last executing test programs: 10m40.184443333s ago: executing program 3 (id=212): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="110100007301100000000904000003fe03010009cd8d1f00020000716ad461bf0009050502000000001009058b1e2098e361fa575f2fc6f09f69fa890822569b10a03dc9b600"/80], 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000180)='batadv0\x00', 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000480)=0x7) ptrace(0x11, r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000080)={'NETMAP\x00'}, &(0x7f00000000c0)=0x1e) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4e20, @private=0xa010101}, 0x10) sendmmsg$inet(r1, &(0x7f0000002d80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040814) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mknod$loop(&(0x7f0000000100)='./file0\x00', 0x40, 0x1) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x5b23, 0x0) 10m36.920454622s ago: executing program 3 (id=226): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) unshare(0x24020400) (async) r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r1 = accept(r0, 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x1e, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x40f05, 0x403a2}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6vti={{}, {0x0, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x0, 0x2, 0x8}, @IFLA_VTI_OKEY={0x0, 0x3, 0x9}, @IFLA_VTI_OKEY={0x0, 0x3, 0x2}, @IFLA_VTI_IKEY={0x0, 0x2, 0x2}, @IFLA_VTI_FWMARK={0x0, 0x6, 0x1}]]}}}, @IFLA_IFNAME={0x14, 0x3, 'caif0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x20008002) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$unix(0x1, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0x7f, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4}, 0x50) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000440)={'syztnl2\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x29, 0xd, 0x6, 0x0, 0x28, @mcast1, @remote, 0x10, 0x20, 0xbd5, 0x4}}) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = fcntl$dupfd(r7, 0x0, r7) write$sndseq(r8, 0x0, 0x0) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) (async, rerun: 32) r10 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000580), 0x20400, 0x0) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) (async, rerun: 64) r12 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000680), 0x20000, 0x0) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x20, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7f}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='syzkaller\x00', 0x3, 0x0, 0x0, 0xc2d00, 0x62, '\x00', r6, 0x0, r8, 0x8, &(0x7f0000000480)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x0, 0xf, 0x7ff}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000006c0)=[0x1, r9, r10, r11, r12], &(0x7f0000000700)=[{0x5, 0x3, 0x0, 0xb}], 0x10, 0x1}, 0x94) connect$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@index_on}, {@volatile}], [], 0x2c}) 10m36.34913916s ago: executing program 3 (id=228): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x40010, r0, 0xfffff000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [], {0x14}}, 0x28}}, 0x0) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10}}}}}}, 0x0) socket$packet(0x11, 0x3, 0x300) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) semop(0x0, &(0x7f0000000180)=[{}, {}], 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) quotactl$Q_GETNEXTQUOTA(0xffffffff80000902, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0xee00, &(0x7f0000000080)) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0x138}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000900)={0x48, r6, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x4}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x91c, 0x4}}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x77d}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004010) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000009, 0x2a011, r8, 0x0) 10m28.636256947s ago: executing program 3 (id=237): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6faa}, {0x0, 0x0, 0x3e0}, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r2}, 0x14) syz_emit_ethernet(0x32, &(0x7f0000000400)={@random="ae63b2a6bea9", @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x4000, 0x0, 0x2, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x4e24, 0x17c1, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x40, 0x0, @val=0x80}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1801000000000a0000000000f300000085000000a200000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r6 = socket$nl_route(0x10, 0x3, 0x0) splice(r5, 0x0, r6, 0x0, 0x4ffe6, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000000c0)={&(0x7f0000000300)="165888c51f6fe87fb46f9983f267f1540b1641e591d15b35725151eed2daccfd577948c17140dd230bb936b98f4a814ab96651cfd0444979eb34e373730af2044a37f2962e68629241c875c743202f1a5bbb99f3394d483f365ad2b2040eb5c2c8067cd33aef3a73edcd856d815fb84bc1896c388037cc93d0f3c970eae18344277b203a1f8935c5da", &(0x7f00000003c0)=""/221, &(0x7f00000004c0)="c1438468ce9223b281f4f6f713eea265f798a287a2d81b31bdc0e98f681910f416abe35e7a9877fc56d0327fde7e51edd9e4e0e7bfda97c0c06a4927e6fe49d92457852a31a152bf7a72d1089695bb47a38f274d13a6e45e53f773d16afd232d565793c896167b80fe414c42e5fe6c0a2d3054c19603f5d9a45af1c652745646510e6aa60a9d426d380ad66cf4bd61bf989c8e77a366c913ea985b0244dc79c084266ac87494", &(0x7f0000000080)="778134a69faf108b351aa4d15512e6abc6412e926803b5bd7899d878886534020675716f36ac85d0c0af447df95ca2c1a2e7", 0xfb, r5}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = epoll_create(0x1ff) r10 = socket$caif_seqpacket(0x25, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000100)={0x1000000c}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@private2, @in=@remote, 0x800, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, {}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x1, 0xfb}}, 0xe8) 10m25.41933632s ago: executing program 3 (id=250): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @dev}, 0x2}}, 0x2e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bind$unix(r1, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000040)=0x10) mkdir(&(0x7f00000000c0)='./control\x00', 0x0) connect$inet6(r3, &(0x7f0000000480)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@enum64={0x2, 0x1, 0x0, 0x13, 0x0, 0x2, [{0x1000000, 0xd, 0x79}]}]}, {0x0, [0x5f, 0x2e]}}, &(0x7f0000000380)=""/2, 0x34, 0x2, 0x1, 0x2}, 0x28) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x34, 0x0, 0x18, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) socket$packet(0x11, 0x2, 0x300) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "eb000000e88000ff", "d4cc4a4423daabeb8e7ba12fe6e1c742a683fa6e58757db76aae864d57fbaf37", "2879ffff", "62963dfa951f9b3d"}, 0x38) sendto$inet6(r3, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 10m22.551856809s ago: executing program 3 (id=259): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f0000000000f19500000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) (async) r1 = syz_open_dev$media(&(0x7f0000000040), 0x3, 0x0) r2 = dup3(r0, r0, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000300)={0x80000000, &(0x7f0000000340)=[{}, {0x80000000}], &(0x7f0000000380)=[{{}, {0x80000000}}]}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000280)={r4, 0x0, &(0x7f00000004c0)=[{{0x80000000, 0x0}}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async, rerun: 32) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x8080) (async, rerun: 32) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f00000001c0)={0x0, 0x0, 0x7, r9, 0x6}, 0xc) (async, rerun: 32) ioctl$EVIOCGRAB(r8, 0x40044590, &(0x7f0000000000)) (rerun: 32) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r10, 0x4b52, &(0x7f0000000100)={0xfffffffffffffcf0, 0x0}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f000000a300)={{r3, r7, 0x0, [0x20, 0x8000004]}, {r6, 0x0, 0x4, [0xc1a, 0xfffffff9]}, 0x1, [0xfffffffe]}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 10m7.409681918s ago: executing program 32 (id=259): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f0000000000f19500000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) (async) r1 = syz_open_dev$media(&(0x7f0000000040), 0x3, 0x0) r2 = dup3(r0, r0, 0x0) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000300)={0x80000000, &(0x7f0000000340)=[{}, {0x80000000}], &(0x7f0000000380)=[{{}, {0x80000000}}]}) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000280)={r4, 0x0, &(0x7f00000004c0)=[{{0x80000000, 0x0}}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async, rerun: 32) r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x8080) (async, rerun: 32) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000180)=0x14) setsockopt$MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f00000001c0)={0x0, 0x0, 0x7, r9, 0x6}, 0xc) (async, rerun: 32) ioctl$EVIOCGRAB(r8, 0x40044590, &(0x7f0000000000)) (rerun: 32) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r10, 0x4b52, &(0x7f0000000100)={0xfffffffffffffcf0, 0x0}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f000000a300)={{r3, r7, 0x0, [0x20, 0x8000004]}, {r6, 0x0, 0x4, [0xc1a, 0xfffffff9]}, 0x1, [0xfffffffe]}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 7m37.041294321s ago: executing program 1 (id=766): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)={0x3c, r2, 0x1001, 0x70bd28, 0x0, {}, [@ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x3}]}, 0x3c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002e80)=ANY=[@ANYBLOB="100000000000000017010000090000009800000000000000100100000e"], 0x1418}, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8001}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x40) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r4, 0x3ba0, &(0x7f0000000280)={0x48, 0xb, r6, 0x0, r7}) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xc06050}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x32c, r3, 0x608, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x60, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffd}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xd2f}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5c3eb01b}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}]}]}, @NL80211_ATTR_REG_RULES={0x114, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xea}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xb}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xe9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x73a58e89}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xffffffff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x101}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}]}]}, @NL80211_ATTR_REG_RULES={0x38, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x40}, @NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x80000000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x20000000}]}]}, @NL80211_ATTR_REG_RULES={0x16c, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x9}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x81}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x800}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x38}]}, {0x4}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffff000}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x78}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x2}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x27}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xb7a}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x431}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x100}]}]}]}, 0x32c}, 0x1, 0x0, 0x0, 0x800}, 0x48f9c8d5c9ff1f5e) 7m36.919209868s ago: executing program 1 (id=768): socket$netlink(0x10, 0x3, 0x0) io_submit(0x0, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x100) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) read$alg(r3, &(0x7f0000000080)=""/74, 0x4a) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0f00000004000000080000000400000000000000", @ANYRES32, @ANYBLOB="000040000000000000000000000000000000000019e5221568bc1a2400d6559c1148946e4dd5df7ad5231378cb86b8174f7e65db6dbdea770f5abbc1a0f4aab2e458379f0eb12d738b95abc7b0b02241ed57f1a12627c72354e80b57468d6c98d478a85399162132084998", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r4}, &(0x7f0000000700), &(0x7f0000000740)=r5}, 0x20) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40080c0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r6, 0x7a6, &(0x7f0000000040)={0x4, 0x1}) 7m35.673504119s ago: executing program 1 (id=770): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005ff4b620110f211066c2fd78ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) (async) r0 = socket(0xb, 0x6, 0x80) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="070000000400000000070000000700002c000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/20], 0x48) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00', 0x0}) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) unshare(0x2040400) (async) r3 = socket$packet(0x11, 0x2, 0x300) bind$packet(r3, &(0x7f00000001c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) r4 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711065000000000095"], 0x0}, 0x94) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) (async) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) (async) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) (async) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x108000000000000, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffc, 0x7]}) (async) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) (async) arch_prctl$ARCH_GET_MAX_TAG_BITS(0x4003, 0x0) (async) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) (async) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) r9 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x12, r9, 0x180000000) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$qrtrtun(r8, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) (async) r11 = getpgid(0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1, 0x0, r11}}, 0x40) (async) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1f, 0x12, r7, 0x200000ffe000) (async) close_range(r5, r5, 0x0) 7m35.151633243s ago: executing program 1 (id=771): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7f}}, 0x0, 0xffff, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0xffff689d}, 0x94) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='target PCI:0:0:0.0'], 0x13) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x70, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) r3 = syz_io_uring_setup(0x4b9, &(0x7f0000010400)={0x0, 0xb1a6, 0x80, 0x8}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}], &(0x7f00000005c0), 0x2}, 0x20) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') move_mount(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x408440, 0x0) write$rfkill(r5, &(0x7f0000000480)={0x7, 0x7, 0x2}, 0x8) r6 = memfd_create(&(0x7f0000000140)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bYS%\x1d\x10\x86\xa0\v\xea\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceY\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0\x00\x00\x00\x00', 0x0) mmap(&(0x7f00001d1000/0x3000)=nil, 0x3000, 0x6, 0x12, r6, 0x6a360000) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$FBIOBLANK(r2, 0x4611, 0x3) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r4, 0x8983, &(0x7f0000000080)) 7m33.430357599s ago: executing program 1 (id=783): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0xffffffffffffffda, 0x4000000a74e, {0x1, 0x0, 0x0, 0xffff, 0xfffffff8, 0x84, {0x4, 0x5, 0xb58, 0xaa8, 0xfff, 0x7fffffffffffffff, 0x7d59, 0x7fff, 0x4, 0x6000, 0x7f, 0x0, 0x0, 0x78002, 0xff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GATEWAY={0x14, 0x6, @ip4=@broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6(0xa, 0x3, 0x8000000003c) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0xffffffffffffffda, 0x4000000a74e, {0x1, 0x0, 0x0, 0xffff, 0xfffffff8, 0x84, {0x4, 0x5, 0xb58, 0xaa8, 0xfff, 0x7fffffffffffffff, 0x7d59, 0x7fff, 0x4, 0x6000, 0x7f, 0x0, 0x0, 0x78002, 0xff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GATEWAY={0x14, 0x6, @ip4=@broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (async) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) (async) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9584, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (async) 7m32.603767055s ago: executing program 1 (id=785): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004802c"], 0x84}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0eab070004000523"], 0xfe33) r2 = memfd_create(&(0x7f0000000440)='\xa3\xcb\x04=\x827\xe7\x81S\bDVK| \x8b\xdb\xb1\x03\xd0\x9d2\x9es\x19_=#n_\xeb\xbdR\xea\xb9o\xdbM\x11ca\v\xeb#\xaf\xcf\xb5\xfd`U\xa7k\xd0\xd8\xd2\xc0\x91\xc1\x98#\r\xa7\x16\xfd@\xd7V*^\xcf\x9f\b1\xce3\vN\xa6\x01\xb5\xb5\xba\xdc\xc8\xda\xd2\apY\vu\x80\xa9\x14X\xcf!\xd3W\'\xb44#\xf6\x7fHS\xa6l\x17\x97\x80\xea\xc5+T\xe3\"\xda\x14\xfe,\xf3\\\xeb\x1cp\xd6\xc1\b\xec\xe1\x94\xdf\xdb\xa1\xf7=B\xb2\x94o\xd5{\xd2_\x93\xa1\x97\v\x85\xff]\xb6_\xa2e)\xdem\'H\\e\x8bu\xbcVw\xaeb\xa1b\xb1\xc1\f\x9f0\x93\x0f\x16,\xeb!Z\xa9\\\xf7B\xf8L\x05\xc7\xf7q\x9d_\xb4\xbb3i[t\xb6\xbc\x824\x7f\xd7\xb7 \xd4\x7fUE\xcb7\xe3\xb4\xb6\xa0\xd8\x1b\a8\xfe$\xa1\x12&\xb2\xfc\xfb\x12U\xb9u\xb4=\xc4\xc5q\x8bk\xf1\x9c\xc3\xa4w\xf9!^#\x8c', 0x5) ftruncate(r2, 0x200000) ioctl$RTC_ALM_READ(r0, 0x40187013, &(0x7f0000000080)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r5, 0x20, &(0x7f0000000240)={&(0x7f0000000100)=""/179, 0xb3, 0x0, &(0x7f00000001c0)=""/84, 0x54}}, 0x10) 7m31.886636963s ago: executing program 33 (id=785): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000300004802c"], 0x84}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0eab070004000523"], 0xfe33) r2 = memfd_create(&(0x7f0000000440)='\xa3\xcb\x04=\x827\xe7\x81S\bDVK| \x8b\xdb\xb1\x03\xd0\x9d2\x9es\x19_=#n_\xeb\xbdR\xea\xb9o\xdbM\x11ca\v\xeb#\xaf\xcf\xb5\xfd`U\xa7k\xd0\xd8\xd2\xc0\x91\xc1\x98#\r\xa7\x16\xfd@\xd7V*^\xcf\x9f\b1\xce3\vN\xa6\x01\xb5\xb5\xba\xdc\xc8\xda\xd2\apY\vu\x80\xa9\x14X\xcf!\xd3W\'\xb44#\xf6\x7fHS\xa6l\x17\x97\x80\xea\xc5+T\xe3\"\xda\x14\xfe,\xf3\\\xeb\x1cp\xd6\xc1\b\xec\xe1\x94\xdf\xdb\xa1\xf7=B\xb2\x94o\xd5{\xd2_\x93\xa1\x97\v\x85\xff]\xb6_\xa2e)\xdem\'H\\e\x8bu\xbcVw\xaeb\xa1b\xb1\xc1\f\x9f0\x93\x0f\x16,\xeb!Z\xa9\\\xf7B\xf8L\x05\xc7\xf7q\x9d_\xb4\xbb3i[t\xb6\xbc\x824\x7f\xd7\xb7 \xd4\x7fUE\xcb7\xe3\xb4\xb6\xa0\xd8\x1b\a8\xfe$\xa1\x12&\xb2\xfc\xfb\x12U\xb9u\xb4=\xc4\xc5q\x8bk\xf1\x9c\xc3\xa4w\xf9!^#\x8c', 0x5) ftruncate(r2, 0x200000) ioctl$RTC_ALM_READ(r0, 0x40187013, &(0x7f0000000080)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/custom1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000280)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0xffffffffffffff61, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r5, 0x20, &(0x7f0000000240)={&(0x7f0000000100)=""/179, 0xb3, 0x0, &(0x7f00000001c0)=""/84, 0x54}}, 0x10) 5m17.25455683s ago: executing program 5 (id=1290): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xf8, 0x11, 0x10, 0x70bd2a, 0x25dfdbff, {0x19}, [@generic="64ce0ca4fc99244ecc4fe02fe6ec9a046bfb74196d8b28ed8401618a3d98de6b7ab7e2c1235d36225bd2ed5dacdb5af235c27e8c57a051395b179b9b6b0a2ea90d16d9da447337851cfbec3d710d1066a1cd4b0b8955fdb0f5d08ce27338e6af432067af6448cd4bad677af79e6f4cf227fb7ab45b2e7765975abff85f9bfcd80a521bd2b2e8ae7935c2be9bef6b4e81ff97971189d0164ad1b1c9b662a1dbd90346cf94ce65238b86011d754197ffe6e9f48ec3bc605335652bab5ad35486b641187d0a49e4998c03ef4a2ede8ccbcff29390e3b940812752c154796407571fb354b4"]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) r1 = socket$netlink(0x10, 0x3, 0x14) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x100, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x81}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x24}}, 0x20000000) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000300)='veth1_to_bond\x00') r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r1) sendmsg$TIPC_NL_MON_PEER_GET(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x80, r3, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc05}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40811}, 0xc801) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0xce, &(0x7f00000004c0)=0x6, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r5, &(0x7f00000008c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000880)={&(0x7f0000000580)={0x2dc, r6, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x1}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x114, 0xc, 0x0, 0x1, [{0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x27582ee2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59a3f08f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd40d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x53e2fe22}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x30efeff4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd90}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7057}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76fd76c2}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5121f708}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4bfb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2c61}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2c3625d1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7ad227bc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9b72}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc3a9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a16730b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x102d81cc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2366}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x76d266d9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x70023515}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d79d9c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x89c3f65}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc1ef}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xefdc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x151c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xafe836f}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbfa7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8286}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x5f9c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x12ad0fa3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfc96}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x184, 0x8, 0x0, 0x1, [{0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2bc5c0e6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2525f792}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5a3609c3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48255c3b}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5987de3a}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a5a54c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5b2c60de}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x488841d7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x30}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xda}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6052e6fd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1405fa2c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3d8e1a40}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4cc1c9a2}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6cb36bf1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x764d66c8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x67857047}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ab83885}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4337eaec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5fe594}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xed}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xba}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe7c1325}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x123fee7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x87}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x328b5db8}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xca}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x9be0961}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x83}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x208a8c26}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5}, {0x5, 0x3, 0x38107a7ab189de66}]}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x800}, 0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000900)={0x0, 0x11, "c7c4cc6b069f4baffb336d5eb0d12f350d"}, &(0x7f0000000940)=0x19) rmdir(&(0x7f0000000980)='./file0\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f0000000bc0)={&(0x7f00000009c0), 0xc, &(0x7f0000000b80)={&(0x7f0000000a00)={0x148, r3, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa680}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9aa}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xf}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x140000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NODE={0x88, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x2d, 0x3, "e6a8fb97687a2e9617a11bbe7306cd8faf83eef7b8a3eec54bdf4ded211489501e40f70658d979b73a"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_KEY={0x43, 0x4, {'gcm(aes)\x00', 0x1b, "88fdcadc0d27f25bc67b3a1cd9958d8b48945e7db4f7f058e3fed8"}}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000004) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000c00), &(0x7f0000000c40)=0x4) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000cc0), r5) sendmsg$NL802154_CMD_NEW_INTERFACE(r5, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x48, r7, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0202}}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x45010}, 0x4000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f0000000e00)={0x1, {{0xa, 0x4e23, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1000}}}, 0x88) r10 = inotify_init1(0x0) r11 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000ec0)='./file0\x00', 0x22000000) inotify_rm_watch(r10, r11) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f40), r1) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000001000)={'syztnl1\x00', &(0x7f0000000f80)={'ip6tnl0\x00', 0x0, 0x0, 0x3b, 0x8, 0x80000000, 0x14, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x700, 0x700, 0x7, 0xffffffff}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000001040)={'vxcan1\x00', 0x0}) getsockopt$inet6_mreq(r9, 0x29, 0x1c, &(0x7f0000001080)={@initdev, 0x0}, &(0x7f00000010c0)=0x14) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000001580)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001380)={0x194, r12, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x20000003}, 0x0) 5m16.748074918s ago: executing program 5 (id=1291): futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x200141, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xfff7fffffffffff5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() r2 = syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = landlock_create_ruleset(&(0x7f0000000080)={0x9008, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) r7 = fsmount(r5, 0x0, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00010004"], 0x408100) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r10 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x105cc6, 0x1, 0xffffffff, 0x207}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r9, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12, 0x1}) io_uring_enter(r10, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) 5m13.247441849s ago: executing program 5 (id=1307): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x30c, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff, {}, [{0x2f8, 0x1, [@m_ife={0x90, 0xb, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x8, 0x8, 0x1ff, 0x5}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_PRIO={0x4, 0x3, @void}]}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0x31, 0x6, "ea24464decc1b2772ce0e9d802b5374a8d6638c9f5d62d73097ad328a4154dd4046c261a61dc99ee70038b3509"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x13c, 0x14, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fff, 0x2, 0x2, 0x1000, 0x8}, 0x52}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x80000001, 0x8, 0x1, 0xa}, 0x33}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x10080, 0xffffffffffffffff, 0x48fa, 0x2}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x3e5, 0x4, 0x3, 0x1}, 0x3e}}]}, {0x9d, 0x6, "576458eea52fd27eec92e713a172e757e1f62fe8475fa8817d9bd39d398251801f64d9b8e312b47b111ff094a2f452e1fd749b169123625c664a63e06baa8402c6b5fe34fbffaf329e5589fe1d00f704d8d13b0100000081ec7a1e9e21427be570631961812505684e260d3f73821a372961e6acf9f73f3ab3a6d19010c501877fc1473ff3fe388a502702c7e7d4eb99cd479f52bef8df8dc2"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xb4, 0x9, 0x0, 0x0, {{0x8}, {0x64, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x4, 0x3, 0x87f3, 0x4}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x2, 0x9, 0x6, 0x3, 0x7fb}}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x408, 0x6, 0x5, 0x5, 0x69e}}, @TCA_ACT_BPF_FD={0x8}]}, {0x29, 0x6, "a09e88b2fa7e2ad0dddad3cdaa9b726cf5b56034a46fe4468bd19b5780d1bd141230a65f0d"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_skbmod={0x74, 0xd, 0x0, 0x0, {{0xb}, {0x4}, {0x45, 0x6, "d53a6627b5c2b2c1126462fd280ec461bb61d2323e41566a3eaee195a84bb37143552068db91606b387f2034bf05bca0b1755e60be368d21ecb0372aa921d15a46"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x30c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) 5m8.449141138s ago: executing program 5 (id=1321): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x77359400}, {0x0, 0x3938700}}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(0xffffffffffffffff, 0xc0585611, &(0x7f0000000200)=@userptr={0x2000000, 0x1, 0x4, 0x2, 0x0, {0x0, 0x2710}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '#\x00'}, 0x0, 0x2, {0x0}}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1c0}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x107301) ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000000380)={{{0xf}}, 0x0, 0x6, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x8000) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20004000) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 5m4.429844648s ago: executing program 5 (id=1329): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$unix(0x1, 0x2, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000200)=0x10) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r5, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1300000000000000100100000d"], 0x18}, 0x0) bind$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r9, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r8, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) recvmmsg(r8, &(0x7f00000031c0)=[{{0x0, 0x1802, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r12, 0xc040565f, &(0x7f0000000040)={0x9, 0x100, 0x0, {0x5, 0xbde, 0x400, 0x10000}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r10}, &(0x7f0000000440), &(0x7f0000000480)=r11}, 0x20) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 5m2.197654758s ago: executing program 5 (id=1335): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[], 0x50) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000553000/0x2000)=nil, 0x2000}, 0x3}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0xfffffffc, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) r4 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0x57e, 0x10100, 0x4, 0x37d}, &(0x7f000001b100)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0xa) fchdir(r9) lseek(0xffffffffffffffff, 0x101, 0x1) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019040)=ANY=[@ANYBLOB="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"], 0x2090}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r4, 0x92, 0x0, 0x1, 0x0, 0x0) 4m46.309781946s ago: executing program 34 (id=1335): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[], 0x50) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000553000/0x2000)=nil, 0x2000}, 0x3}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0xfffffffc, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) r4 = syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0x57e, 0x10100, 0x4, 0x37d}, &(0x7f000001b100)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0xa) fchdir(r9) lseek(0xffffffffffffffff, 0x101, 0x1) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r7, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000019040)=ANY=[@ANYBLOB="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"], 0x2090}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r4, 0x92, 0x0, 0x1, 0x0, 0x0) 15.850281088s ago: executing program 2 (id=2720): sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ec04f2ff", @ANYRES16=0x0, @ANYBLOB="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"], 0x4ec}}, 0xc881) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000000c0)="f3660f3101dddd670f0f06a466b9c4090000f20f7c2c0f5f0abaf80c66efbafc0c66b8ffff000066ef8b5ee8f30f1ecc0fc71fd8f68ed80fb56455", 0x3b}], 0x1, 0xa, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@remote}, 0x14) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x4}, [@NHA_OIF={0x8}]}, 0x20}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000010c0)={0x14, r7, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async, rerun: 64) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f00000005c0)={0x98, r7, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x2}, 0x4040) (async, rerun: 64) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(0xffffffffffffffff, &(0x7f0000003000)={0x2020}, 0x2020) (async, rerun: 64) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x6) (rerun: 64) 15.6570764s ago: executing program 2 (id=2724): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000001c0)={'U+', 0x8}, 0x16, 0x1) rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') 15.539094572s ago: executing program 2 (id=2726): r0 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r0, 0x0, 0x9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf25020100800c00020006000000000000001400010001007d48f225caf14f09b3000000000000000000000000000150bb2d6f67d29d6fabadb107d0def40588ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d962fbc08c029d1608a487f26fbe816b89f7cb81060000000000000056555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a"], 0x114}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(&(0x7f0000000040), 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) dup(0xffffffffffffffff) dup(0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000004050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000c08000240000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 14.466818426s ago: executing program 2 (id=2729): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a0300000905810300020000000904010000020d00000904010102020d0000090582010002000008090503"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = geteuid() read$FUSE(0xffffffffffffffff, &(0x7f00000001c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setresuid(r1, r2, r3) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 12.031129093s ago: executing program 2 (id=2740): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x1, 0x800001, 0x0, 0x0, 0x0) (fail_nth: 1) 11.067464263s ago: executing program 2 (id=2745): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_open_dev$tty1(0xc, 0x4, 0x1) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0xd3, 0x8000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000c400)="e47c6c216d8aa37d2b4b4937cfe03e2410439a321b06378d3ea501c17dc8b903b8248840d09c10c6c253f5b6e1e937e281668664f6d7604b7802a480c65efe232149b9a1b5685da4b06f7300fa4ba8bf52b83ca92b9340c552063c5c54313b425aa83b0bb70cc61edfcd875385d3b4cdcabf7e5d7b6afe878fe33d5a2f54b21f9a99f5384099ae155074bcadc16fa61bbc92c54fd1e4e903ddd075b54e0fd0038f016509f8c271f61d87c793e3e12f2c2cc904b4eb10b03c7407dd50b83dc3a18daee83065d39185121ba9c6bdec2158faade8e7d558b99fd60434b1fcd74eaa24d75d6a591fd08c1d3219cbd7c59cafbbde4b5d5f059a12e9377ca96953a8605fd6445f30ceae48093052474f4f9f14c7cb9b5a255268a462738e7fc45805aa57f6b892e690bfc3750b23b13c1b6b499b19b6865baf9a95ae98bce137aa98e5d2ec0daa6795c027113bece2e8a33f02dea2501cd7a60378d8503c02afa003819a2caa68203620eb1b8b532a515e9c5d331d1e9c92d6af26d17d1c1e26ba196df0902f6d0ae5c607b53c9ada09aa4a9a99da592b737fa8d1795bc4e61b5bb00c67f4a84e97e6b7126e0cbdaa651430125c57f9de224bb18a96d78253be5daa1c1bbe8491769d39c5db252ded1bbfc27194eff67ff94997a93095cf9405a7d016c2376b911c619c1f5dc45e6c8a4ce168ad766d8ff8f382b24176a3f50b6ec4e50b0b4b95c9e1f00b8ab6676d8ba438a21483ef9cf9aed2a05cdd2305bf665dffeadf554ec2c57a89d343b4f05cc2b904562ddc629e509b52d9fb7adc22bb5377953033615617c8a0d88f93ff4936c07df225448e52747d47b4a5c781e4b8c5237f4bc4bda77a242fc321880ce3eec414c5355fc66e57c35e901c4dd0f20a615482bb5eef38a29c7279c633fe075d9c9bd377f425446a303e0a59bc613907cd6be3537c0f94d1245940ed5bbf31c41a03c5a39dd4e1d8ab0a19ab6911dca0578abb9763b0eae86a91571d2b0726722b74db9a1bfffb7424c8a9197f5d41cedf5c0b89273718a85fe81ded439104acc28da887863c7606657af0d279ac7c5b50716a1380665169eaa039080987d63a9af0ae10c036a57a1d651267061faa4e46c650fcb4556f8a34e4bb06a4e1f2e0be58add2c62ba67c64508e08f5b1c7ab6ddedbb49736826fdcb985f2c651a2be6b0f55e18d9367f029b2d85438fd53f1961f533685745c01bd867707ec16d084cd8cef1ba5e9100f1f86a252a14c65e8991b0a7ec745572e1a396ab4ce89ec5e54fd6e3841b99ed2384b0a35a86ba8a0436e87e1215bbb0492427af73ba404790aab0e336f53b69749fca97def0b5f3445b42f700cbe0a01c3c6966cd5bb6f79fe8aa7d934f5869a0e3b0e743c52c140e01b050a0725e4c27cda0444f488078b68783765b59ab6c079d843e2d35eecb4b82a8251d61e232e19d386ad7ddec0ac6eacc863f1a2b103f48077bb5cc7e58157b5af32a137d4df40f98a405422df6dbfdab5477bae9e0633647a8b9baa88c3f681901864e38c439cc114ec7580fea9131b554843902904211e2f28e8d2c066a3761aa076577458fbb3683fc2c4a18b93aaa343d27e232fa11a649b0dab7c2e83b76c446968ae8a99f3ca5743fe0f1eecef48e7e06695f380f434e591f14540d5e92da29a97d0677311da9e34f1a1691d3593cc6f74d0394b46e74278205dca9c89f6d2f117cedbc70d1e3289d3fa23480be98e377b15ce6054e3e33dc8c5d1ce804606c86c98230d8702427243b05edbb392f9304b9015008733c0a52e8fd4f74ccbb374496cda1abac59fa1052306b77ecd2025b7f6ce38327ff0bf5a7f183729442c13dc8b1b944b9ea3c3833a11f5334fca329cabf8a7e9120a9d96f0bec9cb64dc7e9456fdee5151be1c9f574b509f081655dbe9f2bd8c948e98f1db4e1a7d2ed5af95fa13a55a2639b0bf0d5a575287dbd71cd192be0e1b6f5f6c12e751e4a65799420957145d20097cff8b3b86308a336f10e413db27fbbf080ba97dfdc8a3e01d63d672ac05e6fb3733afb14f2acbbb350188f9194c66139b87e23788716c1941cc768dc0c34dd35848a42a568ba49cbc0226ee61695fbf7feebb933f5389b1d38ea93008cb08b16d2a261ace3cb988bf673fd16e18bdaaad1be4f4cc6394b454ec5022577b7e6f65aaa7998005803b072be1b5d7c437b5aa003968bbe6eedade30b9b995ce9f54ab2fd37da2de0278219a779957a3c0daf684c31a2cfb3e57f0175e28d3ab2e0693a4225937013019773555cfd63234251c08531075d3f0de35780902c6443a126c599e49fbe3e020786099ee941c1683009540640f06852812abfb128b494e6f913edad2c1072b220537483dbc8fe8bbb405c282bc1649ee16fc5480d5ef13704006b4bc985211e7704668f790db2ecfcef79953276aca4112aa5984ad818b28d73c1376e12cb43e9765fb17a7255e5a7fd57628e2c3d00e046b8dc0e12cc0a3be8e0da882873a6a18698229243db199a3b26afc03fcdf532090ceb3e249b6f19b4e8402296030042924259b683ebdf68fc274432377d87252d506a8c2f5f6c088a4248274a5752655f3ff1a0d79b2dd1d7100a2fee9e4cbe5babe852159e6321ea6e29fcebff46ea2802c5faf066cd334237919a503b5a562e3106f899cd1d62a400f0b8e43f316962b4641344534fa6dec71d5723f0ff4fd037c2e3932c0d9063ba636975fd1b8c5bea4a2fb9d53eb0682fca49e26e4a9b65b35378e0e4d055b0b501322c52d9ec900ee120d697dac611b55ce3ac628c07d6a5a0d52b714df8edb51f1a6ae45a25ee43c1792c8f1ea95ea24655a88844e81a1bc0f75c82edb5a0b10fd586cf6401ee87e68e8dcecc9ae670c0a71266858ceeedc2e2f0b38e8cd5363b926cfb71455a88ae7ff485c52797e860d73967971d09fb2e65fb612163f34edcbcfc813957579c3681122b575af443763d6fd5748b5fe2407e6162b1f07448bcfdfb871a432248b2d9dde04944e029aaf026274495bf2a283db2d76d17ddcbdfa1f263ebcd04398e733c1517bd764a9caf27d1dd14750e5dc10d49adf29416a14b475b8308f749dd4d1f90cb65dc956d331d6b6c1cf24e6774e29a4e79028dc34a5ce3f5bde0b2b0c69c3336a0daf1bc6e612a46216d303b456487cea05006550b11be7a0211658ee2a683a1574ce4061f72cd7574d5af6c860e03882296fbde66c85aa8a85c9de799f5d83e2e01c8ecd13a15b0c3c72695358fb4d2ccf6224a45d820dd89e36e66d0a5eda07df66a68b24f111cabfaf2d37698b70348f8df4673a28d511d6cbb7590bbe1192ebb55ccf8e9fd618000239a594d2c57304bcedbaeb116870b23728494497afced271408ecbbe0c923400d86e7654d09fe2d204c41032669d6d818e0bc298240693f21fe171f7989191d7eb5bdd2981da20fbe61d7067a372c5476bf255c2b1b8502ae369fd99409deb4dfabe2eb82c2b5c4068249325455942fb84967dbafdd90a094182375a73a13eee7ab5a83b9a5eaa1cbaa90ad9293b8e5c1437fa8b42e9d777d5d790c00fe4a39d449220ea4140511b04d8c1c9e59c15f1fcf265b4cc3e0526135b0c512e61e6bb016d87ec62deee312fb093413f250d2b8476bdd5a8ae4725305f6b85428a42f84438241f3d68e231584d3a69946faefcc6bfff5a75051fb3f34ff0be7656b293db2c2139996b9dfcb3b53b84e0f5007e6a2181819c73db10c65ee05369365e8e6557547d807c21362b675d83d3613abee8d7b7d3a74a1e69e0785a8aa4373d1f67edc2d5af633a81bdefa9858c0d0a553ffd7e929f301e575fbc1ac7af5871ea4e510980e2b8fcdbf9c2216f3d73c2777a989d324c7a2df7f06b87076ea04be57f5fc4f48c7bb5c80360a8761743e5d7d6ae76f9b671c253e7ac2727ab718b7339250b946b6c2a418c894d48f19f594071168c2da09f0aa7ef35ae778ab4c1fc684b1c0a9b5c66e15ab92a4bac0d6d12c76b31bb56708d09f716c237a456f810e0dbbf3ac0aeafad75e27a522563a19be66ea05f35b23723934f7a12c1e1c9a5c427a037dd9f75dc9960d49b48fc20910c7a8aa51c79882bcac75797911d676ad2c31dcead6cd6ffb424e1ee2b076c45fb6fb62f845fe3c8c24f596f4d921168f65162280736d713d11aa02f9b7b02f47972abd3679b1897504b8f809d8d1044fad4d04406a3ed0c124bcd8337628f993393e9b94eb42a3d6ac5802e0172749ae6f1ec6dd22f4d32bc009deea5dc22daf041f8e8fa206dd5a975584107a81bd033b3d8f8d4d66da8705713ca9a71b8f7668ee7bd4cbc960eaa89228de6dcec53ff9fcfb858fddf73cc825bf3d0cdaf4592e60619e3a666a86391149dedeafce8c76fa6cb19008d48b301efec7232b20d48da6701239725848406a28a36c901e62d0759e2a086cd3bfb54185fafd6d2c6972adc6d76e2c58838a5b103fd2fb821fe9467ed840aabb8db5d0897bc9e48ece09098c57df591065e20a923796e00b17d208ff39867913b15fdb9eddefc8fd828f5abd82e26e9cb62c1d917864e0fde219bac453f0598cc4d8bcf6f759e0c7b667c556cb8e1b4b46af29e37b996f0f5f0871169366feb56a5c84854903c315c729dc494b8f0982eaa178a4225e3fc89c7b216a74b34a12bc452fbe54f11fe5aceb1467729f32ecd658b1fc3230c5b07496f0ec97549988fd0ccf95f01a95467eb9cd21b3386f5d0de538ac9941cb22fa457da9395996e6a090c072be1d2c2d2963e695d3cdb5375f5da299b5efea5ec32546fd36d4ed8b10dd14f94298f0973fcb935f981aa2ebc71aacca31470d33b12b43478caddc41f4262f05d106a417f8c304fbd5d1214a2ce9e95acedb4ae29c89fca58742ca207e9d972ce871a09e71f1e80c4a5cf8a248b900f7acfa8a253ffc82d8977a303822b365d2113a6e01c59ab41c9bfc7316393a423618cdc08de3e834b02d88ee169d84ce1ca3e26dbec65a7b796c91a37ada6ff3796e6a1a427add5c6ccca900369484b4626bd27d776fc73867e4264ccf17653d298725f56f92e9ef64c1b16ff4018330e5625b3a58e9b32285d7ea086035451fbfbd275443a59d80aa44a80b8b1d07c412fa6b6f6a3709c3fd4b3036e17e0624d0ed4fca3f5856e363e33a984c4cc08a5c40c16f50b7a1a11bc8f035d833b2f5f357116e20813cc718df7611efb3fcc9e9d71c3b5662118ce181e308528b156ffdd480d5208ef33fb68bdeb5ac7a4be8b08dea0c2f60430a1eef099b0270d8c63a997890136ef7800204b730b8679a4f0be51a16e3a7ddb36a36b3c2c3b28dc3a5a51ccc7dfb0c098c5d46a7f0cc19b3cdfffd5c9e96fd649c8f769954089816f5a393fd7590df49a4ffd5b554daa5fed16937679cc1c59adf4f2b35b652b2162cd75cc06f811a9b9c583db30197d46c347377edabc75840bae2ecfca6a33b76ac7ec16a89616ac9c5fcd69f62ccb9da58b3703d1b6d81e6cc294e2ae63c85bbe6612a240be5687448b09552e326adb479c20d25771a7cce65f316276ea4febccc8d0671d3f7b89e3860527932d50358f61dfc57ecea5e5e7a514ec31fc4fc99632b924f25abdfcab63b18d9b8f34b882e1b00adfe9465990374411604fa1ce59e906848cf44a73030f3dc84bbef85c208d39a1fcfeef247282cb7a307c314548042e24dd80eeb2530081305c6f9d18394ac4924b540f007df6d7e80c4eab56482a94aefe9288392fbdf599707e19fc50f7754226f6778eb9401f887fe1deb9d9bcbe35c979954ae22597f636869c8843767355e85fa45273788cb43ec3bea0a74f243f5d1840c087e43c0f39a2b61481a9edc8030e3dcd42657905179c2b03348c2cdc2a7f8b9eea3652984cf7ae0f827c8eea183c32dc0586efd646a4863d74bafc76cb86109d18027531a28f1e5d42f27c76f6b871a4e762268c2be77f4b3061d62300d7a6af893126cd9d027890f83ce8b0c763f7fcd15f661fa57bf182c756de530065577d97c4e1c9d52d5847926600fc90070e5c3092129a4c87ee589292a31caa10ca61b269e4e9756f49cfe2b9c8e48afe99bccb723007580dc69df68158169b3b880a683be132afb10d375e26ca56a503c22a281f57a6c07e0a7ca6e8817679166f78af04b42a0ef886ce782a5e2c6f4755cbee4e62c4315e62d6e294423b34991f3c1847e20cc1ff5ffb80a725ee28ccef8a897e4ed24fc224266fbae8c5211102d81d40c1cf53c2fb1919c802a6a947d83992ddeaadfd771811dcf74894e32ae6eba1896220f0c4eb4985ab38d633410a1c4c47d2409bd54689252f09250c0c650e03b4cc1db9f68525d66864a8d9d8f512711e14d530665e37f70bdf286f1dea3b88dbb494520f56381fe82935c5a8313edcc92658b32419251063ce1d3b0c91f2e235baa5c79cbc7db9715722ea4ff5b106c65615e6c439df019cddba3f48fb441f7dffcb968dc6487ea78c37ffe2941841ad4c4282517f662065ab574bf077c53965e8a364b9db2b0adf8a7e74693ae1fb7a7fe4a7403eced2a74f3bad5efaa9cc6f7ebe33cf779c21a6278e9043999d33f030ef5b6d55a72514552480b1061f487e18bf5069bf741ee4fd0fbb999fbc183cc840b0317cd5d5d8fecc1f3f91bb5f2ad320339aff5c884f4c31f4877d59642e3ea0e3af659299aaea96ef7302910089560be252eac73213f80d334adaa8747cb9e3b9e4fab9b203448e276576e049c3b661ccdf75e0b386f6f865a1faf0c277b1fb39d84dcaf31b5ff4bbd6454a4052fac9e7d1825c178cdac4d6adb0785409c2e58d47e7ecdf909457f990fe7fe32c93f3185f55321cea4da51e3645cca3869ca44787108e9e5cfa8d9d575f2cdd2376226fdb9812cd20623b5e594ca7584cff342a52126dbdadfc348e3fcbec4bdf64f454f00f21889a8bd93a461ac51bfc76d7ccf96c6e1e79bdc2ca184d01d81422dfa068a4b4cef06bfa2742db2e3f9f25d93d5be6655d9f5b77252b124ec1cd67d73936fff40033056d13740b7f09c2ef057f9670e1f0cb8b81ca13c495a1463bff9f42aae53abe981263defd8b104e5ba6cd077859821bd8191e3622f7e8354b0ca6b5fe1481b5aaeed5009f08bd3370b4d8e5f152d8fc1ad9224c8d9b7a2497a2bf2421d2762bf29236c6f292911392969f2d5aa78b20b2e6d03cbcb32c21267bdc136dbe5444386e2fefa3709ef801c45a77964d3dfb13bcc20971cda7581aefb49dc03076c892c035cf963cf5047b2a468900a9769b3e9e47ef4c2edd13f2c7d1e7d0ccdf15d0e68484f0d1b3a1f54bb98dcf11be6655ca21358b39421bc80d649242eb15aab0bda45f318faf2557a5311fcfc51a7947b6ea9e071593274389931887f045e71dd0e1600c0ec940b20e177805d29b4f6fb2cc0d1ed7ef888122d4f6329188185a1bc563b0f785d135966df5ead0fa8fe219c46afe450a290dac0f8d7b973e802b94b3bef23b34b076fc3e228ad3ec7f81c92d67bbff339154a44ed74179a1252d0f619fa6f1cab8c47b5125b6ba7c60c2e1063857f21be81e75e889f58dbb832ee530abe43030e605e060d7cd1fc299d25fd4a6cfec335559cea3cf574ad333f3795ebdfa3344595353c70168b34cd6bd4d967a1ad78ef0cd63fbc9e51835505f154cf867a1389ff9800eb9d3af5d746dc9778304d4fe46940eaa0fbfecfb0b0b740167012fc0dfc00f957520e14810374e15048b0eb32547c781ca329ce67db5a61037466061925c6edca686449e411bac0fac4c57ed2e3507ff26998d6d2729a9f9e6d339d3655f4d1c4065500a46da24331365890ca8b1d6fe11aab8c0668a095b9f983de52f024a08f5f2d93799f851bfc60db3089b88af333e178a07f1ed953e38e6c5c12296d33abfb932442ca6f7222535473805b864befc0bf079147326c003c46841778eec7c61e378a9949d4c1c53a2cd657cf3ab955eeb4ed46c88a85f73af8d20a40a31b394213046ee0d15c5eb587458dcfb1278e9d3dedf3e68f313880dabea21866d9156717039e737305108ac94c25f1ad5937b7728f495e29db91bf3a3cc000bef85415cfde70fc7ce7d7234a987dace74ad55a597a9dad06c1dab4081132f4f8e508173a838241cfc955c652373535a2e55ad73655a6e27a031007e00f8e37aee94ce3857f3c3f24bde842015559c73c3e05e2b7afabb037f8365a314ae634de2f6ced6c431071c75a863b52c6528b996638fe537c05569d9b1ccd5d7f4baa99f283810b2da77a4b9a35d0fd64d42456aca6c50424a9e486b5bd31dba186e9c2559a8cc06805b2d3790be49ce914f249e79f8f821f8d428510b0e8ed67edb7831cd2032d8ce5636b5101b72e21e74485909f50ec35574fd6eb56bdd232c1d584c382ea4503fa2206f2b6b7b289408966ff786e42cf467cd68db3639dc7bc73f7bad609b39c2c6f5b743890827f825ceafbfdd8c2f31da88258b77a67802da2e95751609f16d662766e73783cf71e1924b57359aa9f9983a68f4fdfe9ec26cd468e7295dd0d9c7389f2335d47c478df124fe54bb3462ff37f3b2e0b3e0f415ac0838013f748b320918830e73563af62acead286abc42e6ad2daceec316bfc297963de9d48378dc017985fe24c20629c1a8c6c1c67eda03209da07696e33bac9061ab2fbc5b8825c27b7ec05d2962c9449b3603608c6c0b6589d729fc2ffe94992c936cd130baf125e81818c29672068bac6fe4aa39c9bcec75eef7e03405b5488318c32753f0fb6c2094eab21529e4811649431f1d65b2c8e173efd3bda023f513d1daff8dc092b4e9bb7e039e586e73d4d998af6fa54a6f552bf21628cb02578243e10dd31d3ef04e11e4ebfe55fdeda67e49f4e930d6593beff4e36df0f84e24a2c8a6d39130c88b71a092c0fddd4267e45e515166bc65f1ba16d8a07d527c76665a52a2432acdb466e6893bbbc3895a5ede98e84e5b9f27c4c49087858a847a5021d1a3e15ee3438a1211376a19f0ec43b04e2ff1a07c327903fe1ca680185677ff19ba41cd4eff21c08cec80af7070c0d6aab7168ba546e021d50b8db0ac3a690dc8929489810eed8c566158b72afdbc78a3918524cad7b5edf0b6511ca6b4e5809785b06d768fd2fdcd2e764a1f12f0690572f13867c8f4b1a5cb83c509dabf1549a07993ea58a0bdbe640cc4c16e0bc9fbf861e9e3bff84955817ad19f40f40b707ec6dcff80709ed5359c145c607751a462471bada6b9ee07181bad4a25d5229a348c504585a66a1d7876876745ab86f59b3a5e98a4c2aa7d0d883c58efc77f9814185b73a87bc23dd1c64b013b53f28a837dcc50582c0d5f8b15e958ff7068cf064e75c1865f4893026818d6dcb0eacaca3b1bc7d84188b1d4a33e82d715a18028f7293fa0684e8045aa97a416ab32337cb978c100dfd5a181012cb7a971004b35ea20a4285454781001b77f5963d4c90a7842b62dfcb1a31523ef4e67e690fc1c6e869e4fd5d9b0f6e013c56c76abfe7288d10a170669e108da06acca41adc48d98b4b4e58851db0894c8603fde20a2b5abdf1cc2829cecbcf9a6f054daddf9b5e987d2fcd8bbe0c788067d0f259f453a3ab251ed7751d2daeae49874239fa5955eb43b41916c0430fc9dc49369f540ffe65432b9757a28bd9b6c9b3820aa14b62def485322c549d67bfb11318877ef3e5e88b09e9b92eb09d31dce451c61c6a8c16d1a623d180cb4890390d7496551ffdca8b1b17b42b684fab73d79a557be5cfa04a73879d349aeb2e5a6663667f2e6e45c1bfab740eefd97270e0b70fdd577a7862d28e769105c448a8715870ae89990894869ece5dcfe9a8632d07b3577ab685c8541400ee80e2f14db921835c0eebceab91752d4f65676f86a3c6b8f66403fd6d02cd7925561b84a776da1eb64db193dfa95075e5d68b94103c94da6b2373f2ced0a4fd8fe447424a3accd7e6e7fdab35f87e9c87232e32eba6290bd24f6a7b14223eb447f49250af788dd291296cec57c30f3363787f5067784a9b395b992d1add27633df34825cdaa7021ba276a011ae419d7847c4a71b3c063df8f5b61a5e08213c71c7881e307e4597c1c30dc36e14d45144302862d32966fae399dd50222d581c99ba2c0b62fde8ff9af3f9bb93a869e3f6e0d1eb0ad56ee6cf7b0a42580596bdf411b449996361fefa805243f8df5a3546f426469d8af77e5610370f5210a7b280e744167162e3bb45ffb2c62f34c6c9f1e38b4cb2ebf133985db718fc8b2165d219a0ed1b0e166f9f0c1fb901d7af027813568e6ff4e96dec214efcbe664fea7f6e5f20389a669d17b02b79f55aeabbf2ee2133c28b8a3dc99add057802346099bf5246a89a310e8f2fadc7b2c8488dcc4d594fd2d43835a2b6aa4b83ab0581ce3ecc4f564556a54b694198af932f6e62f0d8da72b0b584fcd18bfd720d87fc7d3fcfcb242b61a5823230686b4c7f720f4cb26cb6a4a1e43c5722c2ffb0a54155752dc52767925b3ae2803282dca2d244575699a79b1d92145120e803e7cb2f2dcc5ccdfd3c5de5d50dd992f3f7a028a8fee5d217de80c3c4a242c05e5a1c7241fb7e2ad674d35dd056eddfc0038bea6804e1fb53ea073a79a2fab66e68ad9a13a09571f3192258257f421333f7426254d0b1c7fb267e134516b3a6e629be1813d458e115857bf35585b2d844285334c67d09e55209159b14c21987ff379bf9a3001e360f54a4bffdb757c8bf90550956f0354ab1e506c074cf6f8498dfa0dae22e05a4c73f7624997dd0e74618b363de37f70d531f93fc5882a86e86b9e3086da764fc7e1f7e34f37bac3f5df9f7506eb022fd8687bb1fca79dae1ab8f37c3f15871bc643e82cbf7d325e73e2fa3dc79dd6b333dac1045f1f47552e05452d6b178d9b2734e9e39358af1329744844376f1737709037956da8b27389b143312f0301c15505c754287d266b1d433ab61a3695d52533c6fb6f6aea6100d182025a5951044f93ceaa12e735d8d5fd74ca37be58ca04661fff1d330c29a18cab4377409194a2b5d257994975aab86415e050d3a1bf56b0d03d1048d9504e8ecdad31b0a947a4736c45b9bc78949bcc5008cdc2f4dd02200873d1db4cf5453e0f62823f7dd5058c755a6cd9488705b47e118ee39bd7498b0ac6346e8798f4e960232d23d5730a8b9bdaaad83fc9ec97174d5f68fda2788085d47ced0812441925a900fc1f6ca98b7954a4e77408daaf31c04104ba743919d732482a11fa89244b0721a462dc17993515cae328d24e610c3b4c68a534c6329d29b0ac08863401e41018345bd98a26ba9fc890bf493841a86425ea39dd2baf241b199a99465617a7500d7d02f85b9e598a99977e028ecb0eb647cfb2eb7df16cefef34f5b61742b067970d7b289dca446d5ffadc2b591b9f35c3559db3029ab20e91cd658b806a3b3a0008c64f16a3f6bd328f26d550874d642d7fd06e8644e713efe957ef7b26960142d72a140e94458adbc5fc8034b95424af8d4bed977d7da9abc813b6f991a60f5ed461bd3fa13a402e9f8c1bdb7a1cbc9b0db23aa3abe55d26cc60bfbd5", 0x2000, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x20, 0x0, 0x9, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) r2 = syz_io_uring_setup(0x230, &(0x7f0000000080)={0x0, 0x20, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) 7.380024214s ago: executing program 7 (id=2764): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="8e0e9b6308", 0x5}], 0x1) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f, 0xd3, 0x8000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000c400)="e47c6c216d8aa37d2b4b4937cfe03e2410439a321b06378d3ea501c17dc8b903b8248840d09c10c6c253f5b6e1e937e281668664f6d7604b7802a480c65efe232149b9a1b5685da4b06f7300fa4ba8bf52b83ca92b9340c552063c5c54313b425aa83b0bb70cc61edfcd875385d3b4cdcabf7e5d7b6afe878fe33d5a2f54b21f9a99f5384099ae155074bcadc16fa61bbc92c54fd1e4e903ddd075b54e0fd0038f016509f8c271f61d87c793e3e12f2c2cc904b4eb10b03c7407dd50b83dc3a18daee83065d39185121ba9c6bdec2158faade8e7d558b99fd60434b1fcd74eaa24d75d6a591fd08c1d3219cbd7c59cafbbde4b5d5f059a12e9377ca96953a8605fd6445f30ceae48093052474f4f9f14c7cb9b5a255268a462738e7fc45805aa57f6b892e690bfc3750b23b13c1b6b499b19b6865baf9a95ae98bce137aa98e5d2ec0daa6795c027113bece2e8a33f02dea2501cd7a60378d8503c02afa003819a2caa68203620eb1b8b532a515e9c5d331d1e9c92d6af26d17d1c1e26ba196df0902f6d0ae5c607b53c9ada09aa4a9a99da592b737fa8d1795bc4e61b5bb00c67f4a84e97e6b7126e0cbdaa651430125c57f9de224bb18a96d78253be5daa1c1bbe8491769d39c5db252ded1bbfc27194eff67ff94997a93095cf9405a7d016c2376b911c619c1f5dc45e6c8a4ce168ad766d8ff8f382b24176a3f50b6ec4e50b0b4b95c9e1f00b8ab6676d8ba438a21483ef9cf9aed2a05cdd2305bf665dffeadf554ec2c57a89d343b4f05cc2b904562ddc629e509b52d9fb7adc22bb5377953033615617c8a0d88f93ff4936c07df225448e52747d47b4a5c781e4b8c5237f4bc4bda77a242fc321880ce3eec414c5355fc66e57c35e901c4dd0f20a615482bb5eef38a29c7279c633fe075d9c9bd377f425446a303e0a59bc613907cd6be3537c0f94d1245940ed5bbf31c41a03c5a39dd4e1d8ab0a19ab6911dca0578abb9763b0eae86a91571d2b0726722b74db9a1bfffb7424c8a9197f5d41cedf5c0b89273718a85fe81ded439104acc28da887863c7606657af0d279ac7c5b50716a1380665169eaa039080987d63a9af0ae10c036a57a1d651267061faa4e46c650fcb4556f8a34e4bb06a4e1f2e0be58add2c62ba67c64508e08f5b1c7ab6ddedbb49736826fdcb985f2c651a2be6b0f55e18d9367f029b2d85438fd53f1961f533685745c01bd867707ec16d084cd8cef1ba5e9100f1f86a252a14c65e8991b0a7ec745572e1a396ab4ce89ec5e54fd6e3841b99ed2384b0a35a86ba8a0436e87e1215bbb0492427af73ba404790aab0e336f53b69749fca97def0b5f3445b42f700cbe0a01c3c6966cd5bb6f79fe8aa7d934f5869a0e3b0e743c52c140e01b050a0725e4c27cda0444f488078b68783765b59ab6c079d843e2d35eecb4b82a8251d61e232e19d386ad7ddec0ac6eacc863f1a2b103f48077bb5cc7e58157b5af32a137d4df40f98a405422df6dbfdab5477bae9e0633647a8b9baa88c3f681901864e38c439cc114ec7580fea9131b554843902904211e2f28e8d2c066a3761aa076577458fbb3683fc2c4a18b93aaa343d27e232fa11a649b0dab7c2e83b76c446968ae8a99f3ca5743fe0f1eecef48e7e06695f380f434e591f14540d5e92da29a97d0677311da9e34f1a1691d3593cc6f74d0394b46e74278205dca9c89f6d2f117cedbc70d1e3289d3fa23480be98e377b15ce6054e3e33dc8c5d1ce804606c86c98230d8702427243b05edbb392f9304b9015008733c0a52e8fd4f74ccbb374496cda1abac59fa1052306b77ecd2025b7f6ce38327ff0bf5a7f183729442c13dc8b1b944b9ea3c3833a11f5334fca329cabf8a7e9120a9d96f0bec9cb64dc7e9456fdee5151be1c9f574b509f081655dbe9f2bd8c948e98f1db4e1a7d2ed5af95fa13a55a2639b0bf0d5a575287dbd71cd192be0e1b6f5f6c12e751e4a65799420957145d20097cff8b3b86308a336f10e413db27fbbf080ba97dfdc8a3e01d63d672ac05e6fb3733afb14f2acbbb350188f9194c66139b87e23788716c1941cc768dc0c34dd35848a42a568ba49cbc0226ee61695fbf7feebb933f5389b1d38ea93008cb08b16d2a261ace3cb988bf673fd16e18bdaaad1be4f4cc6394b454ec5022577b7e6f65aaa7998005803b072be1b5d7c437b5aa003968bbe6eedade30b9b995ce9f54ab2fd37da2de0278219a779957a3c0daf684c31a2cfb3e57f0175e28d3ab2e0693a4225937013019773555cfd63234251c08531075d3f0de35780902c6443a126c599e49fbe3e020786099ee941c1683009540640f06852812abfb128b494e6f913edad2c1072b220537483dbc8fe8bbb405c282bc1649ee16fc5480d5ef13704006b4bc985211e7704668f790db2ecfcef79953276aca4112aa5984ad818b28d73c1376e12cb43e9765fb17a7255e5a7fd57628e2c3d00e046b8dc0e12cc0a3be8e0da882873a6a18698229243db199a3b26afc03fcdf532090ceb3e249b6f19b4e8402296030042924259b683ebdf68fc274432377d87252d506a8c2f5f6c088a4248274a5752655f3ff1a0d79b2dd1d7100a2fee9e4cbe5babe852159e6321ea6e29fcebff46ea2802c5faf066cd334237919a503b5a562e3106f899cd1d62a400f0b8e43f316962b4641344534fa6dec71d5723f0ff4fd037c2e3932c0d9063ba636975fd1b8c5bea4a2fb9d53eb0682fca49e26e4a9b65b35378e0e4d055b0b501322c52d9ec900ee120d697dac611b55ce3ac628c07d6a5a0d52b714df8edb51f1a6ae45a25ee43c1792c8f1ea95ea24655a88844e81a1bc0f75c82edb5a0b10fd586cf6401ee87e68e8dcecc9ae670c0a71266858ceeedc2e2f0b38e8cd5363b926cfb71455a88ae7ff485c52797e860d73967971d09fb2e65fb612163f34edcbcfc813957579c3681122b575af443763d6fd5748b5fe2407e6162b1f07448bcfdfb871a432248b2d9dde04944e029aaf026274495bf2a283db2d76d17ddcbdfa1f263ebcd04398e733c1517bd764a9caf27d1dd14750e5dc10d49adf29416a14b475b8308f749dd4d1f90cb65dc956d331d6b6c1cf24e6774e29a4e79028dc34a5ce3f5bde0b2b0c69c3336a0daf1bc6e612a46216d303b456487cea05006550b11be7a0211658ee2a683a1574ce4061f72cd7574d5af6c860e03882296fbde66c85aa8a85c9de799f5d83e2e01c8ecd13a15b0c3c72695358fb4d2ccf6224a45d820dd89e36e66d0a5eda07df66a68b24f111cabfaf2d37698b70348f8df4673a28d511d6cbb7590bbe1192ebb55ccf8e9fd618000239a594d2c57304bcedbaeb116870b23728494497afced271408ecbbe0c923400d86e7654d09fe2d204c41032669d6d818e0bc298240693f21fe171f7989191d7eb5bdd2981da20fbe61d7067a372c5476bf255c2b1b8502ae369fd99409deb4dfabe2eb82c2b5c4068249325455942fb84967dbafdd90a094182375a73a13eee7ab5a83b9a5eaa1cbaa90ad9293b8e5c1437fa8b42e9d777d5d790c00fe4a39d449220ea4140511b04d8c1c9e59c15f1fcf265b4cc3e0526135b0c512e61e6bb016d87ec62deee312fb093413f250d2b8476bdd5a8ae4725305f6b85428a42f84438241f3d68e231584d3a69946faefcc6bfff5a75051fb3f34ff0be7656b293db2c2139996b9dfcb3b53b84e0f5007e6a2181819c73db10c65ee05369365e8e6557547d807c21362b675d83d3613abee8d7b7d3a74a1e69e0785a8aa4373d1f67edc2d5af633a81bdefa9858c0d0a553ffd7e929f301e575fbc1ac7af5871ea4e510980e2b8fcdbf9c2216f3d73c2777a989d324c7a2df7f06b87076ea04be57f5fc4f48c7bb5c80360a8761743e5d7d6ae76f9b671c253e7ac2727ab718b7339250b946b6c2a418c894d48f19f594071168c2da09f0aa7ef35ae778ab4c1fc684b1c0a9b5c66e15ab92a4bac0d6d12c76b31bb56708d09f716c237a456f810e0dbbf3ac0aeafad75e27a522563a19be66ea05f35b23723934f7a12c1e1c9a5c427a037dd9f75dc9960d49b48fc20910c7a8aa51c79882bcac75797911d676ad2c31dcead6cd6ffb424e1ee2b076c45fb6fb62f845fe3c8c24f596f4d921168f65162280736d713d11aa02f9b7b02f47972abd3679b1897504b8f809d8d1044fad4d04406a3ed0c124bcd8337628f993393e9b94eb42a3d6ac5802e0172749ae6f1ec6dd22f4d32bc009deea5dc22daf041f8e8fa206dd5a975584107a81bd033b3d8f8d4d66da8705713ca9a71b8f7668ee7bd4cbc960eaa89228de6dcec53ff9fcfb858fddf73cc825bf3d0cdaf4592e60619e3a666a86391149dedeafce8c76fa6cb19008d48b301efec7232b20d48da6701239725848406a28a36c901e62d0759e2a086cd3bfb54185fafd6d2c6972adc6d76e2c58838a5b103fd2fb821fe9467ed840aabb8db5d0897bc9e48ece09098c57df591065e20a923796e00b17d208ff39867913b15fdb9eddefc8fd828f5abd82e26e9cb62c1d917864e0fde219bac453f0598cc4d8bcf6f759e0c7b667c556cb8e1b4b46af29e37b996f0f5f0871169366feb56a5c84854903c315c729dc494b8f0982eaa178a4225e3fc89c7b216a74b34a12bc452fbe54f11fe5aceb1467729f32ecd658b1fc3230c5b07496f0ec97549988fd0ccf95f01a95467eb9cd21b3386f5d0de538ac9941cb22fa457da9395996e6a090c072be1d2c2d2963e695d3cdb5375f5da299b5efea5ec32546fd36d4ed8b10dd14f94298f0973fcb935f981aa2ebc71aacca31470d33b12b43478caddc41f4262f05d106a417f8c304fbd5d1214a2ce9e95acedb4ae29c89fca58742ca207e9d972ce871a09e71f1e80c4a5cf8a248b900f7acfa8a253ffc82d8977a303822b365d2113a6e01c59ab41c9bfc7316393a423618cdc08de3e834b02d88ee169d84ce1ca3e26dbec65a7b796c91a37ada6ff3796e6a1a427add5c6ccca900369484b4626bd27d776fc73867e4264ccf17653d298725f56f92e9ef64c1b16ff4018330e5625b3a58e9b32285d7ea086035451fbfbd275443a59d80aa44a80b8b1d07c412fa6b6f6a3709c3fd4b3036e17e0624d0ed4fca3f5856e363e33a984c4cc08a5c40c16f50b7a1a11bc8f035d833b2f5f357116e20813cc718df7611efb3fcc9e9d71c3b5662118ce181e308528b156ffdd480d5208ef33fb68bdeb5ac7a4be8b08dea0c2f60430a1eef099b0270d8c63a997890136ef7800204b730b8679a4f0be51a16e3a7ddb36a36b3c2c3b28dc3a5a51ccc7dfb0c098c5d46a7f0cc19b3cdfffd5c9e96fd649c8f769954089816f5a393fd7590df49a4ffd5b554daa5fed16937679cc1c59adf4f2b35b652b2162cd75cc06f811a9b9c583db30197d46c347377edabc75840bae2ecfca6a33b76ac7ec16a89616ac9c5fcd69f62ccb9da58b3703d1b6d81e6cc294e2ae63c85bbe6612a240be5687448b09552e326adb479c20d25771a7cce65f316276ea4febccc8d0671d3f7b89e3860527932d50358f61dfc57ecea5e5e7a514ec31fc4fc99632b924f25abdfcab63b18d9b8f34b882e1b00adfe9465990374411604fa1ce59e906848cf44a73030f3dc84bbef85c208d39a1fcfeef247282cb7a307c314548042e24dd80eeb2530081305c6f9d18394ac4924b540f007df6d7e80c4eab56482a94aefe9288392fbdf599707e19fc50f7754226f6778eb9401f887fe1deb9d9bcbe35c979954ae22597f636869c8843767355e85fa45273788cb43ec3bea0a74f243f5d1840c087e43c0f39a2b61481a9edc8030e3dcd42657905179c2b03348c2cdc2a7f8b9eea3652984cf7ae0f827c8eea183c32dc0586efd646a4863d74bafc76cb86109d18027531a28f1e5d42f27c76f6b871a4e762268c2be77f4b3061d62300d7a6af893126cd9d027890f83ce8b0c763f7fcd15f661fa57bf182c756de530065577d97c4e1c9d52d5847926600fc90070e5c3092129a4c87ee589292a31caa10ca61b269e4e9756f49cfe2b9c8e48afe99bccb723007580dc69df68158169b3b880a683be132afb10d375e26ca56a503c22a281f57a6c07e0a7ca6e8817679166f78af04b42a0ef886ce782a5e2c6f4755cbee4e62c4315e62d6e294423b34991f3c1847e20cc1ff5ffb80a725ee28ccef8a897e4ed24fc224266fbae8c5211102d81d40c1cf53c2fb1919c802a6a947d83992ddeaadfd771811dcf74894e32ae6eba1896220f0c4eb4985ab38d633410a1c4c47d2409bd54689252f09250c0c650e03b4cc1db9f68525d66864a8d9d8f512711e14d530665e37f70bdf286f1dea3b88dbb494520f56381fe82935c5a8313edcc92658b32419251063ce1d3b0c91f2e235baa5c79cbc7db9715722ea4ff5b106c65615e6c439df019cddba3f48fb441f7dffcb968dc6487ea78c37ffe2941841ad4c4282517f662065ab574bf077c53965e8a364b9db2b0adf8a7e74693ae1fb7a7fe4a7403eced2a74f3bad5efaa9cc6f7ebe33cf779c21a6278e9043999d33f030ef5b6d55a72514552480b1061f487e18bf5069bf741ee4fd0fbb999fbc183cc840b0317cd5d5d8fecc1f3f91bb5f2ad320339aff5c884f4c31f4877d59642e3ea0e3af659299aaea96ef7302910089560be252eac73213f80d334adaa8747cb9e3b9e4fab9b203448e276576e049c3b661ccdf75e0b386f6f865a1faf0c277b1fb39d84dcaf31b5ff4bbd6454a4052fac9e7d1825c178cdac4d6adb0785409c2e58d47e7ecdf909457f990fe7fe32c93f3185f55321cea4da51e3645cca3869ca44787108e9e5cfa8d9d575f2cdd2376226fdb9812cd20623b5e594ca7584cff342a52126dbdadfc348e3fcbec4bdf64f454f00f21889a8bd93a461ac51bfc76d7ccf96c6e1e79bdc2ca184d01d81422dfa068a4b4cef06bfa2742db2e3f9f25d93d5be6655d9f5b77252b124ec1cd67d73936fff40033056d13740b7f09c2ef057f9670e1f0cb8b81ca13c495a1463bff9f42aae53abe981263defd8b104e5ba6cd077859821bd8191e3622f7e8354b0ca6b5fe1481b5aaeed5009f08bd3370b4d8e5f152d8fc1ad9224c8d9b7a2497a2bf2421d2762bf29236c6f292911392969f2d5aa78b20b2e6d03cbcb32c21267bdc136dbe5444386e2fefa3709ef801c45a77964d3dfb13bcc20971cda7581aefb49dc03076c892c035cf963cf5047b2a468900a9769b3e9e47ef4c2edd13f2c7d1e7d0ccdf15d0e68484f0d1b3a1f54bb98dcf11be6655ca21358b39421bc80d649242eb15aab0bda45f318faf2557a5311fcfc51a7947b6ea9e071593274389931887f045e71dd0e1600c0ec940b20e177805d29b4f6fb2cc0d1ed7ef888122d4f6329188185a1bc563b0f785d135966df5ead0fa8fe219c46afe450a290dac0f8d7b973e802b94b3bef23b34b076fc3e228ad3ec7f81c92d67bbff339154a44ed74179a1252d0f619fa6f1cab8c47b5125b6ba7c60c2e1063857f21be81e75e889f58dbb832ee530abe43030e605e060d7cd1fc299d25fd4a6cfec335559cea3cf574ad333f3795ebdfa3344595353c70168b34cd6bd4d967a1ad78ef0cd63fbc9e51835505f154cf867a1389ff9800eb9d3af5d746dc9778304d4fe46940eaa0fbfecfb0b0b740167012fc0dfc00f957520e14810374e15048b0eb32547c781ca329ce67db5a61037466061925c6edca686449e411bac0fac4c57ed2e3507ff26998d6d2729a9f9e6d339d3655f4d1c4065500a46da24331365890ca8b1d6fe11aab8c0668a095b9f983de52f024a08f5f2d93799f851bfc60db3089b88af333e178a07f1ed953e38e6c5c12296d33abfb932442ca6f7222535473805b864befc0bf079147326c003c46841778eec7c61e378a9949d4c1c53a2cd657cf3ab955eeb4ed46c88a85f73af8d20a40a31b394213046ee0d15c5eb587458dcfb1278e9d3dedf3e68f313880dabea21866d9156717039e737305108ac94c25f1ad5937b7728f495e29db91bf3a3cc000bef85415cfde70fc7ce7d7234a987dace74ad55a597a9dad06c1dab4081132f4f8e508173a838241cfc955c652373535a2e55ad73655a6e27a031007e00f8e37aee94ce3857f3c3f24bde842015559c73c3e05e2b7afabb037f8365a314ae634de2f6ced6c431071c75a863b52c6528b996638fe537c05569d9b1ccd5d7f4baa99f283810b2da77a4b9a35d0fd64d42456aca6c50424a9e486b5bd31dba186e9c2559a8cc06805b2d3790be49ce914f249e79f8f821f8d428510b0e8ed67edb7831cd2032d8ce5636b5101b72e21e74485909f50ec35574fd6eb56bdd232c1d584c382ea4503fa2206f2b6b7b289408966ff786e42cf467cd68db3639dc7bc73f7bad609b39c2c6f5b743890827f825ceafbfdd8c2f31da88258b77a67802da2e95751609f16d662766e73783cf71e1924b57359aa9f9983a68f4fdfe9ec26cd468e7295dd0d9c7389f2335d47c478df124fe54bb3462ff37f3b2e0b3e0f415ac0838013f748b320918830e73563af62acead286abc42e6ad2daceec316bfc297963de9d48378dc017985fe24c20629c1a8c6c1c67eda03209da07696e33bac9061ab2fbc5b8825c27b7ec05d2962c9449b3603608c6c0b6589d729fc2ffe94992c936cd130baf125e81818c29672068bac6fe4aa39c9bcec75eef7e03405b5488318c32753f0fb6c2094eab21529e4811649431f1d65b2c8e173efd3bda023f513d1daff8dc092b4e9bb7e039e586e73d4d998af6fa54a6f552bf21628cb02578243e10dd31d3ef04e11e4ebfe55fdeda67e49f4e930d6593beff4e36df0f84e24a2c8a6d39130c88b71a092c0fddd4267e45e515166bc65f1ba16d8a07d527c76665a52a2432acdb466e6893bbbc3895a5ede98e84e5b9f27c4c49087858a847a5021d1a3e15ee3438a1211376a19f0ec43b04e2ff1a07c327903fe1ca680185677ff19ba41cd4eff21c08cec80af7070c0d6aab7168ba546e021d50b8db0ac3a690dc8929489810eed8c566158b72afdbc78a3918524cad7b5edf0b6511ca6b4e5809785b06d768fd2fdcd2e764a1f12f0690572f13867c8f4b1a5cb83c509dabf1549a07993ea58a0bdbe640cc4c16e0bc9fbf861e9e3bff84955817ad19f40f40b707ec6dcff80709ed5359c145c607751a462471bada6b9ee07181bad4a25d5229a348c504585a66a1d7876876745ab86f59b3a5e98a4c2aa7d0d883c58efc77f9814185b73a87bc23dd1c64b013b53f28a837dcc50582c0d5f8b15e958ff7068cf064e75c1865f4893026818d6dcb0eacaca3b1bc7d84188b1d4a33e82d715a18028f7293fa0684e8045aa97a416ab32337cb978c100dfd5a181012cb7a971004b35ea20a4285454781001b77f5963d4c90a7842b62dfcb1a31523ef4e67e690fc1c6e869e4fd5d9b0f6e013c56c76abfe7288d10a170669e108da06acca41adc48d98b4b4e58851db0894c8603fde20a2b5abdf1cc2829cecbcf9a6f054daddf9b5e987d2fcd8bbe0c788067d0f259f453a3ab251ed7751d2daeae49874239fa5955eb43b41916c0430fc9dc49369f540ffe65432b9757a28bd9b6c9b3820aa14b62def485322c549d67bfb11318877ef3e5e88b09e9b92eb09d31dce451c61c6a8c16d1a623d180cb4890390d7496551ffdca8b1b17b42b684fab73d79a557be5cfa04a73879d349aeb2e5a6663667f2e6e45c1bfab740eefd97270e0b70fdd577a7862d28e769105c448a8715870ae89990894869ece5dcfe9a8632d07b3577ab685c8541400ee80e2f14db921835c0eebceab91752d4f65676f86a3c6b8f66403fd6d02cd7925561b84a776da1eb64db193dfa95075e5d68b94103c94da6b2373f2ced0a4fd8fe447424a3accd7e6e7fdab35f87e9c87232e32eba6290bd24f6a7b14223eb447f49250af788dd291296cec57c30f3363787f5067784a9b395b992d1add27633df34825cdaa7021ba276a011ae419d7847c4a71b3c063df8f5b61a5e08213c71c7881e307e4597c1c30dc36e14d45144302862d32966fae399dd50222d581c99ba2c0b62fde8ff9af3f9bb93a869e3f6e0d1eb0ad56ee6cf7b0a42580596bdf411b449996361fefa805243f8df5a3546f426469d8af77e5610370f5210a7b280e744167162e3bb45ffb2c62f34c6c9f1e38b4cb2ebf133985db718fc8b2165d219a0ed1b0e166f9f0c1fb901d7af027813568e6ff4e96dec214efcbe664fea7f6e5f20389a669d17b02b79f55aeabbf2ee2133c28b8a3dc99add057802346099bf5246a89a310e8f2fadc7b2c8488dcc4d594fd2d43835a2b6aa4b83ab0581ce3ecc4f564556a54b694198af932f6e62f0d8da72b0b584fcd18bfd720d87fc7d3fcfcb242b61a5823230686b4c7f720f4cb26cb6a4a1e43c5722c2ffb0a54155752dc52767925b3ae2803282dca2d244575699a79b1d92145120e803e7cb2f2dcc5ccdfd3c5de5d50dd992f3f7a028a8fee5d217de80c3c4a242c05e5a1c7241fb7e2ad674d35dd056eddfc0038bea6804e1fb53ea073a79a2fab66e68ad9a13a09571f3192258257f421333f7426254d0b1c7fb267e134516b3a6e629be1813d458e115857bf35585b2d844285334c67d09e55209159b14c21987ff379bf9a3001e360f54a4bffdb757c8bf90550956f0354ab1e506c074cf6f8498dfa0dae22e05a4c73f7624997dd0e74618b363de37f70d531f93fc5882a86e86b9e3086da764fc7e1f7e34f37bac3f5df9f7506eb022fd8687bb1fca79dae1ab8f37c3f15871bc643e82cbf7d325e73e2fa3dc79dd6b333dac1045f1f47552e05452d6b178d9b2734e9e39358af1329744844376f1737709037956da8b27389b143312f0301c15505c754287d266b1d433ab61a3695d52533c6fb6f6aea6100d182025a5951044f93ceaa12e735d8d5fd74ca37be58ca04661fff1d330c29a18cab4377409194a2b5d257994975aab86415e050d3a1bf56b0d03d1048d9504e8ecdad31b0a947a4736c45b9bc78949bcc5008cdc2f4dd02200873d1db4cf5453e0f62823f7dd5058c755a6cd9488705b47e118ee39bd7498b0ac6346e8798f4e960232d23d5730a8b9bdaaad83fc9ec97174d5f68fda2788085d47ced0812441925a900fc1f6ca98b7954a4e77408daaf31c04104ba743919d732482a11fa89244b0721a462dc17993515cae328d24e610c3b4c68a534c6329d29b0ac08863401e41018345bd98a26ba9fc890bf493841a86425ea39dd2baf241b199a99465617a7500d7d02f85b9e598a99977e028ecb0eb647cfb2eb7df16cefef34f5b61742b067970d7b289dca446d5ffadc2b591b9f35c3559db3029ab20e91cd658b806a3b3a0008c64f16a3f6bd328f26d550874d642d7fd06e8644e713efe957ef7b26960142d72a140e94458adbc5fc8034b95424af8d4bed977d7da9abc813b6f991a60f5ed461bd3fa13a402e9f8c1bdb7a1cbc9b0db23aa3abe55d26cc60bfbd5", 0x2000, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x20, 0x0, 0x9, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) dup3(r3, r0, 0x0) r4 = syz_io_uring_setup(0x230, &(0x7f0000000080)={0x0, 0x20, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) io_uring_enter(r4, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) 6.859747742s ago: executing program 7 (id=2767): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4801, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f0000000080)=[@wr_crn={0x46, 0x20, {0x8, 0x200}}, @wrmsr={0x1e, 0x20, {0xe9a54e2dd50a11f8, 0x9}}, @uexit={0x0, 0x18, 0x2}, @code={0xa, 0x78, {"2e410f79c8660f38800500000000c462f14514b466baf80cb808f2ad8aef66bafc0cb808500000efb90b0a00000f320fc77b58660f3a14a1731e00003ab971030000b8240de2b7ba2a3a0f0d0f30c401b9db806800000066baf80cb810013989ef66bafc0c66ed"}}], 0xd0}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r1, 0x4068aea3, &(0x7f00000001c0)) r2 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x400) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f0000000300)={0x8, 0x120, 0xfa00, {0x2, {0x401, 0x5, "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", 0xff, 0x1, 0x7, 0x7, 0x1, 0xf1, 0x7, 0x1}}}, 0x128) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000440)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000480)) openat$iommufd(0xffffffffffffff9c, &(0x7f00000004c0), 0x14401, 0x0) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000500), 0x80c00, 0x0) sendmsg$AUDIT_SET_FEATURE(r6, &(0x7f0000000600)={&(0x7f0000000540), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, 0x3fa, 0x1, 0x70bd2d, 0x25dfdbfe, {0x1, 0x1, 0x1}, [""]}, 0x20}}, 0x40000) r7 = fsmount(r6, 0x0, 0x70) getdents64(r5, &(0x7f0000000640)=""/142, 0x8e) setitimer(0x0, &(0x7f0000000700)={{0x0, 0x2710}, {0x0, 0x2710}}, &(0x7f0000000740)) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000780)=0x0) ioprio_set$pid(0x1, r8, 0x6000) sched_setscheduler(r8, 0x0, &(0x7f00000007c0)=0x5) faccessat2(r6, &(0x7f0000000800)='./file0\x00', 0x10b, 0x300) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) open_by_handle_at(r9, &(0x7f0000000880)=@GFS2_LARGE_FH_SIZE={0x20, 0x8, {{0x0, 0x3, 0xb, 0xfe}, {0x2, 0x8, 0x3, 0x8}}}, 0x400000) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r5) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, r10, 0x300, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x894}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x1363}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x88e}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x40) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000a00)={0x6, [0x8, 0x9cc, 0x4, 0x5, 0x8d8, 0x34]}) writev(r7, &(0x7f0000000b00)=[{&(0x7f0000000a40)="678041f22501541234c40593a52d814f989fb587204ca6f78e2fce802604290356b2e094b805af94ace4ade39b0b1c485b02e497e4fefa3b0ac6a65548d248da8211107a954cb473a209", 0x4a}, {&(0x7f0000000ac0)="99d376689b303cb3e53246650eaa4631a4cea75904", 0x15}], 0x2) ioctl$BTRFS_IOC_SET_FEATURES(r6, 0x40309439, &(0x7f0000000b40)={0x2, 0x0, 0x1c}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000b80)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) 6.792096694s ago: executing program 0 (id=2768): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000006c0)={0x73622a85, 0x100b}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 32) socket$netlink(0x10, 0x3, 0xc) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async, rerun: 64) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = socket(0x1e, 0x800, 0x80) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0xfcfd, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x8}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x5}}, @NHA_ID={0x8, 0x6, 0xa00}, @NHA_OIF={0x8, 0x5, r6}]}, 0x3c}}, 0x0) (async, rerun: 32) r7 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) (rerun: 32) ioctl$TCSETS(r7, 0x40045431, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4d2) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) (async) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) r9 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f00000007c0)='usrquota') chdir(0x0) (async) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 6.590024503s ago: executing program 0 (id=2770): syz_open_dev$vbi(&(0x7f0000000300), 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000001d00), 0x0, 0x40000002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4000000007, 0x0, 0xfffffe0000000001, 0xfa11, 0xaef}, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000073797a3000"/196], 0x119) writev(r2, &(0x7f0000000700)=[{&(0x7f0000000980)="00000000cbf14b0cedaa7eabbb7a9f1d6ac30357fb2b26c8580b13f04659350001623d69cc72efcb77ad6d0cfc4f1643733edec9dce66132b65c4e6d51221abe72c0a50980279f4ffd548b6b4c9ddf17fa0cbf7b6abef8c1a45236d7dcd9fed9b97877cee8f1dbe4cede8668eaab49a62c91344f588fe77cd2ce346e8eff951767875e35c7803f952314ea", 0x8b}, {&(0x7f0000000a40)="015deaeb2fc872e7164daf1a7776f6dd4fcc019fc7b64ee7b5713189fc13b8c715025f4d3a98d4576454343c66da9bf2d08c054d7bb2c7960ae9933d9b798d0ae065a08b31b52714807f05ea2c51c890d9df27b0fa89c89725bf4841475e4695942119a8a7987cbbb5379744aeee08965ce66249cd3eb824c569bb56224eff50d15198c29ca8", 0x86}, {&(0x7f0000000440)="e20d77e8ab25cb74f13d2034bed7a045ea4958c367ea4afbe7487f5f37ec5a066f28c31bfd06b97596a5b2bf8d4992e392d5c4d3486a64a31a6b2d244b7623f7f8b7678c12", 0x45}, {&(0x7f00000001c0)="ba4414d6ceae5e55", 0x8}, {&(0x7f0000000780)="143bf50a6279961fb47444a8663adbe7135bfecd32c4c9ea86f9c60bca402220479c77339bc7df46e7a12a4d2310cd721c8a0160790682430f2e93324bf605742b9b0c9449018709c2", 0x49}], 0x5) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000200)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$cgroup_int(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='freezer.state\x00', 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x14) sendfile(0xffffffffffffffff, r7, 0x0, 0x9) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)=@known='trusted.overlay.upper\x00') write$FUSE_STATX(r6, &(0x7f0000000540)={0x130, 0x0, 0x0, {0x2, 0x6, 0x0, '\x00', {0x2000, 0x5, 0x7, 0xc07, 0x0, 0x0, 0xc000, '\x00', 0x1, 0x3ff, 0x0, 0x6, {0x0, 0x1}, {0x4, 0x800}, {0x961, 0x6a5ad1ff}, {0xfffffffffffffffe}, 0x80000000, 0xdc, 0xe0, 0xa}}}, 0x130) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB='\x00\x00\b\x00', @ANYRES16=r8, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES8=r1, @ANYBLOB="0a0034000202020202020000ece7e6a5e3c7c2d97a7ab15706ee4420d8c06b8c6430c3797da81ed547b87137e914307ce2a00d09b3350f83773ca1de11e58a37a32b267761067916fae9b07f57d4018531995901fbe12d6d18b00da02f2904f461669479faafe813a6bd6397166c00c77b5b906ecc5b404aaf9cfd9d326b646d5cc21aeee9e7423da225f6ef8730d609612e8866c79fde4ab021e3ce750c150930edddff487cb9c2293df43bc09cbb62e53a13f83437f627e78e0da6c84ceeff375e2a2e41c50417dcc02f5cc73a0e190c6997c17b58dbe1a68a20f7ed4499ea620215e70d01604027b4b321b98f0ec1b6feec98e27c25c876a22a6856a3b396115f4d0ea2722686fa27db9a10eea8726775725f31003acdf35f73e396bdc4bfb787840effaf5a5c39a65884f6af0cff44ceb196d7e168d36ad6e85989", @ANYRESDEC=r3], 0x28}, 0x1, 0x0, 0x0, 0x880}, 0x0) 6.535878697s ago: executing program 7 (id=2771): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000002c0)={'\x00', 0x8, 0x5, 0xead2, 0xb, 0xffffffffffff7fff, r0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@initdev, @in6=@private0}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee01}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2, {0x80000001}}, './file0\x00'}) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000cab000)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid={'access', 0x3d, r6}}]}}) socket(0x10, 0x3, 0x0) setregid(0xffffffffffffffff, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdc03, {0x10}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20004814) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='contention_end\x00', r8}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r9, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r10, 0x0, &(0x7f0000ff0000/0x10000)=nil, 0x10000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r9, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r10, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r9, 0x3ba0, &(0x7f0000000400)={0x48, 0x8, r11, 0x0, 0x0, 0xffca, &(0x7f0000000040)='?', 0x5}) 5.385061445s ago: executing program 7 (id=2773): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000200000fffffffff0e00000000000000030000000700000003000000fdffffff00000000000000002e"], 0x0, 0x46, 0x0, 0x6}, 0x28) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) syz_clone3(&(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) socket$xdp(0x2c, 0x3, 0x0) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000340)=0x60a9, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x8, 0x80, 0x80000000, 0xc, {{0xd, 0x4, 0x1, 0x8, 0x34, 0x65, 0x0, 0x3, 0x4, 0x0, @private=0xa010101, @loopback, {[@ra={0x94, 0x4, 0x1}, @noop, @noop, @lsrr={0x83, 0xb, 0x49, [@loopback, @rand_addr=0x64010101]}, @ssrr={0x89, 0xf, 0x4c, [@loopback, @private=0xa010102, @broadcast]}]}}}}}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) memfd_secret(0x0) (async) r6 = memfd_secret(0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'syztnl2\x00', r4, 0x2f, 0x6, 0xb, 0x7, 0x10, @dev={0xfe, 0x80, '\x00', 0x42}, @remote, 0x8000, 0x1, 0x101, 0xfaf3}}) ioctl$int_out(r6, 0x5460, 0x0) lseek(r5, 0xffffc00000000000, 0x1) (async) lseek(r5, 0xffffc00000000000, 0x1) getdents(r5, &(0x7f0000000200)=""/38, 0x26) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000480)="15000000", 0x4, 0x40040c5, &(0x7f0000000080)={0x11, 0x8100, r8, 0x1, 0xfb}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x20000260, &(0x7f0000000840)=ANY=[@ANYBLOB="18e695e89ed0da8f501100e78c5f8b48a51c720228f38a9ea837b96b3cf0150a549e2355f4408f1990e0cc2f0d114afb2a39f5b18a94c657a2232479db11163cac800ad8bccf083625bbd60313de4d957e4badc005c59aff08fa140ed2d3e9a2c0de18ea67eaf02f37d2add23fae3fc8392ddde129c9ba215e735385db60ada17242d39d40cd0bbc2bc81324cc43bacb1cb68d00b2e5565d3b25bd34c5d2a3158e3f3f2e7fd5e88caac493ade877caa82848f58435e93f61d18517c13622490a2a3c2d71dbcb769eacc8cd86b6c7f0309f1cb275c9ac7034f79538f3741b0e1038b39fa0442aafdff7b13b1fa61700", @ANYRES32=r5, @ANYBLOB="0000a10c784a0000b7020000140000000eb961f1f13df5a38500000083000000bf0900000000000055090100000000009500000000000000183300000300000000000000000000009f91000000000000b7020000000000008500000084000000b7000000000000009500000000000000ea3f7b734bcc56b983de"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x541) 5.028547714s ago: executing program 4 (id=2774): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x6b2281, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x35) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000100)="0f3acc7994b9b8b5000f00d8f3a40f0199000066b95e02000066b80000000066ba000000000f30d8c5660f73d2000f01c436dbca363e260f212d", 0x3a}], 0x1, 0x1b, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text16={0x10, &(0x7f0000000300)="66b91a0b000066b89700000066ba000000000f30baf80c66b8a6bf958566efbafc0cb80030ef650f01d165dbc5ea04007f000fd98cd30066b9800000c00f326635004000000f30660ffd5b7766b8001000000f23c00f21f8663503000d000f23f866b80500000066b9000000000f01c1", 0x70}], 0x1, 0x88, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f0000000040)="baa000ed2e0f005e0026670f009d1859f52c0f0139f36ff30fc730360fe2af0200ba4300b8346aeff33e0f01dfc4c38dcf0ce0", 0x33}], 0x1, 0x7b, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000080)={r5, 0x81, 0x8000}, 0x8) syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0x1, @loopback, 0x229c}, 0x1c, &(0x7f0000000700)=[{&(0x7f0000000480)="1a0a52579d9005d45879ccb4566c341449f08f86c4bbe8c4eb3b0cff1dfaca6d473b3e3b35daed338f5725af7a06eb1b006002f19498108fa76f5f5ee3587da6d413a5a6e41495dfd9493b36a116aa0560f7f250a4511397d658fdf8bb", 0x5d}, {&(0x7f0000000500)="3a9494e3207a9d12f9002d74690927aff457741399c8f60f6d06f891a21e54ddb08a43816af0f6513093d8", 0x2b}, {&(0x7f0000000580)="df24a4ea6c1dd6f56b898acc443ab31e59cff5c7ddf5947f0dd86abc6b253fe43f2e6213480f0e696806199ded92ab33662f97871423ccd505955a06b9608387ef50ec8ee7cd710863de2bf8c661020a8ac0cec50db87a07eec136c7cfbcd18634097b34ead1a43c7aa58b5b6f48220ddd282de44d49b1f3769fc7ab9ef97bb615d5aa3528d04da501ff863819e2698d70f5ebac1be6516b44bbc5829408a65f6cf1d124e4bb866beeb34e7009aea108c83c67803517ada43a19f5599c5cf371eefe", 0xc2}, {&(0x7f0000000680)="be97123f8b7326626e88415530860e0e2b6191766fecb066760584fc65005513e3364b97acf4f1434b", 0x29}, {&(0x7f00000006c0)="21b8bbebd8b9db98e3614c27b89f3c8d9f7a36994970a4a375aa44845d858c32ee78e4dfae85a749", 0x28}], 0x5, &(0x7f0000000780)=[@hopopts_2292={{0x28, 0x29, 0x36, {0x84, 0x1, '\x00', [@enc_lim={0x4, 0x1, 0xc8}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @generic={0x3}]}}}, @dontfrag={{0x14}}, @dstopts={{0x20, 0x29, 0x37, {0x11, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x32}]}}}, @hopopts={{0x18, 0x29, 0x36, {0x2}}}, @dstopts={{0x58, 0x29, 0x37, {0x4, 0x7, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @calipso={0x7, 0x30, {0x2, 0xa, 0xd, 0x7, [0x2, 0x7ff, 0xac, 0x7fffffff, 0x3]}}, @ra={0x5, 0x2, 0x1}, @pad1]}}}, @dstopts_2292={{0xd8, 0x29, 0x4, {0x6, 0x17, '\x00', [@hao={0xc9, 0x10, @empty}, @generic={0x7f, 0xaa, "070051a209c35f3f321ca1fef44fd12854e25049c207fcc2d4393ab5cbd55d51625dee9f912d82fc6c59a514205e4a3ccb911b92a6f5f28760ff39f368ec49ad109ff18a082f127ba981684a3f42111459d9a3266783b4a7b28e32f2f8684e8c55962446372c001e1176c48dee8b685128c7348b3c3e0c5dce0e654d75c372a94e38744a25ae5be8250e5139715ec574b6bec137c5482ef79f1ddb9c9774a231cb05344057f976eea9f5"}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x8}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}], 0x1d8}}, {{&(0x7f0000000b40)={0xa, 0x4e22, 0x1, @loopback, 0x9}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000b80)="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", 0xfb}, {&(0x7f0000000c80)="6d85fefad3cae9a90c3ad99b33626b8e22ec3da77885fc6a8ae8cb94ca990eebb6113d5a5379e6a18ce8e558859499cc336fe9674fc4475689e3117eade503b55bc3227b7200b5bd2b1c05a7e689bdf225d609c5f1fcea491754056a4deec8d44222b58793bac6885d30f7feff149c4adb0c5b4a72e112665da37157851bb20ebc7cf99634be54394a076707bdfd97d36a406a80", 0x94}, {&(0x7f0000000d40)="e7671a0a1bcd549551004f1741e634d400fdfc10c6cebda0056f7ce1963c346395c1f9f0140aa1ec8056e4ae8493aa8442dc03a5cb3a6de9f8131802c4df5898afba110af5e4cb5efb9ab24f14c4c5173d178e768421180cd62c7b7fa46e69b48fd2b9d1ec39", 0x66}, {&(0x7f0000000dc0)='\x00'/13, 0xd}], 0x4}}], 0x2, 0xc484) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000980)="c0d4a172661a778b8c7266593e9509e5b6dcb7d16f4b8861e2dc9218a65396e2ce0b8bb4e88c1c5430eaec3cb7ffb6ed8b00c7e8d4e0702217fa", 0x3a}, {&(0x7f00000009c0)="02dacca23726902b4b94ce76416d4cbf5eb7c0abd45117c4c8297b0ee5b9d37ac4c5b291767ced1323f709641123b95537d85ef5926db777926b60ca1c550dd480c0bf6117cb1aff4c03ae0c14e848b2c170e0c3041b553762524e4f02f7e255b6a0cdbfe05696f0db4d1cd6a79a1a76650c70558709401f0a5cfbabb7fec5e15e5d6095b7ce363ee19ba8959572f6dab2e97be50345ea84f50097da3bb598c9fc0932", 0xa3}], 0x2, &(0x7f0000000ec0)=[{0xf8, 0x104, 0x10001, "28c4548ce54fd9f0f68fb3bca0c28f9cc3d9769d9b7c1dfad76caa2b87300695fcc5a99f353dff2962429eafc0adb77baa719fc10f5704e5559551c6f9686b9bec6bb21d0a61cd90d2aff30c68afb8b57319a7056fce5d9d6248ed0418629fec24e3f63c90de1914681198f6f5e07a25401ddbcb4f16d86473561b4004455cd62c0f34e7d4732fd506c6e00bbaed138b11a9fdf9757574293fca0b87d52583e7a7267c21e7e753e155ae5c2b292ee79670dec014e124f50358bdcce38e1f8919368eb8d06ba092c7ce72bb561fad20ea4e4c592dd57b8cf4550fc3bac2a53af70c1aa6c1c41b093f"}, {0x90, 0x118, 0x9c, "c90b9d02d7c355bb590633b09804f80f4808674d5bf38ae310551bb95d0dbff934aa37a598986186305e0804d3a55afb9ce50b698b74e0d0db8d6e00482511ca30113691d76bd54c8490a2622d5132c8fe6152862817498bf4977469d60dc9278721c4efbd9055e3d11bc984f03819f0c0fe17a75a5028a585b0"}], 0x188}, 0x810) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) r9 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000003c0)=0x91) ioctl$TIOCVHANGUP(r9, 0x5437, 0x2) syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) 4.528097991s ago: executing program 7 (id=2775): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_open_dev$tty1(0xc, 0x4, 0x1) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0xd3, 0x8000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000c400)="e47c6c216d8aa37d2b4b4937cfe03e2410439a321b06378d3ea501c17dc8b903b8248840d09c10c6c253f5b6e1e937e281668664f6d7604b7802a480c65efe232149b9a1b5685da4b06f7300fa4ba8bf52b83ca92b9340c552063c5c54313b425aa83b0bb70cc61edfcd875385d3b4cdcabf7e5d7b6afe878fe33d5a2f54b21f9a99f5384099ae155074bcadc16fa61bbc92c54fd1e4e903ddd075b54e0fd0038f016509f8c271f61d87c793e3e12f2c2cc904b4eb10b03c7407dd50b83dc3a18daee83065d39185121ba9c6bdec2158faade8e7d558b99fd60434b1fcd74eaa24d75d6a591fd08c1d3219cbd7c59cafbbde4b5d5f059a12e9377ca96953a8605fd6445f30ceae48093052474f4f9f14c7cb9b5a255268a462738e7fc45805aa57f6b892e690bfc3750b23b13c1b6b499b19b6865baf9a95ae98bce137aa98e5d2ec0daa6795c027113bece2e8a33f02dea2501cd7a60378d8503c02afa003819a2caa68203620eb1b8b532a515e9c5d331d1e9c92d6af26d17d1c1e26ba196df0902f6d0ae5c607b53c9ada09aa4a9a99da592b737fa8d1795bc4e61b5bb00c67f4a84e97e6b7126e0cbdaa651430125c57f9de224bb18a96d78253be5daa1c1bbe8491769d39c5db252ded1bbfc27194eff67ff94997a93095cf9405a7d016c2376b911c619c1f5dc45e6c8a4ce168ad766d8ff8f382b24176a3f50b6ec4e50b0b4b95c9e1f00b8ab6676d8ba438a21483ef9cf9aed2a05cdd2305bf665dffeadf554ec2c57a89d343b4f05cc2b904562ddc629e509b52d9fb7adc22bb5377953033615617c8a0d88f93ff4936c07df225448e52747d47b4a5c781e4b8c5237f4bc4bda77a242fc321880ce3eec414c5355fc66e57c35e901c4dd0f20a615482bb5eef38a29c7279c633fe075d9c9bd377f425446a303e0a59bc613907cd6be3537c0f94d1245940ed5bbf31c41a03c5a39dd4e1d8ab0a19ab6911dca0578abb9763b0eae86a91571d2b0726722b74db9a1bfffb7424c8a9197f5d41cedf5c0b89273718a85fe81ded439104acc28da887863c7606657af0d279ac7c5b50716a1380665169eaa039080987d63a9af0ae10c036a57a1d651267061faa4e46c650fcb4556f8a34e4bb06a4e1f2e0be58add2c62ba67c64508e08f5b1c7ab6ddedbb49736826fdcb985f2c651a2be6b0f55e18d9367f029b2d85438fd53f1961f533685745c01bd867707ec16d084cd8cef1ba5e9100f1f86a252a14c65e8991b0a7ec745572e1a396ab4ce89ec5e54fd6e3841b99ed2384b0a35a86ba8a0436e87e1215bbb0492427af73ba404790aab0e336f53b69749fca97def0b5f3445b42f700cbe0a01c3c6966cd5bb6f79fe8aa7d934f5869a0e3b0e743c52c140e01b050a0725e4c27cda0444f488078b68783765b59ab6c079d843e2d35eecb4b82a8251d61e232e19d386ad7ddec0ac6eacc863f1a2b103f48077bb5cc7e58157b5af32a137d4df40f98a405422df6dbfdab5477bae9e0633647a8b9baa88c3f681901864e38c439cc114ec7580fea9131b554843902904211e2f28e8d2c066a3761aa076577458fbb3683fc2c4a18b93aaa343d27e232fa11a649b0dab7c2e83b76c446968ae8a99f3ca5743fe0f1eecef48e7e06695f380f434e591f14540d5e92da29a97d0677311da9e34f1a1691d3593cc6f74d0394b46e74278205dca9c89f6d2f117cedbc70d1e3289d3fa23480be98e377b15ce6054e3e33dc8c5d1ce804606c86c98230d8702427243b05edbb392f9304b9015008733c0a52e8fd4f74ccbb374496cda1abac59fa1052306b77ecd2025b7f6ce38327ff0bf5a7f183729442c13dc8b1b944b9ea3c3833a11f5334fca329cabf8a7e9120a9d96f0bec9cb64dc7e9456fdee5151be1c9f574b509f081655dbe9f2bd8c948e98f1db4e1a7d2ed5af95fa13a55a2639b0bf0d5a575287dbd71cd192be0e1b6f5f6c12e751e4a65799420957145d20097cff8b3b86308a336f10e413db27fbbf080ba97dfdc8a3e01d63d672ac05e6fb3733afb14f2acbbb350188f9194c66139b87e23788716c1941cc768dc0c34dd35848a42a568ba49cbc0226ee61695fbf7feebb933f5389b1d38ea93008cb08b16d2a261ace3cb988bf673fd16e18bdaaad1be4f4cc6394b454ec5022577b7e6f65aaa7998005803b072be1b5d7c437b5aa003968bbe6eedade30b9b995ce9f54ab2fd37da2de0278219a779957a3c0daf684c31a2cfb3e57f0175e28d3ab2e0693a4225937013019773555cfd63234251c08531075d3f0de35780902c6443a126c599e49fbe3e020786099ee941c1683009540640f06852812abfb128b494e6f913edad2c1072b220537483dbc8fe8bbb405c282bc1649ee16fc5480d5ef13704006b4bc985211e7704668f790db2ecfcef79953276aca4112aa5984ad818b28d73c1376e12cb43e9765fb17a7255e5a7fd57628e2c3d00e046b8dc0e12cc0a3be8e0da882873a6a18698229243db199a3b26afc03fcdf532090ceb3e249b6f19b4e8402296030042924259b683ebdf68fc274432377d87252d506a8c2f5f6c088a4248274a5752655f3ff1a0d79b2dd1d7100a2fee9e4cbe5babe852159e6321ea6e29fcebff46ea2802c5faf066cd334237919a503b5a562e3106f899cd1d62a400f0b8e43f316962b4641344534fa6dec71d5723f0ff4fd037c2e3932c0d9063ba636975fd1b8c5bea4a2fb9d53eb0682fca49e26e4a9b65b35378e0e4d055b0b501322c52d9ec900ee120d697dac611b55ce3ac628c07d6a5a0d52b714df8edb51f1a6ae45a25ee43c1792c8f1ea95ea24655a88844e81a1bc0f75c82edb5a0b10fd586cf6401ee87e68e8dcecc9ae670c0a71266858ceeedc2e2f0b38e8cd5363b926cfb71455a88ae7ff485c52797e860d73967971d09fb2e65fb612163f34edcbcfc813957579c3681122b575af443763d6fd5748b5fe2407e6162b1f07448bcfdfb871a432248b2d9dde04944e029aaf026274495bf2a283db2d76d17ddcbdfa1f263ebcd04398e733c1517bd764a9caf27d1dd14750e5dc10d49adf29416a14b475b8308f749dd4d1f90cb65dc956d331d6b6c1cf24e6774e29a4e79028dc34a5ce3f5bde0b2b0c69c3336a0daf1bc6e612a46216d303b456487cea05006550b11be7a0211658ee2a683a1574ce4061f72cd7574d5af6c860e03882296fbde66c85aa8a85c9de799f5d83e2e01c8ecd13a15b0c3c72695358fb4d2ccf6224a45d820dd89e36e66d0a5eda07df66a68b24f111cabfaf2d37698b70348f8df4673a28d511d6cbb7590bbe1192ebb55ccf8e9fd618000239a594d2c57304bcedbaeb116870b23728494497afced271408ecbbe0c923400d86e7654d09fe2d204c41032669d6d818e0bc298240693f21fe171f7989191d7eb5bdd2981da20fbe61d7067a372c5476bf255c2b1b8502ae369fd99409deb4dfabe2eb82c2b5c4068249325455942fb84967dbafdd90a094182375a73a13eee7ab5a83b9a5eaa1cbaa90ad9293b8e5c1437fa8b42e9d777d5d790c00fe4a39d449220ea4140511b04d8c1c9e59c15f1fcf265b4cc3e0526135b0c512e61e6bb016d87ec62deee312fb093413f250d2b8476bdd5a8ae4725305f6b85428a42f84438241f3d68e231584d3a69946faefcc6bfff5a75051fb3f34ff0be7656b293db2c2139996b9dfcb3b53b84e0f5007e6a2181819c73db10c65ee05369365e8e6557547d807c21362b675d83d3613abee8d7b7d3a74a1e69e0785a8aa4373d1f67edc2d5af633a81bdefa9858c0d0a553ffd7e929f301e575fbc1ac7af5871ea4e510980e2b8fcdbf9c2216f3d73c2777a989d324c7a2df7f06b87076ea04be57f5fc4f48c7bb5c80360a8761743e5d7d6ae76f9b671c253e7ac2727ab718b7339250b946b6c2a418c894d48f19f594071168c2da09f0aa7ef35ae778ab4c1fc684b1c0a9b5c66e15ab92a4bac0d6d12c76b31bb56708d09f716c237a456f810e0dbbf3ac0aeafad75e27a522563a19be66ea05f35b23723934f7a12c1e1c9a5c427a037dd9f75dc9960d49b48fc20910c7a8aa51c79882bcac75797911d676ad2c31dcead6cd6ffb424e1ee2b076c45fb6fb62f845fe3c8c24f596f4d921168f65162280736d713d11aa02f9b7b02f47972abd3679b1897504b8f809d8d1044fad4d04406a3ed0c124bcd8337628f993393e9b94eb42a3d6ac5802e0172749ae6f1ec6dd22f4d32bc009deea5dc22daf041f8e8fa206dd5a975584107a81bd033b3d8f8d4d66da8705713ca9a71b8f7668ee7bd4cbc960eaa89228de6dcec53ff9fcfb858fddf73cc825bf3d0cdaf4592e60619e3a666a86391149dedeafce8c76fa6cb19008d48b301efec7232b20d48da6701239725848406a28a36c901e62d0759e2a086cd3bfb54185fafd6d2c6972adc6d76e2c58838a5b103fd2fb821fe9467ed840aabb8db5d0897bc9e48ece09098c57df591065e20a923796e00b17d208ff39867913b15fdb9eddefc8fd828f5abd82e26e9cb62c1d917864e0fde219bac453f0598cc4d8bcf6f759e0c7b667c556cb8e1b4b46af29e37b996f0f5f0871169366feb56a5c84854903c315c729dc494b8f0982eaa178a4225e3fc89c7b216a74b34a12bc452fbe54f11fe5aceb1467729f32ecd658b1fc3230c5b07496f0ec97549988fd0ccf95f01a95467eb9cd21b3386f5d0de538ac9941cb22fa457da9395996e6a090c072be1d2c2d2963e695d3cdb5375f5da299b5efea5ec32546fd36d4ed8b10dd14f94298f0973fcb935f981aa2ebc71aacca31470d33b12b43478caddc41f4262f05d106a417f8c304fbd5d1214a2ce9e95acedb4ae29c89fca58742ca207e9d972ce871a09e71f1e80c4a5cf8a248b900f7acfa8a253ffc82d8977a303822b365d2113a6e01c59ab41c9bfc7316393a423618cdc08de3e834b02d88ee169d84ce1ca3e26dbec65a7b796c91a37ada6ff3796e6a1a427add5c6ccca900369484b4626bd27d776fc73867e4264ccf17653d298725f56f92e9ef64c1b16ff4018330e5625b3a58e9b32285d7ea086035451fbfbd275443a59d80aa44a80b8b1d07c412fa6b6f6a3709c3fd4b3036e17e0624d0ed4fca3f5856e363e33a984c4cc08a5c40c16f50b7a1a11bc8f035d833b2f5f357116e20813cc718df7611efb3fcc9e9d71c3b5662118ce181e308528b156ffdd480d5208ef33fb68bdeb5ac7a4be8b08dea0c2f60430a1eef099b0270d8c63a997890136ef7800204b730b8679a4f0be51a16e3a7ddb36a36b3c2c3b28dc3a5a51ccc7dfb0c098c5d46a7f0cc19b3cdfffd5c9e96fd649c8f769954089816f5a393fd7590df49a4ffd5b554daa5fed16937679cc1c59adf4f2b35b652b2162cd75cc06f811a9b9c583db30197d46c347377edabc75840bae2ecfca6a33b76ac7ec16a89616ac9c5fcd69f62ccb9da58b3703d1b6d81e6cc294e2ae63c85bbe6612a240be5687448b09552e326adb479c20d25771a7cce65f316276ea4febccc8d0671d3f7b89e3860527932d50358f61dfc57ecea5e5e7a514ec31fc4fc99632b924f25abdfcab63b18d9b8f34b882e1b00adfe9465990374411604fa1ce59e906848cf44a73030f3dc84bbef85c208d39a1fcfeef247282cb7a307c314548042e24dd80eeb2530081305c6f9d18394ac4924b540f007df6d7e80c4eab56482a94aefe9288392fbdf599707e19fc50f7754226f6778eb9401f887fe1deb9d9bcbe35c979954ae22597f636869c8843767355e85fa45273788cb43ec3bea0a74f243f5d1840c087e43c0f39a2b61481a9edc8030e3dcd42657905179c2b03348c2cdc2a7f8b9eea3652984cf7ae0f827c8eea183c32dc0586efd646a4863d74bafc76cb86109d18027531a28f1e5d42f27c76f6b871a4e762268c2be77f4b3061d62300d7a6af893126cd9d027890f83ce8b0c763f7fcd15f661fa57bf182c756de530065577d97c4e1c9d52d5847926600fc90070e5c3092129a4c87ee589292a31caa10ca61b269e4e9756f49cfe2b9c8e48afe99bccb723007580dc69df68158169b3b880a683be132afb10d375e26ca56a503c22a281f57a6c07e0a7ca6e8817679166f78af04b42a0ef886ce782a5e2c6f4755cbee4e62c4315e62d6e294423b34991f3c1847e20cc1ff5ffb80a725ee28ccef8a897e4ed24fc224266fbae8c5211102d81d40c1cf53c2fb1919c802a6a947d83992ddeaadfd771811dcf74894e32ae6eba1896220f0c4eb4985ab38d633410a1c4c47d2409bd54689252f09250c0c650e03b4cc1db9f68525d66864a8d9d8f512711e14d530665e37f70bdf286f1dea3b88dbb494520f56381fe82935c5a8313edcc92658b32419251063ce1d3b0c91f2e235baa5c79cbc7db9715722ea4ff5b106c65615e6c439df019cddba3f48fb441f7dffcb968dc6487ea78c37ffe2941841ad4c4282517f662065ab574bf077c53965e8a364b9db2b0adf8a7e74693ae1fb7a7fe4a7403eced2a74f3bad5efaa9cc6f7ebe33cf779c21a6278e9043999d33f030ef5b6d55a72514552480b1061f487e18bf5069bf741ee4fd0fbb999fbc183cc840b0317cd5d5d8fecc1f3f91bb5f2ad320339aff5c884f4c31f4877d59642e3ea0e3af659299aaea96ef7302910089560be252eac73213f80d334adaa8747cb9e3b9e4fab9b203448e276576e049c3b661ccdf75e0b386f6f865a1faf0c277b1fb39d84dcaf31b5ff4bbd6454a4052fac9e7d1825c178cdac4d6adb0785409c2e58d47e7ecdf909457f990fe7fe32c93f3185f55321cea4da51e3645cca3869ca44787108e9e5cfa8d9d575f2cdd2376226fdb9812cd20623b5e594ca7584cff342a52126dbdadfc348e3fcbec4bdf64f454f00f21889a8bd93a461ac51bfc76d7ccf96c6e1e79bdc2ca184d01d81422dfa068a4b4cef06bfa2742db2e3f9f25d93d5be6655d9f5b77252b124ec1cd67d73936fff40033056d13740b7f09c2ef057f9670e1f0cb8b81ca13c495a1463bff9f42aae53abe981263defd8b104e5ba6cd077859821bd8191e3622f7e8354b0ca6b5fe1481b5aaeed5009f08bd3370b4d8e5f152d8fc1ad9224c8d9b7a2497a2bf2421d2762bf29236c6f292911392969f2d5aa78b20b2e6d03cbcb32c21267bdc136dbe5444386e2fefa3709ef801c45a77964d3dfb13bcc20971cda7581aefb49dc03076c892c035cf963cf5047b2a468900a9769b3e9e47ef4c2edd13f2c7d1e7d0ccdf15d0e68484f0d1b3a1f54bb98dcf11be6655ca21358b39421bc80d649242eb15aab0bda45f318faf2557a5311fcfc51a7947b6ea9e071593274389931887f045e71dd0e1600c0ec940b20e177805d29b4f6fb2cc0d1ed7ef888122d4f6329188185a1bc563b0f785d135966df5ead0fa8fe219c46afe450a290dac0f8d7b973e802b94b3bef23b34b076fc3e228ad3ec7f81c92d67bbff339154a44ed74179a1252d0f619fa6f1cab8c47b5125b6ba7c60c2e1063857f21be81e75e889f58dbb832ee530abe43030e605e060d7cd1fc299d25fd4a6cfec335559cea3cf574ad333f3795ebdfa3344595353c70168b34cd6bd4d967a1ad78ef0cd63fbc9e51835505f154cf867a1389ff9800eb9d3af5d746dc9778304d4fe46940eaa0fbfecfb0b0b740167012fc0dfc00f957520e14810374e15048b0eb32547c781ca329ce67db5a61037466061925c6edca686449e411bac0fac4c57ed2e3507ff26998d6d2729a9f9e6d339d3655f4d1c4065500a46da24331365890ca8b1d6fe11aab8c0668a095b9f983de52f024a08f5f2d93799f851bfc60db3089b88af333e178a07f1ed953e38e6c5c12296d33abfb932442ca6f7222535473805b864befc0bf079147326c003c46841778eec7c61e378a9949d4c1c53a2cd657cf3ab955eeb4ed46c88a85f73af8d20a40a31b394213046ee0d15c5eb587458dcfb1278e9d3dedf3e68f313880dabea21866d9156717039e737305108ac94c25f1ad5937b7728f495e29db91bf3a3cc000bef85415cfde70fc7ce7d7234a987dace74ad55a597a9dad06c1dab4081132f4f8e508173a838241cfc955c652373535a2e55ad73655a6e27a031007e00f8e37aee94ce3857f3c3f24bde842015559c73c3e05e2b7afabb037f8365a314ae634de2f6ced6c431071c75a863b52c6528b996638fe537c05569d9b1ccd5d7f4baa99f283810b2da77a4b9a35d0fd64d42456aca6c50424a9e486b5bd31dba186e9c2559a8cc06805b2d3790be49ce914f249e79f8f821f8d428510b0e8ed67edb7831cd2032d8ce5636b5101b72e21e74485909f50ec35574fd6eb56bdd232c1d584c382ea4503fa2206f2b6b7b289408966ff786e42cf467cd68db3639dc7bc73f7bad609b39c2c6f5b743890827f825ceafbfdd8c2f31da88258b77a67802da2e95751609f16d662766e73783cf71e1924b57359aa9f9983a68f4fdfe9ec26cd468e7295dd0d9c7389f2335d47c478df124fe54bb3462ff37f3b2e0b3e0f415ac0838013f748b320918830e73563af62acead286abc42e6ad2daceec316bfc297963de9d48378dc017985fe24c20629c1a8c6c1c67eda03209da07696e33bac9061ab2fbc5b8825c27b7ec05d2962c9449b3603608c6c0b6589d729fc2ffe94992c936cd130baf125e81818c29672068bac6fe4aa39c9bcec75eef7e03405b5488318c32753f0fb6c2094eab21529e4811649431f1d65b2c8e173efd3bda023f513d1daff8dc092b4e9bb7e039e586e73d4d998af6fa54a6f552bf21628cb02578243e10dd31d3ef04e11e4ebfe55fdeda67e49f4e930d6593beff4e36df0f84e24a2c8a6d39130c88b71a092c0fddd4267e45e515166bc65f1ba16d8a07d527c76665a52a2432acdb466e6893bbbc3895a5ede98e84e5b9f27c4c49087858a847a5021d1a3e15ee3438a1211376a19f0ec43b04e2ff1a07c327903fe1ca680185677ff19ba41cd4eff21c08cec80af7070c0d6aab7168ba546e021d50b8db0ac3a690dc8929489810eed8c566158b72afdbc78a3918524cad7b5edf0b6511ca6b4e5809785b06d768fd2fdcd2e764a1f12f0690572f13867c8f4b1a5cb83c509dabf1549a07993ea58a0bdbe640cc4c16e0bc9fbf861e9e3bff84955817ad19f40f40b707ec6dcff80709ed5359c145c607751a462471bada6b9ee07181bad4a25d5229a348c504585a66a1d7876876745ab86f59b3a5e98a4c2aa7d0d883c58efc77f9814185b73a87bc23dd1c64b013b53f28a837dcc50582c0d5f8b15e958ff7068cf064e75c1865f4893026818d6dcb0eacaca3b1bc7d84188b1d4a33e82d715a18028f7293fa0684e8045aa97a416ab32337cb978c100dfd5a181012cb7a971004b35ea20a4285454781001b77f5963d4c90a7842b62dfcb1a31523ef4e67e690fc1c6e869e4fd5d9b0f6e013c56c76abfe7288d10a170669e108da06acca41adc48d98b4b4e58851db0894c8603fde20a2b5abdf1cc2829cecbcf9a6f054daddf9b5e987d2fcd8bbe0c788067d0f259f453a3ab251ed7751d2daeae49874239fa5955eb43b41916c0430fc9dc49369f540ffe65432b9757a28bd9b6c9b3820aa14b62def485322c549d67bfb11318877ef3e5e88b09e9b92eb09d31dce451c61c6a8c16d1a623d180cb4890390d7496551ffdca8b1b17b42b684fab73d79a557be5cfa04a73879d349aeb2e5a6663667f2e6e45c1bfab740eefd97270e0b70fdd577a7862d28e769105c448a8715870ae89990894869ece5dcfe9a8632d07b3577ab685c8541400ee80e2f14db921835c0eebceab91752d4f65676f86a3c6b8f66403fd6d02cd7925561b84a776da1eb64db193dfa95075e5d68b94103c94da6b2373f2ced0a4fd8fe447424a3accd7e6e7fdab35f87e9c87232e32eba6290bd24f6a7b14223eb447f49250af788dd291296cec57c30f3363787f5067784a9b395b992d1add27633df34825cdaa7021ba276a011ae419d7847c4a71b3c063df8f5b61a5e08213c71c7881e307e4597c1c30dc36e14d45144302862d32966fae399dd50222d581c99ba2c0b62fde8ff9af3f9bb93a869e3f6e0d1eb0ad56ee6cf7b0a42580596bdf411b449996361fefa805243f8df5a3546f426469d8af77e5610370f5210a7b280e744167162e3bb45ffb2c62f34c6c9f1e38b4cb2ebf133985db718fc8b2165d219a0ed1b0e166f9f0c1fb901d7af027813568e6ff4e96dec214efcbe664fea7f6e5f20389a669d17b02b79f55aeabbf2ee2133c28b8a3dc99add057802346099bf5246a89a310e8f2fadc7b2c8488dcc4d594fd2d43835a2b6aa4b83ab0581ce3ecc4f564556a54b694198af932f6e62f0d8da72b0b584fcd18bfd720d87fc7d3fcfcb242b61a5823230686b4c7f720f4cb26cb6a4a1e43c5722c2ffb0a54155752dc52767925b3ae2803282dca2d244575699a79b1d92145120e803e7cb2f2dcc5ccdfd3c5de5d50dd992f3f7a028a8fee5d217de80c3c4a242c05e5a1c7241fb7e2ad674d35dd056eddfc0038bea6804e1fb53ea073a79a2fab66e68ad9a13a09571f3192258257f421333f7426254d0b1c7fb267e134516b3a6e629be1813d458e115857bf35585b2d844285334c67d09e55209159b14c21987ff379bf9a3001e360f54a4bffdb757c8bf90550956f0354ab1e506c074cf6f8498dfa0dae22e05a4c73f7624997dd0e74618b363de37f70d531f93fc5882a86e86b9e3086da764fc7e1f7e34f37bac3f5df9f7506eb022fd8687bb1fca79dae1ab8f37c3f15871bc643e82cbf7d325e73e2fa3dc79dd6b333dac1045f1f47552e05452d6b178d9b2734e9e39358af1329744844376f1737709037956da8b27389b143312f0301c15505c754287d266b1d433ab61a3695d52533c6fb6f6aea6100d182025a5951044f93ceaa12e735d8d5fd74ca37be58ca04661fff1d330c29a18cab4377409194a2b5d257994975aab86415e050d3a1bf56b0d03d1048d9504e8ecdad31b0a947a4736c45b9bc78949bcc5008cdc2f4dd02200873d1db4cf5453e0f62823f7dd5058c755a6cd9488705b47e118ee39bd7498b0ac6346e8798f4e960232d23d5730a8b9bdaaad83fc9ec97174d5f68fda2788085d47ced0812441925a900fc1f6ca98b7954a4e77408daaf31c04104ba743919d732482a11fa89244b0721a462dc17993515cae328d24e610c3b4c68a534c6329d29b0ac08863401e41018345bd98a26ba9fc890bf493841a86425ea39dd2baf241b199a99465617a7500d7d02f85b9e598a99977e028ecb0eb647cfb2eb7df16cefef34f5b61742b067970d7b289dca446d5ffadc2b591b9f35c3559db3029ab20e91cd658b806a3b3a0008c64f16a3f6bd328f26d550874d642d7fd06e8644e713efe957ef7b26960142d72a140e94458adbc5fc8034b95424af8d4bed977d7da9abc813b6f991a60f5ed461bd3fa13a402e9f8c1bdb7a1cbc9b0db23aa3abe55d26cc60bfbd5", 0x2000, &(0x7f0000002bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)={0x20, 0x0, 0x9, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) r2 = syz_io_uring_setup(0x230, &(0x7f0000000080)={0x0, 0x20, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffff86}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) 4.177707801s ago: executing program 6 (id=2777): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r3, 0x89f9, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000000)={@remote, @rand_addr=0x64010102, 0x18, 0x19}}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r7, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {0x8, 0xfff1}, {0x1}}}, 0x24}}, 0x20004804) 3.979988924s ago: executing program 4 (id=2778): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$pagemap(r0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, 0x0) chdir(&(0x7f0000000480)='./cgroup\x00') sched_setparam(0x0, &(0x7f00000003c0)=0x80000001) mkdir(&(0x7f0000000000)='./control\x00', 0x0) r2 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000100)='./control\x00', 0x0) unlinkat(r2, &(0x7f0000000140)='./control\x00', 0x200) rmdir(&(0x7f0000000040)='./control\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0xa0}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0xfeffff, 0x113, 0x0, &(0x7f0000000700)="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"/275, 0x0, 0xf0}, 0x50) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000180)={0x900, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2e0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x4001, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.474330398s ago: executing program 4 (id=2779): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4c}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10}, [@ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0xc200}], {0x95, 0x0, 0x5}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x18, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x44) 3.45011171s ago: executing program 0 (id=2780): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f8, 0x210, 0x940c, 0x3002, 0x0, 0x2c0, 0x328, 0x3d8, 0x3d8, 0x328, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [0xffffff00, 0xffffffff, 0x0, 0xff], [0xffffff00, 0xff000000], 'erspan0\x00', 'wlan0\x00', {}, {0xff}, 0x2b, 0x3, 0x3}, 0x0, 0x1c8, 0x210, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @inet=@rpfilter={{0x28}, {0x83896cc1ba948161}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3, {0x21}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xfffffffffffffce0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, &(0x7f0000000000)=0xffb, 0x0, 0x4) unshare(0x480) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYRES16=r1, @ANYBLOB="010800000000000000000c00000008000300", @ANYRES32=r3, @ANYBLOB="0a00070008021100080100003000508011000a004abee339084eeef16f162471f40000000800070000000000050002"], 0x58}, 0x1, 0x0, 0x0, 0x4000081}, 0x800) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) capset(&(0x7f0000000080)={0x20071026}, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r6, 0x7}}, 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x9, @empty, 0x5}, r6}}, 0x0) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)=ANY=[], 0x48) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r10, &(0x7f0000000680)={0x14, 0x88, 0xfa00, {r11, 0x1c, 0x0, @in6={0xa, 0x4e23, 0x0, @empty, 0x4194}}}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYRES16=r9, @ANYBLOB="f0952001f46c773a85c5a45c70f8940939649830b943bc33b7119d4600b403891a63ad716d55e00968f75e47c05a8aca4be81a621110c2d72dfcc7900df7bfa91af2310c174878c3b0ff6defd9c32c121c4054bd208a29fee91faf018e7c0870899545da9f85a3044907aa09a8d793", @ANYRES16=r9, @ANYRES8, @ANYRESOCT=r10], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x9, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', r12, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.298599839s ago: executing program 4 (id=2781): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x50000, 0x0) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000001a40)={0xb49, 0x5, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) syz_usb_connect(0x0, 0x34, &(0x7f0000001a00)={{0x12, 0x1, 0x110, 0x2b, 0x65, 0x1c, 0x40, 0x5ac, 0x8514, 0xd8dd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x2, 0x2, 0x0, 0x5, [{{0x9, 0x4, 0xa3, 0x2, 0x0, 0xe, 0x1, 0x0, 0x2, [@uac_as={[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x3, 0x3, 0x8, 0xf}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x45, 0x2, 0x6, 0x5}]}]}}]}}]}}, 0x0) 3.02365809s ago: executing program 6 (id=2782): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) creat(&(0x7f0000000040)='./file0\x00', 0x8) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000140)={0x110000010}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="500000001000030029bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="5cd2040000000000140003006e657464657673696d3000000000000014001680100001800c00030000000100ff0700000500110009000000"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x40) 2.789078812s ago: executing program 0 (id=2783): socket$netlink(0x10, 0x3, 0x0) r0 = syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x100) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x80000) read$alg(r3, &(0x7f0000000080)=""/74, 0x4a) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r5}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) sendmsg$nl_generic(r4, 0x0, 0x40080c0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001f", 0x0, 0x100, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r6, 0x7a6, &(0x7f0000000040)={0x4, 0x1}) 2.430646784s ago: executing program 6 (id=2784): mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000200)={0x1, 0x0, 0xfffffffffffffff9}) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000000)=0x5, 0x6, 0x2) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000040), 0x1000, 0x5) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) 2.064031265s ago: executing program 0 (id=2785): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) (async) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x9048}}) (async) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async) recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)}, 0x0) (async) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000080)) (async) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0x110, @tick=0x1, 0x78, {0x4, 0x1}, 0x3a, 0x0, 0x1d}) (async) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) ioperm(0x4, 0x7, 0x400) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x8000001) 2.036288899s ago: executing program 6 (id=2786): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100), &(0x7f00000001c0)={'U+', 0x8}, 0x16, 0x1) rename(0x0, &(0x7f0000000f00)='./file0\x00') 1.919888395s ago: executing program 6 (id=2787): r0 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6) fallocate(r0, 0x0, 0x9, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf25020100800c00020006000000000000001400010001007d48f225caf14f09b3000000000000000000000000000150bb2d6f67d29d6fabadb107d0def40588ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d962fbc08c029d1608a487f26fbe816b89f7cb81060000000000000056555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a"], 0x114}], 0x1}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(&(0x7f0000000040), 0x80) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0) dup(0xffffffffffffffff) dup(0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000004050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000c08000240000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 924.01943ms ago: executing program 4 (id=2788): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) listen(r3, 0x7) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000080), 0x9, 0x0, 0x0, 0x0, 0xfffffffe) futex(&(0x7f000000cffc), 0x5, 0x4, 0x0, &(0x7f0000000000), 0x4000000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x11}, 0x0, 0x0, 0x1}, [@tmpl={0x144, 0x5, [{{@in=@loopback, 0x0, 0x3c}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {{@in6=@private0, 0x0, 0x33}, 0x0, @in=@local}, {{@in=@remote, 0x0, 0x3c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xcd}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @empty}}, {{@in=@dev, 0x1, 0x33}, 0xa, @in6=@private1, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x9}]}]}, 0x1fc}}, 0x0) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000000ac0)=""/4096, 0x1000}], 0x1, 0x117295c8, 0x9, 0x12) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000400)={0x64, 0x2, 0x7, 0x607, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2559}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x240008d0}, 0x200008c8) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') read$midi(r6, &(0x7f0000000a40)=""/97, 0x61) sendto$inet6(r5, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x7, 0x30}, 0xc) sendto$inet6(r5, &(0x7f0000000480)="aa", 0x1, 0x20000000, 0x0, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 923.703185ms ago: executing program 0 (id=2789): r0 = syz_open_dev$sndpcmc(&(0x7f00000003c0), 0x0, 0x0) mmap(&(0x7f0000001000/0xe000)=nil, 0xe000, 0x0, 0x12, r0, 0x0) mmap$snddsp_control(&(0x7f0000ffa000/0x4000)=nil, 0x1000, 0x2000003, 0x50, r0, 0x83000000) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$PIO_SCRNMAP(r1, 0x4b52, &(0x7f0000002080)) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRESOCT=r1], 0x0) 892.518104ms ago: executing program 7 (id=2790): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) (async) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x9, "0400"}]}}, 0x0}, 0x0) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 686.338656ms ago: executing program 6 (id=2791): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0xabab9a6ce87c2a5b, 0x0, 0x4f23}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x2}, 0x94) r6 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r6, 0xc02c564a, &(0x7f0000000040)={0x6, 0x34324258, 0x3, @discrete={0x3b79f0fc, 0xffffffff}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) sched_getattr(r2, &(0x7f0000000340)={0x38}, 0x38, 0x0) fanotify_init(0x0, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x0, &(0x7f0000000140)}) timerfd_gettime(0xffffffffffffffff, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0x3) openat$mice(0xffffffffffffff9c, 0x0, 0x800000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3400000010005fba006000"/20, @ANYRES32=0x0, @ANYBLOB="000000980a80000008001b00000000000a000200aaaaaaaaaaaa0000"], 0x34}}, 0x0) 0s ago: executing program 4 (id=2792): semget$private(0x0, 0x4000000009, 0x222) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xc) semctl$IPC_INFO(0x0, 0x2, 0x3, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r4, 0xfffffffffffffffc, {0x1, 0xff, 0x4}, 0x1}, 0x18) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000580)={'\x00', 0x9, 0x4, 0x9, 0x2, 0xfffffffffffff7ab}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="81b641f1", 0x4}], 0x1}, 0x48005) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r5, 0x641f) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r6}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4f, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): [ 611.092290][ T8628] usb 7-1: device descriptor read/8, error -71 [ 611.227445][ T8628] usb usb7-port1: unable to enumerate USB device [ 611.390927][T14232] netlink: 'syz.6.1972': attribute type 6 has an invalid length. [ 611.404412][T14232] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1972'. [ 611.992163][T14248] netlink: 'syz.4.1979': attribute type 41 has an invalid length. [ 612.305604][ T5970] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 612.365633][ T8628] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 612.415495][ T5898] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 612.470316][ T5970] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 612.479555][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.487873][ T5970] usb 3-1: Product: syz [ 612.492092][ T5970] usb 3-1: Manufacturer: syz [ 612.496982][ T5970] usb 3-1: SerialNumber: syz [ 612.505263][ T5970] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 612.515552][ T8628] usb 7-1: Using ep0 maxpacket: 8 [ 612.523452][ T8628] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 612.535630][ T8628] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 612.544595][ T8628] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 612.549637][ T9] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 612.556737][ T8628] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 612.576162][ T8628] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 612.587040][ T8628] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.598041][ T5898] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 612.600967][ T8628] hub 7-1:1.0: bad descriptor, ignoring hub [ 612.610902][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 612.612647][ T8628] hub 7-1:1.0: probe with driver hub failed with error -5 [ 612.624483][ T5898] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 612.639661][ T5898] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 612.647896][ T5898] usb 5-1: Manufacturer: syz [ 612.653125][ T8628] cdc_wdm 7-1:1.0: skipping garbage [ 612.656376][ T5898] usb 5-1: config 0 descriptor?? [ 612.659743][ T8628] cdc_wdm 7-1:1.0: skipping garbage [ 612.677391][ T8628] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 612.684138][ T8628] cdc_wdm 7-1:1.0: Unknown control protocol [ 612.735571][ T5898] rc_core: IR keymap rc-hauppauge not found [ 612.741531][ T5898] Registered IR keymap rc-empty [ 612.750467][ T5898] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 612.763234][ T5898] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input31 [ 612.817479][T14257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.826612][T14257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.876769][T14255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.885918][T14255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.895610][T14255] netlink: 'syz.4.1982': attribute type 10 has an invalid length. [ 612.920519][ C0] igorplugusb 5-1:0.0: Error: urb status = -32 [ 612.938954][ T8628] usb 5-1: USB disconnect, device number 82 [ 612.983000][T14250] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1980'. [ 612.993932][T14250] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1980'. [ 613.210056][ T8628] usb 3-1: USB disconnect, device number 62 [ 613.816316][ T9] usb 3-1: Service connection timeout for: 256 [ 613.834078][ T9] ath9k_htc 3-1:1.0: ath9k_htc: Unable to initialize HTC services [ 613.867381][ T9] ath9k_htc: Failed to initialize the device [ 613.884943][ T8628] usb 3-1: ath9k_htc: USB layer deinitialized [ 615.143347][ T5970] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 615.365411][ T5970] usb 5-1: Using ep0 maxpacket: 16 [ 615.432267][ T5970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.475116][ T5970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.518139][ T5970] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 615.560522][ T5970] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 615.594473][ T5970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.607055][ T9] usb 7-1: USB disconnect, device number 31 [ 615.664773][ T5970] usb 5-1: config 0 descriptor?? [ 615.984126][T14318] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1997'. [ 616.689423][T14319] random: crng reseeded on system resumption [ 616.793501][T14324] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2000'. [ 616.865025][T14324] batadv1: entered promiscuous mode [ 616.892729][T14324] batadv1: entered allmulticast mode [ 617.001513][T14332] program syz.6.2003 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 617.489488][T14341] tipc: Enabling of bearer rejected, already enabled [ 617.925997][ T5970] usbhid 5-1:0.0: can't add hid device: -71 [ 617.971805][ T5970] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 618.062547][ T5970] usb 5-1: USB disconnect, device number 83 [ 620.534987][T14374] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2012'. [ 621.070820][T14374] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.170172][T14374] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.248337][T14374] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.349854][T14374] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.499528][T14374] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.519029][T14374] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.536990][T14374] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.551993][T14374] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.335171][T14409] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2025'. [ 622.367268][T14408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2025'. [ 622.888633][T14428] binder: 14425:14428 ioctl c0306201 0 returned -14 [ 623.711208][T14442] netlink: 'syz.2.2034': attribute type 10 has an invalid length. [ 623.892880][T14442] team0: Port device dummy0 added [ 623.942952][T14436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2034'. [ 624.234613][T14436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2034'. [ 625.290079][T14465] sctp: [Deprecated]: syz.4.2040 (pid 14465) Use of struct sctp_assoc_value in delayed_ack socket option. [ 625.290079][T14465] Use struct sctp_sack_info instead [ 627.001378][T14509] can0: slcan on ttyS3. [ 627.303324][T14514] x_tables: duplicate entry at hook 3 [ 627.312098][T14514] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2056'. [ 627.365253][T14514] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2056'. [ 627.479554][T14506] can0 (unregistered): slcan off ttyS3. [ 627.664768][T14513] tls_set_device_offload_rx: netdev not found [ 627.694425][T14513] netlink: 'syz.6.2055': attribute type 4 has an invalid length. [ 628.406590][T14542] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2066'. [ 628.988982][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 628.995534][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 629.014145][T14542] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.072377][T14542] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.094320][T14545] FAULT_INJECTION: forcing a failure. [ 629.094320][T14545] name failslab, interval 1, probability 0, space 0, times 0 [ 629.108297][T14545] CPU: 1 UID: 0 PID: 14545 Comm: syz.6.2068 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 629.108321][T14545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 629.108333][T14545] Call Trace: [ 629.108340][T14545] [ 629.108348][T14545] dump_stack_lvl+0x189/0x250 [ 629.108378][T14545] ? __pfx____ratelimit+0x10/0x10 [ 629.108401][T14545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 629.108422][T14545] ? __pfx__printk+0x10/0x10 [ 629.108453][T14545] ? __pfx___might_resched+0x10/0x10 [ 629.108474][T14545] ? fs_reclaim_acquire+0x7d/0x100 [ 629.108503][T14545] should_fail_ex+0x414/0x560 [ 629.108529][T14545] should_failslab+0xa8/0x100 [ 629.108553][T14545] __kmalloc_noprof+0xcb/0x4f0 [ 629.108569][T14545] ? kfree+0x4d/0x440 [ 629.108593][T14545] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 629.108622][T14545] tomoyo_realpath_from_path+0xe3/0x5d0 [ 629.108646][T14545] ? tomoyo_domain+0xda/0x130 [ 629.108673][T14545] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 629.108691][T14545] tomoyo_path_number_perm+0x1e8/0x5a0 [ 629.108712][T14545] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 629.108747][T14545] ? __lock_acquire+0xab9/0xd20 [ 629.108785][T14545] ? __fget_files+0x2a/0x420 [ 629.108809][T14545] ? __fget_files+0x2a/0x420 [ 629.108827][T14545] ? __fget_files+0x3a0/0x420 [ 629.108845][T14545] ? __fget_files+0x2a/0x420 [ 629.108868][T14545] security_file_ioctl+0xcb/0x2d0 [ 629.108893][T14545] __se_sys_ioctl+0x47/0x170 [ 629.108922][T14545] do_syscall_64+0xfa/0x3b0 [ 629.108942][T14545] ? lockdep_hardirqs_on+0x9c/0x150 [ 629.108963][T14545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.108980][T14545] ? clear_bhb_loop+0x60/0xb0 [ 629.109011][T14545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.109029][T14545] RIP: 0033:0x7f984678ebe9 [ 629.109045][T14545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 629.109061][T14545] RSP: 002b:00007f984768a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 629.109080][T14545] RAX: ffffffffffffffda RBX: 00007f98469b5fa0 RCX: 00007f984678ebe9 [ 629.109094][T14545] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 629.109104][T14545] RBP: 00007f984768a090 R08: 0000000000000000 R09: 0000000000000000 [ 629.109115][T14545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.109125][T14545] R13: 00007f98469b6038 R14: 00007f98469b5fa0 R15: 00007ffe5d2434f8 [ 629.109164][T14545] [ 629.109687][T14545] ERROR: Out of memory at tomoyo_realpath_from_path. [ 629.392027][T14542] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.446905][T14542] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.546891][T14542] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.566875][T14542] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.588044][T14542] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.607962][T14542] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.384316][T14575] kvm: pic: non byte write [ 631.120114][ T8615] IPVS: starting estimator thread 0... [ 631.226809][T14588] IPVS: using max 33 ests per chain, 79200 per kthread [ 632.056343][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 632.064529][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 632.144223][T14601] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 632.523347][T14608] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2090'. [ 632.795569][ T5970] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 632.996024][ T5970] usb 3-1: unable to get BOS descriptor or descriptor too short [ 633.072407][ T5970] usb 3-1: not running at top speed; connect to a high speed hub [ 633.095705][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 633.102874][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 633.176256][ T5970] usb 3-1: config 129 has an invalid interface number: 28 but max is 0 [ 633.276458][ T5970] usb 3-1: config 129 has no interface number 0 [ 633.338381][ T5970] usb 3-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 633.443890][ T5970] usb 3-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64 [ 633.604852][ T5970] usb 3-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 633.780805][ T5970] usb 3-1: config 129 interface 28 has no altsetting 0 [ 633.845620][ T5970] usb 3-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 633.858973][T14623] tipc: Can't bind to reserved service type 0 [ 633.883406][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.919409][ T5970] usb 3-1: Product: syz [ 633.923755][ T5970] usb 3-1: Manufacturer: syz [ 633.936074][ T5970] usb 3-1: SerialNumber: syz [ 633.944705][T14609] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 634.135770][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 634.142995][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 634.397296][T14629] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2097'. [ 634.471209][T14630] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2096'. [ 634.511284][T14609] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2088'. [ 634.851733][ T5898] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 634.940572][ T5970] etas_es58x 3-1:129.28: Starting syz syz (Serial Number syz) [ 635.106352][ T5970] etas_es58x 3-1:129.28: could not retrieve the product info string [ 635.175681][T14647] lo speed is unknown, defaulting to 1000 [ 635.182553][T14647] lo speed is unknown, defaulting to 1000 [ 635.185656][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 635.190347][T14647] lo speed is unknown, defaulting to 1000 [ 635.195491][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 635.207770][T14647] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 635.321042][T14647] infiniband s: RDMA CMA: cma_listen_on_dev, error -98 [ 635.737187][ T5898] usb 7-1: Using ep0 maxpacket: 16 [ 635.762334][ T5898] usb 7-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 635.786824][T14647] lo speed is unknown, defaulting to 1000 [ 635.794058][T14647] lo speed is unknown, defaulting to 1000 [ 635.801428][T14647] lo speed is unknown, defaulting to 1000 [ 635.808347][T14647] lo speed is unknown, defaulting to 1000 [ 635.815060][T14647] lo speed is unknown, defaulting to 1000 [ 635.910175][ T5970] usb 3-1: USB disconnect, device number 63 [ 635.916663][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.939869][ T5970] etas_es58x 3-1:129.28: Disconnecting syz syz [ 635.965687][ T5898] usb 7-1: Product: syz [ 635.969920][ T5898] usb 7-1: Manufacturer: syz [ 635.974590][ T5898] usb 7-1: SerialNumber: syz [ 636.000885][ T5898] usb 7-1: config 0 descriptor?? [ 636.132285][T14662] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2102'. [ 636.215542][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 636.222752][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 636.441787][T14625] netlink: 'syz.6.2093': attribute type 6 has an invalid length. [ 636.478615][ T5898] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 636.489902][ T5898] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 636.500691][ T5898] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 636.518287][ T5898] usb 7-1: media controller created [ 636.550159][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 636.606007][T14675] Invalid ELF header len 8 [ 637.122242][T14653] delete_channel: no stack [ 637.255556][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 637.262751][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 637.599873][ T5898] zl10353_read_register: readreg error (reg=127, ret==0) [ 637.607187][T14625] dtv5100: wlen = 0, aborting. [ 637.622631][ T5898] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 637.645763][ T5898] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 637.659507][ T5898] usb 7-1: USB disconnect, device number 32 [ 637.690540][ T5898] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 637.765654][ T8628] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 637.971033][ T8628] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 637.997505][ T8628] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 638.027199][ T8628] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 638.040010][ T8628] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 638.059688][ T8628] usb 3-1: SerialNumber: syz [ 638.295547][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 638.302807][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 638.370787][ T8628] usb 3-1: 0:2 : does not exist [ 638.565488][T14693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2110'. [ 638.758600][T14695] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2111'. [ 639.041177][ T8628] usb 3-1: USB disconnect, device number 64 [ 639.110910][T14695] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.208225][T14695] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.298196][T14695] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.335789][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 639.342935][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 639.402703][T14695] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.531120][T14695] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.550269][T14695] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.571068][T14695] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.592759][T14695] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.375704][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 640.382713][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 641.282146][T14734] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 641.415756][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 641.423425][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 641.759975][T14740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2124'. [ 642.455594][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 642.462732][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 643.495539][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 643.496618][ T8629] Process accounting resumed [ 643.502664][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 643.726737][T14774] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2133'. [ 644.088740][T14751] Process accounting resumed [ 644.157884][T14786] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2136'. [ 644.535635][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 644.542663][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 644.698663][T14786] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.793498][T14786] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.141407][T14800] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2138'. [ 645.471454][T14802] vlan1: entered promiscuous mode [ 645.575764][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 645.582885][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 646.060067][T14786] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.278079][T14786] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 646.430600][T14786] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.453291][T14786] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.473971][T14786] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.495181][T14786] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.625660][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 646.632817][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 647.655544][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 647.663388][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 647.789731][T14844] lo speed is unknown, defaulting to 1000 [ 648.639950][T14860] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2152'. [ 648.695544][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 648.702683][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 649.735539][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 649.742669][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 650.775555][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 650.782694][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 651.815582][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 651.822745][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 652.175621][T14901] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.307104][T14901] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.491793][T14901] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.612852][T14903] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2166'. [ 652.855630][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 652.856094][T14906] input: syz1 as /devices/virtual/input/input32 [ 652.862703][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 652.994399][T14901] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.090588][T14904] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 653.289382][T14901] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.305221][T14901] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.322207][T14901] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.338555][T14901] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.895629][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 653.902764][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 653.904167][T14931] rdma_op ffff8880782ec1f0 conn xmit_rdma 0000000000000000 [ 653.924490][T14931] rdma_op ffff8880782ea1f0 conn xmit_rdma 0000000000000000 [ 653.934710][T14931] rdma_op ffff8880244ab1f0 conn xmit_rdma 0000000000000000 [ 653.961793][T14931] rdma_op ffff8880294b71f0 conn xmit_rdma 0000000000000000 [ 653.977800][T14931] rdma_op ffff8880294b69f0 conn xmit_rdma 0000000000000000 [ 653.989567][T14931] rdma_op ffff8880299111f0 conn xmit_rdma 0000000000000000 [ 653.998309][T14931] rdma_op ffff8880299159f0 conn xmit_rdma 0000000000000000 [ 654.014393][T14931] rdma_op ffff888048f4c1f0 conn xmit_rdma 0000000000000000 [ 654.022610][T14931] rdma_op ffff888048f4d1f0 conn xmit_rdma 0000000000000000 [ 654.030431][T14931] rdma_op ffff888048f4c9f0 conn xmit_rdma 0000000000000000 [ 654.040378][ T5970] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 654.196107][ T5970] usb 5-1: Using ep0 maxpacket: 16 [ 654.209859][ T5970] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 654.233562][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.255470][ T5970] usb 5-1: Product: syz [ 654.266891][ T5970] usb 5-1: Manufacturer: syz [ 654.284292][ T5970] usb 5-1: SerialNumber: syz [ 654.302146][ T5970] r8152-cfgselector 5-1: Unknown version 0x0000 [ 654.309034][ T5970] r8152-cfgselector 5-1: config 0 descriptor?? [ 654.935564][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 654.942673][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 655.376609][T14953] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2173'. [ 655.603601][T14974] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 655.975560][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 655.982728][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 657.015712][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 657.023205][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 657.407964][ T5970] r8152-cfgselector 5-1: USB disconnect, device number 84 [ 658.055565][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 658.062582][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 658.319277][T15006] dummy0: entered promiscuous mode [ 658.434308][T15006] dummy0: left promiscuous mode [ 658.812396][T15029] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2201'. [ 658.824726][T15029] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 659.095558][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 659.102718][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 660.135588][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 660.142797][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 660.586430][T15043] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 660.892722][T15061] pimreg: entered allmulticast mode [ 661.172575][T15073] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2218'. [ 661.181844][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 661.182065][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 661.196894][T15073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2218'. [ 661.205905][T15073] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2218'. [ 661.397189][T15077] xt_l2tp: wrong L2TP version: 0 [ 661.737089][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 662.215579][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 662.702262][ T5846] Bluetooth: hci1: Malformed HCI Event [ 662.796969][T15095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2224'. [ 663.255514][ C0] net_ratelimit: 1 callbacks suppressed [ 663.255548][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 663.268149][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 663.633602][T15101] vlan2: entered promiscuous mode [ 663.683325][T15101] vlan2: entered allmulticast mode [ 663.690322][T15101] hsr_slave_1: entered allmulticast mode [ 663.731265][T15101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2226'. [ 664.223151][T15125] xt_l2tp: v2 sid > 0xffff: 262144 [ 664.295633][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 664.302824][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 664.465638][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 664.935490][ T30] audit: type=1804 audit(1755953306.919:279): pid=15133 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.2235" name="/newroot/151/file0" dev="tmpfs" ino=810 res=1 errno=0 [ 665.052735][T15133] tipc: Enabling of bearer rejected, failed to enable media [ 665.345544][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 665.352701][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 665.462254][T15138] syz_tun: entered allmulticast mode [ 665.463394][T15141] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2238'. [ 665.484712][T15138] mkiss: ax0: crc mode is auto. [ 665.559131][T15138] syz_tun: left allmulticast mode [ 665.768019][ T9] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 665.870180][T15153] FAULT_INJECTION: forcing a failure. [ 665.870180][T15153] name failslab, interval 1, probability 0, space 0, times 0 [ 665.903178][T15153] CPU: 1 UID: 0 PID: 15153 Comm: syz.4.2242 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 665.903207][T15153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 665.903218][T15153] Call Trace: [ 665.903227][T15153] [ 665.903236][T15153] dump_stack_lvl+0x189/0x250 [ 665.903266][T15153] ? __pfx____ratelimit+0x10/0x10 [ 665.903289][T15153] ? __pfx_dump_stack_lvl+0x10/0x10 [ 665.903307][T15153] ? __pfx__printk+0x10/0x10 [ 665.903333][T15153] ? __pfx___might_resched+0x10/0x10 [ 665.903355][T15153] ? fs_reclaim_acquire+0x7d/0x100 [ 665.903384][T15153] should_fail_ex+0x414/0x560 [ 665.903411][T15153] should_failslab+0xa8/0x100 [ 665.903434][T15153] __kmalloc_noprof+0xcb/0x4f0 [ 665.903451][T15153] ? tomoyo_encode+0x28b/0x550 [ 665.903480][T15153] tomoyo_encode+0x28b/0x550 [ 665.903508][T15153] tomoyo_realpath_from_path+0x58d/0x5d0 [ 665.903534][T15153] ? tomoyo_domain+0xda/0x130 [ 665.903565][T15153] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 665.903583][T15153] tomoyo_path_number_perm+0x1e8/0x5a0 [ 665.903607][T15153] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 665.903645][T15153] ? __lock_acquire+0xab9/0xd20 [ 665.903685][T15153] ? __fget_files+0x2a/0x420 [ 665.903711][T15153] ? __fget_files+0x2a/0x420 [ 665.903730][T15153] ? __fget_files+0x3a0/0x420 [ 665.903750][T15153] ? __fget_files+0x2a/0x420 [ 665.903776][T15153] security_file_ioctl+0xcb/0x2d0 [ 665.903801][T15153] __se_sys_ioctl+0x47/0x170 [ 665.903830][T15153] do_syscall_64+0xfa/0x3b0 [ 665.903849][T15153] ? lockdep_hardirqs_on+0x9c/0x150 [ 665.903869][T15153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.903886][T15153] ? clear_bhb_loop+0x60/0xb0 [ 665.903909][T15153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.903927][T15153] RIP: 0033:0x7ffb4f58ebe9 [ 665.903945][T15153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 665.903962][T15153] RSP: 002b:00007ffb50349038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 665.903983][T15153] RAX: ffffffffffffffda RBX: 00007ffb4f7b5fa0 RCX: 00007ffb4f58ebe9 [ 665.903997][T15153] RDX: 00002000000003c0 RSI: 000000004040ae79 RDI: 0000000000000004 [ 665.904010][T15153] RBP: 00007ffb50349090 R08: 0000000000000000 R09: 0000000000000000 [ 665.904037][T15153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.904049][T15153] R13: 00007ffb4f7b6038 R14: 00007ffb4f7b5fa0 R15: 00007ffc41fcca48 [ 665.904090][T15153] [ 665.904264][T15153] ERROR: Out of memory at tomoyo_realpath_from_path. [ 665.921804][T15157] fuse: Unknown parameter 'hd00000000000000000007' [ 666.376019][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 666.383712][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 666.391796][ T9] usb 7-1: config index 0 descriptor too short (expected 64811, got 43) [ 666.410775][ T9] usb 7-1: config 0 has an invalid interface number: 156 but max is -1 [ 666.422755][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 666.441484][ T9] usb 7-1: config 0 has no interface number 0 [ 666.529443][ T9] usb 7-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 666.546980][ T9] usb 7-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 666.558500][ T9] usb 7-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 666.696287][ T9] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 666.716632][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.727573][ T9] usb 7-1: config 0 descriptor?? [ 666.736419][ T9] gspca_main: spca561-2.14.0 probing abcd:cdee [ 666.843338][T15162] netlink: 'syz.4.2245': attribute type 1 has an invalid length. [ 666.851296][T15162] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2245'. [ 666.945254][T15142] 9pnet_fd: Insufficient options for proto=fd [ 666.959460][ T9] spca561 7-1:0.156: probe with driver spca561 failed with error -22 [ 666.974544][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 666.983631][ T9] usb 7-1: MIDIStreaming interface descriptor not found [ 667.070716][ T9] usb 7-1: USB disconnect, device number 33 [ 667.415573][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 667.422760][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 668.455538][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 668.462679][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 668.640671][T15184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2249'. [ 669.495557][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 669.502699][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 670.162550][T15213] netlink: 'syz.4.2258': attribute type 1 has an invalid length. [ 670.170694][T15213] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2258'. [ 670.535600][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 670.542698][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 671.038933][T15214] usb usb1: check_ctrlrecip: process 15214 (syz.0.2256) requesting ep 01 but needs 81 [ 671.279091][T15220] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 671.328610][T15220] netlink: 176 bytes leftover after parsing attributes in process `syz.6.2259'. [ 671.351599][ T30] audit: type=1800 audit(1755953313.389:280): pid=15227 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.2261" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 671.449891][T15230] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2263'. [ 671.575553][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 671.582715][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 671.585471][ T8628] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 671.756098][ T8628] usb 7-1: Using ep0 maxpacket: 32 [ 671.778340][ T8628] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 672.625568][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 672.632748][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 672.744461][ T8628] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 672.758980][ T8628] usb 7-1: config 0 descriptor?? [ 672.770217][ T8628] gspca_main: sunplus-2.14.0 probing 041e:400b [ 673.218837][T15263] tipc: Enabling of bearer rejected, already enabled [ 673.398345][T15264] IPVS: set_ctl: invalid protocol: 51 10.1.1.1:20002 [ 673.550565][T15266] netlink: 'syz.7.2272': attribute type 1 has an invalid length. [ 673.558572][T15266] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2272'. [ 673.655599][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 673.662710][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 673.783463][ T8628] gspca_sunplus: reg_r err -71 [ 673.789130][ T8628] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 673.801637][ T8628] usb 7-1: USB disconnect, device number 34 [ 674.143559][T15271] netlink: 44 bytes leftover after parsing attributes in process `syz.7.2272'. [ 674.453841][T15286] batman_adv: batadv0: Adding interface: dummy0 [ 674.460630][T15286] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.487121][T15286] batman_adv: batadv0: Interface activated: dummy0 [ 674.503630][ T5926] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 674.677779][ T5926] usb 3-1: config index 0 descriptor too short (expected 1051, got 27) [ 674.697290][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 674.704714][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 674.706515][ T5926] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 674.734456][ T5926] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 674.774303][ T5926] usb 3-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 149 [ 674.845083][ T5926] usb 3-1: config 0 interface 0 has no altsetting 0 [ 675.014513][ T5926] usb 3-1: New USB device found, idVendor=06cd, idProduct=010a, bcdDevice=d9.c3 [ 675.043416][ T5926] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.058334][ T5926] usb 3-1: Product: syz [ 675.065482][ T5926] usb 3-1: Manufacturer: syz [ 675.071851][ T5926] usb 3-1: SerialNumber: syz [ 675.109781][ T5926] usb 3-1: config 0 descriptor?? [ 675.129672][T15277] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 675.388431][ T5926] keyspan 3-1:0.0: Keyspan 4 port adapter converter detected [ 675.517706][ T5926] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 675.545958][ T5926] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 675.559711][ T5926] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 675.735519][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 675.742574][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 676.285244][ T5926] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 676.346844][ T5926] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 82 [ 676.362810][T15306] netlink: 36 bytes leftover after parsing attributes in process `syz.7.2284'. [ 676.392611][ T5926] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 676.428070][T15308] netlink: 'syz.0.2285': attribute type 1 has an invalid length. [ 676.436173][T15308] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2285'. [ 676.450394][ T5926] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 676.775769][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 676.783470][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 676.867258][ T5926] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 676.875264][ T5926] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 676.893868][ T5926] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 676.908001][ T5926] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 84 [ 676.918764][ T5926] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 676.930531][T15310] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.2284'. [ 676.947234][ T5926] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 676.979997][ T5926] usb 3-1: USB disconnect, device number 65 [ 677.034105][ T5926] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 677.093670][ T5926] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 677.147276][T15318] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2289'. [ 677.161135][ T5926] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 677.172331][T15319] netlink: 'syz.0.2287': attribute type 1 has an invalid length. [ 677.180904][T15319] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2287'. [ 677.223845][T15320] ipvlan0: entered allmulticast mode [ 677.230634][ T5926] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 677.245517][T15320] veth0_vlan: entered allmulticast mode [ 677.274801][ T5926] keyspan 3-1:0.0: device disconnected [ 677.625744][ T8627] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 677.815513][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 677.822563][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 677.969543][T15317] ALSA: mixer_oss: invalid OSS volume '' [ 678.155530][ T8627] usb 5-1: Using ep0 maxpacket: 32 [ 678.186266][ T8627] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 678.219824][ T8627] usb 5-1: can't read configurations, error -61 [ 678.366896][ T8627] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 678.641241][ T8627] usb 5-1: Using ep0 maxpacket: 32 [ 678.767172][ T8627] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 678.824930][ T8627] usb 5-1: can't read configurations, error -61 [ 678.855513][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 678.858902][ T8627] usb usb5-port1: attempt power cycle [ 678.862586][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 678.939038][T15318]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 679.068085][T15318]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 679.122723][T15318]  (unregistering): Released all slaves [ 679.318902][ T8627] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 679.367434][ T8627] usb 5-1: Using ep0 maxpacket: 32 [ 679.391816][ T8627] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 679.417011][ T8627] usb 5-1: can't read configurations, error -61 [ 679.538496][T15345] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 679.895615][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 679.902753][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 680.688885][T15355] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2301'. [ 680.713190][T15355] syz.0.2301 (15355): /proc/15354/oom_adj is deprecated, please use /proc/15354/oom_score_adj instead. [ 680.734889][T15356] libceph: resolve '400' (ret=-3): failed [ 680.761134][T15352] tc_dump_action: action bad kind [ 681.055648][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 681.062720][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 681.081889][T15365] netlink: 'syz.4.2303': attribute type 1 has an invalid length. [ 681.156898][T15365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 681.196376][T15366] bond0: (slave veth3): Enslaving as an active interface with a down link [ 681.221547][T15365] vlan2: entered allmulticast mode [ 681.227076][T15365] veth1: entered allmulticast mode [ 681.233161][T15365] veth1: entered promiscuous mode [ 681.242767][T15365] veth1: left promiscuous mode [ 681.251145][T15365] bond0: (slave vlan2): making interface the new active one [ 681.261815][T15365] veth1: entered promiscuous mode [ 681.272009][T15365] vlan2: entered promiscuous mode [ 681.278356][T15365] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 681.988098][ T5898] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 682.146086][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 682.153182][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 682.779819][ T5898] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 682.797487][ T5898] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 682.920822][ T5898] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 682.995632][ T5898] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 683.175532][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 683.182642][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 684.215805][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 684.222896][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 684.439772][ T5898] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 684.564694][ T5898] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 684.574073][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 684.583206][ T5898] usb 7-1: Product: syz [ 684.587678][ T5898] usb 7-1: Manufacturer: syz [ 684.604339][ T5898] cdc_wdm 7-1:1.0: skipping garbage [ 684.609982][ T5898] cdc_wdm 7-1:1.0: skipping garbage [ 684.617128][ T5898] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 684.623230][ T5898] cdc_wdm 7-1:1.0: Unknown control protocol [ 684.745861][ T5898] usb 7-1: USB disconnect, device number 35 [ 685.115585][ T8627] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 685.146233][T15409] netlink: 160 bytes leftover after parsing attributes in process `syz.6.2318'. [ 685.173747][T15409] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2318'. [ 685.255554][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 685.263065][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 685.298201][ T8627] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.636819][ T8627] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 685.685882][ T8627] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 685.704444][ T8627] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.752454][ T8627] usb 5-1: config 0 descriptor?? [ 686.306133][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 686.313333][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 686.937618][ T8627] cp2112 0003:10C4:EA90.0015: unknown main item tag 0x0 [ 687.086936][ T8627] cp2112 0003:10C4:EA90.0015: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 687.214423][ T8627] cp2112 0003:10C4:EA90.0015: Part Number: 0x82 Device Version: 0xFE [ 687.316974][T15435] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2324'. [ 687.335676][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 687.342784][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 687.699940][T15448] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(11) [ 687.706601][T15448] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 687.717661][T15448] vhci_hcd vhci_hcd.0: Device attached [ 687.723867][T15452] vhci_hcd: connection closed [ 687.724208][T10070] vhci_hcd: stop threads [ 687.733512][T10070] vhci_hcd: release socket [ 687.740574][T10070] vhci_hcd: disconnect device [ 687.855511][ T8627] cp2112 0003:10C4:EA90.0015: error reading lock byte: -71 [ 687.895504][ T8627] usb 5-1: USB disconnect, device number 89 [ 688.104729][T15439] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 688.375563][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 688.382838][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 689.085433][ T8627] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 689.386718][ T9] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 689.425511][ C0] net_ratelimit: 2 callbacks suppressed [ 689.425525][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 689.438268][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 689.445301][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 689.452444][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 689.495421][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 689.518358][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 689.845788][ T9] usb 7-1: device descriptor read/64, error -32 [ 690.055634][ T8627] usb 5-1: Using ep0 maxpacket: 8 [ 690.061399][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.068225][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.083572][ T8627] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 690.095633][ T9] usb 7-1: new full-speed USB device number 37 using dummy_hcd [ 690.152811][T15495] netlink: 104 bytes leftover after parsing attributes in process `syz.0.2337'. [ 690.195868][T15495] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.205874][T15495] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.267611][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 690.305078][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 690.337071][T15495] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.347179][T15495] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.394282][ T9] usb 7-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 690.419781][T15495] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.429746][T15495] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.455722][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 690.463104][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 690.470286][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 690.477366][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 690.530274][T15495] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 690.540760][T15495] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.573265][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.601020][ T9] usb 7-1: config 0 descriptor?? [ 690.695229][T15495] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.704070][T15495] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.740408][T15495] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.748788][T15495] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.784034][T15495] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.792425][T15495] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.827098][T15495] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 690.835463][T15495] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.044020][ T8627] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 691.059342][ T8627] usb 5-1: config 1 has no interface number 1 [ 691.066993][ T8627] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 691.082246][ T8627] usb 5-1: string descriptor 0 read error: -71 [ 691.089019][ T8627] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 691.505518][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 691.512691][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 692.049158][ T8627] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.063053][ T8627] usb 5-1: can't set config #1, error -71 [ 692.074965][ T8627] usb 5-1: USB disconnect, device number 90 [ 693.286701][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 693.292756][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 693.437248][ T9] usb 7-1: USB disconnect, device number 37 [ 693.538899][T15518] tipc: Enabling of bearer rejected, already enabled [ 694.037081][T15505] netlink: 'syz.2.2342': attribute type 1 has an invalid length. [ 694.247257][T15523] FAULT_INJECTION: forcing a failure. [ 694.247257][T15523] name failslab, interval 1, probability 0, space 0, times 0 [ 694.269848][T15523] CPU: 1 UID: 0 PID: 15523 Comm: syz.4.2349 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 694.269879][T15523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 694.269891][T15523] Call Trace: [ 694.269899][T15523] [ 694.269907][T15523] dump_stack_lvl+0x189/0x250 [ 694.269958][T15523] ? __pfx____ratelimit+0x10/0x10 [ 694.269979][T15523] ? __pfx_dump_stack_lvl+0x10/0x10 [ 694.269999][T15523] ? __pfx__printk+0x10/0x10 [ 694.270029][T15523] ? __pfx___might_resched+0x10/0x10 [ 694.270049][T15523] ? fs_reclaim_acquire+0x7d/0x100 [ 694.270086][T15523] should_fail_ex+0x414/0x560 [ 694.270113][T15523] should_failslab+0xa8/0x100 [ 694.270136][T15523] __kmalloc_cache_noprof+0x70/0x3d0 [ 694.270169][T15523] ? nft_trans_rule_add+0x59/0x440 [ 694.270199][T15523] nft_trans_rule_add+0x59/0x440 [ 694.270224][T15523] nf_tables_newrule+0x1b5e/0x2890 [ 694.270271][T15523] ? __pfx_nf_tables_newrule+0x10/0x10 [ 694.270303][T15523] ? nfnl_pernet+0x23/0x240 [ 694.270335][T15523] ? __nla_parse+0x40/0x60 [ 694.270366][T15523] nfnetlink_rcv+0x112f/0x2520 [ 694.270422][T15523] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 694.270461][T15523] ? ref_tracker_free+0x63a/0x7d0 [ 694.270519][T15523] ? __netlink_deliver_tap+0x807/0x850 [ 694.270555][T15523] ? netlink_deliver_tap+0x2e/0x1b0 [ 694.270581][T15523] ? netlink_deliver_tap+0x2e/0x1b0 [ 694.270613][T15523] netlink_unicast+0x75c/0x8e0 [ 694.270649][T15523] netlink_sendmsg+0x805/0xb30 [ 694.270687][T15523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 694.270723][T15523] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 694.270745][T15523] ? __pfx_netlink_sendmsg+0x10/0x10 [ 694.270772][T15523] __sock_sendmsg+0x21c/0x270 [ 694.270801][T15523] ____sys_sendmsg+0x505/0x830 [ 694.270833][T15523] ? __pfx_____sys_sendmsg+0x10/0x10 [ 694.270872][T15523] ? import_iovec+0x74/0xa0 [ 694.270903][T15523] ___sys_sendmsg+0x21f/0x2a0 [ 694.270935][T15523] ? __pfx____sys_sendmsg+0x10/0x10 [ 694.271004][T15523] ? __fget_files+0x2a/0x420 [ 694.271025][T15523] ? __fget_files+0x3a0/0x420 [ 694.271058][T15523] __x64_sys_sendmsg+0x19b/0x260 [ 694.271100][T15523] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 694.271139][T15523] ? __pfx_ksys_write+0x10/0x10 [ 694.271155][T15523] ? rcu_is_watching+0x15/0xb0 [ 694.271183][T15523] ? do_syscall_64+0xbe/0x3b0 [ 694.271210][T15523] do_syscall_64+0xfa/0x3b0 [ 694.271229][T15523] ? lockdep_hardirqs_on+0x9c/0x150 [ 694.271250][T15523] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.271269][T15523] ? clear_bhb_loop+0x60/0xb0 [ 694.271293][T15523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.271312][T15523] RIP: 0033:0x7ffb4f58ebe9 [ 694.271330][T15523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 694.271347][T15523] RSP: 002b:00007ffb50349038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 694.271368][T15523] RAX: ffffffffffffffda RBX: 00007ffb4f7b5fa0 RCX: 00007ffb4f58ebe9 [ 694.271382][T15523] RDX: 0000000024008000 RSI: 0000200000000080 RDI: 0000000000000003 [ 694.271395][T15523] RBP: 00007ffb50349090 R08: 0000000000000000 R09: 0000000000000000 [ 694.271406][T15523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.271418][T15523] R13: 00007ffb4f7b6038 R14: 00007ffb4f7b5fa0 R15: 00007ffc41fcca48 [ 694.271451][T15523] [ 694.615539][ C0] net_ratelimit: 9 callbacks suppressed [ 694.615562][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 694.628370][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 694.635570][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 694.642655][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 695.274102][ T8628] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 695.347842][ T30] audit: type=1400 audit(1755953337.379:281): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=15529 comm="syz.4.2350" src=1 dest=20000 netif=wpan0 [ 695.371371][T15536] netlink: 'syz.6.2352': attribute type 1 has an invalid length. [ 695.427720][ T8628] usb 3-1: config 0 has an invalid interface number: 109 but max is 0 [ 695.443911][ T8628] usb 3-1: config 0 has no interface number 0 [ 695.453485][ T8628] usb 3-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 695.466327][ T8628] usb 3-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1 [ 695.478649][ T8628] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.491479][ T8628] usb 3-1: config 0 descriptor?? [ 695.655511][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 695.662681][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 695.669886][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 695.677096][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 695.712216][ T8628] usb 3-1: string descriptor 0 read error: -71 [ 695.737559][ T8628] cxacru 3-1:0.109: cxacru_bind: interface has incorrect endpoints [ 695.774145][ T8628] cxacru 3-1:0.109: usbatm_usb_probe: bind failed: -19! [ 695.805914][ T8628] usb 3-1: USB disconnect, device number 66 [ 696.209540][T15548] lo speed is unknown, defaulting to 1000 [ 696.293049][T15552] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2356'. [ 696.700053][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 696.707503][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 696.892883][T15559] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2357'. [ 697.225478][ T8628] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 697.435802][ T8628] usb 3-1: Using ep0 maxpacket: 16 [ 697.449944][ T8628] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 697.467635][ T8628] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.476500][ T8628] usb 3-1: Product: syz [ 697.480700][ T8628] usb 3-1: Manufacturer: syz [ 697.485401][ T8628] usb 3-1: SerialNumber: syz [ 697.492968][ T8628] usb 3-1: config 0 descriptor?? [ 697.501104][ T8628] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 697.512767][ T8628] usb 3-1: Detected FT-X [ 698.409347][T15579] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 698.445945][ T49] vlan2: left promiscuous mode [ 698.655787][ T8628] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 699.468739][ T8628] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 699.654610][ T8628] usb 3-1: USB disconnect, device number 67 [ 699.669691][ T8628] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 699.684601][ T8628] ftdi_sio 3-1:0.0: device disconnected [ 699.815557][ C0] net_ratelimit: 9 callbacks suppressed [ 699.815577][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 699.828384][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 699.835558][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 699.842779][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 700.303295][T15598] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2367'. [ 700.855562][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 700.862888][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 700.870000][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 700.876972][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 700.961927][T15618] input: syz1 as /devices/virtual/input/input33 [ 701.175696][ T5898] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 701.789233][ T5898] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.800388][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 701.823867][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 701.847920][ T5898] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 701.882907][ T5898] usb 3-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 701.895608][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 701.902625][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 701.913350][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.928296][ T5898] usb 3-1: config 0 descriptor?? [ 702.249641][ T8628] usb 3-1: USB disconnect, device number 68 [ 703.651080][T15644] overlay: ./file0 is not a directory [ 704.419978][T15656] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2383'. [ 705.016082][ C0] net_ratelimit: 9 callbacks suppressed [ 705.016097][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 705.028871][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 705.035977][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 705.042919][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 705.704978][T15661] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2386'. [ 705.705005][T15661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2386'. [ 705.705023][T15661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2386'. [ 706.010933][ T9] hid-generic 0000:0004:0000.0016: unknown main item tag 0x0 [ 706.021999][ T9] hid-generic 0000:0004:0000.0016: unknown main item tag 0x0 [ 706.030122][ T9] hid-generic 0000:0004:0000.0016: unknown main item tag 0x0 [ 706.039507][ T9] hid-generic 0000:0004:0000.0016: hidraw0: HID v0.00 Device [syz0] on syz1 [ 706.055739][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 706.063013][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 706.070176][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 706.077407][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 707.095677][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 707.102905][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 708.715534][ T5970] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 708.867020][ T5970] usb 3-1: not running at top speed; connect to a high speed hub [ 708.886150][ T5970] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 708.896357][ T5970] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 708.905680][ T5970] usb 3-1: config 1 has no interface number 1 [ 708.911927][ T5970] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 708.925202][ T5970] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 708.936206][ T9] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 708.947747][ T5970] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 708.956940][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.967592][ T5970] usb 3-1: Product: syz [ 708.971875][ T5970] usb 3-1: Manufacturer: syz [ 708.976707][ T5970] usb 3-1: SerialNumber: syz [ 709.105509][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 709.119085][ T9] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 709.160967][ T9] usb 5-1: New USB device found, idVendor=1044, idProduct=800d, bcdDevice=57.5c [ 709.179347][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.207870][T15705] input: syz0 as /devices/virtual/input/input34 [ 709.221477][ T9] usb 5-1: Product: syz [ 709.377377][T15707] program syz.2.2394 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 709.433373][ T9] usb 5-1: Manufacturer: syz [ 709.532320][ T9] usb 5-1: SerialNumber: syz [ 709.644434][ T9] usb 5-1: config 0 descriptor?? [ 709.702551][ T9] usb 5-1: bad CDC descriptors [ 709.722971][ T5970] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 709.767283][T15709] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2399'. [ 709.774273][ T5970] usb 3-1: USB disconnect, device number 69 [ 709.776599][T15709] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2399'. [ 709.802023][T15709] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2399'. [ 710.215651][ C0] net_ratelimit: 9 callbacks suppressed [ 710.215672][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 710.228393][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 710.235621][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 710.242862][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 710.256866][T15722] libceph: resolve '400' (ret=-3): failed [ 711.218711][T15739] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.2407'. [ 711.239927][T15737] autofs: Unknown parameter '' [ 711.257538][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 711.264794][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 711.272037][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 711.279135][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 711.732341][ T5926] usb 5-1: USB disconnect, device number 91 [ 712.156649][T15782] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000 [ 712.231962][T15786] overlayfs: failed to resolve './file2': -2 [ 712.295529][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 712.303025][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 712.658363][T15792] tipc: Enabling of bearer rejected, already enabled [ 714.055497][ T8627] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 714.235542][ T8627] usb 3-1: Using ep0 maxpacket: 8 [ 714.258546][ T8627] usb 3-1: config 0 has too many interfaces: 145, using maximum allowed: 32 [ 714.275444][ T8627] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 145 [ 714.326159][ T8627] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 714.335929][ T8627] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.345103][ T8627] usb 3-1: Product: syz [ 714.359767][ T8627] usb 3-1: Manufacturer: syz [ 714.364401][ T8627] usb 3-1: SerialNumber: syz [ 714.382988][ T8627] usb 3-1: config 0 descriptor?? [ 715.415604][ C0] net_ratelimit: 9 callbacks suppressed [ 715.415626][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 715.428378][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 715.435538][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 715.442548][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 715.823898][T15837] comedi comedi1: comedi_config --init_data is deprecated [ 716.383762][T15862] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2439'. [ 716.455511][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 716.462637][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 716.469688][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 716.476827][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 716.852603][ T5926] usb 3-1: USB disconnect, device number 70 [ 717.458520][T15882] netlink: 4332 bytes leftover after parsing attributes in process `syz.4.2445'. [ 717.495499][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 717.502685][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 717.531080][T15888] loop8: detected capacity change from 0 to 7 [ 717.552306][T15888] Dev loop8: unable to read RDB block 7 [ 717.559175][T15888] loop8: unable to read partition table [ 717.567781][T15888] loop8: partition table beyond EOD, truncated [ 717.575128][T15888] loop_reread_partitions: partition scan of loop8 (þ被x) failed (rc=-5) [ 717.720307][T15896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 717.730036][T15896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.545448][ T5926] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 718.687517][ T5926] usb 5-1: device descriptor read/64, error -71 [ 718.945535][ T5926] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 719.044615][T15914] netlink: 'syz.2.2453': attribute type 1 has an invalid length. [ 719.085412][ T5926] usb 5-1: device descriptor read/64, error -71 [ 719.138329][T15916] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 719.155939][T15916] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 719.188493][T15916] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 719.205907][ T5926] usb usb5-port1: attempt power cycle [ 719.232440][T15916] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 719.297955][T15916] bond5: (slave geneve2): making interface the new active one [ 719.331928][T15916] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 719.555572][ T5926] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 719.599686][ T5926] usb 5-1: device descriptor read/8, error -71 [ 719.986332][ T5926] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 720.096095][ T5926] usb 5-1: device descriptor read/8, error -71 [ 720.217946][ T5926] usb usb5-port1: unable to enumerate USB device [ 720.615574][ C0] net_ratelimit: 9 callbacks suppressed [ 720.615590][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 720.628256][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 720.635257][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 720.642445][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 720.827581][T15937] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2461'. [ 720.943038][T15938] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2461'. [ 721.135439][ T9] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 721.285567][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 721.294422][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.305731][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 721.318712][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 721.327835][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.337869][ T9] usb 5-1: config 0 descriptor?? [ 721.460131][T15940] libceph: resolve '400' (ret=-3): failed [ 721.655577][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 721.662815][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 721.670087][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 721.677257][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 722.449224][T15946] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 722.475118][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 722.507359][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0017/input/input35 [ 722.549405][ T9] microsoft 0003:045E:07DA.0017: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 722.695592][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 722.702888][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 722.749155][T15935] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2460'. [ 722.795853][T15935] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2460'. [ 722.815171][T15935] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2460'. [ 722.887897][T15957] netlink: 332 bytes leftover after parsing attributes in process `syz.2.2468'. [ 722.897452][T15957] netlink: 'syz.2.2468': attribute type 9 has an invalid length. [ 722.905532][T15957] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2468'. [ 722.941979][T15957] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2468'. [ 723.389796][ T8628] usb 5-1: USB disconnect, device number 96 [ 723.504717][T15969] libceph: resolve '400' (ret=-3): failed [ 723.620371][T15984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 723.640072][T15984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 724.125063][T15999] netlink: 104 bytes leftover after parsing attributes in process `syz.7.2478'. [ 724.270026][T15999] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.393774][T15999] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.560397][T15999] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.657395][T15999] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.816003][T15999] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.835761][T15999] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.855078][T15999] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.876148][T15999] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.608533][T15998] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2479'. [ 725.815552][ C0] net_ratelimit: 9 callbacks suppressed [ 725.815574][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 725.828689][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 725.835928][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 725.843018][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 726.582999][T16029] tmpfs: Bad value for 'mpol' [ 726.672138][T16029] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2484'. [ 726.855507][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 726.862645][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 726.869817][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 726.877016][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 727.326706][T16033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 727.338936][T16033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 727.465533][ T5926] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 727.625576][ T5926] usb 5-1: Using ep0 maxpacket: 32 [ 727.634844][T16038] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 727.644640][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.662942][ T5926] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.672916][ T5926] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 727.735614][ T5926] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.847434][ T5926] usb 5-1: config 0 descriptor?? [ 727.895514][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 727.902762][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 727.963874][T16046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2491'. [ 728.431593][ T5926] savu 0003:1E7D:2D5A.0018: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 728.446591][T16043] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 728.453146][T16043] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 728.470917][T16043] vhci_hcd vhci_hcd.0: Device attached [ 728.509552][T16048] vhci_hcd: connection closed [ 728.576840][T15772] vhci_hcd: stop threads [ 728.588952][T15772] vhci_hcd: release socket [ 728.594158][T15772] vhci_hcd: disconnect device [ 728.780863][ T5926] vhci_hcd: vhci_device speed not set [ 729.725869][ T5939] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 729.746565][ T8615] usb 5-1: reset high-speed USB device number 97 using dummy_hcd [ 729.929046][ T5939] usb 3-1: Using ep0 maxpacket: 16 [ 729.938424][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 729.949645][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 729.959733][ T5939] usb 3-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 729.968963][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.984903][ T5939] usb 3-1: config 0 descriptor?? [ 730.459200][ T5939] usbhid 3-1:0.0: can't add hid device: -71 [ 730.465612][ T5939] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 730.480439][ T5939] usb 3-1: USB disconnect, device number 71 [ 730.894435][T16083] sctp: [Deprecated]: syz.2.2502 (pid 16083) Use of struct sctp_assoc_value in delayed_ack socket option. [ 730.894435][T16083] Use struct sctp_sack_info instead [ 731.015547][ C0] net_ratelimit: 9 callbacks suppressed [ 731.015568][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 731.028834][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 731.036515][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 731.044166][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 731.367867][ T8628] usb 5-1: USB disconnect, device number 97 [ 731.724265][T16096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2505'. [ 732.055533][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 732.062748][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 732.069976][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 732.077109][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 733.095489][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 733.102517][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 733.555682][T16107] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 735.575681][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 736.215653][ C0] net_ratelimit: 10 callbacks suppressed [ 736.215674][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 736.228668][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 736.235883][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 736.243045][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 736.261601][T16137] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2517'. [ 737.255810][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 737.263513][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 737.271183][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 737.278863][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 738.088645][T16152] netlink: 300 bytes leftover after parsing attributes in process `syz.0.2522'. [ 738.295618][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 738.302745][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 738.409483][T16157] fuse: Bad value for 'fd' [ 739.605695][ T5926] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 740.545890][ T5926] usb 7-1: config 0 has an invalid interface number: 128 but max is 0 [ 740.554910][ T5926] usb 7-1: config 0 has no interface number 0 [ 740.759224][ T5926] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 740.801851][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.812891][ T5926] usb 7-1: Product: syz [ 741.015051][ T5926] usb 7-1: Manufacturer: syz [ 741.019799][ T5926] usb 7-1: SerialNumber: syz [ 741.027559][ T5926] usb 7-1: config 0 descriptor?? [ 741.415506][ C0] net_ratelimit: 10 callbacks suppressed [ 741.415525][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 741.428395][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 741.435579][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 741.442788][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 741.957718][T16191] overlayfs: failed to clone lowerpath [ 742.456072][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 742.463636][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 742.470936][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 742.478023][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 742.674556][T16202] fuse: Bad value for 'fd' [ 743.275021][T16208] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2537'. [ 743.495535][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 743.502711][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 743.799828][ T5926] usb 7-1: Firmware version (0.0) predates our first public release. [ 743.825441][ T5926] usb 7-1: Please update to version 0.2 or newer [ 743.973176][ T9] usb 7-1: USB disconnect, device number 38 [ 744.057331][T16216] Falling back ldisc for ttyS3. [ 745.535213][T16235] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2541'. [ 745.896712][T16244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2548'. [ 746.615768][ C0] net_ratelimit: 10 callbacks suppressed [ 746.615812][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 746.629232][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 746.636839][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 746.644285][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 747.374784][T16254] comedi comedi3: comedi_config --init_data is deprecated [ 747.484683][T16260] fuse: Bad value for 'fd' [ 747.655522][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 747.662663][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 747.669807][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 747.676977][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 748.516262][T16272] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 748.695500][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 751.429079][T16307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2566'. [ 751.500083][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 751.510595][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.815763][ C0] net_ratelimit: 10 callbacks suppressed [ 751.815797][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 751.828757][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 751.835815][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 751.842895][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 752.345147][T16318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 752.354978][T16318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 752.618626][T16323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 752.855501][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 752.862653][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 752.869781][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 752.876786][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 753.891772][T16331] libceph: resolve '400' (ret=-3): failed [ 753.897787][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 755.994897][T16357] fuse: Bad value for 'fd' [ 757.015540][ C0] net_ratelimit: 11 callbacks suppressed [ 757.015563][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 757.028510][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 757.035795][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 757.042892][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 757.117976][T16367] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 757.117976][T16367] program syz.4.2584 not setting count and/or reply_len properly [ 758.055505][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 758.062645][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 758.069797][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 758.077019][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 758.145752][ T8627] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 758.178571][T16387] FAULT_INJECTION: forcing a failure. [ 758.178571][T16387] name failslab, interval 1, probability 0, space 0, times 0 [ 758.205865][T16387] CPU: 0 UID: 0 PID: 16387 Comm: syz.4.2591 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 758.205895][T16387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 758.205918][T16387] Call Trace: [ 758.205926][T16387] [ 758.205936][T16387] dump_stack_lvl+0x189/0x250 [ 758.205963][T16387] ? __pfx____ratelimit+0x10/0x10 [ 758.205985][T16387] ? __pfx_dump_stack_lvl+0x10/0x10 [ 758.206006][T16387] ? __pfx__printk+0x10/0x10 [ 758.206034][T16387] ? __pfx___might_resched+0x10/0x10 [ 758.206055][T16387] ? fs_reclaim_acquire+0x7d/0x100 [ 758.206084][T16387] should_fail_ex+0x414/0x560 [ 758.206112][T16387] should_failslab+0xa8/0x100 [ 758.206135][T16387] __kmalloc_noprof+0xcb/0x4f0 [ 758.206154][T16387] ? tomoyo_encode+0x28b/0x550 [ 758.206183][T16387] tomoyo_encode+0x28b/0x550 [ 758.206214][T16387] tomoyo_realpath_from_path+0x58d/0x5d0 [ 758.206241][T16387] ? tomoyo_domain+0xda/0x130 [ 758.206272][T16387] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 758.206292][T16387] tomoyo_path_number_perm+0x1e8/0x5a0 [ 758.206316][T16387] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 758.206356][T16387] ? __lock_acquire+0xab9/0xd20 [ 758.206398][T16387] ? __fget_files+0x2a/0x420 [ 758.206422][T16387] ? __fget_files+0x2a/0x420 [ 758.206442][T16387] ? __fget_files+0x3a0/0x420 [ 758.206461][T16387] ? __fget_files+0x2a/0x420 [ 758.206487][T16387] security_file_ioctl+0xcb/0x2d0 [ 758.206512][T16387] __se_sys_ioctl+0x47/0x170 [ 758.206542][T16387] do_syscall_64+0xfa/0x3b0 [ 758.206563][T16387] ? lockdep_hardirqs_on+0x9c/0x150 [ 758.206585][T16387] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.206604][T16387] ? clear_bhb_loop+0x60/0xb0 [ 758.206628][T16387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.206646][T16387] RIP: 0033:0x7ffb4f58ebe9 [ 758.206664][T16387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 758.206687][T16387] RSP: 002b:00007ffb50349038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 758.206709][T16387] RAX: ffffffffffffffda RBX: 00007ffb4f7b5fa0 RCX: 00007ffb4f58ebe9 [ 758.206724][T16387] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 758.206736][T16387] RBP: 00007ffb50349090 R08: 0000000000000000 R09: 0000000000000000 [ 758.206748][T16387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 758.206759][T16387] R13: 00007ffb4f7b6038 R14: 00007ffb4f7b5fa0 R15: 00007ffc41fcca48 [ 758.206792][T16387] [ 758.206813][T16387] ERROR: Out of memory at tomoyo_realpath_from_path. [ 758.330906][ T8627] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 758.471605][ T8627] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 758.482666][ T8627] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.494070][ T8627] usb 3-1: config 0 descriptor?? [ 759.091793][ T8627] zeroplus 0003:0C12:0005.0019: report_id 0 is invalid [ 759.105549][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 759.112879][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 759.127046][ T8627] zeroplus 0003:0C12:0005.0019: item 0 0 1 8 parsing failed [ 759.209429][ T8627] zeroplus 0003:0C12:0005.0019: parse failed [ 759.235627][ T8627] zeroplus 0003:0C12:0005.0019: probe with driver zeroplus failed with error -22 [ 759.507654][T16407] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 759.763000][ T5898] usb 3-1: USB disconnect, device number 72 [ 760.483789][T16417] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 761.293368][T16436] libceph: resolve '400' (ret=-3): failed [ 762.216126][ C0] net_ratelimit: 10 callbacks suppressed [ 762.216161][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 762.229390][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 762.237041][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 762.244747][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 762.544988][T16442] FAULT_INJECTION: forcing a failure. [ 762.544988][T16442] name failslab, interval 1, probability 0, space 0, times 0 [ 762.560790][T16442] CPU: 1 UID: 0 PID: 16442 Comm: syz.4.2605 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 762.560808][T16442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 762.560814][T16442] Call Trace: [ 762.560820][T16442] [ 762.560825][T16442] dump_stack_lvl+0x189/0x250 [ 762.560843][T16442] ? __pfx____ratelimit+0x10/0x10 [ 762.560855][T16442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 762.560866][T16442] ? __pfx__printk+0x10/0x10 [ 762.560883][T16442] ? __pfx___might_resched+0x10/0x10 [ 762.560894][T16442] ? fs_reclaim_acquire+0x7d/0x100 [ 762.560910][T16442] should_fail_ex+0x414/0x560 [ 762.560925][T16442] should_failslab+0xa8/0x100 [ 762.560938][T16442] __kmalloc_cache_noprof+0x70/0x3d0 [ 762.560948][T16442] ? vhost_task_create+0xf6/0x290 [ 762.560970][T16442] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 762.560988][T16442] vhost_task_create+0xf6/0x290 [ 762.561002][T16442] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 762.561019][T16442] ? __pfx_vhost_task_create+0x10/0x10 [ 762.561036][T16442] ? __pfx_vhost_task_fn+0x10/0x10 [ 762.561055][T16442] ? kasan_save_track+0x4f/0x80 [ 762.561070][T16442] ? kasan_save_track+0x3e/0x80 [ 762.561096][T16442] kvm_mmu_post_init_vm+0x147/0x2b0 [ 762.561110][T16442] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 762.561129][T16442] ? __mutex_trylock_common+0x153/0x260 [ 762.561144][T16442] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 762.561160][T16442] ? rcu_is_watching+0x15/0xb0 [ 762.561171][T16442] ? look_up_lock_class+0x74/0x170 [ 762.561183][T16442] ? register_lock_class+0x51/0x320 [ 762.561203][T16442] ? __lock_acquire+0xab9/0xd20 [ 762.561229][T16442] kvm_vcpu_ioctl+0x95c/0xe90 [ 762.561247][T16442] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 762.561258][T16442] ? __lock_acquire+0xab9/0xd20 [ 762.561270][T16442] ? __asan_memset+0x22/0x50 [ 762.561285][T16442] ? smack_file_ioctl+0x302/0x340 [ 762.561296][T16442] ? __pfx_smack_file_ioctl+0x10/0x10 [ 762.561312][T16442] ? __fget_files+0x2a/0x420 [ 762.561324][T16442] ? __fget_files+0x3a0/0x420 [ 762.561335][T16442] ? __fget_files+0x2a/0x420 [ 762.561348][T16442] ? bpf_lsm_file_ioctl+0x9/0x20 [ 762.561361][T16442] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 762.561374][T16442] __se_sys_ioctl+0xfc/0x170 [ 762.561391][T16442] do_syscall_64+0xfa/0x3b0 [ 762.561403][T16442] ? lockdep_hardirqs_on+0x9c/0x150 [ 762.561413][T16442] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.561423][T16442] ? clear_bhb_loop+0x60/0xb0 [ 762.561436][T16442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.561447][T16442] RIP: 0033:0x7ffb4f58ebe9 [ 762.561457][T16442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 762.561467][T16442] RSP: 002b:00007ffb50349038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 762.561479][T16442] RAX: ffffffffffffffda RBX: 00007ffb4f7b5fa0 RCX: 00007ffb4f58ebe9 [ 762.561487][T16442] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 762.561493][T16442] RBP: 00007ffb50349090 R08: 0000000000000000 R09: 0000000000000000 [ 762.561500][T16442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 762.561506][T16442] R13: 00007ffb4f7b6038 R14: 00007ffb4f7b5fa0 R15: 00007ffc41fcca48 [ 762.561524][T16442] [ 763.255497][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 763.262617][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 763.269821][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 763.276808][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 763.806258][ T5846] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 763.814210][ T5846] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 764.219584][T16461] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 764.295549][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 764.341635][T16462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2609'. [ 765.143442][T16472] overlayfs: missing 'lowerdir' [ 766.905582][ T5926] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 767.128322][ T5926] usb 5-1: Using ep0 maxpacket: 8 [ 767.152435][ T5926] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 767.185173][ T5926] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 767.359396][ T5926] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 767.398507][ T5926] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 767.415588][ C0] net_ratelimit: 10 callbacks suppressed [ 767.415609][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 767.428442][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 767.435591][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 767.442568][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 767.495870][ T5926] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 767.711771][ T5926] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 767.720882][ T5926] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 767.753444][ T5926] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 767.775596][ T5926] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 767.795801][ T5926] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 767.826968][ T5926] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 767.834606][ T5926] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 767.883120][ T5926] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 767.937308][ T5926] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 767.966886][ T5926] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 767.991882][ T5926] usb 5-1: string descriptor 0 read error: -22 [ 767.998672][ T5926] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 768.025412][ T5926] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.058416][ T5926] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 768.455524][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 768.462634][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 768.469770][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 768.476948][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 768.646368][T16507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 769.163688][ T8628] usb 5-1: USB disconnect, device number 98 [ 769.495864][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 769.913265][T16517] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2627'. [ 770.656337][T16530] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2629'. [ 771.134870][T16530] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 771.144983][T16530] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.154764][T16530] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 771.233666][T16530] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 771.244228][T16530] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.254039][T16530] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 771.321069][T16530] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 771.332959][T16530] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.342788][T16530] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 771.418340][T16530] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 771.428344][T16530] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.438261][T16530] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 771.834521][T16530] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 771.842934][T16530] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 771.962798][T16546] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2633'. [ 772.017791][T16530] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 772.084875][T16546] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.211693][T16530] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.221506][T16530] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 772.230856][T16530] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 772.293048][T16536] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 772.326560][T16530] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.334880][T16530] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 772.343435][T16530] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 772.364124][T16530] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 772.372591][T16530] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 772.381126][T16530] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 772.473173][T16546] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.536836][T16546] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.563331][T16552] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 772.625459][ C0] net_ratelimit: 10 callbacks suppressed [ 772.625482][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 772.638344][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 772.645446][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 772.652557][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 772.785186][T16546] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 772.830582][T16558] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 773.345127][T16546] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.362215][T16546] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.379934][T16546] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.402039][T16546] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.639166][T16563] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2639'. [ 773.655500][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 773.662738][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 773.669985][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 773.677070][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 773.702018][T16563] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2639'. [ 773.780374][T16563] program syz.0.2639 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 774.017938][T16573] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 774.695476][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 775.739378][T16590] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 775.851404][T16598] fuse: Bad value for 'fd' [ 775.878388][T16595] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 776.170720][T16603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2651'. [ 777.065374][T16616] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 777.815978][ C0] net_ratelimit: 11 callbacks suppressed [ 777.816018][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 777.829334][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 777.836980][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 777.844358][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 778.855492][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 778.862622][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 778.869709][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 778.876869][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 779.895523][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 779.902945][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 780.209511][T16644] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 780.748120][T16655] libceph: resolve '400' (ret=-3): failed [ 781.331028][T16641] bio_check_eod: 2 callbacks suppressed [ 781.331046][T16641] syz.4.2659: attempt to access beyond end of device [ 781.331046][T16641] nbd4: rw=0, sector=16, nr_sectors = 2 limit=0 [ 782.437407][T16691] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 782.950268][T16695] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 783.015701][ C0] net_ratelimit: 9 callbacks suppressed [ 783.015721][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 783.028459][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 783.035575][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 783.042645][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 783.584794][T16708] libceph: resolve '400' (ret=-3): failed [ 784.055735][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 784.062936][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 784.070164][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 784.077262][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 784.502622][T16721] tc_dump_action: action bad kind [ 784.847553][T16730] libceph: resolve '400' (ret=-3): failed [ 785.095611][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 785.102860][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 785.733182][T16736] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 785.963386][T16741] tc_dump_action: action bad kind [ 786.426786][ T5970] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 786.557995][T16751] sp0: Synchronizing with TNC [ 786.575685][ T5970] usb 5-1: device descriptor read/64, error -71 [ 786.996973][ T5970] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 787.167163][ T5970] usb 5-1: device descriptor read/64, error -71 [ 787.183908][T16760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2694'. [ 787.275960][ T5970] usb usb5-port1: attempt power cycle [ 787.295702][ T8628] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 787.472086][ T8628] usb 7-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.484992][ T8628] usb 7-1: config 0 interface 0 has no altsetting 0 [ 787.496431][ T8628] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 787.509255][ T8628] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.533522][ T8628] usb 7-1: config 0 descriptor?? [ 787.543757][T16767] sp1: Synchronizing with TNC [ 787.619567][ T5970] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 787.633836][T16766] [U] è` [ 787.648236][ T5970] usb 5-1: device descriptor read/8, error -71 [ 787.656298][ T5898] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 787.767027][T16770] netlink: 'syz.0.2698': attribute type 1 has an invalid length. [ 787.774793][T16770] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2698'. [ 787.796117][T16751] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2692'. [ 787.810992][T16751] netlink: 6 bytes leftover after parsing attributes in process `syz.6.2692'. [ 787.828125][ T8628] usbhid 7-1:0.0: can't add hid device: -71 [ 787.843909][ T8628] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 787.859437][ T8628] usb 7-1: USB disconnect, device number 39 [ 787.955408][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 787.962142][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.973101][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.982952][ T5898] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 788.215479][ C0] net_ratelimit: 9 callbacks suppressed [ 788.215499][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 788.228209][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 788.235338][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 788.242340][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 788.603470][ T5970] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 788.682610][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.696559][ T5970] usb 5-1: device descriptor read/8, error -71 [ 788.704064][ T5898] usb 3-1: config 0 descriptor?? [ 788.743141][T16774] netlink: 'syz.0.2699': attribute type 1 has an invalid length. [ 788.789230][T16776] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 788.805702][ T5970] usb usb5-port1: unable to enumerate USB device [ 788.892263][T16779] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2700'. [ 789.255577][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 789.262687][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 789.269740][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 789.277006][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 789.581278][ T5898] hid (null): unknown global tag 0xe [ 789.707286][ T5898] aquacomputer_d5next 0003:0C70:F0B6.001A: unknown global tag 0xe [ 789.715151][ T5898] aquacomputer_d5next 0003:0C70:F0B6.001A: item 0 1 1 14 parsing failed [ 789.753682][ T5898] aquacomputer_d5next 0003:0C70:F0B6.001A: probe with driver aquacomputer_d5next failed with error -22 [ 789.770248][T16765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.780666][T16784] fuse: Bad value for 'fd' [ 789.802859][T16765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.834214][T16765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.865767][T16765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.882392][ T5898] usb 3-1: USB disconnect, device number 73 [ 790.287660][T16799] binder_alloc: 16798: binder_alloc_buf, no vma [ 790.295478][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 790.302721][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 790.360868][T16803] netlink: 'syz.7.2709': attribute type 1 has an invalid length. [ 790.369134][T16803] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2709'. [ 791.025723][ T30] audit: type=1800 audit(1755953433.059:282): pid=16811 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.2711" name="nullb0" dev="devtmpfs" ino=3368 res=0 errno=0 [ 791.064355][T16810] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 791.236325][T16818] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2710'. [ 791.321240][T16824] fuse: Bad value for 'fd' [ 791.460791][T16825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2714'. [ 791.855472][T16837] binder_alloc: 16836: binder_alloc_buf, no vma [ 792.102627][T16853] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 792.285208][T16863] netlink: 'syz.2.2726': attribute type 1 has an invalid length. [ 792.294430][T16863] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2726'. [ 792.455741][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 792.823523][T16874] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2728'. [ 793.259129][T16874] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.324750][T16874] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.382324][T16874] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.410406][T16879] netlink: 'syz.0.2730': attribute type 21 has an invalid length. [ 793.415481][ C0] net_ratelimit: 9 callbacks suppressed [ 793.415499][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 793.419159][T16879] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2730'. [ 793.424052][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 793.424280][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 793.424437][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 793.489344][T16874] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.659416][T16874] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.673575][T16874] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.687940][T16874] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.702944][T16874] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.723560][ T8628] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 794.112710][ T8628] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 794.131427][ T8628] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 794.145902][ T8628] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 794.174630][ T8628] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 794.206544][T16887] binder_alloc: 16886: binder_alloc_buf, no vma [ 794.218705][ T8628] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.242095][ T8628] usb 3-1: Product: syz [ 794.255850][ T8628] usb 3-1: Manufacturer: syz [ 794.263299][ T8628] usb 3-1: SerialNumber: syz [ 794.455500][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 794.462699][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 794.469974][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 794.477087][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 794.908467][ T8628] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 794.915966][ T8628] cdc_ncm 3-1:1.0: bind() failure [ 794.937784][ T8628] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 794.953947][ T8628] cdc_ncm 3-1:1.1: bind() failure [ 794.977266][ T8628] usb 3-1: USB disconnect, device number 74 [ 795.062470][ T30] audit: type=1326 audit(1755953437.099:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16901 comm="syz.7.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facee58ebe9 code=0x7fc00000 [ 795.152241][T16907] tipc: Enabling of bearer rejected, already enabled [ 795.495479][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 795.502578][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 795.574654][ T30] audit: type=1326 audit(1755953437.099:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16901 comm="syz.7.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facee58ebe9 code=0x7fc00000 [ 795.601695][ T30] audit: type=1326 audit(1755953437.099:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16901 comm="syz.7.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facee58ebe9 code=0x7fc00000 [ 795.689133][ T30] audit: type=1326 audit(1755953437.099:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16901 comm="syz.7.2737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7facee58ebe9 code=0x7fc00000 [ 795.933720][T16914] FAULT_INJECTION: forcing a failure. [ 795.933720][T16914] name fail_futex, interval 1, probability 0, space 0, times 1 [ 795.995828][T16914] CPU: 1 UID: 0 PID: 16914 Comm: syz.2.2740 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 795.995858][T16914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 795.995871][T16914] Call Trace: [ 795.995882][T16914] [ 795.995891][T16914] dump_stack_lvl+0x189/0x250 [ 795.995922][T16914] ? __pfx____ratelimit+0x10/0x10 [ 795.995945][T16914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 795.995967][T16914] ? __pfx__printk+0x10/0x10 [ 795.995999][T16914] ? __might_fault+0xb0/0x130 [ 795.996027][T16914] should_fail_ex+0x414/0x560 [ 795.996056][T16914] get_futex_key+0x1a8/0x1640 [ 795.996081][T16914] ? __lock_acquire+0xab9/0xd20 [ 795.996114][T16914] ? __pfx_get_futex_key+0x10/0x10 [ 795.996152][T16914] futex_wake+0xf8/0x500 [ 795.996180][T16914] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 795.996210][T16914] ? __pfx_futex_wake+0x10/0x10 [ 795.996248][T16914] ? ksys_write+0x1cb/0x250 [ 795.996273][T16914] do_futex+0x395/0x420 [ 795.996297][T16914] ? __pfx_vfs_write+0x10/0x10 [ 795.996318][T16914] ? __pfx_do_futex+0x10/0x10 [ 795.996352][T16914] __se_sys_futex+0x36f/0x400 [ 795.996377][T16914] ? fput+0xa0/0xd0 [ 795.996402][T16914] ? ksys_write+0x22a/0x250 [ 795.996419][T16914] ? __pfx___se_sys_futex+0x10/0x10 [ 795.996443][T16914] ? __pfx_ksys_write+0x10/0x10 [ 795.996467][T16914] ? __x64_sys_futex+0x21/0xf0 [ 795.996504][T16914] do_syscall_64+0xfa/0x3b0 [ 795.996528][T16914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.996547][T16914] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 795.996567][T16914] ? clear_bhb_loop+0x60/0xb0 [ 795.996590][T16914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.996610][T16914] RIP: 0033:0x7f10b018ebe9 [ 795.996628][T16914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 795.996645][T16914] RSP: 002b:00007f10b1007038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 795.996666][T16914] RAX: ffffffffffffffda RBX: 00007f10b03b6090 RCX: 00007f10b018ebe9 [ 795.996681][T16914] RDX: 0000000000800001 RSI: 0000000000000001 RDI: 000020000000cffc [ 795.996695][T16914] RBP: 00007f10b1007090 R08: 0000000000000000 R09: 0000000000000000 [ 795.996707][T16914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 795.996720][T16914] R13: 00007f10b03b6128 R14: 00007f10b03b6090 R15: 00007ffc117d8d28 [ 795.996750][T16914] [ 796.562398][ T30] audit: type=1326 audit(1755953438.599:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16922 comm="syz.6.2738" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f984678ebe9 code=0x0 [ 797.197069][T16939] kAFS: unparsable volume name [ 797.294656][T16946] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2747'. [ 797.480185][T16946] team0: entered promiscuous mode [ 797.501292][T16946] team0: entered allmulticast mode [ 797.772781][T16967] fuse: Bad value for 'fd' [ 797.922842][T16974] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 797.996588][T16977] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 798.012781][T16977] CIFS mount error: No usable UNC path provided in device string! [ 798.012781][T16977] [ 798.023659][T16977] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 798.036758][ T5898] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 798.216729][ T5898] usb 5-1: Using ep0 maxpacket: 8 [ 798.246504][ T5898] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 798.291179][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.332983][T16992] vlan1: entered promiscuous mode [ 798.349792][ T5898] pvrusb2: Hardware description: Terratec Grabster AV400 [ 798.365529][T16992] vlan1: entered allmulticast mode [ 798.399309][T16992] hsr_slave_1: entered allmulticast mode [ 798.405128][ T5898] pvrusb2: ********** [ 798.410442][ T5898] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 798.461861][ T5898] pvrusb2: Important functionality might not be entirely working. [ 798.513205][ T5898] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 798.615525][ C0] net_ratelimit: 9 callbacks suppressed [ 798.615545][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 798.628397][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 798.635713][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 798.642810][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 798.695203][ T5898] pvrusb2: ********** [ 798.711302][ T2343] pvrusb2: Invalid write control endpoint [ 798.775663][T17001] libceph: resolve '400' (ret=-3): failed [ 799.359403][ T5898] usb 5-1: USB disconnect, device number 103 [ 799.611060][T17007] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 799.655586][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 799.662642][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 799.669788][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 799.677013][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 799.708289][ T2343] pvrusb2: Invalid write control endpoint [ 799.748142][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 799.911142][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 799.941413][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 799.989467][ T2343] pvrusb2: Device being rendered inoperable [ 800.004739][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 800.080610][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 800.111077][ T2343] pvrusb2: Attached sub-driver cx25840 [ 800.126155][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 800.287724][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 800.695517][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 800.702784][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 801.824297][T17045] libceph: resolve '400' (ret=-3): failed [ 802.388274][T16469] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 802.398713][T16469] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 802.407645][T16469] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 802.418308][T16469] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 802.425934][T16469] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 802.544298][T17051] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 803.167410][T17046] lo speed is unknown, defaulting to 1000 [ 803.263398][ T49] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.276794][ T49] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 803.288609][ T49] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 803.367379][ T49] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.377703][ T49] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 803.381417][T17064] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 803.387902][ T49] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 803.469351][ T49] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.479460][ T49] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 803.491203][ T49] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 803.564466][ T49] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 803.576361][ T49] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 803.595527][ T49] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 803.709374][T17046] chnl_net:caif_netlink_parms(): no params data found [ 803.815523][ C0] net_ratelimit: 9 callbacks suppressed [ 803.815544][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 803.828797][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 804.536633][T16469] Bluetooth: hci5: command tx timeout [ 804.855750][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 804.862930][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 804.927802][T17046] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.938964][T17046] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.946710][T17046] bridge_slave_0: entered allmulticast mode [ 804.954706][T17046] bridge_slave_0: entered promiscuous mode [ 804.979330][T17046] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.995972][T17046] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.167841][T17046] bridge_slave_1: entered allmulticast mode [ 805.175480][ T9] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 805.234095][T17046] bridge_slave_1: entered promiscuous mode [ 805.451925][ T9] usb 5-1: config 2 has an invalid interface number: 163 but max is 0 [ 805.465471][ T9] usb 5-1: config 2 has no interface number 0 [ 805.505395][ T9] usb 5-1: config 2 interface 163 has no altsetting 0 [ 805.521127][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8514, bcdDevice=d8.dd [ 805.533188][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.541815][ T9] usb 5-1: Product: syz [ 805.551662][T17046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 805.561522][ T9] usb 5-1: Manufacturer: syz [ 805.566590][ T9] usb 5-1: SerialNumber: syz [ 805.573123][ T49] bridge_slave_1: left allmulticast mode [ 805.579046][ T49] bridge_slave_1: left promiscuous mode [ 805.589060][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.609649][ T49] bridge_slave_0: left allmulticast mode [ 805.625049][ T49] bridge_slave_0: left promiscuous mode [ 805.631366][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.728012][T17100] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 805.814075][ T9] usb 5-1: Found UVC 0.00 device syz (05ac:8514) [ 805.822373][ T9] usb 5-1: No valid video chain found. [ 805.830083][ T9] usb 5-1: USB disconnect, device number 104 [ 805.895879][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 805.902994][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 806.093762][T17102] netlink: 'syz.6.2787': attribute type 1 has an invalid length. [ 806.102160][T17102] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2787'. [ 806.147229][ T49] bond5 (unregistering): (slave geneve2): Releasing active interface [ 806.710092][T16469] Bluetooth: hci5: command tx timeout [ 806.869335][ T49] bond0 (unregistering): (slave bond1): Releasing backup interface [ 806.877653][ T49] bond1 (unregistering): left promiscuous mode [ 806.884744][ T49] bond0 (unregistering): Released all slaves [ 806.895012][T17112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.937625][T17112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.945805][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 806.952821][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 807.184814][ T49] bond1 (unregistering): Released all slaves [ 807.206580][ T49] bond2 (unregistering): Released all slaves [ 807.223739][ T49] bond3 (unregistering): (slave wireguard0): Releasing backup interface [ 807.234973][ T49] bond3 (unregistering): Released all slaves [ 807.267876][ T49] bond4 (unregistering): Released all slaves [ 807.287685][ T49] bond5 (unregistering): Released all slaves [ 807.311631][T17046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.534365][T17046] team0: Port device team_slave_0 added [ 807.541416][ T49] tipc: Disabling bearer [ 807.550533][ T49] tipc: Left network mode [ 807.555175][T17046] team0: Port device team_slave_1 added [ 807.673989][ T49] [ 807.676387][ T49] ====================================================== [ 807.683424][ T49] WARNING: possible circular locking dependency detected [ 807.690468][ T49] 6.16.0-syzkaller #0 Not tainted [ 807.695584][ T49] ------------------------------------------------------ [ 807.702607][ T49] kworker/u8:3/49 is trying to acquire lock: [ 807.708571][ T49] ffff88803445ce00 (team->team_lock_key#2){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 807.718181][ T49] [ 807.718181][ T49] but task is already holding lock: [ 807.725545][ T49] ffff888028bb0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 807.735906][ T49] [ 807.735906][ T49] which lock already depends on the new lock. [ 807.735906][ T49] [ 807.746297][ T49] [ 807.746297][ T49] the existing dependency chain (in reverse order) is: [ 807.755315][ T49] [ 807.755315][ T49] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 807.763072][ T49] lock_acquire+0x120/0x360 [ 807.768098][ T49] __mutex_lock+0x182/0xe80 [ 807.773129][ T49] ieee80211_open+0xed/0x1f0 [ 807.778255][ T49] __dev_open+0x470/0x880 [ 807.783114][ T49] netif_open+0xaa/0x170 [ 807.787876][ T49] dev_open+0x125/0x260 [ 807.792553][ T49] team_add_slave+0xb36/0x2840 [ 807.797840][ T49] do_set_master+0x530/0x6d0 [ 807.802961][ T49] do_setlink+0xcf0/0x41c0 [ 807.807901][ T49] rtnl_newlink+0x160b/0x1c70 [ 807.813093][ T49] rtnetlink_rcv_msg+0x7cc/0xb70 [ 807.818559][ T49] netlink_rcv_skb+0x205/0x470 [ 807.823848][ T49] netlink_unicast+0x75c/0x8e0 [ 807.829131][ T49] netlink_sendmsg+0x805/0xb30 [ 807.834420][ T49] __sock_sendmsg+0x21c/0x270 [ 807.839613][ T49] ____sys_sendmsg+0x505/0x830 [ 807.844898][ T49] ___sys_sendmsg+0x21f/0x2a0 [ 807.850092][ T49] __x64_sys_sendmsg+0x19b/0x260 [ 807.855552][ T49] do_syscall_64+0xfa/0x3b0 [ 807.860575][ T49] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.866984][ T49] [ 807.866984][ T49] -> #0 (team->team_lock_key#2){+.+.}-{4:4}: [ 807.875155][ T49] validate_chain+0xb9b/0x2140 [ 807.880436][ T49] __lock_acquire+0xab9/0xd20 [ 807.885624][ T49] lock_acquire+0x120/0x360 [ 807.890636][ T49] __mutex_lock+0x182/0xe80 [ 807.895651][ T49] team_del_slave+0x32/0x1c0 [ 807.900756][ T49] team_device_event+0x285/0xa20 [ 807.906208][ T49] notifier_call_chain+0x1b3/0x3e0 [ 807.911834][ T49] unregister_netdevice_many_notify+0x15d8/0x2320 [ 807.918766][ T49] unregister_netdevice_queue+0x33c/0x380 [ 807.924997][ T49] _cfg80211_unregister_wdev+0x165/0x590 [ 807.931151][ T49] ieee80211_remove_interfaces+0x49a/0x6d0 [ 807.937471][ T49] ieee80211_unregister_hw+0x5d/0x2c0 [ 807.943365][ T49] mac80211_hwsim_del_radio+0x275/0x460 [ 807.949428][ T49] hwsim_exit_net+0x584/0x640 [ 807.954620][ T49] ops_undo_list+0x497/0x990 [ 807.959727][ T49] cleanup_net+0x4c5/0x800 [ 807.964663][ T49] process_scheduled_works+0xade/0x17b0 [ 807.970721][ T49] worker_thread+0x8a0/0xda0 [ 807.975824][ T49] kthread+0x70e/0x8a0 [ 807.980408][ T49] ret_from_fork+0x3fc/0x770 [ 807.985511][ T49] ret_from_fork_asm+0x1a/0x30 [ 807.990795][ T49] [ 807.990795][ T49] other info that might help us debug this: [ 807.990795][ T49] [ 808.001010][ T49] Possible unsafe locking scenario: [ 808.001010][ T49] [ 808.008455][ T49] CPU0 CPU1 [ 808.013906][ T49] ---- ---- [ 808.015519][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 808.019249][ T49] lock(&rdev->wiphy.mtx); [ 808.026337][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 808.030583][ T49] lock(team->team_lock_key#2); [ 808.044872][ T49] lock(&rdev->wiphy.mtx); [ 808.051893][ T49] lock(team->team_lock_key#2); [ 808.056834][ T49] [ 808.056834][ T49] *** DEADLOCK *** [ 808.056834][ T49] [ 808.064971][ T49] 5 locks held by kworker/u8:3/49: [ 808.070070][ T49] #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 808.080967][ T49] #1: ffffc90000b97bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 808.091500][ T49] #2: ffffffff8f4fd310 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 808.100826][ T49] #3: ffffffff8f509f08 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 808.110669][ T49] #4: ffff888028bb0768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 808.121459][ T49] [ 808.121459][ T49] stack backtrace: [ 808.127346][ T49] CPU: 1 UID: 0 PID: 49 Comm: kworker/u8:3 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 808.127367][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 808.127380][ T49] Workqueue: netns cleanup_net [ 808.127405][ T49] Call Trace: [ 808.127414][ T49] [ 808.127423][ T49] dump_stack_lvl+0x189/0x250 [ 808.127446][ T49] ? __pfx_dump_stack_lvl+0x10/0x10 [ 808.127464][ T49] ? __pfx__printk+0x10/0x10 [ 808.127486][ T49] ? print_lock_name+0xde/0x100 [ 808.127515][ T49] print_circular_bug+0x2ee/0x310 [ 808.127538][ T49] check_noncircular+0x134/0x160 [ 808.127560][ T49] validate_chain+0xb9b/0x2140 [ 808.127582][ T49] ? bpf_trace_run2+0x186/0x4b0 [ 808.127611][ T49] __lock_acquire+0xab9/0xd20 [ 808.127629][ T49] ? team_del_slave+0x32/0x1c0 [ 808.127651][ T49] lock_acquire+0x120/0x360 [ 808.127665][ T49] ? team_del_slave+0x32/0x1c0 [ 808.127689][ T49] ? __mutex_trylock_common+0x153/0x260 [ 808.127711][ T49] __mutex_lock+0x182/0xe80 [ 808.127730][ T49] ? team_del_slave+0x32/0x1c0 [ 808.127752][ T49] ? rcu_is_watching+0x15/0xb0 [ 808.127773][ T49] ? team_del_slave+0x32/0x1c0 [ 808.127795][ T49] ? __pfx___mutex_lock+0x10/0x10 [ 808.127814][ T49] ? bond_netdev_event+0xd9/0xe80 [ 808.127840][ T49] ? __pfx___mutex_lock+0x10/0x10 [ 808.127858][ T49] ? __pfx_bond_netdev_event+0x10/0x10 [ 808.127886][ T49] team_del_slave+0x32/0x1c0 [ 808.127910][ T49] team_device_event+0x285/0xa20 [ 808.127927][ T49] notifier_call_chain+0x1b3/0x3e0 [ 808.127950][ T49] unregister_netdevice_many_notify+0x15d8/0x2320 [ 808.127977][ T49] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 808.127998][ T49] ? __lock_acquire+0xab9/0xd20 [ 808.128023][ T49] unregister_netdevice_queue+0x33c/0x380 [ 808.128042][ T49] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 808.128063][ T49] _cfg80211_unregister_wdev+0x165/0x590 [ 808.128089][ T49] ieee80211_remove_interfaces+0x49a/0x6d0 [ 808.128109][ T49] ? __pfx_synchronize_rcu+0x10/0x10 [ 808.128130][ T49] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 808.128149][ T49] ? rcu_is_watching+0x15/0xb0 [ 808.128170][ T49] ieee80211_unregister_hw+0x5d/0x2c0 [ 808.128197][ T49] mac80211_hwsim_del_radio+0x275/0x460 [ 808.128224][ T49] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 808.128254][ T49] hwsim_exit_net+0x584/0x640 [ 808.128276][ T49] ? __pfx_hwsim_exit_net+0x10/0x10 [ 808.128298][ T49] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 808.128325][ T49] ops_undo_list+0x497/0x990 [ 808.128350][ T49] ? __pfx_ops_undo_list+0x10/0x10 [ 808.128377][ T49] cleanup_net+0x4c5/0x800 [ 808.128400][ T49] ? __pfx_cleanup_net+0x10/0x10 [ 808.128423][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 808.128438][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 808.128455][ T49] ? process_scheduled_works+0x9ef/0x17b0 [ 808.128474][ T49] process_scheduled_works+0xade/0x17b0 [ 808.128508][ T49] ? __pfx_process_scheduled_works+0x10/0x10 [ 808.128533][ T49] worker_thread+0x8a0/0xda0 [ 808.128562][ T49] kthread+0x70e/0x8a0 [ 808.128584][ T49] ? __pfx_worker_thread+0x10/0x10 [ 808.128601][ T49] ? __pfx_kthread+0x10/0x10 [ 808.128623][ T49] ? _raw_spin_unlock_irq+0x23/0x50 [ 808.128638][ T49] ? lockdep_hardirqs_on+0x9c/0x150 [ 808.128654][ T49] ? __pfx_kthread+0x10/0x10 [ 808.128675][ T49] ret_from_fork+0x3fc/0x770 [ 808.128692][ T49] ? __pfx_ret_from_fork+0x10/0x10 [ 808.128711][ T49] ? __switch_to_asm+0x39/0x70 [ 808.128730][ T49] ? __switch_to_asm+0x33/0x70 [ 808.128749][ T49] ? __pfx_kthread+0x10/0x10 [ 808.128770][ T49] ret_from_fork_asm+0x1a/0x30 [ 808.128798][ T49] [ 808.631737][ T49] team0: Port device wlan1 removed [ 808.776025][T16469] Bluetooth: hci5: command tx timeout [ 808.871054][T17046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.893810][T17046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 808.961567][T17046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 809.019544][T17046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 809.032655][T17046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 809.095613][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 809.102615][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 809.111093][T17046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 809.293028][ T49] hsr_slave_0: left promiscuous mode [ 809.309488][ T49] hsr_slave_1: left promiscuous mode [ 809.325926][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 809.333417][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 809.342406][ T49] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 809.349538][ T49] batman_adv: batadv0: Removing interface: virt_wifi0 [ 809.360493][ T49] veth1_macvtap: left promiscuous mode [ 809.366080][ T49] veth0_macvtap: left promiscuous mode [ 809.371650][ T49] veth1_vlan: left promiscuous mode [ 809.414006][ T49] pim6reg (unregistering): left allmulticast mode [ 809.531732][ T49] team0 (unregistering): Port device team_slave_1 removed [ 809.542917][ T49] team0 (unregistering): Port device team_slave_0 removed [ 809.700690][ T49] team0 (unregistering): Port device dummy0 removed [ 809.757550][T17046] hsr_slave_0: entered promiscuous mode [ 809.763725][T17046] hsr_slave_1: entered promiscuous mode [ 809.769899][T17046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 809.777573][T17046] Cannot create hsr debugfs directory [ 810.063949][ T49] IPVS: stop unused estimator thread 0... [ 810.099404][T17046] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 810.108798][T17046] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 810.119858][T17046] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 810.128979][T17046] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 810.135858][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 810.135986][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 810.190272][T17046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 810.204583][T17046] 8021q: adding VLAN 0 to HW filter on device team0 [ 810.218263][T15773] bridge0: port 1(bridge_slave_0) entered blocking state [ 810.225421][T15773] bridge0: port 1(bridge_slave_0) entered forwarding state [ 810.237404][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 810.244513][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 810.359967][T17046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 810.390464][T17046] veth0_vlan: entered promiscuous mode [ 810.400101][T17046] veth1_vlan: entered promiscuous mode [ 810.421578][T17046] veth0_macvtap: entered promiscuous mode [ 810.430225][T17046] veth1_macvtap: entered promiscuous mode [ 810.443298][T17046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 810.454688][T17046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 810.466983][T17046] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.477072][T17046] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.486149][T17046] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.495340][T17046] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 810.521094][T17046] ieee80211 phy28: Selected rate control algorithm 'minstrel_ht' [ 810.541527][T15772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.543103][T17046] ieee80211 phy29: Selected rate control algorithm 'minstrel_ht' [ 810.551311][T15772] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.573962][T10074] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.582767][T10074] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.855518][T16469] Bluetooth: hci5: command tx timeout [ 811.175701][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 811.182691][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 812.215432][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 812.222428][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 812.937426][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 812.943747][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.255559][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 813.262558][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 814.295445][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 814.302459][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 815.335602][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 815.342612][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 816.385412][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 816.392380][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 817.415662][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 817.422725][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available