x94\"k\xaeqg\x92\x90\xa3!Z\xb5\xac\x8f\x9e\x8c8\x83 DI\x8c5\x9cwX\xb1_\xb0S\x15\x0f{\x1fa\x92 \xfa\xfa\x16izQ\xeaw\x967V\'\x11=\xac\xd1V*\xfeUt\xf9`\xb1+\xcc\x7f&j\x15T\xe5r\x8a{#\xf3\x8f\x8c/:\xb8\xf7\xad\xdc1\xd1U)\x9e\xa1\xad|\xf3\x83\xe3%\xc0\xbc\x91\xeaZox \xac\xfa}A\xb5\"B\xe6\x7f\xe9\xf0\xfc\xf2\\S\x1c\xc8\xe1\xa5\x8c\x84p]\xa9C\x13D\x1fa\xb8\xb7&(\xe9\xfcqx\xf4\xfe\xec\xd7\x99Fa\xf8\xee\xb1\xc3\xbb\x04PO\x91)G\xa0\x9a\x8e\x89h\xd3lE\x03\x1eJ\xc2\xa8N\xcd\x1a\\o\xb6\xef\xa2q$\xbdu\xa9\xd2', 0x0) recvfrom$inet(r2, &(0x7f0000000040)=""/34, 0x22, 0x10000, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x4, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_buf(r2, 0x0, 0x0, &(0x7f0000000400)=""/115, &(0x7f0000000240)=0x73) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000000)='erofs\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 1m19.398124011s ago: executing program 7 (id=1642): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) prlimit64(r0, 0xd, &(0x7f0000000140)={0x8, 0xa}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000480)={0x9, 0x9, {0x56, 0x7, 0x2, {0x5, 0x10}, {0x8, 0x80}, @cond=[{0x9, 0x8, 0x89cb, 0x2, 0xac09, 0x9}, {0x8, 0xfff1, 0x4, 0x8, 0x4, 0x40}]}, {0x53, 0x3, 0x3, {0x1000, 0x8}, {0x5, 0x169e}, @const={0x2, {0x8, 0xa12e, 0x7, 0xb9}}}}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000200)='source', &(0x7f00000007c0)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R\x11\xad\x89\xd1\xb8\xe0h\\.\xa3`fv\xdc\x8b\x18r\x8e\x9ac\x182q\xb8\xca\xb09Blk\x8e\xb1\xc3j\x03\xb7\x00\x00\x00\x00\x00\x00\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\b\xe0R\x9d\x18\x19a:\xa2\xa1\xcb\xd7jx\x94\v1\xb7\xb5\xdb\x9a\b\xf9\xb4\x8c\xab{\x1dU \r\xc1\x19!\x86~\xa9\x01\xda\x020\xe7\xc0\x9b\xf8NtV\xf5\xe7\xb2\xc6\x16A\xa9\xe8\xea\x95?I\xf9}\a\xc66}a)\xb4\xa9C\xc4\xfa\xf9L\x8d}\xf2>\xc5p4\x16\x91G\xe3\x9ef\xe7\xdc9;\x1c|\x1b.q\xb2\xc7\xed\xa8{\xac\x0e\xe5\xb7\x9d\xa4\xa6\xdd\xe4\x16\a\x13+\'\x05i\x7f\xd2\xc0\xd0f&\xbc\xd0M\xe9\x0e\x819\x02\x9b\xe6\xef\xe0\x1fD=A\xdf\x10\xd5]\xcbL|-\xe8\xf4Q\xd1\x0e\x81v]\xb9\xfc\xf0\x89\"\xc2]{\xa7\xe6:\x87\r\xf2-\xd1Z\xbd\xef\xe04\xa2\'\xca\x92\xe1\x91uy\xe1\x1d\xa7\x00\x00\x00\x00\x00\x00\xbeE\a\xd2\x96\xb3_)*\x1c\xf8Z\xbd\xfaI\xe4\x9c\xc93f\xe5\xd8\xdeXh\x9a\xd5\xd9n\x80\x00\x02\xc0 =W\xbcq\x19\x90\xd9\xdb\x87!\xees\xcajZ^\x94\"k\xaeqg\x92\x90\xa3!Z\xb5\xac\x8f\x9e\x8c8\x83 DI\x8c5\x9cwX\xb1_\xb0S\x15\x0f{\x1fa\x92 \xfa\xfa\x16izQ\xeaw\x967V\'\x11=\xac\xd1V*\xfeUt\xf9`\xb1+\xcc\x7f&j\x15T\xe5r\x8a{#\xf3\x8f\x8c/:\xb8\xf7\xad\xdc1\xd1U)\x9e\xa1\xad|\xf3\x83\xe3%\xc0\xbc\x91\xeaZox \xac\xfa}A\xb5\"B\xe6\x7f\xe9\xf0\xfc\xf2\\S\x1c\xc8\xe1\xa5\x8c\x84p]\xa9C\x13D\x1fa\xb8\xb7&(\xe9\xfcqx\xf4\xfe\xec\xd7\x99Fa\xf8\xee\xb1\xc3\xbb\x04PO\x91)G\xa0\x9a\x8e\x89h\xd3lE\x03\x1eJ\xc2\xa8N\xcd\x1a\\o\xb6\xef\xa2q$\xbdu\xa9\xd2', 0x0) recvfrom$inet(r2, &(0x7f0000000040)=""/34, 0x22, 0x10000, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x4, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_buf(r2, 0x0, 0x0, &(0x7f0000000400)=""/115, &(0x7f0000000240)=0x73) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000000)='erofs\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 38.802552877s ago: executing program 7 (id=1642): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) prlimit64(r0, 0xd, &(0x7f0000000140)={0x8, 0xa}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000480)={0x9, 0x9, {0x56, 0x7, 0x2, {0x5, 0x10}, {0x8, 0x80}, @cond=[{0x9, 0x8, 0x89cb, 0x2, 0xac09, 0x9}, {0x8, 0xfff1, 0x4, 0x8, 0x4, 0x40}]}, {0x53, 0x3, 0x3, {0x1000, 0x8}, {0x5, 0x169e}, @const={0x2, {0x8, 0xa12e, 0x7, 0xb9}}}}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000200)='source', &(0x7f00000007c0)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R\x11\xad\x89\xd1\xb8\xe0h\\.\xa3`fv\xdc\x8b\x18r\x8e\x9ac\x182q\xb8\xca\xb09Blk\x8e\xb1\xc3j\x03\xb7\x00\x00\x00\x00\x00\x00\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\b\xe0R\x9d\x18\x19a:\xa2\xa1\xcb\xd7jx\x94\v1\xb7\xb5\xdb\x9a\b\xf9\xb4\x8c\xab{\x1dU \r\xc1\x19!\x86~\xa9\x01\xda\x020\xe7\xc0\x9b\xf8NtV\xf5\xe7\xb2\xc6\x16A\xa9\xe8\xea\x95?I\xf9}\a\xc66}a)\xb4\xa9C\xc4\xfa\xf9L\x8d}\xf2>\xc5p4\x16\x91G\xe3\x9ef\xe7\xdc9;\x1c|\x1b.q\xb2\xc7\xed\xa8{\xac\x0e\xe5\xb7\x9d\xa4\xa6\xdd\xe4\x16\a\x13+\'\x05i\x7f\xd2\xc0\xd0f&\xbc\xd0M\xe9\x0e\x819\x02\x9b\xe6\xef\xe0\x1fD=A\xdf\x10\xd5]\xcbL|-\xe8\xf4Q\xd1\x0e\x81v]\xb9\xfc\xf0\x89\"\xc2]{\xa7\xe6:\x87\r\xf2-\xd1Z\xbd\xef\xe04\xa2\'\xca\x92\xe1\x91uy\xe1\x1d\xa7\x00\x00\x00\x00\x00\x00\xbeE\a\xd2\x96\xb3_)*\x1c\xf8Z\xbd\xfaI\xe4\x9c\xc93f\xe5\xd8\xdeXh\x9a\xd5\xd9n\x80\x00\x02\xc0 =W\xbcq\x19\x90\xd9\xdb\x87!\xees\xcajZ^\x94\"k\xaeqg\x92\x90\xa3!Z\xb5\xac\x8f\x9e\x8c8\x83 DI\x8c5\x9cwX\xb1_\xb0S\x15\x0f{\x1fa\x92 \xfa\xfa\x16izQ\xeaw\x967V\'\x11=\xac\xd1V*\xfeUt\xf9`\xb1+\xcc\x7f&j\x15T\xe5r\x8a{#\xf3\x8f\x8c/:\xb8\xf7\xad\xdc1\xd1U)\x9e\xa1\xad|\xf3\x83\xe3%\xc0\xbc\x91\xeaZox \xac\xfa}A\xb5\"B\xe6\x7f\xe9\xf0\xfc\xf2\\S\x1c\xc8\xe1\xa5\x8c\x84p]\xa9C\x13D\x1fa\xb8\xb7&(\xe9\xfcqx\xf4\xfe\xec\xd7\x99Fa\xf8\xee\xb1\xc3\xbb\x04PO\x91)G\xa0\x9a\x8e\x89h\xd3lE\x03\x1eJ\xc2\xa8N\xcd\x1a\\o\xb6\xef\xa2q$\xbdu\xa9\xd2', 0x0) recvfrom$inet(r2, &(0x7f0000000040)=""/34, 0x22, 0x10000, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x4, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_buf(r2, 0x0, 0x0, &(0x7f0000000400)=""/115, &(0x7f0000000240)=0x73) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000000)='erofs\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 7.97203486s ago: executing program 4 (id=1890): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000400700000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) r3 = open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) mknodat(r3, &(0x7f0000000040)='./file0\x00', 0x800, 0x5) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) socket$rxrpc(0x21, 0x2, 0x2) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="b9"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=fscache']) creat(&(0x7f0000000140)='./file0\x00', 0x50) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast1}, {0x4e24, 0x17c1, 0x1c, 0x0, @gue={{0x1, 0x0, 0x3, 0xfc, 0x0, @void}, "0016b96340595da9d289036d1e8487ba"}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000000600000003"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x17, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000980)='sys_enter\x00', r7}, 0x18) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0) 7.772624519s ago: executing program 4 (id=1891): r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) sendto$inet6(r0, &(0x7f0000000100)="bc", 0x1, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0x1}, 0x1c) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) 7.413765821s ago: executing program 4 (id=1892): setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x8, 0x4) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000f00)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) umount2(&(0x7f0000000040)='.\x00', 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f000840031b000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) chown(0x0, 0x0, 0xee01) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0xc0403d08, 0xffffffffffffffff) chdir(0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x403, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x6}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}]}}}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64], 0x80}}, 0x0) 5.559585636s ago: executing program 4 (id=1895): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020100020a000000000000d90b22178b2b02f7003320000002004e20ac141429000000000000000005000500000000000a0000000000000000000000000000000000ffffffffffff0000000000000000"], 0x50}, 0x1, 0x7}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 4.618321973s ago: executing program 1 (id=1896): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) r1 = socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r4 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x202) ioctl$SG_GET_PACK_ID(r4, 0x227c, &(0x7f0000000000)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) (async) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @dev}, 0x10) close(r1) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x85, 0x4}, {0x0, 0x8}}}}, 0x11) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x667, @rand_addr=' \x01\x00'}, 0x1c) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) 4.335468707s ago: executing program 8 (id=1899): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000100000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000022c0)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f0000000a0000000d0085a168d0bf46d32345653600648d040005000209000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000402160005000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x268803, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) close(r6) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae01, 0x1) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION2(r6, 0x40a0ae49, &(0x7f0000000080)={0xfb7f0000, 0x4, 0x3000, 0x2000, &(0x7f000060b000/0x2000)=nil, 0x8000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x100f, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0xb, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x9, 0x10000, 0x6, 0x5, 0x6, 0x12d432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x2, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x1, 0x42, 0x3], [0x7, 0x408, 0x4, 0x7, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x2, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0xf8, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x5, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0xfffff800, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x80b, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x10000226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x1fd, 0xffff343e, 0xfff]}, 0x45c) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff}, 0x6) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000bada5baa07ff23260715ff6c01f162095fbe", @ANYRES16, @ANYBLOB="010000000000ffdbdf2503000000300001801c00028008000200a90f0000080001000800000008000300000c00000d0001007564703a73797a3100000000"], 0x44}}, 0x10) 4.210632352s ago: executing program 0 (id=1900): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x42280, 0x0) close(r2) ioctl$KVM_CHECK_EXTENSION(r3, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000040)={0x0, 0x399000, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) r4 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0xb, 0x4, @tid=r4}, &(0x7f0000044000)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = fanotify_init(0x4, 0x101000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r8 = dup(r7) r9 = fanotify_init(0x4, 0x101000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r11 = dup(r10) fanotify_mark(r9, 0x1, 0x1, r11, 0x0) fanotify_mark(r6, 0x1, 0x1, r8, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 4.123988667s ago: executing program 1 (id=1901): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000400700000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) r3 = open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) mknodat(r3, &(0x7f0000000040)='./file0\x00', 0x800, 0x5) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) socket$rxrpc(0x21, 0x2, 0x2) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="b9"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=fscache']) creat(&(0x7f0000000140)='./file0\x00', 0x50) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast1}, {0x4e24, 0x17c1, 0x1c, 0x0, @gue={{0x1, 0x0, 0x3, 0xfc, 0x0, @void}, "0016b96340595da9d289036d1e8487ba"}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000000600000003"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x17, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000980)='sys_enter\x00', r7}, 0x18) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0) 3.758083856s ago: executing program 1 (id=1902): r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x121200, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r4, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r4], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x70, 0x28, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r7, {0xfff3, 0x9}, {}, {0x2, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44, 0x2, [@TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7b49, 0x20000000, 0x1, 0x2, 0xcd69, {0x92, 0x2, 0x2, 0x0, 0x7, 0x8}, {0x7, 0x1, 0xffff, 0x1, 0x1000, 0x10}, 0x7, 0x0, 0x101}}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x810}, 0x8c4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r8, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002400)={0x0, 0x0, 0x0}, &(0x7f0000002440)=0xc) r10 = geteuid() r11 = getgid() newfstatat(0xffffffffffffff9c, &(0x7f00000026c0)='./file0\x00', &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x3000) r13 = getuid() r14 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r14, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="2c01"]) read$FUSE(r14, &(0x7f00000093c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000041c0)) write$FUSE_INIT(r14, &(0x7f0000004200)={0x50, 0x0, r15, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r14, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r14, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0x0, 0x0, [{{0x1ffffffffffc, 0x0, 0x0, 0x2, 0x5, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6000, 0x0, 0x0, r16, 0x2002, 0x10000000}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002a00)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000002b00)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002b40)={0x0, 0x0, 0x0}, &(0x7f0000002b80)=0xc) syz_fuse_handle_req(r0, &(0x7f0000000400)="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", 0x2000, &(0x7f0000002d00)={&(0x7f0000000040)={0x50, 0xfffffffffffffff5, 0x452ccfec, {0x7, 0x2b, 0x18, 0x40008, 0x9, 0x193, 0x10000, 0x4, 0x0, 0x0, 0x1, 0x1ff}}, &(0x7f00000000c0)={0x18, 0x0, 0x4e, {0x5}}, &(0x7f0000000100)={0x18, 0x0, 0x10000, {0x9}}, &(0x7f0000000180)={0x18, 0x0, 0x6, {0x7}}, &(0x7f00000001c0)={0x18, 0x0, 0xb, {0x200}}, &(0x7f0000000200)={0x28, 0xb, 0x3, {{0x8, 0x1, 0x0, r1}}}, &(0x7f0000000280)={0x60, 0xfffffffffffffffe, 0xf16f, {{0x9, 0xc07, 0x0, 0x7f, 0x0, 0x7, 0x8, 0x2}}}, &(0x7f0000000300)={0x18, 0x0, 0x59d79621, {0x6}}, &(0x7f0000000340)={0x15, 0x0, 0x5, {'syz2\x00'}}, &(0x7f0000000380)={0x20, 0x0, 0x3ff, {0x0, 0xc}}, &(0x7f0000002480)={0x78, 0x0, 0x3, {0x2, 0x3ff, 0x0, {0x1, 0x5ff, 0x200, 0x4, 0x8, 0x4, 0x7, 0xfed3, 0x6, 0xd44734a89f2e8091, 0x2, r8, r9, 0x8, 0x3}}}, &(0x7f0000002500)={0x90, 0x0, 0x7, {0x1, 0x1, 0x3, 0x2535, 0x2, 0x0, {0x5, 0xfb6, 0xfffffffffffffff2, 0xfff, 0x4, 0x1, 0x7, 0x5ea, 0x6, 0x8000, 0x5, r10, 0xee01, 0x44, 0xfffffffa}}}, &(0x7f00000025c0)={0xd0, 0x0, 0x6, [{0x4, 0x4a29, 0x5, 0x0, 'syz2\x00'}, {0x3, 0x0, 0x5, 0x4, 'syz2\x00'}, {0x1, 0x9, 0xa, 0x2, '+}!-}-\\-^.'}, {0x4, 0x2, 0x5, 0x4, 'syz2\x00'}, {0x4, 0x80000001, 0x0, 0xb}, {0x5, 0x2, 0x5, 0x9, 'syz2\x00'}]}, &(0x7f0000002780)={0x150, 0x0, 0x7ff, [{{0x0, 0x1, 0x8, 0x7, 0x38000, 0x6, {0x0, 0x6f2, 0x1ff, 0xffffffffffffffff, 0x6, 0x0, 0x4, 0x39, 0x1, 0x8000, 0x8, 0xffffffffffffffff, r11, 0x400, 0x4d5}}, {0x3, 0x0, 0x5, 0x5, 'syz2\x00'}}, {{0x1, 0x1, 0x1, 0xc60, 0x2, 0x6f3, {0x1, 0xfffffffffffffff7, 0x5, 0x1, 0x8, 0x2, 0xac, 0x6, 0xb, 0x2000, 0x3, r12, 0xffffffffffffffff, 0x80, 0x9}}, {0x1, 0x9, 0x5, 0xffffffff, 'syz2\x00'}}]}, &(0x7f0000002900)={0xa0, 0xfffffffffffffffe, 0x0, {{0x5, 0x2, 0x6, 0x0, 0x3, 0xc997, {0x1, 0x100000000, 0xfffffffffffffffd, 0x6, 0x1, 0x5, 0x4, 0x81, 0x6, 0x2000, 0x10001, r13, r16, 0x1, 0x82df1ba}}, {0x0, 0x7}}}, &(0x7f00000029c0)={0x20, 0x0, 0x7fff, {0xfffff000, 0x0, 0xb, 0x200000}}, &(0x7f0000002bc0)={0x130, 0x0, 0x7, {0x0, 0x0, 0x0, '\x00', {0x200, 0x9d, 0x39a, 0x2, r17, r18, 0x0, '\x00', 0x0, 0x1, 0x8, 0xa30, {0x100, 0x7}, {0x100, 0xc23}, {0xfffffffffffffd3f, 0xfffffffb}, {0x7aba, 0x9}, 0x1, 0x3, 0x7, 0x2008}}}}) 3.666554612s ago: executing program 0 (id=1903): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@mcast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x80000, 0x7fff, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1000}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = epoll_create1(0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, r4, 0x401, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x34}}, 0x0) epoll_pwait(r3, &(0x7f0000000140)=[{}], 0x1, 0x2, 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x4, @empty}}, 0x7}, &(0x7f0000000200)=0x90) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000000)={0xa0000001}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_COPY(r8, 0xc028aa05, &(0x7f0000000600)={&(0x7f000036a000/0x2000)=nil, &(0x7f00003ab000/0x1000)=nil, 0x2000, 0x3}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000300)={0x40000004}) 3.494605909s ago: executing program 7 (id=1642): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)=0x0) prlimit64(r0, 0xd, &(0x7f0000000140)={0x8, 0xa}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000480)={0x9, 0x9, {0x56, 0x7, 0x2, {0x5, 0x10}, {0x8, 0x80}, @cond=[{0x9, 0x8, 0x89cb, 0x2, 0xac09, 0x9}, {0x8, 0xfff1, 0x4, 0x8, 0x4, 0x40}]}, {0x53, 0x3, 0x3, {0x1000, 0x8}, {0x5, 0x169e}, @const={0x2, {0x8, 0xa12e, 0x7, 0xb9}}}}) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000200)='source', &(0x7f00000007c0)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R\x11\xad\x89\xd1\xb8\xe0h\\.\xa3`fv\xdc\x8b\x18r\x8e\x9ac\x182q\xb8\xca\xb09Blk\x8e\xb1\xc3j\x03\xb7\x00\x00\x00\x00\x00\x00\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\b\xe0R\x9d\x18\x19a:\xa2\xa1\xcb\xd7jx\x94\v1\xb7\xb5\xdb\x9a\b\xf9\xb4\x8c\xab{\x1dU \r\xc1\x19!\x86~\xa9\x01\xda\x020\xe7\xc0\x9b\xf8NtV\xf5\xe7\xb2\xc6\x16A\xa9\xe8\xea\x95?I\xf9}\a\xc66}a)\xb4\xa9C\xc4\xfa\xf9L\x8d}\xf2>\xc5p4\x16\x91G\xe3\x9ef\xe7\xdc9;\x1c|\x1b.q\xb2\xc7\xed\xa8{\xac\x0e\xe5\xb7\x9d\xa4\xa6\xdd\xe4\x16\a\x13+\'\x05i\x7f\xd2\xc0\xd0f&\xbc\xd0M\xe9\x0e\x819\x02\x9b\xe6\xef\xe0\x1fD=A\xdf\x10\xd5]\xcbL|-\xe8\xf4Q\xd1\x0e\x81v]\xb9\xfc\xf0\x89\"\xc2]{\xa7\xe6:\x87\r\xf2-\xd1Z\xbd\xef\xe04\xa2\'\xca\x92\xe1\x91uy\xe1\x1d\xa7\x00\x00\x00\x00\x00\x00\xbeE\a\xd2\x96\xb3_)*\x1c\xf8Z\xbd\xfaI\xe4\x9c\xc93f\xe5\xd8\xdeXh\x9a\xd5\xd9n\x80\x00\x02\xc0 =W\xbcq\x19\x90\xd9\xdb\x87!\xees\xcajZ^\x94\"k\xaeqg\x92\x90\xa3!Z\xb5\xac\x8f\x9e\x8c8\x83 DI\x8c5\x9cwX\xb1_\xb0S\x15\x0f{\x1fa\x92 \xfa\xfa\x16izQ\xeaw\x967V\'\x11=\xac\xd1V*\xfeUt\xf9`\xb1+\xcc\x7f&j\x15T\xe5r\x8a{#\xf3\x8f\x8c/:\xb8\xf7\xad\xdc1\xd1U)\x9e\xa1\xad|\xf3\x83\xe3%\xc0\xbc\x91\xeaZox \xac\xfa}A\xb5\"B\xe6\x7f\xe9\xf0\xfc\xf2\\S\x1c\xc8\xe1\xa5\x8c\x84p]\xa9C\x13D\x1fa\xb8\xb7&(\xe9\xfcqx\xf4\xfe\xec\xd7\x99Fa\xf8\xee\xb1\xc3\xbb\x04PO\x91)G\xa0\x9a\x8e\x89h\xd3lE\x03\x1eJ\xc2\xa8N\xcd\x1a\\o\xb6\xef\xa2q$\xbdu\xa9\xd2', 0x0) recvfrom$inet(r2, &(0x7f0000000040)=""/34, 0x22, 0x10000, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x4, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r7, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_buf(r2, 0x0, 0x0, &(0x7f0000000400)=""/115, &(0x7f0000000240)=0x73) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000000)='erofs\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) 3.258556648s ago: executing program 8 (id=1904): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fbdbdf250700000008000500020000000a0004007770616e3400000008000300", @ANYRES32=0x0, @ANYBLOB="0c001700010055555555555508000500020000000c001707000001"], 0x58}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0) r2 = openat$smackfs_ipv6host(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_ipv6host(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='0x0000000000000002:0x0000000000000007:0x0000000000000007:0x0000000000000004:0x000000000000000c:0x0000000000000401:0x0000000000000004:0x000100000000008a/00000000000000000032 )'], 0xd2) ioctl$TUNSETPERSIST(r0, 0x400454ce, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x28, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x2, 0x5, 0x4e23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc00c4}, 0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000100)={@loopback, @initdev, 0x0}, &(0x7f0000000140)=0xc) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x70, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4044085) 2.153910692s ago: executing program 1 (id=1905): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4895) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shmdt(0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) kcmp(0x0, 0xffffffffffffffff, 0x3, r1, r0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) dup(r2) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="2b534400a212d1f824d18e530aef16715da54b", 0x13}, {&(0x7f00000005c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c", 0x4a}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5", 0x96}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416ad", 0x95}, {&(0x7f0000000800)="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", 0x11d}], 0x5}}], 0x1, 0xc0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.153645178s ago: executing program 0 (id=1906): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0xc9}], 0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0xe1ced000) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x66, 0x2, 0x8, 0x42}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000140), &(0x7f0000000200)=""/137, 0x2}, 0x20) (async) close(r1) 2.152041787s ago: executing program 8 (id=1907): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) lsm_list_modules(&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=0xfffffffffffffc29, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000a00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x578, 0x1a0, 0x3f8, 0x2b8, 0x0, 0xd0, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, 0x0, {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x10}, [0xffffffff, 0xffffffff, 0x7f000101, 0xff000000], [0xffffff00, 0xffffffff, 0xff000000, 0xff000000], 'pimreg\x00', 'veth1_to_bridge\x00', {}, {}, 0xfd, 0xff, 0x2, 0x8}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x5, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@private=0xa010101, 0x21, 0x3b, 0x200}}}, {{@uncond, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@hbh={{0x48}, {0x9, 0x2, 0x1, [0x8, 0xff, 0x10, 0x1, 0x2800, 0xc, 0xfffb, 0xff93, 0x7, 0x0, 0x81, 0x6, 0x0, 0x5, 0x7f, 0x200], 0x10}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x3, 0x2, 0x17c, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, 0x0, &(0x7f0000001000)=0x8b00) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f00000000c0)=0xd95, 0x4019e2060d4e3ac7) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000240)="94", 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000ff850000002d00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r3}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000080), &(0x7f0000000180)=r3}, 0x20) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) 2.127757755s ago: executing program 4 (id=1908): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x2c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x2c}}, 0x0) (fail_nth: 1) 1.647529552s ago: executing program 0 (id=1909): r0 = socket$inet_tcp(0x2, 0x1, 0x0) add_key$user(&(0x7f0000000400), 0x0, 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) r1 = getpid() ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x7ffd, 0xc5fb, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000000)="b6b068", 0x3, 0xfffffffffffffffe) iopl(0x3) syz_emit_vhci(&(0x7f0000000880)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1}}}, 0x4) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f00000000c0)=""/83, 0x53, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='ecryptfs\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000780)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)={0x100, 0x1b, 0x2, 0x70bd2a, 0x25dfdbfc, {0x5}, [@nested={0xe3, 0x135, 0x0, 0x1, [@generic="67a6bda7a7bd06e2", @generic="3390b5e8d300188b11658f7d1933a84e53c95ef6f257751b35dbeb17b380d08323e8be94fa5b8d4091850819f3a9ae7a808bfb9929f37de09d904a20e48631799c0c9e148c8401c97b7e8f7d301a9dfa898bf3996dcab763ff7011348ccc096ee079d68d423b3147af4390c4b474a2674e659acfea12bf5c8520b2cf8e7ad76a1665dc59287ab28ffddea0722f2fea0953f995e5bafc1547b1d69e388a9e0b7f28666b30c6e2ac99a66f38fd9dd27d963583751950ba0c44976025d60c46d49f8600cf338601f0df1d8eda0de3263b12b47ba2302d3f05"]}, @typed={0x8, 0x119, 0x0, 0x0, @pid=r1}]}, 0x100}, 0x1, 0x0, 0x0, 0x20008850}, 0x20040040) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x11, r0, 0xcefec000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000fc0)=ANY=[@ANYBLOB="726177020000000000e2ff65490000000000000000001a00000000000000000002"], 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=@newspdinfo={0x3c, 0x24, 0x100, 0x70bd2b, 0x25dfdbfd, 0x9c, [@XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000000)={0x2, 0x5}) 1.647190889s ago: executing program 8 (id=1910): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000000080)={0x6, 0x118, 0xfa00, {{0x1, 0x100, "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", 0x55, 0x0, 0x5, 0x0, 0x5, 0xb, 0x4, 0x1}}}, 0x120) 1.646472267s ago: executing program 4 (id=1911): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) open_by_handle_at(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="1453b8ded6a0cf2ba62664000000010000001500000010000400060000"], 0x60380) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x8}}, 0x20) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x680, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) ioctl$TIOCMGET(r5, 0x5415, 0x0) symlink(0x0, &(0x7f00000000c0)='./file1\x00') listen(r0, 0x9) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r7, 0xc0a85320, &(0x7f0000000180)={{0x80}, 'port0\x00', 0x7e, 0xa1c07, 0x6, 0x0, 0x100000}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x300, 0x0) 1.412862049s ago: executing program 8 (id=1912): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000400700000000000000000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) r3 = open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) mknodat(r3, &(0x7f0000000040)='./file0\x00', 0x800, 0x5) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) socket$rxrpc(0x21, 0x2, 0x2) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="b9"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=fscache']) creat(&(0x7f0000000140)='./file0\x00', 0x50) syz_emit_ethernet(0x3e, &(0x7f0000000380)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast1}, {0x4e24, 0x17c1, 0x1c, 0x0, @gue={{0x1, 0x0, 0x3, 0xfc, 0x0, @void}, "0016b96340595da9d289036d1e8487ba"}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a000000040000000600000003"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x17, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000980)='sys_enter\x00', r7}, 0x18) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x0) 1.145862331s ago: executing program 8 (id=1913): mount$cgroup(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000001c0), 0x8000, &(0x7f0000000100)={[{@name={'name', 0x3d, '.{;$%$:+/^'}}]}) r0 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x1, @multicast}, 0x5d, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x80}}}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x6, @local}, 0x4a, {0x2, 0x4e21, @private=0xa010100}, 'veth1_to_hsr\x00'}) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet6(0x10, 0x2, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0x400000}) kexec_load(0x0, 0x0, 0x0, 0x3e0000) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r3) sendmsg$NFC_CMD_ACTIVATE_TARGET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x800) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r3, 0x0, 0x24004080) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000540)="0000000000000004ff6943b80004000802ab000028f600000000860700000007", 0x20, r2) add_key$keyring(&(0x7f00000006c0), &(0x7f0000000700)={'syz', 0x3}, 0x0, 0x0, r2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001e00)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3, {0x1}}, {0xc}}}]}]}, 0x48}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000740)={0x0, 0x0}) capset(&(0x7f00000007c0)={0x20071026, r6}, &(0x7f0000000800)={0x6, 0x2, 0x401, 0x101, 0x1, 0x72a}) syz_usb_connect$printer(0x49c8ddb2650d910c, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x9, 0x0, 0x67, [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0xff, 0x1e, 0x9}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x200, 0xb, 0xfc, 0x2, 0x40, 0x3}, 0x33, &(0x7f00000000c0)={0x5, 0xf, 0x33, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x10, 0x5, 0xb4, 0xb09, 0xf7}, @wireless={0xb, 0x10, 0x1, 0x2, 0x9, 0x0, 0x9c, 0x5a, 0xf6}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0x8, 0x6}, @wireless={0xb, 0x10, 0x1, 0x2, 0x4, 0x2, 0x0, 0x6, 0x95}, @ptm_cap={0x3}]}, 0xa, [{0xd, &(0x7f0000000140)=@string={0xd, 0x3, "045ff5d67a1e531b631bb9"}}, {0xdb, &(0x7f0000000200)=@string={0xdb, 0x3, "3fa685752628aaddb4889d80cc9a7f107cf3091b2c4888edce2c14699936eec085c091db4588fa879efa04edde812a113e3d77cdc2c53b81eed49cc9dc3f3ff892483e48a43c22241ceeb6f41d8f58c96a4044d831e6877b402cb260fa567067f94aa0347e2892310127070e67e3d1c0c9e8194128a0813837f02eb81a9ce6f3f5665bfdcf37e46c994a8971dc14ff275fea2472b09b1b059fc93001bef5f6047e53365bd076126cd6b3477598eb2df81a4ec7d0a927dbf4243a09bbdd579c7138417508e895b549ff3e3f1e0e87c97928f9b33b730c6b607f"}}, {0x93, &(0x7f0000000300)=@string={0x93, 0x3, "d02684a76148749fb98ca2a05a8654d8c489d5e9bfc00b817e52b3b87dab0ab5a109199d7cee8931afad743298893029c4a26b74570891fac6dcb5e31894f949a923accaee230c83b29a16e6c2944fefb74615b0ca9ee0be1e02232a02b651eb86dd223b14b1e3b2c584b692f5480cf4ee7b796935b51d9a82f457effebe14e3d165c37d60744716eca7903c07985e1e2e"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x42a}}, {0x15, &(0x7f0000000400)=@string={0x15, 0x3, "537de2d416561592fa503efce7a462f89d350d"}}, {0xf8, &(0x7f0000000440)=@string={0xf8, 0x3, "48039deab23145ec77583e0941f1bed3df1e75270ad0999fd69a98170224772c34f9277ebfdd445609c56526da89a9956f5cac572faebc2cb3af10bb35940464d153a1f64779e824a674ac0e4944077bec04633e2b8fcbfa846d96b81b35995d9d82dba89a1c0056837c33ddc343e341b2aeb79f1386d3a9150322b20a3163e800a6efb71f8445da2a553712e165fad35b2576b564a9cf0bf23fec8df15fddef7164742159e8606e5636eb608b38796a8d3e6f6d379d138a3d18118ed036cd28a070805ac8b3c42d21ffdf5cddc778377df470cb5894f44d58cc988cbccf04bbd4a5a6a1ce4ddfb392d84f8280bea04805c1217a543a"}}, {0x14, &(0x7f0000000540)=@string={0x14, 0x3, "a49951d8046696191a3b269cf440dc7eb119"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xfcff}}]}) 1.110946093s ago: executing program 0 (id=1914): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, 0x10) fsopen(&(0x7f00000000c0)='ceph\x00', 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r2, &(0x7f0000000cc0)=[{{&(0x7f0000000700)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, 0x0}}], 0x1, 0x48094) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r3 = syz_open_dev$MSR(&(0x7f0000000280), 0xfffffffffffffffd, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x62881, 0x19d) write$P9_RREADLINK(r4, 0x0, 0x0) write$cgroup_int(r4, &(0x7f00000002c0)=0x401, 0x12) openat$snapshot(0xffffffffffffff9c, 0x0, 0xc2d41, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) setresgid(0xee00, 0xee01, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000700), 0xffffffffffffffff) 1.109484343s ago: executing program 1 (id=1915): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4895) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shmdt(0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) kcmp(0x0, 0xffffffffffffffff, 0x3, r1, r0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) dup(r2) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="2b534400a212d1f824d18e530aef16715da54b", 0x13}, {&(0x7f00000005c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c", 0x4a}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5", 0x96}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416ad", 0x95}, {&(0x7f0000000800)="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", 0x11d}], 0x5}}], 0x1, 0xc0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 74.945372ms ago: executing program 1 (id=1916): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000280)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080), &(0x7f0000000480)=ANY=[], 0xc, 0x1) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000140)='./file0\x00', 0x1800) 0s ago: executing program 0 (id=1917): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fbdbdf250700000008000500020000000a0004007770616e3400000008000300", @ANYRES32=0x0, @ANYBLOB="0c001700010055555555555508000500020000000c001707000001"], 0x58}, 0x1, 0x0, 0x0, 0x2}, 0x300048c0) r2 = openat$smackfs_ipv6host(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$smackfs_ipv6host(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='0x0000000000000002:0x0000000000000007:0x0000000000000007:0x0000000000000004:0x000000000000000c:0x0000000000000401:0x0000000000000004:0x000100000000008a/00000000000000000032 )'], 0xd2) ioctl$TUNSETPERSIST(r0, 0x400454ce, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x28, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x2, 0x5, 0x4e23}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc00c4}, 0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000100)={@loopback, @initdev, 0x0}, &(0x7f0000000140)=0xc) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x70, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x70}, 0x1, 0x0, 0x0, 0x1}, 0x4044085) kernel console output (not intermixed with test programs): e8d, idProduct=db1a, bcdDevice=61.23 [ 597.245500][ T9] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 597.270010][ T5962] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.462961][ T9] usb 9-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 597.513782][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 598.075304][ T9] usb 9-1: config 0 descriptor?? [ 598.092875][ T5962] usb 8-1: GET_CAPABILITIES returned 0 [ 598.098449][ T5962] usbtmc 8-1:16.0: can't read capabilities [ 598.634816][T11523] lo speed is unknown, defaulting to 1000 [ 598.635164][ T5962] usb 8-1: USB disconnect, device number 21 [ 598.890428][T11523] lo speed is unknown, defaulting to 1000 [ 599.240911][T11530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1391'. [ 600.457151][T11536] IPVS: stopping backup sync thread 11547 ... [ 600.464994][T11547] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 600.882048][ T9] usb 9-1: can't set config #0, error -71 [ 600.899931][ T9] usb 9-1: USB disconnect, device number 17 [ 601.532175][T11552] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 603.843502][T11582] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ÿÿÿÿ [ 604.269754][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 604.269773][ T30] audit: type=1326 audit(1751619136.832:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11580 comm="syz.0.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c278e929 code=0x7ffc0000 [ 604.845474][ T30] audit: type=1326 audit(1751619136.832:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11580 comm="syz.0.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa5c278e929 code=0x7ffc0000 [ 604.970111][ T30] audit: type=1326 audit(1751619136.832:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11580 comm="syz.0.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c278e929 code=0x7ffc0000 [ 605.086676][ T30] audit: type=1326 audit(1751619136.832:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11580 comm="syz.0.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa5c278e929 code=0x7ffc0000 [ 606.201898][ T30] audit: type=1326 audit(1751619136.832:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11580 comm="syz.0.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c278e929 code=0x7ffc0000 [ 606.223591][ C1] vkms_vblank_simulate: vblank timer overrun [ 606.318036][ T30] audit: type=1326 audit(1751619136.832:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11580 comm="syz.0.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa5c278e929 code=0x7ffc0000 [ 606.339904][ C1] vkms_vblank_simulate: vblank timer overrun [ 606.417228][ T30] audit: type=1326 audit(1751619136.832:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11580 comm="syz.0.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c278e929 code=0x7ffc0000 [ 606.502431][ T30] audit: type=1326 audit(1751619136.842:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11580 comm="syz.0.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa5c278e929 code=0x7ffc0000 [ 606.524708][ T30] audit: type=1326 audit(1751619136.842:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11580 comm="syz.0.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c278e929 code=0x7ffc0000 [ 606.553107][ T30] audit: type=1326 audit(1751619136.842:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11580 comm="syz.0.1406" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa5c278e929 code=0x7ffc0000 [ 613.420095][ T5962] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 613.570355][ T5962] usb 8-1: device descriptor read/64, error -71 [ 613.668422][T11659] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1428'. [ 613.684724][T11659] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1428'. [ 613.757521][T11663] 9pnet_fd: Insufficient options for proto=fd [ 613.810374][ T5962] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 613.970479][ T5962] usb 8-1: device descriptor read/64, error -71 [ 614.094762][ T5962] usb usb8-port1: attempt power cycle [ 614.139607][ T43] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 614.322557][ T43] usb 10-1: Using ep0 maxpacket: 32 [ 614.340424][ T43] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 614.358873][ T43] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 614.376357][ T43] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 614.393528][ T43] usb 10-1: Product: syz [ 614.402216][ T43] usb 10-1: Manufacturer: syz [ 614.416893][ T43] usb 10-1: SerialNumber: syz [ 614.436433][ T43] usb 10-1: config 0 descriptor?? [ 614.450355][ T5962] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 614.451515][T11665] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 614.471045][ T5962] usb 8-1: device descriptor read/8, error -71 [ 614.497503][ T43] hub 10-1:0.0: bad descriptor, ignoring hub [ 614.507092][ T43] hub 10-1:0.0: probe with driver hub failed with error -5 [ 614.549195][T11683] netlink: 788 bytes leftover after parsing attributes in process `syz.5.1436'. [ 614.720574][ T5962] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 614.743811][ T5962] usb 8-1: device descriptor read/8, error -71 [ 614.861898][ T977] usb 10-1: USB disconnect, device number 13 [ 614.871212][ T5962] usb usb8-port1: unable to enumerate USB device [ 615.021736][T11686] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1437'. [ 615.550343][ T5962] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 615.699448][ T5962] usb 10-1: device descriptor read/64, error -71 [ 615.830662][T11706] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1443'. [ 615.950422][ T5962] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 616.090177][ T5962] usb 10-1: device descriptor read/64, error -71 [ 616.216619][ T5962] usb usb10-port1: attempt power cycle [ 616.581913][ T5962] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 616.621349][ T5962] usb 10-1: device descriptor read/8, error -71 [ 616.720121][ T977] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 616.860716][ T5962] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 617.220661][ T977] usb 8-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice=e2.9e [ 617.265367][ T977] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.308624][ T977] usb 8-1: Product: syz [ 617.346108][ T5962] usb 10-1: device descriptor read/8, error -71 [ 617.354868][ T977] usb 8-1: Manufacturer: syz [ 617.398814][ T977] usb 8-1: SerialNumber: syz [ 617.440661][ T977] usb 8-1: config 0 descriptor?? [ 617.457279][ T977] f81232 8-1:0.0: f81232 converter detected [ 617.509948][ T5962] usb usb10-port1: unable to enumerate USB device [ 617.676102][ T977] usb 8-1: f81232 converter now attached to ttyUSB0 [ 617.700303][ T977] usb 8-1: USB disconnect, device number 26 [ 617.713498][ T977] f81232 ttyUSB0: f81232 converter now disconnected from ttyUSB0 [ 617.723597][ T977] f81232 8-1:0.0: device disconnected [ 618.147678][T11739] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1456'. [ 618.966774][T11758] 8021q: VLANs not supported on caif0 [ 619.476889][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 619.476943][ T30] audit: type=1800 audit(1751619152.062:361): pid=11766 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1464" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 619.710526][T11766] netlink: 'syz.5.1464': attribute type 21 has an invalid length. [ 620.208810][T11777] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1466'. [ 623.289069][T11785] lo speed is unknown, defaulting to 1000 [ 623.297687][T11785] lo speed is unknown, defaulting to 1000 [ 623.703627][T11791] netlink: 'syz.0.1471': attribute type 4 has an invalid length. [ 623.856635][T11791] netlink: 'syz.0.1471': attribute type 4 has an invalid length. [ 624.462455][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.484160][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.021663][T11803] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1474'. [ 627.076199][T11799] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1475'. [ 628.550622][T11819] overlayfs: workdir and upperdir must reside under the same mount [ 629.663580][T11819] usb usb8: usbfs: process 11819 (syz.9.1481) did not claim interface 0 before use [ 631.644187][T11860] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1494'. [ 631.931354][T11869] FAULT_INJECTION: forcing a failure. [ 631.931354][T11869] name failslab, interval 1, probability 0, space 0, times 0 [ 632.000116][T11869] CPU: 1 UID: 0 PID: 11869 Comm: syz.8.1496 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 632.000147][T11869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 632.000160][T11869] Call Trace: [ 632.000168][T11869] [ 632.000177][T11869] dump_stack_lvl+0x189/0x250 [ 632.000215][T11869] ? __pfx____ratelimit+0x10/0x10 [ 632.000245][T11869] ? __pfx_dump_stack_lvl+0x10/0x10 [ 632.000275][T11869] ? __pfx__printk+0x10/0x10 [ 632.000301][T11869] ? __mutex_trylock_common+0x153/0x260 [ 632.000369][T11869] should_fail_ex+0x414/0x560 [ 632.000400][T11869] should_failslab+0xa8/0x100 [ 632.000429][T11869] __kmalloc_cache_noprof+0x70/0x3d0 [ 632.000454][T11869] ? __hw_addr_add_ex+0x1f4/0x770 [ 632.000483][T11869] __hw_addr_add_ex+0x1f4/0x770 [ 632.000516][T11869] dev_addr_init+0x14f/0x230 [ 632.000545][T11869] ? __pfx_dev_addr_init+0x10/0x10 [ 632.000566][T11869] ? alloc_netdev_mqs+0xa6/0x11e0 [ 632.000610][T11869] alloc_netdev_mqs+0x2f3/0x11e0 [ 632.000636][T11869] ? __pfx_ip6erspan_tap_setup+0x10/0x10 [ 632.000670][T11869] rtnl_create_link+0x31f/0xd10 [ 632.000706][T11869] rtnl_newlink_create+0x25c/0xb00 [ 632.000734][T11869] ? __lock_acquire+0xab9/0xd20 [ 632.000767][T11869] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 632.000787][T11869] ? rtnl_newlink+0x8db/0x1c70 [ 632.000810][T11869] ? __pfx___mutex_lock+0x10/0x10 [ 632.000852][T11869] ? ns_capable+0x8a/0xf0 [ 632.000886][T11869] rtnl_newlink+0x16d6/0x1c70 [ 632.000908][T11869] ? netlink_sendmsg+0x805/0xb30 [ 632.000944][T11869] ? __pfx_rtnl_newlink+0x10/0x10 [ 632.000992][T11869] ? kasan_quarantine_put+0xdd/0x220 [ 632.001014][T11869] ? lockdep_hardirqs_on+0x9c/0x150 [ 632.001050][T11869] ? nlmon_xmit+0xb0/0x100 [ 632.001075][T11869] ? kmem_cache_free+0x18f/0x400 [ 632.001109][T11869] ? __local_bh_enable_ip+0x12d/0x1c0 [ 632.001138][T11869] ? lockdep_hardirqs_on+0x9c/0x150 [ 632.001168][T11869] ? __local_bh_enable_ip+0x12d/0x1c0 [ 632.001196][T11869] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 632.001230][T11869] ? __dev_queue_xmit+0x27e/0x3a70 [ 632.001257][T11869] ? __dev_queue_xmit+0x27e/0x3a70 [ 632.001280][T11869] ? __dev_queue_xmit+0x27e/0x3a70 [ 632.001308][T11869] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 632.001340][T11869] ? __lock_acquire+0xab9/0xd20 [ 632.001403][T11869] ? __pfx_rtnl_newlink+0x10/0x10 [ 632.001422][T11869] rtnetlink_rcv_msg+0x7cc/0xb70 [ 632.001459][T11869] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 632.001490][T11869] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 632.001530][T11869] ? ref_tracker_free+0x63a/0x7d0 [ 632.001553][T11869] ? __copy_skb_header+0xa7/0x550 [ 632.001579][T11869] ? __pfx_ref_tracker_free+0x10/0x10 [ 632.001604][T11869] ? __skb_clone+0x63/0x7a0 [ 632.001637][T11869] netlink_rcv_skb+0x205/0x470 [ 632.001659][T11869] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 632.001702][T11869] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 632.001736][T11869] ? netlink_deliver_tap+0x2e/0x1b0 [ 632.001755][T11869] ? netlink_deliver_tap+0x2e/0x1b0 [ 632.001781][T11869] netlink_unicast+0x758/0x8d0 [ 632.001856][T11869] netlink_sendmsg+0x805/0xb30 [ 632.001886][T11869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 632.001916][T11869] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 632.001939][T11869] ? __pfx_netlink_sendmsg+0x10/0x10 [ 632.001960][T11869] __sock_sendmsg+0x219/0x270 [ 632.001991][T11869] ____sys_sendmsg+0x505/0x830 [ 632.002019][T11869] ? __pfx_____sys_sendmsg+0x10/0x10 [ 632.002051][T11869] ? import_iovec+0x74/0xa0 [ 632.002083][T11869] ___sys_sendmsg+0x21f/0x2a0 [ 632.002108][T11869] ? __pfx____sys_sendmsg+0x10/0x10 [ 632.002188][T11869] ? __fget_files+0x2a/0x420 [ 632.002213][T11869] ? __fget_files+0x3a0/0x420 [ 632.002252][T11869] __x64_sys_sendmsg+0x19b/0x260 [ 632.002278][T11869] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 632.002313][T11869] ? __pfx_ksys_write+0x10/0x10 [ 632.002332][T11869] ? rcu_is_watching+0x15/0xb0 [ 632.002373][T11869] ? do_syscall_64+0xbe/0x3b0 [ 632.002406][T11869] do_syscall_64+0xfa/0x3b0 [ 632.002434][T11869] ? lockdep_hardirqs_on+0x9c/0x150 [ 632.002461][T11869] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.002480][T11869] ? clear_bhb_loop+0x60/0xb0 [ 632.002504][T11869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.002522][T11869] RIP: 0033:0x7fc9a338e929 [ 632.002540][T11869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.002557][T11869] RSP: 002b:00007fc9a4126038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 632.002578][T11869] RAX: ffffffffffffffda RBX: 00007fc9a35b5fa0 RCX: 00007fc9a338e929 [ 632.002593][T11869] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 632.002607][T11869] RBP: 00007fc9a4126090 R08: 0000000000000000 R09: 0000000000000000 [ 632.002619][T11869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.002631][T11869] R13: 0000000000000000 R14: 00007fc9a35b5fa0 R15: 00007ffc18717028 [ 632.002663][T11869] [ 633.710558][T11894] CIFS: VFS: Malformed UNC in devname [ 634.595089][T11909] FAT-fs (nullb0): bogus number of reserved sectors [ 634.603696][T11909] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 635.112408][T11911] 9pnet_fd: Insufficient options for proto=fd [ 635.151832][ T5897] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 635.330914][ T5962] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 635.345047][ T5897] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 635.395480][ T5897] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 635.502036][ T5962] usb 1-1: New USB device found, idVendor=0471, idProduct=0329, bcdDevice=db.da [ 635.512151][ T5962] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.533851][ T5897] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 635.581542][ T5962] usb 1-1: config 0 descriptor?? [ 635.613629][ T5897] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 635.632848][ T5962] pwc: Philips SPC 900NC USB webcam detected. [ 635.687589][ T5897] usb 10-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.a3 [ 635.714301][ T5897] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.752554][ T5897] usb 10-1: Product: syz [ 635.767164][ T5897] usb 10-1: Manufacturer: syz [ 635.783468][ T5897] usb 10-1: SerialNumber: syz [ 635.880449][ T5897] usb 10-1: config 0 descriptor?? [ 635.897988][ T5897] kvaser_usb 10-1:0.0: error -EMSGSIZE: Cannot get software info [ 635.928377][ T5897] kvaser_usb 10-1:0.0: probe with driver kvaser_usb failed with error -90 [ 636.505346][ T5897] usb 10-1: USB disconnect, device number 18 [ 637.446986][ T5962] pwc: Failed to set LED on/off time (-71) [ 637.464638][ T5962] pwc: send_video_command error -71 [ 637.500364][ T5962] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 637.544520][ T5962] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 637.662414][ T5962] usb 1-1: USB disconnect, device number 16 [ 637.961671][T11941] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.1521'. [ 638.911861][T11950] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.1522'. [ 639.872078][T11945] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1522'. [ 640.494261][ T1038] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.821933][T11981] vivid-000: disconnect [ 640.868769][ T1038] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.934242][T11990] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1535'. [ 640.962786][T11986] vivid-000: reconnect [ 641.092851][T11993] netlink: 'syz.5.1535': attribute type 3 has an invalid length. [ 641.278869][T11993] netlink: 'syz.5.1535': attribute type 1 has an invalid length. [ 641.320435][T11993] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.1535'. [ 641.473324][ T1038] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.528958][T11995] netlink: 'syz.0.1536': attribute type 25 has an invalid length. [ 642.388870][T11998] netlink: 'syz.0.1536': attribute type 25 has an invalid length. [ 642.563012][T12004] FAULT_INJECTION: forcing a failure. [ 642.563012][T12004] name failslab, interval 1, probability 0, space 0, times 0 [ 642.628589][T12004] CPU: 1 UID: 0 PID: 12004 Comm: syz.8.1538 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 642.628619][T12004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 642.628631][T12004] Call Trace: [ 642.628639][T12004] [ 642.628647][T12004] dump_stack_lvl+0x189/0x250 [ 642.628681][T12004] ? __pfx____ratelimit+0x10/0x10 [ 642.628709][T12004] ? __pfx_dump_stack_lvl+0x10/0x10 [ 642.628738][T12004] ? __pfx__printk+0x10/0x10 [ 642.628763][T12004] ? sctp_get_port_local+0xe4c/0x1610 [ 642.628792][T12004] should_fail_ex+0x414/0x560 [ 642.628822][T12004] should_failslab+0xa8/0x100 [ 642.628862][T12004] __kmalloc_cache_noprof+0x70/0x3d0 [ 642.628887][T12004] ? sctp_add_bind_addr+0x8c/0x370 [ 642.628923][T12004] sctp_add_bind_addr+0x8c/0x370 [ 642.628960][T12004] sctp_do_bind+0x5ab/0x940 [ 642.628998][T12004] sctp_setsockopt_bindx+0x260/0x430 [ 642.629031][T12004] sctp_setsockopt+0x7eb/0x1200 [ 642.629053][T12004] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 642.629088][T12004] do_sock_setsockopt+0x25a/0x3e0 [ 642.629115][T12004] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 642.629143][T12004] ? __fget_files+0x2a/0x420 [ 642.629179][T12004] __x64_sys_setsockopt+0x18b/0x220 [ 642.629209][T12004] do_syscall_64+0xfa/0x3b0 [ 642.629238][T12004] ? lockdep_hardirqs_on+0x9c/0x150 [ 642.629266][T12004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.629286][T12004] ? clear_bhb_loop+0x60/0xb0 [ 642.629312][T12004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.629332][T12004] RIP: 0033:0x7fc9a338e929 [ 642.629353][T12004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.629370][T12004] RSP: 002b:00007fc9a4126038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 642.629393][T12004] RAX: ffffffffffffffda RBX: 00007fc9a35b5fa0 RCX: 00007fc9a338e929 [ 642.629408][T12004] RDX: 0000000000000064 RSI: 0000000000000084 RDI: 0000000000000003 [ 642.629420][T12004] RBP: 00007fc9a4126090 R08: 0000000000000020 R09: 0000000000000000 [ 642.629433][T12004] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 642.629446][T12004] R13: 0000000000000000 R14: 00007fc9a35b5fa0 R15: 00007ffc18717028 [ 642.629479][T12004] [ 642.865948][ T1038] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.225709][T12006] pim6reg: entered allmulticast mode [ 643.510372][T12014] program syz.8.1541 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 644.034889][T12013] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 644.044413][T12013] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 644.406785][ T5904] IPVS: starting estimator thread 0... [ 644.530068][T12018] IPVS: using max 25 ests per chain, 60000 per kthread [ 644.640245][T12023] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1543'. [ 644.640986][ T1038] bridge_slave_1: left allmulticast mode [ 644.682657][ T1038] bridge_slave_1: left promiscuous mode [ 644.688527][ T1038] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.747854][ T1038] bridge_slave_0: left allmulticast mode [ 644.763596][ T1038] bridge_slave_0: left promiscuous mode [ 644.784414][ T1038] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.683285][ T51] Bluetooth: hci0: unexpected event for opcode 0x2002 [ 645.798523][T12039] netlink: 'syz.7.1547': attribute type 1 has an invalid length. [ 645.911403][ T1038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 645.928660][ T1038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 645.943770][ T1038] bond0 (unregistering): Released all slaves [ 645.986481][T12042] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1547'. [ 646.198730][T12040] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 646.220304][T12040] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 646.229236][T12040] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 646.239670][T12040] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 646.302773][T12040] bond1: (slave geneve2): making interface the new active one [ 646.364095][T12040] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 647.176412][T12041] bond1: (slave ip6gretap2): Enslaving as an active interface with an up link [ 647.213062][T12042] 8021q: adding VLAN 0 to HW filter on device bond1 [ 647.791577][T12059] kAFS: No cell specified [ 647.802679][T12059] FAULT_INJECTION: forcing a failure. [ 647.802679][T12059] name failslab, interval 1, probability 0, space 0, times 0 [ 647.816460][T12059] CPU: 0 UID: 0 PID: 12059 Comm: syz.7.1551 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 647.816490][T12059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 647.816503][T12059] Call Trace: [ 647.816512][T12059] [ 647.816520][T12059] dump_stack_lvl+0x189/0x250 [ 647.816557][T12059] ? __pfx____ratelimit+0x10/0x10 [ 647.816586][T12059] ? __pfx_dump_stack_lvl+0x10/0x10 [ 647.816617][T12059] ? __pfx__printk+0x10/0x10 [ 647.816644][T12059] ? __pfx___might_resched+0x10/0x10 [ 647.816681][T12059] should_fail_ex+0x414/0x560 [ 647.816711][T12059] should_failslab+0xa8/0x100 [ 647.816740][T12059] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 647.816767][T12059] ? __alloc_skb+0x112/0x2d0 [ 647.816794][T12059] __alloc_skb+0x112/0x2d0 [ 647.816819][T12059] netlink_sendmsg+0x5c6/0xb30 [ 647.816853][T12059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 647.816887][T12059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 647.816911][T12059] __sock_sendmsg+0x219/0x270 [ 647.816944][T12059] ____sys_sendmsg+0x505/0x830 [ 647.816975][T12059] ? __pfx_____sys_sendmsg+0x10/0x10 [ 647.817010][T12059] ? import_iovec+0x74/0xa0 [ 647.817047][T12059] ___sys_sendmsg+0x21f/0x2a0 [ 647.817073][T12059] ? __pfx____sys_sendmsg+0x10/0x10 [ 647.817139][T12059] ? __fget_files+0x2a/0x420 [ 647.817165][T12059] ? __fget_files+0x3a0/0x420 [ 647.817205][T12059] __x64_sys_sendmsg+0x19b/0x260 [ 647.817233][T12059] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 647.817282][T12059] ? do_syscall_64+0xbe/0x3b0 [ 647.817324][T12059] do_syscall_64+0xfa/0x3b0 [ 647.817355][T12059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.817375][T12059] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 647.817396][T12059] ? clear_bhb_loop+0x60/0xb0 [ 647.817422][T12059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.817442][T12059] RIP: 0033:0x7f46b2d8e929 [ 647.817461][T12059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 647.817479][T12059] RSP: 002b:00007f46b3b5d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 647.817501][T12059] RAX: ffffffffffffffda RBX: 00007f46b2fb6160 RCX: 00007f46b2d8e929 [ 647.817516][T12059] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000007 [ 647.817530][T12059] RBP: 00007f46b3b5d090 R08: 0000000000000000 R09: 0000000000000000 [ 647.817543][T12059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.817556][T12059] R13: 0000000000000000 R14: 00007f46b2fb6160 R15: 00007ffdb7a39608 [ 647.817589][T12059] [ 649.672464][T12079] netlink: 256 bytes leftover after parsing attributes in process `syz.9.1556'. [ 649.709731][ T1038] hsr_slave_0: left promiscuous mode [ 649.744888][ T1038] hsr_slave_1: left promiscuous mode [ 649.777942][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 649.806436][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.861231][ T1038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 649.916467][ T1038] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 650.097648][ T1038] veth1_macvtap: left promiscuous mode [ 650.135130][ T1038] veth0_macvtap: left promiscuous mode [ 650.171837][ T1038] veth1_vlan: left promiscuous mode [ 650.180296][T12089] fuse: Bad value for 'rootmode' [ 650.192285][ T1038] veth0_vlan: left promiscuous mode [ 650.450119][ T5944] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 650.635231][ T5944] usb 1-1: unable to get BOS descriptor or descriptor too short [ 650.666853][ T5944] usb 1-1: not running at top speed; connect to a high speed hub [ 650.699685][ T5944] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 650.716907][ T5944] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 650.748087][ T5944] usb 1-1: config 4 has no interface number 0 [ 650.782120][ T5944] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 650.809172][ T5944] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.839943][ T5944] usb 1-1: Product: syz [ 650.858118][ T5944] usb 1-1: Manufacturer: syz [ 650.877476][ T5944] usb 1-1: SerialNumber: syz [ 651.473570][ T5944] usb 1-1: USB disconnect, device number 17 [ 652.200143][ T1038] team0 (unregistering): Port device team_slave_1 removed [ 652.293493][ T1038] team0 (unregistering): Port device team_slave_0 removed [ 653.141250][T12079] bridge0: entered promiscuous mode [ 653.146844][T12079] macvlan2: entered promiscuous mode [ 653.194998][T12082] macvlan3: entered promiscuous mode [ 653.235061][ T5882] lo speed is unknown, defaulting to 1000 [ 653.240998][ T5882] infiniband syz2: ib_query_port failed (-19) [ 653.271177][T12106] batadv0: entered promiscuous mode [ 653.289746][T12106] vlan2: entered promiscuous mode [ 656.100860][T12144] netlink: 'syz.7.1576': attribute type 5 has an invalid length. [ 656.738200][ T5139] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 656.753504][ T5139] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 656.763603][ T5139] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 656.775918][ T5139] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 656.794797][ T5139] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 657.768545][T12152] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1577'. [ 657.823980][T12141] binder_alloc: 12134: binder_alloc_buf size 68864 failed, no address space [ 657.847934][T12141] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 16384 (num: 1 largest: 16384) [ 658.855680][ T51] Bluetooth: hci5: command tx timeout [ 659.644228][T12148] lo speed is unknown, defaulting to 1000 [ 660.232681][T12163] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1581'. [ 660.582253][T12163] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1581'. [ 660.930358][ T51] Bluetooth: hci5: command tx timeout [ 660.975848][T12148] chnl_net:caif_netlink_parms(): no params data found [ 661.155689][T12174] No control pipe specified [ 661.389024][T12175] lo speed is unknown, defaulting to 1000 [ 661.565487][T12148] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.590940][T12148] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.598547][T12148] bridge_slave_0: entered allmulticast mode [ 661.614376][T12148] bridge_slave_0: entered promiscuous mode [ 661.652340][T12148] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.655829][T12185] netlink: 'syz.0.1586': attribute type 1 has an invalid length. [ 661.667256][T12185] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1586'. [ 661.668838][T12148] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.696596][T12148] bridge_slave_1: entered allmulticast mode [ 661.708449][T12148] bridge_slave_1: entered promiscuous mode [ 661.932809][T12148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.993019][T12148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.020990][ T51] Bluetooth: hci5: command tx timeout [ 663.062845][T12148] team0: Port device team_slave_0 added [ 663.170915][T12148] team0: Port device team_slave_1 added [ 663.307936][T12148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.338078][T12148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 663.420365][T12148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.048807][T12148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.056776][T12148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.157956][T12148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.139903][ T51] Bluetooth: hci5: command tx timeout [ 665.536428][T12148] hsr_slave_0: entered promiscuous mode [ 666.274848][T12148] hsr_slave_1: entered promiscuous mode [ 667.292768][T12219] trusted_key: encrypted_key: keylen parameter is missing [ 669.702755][ T5139] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 669.725951][ T5139] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 669.736899][ T5139] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 669.829761][ T5139] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 669.840117][ T5139] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 670.445656][T12232] lo speed is unknown, defaulting to 1000 [ 670.603592][ T5944] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 670.786954][ T5944] usb 1-1: too many configurations: 21, using maximum allowed: 8 [ 670.827588][ T5944] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 670.841428][ T5944] usb 1-1: can't read configurations, error -61 [ 670.999619][ T5944] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 671.180262][ T5944] usb 1-1: too many configurations: 21, using maximum allowed: 8 [ 671.218255][ T5944] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 671.228733][ T5944] usb 1-1: can't read configurations, error -61 [ 671.240405][ T5944] usb usb1-port1: attempt power cycle [ 671.659771][ T5944] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 671.709486][ T5944] usb 1-1: too many configurations: 21, using maximum allowed: 8 [ 671.768538][ T5944] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 671.810895][ T5944] usb 1-1: can't read configurations, error -61 [ 671.874865][T12261] bridge1: entered promiscuous mode [ 671.970332][ T5944] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 671.978138][ T5139] Bluetooth: hci6: command tx timeout [ 672.036774][ T5944] usb 1-1: too many configurations: 21, using maximum allowed: 8 [ 672.047396][ T5944] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 672.064855][ T5944] usb 1-1: can't read configurations, error -61 [ 672.081644][ T5944] usb usb1-port1: unable to enumerate USB device [ 672.195454][T12148] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 672.249940][T12148] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 672.310252][T12148] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 672.334342][T12148] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 672.447518][T12232] chnl_net:caif_netlink_parms(): no params data found [ 672.787648][T12232] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.808408][T12232] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.821352][T12232] bridge_slave_0: entered allmulticast mode [ 672.846276][T12232] bridge_slave_0: entered promiscuous mode [ 672.886577][T12292] : renamed from hsr_slave_0 (while UP) [ 672.924340][T12232] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.982013][T12232] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.018331][T12232] bridge_slave_1: entered allmulticast mode [ 673.043361][T12232] bridge_slave_1: entered promiscuous mode [ 674.053054][T12232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.059696][ T5139] Bluetooth: hci6: command tx timeout [ 674.245192][T12232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.322075][T12148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.815007][T12232] team0: Port device team_slave_0 added [ 674.899328][T12148] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.960187][T12232] team0: Port device team_slave_1 added [ 675.030377][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 675.037578][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 675.539922][T12313] netlink: 'syz.7.1620': attribute type 1 has an invalid length. [ 675.547840][T12313] netlink: 144 bytes leftover after parsing attributes in process `syz.7.1620'. [ 675.557025][T12313] netlink: 'syz.7.1620': attribute type 1 has an invalid length. [ 675.564915][T12313] netlink: 'syz.7.1620': attribute type 2 has an invalid length. [ 675.572799][T12313] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1620'. [ 675.669715][T12314] syz.7.1620: attempt to access beyond end of device [ 675.669715][T12314] nbd7: rw=0, sector=2, nr_sectors = 1 limit=0 [ 675.683472][T12314] hfs: can't find a HFS filesystem on dev nbd7 [ 676.130500][ T5139] Bluetooth: hci6: command tx timeout [ 676.179184][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.186403][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 676.266427][T12232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.285457][T12232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.373073][T12232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.452662][T12232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.469428][T12232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.539549][T12232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.837949][T12232] hsr_slave_0: entered promiscuous mode [ 676.863126][T12232] hsr_slave_1: entered promiscuous mode [ 676.890329][T12232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 676.897947][T12232] Cannot create hsr debugfs directory [ 677.467872][T12337] FAULT_INJECTION: forcing a failure. [ 677.467872][T12337] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 677.483916][T12337] CPU: 0 UID: 0 PID: 12337 Comm: syz.8.1629 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 677.483945][T12337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 677.483957][T12337] Call Trace: [ 677.483965][T12337] [ 677.483974][T12337] dump_stack_lvl+0x189/0x250 [ 677.484010][T12337] ? __pfx____ratelimit+0x10/0x10 [ 677.484039][T12337] ? __pfx_dump_stack_lvl+0x10/0x10 [ 677.484069][T12337] ? __pfx__printk+0x10/0x10 [ 677.484090][T12337] ? __might_fault+0xb0/0x130 [ 677.484127][T12337] should_fail_ex+0x414/0x560 [ 677.484155][T12337] _copy_from_user+0x2d/0xb0 [ 677.484188][T12337] ___sys_sendmsg+0x158/0x2a0 [ 677.484216][T12337] ? __pfx____sys_sendmsg+0x10/0x10 [ 677.484282][T12337] ? __fget_files+0x2a/0x420 [ 677.484308][T12337] ? __fget_files+0x3a0/0x420 [ 677.484346][T12337] __sys_sendmmsg+0x227/0x430 [ 677.484376][T12337] ? __pfx___sys_sendmmsg+0x10/0x10 [ 677.484397][T12337] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 677.484461][T12337] ? ksys_write+0x22a/0x250 [ 677.484487][T12337] ? __pfx_ksys_write+0x10/0x10 [ 677.484506][T12337] ? rcu_is_watching+0x15/0xb0 [ 677.484543][T12337] __x64_sys_sendmmsg+0xa0/0xc0 [ 677.484569][T12337] do_syscall_64+0xfa/0x3b0 [ 677.484597][T12337] ? lockdep_hardirqs_on+0x9c/0x150 [ 677.484625][T12337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.484645][T12337] ? clear_bhb_loop+0x60/0xb0 [ 677.484671][T12337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.484690][T12337] RIP: 0033:0x7fc9a338e929 [ 677.484708][T12337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.484726][T12337] RSP: 002b:00007fc9a11d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 677.484748][T12337] RAX: ffffffffffffffda RBX: 00007fc9a35b6160 RCX: 00007fc9a338e929 [ 677.484762][T12337] RDX: 0000000000000001 RSI: 0000200000004640 RDI: 0000000000000005 [ 677.484775][T12337] RBP: 00007fc9a11d5090 R08: 0000000000000000 R09: 0000000000000000 [ 677.484787][T12337] R10: 0000000000040000 R11: 0000000000000246 R12: 0000000000000001 [ 677.484799][T12337] R13: 0000000000000000 R14: 00007fc9a35b6160 R15: 00007ffc18717028 [ 677.484831][T12337] [ 677.533094][ T30] audit: type=1326 audit(1751619210.052:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12329 comm="syz.7.1627" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46b2d8e929 code=0x0 [ 677.969002][T12342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1630'. [ 678.050265][ T9] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 678.065244][T12148] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 678.215720][ T5139] Bluetooth: hci6: command tx timeout [ 679.037554][ T9] usb 8-1: Using ep0 maxpacket: 32 [ 679.060315][ T9] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 679.090194][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 679.112062][ T9] usb 8-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 679.127123][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.157245][ T9] usb 8-1: Product: syz [ 679.175872][ T9] usb 8-1: Manufacturer: syz [ 679.395002][T12232] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.115986][ T9] usb 8-1: SerialNumber: syz [ 680.144161][ T9] usb 8-1: config 0 descriptor?? [ 680.259703][ T9] usb 8-1: can't set config #0, error -71 [ 680.292624][ T9] usb 8-1: USB disconnect, device number 27 [ 680.344110][T12232] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.515867][T12368] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 680.522720][T12368] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 680.561515][T12232] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.586026][T12368] vhci_hcd vhci_hcd.0: Device attached [ 680.603639][T12369] vhci_hcd: connection closed [ 680.607751][ T6679] vhci_hcd: stop threads [ 680.655057][T12148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.656325][ T6679] vhci_hcd: release socket [ 680.680658][ T5882] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 680.696637][ T6679] vhci_hcd: disconnect device [ 680.750697][T12232] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.790094][T12375] input: syz0 as /devices/virtual/input/input16 [ 680.808396][T12375] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1637'. [ 680.850230][ T5882] usb 9-1: Using ep0 maxpacket: 8 [ 680.870433][ T5882] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 680.881356][ T5882] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.900366][ T5882] usb 9-1: Product: syz [ 680.906132][ T5882] usb 9-1: Manufacturer: syz [ 680.913038][T12148] veth0_vlan: entered promiscuous mode [ 680.924451][ T5882] usb 9-1: SerialNumber: syz [ 680.952537][ T5882] usb 9-1: config 0 descriptor?? [ 680.992185][T12148] veth1_vlan: entered promiscuous mode [ 681.184037][ T5882] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 681.253939][T12232] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 681.305597][T12232] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 681.347981][T12232] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 681.387959][T12232] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 681.425187][T12148] veth0_macvtap: entered promiscuous mode [ 681.457821][T12148] veth1_macvtap: entered promiscuous mode [ 681.814227][ T7957] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.840886][ T7957] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 681.918540][T12148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 681.971232][T12148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 682.060506][ T7957] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.095516][ T7957] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 682.196273][T12148] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.232857][T12148] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.242820][ T5882] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 682.267369][T12148] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.282295][ T5882] usb 9-1: USB disconnect, device number 18 [ 682.284921][T12148] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 682.422588][ T7957] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.433750][ T7957] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 682.536267][ T7957] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.549303][ T7957] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 682.677529][T12232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.737396][ T8654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.775600][ T8654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.812053][T12232] 8021q: adding VLAN 0 to HW filter on device team0 [ 682.986453][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 682.993708][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.115867][ T6679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 683.139659][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.146864][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 683.159808][ T6679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 683.218195][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 683.233660][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 683.243090][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 683.254408][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 683.262634][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 683.336702][ T7957] bridge_slave_1: left allmulticast mode [ 683.357016][ T7957] bridge_slave_1: left promiscuous mode [ 683.366996][ T7957] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.383027][ T7957] bridge_slave_0: left allmulticast mode [ 683.413253][ T7957] bridge_slave_0: left promiscuous mode [ 683.434630][ T7957] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.479935][ T5962] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 683.640080][ T5962] usb 9-1: Using ep0 maxpacket: 32 [ 683.654001][ T5962] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 683.665865][ T5962] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 683.676297][ T5962] usb 9-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 683.704597][ T5962] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 683.746182][ T5962] usb 9-1: config 0 descriptor?? [ 683.761120][ T7957] bond1 (unregistering): (slave ip6gretap2): Releasing active interface [ 683.782882][ T5883] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 683.969633][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 683.986271][ T7957] bond1 (unregistering): (slave geneve2): Releasing active interface [ 683.988996][ T5883] usb 2-1: config 7 has an invalid interface number: 100 but max is 0 [ 684.016018][ T5883] usb 2-1: config 7 has no interface number 0 [ 684.025523][ T5883] usb 2-1: config 7 interface 100 has no altsetting 0 [ 684.048578][ T5883] usb 2-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=93.5e [ 684.076934][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.120005][ T5883] usb 2-1: Product: syz [ 684.124431][ T5883] usb 2-1: Manufacturer: syz [ 684.129182][ T5883] usb 2-1: SerialNumber: syz [ 684.177026][ T5962] smartjoyplus 0003:0925:8866.0006: hidraw0: USB HID v0.00 Device [HID 0925:8866] on usb-dummy_hcd.8-1/input0 [ 684.198108][ T5962] smartjoyplus 0003:0925:8866.0006: no output reports found [ 684.381127][ T5962] usb 9-1: USB disconnect, device number 19 [ 684.457698][T12402] fido_id[12402]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 684.821524][T12405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1644'. [ 684.877061][T12408] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1644'. [ 684.988712][ T5883] gspca_main: pac7311-2.14.0 probing 093a:2603 [ 685.035122][ T5883] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71 [ 685.078605][ T5883] pac7311 2-1:7.100: probe with driver pac7311 failed with error -71 [ 685.127288][ T5883] usb 2-1: USB disconnect, device number 8 [ 685.153717][ T7957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 685.219996][ T7957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 685.242992][ T7957] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 685.330474][ T5139] Bluetooth: hci0: command tx timeout [ 685.392912][T12416] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1645'. [ 685.784720][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.833343][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.890157][ T7957] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 685.932416][ T7957] bond0 (unregistering): Released all slaves [ 686.730636][ T7957] bond1 (unregistering): Released all slaves [ 686.908852][T12417] bridge2: entered promiscuous mode [ 686.950621][T12396] lo speed is unknown, defaulting to 1000 [ 687.053533][T12424] autofs: Unknown parameter '0x0000000000000000' [ 687.532037][ T5139] Bluetooth: hci0: command tx timeout [ 688.674870][T12442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 688.695279][T12232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 689.714867][ T7957] : left promiscuous mode [ 689.786750][ T7957] hsr_slave_1: left promiscuous mode [ 689.801041][ T7957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 689.808537][ T7957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 689.863041][ T7957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 689.879050][ T7957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.478292][ T7957] veth1_macvtap: left promiscuous mode [ 690.489527][ T7957] veth0_macvtap: left promiscuous mode [ 690.496833][ T7957] veth1_vlan: left promiscuous mode [ 690.507082][T12453] FAULT_INJECTION: forcing a failure. [ 690.507082][T12453] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 690.525663][ T7957] veth0_vlan: left promiscuous mode [ 690.551148][T12453] CPU: 1 UID: 0 PID: 12453 Comm: syz.1.1654 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 690.551176][T12453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 690.551189][T12453] Call Trace: [ 690.551196][T12453] [ 690.551206][T12453] dump_stack_lvl+0x189/0x250 [ 690.551239][T12453] ? __pfx____ratelimit+0x10/0x10 [ 690.551269][T12453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 690.551298][T12453] ? __pfx__printk+0x10/0x10 [ 690.551318][T12453] ? __might_fault+0xb0/0x130 [ 690.551353][T12453] should_fail_ex+0x414/0x560 [ 690.551382][T12453] _copy_from_iter+0x1db/0x16f0 [ 690.551420][T12453] ? rcu_is_watching+0x15/0xb0 [ 690.551451][T12453] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 690.551477][T12453] ? __pfx__copy_from_iter+0x10/0x10 [ 690.551506][T12453] ? __build_skb_around+0x257/0x3e0 [ 690.551530][T12453] ? netlink_sendmsg+0x642/0xb30 [ 690.551550][T12453] ? skb_put+0x11b/0x210 [ 690.551574][T12453] netlink_sendmsg+0x6b2/0xb30 [ 690.551606][T12453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 690.551636][T12453] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 690.551659][T12453] ? __pfx_netlink_sendmsg+0x10/0x10 [ 690.551682][T12453] __sock_sendmsg+0x219/0x270 [ 690.551713][T12453] ____sys_sendmsg+0x505/0x830 [ 690.551743][T12453] ? __pfx_____sys_sendmsg+0x10/0x10 [ 690.551776][T12453] ? import_iovec+0x74/0xa0 [ 690.551806][T12453] ___sys_sendmsg+0x21f/0x2a0 [ 690.551827][T12453] ? __pfx____sys_sendmsg+0x10/0x10 [ 690.551888][T12453] ? __fget_files+0x2a/0x420 [ 690.551910][T12453] ? __fget_files+0x3a0/0x420 [ 690.551945][T12453] __x64_sys_sendmsg+0x19b/0x260 [ 690.551972][T12453] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 690.552006][T12453] ? __pfx_ksys_write+0x10/0x10 [ 690.552027][T12453] ? rcu_is_watching+0x15/0xb0 [ 690.552061][T12453] ? do_syscall_64+0xbe/0x3b0 [ 690.552094][T12453] do_syscall_64+0xfa/0x3b0 [ 690.552122][T12453] ? lockdep_hardirqs_on+0x9c/0x150 [ 690.552149][T12453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.552168][T12453] ? clear_bhb_loop+0x60/0xb0 [ 690.552193][T12453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.552212][T12453] RIP: 0033:0x7f052598e929 [ 690.552230][T12453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 690.552247][T12453] RSP: 002b:00007f0526784038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 690.552268][T12453] RAX: ffffffffffffffda RBX: 00007f0525bb5fa0 RCX: 00007f052598e929 [ 690.552282][T12453] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 690.552294][T12453] RBP: 00007f0526784090 R08: 0000000000000000 R09: 0000000000000000 [ 690.552307][T12453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.552319][T12453] R13: 0000000000000000 R14: 00007f0525bb5fa0 R15: 00007ffc512c3188 [ 690.552350][T12453] [ 691.141905][ T7957] pim6reg (unregistering): left allmulticast mode [ 692.087133][T12463] qrtr: Invalid version 0 [ 692.250010][ T7957] team0 (unregistering): Port device team_slave_1 removed [ 692.384475][ T7957] team0 (unregistering): Port device C removed [ 692.516294][T12470] netlink: 'syz.0.1660': attribute type 7 has an invalid length. [ 693.329312][T12396] chnl_net:caif_netlink_parms(): no params data found [ 696.783018][T12396] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.818473][T12396] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.836049][T12504] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 696.841490][T12396] bridge_slave_0: entered allmulticast mode [ 696.861605][T12396] bridge_slave_0: entered promiscuous mode [ 696.947548][T12396] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.980074][T12396] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.015980][T12396] bridge_slave_1: entered allmulticast mode [ 697.052333][T12396] bridge_slave_1: entered promiscuous mode [ 697.267242][T12396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 697.303732][T12396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 697.336084][T12232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 697.475835][ T7957] IPVS: stop unused estimator thread 0... [ 697.516146][T12396] team0: Port device team_slave_0 added [ 697.546397][T12396] team0: Port device team_slave_1 added [ 698.357297][T12510] sctp: [Deprecated]: syz.1.1672 (pid 12510) Use of int in max_burst socket option. [ 698.357297][T12510] Use struct sctp_assoc_value instead [ 698.453065][T12396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 698.469679][T12396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.562301][T12396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 698.615722][T12396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 698.635714][T12396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 698.680240][T12396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 698.838510][T12532] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1677'. [ 699.426505][T12396] hsr_slave_0: entered promiscuous mode [ 699.505915][T12396] hsr_slave_1: entered promiscuous mode [ 699.567590][T12396] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 699.571129][T12536] FAULT_INJECTION: forcing a failure. [ 699.571129][T12536] name failslab, interval 1, probability 0, space 0, times 0 [ 699.589438][T12536] CPU: 0 UID: 0 PID: 12536 Comm: syz.0.1678 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 699.589464][T12536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 699.589476][T12536] Call Trace: [ 699.589484][T12536] [ 699.589493][T12536] dump_stack_lvl+0x189/0x250 [ 699.589534][T12536] ? __pfx____ratelimit+0x10/0x10 [ 699.589564][T12536] ? __pfx_dump_stack_lvl+0x10/0x10 [ 699.589593][T12536] ? __pfx__printk+0x10/0x10 [ 699.589619][T12536] ? __pfx___might_resched+0x10/0x10 [ 699.589646][T12536] ? fs_reclaim_acquire+0x7d/0x100 [ 699.589679][T12536] should_fail_ex+0x414/0x560 [ 699.589708][T12536] should_failslab+0xa8/0x100 [ 699.589736][T12536] __kmalloc_noprof+0xcb/0x4f0 [ 699.589757][T12536] ? kfree+0x4d/0x440 [ 699.589775][T12536] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 699.589807][T12536] tomoyo_realpath_from_path+0xe3/0x5d0 [ 699.589836][T12536] ? tomoyo_domain+0xda/0x130 [ 699.589868][T12536] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 699.589891][T12536] tomoyo_path_number_perm+0x1e8/0x5a0 [ 699.589917][T12536] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 699.589960][T12536] ? __lock_acquire+0xab9/0xd20 [ 699.590007][T12536] ? __fget_files+0x2a/0x420 [ 699.590036][T12536] ? __fget_files+0x2a/0x420 [ 699.590061][T12536] ? __fget_files+0x3a0/0x420 [ 699.590085][T12536] ? __fget_files+0x2a/0x420 [ 699.590114][T12536] security_file_ioctl+0xcb/0x2d0 [ 699.590142][T12536] __se_sys_ioctl+0x47/0x170 [ 699.590166][T12536] do_syscall_64+0xfa/0x3b0 [ 699.590195][T12536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.590214][T12536] ? asm_sysvec_call_function_single+0x1a/0x20 [ 699.590234][T12536] ? clear_bhb_loop+0x60/0xb0 [ 699.590258][T12536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.590277][T12536] RIP: 0033:0x7fa5c278e929 [ 699.590295][T12536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 699.590311][T12536] RSP: 002b:00007fa5c357b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 699.590328][T12536] RAX: ffffffffffffffda RBX: 00007fa5c29b6080 RCX: 00007fa5c278e929 [ 699.590340][T12536] RDX: 0000200000000500 RSI: 0000000040505412 RDI: 0000000000000006 [ 699.590351][T12536] RBP: 00007fa5c357b090 R08: 0000000000000000 R09: 0000000000000000 [ 699.590361][T12536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 699.590370][T12536] R13: 0000000000000000 R14: 00007fa5c29b6080 R15: 00007fff7902cae8 [ 699.590395][T12536] [ 699.590628][T12536] ERROR: Out of memory at tomoyo_realpath_from_path. [ 699.637646][T12396] Cannot create hsr debugfs directory [ 701.411908][T12547] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 701.615332][T12232] veth0_vlan: entered promiscuous mode [ 701.797248][T12232] veth1_vlan: entered promiscuous mode [ 702.366385][T12232] veth0_macvtap: entered promiscuous mode [ 702.899992][T12232] veth1_macvtap: entered promiscuous mode [ 703.137312][T12232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 703.792330][T12232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 703.862554][T12232] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.883158][T12232] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.894811][T12232] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.908473][T12232] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 703.982313][T12396] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 704.027472][T12396] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 704.059495][ T5944] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 704.077586][T12396] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 704.116749][T12396] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 704.149493][ T3405] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 704.191356][T10080] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.209013][T10080] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.246433][ T5944] usb 9-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 704.259095][ T5944] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.282022][ T5944] usb 9-1: Product: syz [ 704.286235][ T5944] usb 9-1: Manufacturer: syz [ 704.300388][ T5944] usb 9-1: SerialNumber: syz [ 704.317036][ T5944] usb 9-1: config 0 descriptor?? [ 704.323375][ T3405] usb 2-1: Using ep0 maxpacket: 32 [ 704.332124][T10080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.348607][ T5944] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 704.357118][ T3405] usb 2-1: config 4 has an invalid interface number: 8 but max is 0 [ 704.366713][T10080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.377404][ T3405] usb 2-1: config 4 has no interface number 0 [ 704.384572][ T3405] usb 2-1: config 4 interface 8 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 704.395133][ T3405] usb 2-1: config 4 interface 8 altsetting 1 bulk endpoint 0x8A has invalid maxpacket 0 [ 704.406001][ T3405] usb 2-1: config 4 interface 8 has no altsetting 0 [ 704.416940][ T3405] usb 2-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 704.437923][ T3405] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.460345][ T3405] usb 2-1: Product: syz [ 704.468700][ T3405] usb 2-1: Manufacturer: syz [ 704.489387][ T3405] usb 2-1: SerialNumber: syz [ 704.605865][T12580] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1690'. [ 704.616386][T12580] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1690'. [ 704.628237][T12580] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1690'. [ 704.792951][T12396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.210001][ T5944] gspca_sunplus: reg_w_riv err -110 [ 705.239881][ T5944] sunplus 9-1:0.0: probe with driver sunplus failed with error -110 [ 705.287467][T12396] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.301474][ T5944] usb 9-1: USB disconnect, device number 20 [ 705.444231][ T6679] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.451508][ T6679] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.480425][ T3405] opticon 2-1:4.8: opticon converter detected [ 705.514733][ T6679] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.522092][ T6679] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.551331][ T3405] usb 2-1: opticon converter now attached to ttyUSB0 [ 705.612967][ T3405] usb 2-1: USB disconnect, device number 9 [ 705.680240][ T3405] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 705.722011][ T3405] opticon 2-1:4.8: device disconnected [ 705.838529][T12590] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 706.106393][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1695'. [ 706.219582][ T3405] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 706.409587][ T3405] usb 9-1: device descriptor read/64, error -71 [ 706.683933][T12396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 706.762516][T12603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1696'. [ 707.295612][ T3405] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 707.685148][ T3405] usb 9-1: device descriptor read/64, error -71 [ 708.423067][ T3405] usb usb9-port1: attempt power cycle [ 708.561147][T12624] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1700'. [ 708.585567][T12624] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1700'. [ 708.680122][ T5962] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 708.789541][ T3405] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 708.828931][T12628] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1700'. [ 708.873535][ T5962] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 708.985268][ T5962] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 709.157521][ T5962] usb 2-1: config 8 has no interface number 0 [ 709.267538][ T5962] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 709.362191][ T5962] usb 2-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 709.959023][ T5962] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 710.062042][ T5962] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.159970][ T5962] usb 2-1: Product: syz [ 710.199294][ T5962] usb 2-1: Manufacturer: syz [ 710.276237][ T5962] usb 2-1: SerialNumber: syz [ 710.289948][ T3405] usb 9-1: device descriptor read/8, error -71 [ 711.511319][ T5962] usb 2-1: USB disconnect, device number 10 [ 711.584331][T12637] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1703'. [ 711.798089][T12396] veth0_vlan: entered promiscuous mode [ 711.827006][T12396] veth1_vlan: entered promiscuous mode [ 711.836930][T12649] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 712.035292][T12396] veth0_macvtap: entered promiscuous mode [ 712.096184][T12396] veth1_macvtap: entered promiscuous mode [ 712.150545][T12655] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1707'. [ 712.192981][T12396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 712.596968][T12663] atomic_op ffff88806c33b998 conn xmit_atomic 0000000000000000 [ 713.152111][T12396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 713.441138][T12396] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.511285][T12396] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.547662][T12396] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 713.570064][T12396] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.734938][T12669] random: crng reseeded on system resumption [ 717.256806][ T4899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.268999][ T4899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.426563][ T6801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.449394][ T6801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.060994][T12691] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 719.590871][T12699] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 720.018034][ T977] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 720.610536][ T977] usb 5-1: device descriptor read/64, error -71 [ 720.672128][ T6801] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.791805][ T6801] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.850315][ T977] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 721.029894][ T977] usb 5-1: device descriptor read/64, error -71 [ 721.824381][T12714] netlink: 5280 bytes leftover after parsing attributes in process `syz.8.1724'. [ 721.861078][ T6801] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.940488][ T977] usb usb5-port1: attempt power cycle [ 722.703720][ T6801] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.872091][T12732] bridge1: entered promiscuous mode [ 724.148731][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 724.150155][ T977] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 724.160737][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 724.171748][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 724.180731][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 724.189969][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 724.324785][T12741] lo speed is unknown, defaulting to 1000 [ 724.350361][ T6801] bridge_slave_1: left allmulticast mode [ 724.356585][ T6801] bridge_slave_1: left promiscuous mode [ 724.389816][ T977] usb 1-1: device descriptor read/64, error -71 [ 724.397895][ T6801] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.502514][T12750] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 725.316911][ T977] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 725.337113][ T9] IPVS: starting estimator thread 0... [ 725.382303][ T6801] bridge_slave_0: left allmulticast mode [ 725.451096][ T6801] bridge_slave_0: left promiscuous mode [ 725.489769][T12757] IPVS: using max 24 ests per chain, 57600 per kthread [ 725.504970][ T977] usb 1-1: device descriptor read/64, error -71 [ 725.638915][ T6801] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.694820][ T977] usb usb1-port1: attempt power cycle [ 726.162073][ T977] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 726.216823][ T977] usb 1-1: device descriptor read/8, error -71 [ 726.246165][T12767] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1736'. [ 726.303427][ T51] Bluetooth: hci0: command tx timeout [ 726.610114][ T977] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 726.666216][ T977] usb 1-1: device descriptor read/8, error -71 [ 726.864583][ T977] usb usb1-port1: unable to enumerate USB device [ 727.191873][T12775] [U]  [ 728.007284][ T6801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 728.023473][ T6801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 728.072688][ T6801] bond0 (unregistering): Released all slaves [ 728.141653][T12768] bridge1: entered promiscuous mode [ 728.370141][ T51] Bluetooth: hci0: command tx timeout [ 729.479995][ T30] audit: type=1326 audit(1751619261.452:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12779 comm="syz.8.1740" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc9a338e929 code=0x0 [ 729.511522][T12785] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1742'. [ 729.610275][T12784] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1741'. [ 730.128238][T12802] FAULT_INJECTION: forcing a failure. [ 730.128238][T12802] name failslab, interval 1, probability 0, space 0, times 0 [ 730.272789][T12802] CPU: 0 UID: 0 PID: 12802 Comm: syz.8.1746 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 730.272819][T12802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 730.272832][T12802] Call Trace: [ 730.272841][T12802] [ 730.272850][T12802] dump_stack_lvl+0x189/0x250 [ 730.272885][T12802] ? __pfx____ratelimit+0x10/0x10 [ 730.272912][T12802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 730.272941][T12802] ? __pfx__printk+0x10/0x10 [ 730.272969][T12802] ? __pfx___might_resched+0x10/0x10 [ 730.272996][T12802] ? fs_reclaim_acquire+0x7d/0x100 [ 730.273030][T12802] should_fail_ex+0x414/0x560 [ 730.273059][T12802] should_failslab+0xa8/0x100 [ 730.273087][T12802] __kmalloc_noprof+0xcb/0x4f0 [ 730.273109][T12802] ? p9_client_prepare_req+0x383/0xeb0 [ 730.273134][T12802] ? p9_msg_buf_size+0x16aa/0x1ee0 [ 730.273164][T12802] p9_client_prepare_req+0x383/0xeb0 [ 730.273202][T12802] ? kasan_save_track+0x4f/0x80 [ 730.273221][T12802] ? kasan_save_track+0x3e/0x80 [ 730.273239][T12802] ? __kasan_kmalloc+0x93/0xb0 [ 730.273262][T12802] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 730.273286][T12802] ? v9fs_fid_lookup+0x9ab/0xb70 [ 730.273337][T12802] ? vfs_truncate+0x493/0x520 [ 730.273359][T12802] ? do_sys_truncate+0xdb/0x190 [ 730.273380][T12802] ? __x64_sys_truncate+0x5b/0x70 [ 730.273402][T12802] ? do_syscall_64+0xfa/0x3b0 [ 730.273435][T12802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.273473][T12802] p9_client_rpc+0x188/0xa70 [ 730.273514][T12802] ? __pfx_p9_client_rpc+0x10/0x10 [ 730.273554][T12802] ? rcu_is_watching+0x15/0xb0 [ 730.273584][T12802] ? trace_9p_fid_ref+0x7c/0x1d0 [ 730.273612][T12802] p9_client_attach+0x168/0x3c0 [ 730.273643][T12802] ? __pfx_p9_client_attach+0x10/0x10 [ 730.273669][T12802] ? _raw_spin_unlock+0x28/0x50 [ 730.273694][T12802] ? v9fs_fid_find_inode+0x1d2/0x220 [ 730.273719][T12802] v9fs_fid_lookup+0x9ab/0xb70 [ 730.273750][T12802] v9fs_vfs_setattr+0x188/0xb10 [ 730.273782][T12802] ? smack_inode_setattr+0x17b/0x200 [ 730.273802][T12802] ? __pfx_smack_inode_setattr+0x10/0x10 [ 730.273824][T12802] ? __pfx_v9fs_vfs_setattr+0x10/0x10 [ 730.273862][T12802] ? __pfx_current_time+0x10/0x10 [ 730.273899][T12802] ? try_break_deleg+0x79/0x130 [ 730.273919][T12802] ? __pfx_v9fs_vfs_setattr+0x10/0x10 [ 730.273948][T12802] notify_change+0xb36/0xe40 [ 730.273982][T12802] do_truncate+0x1a4/0x220 [ 730.274009][T12802] ? __pfx_do_truncate+0x10/0x10 [ 730.274041][T12802] ? mnt_get_write_access+0x223/0x2a0 [ 730.274082][T12802] vfs_truncate+0x493/0x520 [ 730.274103][T12802] ? lockdep_hardirqs_on+0x9c/0x150 [ 730.274135][T12802] ? __pfx_vfs_truncate+0x10/0x10 [ 730.274154][T12802] ? user_path_at+0x44/0x60 [ 730.274184][T12802] do_sys_truncate+0xdb/0x190 [ 730.274206][T12802] ? __pfx_do_sys_truncate+0x10/0x10 [ 730.274229][T12802] ? __pfx_ksys_write+0x10/0x10 [ 730.274248][T12802] ? rcu_is_watching+0x15/0xb0 [ 730.274285][T12802] __x64_sys_truncate+0x5b/0x70 [ 730.274310][T12802] do_syscall_64+0xfa/0x3b0 [ 730.274337][T12802] ? lockdep_hardirqs_on+0x9c/0x150 [ 730.274363][T12802] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.274383][T12802] ? clear_bhb_loop+0x60/0xb0 [ 730.274408][T12802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.274436][T12802] RIP: 0033:0x7fc9a338e929 [ 730.274455][T12802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 730.274473][T12802] RSP: 002b:00007fc9a4126038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 730.274495][T12802] RAX: ffffffffffffffda RBX: 00007fc9a35b5fa0 RCX: 00007fc9a338e929 [ 730.274510][T12802] RDX: 0000000000000000 RSI: 0000000000206b12 RDI: 0000200000000240 [ 730.274523][T12802] RBP: 00007fc9a4126090 R08: 0000000000000000 R09: 0000000000000000 [ 730.274535][T12802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 730.274546][T12802] R13: 0000000000000000 R14: 00007fc9a35b5fa0 R15: 00007ffc18717028 [ 730.274580][T12802] [ 730.669242][ T51] Bluetooth: hci0: command tx timeout [ 730.856166][ T6801] hsr_slave_0: left promiscuous mode [ 730.912801][ T6801] hsr_slave_1: left promiscuous mode [ 730.919109][ T6801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 730.988570][ T6801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 731.048365][T12809] FAULT_INJECTION: forcing a failure. [ 731.048365][T12809] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 731.111616][ T6801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 731.144590][T12809] CPU: 1 UID: 0 PID: 12809 Comm: syz.1.1749 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 731.144622][T12809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 731.144636][T12809] Call Trace: [ 731.144644][T12809] [ 731.144654][T12809] dump_stack_lvl+0x189/0x250 [ 731.144690][T12809] ? __pfx____ratelimit+0x10/0x10 [ 731.144720][T12809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 731.144751][T12809] ? __pfx__printk+0x10/0x10 [ 731.144774][T12809] ? fs_reclaim_acquire+0x7d/0x100 [ 731.144813][T12809] should_fail_ex+0x414/0x560 [ 731.144843][T12809] prepare_alloc_pages+0x213/0x610 [ 731.144881][T12809] __alloc_frozen_pages_noprof+0x123/0x370 [ 731.144916][T12809] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 731.144951][T12809] ? __lock_acquire+0xab9/0xd20 [ 731.144990][T12809] alloc_pages_mpol+0x232/0x4a0 [ 731.145022][T12809] alloc_pages_noprof+0xa9/0x190 [ 731.145049][T12809] pte_alloc_one+0x21/0x170 [ 731.145079][T12809] __pte_alloc+0x25/0x1a0 [ 731.145112][T12809] __handle_mm_fault+0x4b8a/0x5620 [ 731.145158][T12809] ? __pfx___handle_mm_fault+0x10/0x10 [ 731.145205][T12809] ? find_vma+0xe7/0x160 [ 731.145227][T12809] ? __pfx_find_vma+0x10/0x10 [ 731.145253][T12809] handle_mm_fault+0x2d5/0x7f0 [ 731.145295][T12809] do_user_addr_fault+0x764/0x1390 [ 731.145338][T12809] exc_page_fault+0x76/0xf0 [ 731.145369][T12809] asm_exc_page_fault+0x26/0x30 [ 731.145388][T12809] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 731.145412][T12809] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 3d 00 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 731.145431][T12809] RSP: 0018:ffffc90004a37918 EFLAGS: 00050202 [ 731.145456][T12809] RAX: 00007ffffffff001 RBX: 0000000000000018 RCX: 0000000000000018 [ 731.145471][T12809] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: ffffc90004a37e20 [ 731.145485][T12809] RBP: ffffc90004a37ea8 R08: ffffc90004a37e37 R09: 1ffff92000946fc6 [ 731.145500][T12809] R10: dffffc0000000000 R11: fffff52000946fc7 R12: 00000000c018aa3f [ 731.145515][T12809] R13: dffffc0000000000 R14: ffffc90004a37e20 R15: 00002000000000c0 [ 731.145551][T12809] _copy_from_user+0x7a/0xb0 [ 731.145584][T12809] userfaultfd_ioctl+0x17a/0x4bc0 [ 731.145607][T12809] ? kasan_save_track+0x4f/0x80 [ 731.145631][T12809] ? kasan_save_free_info+0x46/0x50 [ 731.145660][T12809] ? __kasan_slab_free+0x62/0x70 [ 731.145681][T12809] ? kfree+0x18e/0x440 [ 731.145700][T12809] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 731.145723][T12809] ? security_file_ioctl+0xcb/0x2d0 [ 731.145747][T12809] ? __se_sys_ioctl+0x47/0x170 [ 731.145766][T12809] ? do_syscall_64+0xfa/0x3b0 [ 731.145794][T12809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.145827][T12809] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 731.145863][T12809] ? do_vfs_ioctl+0x12ba/0x1990 [ 731.145888][T12809] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 731.145917][T12809] ? kasan_quarantine_put+0xdd/0x220 [ 731.145951][T12809] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 731.145977][T12809] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 731.146002][T12809] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 731.146025][T12809] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 731.146051][T12809] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 731.146073][T12809] ? smack_log+0xef/0x3f0 [ 731.146107][T12809] ? __pfx_smack_log+0x10/0x10 [ 731.146138][T12809] ? smk_access+0x14c/0x4e0 [ 731.146178][T12809] ? smk_tskacc+0x2fc/0x370 [ 731.146214][T12809] ? smack_file_ioctl+0x2a9/0x340 [ 731.146239][T12809] ? __pfx_smack_file_ioctl+0x10/0x10 [ 731.146281][T12809] ? __fget_files+0x2a/0x420 [ 731.146310][T12809] ? __fget_files+0x2a/0x420 [ 731.146341][T12809] ? bpf_lsm_file_ioctl+0x9/0x20 [ 731.146369][T12809] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 731.146391][T12809] __se_sys_ioctl+0xfc/0x170 [ 731.146416][T12809] do_syscall_64+0xfa/0x3b0 [ 731.146444][T12809] ? lockdep_hardirqs_on+0x9c/0x150 [ 731.146471][T12809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.146490][T12809] ? clear_bhb_loop+0x60/0xb0 [ 731.146516][T12809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.146535][T12809] RIP: 0033:0x7f052598e929 [ 731.146553][T12809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 731.146570][T12809] RSP: 002b:00007f0526784038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 731.146590][T12809] RAX: ffffffffffffffda RBX: 00007f0525bb5fa0 RCX: 00007f052598e929 [ 731.146605][T12809] RDX: 00002000000000c0 RSI: 00000000c018aa3f RDI: 0000000000000003 [ 731.146618][T12809] RBP: 00007f0526784090 R08: 0000000000000000 R09: 0000000000000000 [ 731.146630][T12809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 731.146643][T12809] R13: 0000000000000000 R14: 00007f0525bb5fa0 R15: 00007ffc512c3188 [ 731.146676][T12809] [ 731.280120][ T6801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 732.641622][T12825] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 732.821438][ T6801] veth1_macvtap: left promiscuous mode [ 732.830817][ T6801] veth0_macvtap: left promiscuous mode [ 732.832418][ T51] Bluetooth: hci0: command tx timeout [ 732.836581][ T6801] veth1_vlan: left promiscuous mode [ 732.848806][ T6801] veth0_vlan: left promiscuous mode [ 734.296112][ T6801] team0 (unregistering): Port device team_slave_1 removed [ 734.412275][ T6801] team0 (unregistering): Port device team_slave_0 removed [ 736.376709][T12741] chnl_net:caif_netlink_parms(): no params data found [ 736.801212][T12843] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1753'. [ 737.467785][T12844] bridge2: entered promiscuous mode [ 737.552947][T12741] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.591761][T12741] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.634041][T12741] bridge_slave_0: entered allmulticast mode [ 737.651501][T12741] bridge_slave_0: entered promiscuous mode [ 737.681333][T12741] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.688515][T12741] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.736404][T12741] bridge_slave_1: entered allmulticast mode [ 737.752353][T12741] bridge_slave_1: entered promiscuous mode [ 737.904759][T12854] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1757'. [ 738.016639][T12741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.057806][T12741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.285550][T12862] FAULT_INJECTION: forcing a failure. [ 738.285550][T12862] name failslab, interval 1, probability 0, space 0, times 0 [ 738.333322][T12862] CPU: 0 UID: 0 PID: 12862 Comm: syz.0.1758 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 738.333354][T12862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 738.333367][T12862] Call Trace: [ 738.333376][T12862] [ 738.333385][T12862] dump_stack_lvl+0x189/0x250 [ 738.333421][T12862] ? __pfx____ratelimit+0x10/0x10 [ 738.333451][T12862] ? __pfx_dump_stack_lvl+0x10/0x10 [ 738.333481][T12862] ? __pfx__printk+0x10/0x10 [ 738.333508][T12862] ? __pfx___might_resched+0x10/0x10 [ 738.333536][T12862] ? fs_reclaim_acquire+0x7d/0x100 [ 738.333570][T12862] should_fail_ex+0x414/0x560 [ 738.333599][T12862] ? alloc_netdev_mqs+0xa6/0x11e0 [ 738.333625][T12862] should_failslab+0xa8/0x100 [ 738.333653][T12862] __kvmalloc_node_noprof+0x161/0x5f0 [ 738.333679][T12862] ? alloc_netdev_mqs+0xa6/0x11e0 [ 738.333704][T12862] ? snprintf+0xda/0x120 [ 738.333729][T12862] ? __pfx_ip6erspan_tap_setup+0x10/0x10 [ 738.333755][T12862] alloc_netdev_mqs+0xa6/0x11e0 [ 738.333781][T12862] ? __pfx_ip6erspan_tap_setup+0x10/0x10 [ 738.333812][T12862] ? __pfx_snprintf+0x10/0x10 [ 738.333840][T12862] rtnl_create_link+0x31f/0xd10 [ 738.333874][T12862] rtnl_newlink_create+0x25c/0xb00 [ 738.333903][T12862] ? __mutex_lock+0x51b/0xe80 [ 738.333938][T12862] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 738.333959][T12862] ? rtnl_newlink+0x8db/0x1c70 [ 738.333980][T12862] ? __pfx___mutex_lock+0x10/0x10 [ 738.334033][T12862] ? ns_capable+0x8a/0xf0 [ 738.334065][T12862] rtnl_newlink+0x16d6/0x1c70 [ 738.334087][T12862] ? netlink_sendmsg+0x805/0xb30 [ 738.334123][T12862] ? __pfx_rtnl_newlink+0x10/0x10 [ 738.334168][T12862] ? kasan_quarantine_put+0xdd/0x220 [ 738.334189][T12862] ? lockdep_hardirqs_on+0x9c/0x150 [ 738.334224][T12862] ? nlmon_xmit+0xb0/0x100 [ 738.334249][T12862] ? kmem_cache_free+0x18f/0x400 [ 738.334280][T12862] ? __local_bh_enable_ip+0x12d/0x1c0 [ 738.334308][T12862] ? lockdep_hardirqs_on+0x9c/0x150 [ 738.334341][T12862] ? __local_bh_enable_ip+0x12d/0x1c0 [ 738.334368][T12862] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 738.334399][T12862] ? __dev_queue_xmit+0x27e/0x3a70 [ 738.334424][T12862] ? __dev_queue_xmit+0x27e/0x3a70 [ 738.334447][T12862] ? __dev_queue_xmit+0x27e/0x3a70 [ 738.334473][T12862] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 738.334505][T12862] ? __lock_acquire+0xab9/0xd20 [ 738.334559][T12862] ? __pfx_rtnl_newlink+0x10/0x10 [ 738.334577][T12862] rtnetlink_rcv_msg+0x7cc/0xb70 [ 738.334612][T12862] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 738.334642][T12862] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 738.334671][T12862] ? ref_tracker_free+0x63a/0x7d0 [ 738.334693][T12862] ? __copy_skb_header+0xa7/0x550 [ 738.334720][T12862] ? __pfx_ref_tracker_free+0x10/0x10 [ 738.334744][T12862] ? __skb_clone+0x63/0x7a0 [ 738.334776][T12862] netlink_rcv_skb+0x205/0x470 [ 738.334806][T12862] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 738.334839][T12862] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 738.334874][T12862] ? netlink_deliver_tap+0x2e/0x1b0 [ 738.334896][T12862] ? netlink_deliver_tap+0x2e/0x1b0 [ 738.334924][T12862] netlink_unicast+0x758/0x8d0 [ 738.334967][T12862] netlink_sendmsg+0x805/0xb30 [ 738.335000][T12862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 738.335030][T12862] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 738.335054][T12862] ? __pfx_netlink_sendmsg+0x10/0x10 [ 738.335077][T12862] __sock_sendmsg+0x219/0x270 [ 738.335108][T12862] ____sys_sendmsg+0x505/0x830 [ 738.335137][T12862] ? __pfx_____sys_sendmsg+0x10/0x10 [ 738.335170][T12862] ? import_iovec+0x74/0xa0 [ 738.335206][T12862] ___sys_sendmsg+0x21f/0x2a0 [ 738.335232][T12862] ? __pfx____sys_sendmsg+0x10/0x10 [ 738.335296][T12862] ? __fget_files+0x2a/0x420 [ 738.335322][T12862] ? __fget_files+0x3a0/0x420 [ 738.335360][T12862] __x64_sys_sendmsg+0x19b/0x260 [ 738.335386][T12862] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 738.335421][T12862] ? __pfx_ksys_write+0x10/0x10 [ 738.335441][T12862] ? rcu_is_watching+0x15/0xb0 [ 738.335476][T12862] ? do_syscall_64+0xbe/0x3b0 [ 738.335509][T12862] do_syscall_64+0xfa/0x3b0 [ 738.335536][T12862] ? lockdep_hardirqs_on+0x9c/0x150 [ 738.335563][T12862] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.335582][T12862] ? clear_bhb_loop+0x60/0xb0 [ 738.335607][T12862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.335626][T12862] RIP: 0033:0x7fa5c278e929 [ 738.335643][T12862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 738.335660][T12862] RSP: 002b:00007fa5c359c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 738.335681][T12862] RAX: ffffffffffffffda RBX: 00007fa5c29b5fa0 RCX: 00007fa5c278e929 [ 738.335696][T12862] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000005 [ 738.335709][T12862] RBP: 00007fa5c359c090 R08: 0000000000000000 R09: 0000000000000000 [ 738.335721][T12862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.335733][T12862] R13: 0000000000000000 R14: 00007fa5c29b5fa0 R15: 00007fff7902cae8 [ 738.335766][T12862] [ 738.840418][T12864] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 738.980707][T12741] team0: Port device team_slave_0 added [ 739.088333][T12741] team0: Port device team_slave_1 added [ 740.523669][T12741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 740.564667][T12741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 740.617551][T12886] fuse: root generation should be zero [ 740.640658][T12741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 740.664570][T12741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 740.671725][T12741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 740.710176][T12885] --map-set only usable from mangle table [ 740.716820][T12741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.081945][T12895] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1767'. [ 741.199207][T12741] hsr_slave_0: entered promiscuous mode [ 741.222296][T12741] hsr_slave_1: entered promiscuous mode [ 741.525463][T12741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 741.760339][T12741] Cannot create hsr debugfs directory [ 741.932670][T12907] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1770'. [ 741.979910][T12895] bridge3: entered promiscuous mode [ 742.099765][ T5883] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 742.331904][ T977] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 742.499845][ T5883] usb 2-1: config index 0 descriptor too short (expected 1051, got 27) [ 742.508169][ T5883] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 742.799523][ T977] usb 5-1: Using ep0 maxpacket: 8 [ 742.833372][ T977] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid wMaxPacketSize 0 [ 742.834219][ T5883] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 742.850204][ T977] usb 5-1: config 0 interface 0 has no altsetting 0 [ 742.881263][ T977] usb 5-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e [ 742.900448][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.914487][ T5883] usb 2-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149 [ 742.925829][ T977] usb 5-1: Product: syz [ 742.935571][ T977] usb 5-1: Manufacturer: syz [ 742.939902][ T5883] usb 2-1: config 0 interface 0 has no altsetting 0 [ 742.953724][ T977] usb 5-1: SerialNumber: syz [ 742.970305][ T5883] usb 2-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 742.999672][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.028089][ T5883] usb 2-1: Product: syz [ 743.031275][ T977] usb 5-1: config 0 descriptor?? [ 743.053651][ T977] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 found [ 743.072144][ T5883] usb 2-1: Manufacturer: syz [ 743.076848][ T5883] usb 2-1: SerialNumber: syz [ 743.126967][ T5883] usb 2-1: config 0 descriptor?? [ 743.141459][T12898] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 743.263612][ T977] snd_usb_toneport 5-1:0.0: cannot get proper max packet size [ 743.304392][ T977] snd_usb_toneport 5-1:0.0: Line 6 TonePort UX2 now disconnected [ 743.368346][ T977] snd_usb_toneport 5-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 743.463004][T12912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1771'. [ 743.702190][ T5883] keyspan 2-1:0.0: Keyspan 4 port adapter converter detected [ 743.710207][ T5883] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7 [ 743.730452][ T5883] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81 [ 743.738316][ T5883] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1 [ 743.983459][ T5883] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 744.034364][ T5883] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 82 [ 744.075241][ T5883] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2 [ 744.113943][ T5883] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 744.163430][ T5883] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83 [ 744.231539][ T5883] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3 [ 744.507741][T12932] deleting an unspecified loop device is not supported. [ 744.893152][ T5883] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 744.913153][ T5883] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 84 [ 744.946363][ T5883] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4 [ 745.064172][ T5883] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 745.445179][ T5883] usb 2-1: USB disconnect, device number 11 [ 745.553682][ T5883] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 745.568105][ T5883] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 745.582017][ T5883] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 745.594956][ T5883] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 745.608234][ T5883] keyspan 2-1:0.0: device disconnected [ 746.010467][ T977] usb 5-1: USB disconnect, device number 19 [ 746.511124][ T977] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 746.988203][ T30] audit: type=1326 audit(1751619279.572:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12952 comm="syz.8.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a338e929 code=0x7ffc0000 [ 746.992090][ T977] usb 5-1: config 0 has an invalid interface number: 106 but max is 0 [ 747.075960][ T977] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 747.117326][ T977] usb 5-1: config 0 has no interface number 0 [ 747.159607][ T30] audit: type=1326 audit(1751619279.572:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12952 comm="syz.8.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a338e929 code=0x7ffc0000 [ 747.199960][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.206332][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.210970][ T977] usb 5-1: New USB device found, idVendor=045b, idProduct=024d, bcdDevice=27.16 [ 747.257600][ T30] audit: type=1326 audit(1751619279.572:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12952 comm="syz.8.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc9a338e929 code=0x7ffc0000 [ 747.310213][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.318683][T12741] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 747.346844][ T30] audit: type=1326 audit(1751619279.572:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12952 comm="syz.8.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a338e929 code=0x7ffc0000 [ 747.392079][T12741] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 747.410057][ T30] audit: type=1326 audit(1751619279.612:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12952 comm="syz.8.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fc9a338e929 code=0x7ffc0000 [ 747.440071][ T977] usb 5-1: Product: syz [ 747.444304][ T977] usb 5-1: Manufacturer: syz [ 747.446638][T12741] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 747.448918][ T977] usb 5-1: SerialNumber: syz [ 747.541391][ T977] usb 5-1: config 0 descriptor?? [ 747.579250][ T30] audit: type=1326 audit(1751619279.612:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12952 comm="syz.8.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a338e929 code=0x7ffc0000 [ 747.653837][T12741] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 747.704802][ T30] audit: type=1326 audit(1751619279.612:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12952 comm="syz.8.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a338e929 code=0x7ffc0000 [ 747.730287][ T30] audit: type=1326 audit(1751619279.632:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12952 comm="syz.8.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fc9a338e929 code=0x7ffc0000 [ 747.762383][T12944] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 747.768960][ T30] audit: type=1326 audit(1751619279.632:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12952 comm="syz.8.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc9a332ab19 code=0x7ffc0000 [ 747.799600][ T30] audit: type=1326 audit(1751619279.632:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12952 comm="syz.8.1780" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc9a332ab19 code=0x7ffc0000 [ 747.838193][ T977] usb 5-1: USB disconnect, device number 20 [ 748.048569][T12960] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1783'. [ 748.390920][T12741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 748.595351][T12741] 8021q: adding VLAN 0 to HW filter on device team0 [ 749.464303][ T8654] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.471531][ T8654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 750.245491][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.252723][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 750.442143][T12986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1788'. [ 750.553616][T12986] vcan0: entered promiscuous mode [ 751.250598][T12986] vcan0: entered allmulticast mode [ 751.449560][ T5883] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 752.067323][T13000] trusted_key: encrypted_key: insufficient parameters specified [ 752.107078][ T5883] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 752.276355][ T5883] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 752.330714][ T5883] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 752.355055][ T5883] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.756482][ T5883] usb 2-1: Product: syz [ 752.780897][ T5883] usb 2-1: Manufacturer: syz [ 752.785566][ T5883] usb 2-1: SerialNumber: syz [ 753.402064][ T5883] usb 2-1: 0:2 : does not exist [ 753.946655][ T5883] usb 2-1: USB disconnect, device number 12 [ 754.258946][T12741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 754.910444][T13019] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1796'. [ 756.064495][T13036] xt_CT: No such helper "netbios-ns" [ 756.539902][T13047] netlink: 'syz.8.1802': attribute type 39 has an invalid length. [ 756.612735][T13049] nvme_fabrics: unknown parameter or missing value 'vegas' in ctrl creation request [ 757.203388][T12741] veth0_vlan: entered promiscuous mode [ 757.242041][T12741] veth1_vlan: entered promiscuous mode [ 757.976538][T12741] veth0_macvtap: entered promiscuous mode [ 758.013480][T12741] veth1_macvtap: entered promiscuous mode [ 758.051566][T13059] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1805'. [ 758.219191][T12741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 758.275106][T12741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 758.314293][T13062] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1806'. [ 758.349209][T12741] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.388384][T12741] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.442571][T12741] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.446837][T13067] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1808'. [ 758.461582][T12741] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.474645][T13067] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1808'. [ 758.521426][T13062] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 758.532335][T13062] qnx6: wrong signature (magic) in superblock #1. [ 758.538762][T13062] qnx6: unable to read the first superblock [ 759.127719][ T4899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.167496][ T4899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.358362][ T4899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.418279][T13075] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1811'. [ 759.422964][ T4899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 761.856648][T13107] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.1817'. [ 763.346494][T10958] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.592086][T13122] syz.4.1820: attempt to access beyond end of device [ 763.592086][T13122] nbd4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 763.629491][T13122] EXT4-fs (nbd4): unable to read superblock [ 763.723067][T10958] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.458729][ T5962] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 764.503655][T10958] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.536041][ T5962] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 764.595572][ T5962] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 764.625255][ T5962] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 764.649927][ T5962] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 764.660953][ T5962] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 764.678634][ T5962] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 764.698913][ T5962] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 764.707006][ T977] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 764.720473][ T5962] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 764.738470][ T5962] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 764.758696][ T5962] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 764.778978][ T5962] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 764.787057][ T5962] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 764.810314][ T5962] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 764.820489][ T5962] hid-generic 00A0:0006:0003.0007: unknown main item tag 0x0 [ 764.841640][T13138] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1825'. [ 764.879172][ T5962] hid-generic 00A0:0006:0003.0007: hidraw0: HID v0.05 Device [syz1] on syz0 [ 764.889652][ T977] usb 5-1: Using ep0 maxpacket: 16 [ 764.908250][T10958] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 764.931067][ T977] usb 5-1: config 0 has no interfaces? [ 764.991512][ T5139] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 765.013817][ T5139] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 765.014960][ T977] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 765.033703][ T5139] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 765.052012][ T5139] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 765.063320][ T5139] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 765.112139][T13129] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1823'. [ 765.124426][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.543389][ T977] usb 5-1: Product: syz [ 766.000663][ T977] usb 5-1: Manufacturer: syz [ 766.010292][ T977] usb 5-1: SerialNumber: syz [ 766.030699][ T977] usb 5-1: config 0 descriptor?? [ 766.128901][T13139] lo speed is unknown, defaulting to 1000 [ 766.271905][ T5904] usb 5-1: USB disconnect, device number 21 [ 766.458416][T13150] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 47877 - 0 [ 766.489100][T13150] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 47877 - 0 [ 766.539051][T13150] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 47877 - 0 [ 766.559499][T13150] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 47877 - 0 [ 766.637157][T13150] netdevsim netdevsim0 eth0: set [1, 2] type 2 family 0 port 55424 - 0 [ 766.648002][T13153] netlink: 5280 bytes leftover after parsing attributes in process `syz.1.1829'. [ 766.967811][T13150] netdevsim netdevsim0 eth1: set [1, 2] type 2 family 0 port 55424 - 0 [ 767.270689][ T5139] Bluetooth: hci0: command tx timeout [ 767.384466][T13150] netdevsim netdevsim0 eth2: set [1, 2] type 2 family 0 port 55424 - 0 [ 767.620742][T13150] netdevsim netdevsim0 eth3: set [1, 2] type 2 family 0 port 55424 - 0 [ 767.784117][T13150] geneve2: entered promiscuous mode [ 767.870068][T13150] geneve2: entered allmulticast mode [ 767.971865][T10958] bridge_slave_1: left allmulticast mode [ 767.977914][T10958] bridge_slave_1: left promiscuous mode [ 767.989599][T10958] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.056576][T10958] bridge_slave_0: left allmulticast mode [ 768.062521][T10958] bridge_slave_0: left promiscuous mode [ 768.073279][T10958] bridge0: port 1(bridge_slave_0) entered disabled state [ 769.189663][ T3405] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 769.329917][ T5139] Bluetooth: hci0: command tx timeout [ 769.387005][ T3405] usb 1-1: Using ep0 maxpacket: 8 [ 769.429480][ T3405] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 769.456306][ T3405] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 769.483023][ T3405] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 769.517102][ T3405] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 769.556689][ T3405] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 769.584884][ T3405] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.894595][ T3405] usb 1-1: usb_control_msg returned -71 [ 769.900520][ T3405] usbtmc 1-1:16.0: can't read capabilities [ 769.946181][ T3405] usb 1-1: USB disconnect, device number 26 [ 770.004720][T10958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 770.031077][T10958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 770.048415][T10958] bond0 (unregistering): Released all slaves [ 770.478288][T13186] futex_wake_op: syz.1.1834 tries to shift op by -1; fix this program [ 770.890211][T13190] delete_channel: no stack [ 770.952137][T13197] input: syz0 as /devices/virtual/input/input17 [ 770.964266][T13139] chnl_net:caif_netlink_parms(): no params data found [ 771.082681][T13197] mkiss: ax0: crc mode is auto. [ 771.425390][ T5139] Bluetooth: hci0: command tx timeout [ 771.759848][T10958] hsr_slave_0: left promiscuous mode [ 771.810028][T10958] hsr_slave_1: left promiscuous mode [ 771.817420][T10958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 771.845689][T10958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 771.900513][T10958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 771.938612][T10958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 772.023199][T10958] veth1_macvtap: left promiscuous mode [ 772.064177][T10958] veth0_macvtap: left promiscuous mode [ 772.085573][T10958] veth1_vlan: left promiscuous mode [ 772.105807][T10958] veth0_vlan: left promiscuous mode [ 773.489984][ T5139] Bluetooth: hci0: command tx timeout [ 775.301203][T13233] ucma_write: process 183 (syz.1.1844) changed security contexts after opening file descriptor, this is not allowed. [ 776.183357][T10958] team0 (unregistering): Port device team_slave_1 removed [ 776.297916][T10958] team0 (unregistering): Port device team_slave_0 removed [ 776.469430][ T5944] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 776.627651][ T5944] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 776.638127][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.663463][ T5944] usb 2-1: config 0 descriptor?? [ 776.682286][ T5944] cp210x 2-1:0.0: cp210x converter detected [ 776.896860][ T5944] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 776.915168][ T5944] cp210x 2-1:0.0: querying part number failed [ 776.965930][ T5944] usb 2-1: cp210x converter now attached to ttyUSB0 [ 777.707528][T13139] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.725103][T13139] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.735083][T13139] bridge_slave_0: entered allmulticast mode [ 777.747338][T13139] bridge_slave_0: entered promiscuous mode [ 777.757568][T13139] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.786412][T13139] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.804864][T13139] bridge_slave_1: entered allmulticast mode [ 777.817485][T13139] bridge_slave_1: entered promiscuous mode [ 777.870558][ T5904] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 777.970919][T13139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 778.016329][T13139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.050367][ T5904] usb 5-1: Using ep0 maxpacket: 32 [ 778.057895][ T5904] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 778.074330][ T5904] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 778.106444][ T5904] usb 5-1: config 1 interface 2 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 778.109667][ T3405] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 778.119952][ T5904] usb 5-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 778.146735][ T5904] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 778.157724][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.186090][T13139] team0: Port device team_slave_0 added [ 778.197167][T13139] team0: Port device team_slave_1 added [ 778.205220][ T5904] usb 5-1: Product: syz [ 778.212505][ T5904] usb 5-1: Manufacturer: syz [ 778.221942][ T5904] usb 5-1: SerialNumber: syz [ 778.286088][T13139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 778.294938][T13139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 778.319690][ T3405] usb 1-1: Using ep0 maxpacket: 16 [ 778.327044][T13139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 778.339949][ T3405] usb 1-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47 [ 778.343016][T13139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 778.349049][ T3405] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.349075][ T3405] usb 1-1: Product: syz [ 778.349091][ T3405] usb 1-1: Manufacturer: syz [ 778.349108][ T3405] usb 1-1: SerialNumber: syz [ 778.358944][T13139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 778.406544][T13139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 778.463874][ T3405] usb 1-1: config 0 descriptor?? [ 778.488274][ T3405] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 778.637688][T13139] hsr_slave_0: entered promiscuous mode [ 778.655243][T13139] hsr_slave_1: entered promiscuous mode [ 778.671609][T13139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 778.687284][ T3405] gspca_sn9c2028: read1 error -32 [ 778.688961][T13139] Cannot create hsr debugfs directory [ 778.954088][ T3405] gspca_sn9c2028: read1 error -71 [ 778.977271][ T3405] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -71 [ 779.141400][ T3405] usb 1-1: USB disconnect, device number 27 [ 779.821505][ T43] usb 2-1: USB disconnect, device number 13 [ 779.910436][ T43] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 779.940032][ T43] cp210x 2-1:0.0: device disconnected [ 779.951840][ T5904] usb 5-1: USB disconnect, device number 22 [ 779.972898][ T5139] Bluetooth: hci5: command 0x0406 tx timeout [ 780.234949][T13238] udevd[13238]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 780.322111][T13273] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1855'. [ 780.630336][T13266] delete_channel: no stack [ 780.950490][T13280] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 781.029467][ T30] kauditd_printk_skb: 270 callbacks suppressed [ 781.029491][ T30] audit: type=1326 audit(1751619313.562:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13277 comm="syz.0.1858" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa5c278e929 code=0x0 [ 782.680399][ T30] audit: type=1326 audit(1751619315.242:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13292 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c278e929 code=0x7ffc0000 [ 782.786657][ T30] audit: type=1326 audit(1751619315.242:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13292 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c278e929 code=0x7ffc0000 [ 782.867055][ T30] audit: type=1326 audit(1751619315.242:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13292 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fa5c278e929 code=0x7ffc0000 [ 782.897546][ T5904] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 783.154405][ T5904] usb 5-1: Using ep0 maxpacket: 16 [ 783.357611][ T30] audit: type=1326 audit(1751619315.242:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13292 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c278e929 code=0x7ffc0000 [ 783.385019][ T30] audit: type=1326 audit(1751619315.252:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13292 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fa5c278e929 code=0x7ffc0000 [ 783.395550][ T5904] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=d3.06 [ 783.422360][ T30] audit: type=1326 audit(1751619315.252:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13292 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa5c278e929 code=0x7ffc0000 [ 783.477534][ T30] audit: type=1326 audit(1751619315.252:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13292 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa5c2790847 code=0x7ffc0000 [ 783.542402][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 783.561441][ T30] audit: type=1326 audit(1751619315.252:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13292 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa5c27907bc code=0x7ffc0000 [ 783.575020][ T5904] usb 5-1: Product: syz [ 783.612997][ T5904] usb 5-1: Manufacturer: syz [ 783.636103][ T5904] usb 5-1: SerialNumber: syz [ 783.647153][ T30] audit: type=1326 audit(1751619315.252:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13292 comm="syz.0.1863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa5c27906f4 code=0x7ffc0000 [ 783.836623][T13309] netlink: 248 bytes leftover after parsing attributes in process `syz.8.1866'. [ 783.889926][ T5904] r8152-cfgselector 5-1: Unknown version 0x0000 [ 783.920691][ T5904] r8152-cfgselector 5-1: config 0 descriptor?? [ 784.370003][ T5904] r8152-cfgselector 5-1: USB disconnect, device number 23 [ 784.410702][T13315] tipc: Failed to remove unknown binding: 66,1,1/0:4030562544/4030562546 [ 785.213345][T13139] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 785.263778][T13139] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 785.295155][T13139] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 785.348267][T13139] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 786.231015][T13139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 786.384037][T13139] 8021q: adding VLAN 0 to HW filter on device team0 [ 786.469057][ T1038] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.476315][ T1038] bridge0: port 1(bridge_slave_0) entered forwarding state [ 786.514723][ T1038] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.521995][ T1038] bridge0: port 2(bridge_slave_1) entered forwarding state [ 786.589668][ T5890] usb 9-1: new full-speed USB device number 25 using dummy_hcd [ 786.605458][T13341] netlink: 'syz.0.1878': attribute type 5 has an invalid length. [ 786.976783][ T5890] usb 9-1: unable to get BOS descriptor or descriptor too short [ 786.987863][ T5890] usb 9-1: not running at top speed; connect to a high speed hub [ 787.041644][ T5890] usb 9-1: config 1 has an invalid interface number: 138 but max is 0 [ 787.079793][ T5890] usb 9-1: config 1 has no interface number 0 [ 787.086003][ T5890] usb 9-1: config 1 interface 138 has no altsetting 0 [ 787.113867][ T5890] usb 9-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 787.129949][ T5890] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.169579][ T5890] usb 9-1: Product: syz [ 787.189440][ T5890] usb 9-1: Manufacturer: syz [ 787.194128][ T5890] usb 9-1: SerialNumber: syz [ 787.897159][T13361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.909449][T13361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.418892][T13139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 788.566715][T13364] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1882'. [ 789.246763][T13364] bridge3: entered promiscuous mode [ 789.269214][T13367] 9pnet_fd: Insufficient options for proto=fd [ 790.135580][ T5890] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 790.319074][ T5890] usb 9-1: USB disconnect, device number 25 [ 790.468590][T13373] udevd[13373]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 790.870936][T13386] use of bytesused == 0 is deprecated and will be removed in the future, [ 790.880388][T13386] use the actual size instead. [ 790.920102][ T5904] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 790.932118][ T5883] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 791.071633][ T5904] usb 1-1: Using ep0 maxpacket: 16 [ 791.082223][ T5904] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.082690][ T5890] usb 9-1: new low-speed USB device number 26 using dummy_hcd [ 791.119555][ T5883] usb 2-1: Using ep0 maxpacket: 16 [ 791.136238][ T5883] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 791.146367][ T5883] usb 2-1: config 0 has no interface number 0 [ 791.153318][ T5883] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.165813][ T5883] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.167708][T13139] veth0_vlan: entered promiscuous mode [ 791.186226][ T5883] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 791.197801][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.201120][ T5904] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.234225][ T5904] usb 1-1: config 0 interface 0 has no altsetting 0 [ 791.252866][ T5883] usb 2-1: config 0 descriptor?? [ 791.265521][T13139] veth1_vlan: entered promiscuous mode [ 791.280191][ T5904] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 791.313027][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.323136][ T5890] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 791.354338][ T5890] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.371713][ T5904] usb 1-1: config 0 descriptor?? [ 791.395949][T13139] veth0_macvtap: entered promiscuous mode [ 791.400598][ T5890] usb 9-1: config 0 descriptor?? [ 791.454139][T13139] veth1_macvtap: entered promiscuous mode [ 791.544047][T13139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 791.603759][T13139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 791.614564][T13381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.639480][ T5890] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 791.653659][T13139] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.696370][T13381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.699676][ T5890] asix 9-1:0.0: probe with driver asix failed with error -32 [ 791.715224][T13139] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.755725][T13139] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.923065][T13139] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.938534][ T5904] hid (null): global environment stack underflow [ 791.949566][ T5883] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0008/input/input18 [ 791.992808][ T5890] usb 9-1: USB disconnect, device number 26 [ 792.033448][ T5904] usb 1-1: USB disconnect, device number 28 [ 792.209594][ T5139] Bluetooth: hci0: command 0x0405 tx timeout [ 792.377487][ T5883] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0008/input/input19 [ 792.657077][ T5883] uclogic 0003:28BD:0071.0008: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.1-1/input1 [ 792.706152][T13399] bridge2: entered promiscuous mode [ 792.798976][T13407] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1893'. [ 793.334605][T13407] bridge4: entered promiscuous mode [ 793.808425][ T5890] usb 2-1: reset high-speed USB device number 14 using dummy_hcd [ 794.057440][T13415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1894'. [ 794.421300][T10958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.479257][T10958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.618277][T12617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.655646][T12617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.795068][T13428] netlink: 'syz.8.1899': attribute type 5 has an invalid length. [ 795.008399][ T5944] usb 2-1: USB disconnect, device number 14 [ 795.451686][T13440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1902'. [ 795.948910][T12617] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.089234][T13450] tun0: tun_chr_ioctl cmd 1074025678 [ 796.095016][T13450] tun0: group set to 0 [ 796.383227][T12617] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.518700][T12617] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.618777][T12617] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 796.832445][T12617] bridge_slave_1: left allmulticast mode [ 796.838164][T12617] bridge_slave_1: left promiscuous mode [ 796.861999][T12617] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.929171][T13457] FAULT_INJECTION: forcing a failure. [ 796.929171][T13457] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 796.965817][T12617] bridge_slave_0: left allmulticast mode [ 796.979754][T13457] CPU: 1 UID: 0 PID: 13457 Comm: syz.4.1908 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 796.979783][T13457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 796.979795][T13457] Call Trace: [ 796.979802][T13457] [ 796.979810][T13457] dump_stack_lvl+0x189/0x250 [ 796.979843][T13457] ? __pfx____ratelimit+0x10/0x10 [ 796.979869][T13457] ? __pfx_dump_stack_lvl+0x10/0x10 [ 796.979897][T13457] ? __pfx__printk+0x10/0x10 [ 796.979916][T13457] ? __might_fault+0xb0/0x130 [ 796.979950][T13457] should_fail_ex+0x414/0x560 [ 796.979976][T13457] _copy_from_user+0x2d/0xb0 [ 796.980024][T13457] ___sys_sendmsg+0x158/0x2a0 [ 796.980051][T13457] ? __pfx____sys_sendmsg+0x10/0x10 [ 796.980109][T13457] ? __fget_files+0x2a/0x420 [ 796.980135][T13457] ? __fget_files+0x3a0/0x420 [ 796.980176][T13457] __x64_sys_sendmsg+0x19b/0x260 [ 796.980201][T13457] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 796.980235][T13457] ? __pfx_ksys_write+0x10/0x10 [ 796.980255][T13457] ? rcu_is_watching+0x15/0xb0 [ 796.980290][T13457] ? do_syscall_64+0xbe/0x3b0 [ 796.980322][T13457] do_syscall_64+0xfa/0x3b0 [ 796.980349][T13457] ? lockdep_hardirqs_on+0x9c/0x150 [ 796.980377][T13457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.980397][T13457] ? clear_bhb_loop+0x60/0xb0 [ 796.980421][T13457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 796.980441][T13457] RIP: 0033:0x7fb617f8e929 [ 796.980459][T13457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 796.980475][T13457] RSP: 002b:00007fb618e44038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 796.980496][T13457] RAX: ffffffffffffffda RBX: 00007fb6181b5fa0 RCX: 00007fb617f8e929 [ 796.980510][T13457] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 796.980522][T13457] RBP: 00007fb618e44090 R08: 0000000000000000 R09: 0000000000000000 [ 796.980534][T13457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 796.980546][T13457] R13: 0000000000000000 R14: 00007fb6181b5fa0 R15: 00007ffe5aaefd68 [ 796.980588][T13457] [ 797.218007][T12617] bridge_slave_0: left promiscuous mode [ 797.224207][T12617] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.180096][T13484] cgroup: Invalid name [ 798.869763][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 798.881942][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 798.892466][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 798.926107][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 798.939470][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 799.009916][ T31] INFO: task syz.9.1556:12077 blocked for more than 143 seconds. [ 799.018150][ T31] Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 [ 799.036090][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 799.045118][ T31] task:syz.9.1556 state:D stack:24968 pid:12077 tgid:12074 ppid:8750 task_flags:0x400140 flags:0x00004004 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 799.057243][ T31] Call Trace: [ 799.060627][ T31] [ 799.063805][ T31] __schedule+0x16a2/0x4cb0 [ 799.068490][ T31] ? do_raw_spin_lock+0x121/0x290 [ 799.073919][ T31] ? schedule+0x165/0x360 [ 799.078307][ T31] ? __lock_acquire+0xab9/0xd20 [ 799.087918][ T31] ? __pfx___schedule+0x10/0x10 [ 799.094833][ T31] ? schedule+0x91/0x360 [ 799.099266][ T31] schedule+0x165/0x360 [ 799.103531][ T31] super_lock+0x1c8/0x3b0 [ 799.107905][ T31] ? __pfx_super_lock+0x10/0x10 [ 799.118490][ T31] ? do_raw_spin_lock+0x121/0x290 [ 799.124044][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 799.132396][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 799.137749][ T31] __iterate_supers+0x126/0x250 [ 799.163064][ T31] ? __pfx_quota_sync_one+0x10/0x10 [ 799.168371][ T31] __se_sys_quotactl+0x353/0x950 [ 799.197088][ T31] ? __se_sys_futex+0x36f/0x400 [ 799.219348][ T31] ? __pfx___se_sys_quotactl+0x10/0x10 [ 799.249864][ T31] ? rcu_is_watching+0x15/0xb0 [ 799.254731][ T31] ? do_syscall_64+0xbe/0x3b0 [ 799.297800][ T31] do_syscall_64+0xfa/0x3b0 [ 799.325785][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 799.348422][T13497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1917'. [ 799.379655][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.385816][ T31] ? clear_bhb_loop+0x60/0xb0 [ 799.409958][T13497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1917'. [ 799.436984][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.449616][ T31] RIP: 0033:0x7f0288f8e929 [ 799.454112][ T31] RSP: 002b:00007f0289eac038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 799.486109][ T31] RAX: ffffffffffffffda RBX: 00007f02891b5fa0 RCX: 00007f0288f8e929 [ 799.495855][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff80000102 [ 799.513120][ T31] RBP: 00007f0289010b39 R08: 0000000000000000 R09: 0000000000000000 [ 799.526996][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 799.539812][ T31] R13: 0000000000000000 R14: 00007f02891b5fa0 R15: 00007ffec6fd8238 [ 799.547857][ T31] [ 799.557618][ T31] [ 799.557618][ T31] Showing all locks held in the system: [ 799.569044][ T31] 1 lock held by khungtaskd/31: [ 799.580369][ T31] #0: ffffffff8e13ee20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 799.595919][ T31] 3 locks held by kworker/0:2/977: [ 799.629549][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 799.658356][ T31] #1: ffffc900038bfbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 799.677364][ T31] #2: ffffffff8f4fd948 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 799.688324][ T31] 2 locks held by getty/5579: [ 799.699317][ T31] #0: ffff8880356220a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 799.718980][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 799.729992][ T31] 3 locks held by kworker/u8:16/10958: [ 799.735586][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 799.754782][ T31] #1: ffffc9000e1f7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 799.773063][ T31] #2: ffffffff8f4fd948 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 799.788382][ T31] 1 lock held by syz.5.1535/11990: [ 799.794650][ T31] 5 locks held by kworker/u8:17/12617: [ 799.807741][ T31] #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 799.830462][ T31] #1: ffffc900001e7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 799.841556][ T31] #2: ffffffff8f4f0d50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 799.851250][ T31] #3: ffffffff8f4fd948 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 799.860718][ T31] #4: ffffffff8e144938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 799.872234][ T31] 1 lock held by syz.8.1913/13484: [ 799.877392][ T31] #0: ffffffff8f4fd948 (rtnl_mutex){+.+.}-{4:4}, at: arp_ioctl+0x2f5/0x450 [ 799.901860][ T31] 1 lock held by syz-executor/13486: [ 799.907208][ T31] #0: ffffffff8f4fd948 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 799.920580][ T31] 1 lock held by syz.0.1917/13492: [ 799.925756][ T31] #0: ffffffff8f4fd948 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1df0 [ 799.936427][ T31] 1 lock held by syz.0.1917/13494: [ 799.941905][ T31] #0: ffffffff8f4fd948 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1df0 [ 799.951632][ T31] 1 lock held by syz.0.1917/13496: [ 799.956781][ T31] #0: ffffffff8f4fd948 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1df0 [ 799.966748][ T31] 2 locks held by syz.1.1916/13493: [ 799.972331][ T31] #0: ffff8880293420e0 (&type->s_umount_key#59){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 799.983039][ T31] #1: ffffffff8e144938 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 799.998929][ T31] [ 800.021453][ T31] ============================================= [ 800.021453][ T31] [ 800.038303][ T31] NMI backtrace for cpu 1 [ 800.038320][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 800.038342][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 800.038354][ T31] Call Trace: [ 800.038361][ T31] [ 800.038368][ T31] dump_stack_lvl+0x189/0x250 [ 800.038399][ T31] ? __wake_up_klogd+0xd9/0x110 [ 800.038420][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 800.038458][ T31] ? __pfx__printk+0x10/0x10 [ 800.038491][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 800.038530][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 800.038550][ T31] ? _printk+0xcf/0x120 [ 800.038574][ T31] ? __pfx__printk+0x10/0x10 [ 800.038595][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 800.038622][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 800.038650][ T31] watchdog+0xfee/0x1030 [ 800.038678][ T31] ? watchdog+0x1de/0x1030 [ 800.038730][ T31] kthread+0x711/0x8a0 [ 800.038756][ T31] ? __pfx_watchdog+0x10/0x10 [ 800.038780][ T31] ? __pfx_kthread+0x10/0x10 [ 800.038803][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 800.038830][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 800.038867][ T31] ? __pfx_kthread+0x10/0x10 [ 800.038889][ T31] ret_from_fork+0x3fc/0x770 [ 800.038937][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 800.038971][ T31] ? __switch_to_asm+0x39/0x70 [ 800.038989][ T31] ? __switch_to_asm+0x33/0x70 [ 800.039007][ T31] ? __pfx_kthread+0x10/0x10 [ 800.039029][ T31] ret_from_fork_asm+0x1a/0x30 [ 800.039067][ T31] [ 800.039075][ T31] Sending NMI from CPU 1 to CPUs 0: [ 800.199698][ C0] NMI backtrace for cpu 0 [ 800.199716][ C0] CPU: 0 UID: 0 PID: 6081 Comm: kworker/u8:9 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 800.199739][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 800.199752][ C0] Workqueue: bat_events batadv_nc_worker [ 800.199780][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x2f/0x90 [ 800.199806][ C0] Code: 8b 04 24 65 48 8b 14 25 08 c0 99 92 65 8b 0d 88 6f d9 10 81 e1 00 01 ff 00 74 11 81 f9 00 01 00 00 75 5b 83 ba 3c 16 00 00 00 <74> 52 8b 8a 18 16 00 00 83 f9 03 75 47 48 8b 8a 20 16 00 00 44 8b [ 800.199822][ C0] RSP: 0018:ffffc90000007b28 EFLAGS: 00000246 [ 800.199837][ C0] RAX: ffffffff897dbd38 RBX: 0000000000000000 RCX: 0000000000000100 [ 800.199850][ C0] RDX: ffff888049453c00 RSI: 0000000000000000 RDI: 0000000000000000 [ 800.199862][ C0] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 800.199872][ C0] R10: dffffc0000000000 R11: fffff52000000f68 R12: 1ffff1100a547165 [ 800.199887][ C0] R13: ffffc9001d28a890 R14: dffffc0000000000 R15: ffff888052a38b1a [ 800.199919][ C0] FS: 0000000000000000(0000) GS:ffff888125c84000(0000) knlGS:0000000000000000 [ 800.199935][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 800.199947][ C0] CR2: 00002000003fa030 CR3: 0000000034946000 CR4: 00000000003526f0 [ 800.199965][ C0] Call Trace: [ 800.199972][ C0] [ 800.199979][ C0] pie_calculate_probability+0x58/0x7e0 [ 800.200019][ C0] fq_pie_timer+0x288/0x5b0 [ 800.200060][ C0] ? fq_pie_timer+0x4d/0x5b0 [ 800.200090][ C0] call_timer_fn+0x17e/0x5f0 [ 800.200112][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 800.200139][ C0] ? call_timer_fn+0xbe/0x5f0 [ 800.200161][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 800.200190][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 800.200213][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 800.200237][ C0] ? __pfx_fq_pie_timer+0x10/0x10 [ 800.200265][ C0] __run_timer_base+0x61a/0x860 [ 800.200295][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 800.200320][ C0] ? lapic_next_event+0x11/0x20 [ 800.200346][ C0] ? clockevents_program_event+0x24d/0x360 [ 800.200372][ C0] run_timer_softirq+0xb7/0x180 [ 800.200394][ C0] handle_softirqs+0x283/0x870 [ 800.200441][ C0] ? do_softirq+0xec/0x180 [ 800.200470][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 800.200501][ C0] ? batadv_nc_purge_paths+0x318/0x3b0 [ 800.200527][ C0] do_softirq+0xec/0x180 [ 800.200552][ C0] [ 800.200558][ C0] [ 800.200566][ C0] ? __pfx_do_softirq+0x10/0x10 [ 800.200597][ C0] ? __lock_acquire+0xab9/0xd20 [ 800.200627][ C0] ? lockdep_softirqs_on+0x13b/0x1c0 [ 800.200652][ C0] __local_bh_enable_ip+0x17d/0x1c0 [ 800.200679][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 800.200708][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 800.200729][ C0] ? batadv_nc_purge_paths+0x318/0x3b0 [ 800.200753][ C0] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 800.200781][ C0] batadv_nc_purge_paths+0x318/0x3b0 [ 800.200815][ C0] batadv_nc_worker+0x369/0x610 [ 800.200840][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 800.200869][ C0] process_scheduled_works+0xae1/0x17b0 [ 800.200927][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 800.200963][ C0] worker_thread+0x8a0/0xda0 [ 800.201006][ C0] kthread+0x711/0x8a0 [ 800.201026][ C0] ? __pfx_worker_thread+0x10/0x10 [ 800.201052][ C0] ? __pfx_kthread+0x10/0x10 [ 800.201071][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 800.201094][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 800.201118][ C0] ? __pfx_kthread+0x10/0x10 [ 800.201136][ C0] ret_from_fork+0x3fc/0x770 [ 800.201162][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 800.201190][ C0] ? __switch_to_asm+0x39/0x70 [ 800.201207][ C0] ? __switch_to_asm+0x33/0x70 [ 800.201223][ C0] ? __pfx_kthread+0x10/0x10 [ 800.201242][ C0] ret_from_fork_asm+0x1a/0x30 [ 800.201269][ C0] [ 800.201844][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 800.584203][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 800.596024][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 800.606095][ T31] Call Trace: [ 800.609393][ T31] [ 800.612350][ T31] dump_stack_lvl+0x99/0x250 [ 800.616965][ T31] ? __asan_memcpy+0x40/0x70 [ 800.621578][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 800.626796][ T31] ? __pfx__printk+0x10/0x10 [ 800.631416][ T31] panic+0x2db/0x790 [ 800.635338][ T31] ? __pfx_panic+0x10/0x10 [ 800.639771][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 800.645600][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 800.651094][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 800.657272][ T31] watchdog+0x102d/0x1030 [ 800.661623][ T31] ? watchdog+0x1de/0x1030 [ 800.666062][ T31] kthread+0x711/0x8a0 [ 800.670234][ T31] ? __pfx_watchdog+0x10/0x10 [ 800.674946][ T31] ? __pfx_kthread+0x10/0x10 [ 800.679563][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 800.684791][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 800.690005][ T31] ? __pfx_kthread+0x10/0x10 [ 800.694613][ T31] ret_from_fork+0x3fc/0x770 [ 800.699230][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 800.704366][ T31] ? __switch_to_asm+0x39/0x70 [ 800.709141][ T31] ? __switch_to_asm+0x33/0x70 [ 800.713919][ T31] ? __pfx_kthread+0x10/0x10 [ 800.718528][ T31] ret_from_fork_asm+0x1a/0x30 [ 800.723329][ T31] [ 800.726611][ T31] Kernel Offset: disabled [ 800.730961][ T31] Rebooting in 86400 seconds..