last executing test programs: 25m44.788986476s ago: executing program 32 (id=289): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2b, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x1, 0x2f, 0x0, 0x0) 24m18.786613031s ago: executing program 33 (id=625): r0 = socket(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) mkdir(0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) chdir(0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) io_setup(0x9, &(0x7f0000000140)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x96, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) syz_emit_vhci(0x0, 0x0) recvmmsg(r0, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x20000000, 0x4000000000003, 0x2, @thr={0x0, 0x0}}) 19m23.064437901s ago: executing program 3 (id=1757): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000035c0)=@mmap={0x4, 0x5, 0x4, 0x10, 0xd535, {0x77359400}, {0x4, 0xc, 0x9, 0x1, 0x8, 0xf0, "a70ff65f"}, 0x9, 0x1, {}, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@enum={0x3, 0x0, 0x0, 0xf}, @struct={0x4}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x35, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c010000160001000000000004000000fe8000000000000000000000000000aaff01000000000000000000000000000100"/60, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0005000000000000000000050000000500"], 0x12c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$key(r3, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x8800000) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x578410eb) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$TCFLSH(r7, 0x400455c8, 0x20000000009) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000005c0)=0x2) 19m19.758688711s ago: executing program 3 (id=1769): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="6875676500046c776179732c6d706fad9a458d5630823d696ea60a3f117416"]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x27, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffed850000006d000000a50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x181000) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r7, 0x0, 0xfffffffffffffffc}, 0x18) prctl$PR_SET_THP_DISABLE(0x29, 0xdffffffffffffffe) sendfile(r6, r5, &(0x7f00000000c0)=0x8e, 0x180000504) bind$bt_sco(0xffffffffffffffff, &(0x7f0000000080)={0x1f, @none}, 0x8) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000300)={0x10000, 0x4, 0x8d}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r8, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) 19m18.475813647s ago: executing program 3 (id=1772): syz_usb_connect(0x0, 0x6b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d22a6640da0320b3e712000000010902590001000000000904000000ef0401"], 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x2f, 0x6f, 0x1, 0xc1b, 0x6c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x20}, 0x40, 0x700, 0x10000, 0x3}}) r0 = socket(0x200000100000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = dup(0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$UHID_INPUT(r2, &(0x7f0000001040)={0x18, {"a2e3ad21ed6b0af99cfbf4c087f74f9b36096eff7fc6e5539b9b18098b9b4a1b2352091b080d29428f0e1ac6e7049b3468959b189a242a9b60f3988f7ef319520100ffe8d178708c523c921b1b25380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441984cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f236c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r3 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000000740)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\\\x14///\xff\xea\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0) write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000340)={0x18}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 19m11.976062901s ago: executing program 1 (id=1785): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(0xffffffffffffffff) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) timer_create(0x0, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000040)={@host}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800c0001e7006d6163766c616e003c0002800850a20dcd0000001c0005800a000400aaaaaaaaaabb000002000400d8928afb702800000800030003000000180004", @ANYRES32=r4], 0x74}}, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x2000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f0000000000)={0xdddd1000, 0x4000}) 19m11.859554244s ago: executing program 3 (id=1788): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) fsopen(0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x28011, 0xffffffffffffffff, 0x1000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) 19m11.802406557s ago: executing program 3 (id=1789): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1ff}, [@tail_call]}, &(0x7f0000000400)='syzkaller\x00', 0x83ba, 0xaa, &(0x7f00000005c0)=""/170, 0x41000, 0x12210e9ab1c2cbf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x1, 0xb, 0x0, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000b80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x6, @void, @value}, 0x94) r0 = inotify_init1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_io_uring_setup(0x110, 0x0, &(0x7f0000000440)=0x0, &(0x7f0000000000)) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0xa8882) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000180), 0x2001888, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r6}}) openat$qrtrtun(0xffffff9c, &(0x7f0000000140), 0x30b241) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_mr_cache\x00') preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0x10d}], 0x1, 0x4b5, 0x0) r8 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x1c, 0x0, &(0x7f0000cab000)) write$vga_arbiter(r5, &(0x7f0000000000)=@other={'lock', ' ', 'io'}, 0x8) write$vga_arbiter(r5, &(0x7f00000001c0)=@other={'decodes', ' ', 'none'}, 0xd) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) io_uring_enter(r2, 0x37f5, 0xb5c7, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000440)='.\x00', 0x12000021) r9 = dup(r0) read$FUSE(r9, &(0x7f0000002280)={0x2020}, 0x18b5) 19m10.852263539s ago: executing program 1 (id=1796): socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000035c0)=@mmap={0x4, 0x5, 0x4, 0x10, 0xd535, {0x77359400}, {0x4, 0xc, 0x9, 0x1, 0x8, 0xf0, "a70ff65f"}, 0x9, 0x1, {}, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@enum={0x3, 0x0, 0x0, 0xf}, @struct={0x4}]}, {0x0, [0x0, 0x0, 0x61]}}, 0x0, 0x35, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c010000160001000000000004000000fe8000000000000000000000000000aaff0100000000000000000000000000010000000000000000000000000b00", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0005000000000000000000050000000500"], 0x12c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$key(r3, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x8800000) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r5, 0xffffffffffffffff, 0x0, 0x578410eb) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$TCFLSH(r7, 0x400455c8, 0x20000000009) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000005c0)=0x2) 19m8.284228645s ago: executing program 1 (id=1800): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x8042, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=ANY=[@ANYBLOB='lock io'], 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) write$vga_arbiter(r0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0xb) 19m7.095162034s ago: executing program 1 (id=1808): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f000006f000/0x3000)=nil, 0x3000, 0xb71d609d9bbbfa04, 0x2010, r0, 0xc5c6f000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) madvise(&(0x7f0000031000/0x3000)=nil, 0x3000, 0xf) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000080)=[@window, @mss, @window, @window, @sack_perm, @timestamp, @mss, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008004400", @ANYRES16, @ANYRES8=r0], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 19m5.995184678s ago: executing program 1 (id=1811): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000004000)={0xf, {"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", 0xfffffffffffffe59}}, 0xfa) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000011540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r6, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="25b096f681cd731c3f3a9badc4e3cf5edeae1f3b5082d7ab3a97c053df68744e7c7e24d0b59997bab4bccff8363b275de3510b0ebe4275d8d2f153395668e3d608e358fc2294263c03f8dc4f8bf194e4fde4600a2dec2f483a914e2fde0cbc344a2b9fc18dd198966045a6d4d4eb8571e8bb69e6724e37fcbaa6e4c64050b47256b9bb17f5c0aa5101e015ecdcb62fec46fc0205512535", 0x97}, {&(0x7f0000000280)="d3a88bea5916e313729a3989393caca70c74cd74e62e524bdd37be131ad827f911027e70ccf679d8e7c0cd3333095f83d6d473db345ded2ac8acaa87503de74c82431758e8e11e3ecb7bce02d6cd65f4eb88cc49ceb9e39f7117eb0f62323dc9b80dea447b0c96a383f14281bb87b09de0a6153ceeaae2b50a2b0f0f41810f379f9c3a1f3938461829d716a4bda86ab11b41f754bc15d71b", 0xfed0}], 0x2}, 0x0) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r7, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="180000001400010000008000000000001e00040001000100"], 0x18}}, 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) write$binfmt_elf32(r8, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r10 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) fsetxattr$smack_xattr_label(r0, &(0x7f0000000240)='security.SMACK64\x00', &(0x7f0000000380)={'/dev/sg#\x00'}, 0xa, 0x2) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) 19m4.427903935s ago: executing program 1 (id=1812): syz_usb_connect(0x0, 0x6b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d22a6640da0320b3e712000000010902590001000000000904000000ef0401"], 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x2f, 0x6f, 0x1, 0xc1b, 0x6c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x20}, 0x40, 0x700, 0x10000, 0x3}}) r0 = socket(0x200000100000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = dup(0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$UHID_INPUT(r2, &(0x7f0000001040)={0x18, {"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", 0x1000}}, 0x1006) r3 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000000740)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\\\x14///\xff\xea\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0, &(0x7f0000000000)) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0xa8882) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000180), 0x2001888, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r6}}) openat$qrtrtun(0xffffff9c, &(0x7f0000000140), 0x30b241) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_mr_cache\x00') preadv(r7, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0x10d}], 0x1, 0x4b5, 0x0) r8 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x1c, 0x0, &(0x7f0000cab000)) write$vga_arbiter(r5, &(0x7f0000000000)=@other={'lock', ' ', 'io'}, 0x8) write$vga_arbiter(r5, &(0x7f00000001c0)=@other={'decodes', ' ', 'none'}, 0xd) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) io_uring_enter(r2, 0x37f5, 0xb5c7, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) inotify_add_watch(r0, &(0x7f0000000440)='.\x00', 0x12000021) r9 = dup(r0) read$FUSE(r9, &(0x7f0000002280)={0x2020}, 0x18b5) 18m48.300381908s ago: executing program 35 (id=1812): syz_usb_connect(0x0, 0x6b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d22a6640da0320b3e712000000010902590001000000000904000000ef0401"], 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x2f, 0x6f, 0x1, 0xc1b, 0x6c, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x20}, 0x40, 0x700, 0x10000, 0x3}}) r0 = socket(0x200000100000011, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, &(0x7f0000000300)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = dup(0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$UHID_INPUT(r2, &(0x7f0000001040)={0x18, {"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", 0x1000}}, 0x1006) r3 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='source', &(0x7f0000000740)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\\\x14///\xff\xea\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) mount(&(0x7f00000009c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000a00)='./file1\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, 0x0) 18m27.181330044s ago: executing program 7 (id=1898): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006280)="382c1fedaf023bd55640c316e44c011327f97924e5d5aac258e1e9fcc3cffdcf5f122c531cfa765707f6a50737c263545180dc10a69056b9deca02cc4be9d32a61c296609f783cc29340d5b7cc6e5131f7f51a47ab78febd6816a0659e028b99ace9ba3d1e8fee7949b4aa018ab813ce9e82da65eb7726cbd554a005b10415c9cba49179d75c558fda1e000eb35a5a9ac6bb7f4748e7bc56bcfd6d4d4cd1efef20d8b6a6deeddef38571289bb76f4d360bf36976244ebdc1533c2a4137d908165f48676b9f836aa2dc55d88579b908e91021b240cd64df75c16b643d8ef612fcfcbe064e4f404c1d82cd562b1d998dc3880cea8c973035b67b0b5e6d258b883bf936a731fccd463755a2720052b27cdd6bb8aff9838e88d993631288c2724aa377c977df238ca6061091da4b303a59472aadb97f44850c5eb4cf20b8a03a48b836c55b065e98f8ebd5c270483864c5f34862bd223e5df209b0cdc2fa4ea718b186d7c7716532af6b1d8ebc1eca23b7d2439340f1b906ad0aab6cbf0c7e716f8b6e26168e53ce83211a69048e2fa208ce49e4fa75db7adcd1954e72bd926529cbd2919f55d12cea56ac71729a7c3c31bfd05fd646f36e1e093bbd76038b9aa43536e2320415f7e44df57a3f3da057020f4a4032dc2f5dd6b9215af91917abfc0247817536762693a405908267bbcf16f24cada76f604933970c4dc6acbcac02df7a6bddd993336a226890081aea7b782f56bc0f3c334923a524f189fa13ff6f91c3e2f9bea34899e4e883e97a1debe3b192940c383b93174a330c0d2467ec845d8c14184c89c3980b042078a03e394f96ca8deea0c31d19c7687ff60c1013e7fd1f674f6d247933484a73e4a7474fba3fabfffcac470ff5084d068b7feec8f316e570e65dec305db4005173f7cee2c6c10c4b36bc1ea98862eb1c36507803cc6a91df4499ee183d6f126b063f2be49721c0edd84acdcfea536c4cd6119d08d6dea98b9cf4d5e2e868bde6be00bb9f6843b711481e7b3cc2b9a29580f042b620ceb4dbba0a3984edb1d82268ad737146c3bec6c8be1e327c4fa172ddce39aabe36ca0254855d3e3cb90835e87e1c0ae20dd2e4e2012851f5be5e92d23ff4f292d877be28afbf9eebfffbfc7602b41ce880b27622c62382be5a504dc077702fe7e06f99e35b7888b099178a372abdf4b00d6976a0af7cbe791416628e9e2bc67448cd72bfea6d0a546f6ada8049be8df153b6ce60d3fbad52c6ac5dfca71992f2310922df1f39ed1606992752bcb947101ec49fef2be2f88e118421091431179bfc876851955416955d245b646fb43df614cc4f0282f7e022ed3dd46654e644961df8875f3d7d7d3b07e2296aa13455db1a71e97d56fa82ec94d47df23d722b2bd76acd9f9becff5ddd23a724af924b856ab3ae509685155682ff4bdffb139d3c19545d1c9aea088828c1140d5a0b6b698f96a04948f47b4777767e387419c03f19ef05e8f7f90c9fea399dd07297f701dc19aa9b570d96570d59f5158eaeb01e300127ac98edb726c3ead2b57c478621348d160943a5ac1fbde6de36f3d7bfd32a78475033e3e7e1e1a51f7d781aa4f6cb05dcaef23390b07960f3d594482d1fb435af8d031b94923b4a95d71a92fc4385c6155a1bb251374912a74bb9a93ea49c32dceb79ee7b039332fcc2474d80ae668a750914b26eddfedc1b6775829c3b167c1bbc27fc2a286c61217baea3a084411df433a64d7385880e6da85869286bc08a584769875837ede54874c11f38ed3722a18abd45746149fa59f79db25fb51649f7483faec28569ed058a0bdfaabefc062ca8ea6ad45bf5759725aa62e249131b33951e2bdce3055d357ff3138204f62b37236434bcc54180ba8e1329b8c5b6b7d4b5d5dbfa473030c2a289fff573ddf7c9e5cbcb6907c836c8a1ee2605bdec36e29c6681e16628f2cf5c53fdbacca60e5a497885d8a53f74775e716aac7d6e8a2d8c6e901f8fab75d7f689b031add22a5776b186d9efe3890b0d48497addb21ea971d3a463eb4fd44ad209ae5a4b0e13d28c6838689019f5c09bee0ec2c97bd8495f761f07de47d85c64250373eff1e5dcefb8d44ff1d5ca5dc9954096d18d64fc146d93647a1fb0612962a07946305f7a8329611569bb0fee5ca5d9bb3574a07336dfd4dbd185a55fc9acdaa97481664c7a3f1fd0afc23d545a704f76c8b684656a2567a5dc3d1ee0385a003dfcbbfc988990a11871b8825073f11f3e596ec4cbd310649299e9e9a569215eae227964086a3aeb327c477b10bdb6263c0ec83a1364d0d45392c8dc4322ad5a9095548c7f2a90e2c858dca72a4376133dd3bcabf752428424c3dfdd45eaf6686c88971825849905e82de9a18a65a539cf61affad7f06368ac9cdab53e8754cf6bae6ac927ec177fc320d22d0b3da9c88284c45563066f4f194a35387238b592048dcf58873c9307cf803e3badf0ad53222825a172e00a4c678b3b6aa1785c92841b98a3be17c6becbae8dc6fc1bd3a14516780c4bf372a565a89cb8d136aa268721bfe9a988e94eb2d9ada00cd44b4815bff09d2273776a483d10e4b902fe10d3b7e5abb70bb899ed2eebabc739a2826cfe8613430210e8d9055600f61293290c767c104e881985c5db9442e0421c8013c46c70ac4719fc709b6a4d061b9d61e43914f4e2fdcea52f49086001ee848fa3a3b187229e556dc6cdb612261e57f81833fff4cf5b87fe4a6644996b5813af2e223f6bcdfa60934d195dab4413659aadac5879e0a2bbcd7074d2a2572cad5a8c57e54c658d6ef8e5ec12a18a5e3b639528931f9edb8b48f558beac97e4a361107217fde4f6cdb3977bf6153137a0de01f4537d172466e33c4a144678eac1d66f3739421592bb29aa1a82d79905c92ded53294b99b32bda357f9e5c54c0446cef03f9094920a8f12cf9b20a0532d8bf3807a5cd8cda48c65c1d076ead4f4294e2611be2bf259f1c130ddf4dd529d91bc89c5e00976d6426529515455d9beb4e5e8017f0462e5df4564b80f30c8d1dc5f5952bb8ebec67e9ac32d9bea7766b13299bbd795e086574826d67e8995ceec28b5e9f4910b2406dde7e4f0785173d955186f8cac8e0bf1998334fe9038cb6c1d2a78748d608e6931094946d69fa39a1a975e76cddb0760e5f385116c504863df0e0e46577f56f3651c2933de50072783752d48b72e160b00bd43504968e4c10eaa78b3d817efbb5e0801c807ad6706f40b0ee2a6d7b8c1380160052cdccb92d85da00612f2c117f4a7c478d1542ce4bb2b1a98d51080244256bb81195095249fabf5c8145dd2877726a3460fab386fae85ea817ae9727af519788a9e609e2c7af7b05dafa86e46acaa0d4db68a8ca1f3141a9a9f30913c9cfee4ee77b07c173701e6ac1782f7c0fcd04ec8dc857d63385e5334d2c6257b026bd1693c1a5873fcb0f47758516a252a36d192e223bde5ac01172e34b219b1973357f46191841490cce974753e16585f52c76302c1f0dca863e173490ef04562f7be29a89075b1edbbd6aca69ac55a657679853044a932ae0a1680703cd63360408d5b95b3cf88aac3647a4e7f9e0aa164f6ea15caa3d7a322a135838e21148ce3e2c6094df711e1b9929cecd2849fc8853b9577e7b2746856b2765ee9d25f76c5c1dd2eb50a6637445d14769dd50f89de41750f5386b62bb11bc40771290bff2688066979a9287ef3bdbc03c147a63fa65de0093a8e051fee9bd1b6cb6b08e854d786de031d5b7725b8c425d1fe449496e4ba2a7c074b1776a27b3e12120a909800ff2c0a0170e3a2ab3bf287428b3ce2e2cc4e2033a69a1e7f2079a2433b65f82baee57fc56a7f61e120951af47eeae897bdce10567a0ca23bedd75b0d5bcd1762082bd49e50260b1f70321f8d9b189093a8911f41b85ba9837c9d2ce20d714bf5031aff30c1e8980eb78b9443b42b4540f5bd199d24a11a4000f85a61378dd6639712e136b0f22ba72e9611e7622dd63ab955ace811a940205067f4436a835d9697e5c05b9172769d09f5b5ed476baff9a02d25ec9ddb649d14329c98d5cccd3e8aede4148560a464f3ebf72c871400ee9fb3c080ad237de65483cc828fb7afab7accd4cd6662cfe4aec487e36fb0acdda8dafae7d87691be9de4b606409b4017fe0acfa096e70d3eb6c910a9892133ee009a5469aff6de342615650237a4b56d713cec4cbe9e4a6c1ec8e7e8ffd56335d2396221b88e9a0c80612647917dcfc70f7e4a379d7be34e4370df2bfa3c1be04e8da937c6be893ff236578a8006ea09cfb2f9834e695010ebddf7521c3452ded726d8e4ecd30fc64369a555daf78339a297312e3de18a8ec54f0ea2c08a5539666913bddf24e3aee03d96675a69dc0fe359db6ed5cd8ffcc6fb3d5ea8e10cd2c6ec8f0309ab88f70d46cbe94d97e8fb9f63fcae87614fdedb83d0974a4ab3a7444591cbc7b801d9f8720d0bb97af6c6f7ddbae27266c60ad327085c5b04e33523628f5925bd15364398a6d76a257289fc6dd5512f1cd3a6352bc9b5801edcb517519185dc57f2c14627f21c98afb94a477a437cd8a3a48a37e76d1b31ddf29576abcaf16c9d2a2c22ea33e0c144bcfa13d556cda8de376e22625f7aec285289f18b75855f041e6e8c6582e9bc923d0b1c488f1a2b7969b5327978d2c762e9a657fff6902d5cd8708a8e1132b8146001b456ec33645ec4205b6e6e1430c38f3107c2fdbb3ad02d6856104c6a7fe7fc6d654af773e3da3453d0ffbb217feafd7490f2ab83ca7f50fc89f3ed3adff4e61ffdb62d50fb91ba4072a18a800492d8eea8a8f1114f91b150c725f5082520ae5aca257c42cdf35f30700a697f299fa5b02ca4c5cc8bb2972672c76a72efb89b8b1ae3ce10cb9c5a1f3bf975ee430a2f22a7124a733c83a9e7e8c1c49f824d4d57a30b7626e670ccf6ad3d547930a99e48fe17fae0a0568a090df479ecd2d1897d625b7921543c81d8e0badd93917e2265c50ecd2f343a9cc542d86890062c305084b12c1c6c6c32c5379d0f0c1af0703d9560b23f1109bd8fcaa77bb0777cd06ae3344ca53e67c8f749627711182b4a323b267894c1fe5b549181b60f92008a9eaf520a8b372e2e60e9353c46a68bd83aeb0e82ce226d1a268a288a3b3869f4bd279a85e9ed1a803cda7155f97f22c3bd36c6ab0a33fb57fdba1807557797dc8b85e9d73ef2da20769fd5d8b5928a6a14b3dde35b77b1924f6e0671b3d9059f9909f8139b9a0baf5e21a0161363ec9b6277a9e6c7bc5483575607d2c3762bf5be86a3c0d1e47c62856bb9691eea45f491ad34c73ddee85ac578ba491de427709626b8fa6d5766615d301650d4f1b606acefe1a49ede6972c561878237c913f81ec39a6ffc4c17e0c1f10c9de8aed2e157a22636f8646f3d78fd29b9a7bbc43ab7b7e8ed9ad2c583e57727b2bd9e7a124706ae25b9326883fbd18d534865c5155e1781e42173095c8db6e0fc9237e48a7c1a24d7698f458caad66c1ef8d8e386e4737a18be478c124ca0030b41ae22104cbd1e2aa336c59b0acafbb40e0def248804230a0f59082bb35c183c482906c8d45e73a5020f10428696dc4048ad8ee7cf5fbb41c735ac05633f1937e1aec67a309ba58bde0afb0829520eeae6084a0c8928950ad25966950608e087e7565f1aae5787b5107395dd39bb50c18e3f8890bec7298795213e28cadfd22972bd99e7ad3aec85762fee9ce414aa89308d8d412190adf2703b2888aebee775d531e846af311e1dac7ff5ffc993c5ac2035fc3a8453184d2d692155eaa641a2fa415a0d38dfb2d99de15cde91e9e104859f17e784a27fcf79e5c43174a6af10f4b6882ada6ce4b1285c0fdeaf661f80f2be78351f3d363143c5c21ac447d57829e949212c5525a939b7f51bece42bb372ce7e8cf370f9c3591b0fbce47d420ccc3958116fbe8cc7dbfdb45cbd350227ce48a395782668fedc203d812bbbc322f6d475b9d2cdd28964344fd29f9bb954704ba383a1db119f68f89b37d2aaa7f86a18dbf7435fc39f3eddb1644f2e10460f8f32ea90983eb6b7ea941c6d0f94165408999d548caa84ff46c38d86d1419602784d22e1a54e881f71df4cbe943acded1d18ffb8db8765bec4be8feea691aafbf137a6cd42f1fff228e27b6b82fcd486663a8dd7c91a562c05b3e6de94ef6f8711c1e023e1ca2020f452ba0ea83ac5f64ba5c4c766471eade35889930c38e6ea18ae96fe74dcd0fd304cc1cfac04082fd59fcfd735742e95b2f33b07fe018d23ee2400d91532b08bff3bea8304a6e941fcd0c58391a6a2f5c1aefb9e61c08a62914eb638f192ae3ad55a3203ae31945fb2d32fafad0dc28e11bce85797cacbfbda6b6a3d4ce680c0f0569c8292970b02926be030bff5c4d62e93a5f2ce6eb606494d640b6669c2f8370964c0676a586f06480739043d30c5d83d1aa3395fecc3d2f068fd0fde71baab4c26bca0192334c8e28dbe97212c931a8a089ebd7f10d63729a2185dd669cf2569c498cf2e89014b1bd60e44f8026397f61c36bc447b040ef6e944f140bf876a3e8ec6a0ce521d20f96f2b106740400f9136ceb9217b43839cc7557568b749d66bf7488a720e18d25f5dc81c928950e32006558558243e2c002422ef729197c718ede15990fbde8dfb5cd08beec0a1e8cdcdd474193c7869e4556803511088c9f323924d82c540fabc29231da2cb0a4aa3f998232f3452d7e7e26ce5de5198403c71203d0ff4a544fb97bf52f61038b61c4370be5619c9711f5f613a735edfd5eb881344cb2aef5e6aad12983e35c0ac93b6a9d29f2891129bc03da2030960f35958c6766c46b1498cc326cf8942b60a7debb27604897ee84c8458d0368a152e425ca346b5e929a22e6cf1dbfd15377089b8e2a9052e084435ac7e3d0bafecf7a4532bdad29883adac4b75ff764ff64ae7b5600836c0ca5a43eb0469a886c21f4c4fcaf9771e985c8355a2dcdb178c08664a9dda356e0f50791c90ba0c94a2336e8b995259de8a68a9d7ed4d35aea75bbde772c0b9281d907e2f4eaabc1fc4f492dc761f3a1f881e2eabcbbf120f03e143962fcb247cddff91ba9dffee9ffb471c73a59c2b5f19e297cf27d10474049b8b446f31ba33e2d955d4acf213720f7490af581797a806aa46a2e107dd79108ed179e9e3cf3dbc3e14939eb546690b1adea764db66fedb74424b6d4b64911b1ddbb0e0913268211ca3ca100d504a330ca7008e5981071bdac88d445e950cb8b8d4451b020ccc22670639d36baee55c30d55a204cf17434504b7eb0ab7dc1881a02579c7bb7967b8406994b446130eb3271a465792b7b99bce8028235864ba14c27eb0d4a1a4d45b20e9ba38936aa4ce5ccff19cc6346b91b36776198cc702c984fa547ddcd6ded7151fed93dfccd08d5da74884122c649170f994fb5eafc1f662b6185a78a8da314e5742124665bd56fd88c1091d93d4f2d4d59c730793f832b5d61f8fdb0697b1a16caae9a62ac4b1d796c9e003d88b1de3626609bc2b56add42752361540001eb0faea64218663313a273b77ca91028786737a1417050a3bf1476ca841fc9c6c366af214b9d0cd1578f0bfdf085e7ad2ca4531d062d99005f4017bed4634a883b2a29b7c7bd74e29430e799e63cfc2a9d1428d201a16f91eff77f2cbf759286c0208910b3a4dec4d172c8cdf8c268d008473d68d497174b692e342a7a02aa53e64130e2b8cfab79e398cb31c32343ff741f0067909e7e1ad6aeafa82efa6b8afeb7a4a46d48b967d0fb6b701a76510b99ccc7ee5f8de307e09b3a7ccf11fd209cf21402e83cad1b6bb5f66afcb612ea266a8850fc4bf2543bba7666460fd88db849de13d3c52b72e1b6e6c452dc3ac224f20407e44909f7f8f4fc3d57284b29300d74d11cab87ba0da9b8845d80dc1e3096cb5dc8411c5786a9c24edbe9870fba22f5379fe16b97b022ca02f5e329bc6e828e7035bf91985c9bfe4da82478b102f1515530883d0da0fe983f468c69e4cede1b219540ddf3b41e1adb5923f93a3f20b2de186aac8a70976c5a93ae5116c91b9dc47544cffca0926369f050f38573c2674ac91eca23e279ac8dab712e752c63959f77c578544e38b3dd4e9f55baf5bde26c1685fabef020cefc99932ecbc66d6840223ec0d37a2897e727a0e1d51233181c5f8079257994f0a3a83aabba189f84499923dde93356c330854a0bc4e8c21e01979688d8213ad442c98cc8e3b43fbb76e043e1c3b296fec481c0c9bc2413cb41f4a141efc27d8d3d602d715228c94d2abc18cafde56f2f500eeb33e103b4b7efc424168c2002ca64181938b45d13ea35a0df6496f5222bc7c35f5e43c3293128e2d20aaf01c939fe7b30e656e73961ed17f5f30a4016120993569e54e47d745d4a0b83e1a637d59784794c619176d1f44e791e6baee751e07a5d75147d783cd9518226178bac8063ffe80e1039d6df6d68522f29740a2880e0e60959af462b6d4cfca81c8535c29a1a3ab9e2cf1e9fe40d8617eab67f4d7e623c29feec5f7e2be4f0f3a24632e680b99070ea2c4f9beca376cbe243bdbf7ab6529e920b59723d0934adc1820e988663c9398fd3e939aea005b15f86d0d2f33d3507b79b58e418bf99abc2bf2e07193ae2dc6378ec021acfd7b9327b0cfa4c4f5d5e0e544ccc3567693436a3dbda2c1611c56a5b9c05b43bb6885246a6691063e0a6e0fe3b37cdfadc42564ddbe68e940e218335c7211561fcc9f3a3fdf68126b66a16546c0a7e889faff0b4089a7f9a6f74ceebafdb4cae66530a9b6876b1710b79069496ae71d5ba00de8e68fa57c3a409d3a6fbf87298f31a82a379ea3888689901119b2c1ff5956fc0181c497f0d5adac827ca77c0ae1af06c3aa0012bce0364f91381fcb85eba00887212d9d12cc342f30a7a13f360a4ed9434b9ace6e1ad15f4ac938a550b7daabe5bf03b5aebd4d7baf590e8f9f28198ec0a35ebd715c9743f4dc6454034aac4a18045cd7c965bf0de14f3a90657706d25eb47152eca1cc7ee96910851ab48fd22c77bb09286fb17669dd88655694552678d671c5f6621e6ae2c699dad5ab49ea98d1ae9329d3cc46b10b9a21801dc9004ed4ca0784f6dba45a7010915c6a3dc9c71213b56be981882efa196b697439d855fe358a95ade507873a39faf60c4f2831d65cc8ecaa9bfd62a8ecc4f414a410600ba20bdb721e7cd0cd814db4493921c4bdd7855797ebf803a73783405e8afbfd63a15dcc5abafcf45ac17c1cc320c9694003785951a75066ff5863b217d15af6fd403442e91e7b06b4753757586bc6940b51d9cceffcd5fcb8c00e2b72a971eb874712c40e52e770120fe35e6aaae1e11dcd00611dfbc435dddaa52c64c857b10cdb43fa8b05aed2d931f8df74b12a358d1d7cecf4b06f42e227dabd8772b40e076e666e5158d12c010159f9a0716d47625ed7018afa1ba8756184db30c14157a600e2667a4e45fc3f4c251a1bd9f4f32e455db6b1bc13331a91bd8fd7fe657996b6d8ab41c966cdfbbd70e2fcb8a31613a0f6ebb1038bc048957db55e91739298676306f719abe01624cb72b93908ee1f738c4bbd8a51d942dfd86d80e97361a426eaf1bd39513fc34f200d3b5e953b870a9b03c3a6a9b7f10e8b6382f3ca7ff1ab1b8811e11099d0e676be5325ba4186a2bc6e838658ebc53b9ec6880096fe33afda5f567f0deeaf79bf68816eabf2af1f38e872bbd563188f1ac50d716d8ce13089e1976c8cfc54a86090cd6d4f78deaaed0f2fba3556741968032e4ef476d05b8b97bd53fa387b8877929732577311bd1d23bbcd082b3a91a081122e3211a61fd03399cdeff80dca65ce877bd945b37dca482687309536d0b19d20ed38a9648131ff8230a57c43a0ac711eaa2adc34a0df475db73343556014043723307987d897590a1ce6525a226b28ff482a45412b9037d23dcbb67b37a5e93bba88dcb827f7822762e4c1ead43c43ab49b086745a92d37246674b582fb8954613b3937011a048e9ca2de3f1eb0598b2aa24a0dcb998c6240f44b98595da8a636386c5e3917d2f8c0057266d13efe7ffaac554d6b906724b4e83b52632ba1ef27c6c0e940ceb92a36eaf302594abdde5d7dbad905a8ada88e8d28b55b85a776227644db813ecd62daac1eacbab70c16ff5e200c8a9287b939350b2f88ab3ea3c081edfbb24822c76a33e1b3b1df00b2bf4104fdfa680ee2e5e02ccd2b2f6ca97de2ce621f778564dd45a0ac72fb0264e4b23c5c6e06d25aff17388a41e5e33e3d2b9324b9a0f30a02ee43544ae5ab476a46a93d85eda215326c45bb4dffd9bea409fd04523910a86183a0b03a052c0c22fadb62216dea93f3b95ff53a863144110c3473d4c05d39dd8136209c811b44de92ac63467fd514b748b76796ea16329263dbc0740bf8fe0d0ef5add510794c46b51a6386fdd3bbaded99905458170d1730b697ac0aac3ab9c8d47054640f57c88b7f4192f10ae394c25a13fb1f82ed1af56cc59ace39bbc9981a272cb77ad9d1c69eaf07581705d869687256a71f9c205f415afa3097efaa181ff2cb8f23459e7fbcdfef40cf4e74b0756aa56e2fe7d9981f27f6987185abb5b56753343c337e7570b900f07a710832bce233032de7443c2f32152782b79a92aee101cb1f5663b46caf068becafea95a1ec6e5306ce3a8b611b2a99274ee431ed22619ad8517c486534e106cb792b6ad70dbb53e73aefbd81138541560d9e5b8d9a0ff1982bf6bedf7e71c94638bd11c68c31ecd49d77e63b19fcbc0076e32c6e598e497a0ab546b7fe7987791cdac866b92823a424e4c480acd30f2059d9f9fc46e42882cba81fa80c30c941d0913e8e677bddb8609301b2806b977f9796630168c4449aad8f6503385f17307ab015207384c55da1123e24c7c6ea50e70b4ac039b155271a48759cacfb61554cd7e57a732e7d6e5b0c6f68fdae987af62977c2deb5633c8d55847114c094410002d47b00ecfaaa5eb9c34101e7de63452d26df77994f1a1d457448a9d4acd0bbeca5c2278c406edfe841a01ef7294346e3dc4953cb6f15c61f3f796b83397c0d2f10ff1841ce3456443aba74bc666b98cecc1759f8bdc8cbfd2c19ff2a57ac4524c6d5cf8fe33fd54789e3992f64d35926f0661171dd343ee42113b0f79ed142d328e7ac4968081e04b25b1a279a3fdaa07b78a0ce443fd72fb026a20acda3240339ef36cd156c93d7dc937ccc9e031f61c76f2af8972287033f74f90030bc36d04dcaa842ea773d116b25773458053d89b5b30583fe1194662c91bbc59a95fec4a4eb1481c8623e5aff0d48b7979c1f15bc55cee72dc536d68ba0fbfeb98c0fc8838bbdee38405782b25a0bd2fa501aa82d0b97b857d48c2548624869fed43bbe8599361ea8db3a6c86df42da6c8c8ad40c989db6bf860d5fa5219f6fc667c8076936fec1fb46ef6e2e677ff404cf17c2d478424c8e01b2cbb4f3bb6526d773db7bae4a5d26a50d081c6e2f16ad1f36e7d3b7e79a9f39a389b438ea150c14bdeec8dcd46488ab6eca454c3e5a2eddc", 0x2000, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r4, 0x545c, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0/../file0/file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r2]) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) 18m26.082735858s ago: executing program 7 (id=1902): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) clock_gettime(0x5, 0x0) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) r4 = open_tree(r3, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x80000004) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x2080, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000200000408000000000000000300000000000000000000000200000000000000000000000000000200000000000000000000000404"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r5, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x40010, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x3) write$binfmt_misc(r7, &(0x7f0000000dc0), 0x386) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 18m25.616336014s ago: executing program 7 (id=1903): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) fsopen(&(0x7f0000000140)='devpts\x00', 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x28011, 0xffffffffffffffff, 0x1000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}}, 0x20}}, 0x0) 18m25.065105128s ago: executing program 36 (id=1903): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) fsopen(&(0x7f0000000140)='devpts\x00', 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x100000f, 0x28011, 0xffffffffffffffff, 0x1000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}}, 0x20}}, 0x0) 10m49.272500029s ago: executing program 0 (id=3399): r0 = socket(0x2, 0x80805, 0x0) listen(r0, 0x5) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="30000000000000008400000006"], 0x50}], 0x1, 0x0) (fail_nth: 1) 10m47.883380076s ago: executing program 0 (id=3403): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000400)={0x1, 0x0, 0x7ff, 0x40}) r2 = openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="0e70696473"], 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$video4linux(&(0x7f0000000100), 0xfff, 0x141201) clock_gettime(0x0, &(0x7f0000000140)) (async) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) (async) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r7, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000540)={0x2, 0x0, [{0xeeee0000, 0x66, &(0x7f00000003c0)=""/102}, {0x80ad002, 0x4d, &(0x7f0000000440)=""/77}]}) ioctl$VIDIOC_QUERYBUF(r4, 0xc0585609, &(0x7f0000000340)=@mmap={0xfffff4f6, 0x2, 0x4, 0x2000, 0x5, {r5, r6/1000+60000}, {0x3, 0xd5f83d326729ecd8, 0xe, 0x2, 0x45, 0xff, "9db7e78e"}, 0x5, 0x1, {}, 0x3}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)="dd"}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000040)="2b1c52ac82e71ea05b0c5e43ede4", 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)="dd"}, 0x50) 10m47.077972973s ago: executing program 0 (id=3407): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="d4010000200000001800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000100)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/74, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000008c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000002c0)=0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000cc0)={0x0, r1}) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000d80)={0x84, &(0x7f00000008c0)={0x40, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r3, &(0x7f0000000240)={0x14, &(0x7f0000000000)={0x40, 0xa, 0xc3, {0xc3, 0x2e, "eab37b8a7a8609b4e53bda293d15ce424fdd07e9d57e2de5a851dd8b11cd51432463120e3cd2b6cdca200ea7bbac475d03dbc511bda1eb7bf5a92c97f59ba684e4f0cbf08081ae8cacfd969e55fff960c0fc88f58efadf97fa05a2702534066fbbcf6255c96a0692df8cbbd451d01dd7e8761849a58264dfc65c8e16a06899d9645f152a3670c3ca963fd743ca390fd0b9581887109b7ea1e2c8eeca6e05a34de7cb37185b9a882799a1df274097151d6ce64362d3488b7e9ac3a66c9f79d80ab0"}}, &(0x7f0000000200)=ANY=[@ANYBLOB="00032e0000002e03b283de336d1169271fbedc573dc35a701b47deefc5e6223fa802297391062623e9fb22938b6efce86eb00d3c"]}, &(0x7f0000000700)={0x34, &(0x7f0000000440)={0x40, 0xa, 0xe0, "74bf3d235b46eee5f6cb75b35cb3520a11df7c6e9339ef8b12e31bf4c9711934c873c2d21e096fdd555786be2487298e6a3e44168e493dd5b6314660fc05558cecaf2c70fb68b1d9e47429256f8449efcef5e0f3bf68468061e21eda2b1f6c31aa5cc86a4290aca43ba6e29f3feb8a07e7ebe635ba05e64c22cb26c41d4f80d3b4d8aea97860135c870599b3efc67daed733cb32c479c607f0ee2ab0c71a05decd566d8d4db19a9245038aa1306551957ce63d1e378c5a9c2368c17285c3bc7a427d55ca4c3bb0e87902edb69610b5b15232c205c01bb19574c5c9966ce7bfba"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000600)={0x20, 0x0, 0x7a, {0x78, "5d81b1189c2b745e6a7011fccf6595340911da142835ae6a10fb473eeaaaa5744c4d6e60badeb7fc9f9b2bc536c8e146f86dcfe9cee3f766555fc7e756f5a7fb3fec621c94165c42817d9fc5a506eefd2bef286e54bae443309d334fea4371268ce686acc07839eb07e0b0cd85189d85da81716b6d4672fb"}}, &(0x7f0000000680)={0x20, 0x1, 0x1, 0xdf}, &(0x7f00000006c0)={0x20, 0x0, 0x1, 0x3}}) 10m43.01448158s ago: executing program 0 (id=3421): r0 = eventfd2(0x0, 0x0) writev(r0, &(0x7f00000010c0)=[{&(0x7f0000000000)="894a2fca7a0d8541", 0x8}], 0x1) r1 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x45b, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x500) 10m42.744164487s ago: executing program 0 (id=3425): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$unix(0x1, 0x2, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) recvmmsg(r3, &(0x7f0000003ac0)=[{{&(0x7f0000000180)=@phonet, 0x80, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/163, 0xa3}, {&(0x7f0000000480)=""/131, 0x83}, {&(0x7f0000000540)=""/145, 0x91}, {&(0x7f0000000600)=""/178, 0xb2}], 0x4, &(0x7f0000000700)}, 0x1}, {{&(0x7f0000000740)=@rc={0x1f, @none}, 0x80, &(0x7f0000000900)=[{&(0x7f00000007c0)=""/102, 0x66}, {&(0x7f0000000840)=""/38, 0x26}, {&(0x7f0000000880)=""/89, 0x59}], 0x3, &(0x7f0000000940)=""/170, 0xaa}, 0xd}, {{&(0x7f0000000a00)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a80)=""/33, 0x21}, {&(0x7f0000000ac0)=""/30, 0x1e}], 0x2, &(0x7f0000000b40)=""/195, 0xc3}, 0x1}, {{&(0x7f0000000c40)=@caif=@util, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000cc0)=""/53, 0x35}, {&(0x7f0000000d00)=""/216, 0xd8}, {&(0x7f0000000e00)=""/127, 0x7f}], 0x3, &(0x7f0000000ec0)=""/231, 0xe7}, 0x3}, {{&(0x7f0000000fc0)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f0000003380)=[{&(0x7f0000001040)=""/137, 0x89}, {&(0x7f0000001100)=""/4096, 0x1000}, {&(0x7f0000002100)=""/210, 0xd2}, {&(0x7f0000002200)=""/141, 0x8d}, {&(0x7f00000022c0)=""/171, 0xab}, {&(0x7f0000002380)=""/4096, 0x1000}], 0x6, &(0x7f0000003400)=""/159, 0x9f}, 0x2d50}, {{&(0x7f00000034c0)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000003940)=[{&(0x7f0000003540)=""/172, 0xac}, {&(0x7f0000003600)=""/171, 0xab}, {&(0x7f00000036c0)=""/143, 0x8f}, {&(0x7f0000003780)=""/255, 0xff}, {&(0x7f0000003880)=""/165, 0xa5}], 0x5, &(0x7f00000039c0)=""/227, 0xe3}, 0x1}], 0x6, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) setreuid(0x0, 0xee01) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="19003fd3589e", 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r6, 0x26, &(0x7f0000000000)) fcntl$lock(r6, 0x25, &(0x7f0000000340)={0x2, 0x0, 0x4004, 0xffffffffffffffff}) 10m41.700213791s ago: executing program 0 (id=3429): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e0000000000001090224000300000000090400ff0045f7270009040000000c15c1000904"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0x100) mmap$binder(&(0x7f000020a000/0x6000)=nil, 0x6000, 0x1, 0x11, r1, 0x5) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f000041c000/0x2000)=nil, 0x2000, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x300000, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r7}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) 10m26.409235383s ago: executing program 37 (id=3429): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e0000000000001090224000300000000090400ff0045f7270009040000000c15c1000904"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = syz_open_dev$vcsn(&(0x7f0000000000), 0x8000, 0x100) mmap$binder(&(0x7f000020a000/0x6000)=nil, 0x6000, 0x1, 0x11, r1, 0x5) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mlock2(&(0x7f0000549000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f000041c000/0x2000)=nil, 0x2000, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$bsg(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0xd21, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x300000, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r7}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r8}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x7, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) 6m31.005819846s ago: executing program 8 (id=4350): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000200)='efivarfs\x00', 0x10000, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_emit_ethernet(0x11e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaad4178e9cc03886dd6095f1f400e82b0000000000000000010000000000000001fe8000000000000000000000000000aa000003"], 0x0) geteuid() ftruncate(0xffffffffffffffff, 0x7e89) fcntl$notify(r1, 0x402, 0x8000003d) openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x408) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3d, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7ffffdbd}]}) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$802154_dgram(r3, &(0x7f0000000000)={0x2, @long}, 0x14) syz_usb_disconnect(0xffffffffffffffff) preadv(r0, 0x0, 0x0, 0x26, 0x0) 6m27.45048124s ago: executing program 8 (id=4360): openat$binderfs(0xffffffffffffff9c, 0x0, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) r4 = socket(0x10, 0x3, 0x0) r5 = openat$smackfs_load(0xffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$smackfs_load(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="29421e73f812f3fd1b5d76101060a46d205a13d9e771811f904d89fc9b65ea7d3568739d69320ee97f3a1c8bf8ffa412e86d30fa0b503ce8c0bcef9efdaf47efb2b8e6e43856564ee42839fbc242c9dfe5f87c76d8cffda620097badd8f18123de1033051b641b646934223d3a8b7d495f09389d6dc45a1afffecb0dfc"], 0x11f) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r6) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mount$nfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000680), 0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r2]) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r9 = dup(r8) ioctl$BLKRRPART(r9, 0x125f, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000000500faff83000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 6m26.706102504s ago: executing program 8 (id=4362): r0 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000080)=[@mss, @window, @window, @sack_perm, @timestamp, @mss, @sack_perm], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008004400", @ANYRES16, @ANYRES8=r0], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 6m25.364417367s ago: executing program 8 (id=4364): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000300)="495f133045d8da1f8cda89e21b3e289ecf6843e782bccd09319bb77ca7a8fce77f1e5aa96ddf4e3e7e8d8b85cf0e8ce9402e26b37e5e6246a57ffb192322e6663b7413695d3265d9e42514c69cc39fbcd1437480333dbcf3b0dab18be453481784095c2056a9fcd7a1b04e91dd8bd0b03f7cdd5567a43d3bd51b8b7aebecb9cd2a0cd3f50de237e1f5f300cba7b927b4ae79ca235b61f5e77472d17de896d901ab33207290bb31d51ff82d400cdc5b312dfb4cb8997defe4760e3f50dda2578ff707b8", 0xc3, 0xfffffffffffffffe) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 6m24.20878776s ago: executing program 8 (id=4370): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdir(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x2010092, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') lsetxattr(&(0x7f0000000080)='./bus\x00', &(0x7f0000000180)=@known='trusted.syz\x00', 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setxattr$trusted_overlay_opaque(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x2, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x4000000002) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={0x0, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_clone(0x11a06480, 0x0, 0x0, 0x0, 0x0, 0x0) 6m19.490511831s ago: executing program 8 (id=4382): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(0x0, 0xecf86c37d53049cc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, r3, 0x6}, 0x10) mount(&(0x7f0000000540)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0)='cramfs\x00', 0x0, 0x0) 6m4.418462601s ago: executing program 38 (id=4382): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) creat(0x0, 0xecf86c37d53049cc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, r3, 0x6}, 0x10) mount(&(0x7f0000000540)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0)='cramfs\x00', 0x0, 0x0) 3m2.346566663s ago: executing program 6 (id=5092): mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './bus'}, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 3m1.57964697s ago: executing program 6 (id=5094): ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000040)=0x1) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2284, &(0x7f0000000040)) (fail_nth: 1) 3m0.441230953s ago: executing program 6 (id=5098): r0 = fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r2}, 0x10) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00'}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001c40)="d80000001c0081064e81f782db44b9040a1d08041100000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) 2m59.680782153s ago: executing program 6 (id=5103): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m58.594498653s ago: executing program 6 (id=5108): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000780)="50b83e051004005304005300000f01c1b8050000b1b9f4300e004e0f01d90fc79d00300080646564f30fc7fb360f011b8fc868a6ef003666f10ff138818b34dba25f66b8bc000f00d00f017800", 0x4d}], 0x1, 0x1, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (rerun: 32) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) (async) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) (async, rerun: 32) mremap(&(0x7f0000b8e000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f00004e5000/0x2000)=nil) (async, rerun: 32) move_pages(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000a7a000/0x3000)=nil], 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000100)=@arm64_sys={0x603000000013de94, &(0x7f00000000c0)=0x7}) (async) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='v7\x00', 0x0, 0x0) 2m55.447834708s ago: executing program 6 (id=5117): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x14}}, 0x0) r1 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000001c0)={"1b00", 0x100, 0x5, 0x2, 0x800, 0x1, "f759e100edc710000000d9fc6300", '\x00', "0300", "e8cc1304", ["8b59b4d766cbd6e4af000700", "c2fed6e1dcc98a1c907c6b40", "000000ff0000000000000020", "0000000000000000001000"]}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) syz_emit_ethernet(0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r5, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, &(0x7f0000000080)='\x00\x00', 0x2}]) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000000)=0x10001, 0x4) 2m50.782651584s ago: executing program 4 (id=5123): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m49.000709208s ago: executing program 4 (id=5126): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000340)={0xe, 0x5, 0x40}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m44.885960874s ago: executing program 4 (id=5138): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ef17476000000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) keyctl$invalidate(0x15, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fsopen(0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000200)) syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x86) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x12, 0x17, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000100)=@udp=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000011c0)={r3, &(0x7f0000000040), 0x0}, 0x20) chdir(&(0x7f0000000080)='./file1\x00') quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x3, 0xc, 0xfeff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfeff}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2m37.571861816s ago: executing program 39 (id=5117): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[], 0x14}}, 0x0) r1 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000001c0)={"1b00", 0x100, 0x5, 0x2, 0x800, 0x1, "f759e100edc710000000d9fc6300", '\x00', "0300", "e8cc1304", ["8b59b4d766cbd6e4af000700", "c2fed6e1dcc98a1c907c6b40", "000000ff0000000000000020", "0000000000000000001000"]}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) syz_emit_ethernet(0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb1000000080086dd4803", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) io_setup(0xbf, &(0x7f0000000100)=0x0) io_submit(r5, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, &(0x7f0000000080)='\x00\x00', 0x2}]) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000000)=0x10001, 0x4) 2m33.268210246s ago: executing program 4 (id=5144): sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)={0xa4, 0x0, 0x10, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x84, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x70, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xcbe}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2003}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0xffffff9f}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0xa4}}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000001440)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e21, 0x0, @private0, 0xfffffffd}]}, &(0x7f0000000180)=0x10) r2 = dup3(r1, r0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x71, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x17) 2m30.388051211s ago: executing program 4 (id=5151): mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x8040000) 2m30.058753747s ago: executing program 4 (id=5153): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ef17476000000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) keyctl$invalidate(0x15, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fsopen(0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000200)) syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x86) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x12, 0x17, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000100)=@udp=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000011c0)={r3, &(0x7f0000000040), 0x0}, 0x20) chdir(&(0x7f0000000080)='./file1\x00') quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x3, 0xc, 0xfeff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfeff}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2m14.15589457s ago: executing program 40 (id=5153): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040ef17476000000000000109022400010000000009040000010300020009210000000122050009058103"], 0x0) keyctl$invalidate(0x15, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fsopen(0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000200)) syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x86) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0x12, 0x17, 0x4, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000000), &(0x7f0000000100)=@udp=r4}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000011c0)={r3, &(0x7f0000000040), 0x0}, 0x20) chdir(&(0x7f0000000080)='./file1\x00') quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x3, 0xc, 0xfeff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfeff}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00W'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1m21.064224026s ago: executing program 5 (id=5214): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080), 0x4) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x1) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0xd, 0xf0ff, 0x0, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) sendmsg$inet(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x14, 0x11a, 0x1, 0xb}}], 0x18}, 0x0) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x20}}, 0x0) recvmmsg(r4, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1m14.732846291s ago: executing program 2 (id=5225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) migrate_pages(r0, 0xd, &(0x7f0000000040)=0x80000000, &(0x7f0000000300)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r4, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000380)={0x0, 0x51, 0xe4}, &(0x7f0000000400)={'enc=', 'pkcs1', ' hash=', {'digest_null\x00'}}, &(0x7f0000000580)="c2db804f36b57ba39b7029c4024fb932d0e8b4a22b97f97d338b7bff8bfc7f4974518b5525ddbeeedb693375f0b2dc778133bd83435d770ea033c87853238006c75e8db62bd5a9ab87ffb638e46a0530bc", &(0x7f0000000600)=""/228) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r4, 0xffffffffffffffff) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x256f16877c8c2f28, 0x0) fsopen(&(0x7f00000003c0)='erofs\x00', 0x0) 1m13.574306119s ago: executing program 2 (id=5226): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x12, 0x10, 0xfa00, {0x0, r0}}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) request_key(0x0, &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='y\xa9rustV\x1eS=\xd4\x16\x95:\x00\x01\x00\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x18, 0x1405, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000001680), 0x0, 0x80041) write$dsp(r4, &(0x7f0000000000)=' ', 0x1) io_cancel(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3, 0x2, r2, &(0x7f0000000280)="55aa2c2b3e1f3f6fa0029d4f73f62e0d93d32a7beb9855a785d99b76c1cf60d43e9e26a002192c76eea8f17dc85bcd4cb597e26c5f42fe45466a0a465eb2f4622c33fa6698759ffc0f122c779ddea46350e454c75745cf3e7684f43c13386856a7b0314f1c20aa73876745c616114b7a441e86b9ac622d460d7027fe15d462eab4bef86d34b663cb8d122c8acc305f8acf40c74f6cb1879afdf7781d99767ace5372d1a0bbcd", 0xa6, 0x7, 0x0, 0x1, r4}, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LIST(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x1c, r8, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x2044040) 1m11.314269062s ago: executing program 2 (id=5227): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe800000000000", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m10.338275273s ago: executing program 5 (id=5228): close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r0, 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=0x0, @ANYRES16, @ANYRES8=r0, @ANYRES32=r1, @ANYRES16=r0], 0x48}}, 0x8090) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {}, {0x8005}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x8000) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) bind$llc(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYRES16=r6], &(0x7f0000000600)=""/4093, 0x4d, 0xffd, 0x1, 0x3ff, 0x0, @void, @value}, 0x28) socket$nl_route(0x10, 0x3, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) close(0xffffffffffffffff) listen(0xffffffffffffffff, 0x0) 1m1.165460179s ago: executing program 2 (id=5232): syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) gettid() r2 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0xfffffffc, 0x5, 0x1}) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x5, @raw_data="2fb04a43cb4edbb2f8c11d55fe7e39d98cc683907ce4751204e83d1785190479f3c5d378bed2c1fc92e0629a4fffd9a52b7a93d12eb198729676b0d892c9c02879d5700ed2ea2a5352518f772c3d9d2809911d42843bd3931a529ac577f811f21e91d3e16bb79748df00c9b6882ccd692b1170aa76a9de8d4bd5f8690cc3edf408d220b7d5916b3eba2d13f751cb46d2cf9034ed3d98a91172eea90e991030a3af605efb6671b50a33e46fdc5695084f7cc34d71ea422e337bf362d643c2827ae8e7f38afa894e0c"}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff03c}, {0x6, 0x0, 0x0, 0x83}]}, 0x10) 59.782387325s ago: executing program 5 (id=5234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) migrate_pages(r0, 0xd, &(0x7f0000000040)=0x80000000, &(0x7f0000000300)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r4, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000380)={0x0, 0x51, 0xe4}, &(0x7f0000000400)={'enc=', 'pkcs1', ' hash=', {'digest_null\x00'}}, &(0x7f0000000580)="c2db804f36b57ba39b7029c4024fb932d0e8b4a22b97f97d338b7bff8bfc7f4974518b5525ddbeeedb693375f0b2dc778133bd83435d770ea033c87853238006c75e8db62bd5a9ab87ffb638e46a0530bc", &(0x7f0000000600)=""/228) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r4, 0xffffffffffffffff) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x256f16877c8c2f28, 0x0) fsopen(&(0x7f00000003c0)='erofs\x00', 0x0) 58.016255092s ago: executing program 5 (id=5236): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x800, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x193, 0x0, 0x0, 0x0, 0x0, 0x90f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x407, 0x0, 0x0, 0x0, 0x0, 0x81, 0xa, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x40], [0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001, 0x0, 0x0, 0x0, 0xa90d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x400, 0xcc000000, 0x0, 0xfffff253, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x360b, &(0x7f0000001040), &(0x7f0000000340)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r7, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) sched_getaffinity(r2, 0x8, &(0x7f0000000500)) io_uring_enter(r5, 0xb15, 0x0, 0x0, 0x0, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000080)={0x28, 0x0, 0x0, @hyper, 0xf000000}, 0x10) accept4$vsock_stream(r8, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) socket$kcm(0x10, 0x3, 0x10) 56.088896889s ago: executing program 5 (id=5237): syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rxrpc(0x21, 0x2, 0xa) syz_open_dev$vbi(&(0x7f0000000300), 0x1, 0x2) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48004}, 0x8000) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newsa={0x144, 0x10, 0x633, 0xfffffffd, 0x0, {{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in6=@empty, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc, 0x1c, {0x0, 0x1}}]}, 0x144}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000000100001040000000000000000004800004d5dddd7dbb03d54be449d438e31adfc3b2697dff34a7b424bf7cae616a7e8c586f73447d8c371beb2fcb6fe5fe6b21c03629b3db23d48e9154070d7869dbd9361497fd0408c31d4c938421f1a0902998735dbb2442b10761703e73c1ec34de9149b7c23e36faabf1dead1", @ANYRES32=r6, @ANYBLOB="ae1e020000000000"], 0x20}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0xb, 0x0) 52.448928092s ago: executing program 2 (id=5240): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/34, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 48.910806323s ago: executing program 5 (id=5242): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) r1 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000680), &(0x7f00000006c0)=0x4) prlimit64(0x0, 0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x200000ffffffff, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0x7, 0x0, &(0x7f00000007c0)="9f449487219195", 0x0, 0x241, 0x0, 0x85, 0x0, &(0x7f0000000340)="cfa7a45f49a34c7443132162ba7712ae456504339e3925d26e959532f63696562a58ede3e30a0aabeeb8065c53583ac889d4b144bee1276efee39d278b460051d700011e977546e8cb10068e09caa11bda5cea460edbc675f84f0e586f7084cc6f7039e9d88a0ea6296cca90405746401b1429a88fc2869acfbff130a30000000000000000", &(0x7f0000000000), 0x7}, 0x50) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000300)=0x16, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x19, r5, 0x1, 0xfd, 0x6, @link_local}, 0x14) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f00000002c0)=0x400000e9, 0x1) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x11, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000300)) 46.960566977s ago: executing program 2 (id=5245): syz_open_dev$loop(0x0, 0xaf, 0xa000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000300)={0x2, 0x3, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x80, 0xe, @in={0x2, 0x0, @multicast2}}]}, 0x28}}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800009c0200"]) r7 = dup(r2) bind$bt_l2cap(r7, &(0x7f0000000300)={0x1f, 0x0, @none, 0x0, 0x2}, 0x3) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@remote, @loopback, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000240)={'syztnl2\x00', r8, 0x20, 0x10, 0x7, 0xb, {{0x14, 0x4, 0x1, 0x39, 0x50, 0x68, 0x0, 0xb, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@lsrr={0x83, 0x13, 0x32, [@multicast1, @local, @remote, @remote]}, @generic={0x82, 0x8, "48737df3b277"}, @ssrr={0x89, 0xf, 0x54, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xb}, @remote]}, @lsrr={0x83, 0xf, 0x9e, [@multicast1, @local, @multicast1]}]}}}}}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x2c}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000004000000040000000400010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000600000000000000000200"/28], 0x50) 33.598616449s ago: executing program 41 (id=5242): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) r1 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000680), &(0x7f00000006c0)=0x4) prlimit64(0x0, 0x9, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x200000ffffffff, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0x7, 0x0, &(0x7f00000007c0)="9f449487219195", 0x0, 0x241, 0x0, 0x85, 0x0, &(0x7f0000000340)="cfa7a45f49a34c7443132162ba7712ae456504339e3925d26e959532f63696562a58ede3e30a0aabeeb8065c53583ac889d4b144bee1276efee39d278b460051d700011e977546e8cb10068e09caa11bda5cea460edbc675f84f0e586f7084cc6f7039e9d88a0ea6296cca90405746401b1429a88fc2869acfbff130a30000000000000000", &(0x7f0000000000), 0x7}, 0x50) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000300)=0x16, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x19, r5, 0x1, 0xfd, 0x6, @link_local}, 0x14) setsockopt$packet_int(r3, 0x107, 0xc, &(0x7f00000002c0)=0x400000e9, 0x1) sendmsg$netlink(r3, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141430e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304a80500ffffca88faca"], 0xdd12}], 0x1}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x11, &(0x7f0000000100)=0x7fff, 0x4) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f0000000300)) 31.597358282s ago: executing program 42 (id=5245): syz_open_dev$loop(0x0, 0xaf, 0xa000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000300)={0x2, 0x3, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x80, 0xe, @in={0x2, 0x0, @multicast2}}]}, 0x28}}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000800009c0200"]) r7 = dup(r2) bind$bt_l2cap(r7, &(0x7f0000000300)={0x1f, 0x0, @none, 0x0, 0x2}, 0x3) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@remote, @loopback, 0x0}, &(0x7f0000000040)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000240)={'syztnl2\x00', r8, 0x20, 0x10, 0x7, 0xb, {{0x14, 0x4, 0x1, 0x39, 0x50, 0x68, 0x0, 0xb, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, {[@lsrr={0x83, 0x13, 0x32, [@multicast1, @local, @remote, @remote]}, @generic={0x82, 0x8, "48737df3b277"}, @ssrr={0x89, 0xf, 0x54, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xb}, @remote]}, @lsrr={0x83, 0xf, 0x9e, [@multicast1, @local, @multicast1]}]}}}}}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x2c}}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1400000004000000040000000400010000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000600000000000000000200"/28], 0x50) 27.574697941s ago: executing program 9 (id=5251): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000340)={0xe, 0x5, 0x40}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 26.99241285s ago: executing program 9 (id=5252): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000206d049cc20000000000010902a400010000000009040000010300000009210000000122050009058103"], 0x0) inotify_init1(0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f6, 0x20, 0x70bd29, 0x1}, 0x10}}, 0x20004010) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r6, 0x20, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x44041) recvmmsg(r4, &(0x7f00000021c0)=[{{&(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev}}}, 0x80, 0x0}}], 0x1, 0x0, 0x0) socket(0x840000000002, 0x3, 0x100) close_range(r7, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x0, "cb9cf735"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 24.612400469s ago: executing program 9 (id=5253): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1b, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x9}, @timestamp_prespec={0x44, 0x4, 0xc0}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0xfd}}, {@remote}, {@multicast2}, {@rand_addr=0x64010101}, {@broadcast, 0x852b1}, {@multicast2}]}, @noop, @noop, @noop, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) chdir(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$EXT4_IOC_SETFSUUID(0xffffffffffffffff, 0x4008662c, &(0x7f0000000280)={0x0, 0x0, "77d4e1d5b593933b9b3f272fbf9f5e03"}) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x13, 0x500205, 0x200, 0x9, 0x8, 0x9}}, 0x50) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r6, 0xc1004110, &(0x7f0000000040)={0x0, [0x2, 0x8, 0x5], [{0x0, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x0, 0x0, 0x1}, {0x0, 0x3fffffe}], 0x20}) setsockopt$inet6_tcp_int(r5, 0x6, 0x1e, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip6_tables_names\x00') lseek(r7, 0x4, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r8 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r8, 0x80045017, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) 22.053568131s ago: executing program 9 (id=5254): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x10, 0x4, 0x0, 0x16, 0x40, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @loopback, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x4007, 0x0, 0x4, 0x0]}, @timestamp_prespec={0x44, 0x4}, @timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x8}, @noop, @noop, @noop, @lsrr={0x83, 0x7, 0xdc, [@private=0xa010105]}]}}}}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180)={'#! ', '', [{0x20, '-/*@{'}, {0x20, '\''}, {0x20, ','}, {0x20, 'GPL\x00'}, {0x20, '\\@nh\xb4\x87'}, {0x20, '0\x00\x00\x00\x00'}, {}]}, 0x21) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) r4 = dup(r2) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r5, 0xae9a) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@getqdisc={0x40, 0x26, 0x100, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0x4, 0x10}, {0xa, 0x2}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) r8 = socket(0x2, 0x80805, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$inet6_sctp(0xa, 0x1, 0x84) r9 = socket$inet(0x2, 0x80001, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000290c0500", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24, @ANYRES32=r3, @ANYBLOB="4eca4472fe180c5aa1912e8091e2c05bef6bd09dd2aff06db47d8084d1d0229021db42c39c3ddbc4a965839833be43c9626f0942685995158ad30fce445d8eaedc87"], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x17, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r12, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, r10}, 0x10) 18.556475893s ago: executing program 9 (id=5255): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000800)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "82d2f3", 0x10, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@hopopts={0x2c, 0x0, '\x00', [@pad1, @ra]}]}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) connect$bt_sco(0xffffffffffffffff, &(0x7f0000000040), 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x5) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) 15.559140979s ago: executing program 9 (id=5256): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000040)={0x0, 0x9, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x80084523, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$l2tp6(0xa, 0x2, 0x73) preadv2(r5, &(0x7f0000000540)=[{&(0x7f0000000240)=""/193, 0xc1}, {&(0x7f0000000000)=""/94, 0x5e}, {&(0x7f0000000080)=""/3, 0x3}, {&(0x7f0000000680)=""/68, 0x44}, {&(0x7f0000000140)=""/45, 0x2d}, {&(0x7f00000003c0)=""/12, 0xc}, {&(0x7f0000000440)=""/207, 0xcf}], 0x7, 0x10, 0x3824, 0xa) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, &(0x7f00000005c0)=[@text16={0x10, &(0x7f00000001c0)="240066b8010000000f01c1660f3880310f01cfbaf80c66b8b81acb8f66efbafc0cecbaf80c66b8bcb4ea8866efbafc0cedba430066ed66b8579e00000f23d00f21f866352000000f0f23f8643e660f6db79a5f6766c7442400993f19006766c7442402000001006766c744240600000000670f011c24", 0x76}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000640)) 0s ago: executing program 43 (id=5256): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) r1 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x80104592, &(0x7f0000000040)={0x0, 0x9, 0x0, 0xfffffffe, "00207d2000000000201b14700c1e0ac74f000000001200000000000900"}) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) ioctl$EVIOCGREP(r0, 0x80084523, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x0, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = socket$l2tp6(0xa, 0x2, 0x73) preadv2(r5, &(0x7f0000000540)=[{&(0x7f0000000240)=""/193, 0xc1}, {&(0x7f0000000000)=""/94, 0x5e}, {&(0x7f0000000080)=""/3, 0x3}, {&(0x7f0000000680)=""/68, 0x44}, {&(0x7f0000000140)=""/45, 0x2d}, {&(0x7f00000003c0)=""/12, 0xc}, {&(0x7f0000000440)=""/207, 0xcf}], 0x7, 0x10, 0x3824, 0xa) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000020000/0x18000)=nil, &(0x7f00000005c0)=[@text16={0x10, &(0x7f00000001c0)="240066b8010000000f01c1660f3880310f01cfbaf80c66b8b81acb8f66efbafc0cecbaf80c66b8bcb4ea8866efbafc0cedba430066ed66b8579e00000f23d00f21f866352000000f0f23f8643e660f6db79a5f6766c7442400993f19006766c7442402000001006766c744240600000000670f011c24", 0x76}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$TUNGETVNETHDRSZ(r2, 0x800454d7, &(0x7f0000000640)) kernel console output (not intermixed with test programs): 23234:23236 ioctl c0306201 200001c0 returned -22 [ 1359.931107][ T969] usb 10-1: Using ep0 maxpacket: 16 [ 1359.951151][ T969] usb 10-1: config 0 has an invalid interface number: 39 but max is 0 [ 1359.962307][ T969] usb 10-1: config 0 has no interface number 0 [ 1359.995083][ T969] usb 10-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=70.6d [ 1360.015036][ T969] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1360.035283][ T969] usb 10-1: Product: syz [ 1360.049894][ T969] usb 10-1: Manufacturer: syz [ 1360.062505][ T969] usb 10-1: SerialNumber: syz [ 1360.081110][ T969] usb 10-1: config 0 descriptor?? [ 1360.091993][ T969] i2c-tiny-usb 10-1:0.39: version 70.6d found at bus 010 address 044 [ 1360.112758][ T29] audit: type=1326 audit(1731349683.078:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23248 comm="syz.5.4527" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7b237e719 code=0x0 [ 1360.296611][T23257] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4527'. [ 1360.928087][T23231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1360.936895][T23231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1360.946292][T23231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1360.955351][T23231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1361.980297][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.684795][ T969] (null): failure setting delay to 10us [ 1362.690593][ T969] i2c-tiny-usb 10-1:0.39: probe with driver i2c-tiny-usb failed with error -5 [ 1364.412399][ T969] usb 10-1: USB disconnect, device number 44 [ 1364.541246][T23282] tipc: Started in network mode [ 1364.697903][T23282] tipc: Node identity fffffeff, cluster identity 7 [ 1365.005828][T23282] tipc: Node number set to 4294967039 [ 1365.453443][T23293] fuse: Bad value for 'user_id' [ 1365.458336][T23293] fuse: Bad value for 'user_id' [ 1365.512155][T23290] Bluetooth: MGMT ver 1.23 [ 1368.327145][T23318] smc: net device bond0 applied user defined pnetid SYZ0 [ 1369.059413][T23330] FAULT_INJECTION: forcing a failure. [ 1369.059413][T23330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1369.073289][T23330] CPU: 1 UID: 0 PID: 23330 Comm: syz.9.4544 Not tainted 6.12.0-rc7-syzkaller #0 [ 1369.082334][T23330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1369.092391][T23330] Call Trace: [ 1369.095689][T23330] [ 1369.098633][T23330] dump_stack_lvl+0x241/0x360 [ 1369.103322][T23330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1369.108518][T23330] ? __pfx__printk+0x10/0x10 [ 1369.113108][T23330] ? __pfx_lock_release+0x10/0x10 [ 1369.118136][T23330] should_fail_ex+0x3b0/0x4e0 [ 1369.122813][T23330] _copy_from_user+0x2f/0xc0 [ 1369.127397][T23330] memdup_user+0x64/0xc0 [ 1369.131643][T23330] strndup_user+0x68/0xc0 [ 1369.135976][T23330] __se_sys_mount+0xe2/0x3c0 [ 1369.140575][T23330] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1369.146559][T23330] ? __pfx___se_sys_mount+0x10/0x10 [ 1369.151792][T23330] ? do_syscall_64+0x100/0x230 [ 1369.156556][T23330] ? __x64_sys_mount+0x20/0xc0 [ 1369.161319][T23330] do_syscall_64+0xf3/0x230 [ 1369.165821][T23330] ? clear_bhb_loop+0x35/0x90 [ 1369.170495][T23330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1369.176383][T23330] RIP: 0033:0x7f663a97e719 [ 1369.180800][T23330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1369.200421][T23330] RSP: 002b:00007f663b816038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1369.208951][T23330] RAX: ffffffffffffffda RBX: 00007f663ab36130 RCX: 00007f663a97e719 [ 1369.216932][T23330] RDX: 0000000020000080 RSI: 0000000020000a00 RDI: 00000000200009c0 [ 1369.224920][T23330] RBP: 00007f663b816090 R08: 0000000000000000 R09: 0000000000000000 [ 1369.232987][T23330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1369.240961][T23330] R13: 0000000000000000 R14: 00007f663ab36130 R15: 00007ffd0de72248 [ 1369.248949][T23330] [ 1369.989448][T13241] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 1370.168270][T13241] usb 3-1: not running at top speed; connect to a high speed hub [ 1370.197990][T13241] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1370.222921][T13241] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1370.249701][T13241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.287752][T13241] usb 3-1: Manufacturer: Љ [ 1370.294717][T13241] usb 3-1: SerialNumber: ည [ 1370.514380][ T29] audit: type=1326 audit(1731349693.478:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23333 comm="syz.2.4546" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d4737e719 code=0x0 [ 1370.578712][T23372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1370.608149][T23372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1370.645783][T23372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1370.681289][T23372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1370.729887][ T969] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 1370.745153][T23377] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 1370.751719][T23377] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1370.772543][T23377] vhci_hcd vhci_hcd.0: Device attached [ 1370.787617][T23378] vhci_hcd: cannot find a urb of seqnum 13302220 max seqnum 0 [ 1370.829535][ T11] vhci_hcd: stop threads [ 1370.833836][ T11] vhci_hcd: release socket [ 1370.853639][ T11] vhci_hcd: disconnect device [ 1370.906215][ T969] usb 10-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 1370.934242][ T969] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.987607][ T969] usb 10-1: Product: syz [ 1371.005994][ T969] usb 10-1: Manufacturer: syz [ 1371.026413][ T969] usb 10-1: SerialNumber: syz [ 1371.032987][T23387] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4556'. [ 1371.043832][ T969] usb 10-1: config 0 descriptor?? [ 1371.129070][T23388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1371.281153][ T969] hso 10-1:0.0: Failed to find BULK IN ep [ 1371.377319][T23397] FAULT_INJECTION: forcing a failure. [ 1371.377319][T23397] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1371.434718][T23397] CPU: 0 UID: 0 PID: 23397 Comm: syz.6.4558 Not tainted 6.12.0-rc7-syzkaller #0 [ 1371.443809][T23397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1371.453899][T23397] Call Trace: [ 1371.457231][T23397] [ 1371.460191][T23397] dump_stack_lvl+0x241/0x360 [ 1371.464900][T23397] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1371.470128][T23397] ? __pfx__printk+0x10/0x10 [ 1371.474751][T23397] ? __pfx_lock_release+0x10/0x10 [ 1371.479818][T23397] should_fail_ex+0x3b0/0x4e0 [ 1371.484522][T23397] _copy_from_iter+0x21f/0x1e70 [ 1371.489408][T23397] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1371.496126][T23397] ? __pfx__copy_from_iter+0x10/0x10 [ 1371.501451][T23397] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1371.507379][T23397] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1371.513828][T23397] ? blake2s_update+0x1a5/0x280 [ 1371.518722][T23397] write_pool_user+0xe8/0x2d0 [ 1371.523428][T23397] ? __pfx_write_pool_user+0x10/0x10 [ 1371.528751][T23397] ? __might_fault+0xaa/0x120 [ 1371.533461][T23397] ? import_ubuf+0x97/0x1d0 [ 1371.537994][T23397] random_ioctl+0x3aa/0x4b0 [ 1371.542548][T23397] ? __pfx_random_ioctl+0x10/0x10 [ 1371.547615][T23397] ? __pfx_random_ioctl+0x10/0x10 [ 1371.552666][T23397] __se_sys_ioctl+0xf9/0x170 [ 1371.557300][T23397] do_syscall_64+0xf3/0x230 [ 1371.561922][T23397] ? clear_bhb_loop+0x35/0x90 [ 1371.566634][T23397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1371.572641][T23397] RIP: 0033:0x7efc5977e719 [ 1371.577088][T23397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1371.596736][T23397] RSP: 002b:00007efc5a5ae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1371.605187][T23397] RAX: ffffffffffffffda RBX: 00007efc59935f80 RCX: 00007efc5977e719 [ 1371.613189][T23397] RDX: 0000000020000000 RSI: 0000000040085203 RDI: 0000000000000005 [ 1371.621276][T23397] RBP: 00007efc5a5ae090 R08: 0000000000000000 R09: 0000000000000000 [ 1371.629271][T23397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1371.637353][T23397] R13: 0000000000000000 R14: 00007efc59935f80 R15: 00007fffe716a4e8 [ 1371.645359][T23397] [ 1371.648562][ C0] vkms_vblank_simulate: vblank timer overrun [ 1371.676715][ T25] IPVS: starting estimator thread 0... [ 1371.779553][T23410] IPVS: using max 20 ests per chain, 48000 per kthread [ 1371.939692][ T5877] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1372.015529][ T25] usb 10-1: USB disconnect, device number 45 [ 1372.854485][T13241] usb 3-1: USB disconnect, device number 69 [ 1372.879563][ T5877] usb 6-1: Using ep0 maxpacket: 16 [ 1372.899014][ T5877] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1372.909636][ T5877] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1372.970417][ T5877] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1372.987607][ T5877] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.013437][ T5877] usb 6-1: Product: syz [ 1373.017816][ T5877] usb 6-1: Manufacturer: syz [ 1373.060360][ T5877] usb 6-1: SerialNumber: syz [ 1374.752097][T23448] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4564'. [ 1374.954050][ T5877] usb 6-1: 0:2 : does not exist [ 1374.976861][ T5877] usb 6-1: USB disconnect, device number 3 [ 1375.804172][T23461] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4569'. [ 1375.964894][T23461] binder: 23459:23461 ioctl c0306201 20000080 returned -11 [ 1376.249397][ T5877] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 1376.615123][ T5877] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1376.650433][ T5877] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1376.660393][ T5877] usb 10-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1376.669916][ T5877] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.684541][ T5877] usb 10-1: config 0 descriptor?? [ 1376.739699][ T25] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1376.929420][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 1376.959308][ T25] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1377.039425][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1377.069395][ T25] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1377.119328][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1377.155521][ T25] usb 3-1: config 0 descriptor?? [ 1377.158634][T23504] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4577'. [ 1377.200040][T23504] syz_tun: entered promiscuous mode [ 1377.225262][T23504] macsec1: entered promiscuous mode [ 1377.394535][ T5877] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0 [ 1377.401958][ T5877] arvo 0003:1E7D:30D4.0017: unknown main item tag 0x0 [ 1377.412586][ T5877] arvo 0003:1E7D:30D4.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.9-1/input0 [ 1377.431329][T23504] syz_tun: left promiscuous mode [ 1378.109058][ T25] hid (null): unknown global tag 0xc [ 1378.157277][ T25] cougar 0003:060B:500A.0018: usage count exceeds max: fixing up report descriptor [ 1378.168597][ T25] cougar 0003:060B:500A.0018: unexpected long global item [ 1378.177575][ T25] cougar 0003:060B:500A.0018: parse failed [ 1378.183699][ T25] cougar 0003:060B:500A.0018: probe with driver cougar failed with error -22 [ 1379.012813][T23465] netlink: 'syz.9.4572': attribute type 1 has an invalid length. [ 1379.083894][T23465] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1379.114784][T23509] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1379.132110][T23509] bond1: (slave batadv1): making interface the new active one [ 1379.188596][T23509] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 1379.273941][T23538] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4583'. [ 1379.308572][ T5877] usb 10-1: USB disconnect, device number 46 [ 1380.325585][ T25] usb 3-1: USB disconnect, device number 70 [ 1381.173559][T23577] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1381.259852][T23589] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4592'. [ 1381.739333][T13241] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 1381.807078][T23539] kexec: Could not allocate control_code_buffer [ 1381.976779][T13241] usb 10-1: Using ep0 maxpacket: 8 [ 1382.008050][T13241] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1382.021030][T13241] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1382.059988][T13241] usb 10-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1382.079812][T13241] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.103653][T13241] usb 10-1: Product: syz [ 1382.107955][T13241] usb 10-1: Manufacturer: syz [ 1382.144915][T13241] usb 10-1: SerialNumber: syz [ 1382.161221][T13241] usb 10-1: config 0 descriptor?? [ 1384.437183][ T969] usb 10-1: USB disconnect, device number 47 [ 1385.312411][T23672] netlink: 'syz.4.4604': attribute type 7 has an invalid length. [ 1385.321000][T23672] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4604'. [ 1388.389123][T23724] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4619'. [ 1388.409565][ T969] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1388.469812][T23726] netlink: 24 bytes leftover after parsing attributes in process `syz.9.4620'. [ 1388.563133][ T969] usb 5-1: Using ep0 maxpacket: 32 [ 1388.584415][ T969] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1388.605417][ T969] usb 5-1: New USB device found, idVendor=1ae7, idProduct=9001, bcdDevice= 0.40 [ 1388.617822][ T969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.636489][ T969] usb 5-1: Product: syz [ 1388.651522][ T969] usb 5-1: Manufacturer: syz [ 1388.663407][ T969] usb 5-1: SerialNumber: syz [ 1388.929031][T23717] net_ratelimit: 46 callbacks suppressed [ 1388.929050][T23717] openvswitch: netlink: Actions may not be safe on all matching packets [ 1389.010779][ T969] usbhid 5-1:1.0: can't add hid device: -71 [ 1389.016931][ T969] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1389.075668][ T969] usb 5-1: USB disconnect, device number 22 [ 1391.665552][T23780] orangefs_mount: mount request failed with -4 [ 1392.276309][ T25] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1392.715335][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1392.726730][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1392.736891][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1392.775760][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1392.805156][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.854317][ T25] usb 5-1: config 0 descriptor?? [ 1393.390769][ T25] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1393.398381][ T25] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 1393.502594][ T25] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 1393.548189][ T25] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1394.053958][T23785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1394.162835][T23785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1394.481429][ T969] usb 5-1: USB disconnect, device number 23 [ 1394.843019][T23821] 9pnet: Could not find request transport: fd…rfdno=0xffffffffffffffff [ 1394.859306][T23818] 9pnet: Could not find request transport: fd…rfdno=0xffffffffffffffff [ 1395.466099][T23829] orangefs_mount: mount request failed with -4 [ 1395.762846][T23844] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4652'. [ 1395.829221][T23846] netlink: 240 bytes leftover after parsing attributes in process `syz.6.4648'. [ 1395.838354][T23846] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4648'. [ 1396.561332][T23844] binder: 23842:23844 ioctl c0306201 20000080 returned -11 [ 1396.981110][T23860] FAULT_INJECTION: forcing a failure. [ 1396.981110][T23860] name failslab, interval 1, probability 0, space 0, times 0 [ 1397.679371][T23860] CPU: 1 UID: 0 PID: 23860 Comm: syz.5.4656 Not tainted 6.12.0-rc7-syzkaller #0 [ 1397.688559][T23860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1397.698714][T23860] Call Trace: [ 1397.702207][T23860] [ 1397.705167][T23860] dump_stack_lvl+0x241/0x360 [ 1397.709889][T23860] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1397.715162][T23860] ? __pfx__printk+0x10/0x10 [ 1397.719796][T23860] ? ref_tracker_alloc+0x332/0x490 [ 1397.724934][T23860] should_fail_ex+0x3b0/0x4e0 [ 1397.729635][T23860] ? skb_clone+0x20c/0x390 [ 1397.734078][T23860] should_failslab+0xac/0x100 [ 1397.738786][T23860] ? skb_clone+0x20c/0x390 [ 1397.744213][T23860] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1397.749895][T23860] skb_clone+0x20c/0x390 [ 1397.754186][T23860] __netlink_deliver_tap+0x3cc/0x7c0 [ 1397.759509][T23860] ? netlink_deliver_tap+0x2e/0x1b0 [ 1397.764865][T23860] netlink_deliver_tap+0x19d/0x1b0 [ 1397.770011][T23860] netlink_unicast+0x7c4/0x990 [ 1397.774983][T23860] ? __pfx_netlink_unicast+0x10/0x10 [ 1397.780290][T23860] ? __virt_addr_valid+0x183/0x530 [ 1397.785433][T23860] ? __check_object_size+0x48e/0x900 [ 1397.790760][T23860] netlink_sendmsg+0x8e4/0xcb0 [ 1397.795564][T23860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1397.800883][T23860] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1397.806196][T23860] __sock_sendmsg+0x221/0x270 [ 1397.810905][T23860] ____sys_sendmsg+0x52a/0x7e0 [ 1397.815712][T23860] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1397.821077][T23860] __sys_sendmsg+0x292/0x380 [ 1397.825752][T23860] ? __pfx___sys_sendmsg+0x10/0x10 [ 1397.830909][T23860] ? __pfx_vfs_write+0x10/0x10 [ 1397.835772][T23860] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1397.842125][T23860] ? do_syscall_64+0x100/0x230 [ 1397.846889][T23860] ? do_syscall_64+0xb6/0x230 [ 1397.851577][T23860] do_syscall_64+0xf3/0x230 [ 1397.856187][T23860] ? clear_bhb_loop+0x35/0x90 [ 1397.860865][T23860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1397.866757][T23860] RIP: 0033:0x7fc7b237e719 [ 1397.871183][T23860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1397.890819][T23860] RSP: 002b:00007fc7b31f3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1397.899274][T23860] RAX: ffffffffffffffda RBX: 00007fc7b2535f80 RCX: 00007fc7b237e719 [ 1397.907272][T23860] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 1397.915262][T23860] RBP: 00007fc7b31f3090 R08: 0000000000000000 R09: 0000000000000000 [ 1397.923247][T23860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1397.931230][T23860] R13: 0000000000000000 R14: 00007fc7b2535f80 R15: 00007ffe0e7296a8 [ 1397.939239][T23860] [ 1397.970213][T23860] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4656'. [ 1398.427567][ T5877] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1398.664794][ T5877] usb 5-1: Using ep0 maxpacket: 32 [ 1398.803040][ T5877] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 1398.912926][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1399.130862][ T5877] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 1399.150032][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1399.158074][ T5877] usb 5-1: Product: syz [ 1399.162440][ T5877] usb 5-1: Manufacturer: syz [ 1399.167026][ T5877] usb 5-1: SerialNumber: syz [ 1399.197112][ T5877] usb 5-1: config 0 descriptor?? [ 1399.206686][ T5877] usb 5-1: no audio or video endpoints found [ 1399.503262][T23869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1399.636192][T23869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1399.842191][ T5877] usb 5-1: USB disconnect, device number 24 [ 1400.039980][T13241] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 1401.395010][T13241] usb 3-1: not running at top speed; connect to a high speed hub [ 1401.406501][T13241] usb 3-1: config 6 has an invalid interface number: 130 but max is 1 [ 1401.436722][T13241] usb 3-1: config 6 has an invalid interface number: 39 but max is 1 [ 1401.485386][T13241] usb 3-1: config 6 has an invalid interface number: 18 but max is 1 [ 1401.557521][T13241] usb 3-1: config 6 has 3 interfaces, different from the descriptor's value: 2 [ 1401.567421][T13241] usb 3-1: config 6 has no interface number 0 [ 1401.574229][T13241] usb 3-1: config 6 has no interface number 1 [ 1401.580784][T13241] usb 3-1: config 6 has no interface number 2 [ 1401.586978][T13241] usb 3-1: config 6 interface 130 altsetting 3 endpoint 0x1 has invalid maxpacket 20609, setting to 64 [ 1401.598904][T13241] usb 3-1: config 6 interface 130 altsetting 3 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 1401.610488][T13241] usb 3-1: config 6 interface 130 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1401.621095][T13241] usb 3-1: config 6 interface 130 altsetting 3 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1401.742515][T13241] usb 3-1: config 6 interface 130 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1401.754750][T13241] usb 3-1: config 6 interface 130 altsetting 3 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 1401.765916][T13241] usb 3-1: config 6 interface 130 altsetting 3 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 1401.776996][T13241] usb 3-1: config 6 interface 130 altsetting 3 has 8 endpoint descriptors, different from the interface descriptor's value: 16 [ 1401.790353][T13241] usb 3-1: too many endpoints for config 6 interface 39 altsetting 25: 106, using maximum allowed: 30 [ 1401.801908][T13241] usb 3-1: config 6 interface 39 altsetting 25 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 1401.956899][T13241] usb 3-1: config 6 interface 39 altsetting 25 has a duplicate endpoint with address 0xE, skipping [ 1401.968002][T13241] usb 3-1: config 6 interface 39 altsetting 25 has a duplicate endpoint with address 0x2, skipping [ 1401.979085][T13241] usb 3-1: config 6 interface 39 altsetting 25 has a duplicate endpoint with address 0xB, skipping [ 1402.019523][T13241] usb 3-1: config 6 interface 39 altsetting 25 has a duplicate endpoint with address 0x5, skipping [ 1402.035756][T13241] usb 3-1: config 6 interface 39 altsetting 25 has a duplicate endpoint with address 0xD, skipping [ 1402.216724][T13241] usb 3-1: config 6 interface 39 altsetting 25 has a duplicate endpoint with address 0x2, skipping [ 1402.227787][T13241] usb 3-1: config 6 interface 39 altsetting 25 has 8 endpoint descriptors, different from the interface descriptor's value: 106 [ 1402.241418][T13241] usb 3-1: config 6 interface 18 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 1402.252509][T13241] usb 3-1: config 6 interface 18 altsetting 2 has a duplicate endpoint with address 0x7, skipping [ 1402.263632][T13241] usb 3-1: config 6 interface 18 altsetting 2 has a duplicate endpoint with address 0x1, skipping [ 1402.274751][T13241] usb 3-1: config 6 interface 18 altsetting 2 has an endpoint descriptor with address 0x12, changing to 0x2 [ 1402.286511][T13241] usb 3-1: config 6 interface 18 altsetting 2 has a duplicate endpoint with address 0x2, skipping [ 1402.297477][T13241] usb 3-1: config 6 interface 18 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1402.308554][T13241] usb 3-1: config 6 interface 18 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 1402.320539][T13241] usb 3-1: config 6 interface 18 altsetting 2 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1402.331989][T13241] usb 3-1: config 6 interface 18 altsetting 2 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 1402.332205][ T5878] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 1402.353637][T13241] usb 3-1: config 6 interface 130 has no altsetting 0 [ 1402.360959][T13241] usb 3-1: config 6 interface 39 has no altsetting 0 [ 1402.367982][T13241] usb 3-1: config 6 interface 18 has no altsetting 0 [ 1402.857164][T13241] usb 3-1: New USB device found, idVendor=1b3d, idProduct=016b, bcdDevice=49.88 [ 1402.866753][T13241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1402.991397][T13241] usb 3-1: can't set config #6, error -71 [ 1403.017045][T13241] usb 3-1: USB disconnect, device number 71 [ 1403.378389][T23926] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4676'. [ 1403.547564][ T5878] usb 10-1: Using ep0 maxpacket: 8 [ 1404.181449][ T5878] usb 10-1: config 0 has no interfaces? [ 1404.189422][ T5878] usb 10-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1404.199062][ T5878] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.208027][ T5878] usb 10-1: Product: syz [ 1404.212483][ T5878] usb 10-1: Manufacturer: syz [ 1404.217417][ T5878] usb 10-1: SerialNumber: syz [ 1404.224178][ T5878] usb 10-1: config 0 descriptor?? [ 1404.472033][T23911] netlink: 'syz.9.4672': attribute type 13 has an invalid length. [ 1405.829893][ T5878] usb 10-1: USB disconnect, device number 48 [ 1407.914228][T23987] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1407.926108][T23987] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1407.937999][T23987] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1407.948828][T23987] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1408.053475][T23987] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1408.093674][T23987] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1408.156198][T23987] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1408.189754][T23987] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1408.651701][T24007] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4699'. [ 1409.500588][ T5142] Bluetooth: hci1: command 0x0405 tx timeout [ 1409.761032][T24028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4704'. [ 1409.989589][T21823] Bluetooth: hci3: command 0x0406 tx timeout [ 1410.516703][T21823] Bluetooth: hci4: command 0x0c1a tx timeout [ 1410.959700][T24056] Bluetooth: MGMT ver 1.23 [ 1411.007942][T24059] FAULT_INJECTION: forcing a failure. [ 1411.007942][T24059] name failslab, interval 1, probability 0, space 0, times 0 [ 1411.039292][T24059] CPU: 0 UID: 0 PID: 24059 Comm: syz.2.4715 Not tainted 6.12.0-rc7-syzkaller #0 [ 1411.048372][T24059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1411.058546][T24059] Call Trace: [ 1411.061859][T24059] [ 1411.064811][T24059] dump_stack_lvl+0x241/0x360 [ 1411.069515][T24059] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1411.074741][T24059] ? __pfx__printk+0x10/0x10 [ 1411.079363][T24059] ? ref_tracker_alloc+0x332/0x490 [ 1411.084493][T24059] should_fail_ex+0x3b0/0x4e0 [ 1411.089185][T24059] ? skb_clone+0x20c/0x390 [ 1411.093621][T24059] should_failslab+0xac/0x100 [ 1411.098321][T24059] ? skb_clone+0x20c/0x390 [ 1411.102763][T24059] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1411.108160][T24059] skb_clone+0x20c/0x390 [ 1411.112435][T24059] __netlink_deliver_tap+0x3cc/0x7c0 [ 1411.117768][T24059] ? netlink_deliver_tap+0x2e/0x1b0 [ 1411.123001][T24059] netlink_deliver_tap+0x19d/0x1b0 [ 1411.128140][T24059] netlink_unicast+0x7c4/0x990 [ 1411.132929][T24059] ? __pfx_netlink_unicast+0x10/0x10 [ 1411.138228][T24059] ? __virt_addr_valid+0x183/0x530 [ 1411.143367][T24059] ? __check_object_size+0x48e/0x900 [ 1411.148702][T24059] netlink_sendmsg+0x8e4/0xcb0 [ 1411.153516][T24059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1411.158885][T24059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1411.164190][T24059] __sock_sendmsg+0x221/0x270 [ 1411.168900][T24059] ____sys_sendmsg+0x52a/0x7e0 [ 1411.173697][T24059] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1411.179026][T24059] __sys_sendmsg+0x292/0x380 [ 1411.183645][T24059] ? __pfx___sys_sendmsg+0x10/0x10 [ 1411.188790][T24059] ? __pfx_vfs_write+0x10/0x10 [ 1411.193600][T24059] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1411.200043][T24059] ? do_syscall_64+0x100/0x230 [ 1411.204844][T24059] ? do_syscall_64+0xb6/0x230 [ 1411.209556][T24059] do_syscall_64+0xf3/0x230 [ 1411.214095][T24059] ? clear_bhb_loop+0x35/0x90 [ 1411.218796][T24059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1411.224713][T24059] RIP: 0033:0x7f7d4737e719 [ 1411.229336][T24059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1411.249141][T24059] RSP: 002b:00007f7d4817f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1411.257586][T24059] RAX: ffffffffffffffda RBX: 00007f7d47535f80 RCX: 00007f7d4737e719 [ 1411.265583][T24059] RDX: 0000000004000002 RSI: 0000000020000400 RDI: 0000000000000004 [ 1411.273579][T24059] RBP: 00007f7d4817f090 R08: 0000000000000000 R09: 0000000000000000 [ 1411.281572][T24059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1411.289566][T24059] R13: 0000000000000000 R14: 00007f7d47535f80 R15: 00007ffcef3674f8 [ 1411.297572][T24059] [ 1411.510720][T21823] Bluetooth: hci1: command 0x0405 tx timeout [ 1412.195439][T19243] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1412.615303][T21823] Bluetooth: hci3: command 0x0406 tx timeout [ 1412.621879][T21823] Bluetooth: hci4: command 0x0c1a tx timeout [ 1412.639611][T19243] usb 6-1: Using ep0 maxpacket: 32 [ 1412.869564][T19243] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1412.892120][T19243] usb 6-1: config 128 has an invalid interface number: 127 but max is 3 [ 1412.982499][T19243] usb 6-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 1413.077921][T19243] usb 6-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 1413.103522][T19243] usb 6-1: config 128 has no interface number 0 [ 1413.111438][T19243] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 1413.122955][T19243] usb 6-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 26584, setting to 1024 [ 1413.134825][T19243] usb 6-1: config 128 interface 127 has no altsetting 0 [ 1413.345001][T19243] usb 6-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 1413.354235][T19243] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1413.362421][T19243] usb 6-1: Product: syz [ 1413.367130][T19243] usb 6-1: Manufacturer: syz [ 1413.372186][T19243] usb 6-1: SerialNumber: syz [ 1413.382264][T24082] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1414.205905][T24075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1414.229918][T24115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4729'. [ 1414.255109][T24075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1414.657582][ T5142] Bluetooth: hci4: command 0x0c1a tx timeout [ 1415.076422][T24115] team0 (unregistering): Port device team_slave_0 removed [ 1415.145958][T24115] team0 (unregistering): Port device team_slave_1 removed [ 1415.184603][T24128] netlink: 'syz.4.4732': attribute type 7 has an invalid length. [ 1415.206241][T24128] netlink: 'syz.4.4732': attribute type 8 has an invalid length. [ 1415.216788][T24128] netlink: 4244 bytes leftover after parsing attributes in process `syz.4.4732'. [ 1415.301389][T24133] Cannot find del_set index 4 as target [ 1415.569007][T19243] usb 6-1: USB disconnect, device number 4 [ 1415.709961][T24143] netlink: 428 bytes leftover after parsing attributes in process `syz.2.4733'. [ 1415.719351][T24143] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4733'. [ 1417.838156][T24175] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4745'. [ 1417.857130][T24175] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4745'. [ 1417.894114][T24175] netlink: 'syz.4.4745': attribute type 4 has an invalid length. [ 1417.925807][T24175] netlink: 'syz.4.4745': attribute type 4 has an invalid length. [ 1419.164724][T24195] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4749'. [ 1419.797887][T24200] FAULT_INJECTION: forcing a failure. [ 1419.797887][T24200] name failslab, interval 1, probability 0, space 0, times 0 [ 1419.827418][T24200] CPU: 1 UID: 0 PID: 24200 Comm: syz.9.4752 Not tainted 6.12.0-rc7-syzkaller #0 [ 1419.827482][T24200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1419.827499][T24200] Call Trace: [ 1419.827508][T24200] [ 1419.827517][T24200] dump_stack_lvl+0x241/0x360 [ 1419.827550][T24200] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1419.827573][T24200] ? __pfx__printk+0x10/0x10 [ 1419.827599][T24200] ? ref_tracker_alloc+0x332/0x490 [ 1419.827623][T24200] should_fail_ex+0x3b0/0x4e0 [ 1419.827646][T24200] ? skb_clone+0x20c/0x390 [ 1419.827669][T24200] should_failslab+0xac/0x100 [ 1419.827696][T24200] ? skb_clone+0x20c/0x390 [ 1419.827718][T24200] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1419.827743][T24200] skb_clone+0x20c/0x390 [ 1419.827768][T24200] __netlink_deliver_tap+0x3cc/0x7c0 [ 1419.827801][T24200] ? netlink_deliver_tap+0x2e/0x1b0 [ 1419.827821][T24200] netlink_deliver_tap+0x19d/0x1b0 [ 1419.827844][T24200] netlink_unicast+0x7c4/0x990 [ 1419.827873][T24200] ? __pfx_netlink_unicast+0x10/0x10 [ 1419.827890][T24200] ? __virt_addr_valid+0x183/0x530 [ 1419.827913][T24200] ? __check_object_size+0x48e/0x900 [ 1419.827946][T24200] netlink_sendmsg+0x8e4/0xcb0 [ 1419.827980][T24200] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1419.828014][T24200] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1419.828034][T24200] __sock_sendmsg+0x221/0x270 [ 1419.828057][T24200] ____sys_sendmsg+0x52a/0x7e0 [ 1419.828090][T24200] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1419.828131][T24200] __sys_sendmsg+0x292/0x380 [ 1419.828158][T24200] ? __pfx___sys_sendmsg+0x10/0x10 [ 1419.828195][T24200] ? __pfx_vfs_write+0x10/0x10 [ 1419.828244][T24200] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1419.828272][T24200] ? do_syscall_64+0x100/0x230 [ 1419.828299][T24200] ? do_syscall_64+0xb6/0x230 [ 1419.828325][T24200] do_syscall_64+0xf3/0x230 [ 1419.828347][T24200] ? clear_bhb_loop+0x35/0x90 [ 1419.828382][T24200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1419.828403][T24200] RIP: 0033:0x7f663a97e719 [ 1419.828421][T24200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1419.828438][T24200] RSP: 002b:00007f663b858038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1419.828463][T24200] RAX: ffffffffffffffda RBX: 00007f663ab35f80 RCX: 00007f663a97e719 [ 1419.828478][T24200] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000006 [ 1419.828490][T24200] RBP: 00007f663b858090 R08: 0000000000000000 R09: 0000000000000000 [ 1419.828503][T24200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1419.828516][T24200] R13: 0000000000000000 R14: 00007f663ab35f80 R15: 00007ffd0de72248 [ 1419.828545][T24200] [ 1420.006450][T24215] FAULT_INJECTION: forcing a failure. [ 1420.006450][T24215] name failslab, interval 1, probability 0, space 0, times 0 [ 1420.006484][T24215] CPU: 1 UID: 0 PID: 24215 Comm: syz.9.4757 Not tainted 6.12.0-rc7-syzkaller #0 [ 1420.006507][T24215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1420.006520][T24215] Call Trace: [ 1420.006528][T24215] [ 1420.006538][T24215] dump_stack_lvl+0x241/0x360 [ 1420.006571][T24215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1420.006594][T24215] ? __pfx__printk+0x10/0x10 [ 1420.006623][T24215] ? ref_tracker_alloc+0x332/0x490 [ 1420.006649][T24215] should_fail_ex+0x3b0/0x4e0 [ 1420.006673][T24215] ? skb_clone+0x20c/0x390 [ 1420.006697][T24215] should_failslab+0xac/0x100 [ 1420.006727][T24215] ? skb_clone+0x20c/0x390 [ 1420.006749][T24215] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1420.006775][T24215] skb_clone+0x20c/0x390 [ 1420.006804][T24215] __netlink_deliver_tap+0x3cc/0x7c0 [ 1420.006837][T24215] ? netlink_deliver_tap+0x2e/0x1b0 [ 1420.006859][T24215] netlink_deliver_tap+0x19d/0x1b0 [ 1420.006882][T24215] netlink_unicast+0x7c4/0x990 [ 1420.006911][T24215] ? __pfx_netlink_unicast+0x10/0x10 [ 1420.006930][T24215] ? __virt_addr_valid+0x183/0x530 [ 1420.006954][T24215] ? __check_object_size+0x48e/0x900 [ 1420.006986][T24215] netlink_sendmsg+0x8e4/0xcb0 [ 1420.007021][T24215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1420.007056][T24215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1420.007077][T24215] __sock_sendmsg+0x221/0x270 [ 1420.007100][T24215] ____sys_sendmsg+0x52a/0x7e0 [ 1420.007133][T24215] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1420.007174][T24215] __sys_sendmsg+0x292/0x380 [ 1420.007201][T24215] ? __pfx___sys_sendmsg+0x10/0x10 [ 1420.007233][T24215] ? __pfx_vfs_write+0x10/0x10 [ 1420.007277][T24215] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1420.007305][T24215] ? do_syscall_64+0x100/0x230 [ 1420.007331][T24215] ? do_syscall_64+0xb6/0x230 [ 1420.007363][T24215] do_syscall_64+0xf3/0x230 [ 1420.007387][T24215] ? clear_bhb_loop+0x35/0x90 [ 1420.007413][T24215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1420.007433][T24215] RIP: 0033:0x7f663a97e719 [ 1420.007451][T24215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1420.007468][T24215] RSP: 002b:00007f663b858038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1420.007492][T24215] RAX: ffffffffffffffda RBX: 00007f663ab35f80 RCX: 00007f663a97e719 [ 1420.007507][T24215] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 1420.007521][T24215] RBP: 00007f663b858090 R08: 0000000000000000 R09: 0000000000000000 [ 1420.007535][T24215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1420.007548][T24215] R13: 0000000000000000 R14: 00007f663ab35f80 R15: 00007ffd0de72248 [ 1420.007578][T24215] [ 1423.099004][T24251] bridge0: port 2(bridge_slave_1) entered disabled state [ 1423.352328][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.853454][T21823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1426.262700][T21823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1427.371420][T21823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1427.456838][T21823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1427.466993][T21823] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1427.474952][T21823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1427.566516][T24307] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1427.602432][T24307] overlayfs: failed to set xattr on upper [ 1427.622085][T24307] overlayfs: ...falling back to index=off. [ 1427.627964][T24307] overlayfs: ...falling back to uuid=null. [ 1427.730865][ T6443] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.946593][T24313] openvswitch: netlink: Actions may not be safe on all matching packets [ 1428.177286][ T6443] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.199259][T19243] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1428.246639][T24320] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1428.389031][T19243] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1428.411554][T19243] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1428.441029][ T6443] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1428.459899][T19243] usb 6-1: New USB device found, idVendor=056a, idProduct=033c, bcdDevice= 0.00 [ 1428.484673][T24331] overlayfs: failed to resolve './file2': -2 [ 1428.573124][T19243] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1428.581095][T19243] usb 6-1: config 0 descriptor?? [ 1429.262612][ T6443] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.318554][T24341] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4784'. [ 1429.343819][T24341] nbd: socks must be embedded in a SOCK_ITEM attr [ 1429.546523][T24292] chnl_net:caif_netlink_parms(): no params data found [ 1429.589638][ T5142] Bluetooth: hci1: command tx timeout [ 1429.726304][T19243] usbhid 6-1:0.0: can't add hid device: -71 [ 1429.769263][T19243] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1429.829478][T19243] usb 6-1: USB disconnect, device number 5 [ 1429.922672][ T6443] bridge_slave_1: left allmulticast mode [ 1429.928785][ T6443] bridge_slave_1: left promiscuous mode [ 1429.951757][ T6443] bridge0: port 2(bridge_slave_1) entered disabled state [ 1430.024112][ T6443] bridge_slave_0: left allmulticast mode [ 1430.041985][ T6443] bridge_slave_0: left promiscuous mode [ 1430.089063][ T6443] bridge0: port 1(bridge_slave_0) entered disabled state [ 1430.431663][T24359] input: syz0 as /devices/virtual/input/input47 [ 1432.093878][ T5142] Bluetooth: hci1: command tx timeout [ 1432.439555][T24372] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4798'. [ 1433.783422][T24384] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1433.880338][ T6443] bond0 (unregistering): Released all slaves [ 1433.951608][T24384] usb 5-1: Using ep0 maxpacket: 16 [ 1433.993357][T24384] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1434.007719][T24384] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1434.017876][T24384] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1434.048446][T24384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1434.076592][T24384] usb 5-1: config 0 descriptor?? [ 1434.161011][ T5142] Bluetooth: hci1: command tx timeout [ 1434.192182][ T6443] bond1 (unregistering): (slave batadv1): Releasing active interface [ 1434.204272][ T6443] bond1 (unregistering): Released all slaves [ 1434.286069][T24395] vlan2: entered promiscuous mode [ 1434.304730][T24395] bridge0: entered promiscuous mode [ 1434.334460][T24395] bridge0: port 3(vlan2) entered blocking state [ 1434.342637][T24395] bridge0: port 3(vlan2) entered disabled state [ 1434.349369][T24395] vlan2: entered allmulticast mode [ 1434.354544][T24395] bridge0: entered allmulticast mode [ 1434.412204][T24395] vlan2: left allmulticast mode [ 1434.419059][T24395] bridge0: left allmulticast mode [ 1434.435718][T24395] bridge0: left promiscuous mode [ 1434.563416][T24292] bridge0: port 1(bridge_slave_0) entered blocking state [ 1434.600209][T24384] input: HID 05ac:8241 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:05AC:8241.001A/input/input48 [ 1434.613797][T24292] bridge0: port 1(bridge_slave_0) entered disabled state [ 1434.621390][T24292] bridge_slave_0: entered allmulticast mode [ 1434.628672][T24292] bridge_slave_0: entered promiscuous mode [ 1434.637634][T24292] bridge0: port 2(bridge_slave_1) entered blocking state [ 1434.645106][T24292] bridge0: port 2(bridge_slave_1) entered disabled state [ 1434.652508][T24292] bridge_slave_1: entered allmulticast mode [ 1434.659640][T24292] bridge_slave_1: entered promiscuous mode [ 1435.095512][T24384] appleir 0003:05AC:8241.001A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 1435.124336][ T6443] tipc: Left network mode [ 1435.152427][T24292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1435.222070][T24292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1435.342421][T24413] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4810'. [ 1435.483239][T24292] team0: Port device team_slave_0 added [ 1435.675171][T24292] team0: Port device team_slave_1 added [ 1436.348418][ T5142] Bluetooth: hci1: command tx timeout [ 1436.819519][T19243] usb 5-1: reset high-speed USB device number 25 using dummy_hcd [ 1438.090460][T24443] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1438.112842][T24426] netlink: 64 bytes leftover after parsing attributes in process `syz.6.4814'. [ 1438.134534][T24292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1438.158551][T24292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1438.205475][T24292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1438.232590][ T6443] hsr_slave_0: left promiscuous mode [ 1438.249923][ T6443] hsr_slave_1: left promiscuous mode [ 1438.256454][ T6443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1438.266848][T19243] usb 5-1: device descriptor read/64, error -71 [ 1438.274814][ T6443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1438.284253][T24448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4820'. [ 1438.293698][ T6443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1438.301348][ T6443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1438.317884][ T6443] veth1_macvtap: left promiscuous mode [ 1438.323928][ T6443] veth0_macvtap: left promiscuous mode [ 1438.329255][T13241] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1438.329809][ T6443] veth1_vlan: left promiscuous mode [ 1438.342593][ T6443] veth0_vlan: left promiscuous mode [ 1438.489442][T13241] usb 6-1: Using ep0 maxpacket: 8 [ 1438.506789][T13241] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1438.519360][T19243] usb 5-1: reset high-speed USB device number 25 using dummy_hcd [ 1438.525904][T13241] usb 6-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 1438.537616][T19243] usb 5-1: device reset changed ep0 maxpacket size! [ 1438.560509][T13241] usb 6-1: New USB device found, idVendor=19d2, idProduct=1059, bcdDevice=25.70 [ 1438.573139][T13241] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1438.582584][T24384] usb 5-1: USB disconnect, device number 25 [ 1438.623324][ T6443] pimreg (unregistering): left allmulticast mode [ 1438.789406][T24384] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1438.799054][T13241] usb 6-1: string descriptor 0 read error: -71 [ 1438.830038][T13241] usb 6-1: USB disconnect, device number 6 [ 1438.962741][T24384] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 384 [ 1438.992132][T24384] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1439.007823][T24384] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1439.043555][T24384] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1439.051898][T24384] usb 5-1: SerialNumber: syz [ 1439.091599][T24431] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1439.331808][T24431] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1439.378852][T24453] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4821'. [ 1439.825314][T24384] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 1440.050064][T24431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1440.087513][T24431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1440.098780][T19243] usb 5-1: USB disconnect, device number 26 [ 1441.988941][T24292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1441.998722][T24292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1442.025753][T24292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1442.183651][T24292] hsr_slave_0: entered promiscuous mode [ 1442.199571][T24292] hsr_slave_1: entered promiscuous mode [ 1442.226580][T24475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4825'. [ 1442.353086][T24479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4827'. [ 1443.652286][T24488] Cannot find add_set index 0 as target [ 1443.735330][ T6443] IPVS: stop unused estimator thread 0... [ 1444.547352][ T969] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1444.744562][ T969] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.758435][ T969] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1444.773525][ T969] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1444.814147][T24292] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1445.090924][T24512] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4835'. [ 1445.975191][T24292] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1445.988148][ T969] usb 5-1: New USB device found, idVendor=0086, idProduct=0b5b, bcdDevice=e1.c5 [ 1445.989371][T24292] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1445.998540][ T969] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1446.019278][ T969] usb 5-1: Product: syz [ 1446.706465][ T969] usb 5-1: Manufacturer: syz [ 1446.711257][ T969] usb 5-1: SerialNumber: syz [ 1446.741040][T24292] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1446.870905][ T969] usb 5-1: config 0 descriptor?? [ 1446.876906][ T969] usb 5-1: can't set config #0, error -71 [ 1446.884263][ T969] usb 5-1: USB disconnect, device number 27 [ 1446.912775][T24515] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4838'. [ 1446.946356][T24515] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4838'. [ 1447.032990][T24511] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4838'. [ 1447.048893][T24292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1447.110837][T24292] 8021q: adding VLAN 0 to HW filter on device team0 [ 1447.119622][T24515] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4838'. [ 1447.129986][T13068] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.137119][T13068] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1447.156691][T13068] bridge0: port 2(bridge_slave_1) entered blocking state [ 1447.163874][T13068] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1449.381153][T24292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1449.708628][T24551] ceph: No mds server is up or the cluster is laggy [ 1449.716818][ T969] libceph: connect (1)[c::]:6789 error -101 [ 1449.724275][ T969] libceph: mon0 (1)[c::]:6789 connect error [ 1449.820853][T24292] veth0_vlan: entered promiscuous mode [ 1449.833292][T24292] veth1_vlan: entered promiscuous mode [ 1449.858017][T24292] veth0_macvtap: entered promiscuous mode [ 1449.867296][T24292] veth1_macvtap: entered promiscuous mode [ 1449.884865][T24292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1449.895464][T24292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.905542][T24292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1449.916415][T24292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.926334][T24292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1449.937810][T24292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.948011][T24292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1449.958508][T24292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1449.971064][T24292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1449.988495][T24292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1450.000481][T24292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1450.010537][T24292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1450.021133][T24292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1450.031522][T24292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1450.043468][T24568] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4848'. [ 1450.052734][T24292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1450.062919][T24292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1450.073688][T24292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1450.089495][T24292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1450.759762][ T969] libceph: connect (1)[c::]:6789 error -101 [ 1450.768747][ T969] libceph: mon0 (1)[c::]:6789 connect error [ 1450.967455][T24292] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1450.993118][T24292] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.018130][T24292] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.067264][T24292] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.365780][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1451.375389][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1451.406994][ T4872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1451.415911][ T4872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1451.578639][T24591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1451.609394][T24591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1451.629934][T24591] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4775'. [ 1452.397585][T24611] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4859'. [ 1453.355583][T24624] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4862'. [ 1453.400022][T24624] FAULT_INJECTION: forcing a failure. [ 1453.400022][T24624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1453.413746][T24624] CPU: 1 UID: 0 PID: 24624 Comm: syz.4.4862 Not tainted 6.12.0-rc7-syzkaller #0 [ 1453.422803][T24624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1453.432874][T24624] Call Trace: [ 1453.436168][T24624] [ 1453.439133][T24624] dump_stack_lvl+0x241/0x360 [ 1453.443934][T24624] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1453.449165][T24624] ? __pfx__printk+0x10/0x10 [ 1453.453789][T24624] ? snprintf+0xda/0x120 [ 1453.458074][T24624] should_fail_ex+0x3b0/0x4e0 [ 1453.462785][T24624] _copy_to_user+0x31/0xb0 [ 1453.467226][T24624] simple_read_from_buffer+0xca/0x150 [ 1453.472629][T24624] proc_fail_nth_read+0x1e9/0x250 [ 1453.477683][T24624] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1453.483260][T24624] ? rw_verify_area+0x55e/0x6f0 [ 1453.488139][T24624] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1453.493859][T24624] vfs_read+0x1fc/0xb70 [ 1453.498040][T24624] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1453.504409][T24624] ? __pfx_vfs_read+0x10/0x10 [ 1453.509109][T24624] ? irqentry_exit+0x63/0x90 [ 1453.513725][T24624] ? lockdep_hardirqs_on+0x99/0x150 [ 1453.518972][T24624] ksys_read+0x183/0x2b0 [ 1453.523241][T24624] ? __pfx_ksys_read+0x10/0x10 [ 1453.528038][T24624] ? do_syscall_64+0x100/0x230 [ 1453.532827][T24624] ? do_syscall_64+0xb6/0x230 [ 1453.537628][T24624] do_syscall_64+0xf3/0x230 [ 1453.542154][T24624] ? clear_bhb_loop+0x35/0x90 [ 1453.546974][T24624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.552883][T24624] RIP: 0033:0x7f9691d7d15c [ 1453.557317][T24624] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1453.577041][T24624] RSP: 002b:00007f9692b70030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1453.585484][T24624] RAX: ffffffffffffffda RBX: 00007f9691f36130 RCX: 00007f9691d7d15c [ 1453.593486][T24624] RDX: 000000000000000f RSI: 00007f9692b700a0 RDI: 000000000000000b [ 1453.601776][T24624] RBP: 00007f9692b70090 R08: 0000000000000000 R09: 0000000000000000 [ 1453.609956][T24624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1453.618121][T24624] R13: 0000000000000000 R14: 00007f9691f36130 R15: 00007ffe8c75fab8 [ 1453.626137][T24624] [ 1453.672279][ T35] Bluetooth: hci5: Frame reassembly failed (-90) [ 1454.446602][ T29] audit: type=1326 audit(1731349776.718:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24620 comm="syz.5.4863" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7b237e719 code=0x0 [ 1454.508030][T24597] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4857'. [ 1454.518411][T24597] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4857'. [ 1455.689856][ T5142] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 1455.783777][T24640] netlink: 'syz.2.4867': attribute type 1 has an invalid length. [ 1456.246299][T24640] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1457.659614][T24664] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4873'. [ 1459.971230][T24677] usb usb1: usbfs: process 24677 (syz.4.4877) did not claim interface 3 before use [ 1460.019304][ T29] audit: type=1326 audit(1731349782.968:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24674 comm="syz.5.4875" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc7b237e719 code=0x0 [ 1460.399272][T24384] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 1460.840778][T24384] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 1460.903827][T24384] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1460.905724][T24697] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 1460.925278][T24384] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1461.038958][T24384] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1461.117189][T24384] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1461.224332][T24384] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1461.278381][T24384] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1461.297360][T24384] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1461.308749][T24384] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1461.319574][T24384] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1461.343676][T24384] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1461.446721][T24384] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1461.459539][T24384] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1461.472344][T24706] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4884'. [ 1461.490570][T24384] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1461.509192][T24384] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1461.548981][T24384] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1461.566543][T24384] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1461.585591][T24384] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1461.595823][T24384] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1461.606433][T24384] usb 10-1: Product: syz [ 1461.611773][T24384] usb 10-1: Manufacturer: syz [ 1461.616690][T24384] usb 10-1: SerialNumber: syz [ 1461.623756][T24384] usb 10-1: config 0 descriptor?? [ 1461.632552][T24384] yurex 10-1:0.0: Could not find endpoints [ 1461.844643][T24384] usb 10-1: USB disconnect, device number 49 [ 1461.868490][T24716] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4887'. [ 1462.968798][T24726] usb usb1: usbfs: process 24726 (syz.6.4890) did not claim interface 3 before use [ 1463.157947][ T29] audit: type=1326 audit(1731349786.118:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24728 comm="syz.6.4892" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc5977e719 code=0x0 [ 1464.171242][T24760] 9pnet_fd: Insufficient options for proto=fd [ 1465.117869][T24767] usb usb1: usbfs: process 24767 (syz.6.4902) did not claim interface 3 before use [ 1466.148771][T24778] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1468.411540][T24804] gtp0: entered promiscuous mode [ 1468.508351][T24804] gtp0: entered allmulticast mode [ 1468.836513][T24819] usb usb1: usbfs: process 24819 (syz.5.4915) did not claim interface 3 before use [ 1469.658484][T24836] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1470.959481][T24845] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4922'. [ 1471.259595][T24847] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4923'. [ 1472.607589][T24858] netlink: 76 bytes leftover after parsing attributes in process `syz.9.4925'. [ 1476.284738][ T29] audit: type=1326 audit(1731349799.248:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=24883 comm="syz.9.4933" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff70cd7e719 code=0x0 [ 1476.888049][T24898] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4935'. [ 1478.458634][ T5877] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1478.599604][ T5877] usb 5-1: device descriptor read/64, error -71 [ 1479.229791][T24925] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4943'. [ 1479.249494][ T5877] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1479.267944][T24925] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 1479.399390][ T5877] usb 5-1: device descriptor read/64, error -71 [ 1479.519482][ T5877] usb usb5-port1: attempt power cycle [ 1479.681377][T24938] tipc: Can't bind to reserved service type 1 [ 1479.789507][ T5947] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1479.879801][ T5877] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1479.891674][T24944] Can't find ip_set type [ 1479.928970][ T5877] usb 5-1: device descriptor read/8, error -71 [ 1480.002194][ T5947] usb 3-1: config 0 has an invalid interface number: 83 but max is 0 [ 1480.014990][ T5947] usb 3-1: config 0 has no interface number 0 [ 1480.028735][ T5947] usb 3-1: config 0 interface 83 has no altsetting 0 [ 1480.065740][ T5947] usb 3-1: New USB device found, idVendor=1bc7, idProduct=9201, bcdDevice=89.4f [ 1480.080179][ T5947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.095983][ T5947] usb 3-1: Product: syz [ 1480.100466][ T5947] usb 3-1: Manufacturer: syz [ 1480.105179][ T5947] usb 3-1: SerialNumber: syz [ 1480.127812][ T5947] usb 3-1: config 0 descriptor?? [ 1480.330058][ T5877] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1480.342910][ T5947] option 3-1:0.83: GSM modem (1-port) converter detected [ 1480.352393][ T5947] usb 3-1: USB disconnect, device number 72 [ 1480.371999][ T5947] option 3-1:0.83: device disconnected [ 1480.373290][ T5877] usb 5-1: device descriptor read/8, error -71 [ 1480.489814][ T5877] usb usb5-port1: unable to enumerate USB device [ 1481.818297][T24976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4960'. [ 1481.819835][T24975] netlink: 76 bytes leftover after parsing attributes in process `syz.9.4959'. [ 1482.620980][T24980] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1484.941548][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.861505][T25022] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4972'. [ 1486.908296][T25032] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4973'. [ 1487.313780][T25042] netlink: 'syz.6.4977': attribute type 9 has an invalid length. [ 1487.370812][T25042] netlink: 134660 bytes leftover after parsing attributes in process `syz.6.4977'. [ 1488.641165][T25063] 9pnet_virtio: no channels available for device 127.0.0.1 [ 1489.841316][ T5947] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1489.977685][T25092] netlink: 'syz.9.4992': attribute type 1 has an invalid length. [ 1489.985843][ T5947] usb 3-1: device descriptor read/64, error -71 [ 1490.003340][T25092] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 1490.249510][ T5947] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1490.306279][T25101] veth0: entered promiscuous mode [ 1490.419859][ T5947] usb 3-1: device descriptor read/64, error -71 [ 1490.459700][T25101] veth0: entered allmulticast mode [ 1490.600194][ T5947] usb usb3-port1: attempt power cycle [ 1490.938170][T25101] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 1491.013792][T25107] ɶƣ0GC¦!: entered promiscuous mode [ 1491.260385][ T5947] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1491.323640][ T5947] usb 3-1: device descriptor read/8, error -71 [ 1491.340881][T25115] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5000'. [ 1491.729391][ T5947] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1491.751690][ T5947] usb 3-1: device descriptor read/8, error -71 [ 1492.122102][ T5947] usb usb3-port1: unable to enumerate USB device [ 1492.293830][T25134] syz.4.5005[25134] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1492.293943][T25134] syz.4.5005[25134] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1492.391778][T25134] syz.4.5005[25134] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1492.461705][T25140] xt_CT: No such helper "syz0" [ 1492.826966][T25151] pim6reg: entered allmulticast mode [ 1493.154032][T25140] pim6reg: left allmulticast mode [ 1493.365664][T25164] binder: 25160:25164 ioctl c0306201 0 returned -14 [ 1495.478299][T25189] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5018'. [ 1495.526958][T25189] netlink: 22 bytes leftover after parsing attributes in process `syz.5.5018'. [ 1495.577156][T25189] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5018'. [ 1495.639962][T25189] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5018'. [ 1495.729457][ T29] audit: type=1326 audit(1731349818.688:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25192 comm="syz.6.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5977e719 code=0x7ffc0000 [ 1495.803960][ T29] audit: type=1326 audit(1731349818.688:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25192 comm="syz.6.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efc5977e719 code=0x7ffc0000 [ 1495.990600][ T29] audit: type=1326 audit(1731349818.688:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25192 comm="syz.6.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5977e719 code=0x7ffc0000 [ 1496.042169][T25198] mkiss: ax0: crc mode is auto. [ 1496.050652][ T29] audit: type=1326 audit(1731349818.688:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25192 comm="syz.6.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efc5977e719 code=0x7ffc0000 [ 1496.088433][ T29] audit: type=1326 audit(1731349818.728:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25192 comm="syz.6.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5977e719 code=0x7ffc0000 [ 1496.088487][ T29] audit: type=1326 audit(1731349818.728:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25192 comm="syz.6.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7efc5977e719 code=0x7ffc0000 [ 1496.088521][ T29] audit: type=1326 audit(1731349818.728:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25192 comm="syz.6.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5977e719 code=0x7ffc0000 [ 1496.088555][ T29] audit: type=1326 audit(1731349818.728:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25192 comm="syz.6.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5977e719 code=0x7ffc0000 [ 1496.088587][ T29] audit: type=1326 audit(1731349818.748:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25192 comm="syz.6.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7efc5977e719 code=0x7ffc0000 [ 1496.088621][ T29] audit: type=1326 audit(1731349818.748:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25192 comm="syz.6.5020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc5977e719 code=0x7ffc0000 [ 1496.392470][ C0] vkms_vblank_simulate: vblank timer overrun [ 1497.892417][T25233] veth0_to_bridge: entered promiscuous mode [ 1498.609875][T25248] netlink: 'syz.5.5036': attribute type 3 has an invalid length. [ 1498.665156][T25248] netlink: 'syz.5.5036': attribute type 4 has an invalid length. [ 1498.739877][T25248] netlink: 'syz.5.5036': attribute type 7 has an invalid length. [ 1498.781286][T25225] veth0_to_bridge: left promiscuous mode [ 1498.795226][T25248] netlink: 'syz.5.5036': attribute type 8 has an invalid length. [ 1498.860459][T25248] netlink: 'syz.5.5036': attribute type 7 has an invalid length. [ 1498.909292][T25248] netlink: 198140 bytes leftover after parsing attributes in process `syz.5.5036'. [ 1499.198896][T25265] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1499.390730][T25277] netlink: 'syz.2.5045': attribute type 3 has an invalid length. [ 1499.431361][T25277] openvswitch: netlink: Actions may not be safe on all matching packets [ 1500.932651][T25268] binder: 25267:25268 ioctl c0306201 20001a80 returned -14 [ 1506.038089][T25335] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1506.605436][T25358] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5070'. [ 1507.471933][T25367] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5072'. [ 1507.554735][T25369] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 1507.828606][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 1507.828625][ T29] audit: type=1326 audit(1731349830.788:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25370 comm="syz.5.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b237e719 code=0x7fc00000 [ 1507.828668][ T29] audit: type=1326 audit(1731349830.788:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25370 comm="syz.5.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7fc7b237e719 code=0x7fc00000 [ 1507.828703][ T29] audit: type=1326 audit(1731349830.788:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25370 comm="syz.5.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b237e719 code=0x7fc00000 [ 1507.828736][ T29] audit: type=1326 audit(1731349830.788:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25370 comm="syz.5.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b237e719 code=0x7fc00000 [ 1507.828769][ T29] audit: type=1326 audit(1731349830.788:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25370 comm="syz.5.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b237e719 code=0x7fc00000 [ 1507.828802][ T29] audit: type=1326 audit(1731349830.788:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25370 comm="syz.5.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b237e719 code=0x7fc00000 [ 1507.828834][ T29] audit: type=1326 audit(1731349830.788:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25370 comm="syz.5.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b237e719 code=0x7fc00000 [ 1507.828867][ T29] audit: type=1326 audit(1731349830.788:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25370 comm="syz.5.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b237e719 code=0x7fc00000 [ 1507.828899][ T29] audit: type=1326 audit(1731349830.788:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25370 comm="syz.5.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b237e719 code=0x7fc00000 [ 1507.828932][ T29] audit: type=1326 audit(1731349830.788:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25370 comm="syz.5.5076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc7b237e719 code=0x7fc00000 [ 1509.008789][ C0] vkms_vblank_simulate: vblank timer overrun [ 1509.028708][T25391] netlink: 'syz.9.5080': attribute type 3 has an invalid length. [ 1509.133510][T25391] netlink: 130984 bytes leftover after parsing attributes in process `syz.9.5080'. [ 1509.999964][ T5947] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 1510.351619][ T5947] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1510.503263][ T5947] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1510.605631][ T5947] usb 10-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1510.615309][ T5947] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.659853][ T5947] usb 10-1: config 0 descriptor?? [ 1510.751504][T25420] No such timeout policy "syz0" [ 1511.800161][ T5947] hid (null): nested delimiters [ 1511.808797][ T5947] hid-led 0003:27B8:01ED.001B: nested delimiters [ 1511.815582][ T5947] hid-led 0003:27B8:01ED.001B: item 0 1 2 10 parsing failed [ 1511.823560][ T5947] hid-led 0003:27B8:01ED.001B: probe with driver hid-led failed with error -22 [ 1511.836412][ T5947] usb 10-1: USB disconnect, device number 50 [ 1511.943509][T25443] FAULT_INJECTION: forcing a failure. [ 1511.943509][T25443] name failslab, interval 1, probability 0, space 0, times 0 [ 1511.965244][T25443] CPU: 0 UID: 0 PID: 25443 Comm: syz.6.5094 Not tainted 6.12.0-rc7-syzkaller #0 [ 1511.974334][T25443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1511.984858][T25443] Call Trace: [ 1511.988159][T25443] [ 1511.991109][T25443] dump_stack_lvl+0x241/0x360 [ 1511.996267][T25443] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1512.001525][T25443] ? __pfx__printk+0x10/0x10 [ 1512.006607][T25443] ? fs_reclaim_acquire+0x93/0x130 [ 1512.011860][T25443] ? __pfx___might_resched+0x10/0x10 [ 1512.017188][T25443] should_fail_ex+0x3b0/0x4e0 [ 1512.021908][T25443] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1512.027677][T25443] should_failslab+0xac/0x100 [ 1512.032388][T25443] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1512.038129][T25443] __kmalloc_noprof+0xd8/0x400 [ 1512.042933][T25443] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1512.048904][T25443] tomoyo_path_number_perm+0x23a/0x880 [ 1512.054846][T25443] ? tomoyo_path_number_perm+0x208/0x880 [ 1512.060529][T25443] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1512.066581][T25443] ? __fget_files+0x29/0x470 [ 1512.071221][T25443] ? __fget_files+0x3f3/0x470 [ 1512.075956][T25443] security_file_ioctl+0xc6/0x2a0 [ 1512.081031][T25443] __se_sys_ioctl+0x47/0x170 [ 1512.085841][T25443] do_syscall_64+0xf3/0x230 [ 1512.090383][T25443] ? clear_bhb_loop+0x35/0x90 [ 1512.095191][T25443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1512.101109][T25443] RIP: 0033:0x7efc5977e719 [ 1512.105542][T25443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1512.125269][T25443] RSP: 002b:00007efc5a58d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1512.133726][T25443] RAX: ffffffffffffffda RBX: 00007efc59936058 RCX: 00007efc5977e719 [ 1512.141739][T25443] RDX: 0000000020000040 RSI: 0000000000002284 RDI: 0000000000000003 [ 1512.149760][T25443] RBP: 00007efc5a58d090 R08: 0000000000000000 R09: 0000000000000000 [ 1512.157851][T25443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1512.165860][T25443] R13: 0000000000000000 R14: 00007efc59936058 R15: 00007fffe716a4e8 [ 1512.173879][T25443] [ 1512.177080][ C0] vkms_vblank_simulate: vblank timer overrun [ 1512.229601][T25443] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1512.838773][T25443] sd 0:0:1:0: device reset [ 1513.113096][T25455] netlink: 132 bytes leftover after parsing attributes in process `syz.6.5098'. [ 1513.158232][T25455] netlink: 'syz.6.5098': attribute type 10 has an invalid length. [ 1513.178328][T25455] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1513.268691][T25460] FAULT_INJECTION: forcing a failure. [ 1513.268691][T25460] name failslab, interval 1, probability 0, space 0, times 0 [ 1513.281890][T25460] CPU: 0 UID: 0 PID: 25460 Comm: syz.2.5097 Not tainted 6.12.0-rc7-syzkaller #0 [ 1513.290961][T25460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1513.301747][T25460] Call Trace: [ 1513.305145][T25460] [ 1513.308102][T25460] dump_stack_lvl+0x241/0x360 [ 1513.312824][T25460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1513.318247][T25460] ? __pfx__printk+0x10/0x10 [ 1513.322875][T25460] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 1513.328396][T25460] ? __pfx___might_resched+0x10/0x10 [ 1513.334165][T25460] should_fail_ex+0x3b0/0x4e0 [ 1513.339508][T25460] should_failslab+0xac/0x100 [ 1513.344330][T25460] ? __se_sys_fsopen+0x12c/0x2c0 [ 1513.349402][T25460] __kmalloc_cache_noprof+0x6c/0x2c0 [ 1513.354726][T25460] __se_sys_fsopen+0x12c/0x2c0 [ 1513.359620][T25460] do_syscall_64+0xf3/0x230 [ 1513.364180][T25460] ? clear_bhb_loop+0x35/0x90 [ 1513.368914][T25460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1513.375440][T25460] RIP: 0033:0x7f7d4737e719 [ 1513.379982][T25460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1513.399800][T25460] RSP: 002b:00007f7d4813d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 1513.408256][T25460] RAX: ffffffffffffffda RBX: 00007f7d47536130 RCX: 00007f7d4737e719 [ 1513.416457][T25460] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 1513.424498][T25460] RBP: 00007f7d4813d090 R08: 0000000000000000 R09: 0000000000000000 [ 1513.433637][T25460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1513.441653][T25460] R13: 0000000000000000 R14: 00007f7d47536130 R15: 00007ffcef3674f8 [ 1513.449671][T25460] [ 1513.647341][T24384] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1513.816521][T24384] usb 6-1: Using ep0 maxpacket: 16 [ 1513.850675][T24384] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 1513.869302][T24384] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 1513.896219][T24384] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 1513.928965][T24384] usb 6-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1513.959144][T24384] usb 6-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 1513.968948][T24384] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1514.008737][T24384] usb 6-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 1514.029291][T24384] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.050505][T24384] ums-sddr09 6-1:1.0: USB Mass Storage device detected [ 1514.256352][T24384] scsi host1: usb-storage 6-1:1.0 [ 1514.359334][ T5877] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1514.455318][ T5947] usb 6-1: USB disconnect, device number 7 [ 1514.521370][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1514.539940][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1514.579167][ T5877] usb 5-1: New USB device found, idVendor=056a, idProduct=0059, bcdDevice= 0.00 [ 1514.609154][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.631290][ T5877] usb 5-1: config 0 descriptor?? [ 1515.128002][T25492] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5107'. [ 1515.799670][ T5877] usbhid 5-1:0.0: can't add hid device: -71 [ 1515.809258][ T5877] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1515.926055][ T5877] usb 5-1: USB disconnect, device number 32 [ 1516.269058][T25502] openvswitch: netlink: Actions may not be safe on all matching packets [ 1517.164210][T25503] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5110'. [ 1518.511156][T25514] FAULT_INJECTION: forcing a failure. [ 1518.511156][T25514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1518.751254][T25514] CPU: 0 UID: 0 PID: 25514 Comm: syz.2.5115 Not tainted 6.12.0-rc7-syzkaller #0 [ 1518.760816][T25514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1518.771872][T25514] Call Trace: [ 1518.775173][T25514] [ 1518.778128][T25514] dump_stack_lvl+0x241/0x360 [ 1518.782963][T25514] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1518.789454][T25514] ? __pfx__printk+0x10/0x10 [ 1518.794104][T25514] ? __pfx_lock_release+0x10/0x10 [ 1518.799182][T25514] should_fail_ex+0x3b0/0x4e0 [ 1518.803904][T25514] _copy_from_user+0x2f/0xc0 [ 1518.809079][T25514] __se_sys_mount+0x17d/0x3c0 [ 1518.813812][T25514] ? __pfx___se_sys_mount+0x10/0x10 [ 1518.819056][T25514] ? do_syscall_64+0x100/0x230 [ 1518.823868][T25514] ? __x64_sys_mount+0x20/0xc0 [ 1518.828673][T25514] do_syscall_64+0xf3/0x230 [ 1518.833224][T25514] ? clear_bhb_loop+0x35/0x90 [ 1518.837951][T25514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1518.844332][T25514] RIP: 0033:0x7f7d4737e719 [ 1518.849135][T25514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1518.868881][T25514] RSP: 002b:00007f7d4817f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1518.877445][T25514] RAX: ffffffffffffffda RBX: 00007f7d47535f80 RCX: 00007f7d4737e719 [ 1518.885552][T25514] RDX: 0000000020000240 RSI: 0000000020000140 RDI: 0000000000000000 [ 1518.893829][T25514] RBP: 00007f7d4817f090 R08: 00000000200001c0 R09: 0000000000000000 [ 1518.901848][T25514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1518.909949][T25514] R13: 0000000000000000 R14: 00007f7d47535f80 R15: 00007ffcef3674f8 [ 1518.918491][T25514] [ 1519.984443][T25532] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5118'. [ 1520.016983][T25514] overlayfs: statfs failed on './file0' [ 1523.812007][T25559] FAULT_INJECTION: forcing a failure. [ 1523.812007][T25559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1523.825224][T25559] CPU: 0 UID: 0 PID: 25559 Comm: syz.2.5120 Not tainted 6.12.0-rc7-syzkaller #0 [ 1523.834277][T25559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1523.844939][T25559] Call Trace: [ 1523.848285][T25559] [ 1523.851240][T25559] dump_stack_lvl+0x241/0x360 [ 1523.855960][T25559] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1523.861302][T25559] ? __pfx__printk+0x10/0x10 [ 1523.865940][T25559] ? snprintf+0xda/0x120 [ 1523.870334][T25559] should_fail_ex+0x3b0/0x4e0 [ 1523.875229][T25559] _copy_to_user+0x31/0xb0 [ 1523.879683][T25559] simple_read_from_buffer+0xca/0x150 [ 1523.885087][T25559] proc_fail_nth_read+0x1e9/0x250 [ 1523.890143][T25559] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1523.895739][T25559] ? rw_verify_area+0x55e/0x6f0 [ 1523.900722][T25559] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1523.906309][T25559] vfs_read+0x1fc/0xb70 [ 1523.910585][T25559] ? fdget_pos+0x24e/0x320 [ 1523.915024][T25559] ? __pfx_vfs_read+0x10/0x10 [ 1523.919724][T25559] ? __fget_files+0x3f3/0x470 [ 1523.924431][T25559] ? fdget_pos+0x24e/0x320 [ 1523.929133][T25559] ksys_read+0x183/0x2b0 [ 1523.933401][T25559] ? __pfx_ksys_read+0x10/0x10 [ 1523.938187][T25559] ? do_syscall_64+0x100/0x230 [ 1523.942998][T25559] ? do_syscall_64+0xb6/0x230 [ 1523.947725][T25559] do_syscall_64+0xf3/0x230 [ 1523.952283][T25559] ? clear_bhb_loop+0x35/0x90 [ 1523.956986][T25559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.962896][T25559] RIP: 0033:0x7f7d4737d15c [ 1523.967305][T25559] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1523.986926][T25559] RSP: 002b:00007f7d4817f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1523.995405][T25559] RAX: ffffffffffffffda RBX: 00007f7d47535f80 RCX: 00007f7d4737d15c [ 1524.003412][T25559] RDX: 000000000000000f RSI: 00007f7d4817f0a0 RDI: 0000000000000008 [ 1524.011426][T25559] RBP: 00007f7d4817f090 R08: 0000000000000000 R09: 0000000000000000 [ 1524.019426][T25559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1524.027432][T25559] R13: 0000000000000000 R14: 00007f7d47535f80 R15: 00007ffcef3674f8 [ 1524.035436][T25559] [ 1525.624492][T25579] kvm: kvm [25578]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 1525.651793][T25579] kvm: kvm [25578]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 1527.265547][T25599] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5135'. [ 1528.939249][ T969] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1529.120769][ T969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1529.173099][ T969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1529.225433][ T969] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1529.278713][ T969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1529.330501][ T969] usb 5-1: config 0 descriptor?? [ 1529.697037][T25616] random: crng reseeded on system resumption [ 1541.023269][ T5142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1541.052118][ T5142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1541.061709][ T5142] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1541.070264][ T5142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1541.082421][ T5142] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1541.090018][ T5142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1541.480437][T25633] bridge1: entered promiscuous mode [ 1541.679169][T25628] chnl_net:caif_netlink_parms(): no params data found [ 1541.875722][ T969] usbhid 5-1:0.0: can't add hid device: -71 [ 1541.962121][ T969] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1541.992250][T25640] kvm: kvm [25639]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 1542.058590][ T969] usb 5-1: USB disconnect, device number 33 [ 1542.088718][T25640] kvm: kvm [25639]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 1542.182756][T25628] bridge0: port 1(bridge_slave_0) entered blocking state [ 1542.221843][T25628] bridge0: port 1(bridge_slave_0) entered disabled state [ 1542.287715][T25628] bridge_slave_0: entered allmulticast mode [ 1542.364209][T25628] bridge_slave_0: entered promiscuous mode [ 1542.427931][T25628] bridge0: port 2(bridge_slave_1) entered blocking state [ 1542.490000][T25628] bridge0: port 2(bridge_slave_1) entered disabled state [ 1542.537440][T25628] bridge_slave_1: entered allmulticast mode [ 1542.581572][T25628] bridge_slave_1: entered promiscuous mode [ 1542.734943][T25628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1542.768737][T25628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1543.011117][T25628] team0: Port device team_slave_0 added [ 1543.056368][T25628] team0: Port device team_slave_1 added [ 1543.189607][ T5142] Bluetooth: hci0: command tx timeout [ 1543.257004][T25628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1543.279353][T25628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1543.421353][T25628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1543.489642][T25628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1543.527876][T25628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1543.647696][T25628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1543.759236][T13241] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1543.915255][T13241] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1543.915292][T13241] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1543.915326][T13241] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 1543.915351][T13241] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1543.917302][T13241] usb 5-1: config 0 descriptor?? [ 1543.924469][T25628] hsr_slave_0: entered promiscuous mode [ 1543.957491][T25628] hsr_slave_1: entered promiscuous mode [ 1543.981454][T25628] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1543.981487][T25628] Cannot create hsr debugfs directory [ 1545.735194][ T5142] Bluetooth: hci0: command tx timeout [ 1546.104371][T25679] netlink: 'syz.5.5154': attribute type 29 has an invalid length. [ 1548.098983][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.163932][T21823] Bluetooth: hci0: command tx timeout [ 1548.311074][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 1548.311096][ T29] audit: type=1800 audit(1731349871.268:683): pid=25687 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.5157" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1548.609530][T19244] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1550.229289][T21823] Bluetooth: hci0: command tx timeout [ 1553.747601][T21823] Bluetooth: hci1: command 0x0406 tx timeout [ 1559.100817][T13241] usbhid 5-1:0.0: can't add hid device: -32 [ 1559.106987][T13241] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 1563.096149][T19244] usb 6-1: Using ep0 maxpacket: 32 [ 1563.126145][T19244] usb 6-1: device descriptor read/all, error -71 [ 1563.919986][T19244] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1564.092006][T19244] usb 6-1: Using ep0 maxpacket: 8 [ 1564.112303][T19244] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1564.152697][T19244] usb 6-1: config 179 has no interface number 0 [ 1564.177145][T19244] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1564.195093][T25712] sit0: entered promiscuous mode [ 1564.205412][T25712] netlink: 'syz.9.5164': attribute type 1 has an invalid length. [ 1564.214289][T25712] netlink: 1 bytes leftover after parsing attributes in process `syz.9.5164'. [ 1564.281365][T19244] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1564.494252][T19244] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1564.680925][T19244] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1564.858161][T19244] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1564.872011][T19244] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1564.881236][T19244] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1565.527954][T19244] usb 6-1: can't set config #179, error -71 [ 1565.556065][T19244] usb 6-1: USB disconnect, device number 9 [ 1566.117187][T21823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1566.134587][T21823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1566.159363][T21823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1566.169788][T21823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1566.180217][T21823] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1566.187961][T21823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1567.641709][T25739] chnl_net:caif_netlink_parms(): no params data found [ 1568.229239][T21823] Bluetooth: hci5: command tx timeout [ 1568.255616][T25739] bridge0: port 1(bridge_slave_0) entered blocking state [ 1568.275404][T25739] bridge0: port 1(bridge_slave_0) entered disabled state [ 1568.288767][T25739] bridge_slave_0: entered allmulticast mode [ 1568.305692][T25739] bridge_slave_0: entered promiscuous mode [ 1568.317722][T25739] bridge0: port 2(bridge_slave_1) entered blocking state [ 1568.355635][T25739] bridge0: port 2(bridge_slave_1) entered disabled state [ 1568.372891][T25739] bridge_slave_1: entered allmulticast mode [ 1568.392712][T25739] bridge_slave_1: entered promiscuous mode [ 1569.358034][T25789] smk_cipso_doi:708 cipso add rc = -17 [ 1570.723408][T21823] Bluetooth: hci5: command tx timeout [ 1571.835627][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1572.792186][T21823] Bluetooth: hci5: command tx timeout [ 1574.877353][T21823] Bluetooth: hci5: command tx timeout [ 1577.439269][T19244] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 1577.645143][T19244] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1577.665868][T19244] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11 [ 1577.678895][T19244] usb 10-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024 [ 1577.696887][T19244] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1577.708025][T19244] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.728279][T25841] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 1577.758289][T19244] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 1580.659366][ T5877] usb 10-1: USB disconnect, device number 51 [ 1581.069284][ T5877] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 1581.119551][T25739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1581.230816][ T5877] usb 10-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 1581.256062][ T5877] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1581.284621][ T5877] usb 10-1: config 0 descriptor?? [ 1581.733476][ T5877] gs_usb 10-1:0.0: Configuring for 1 interfaces [ 1582.194887][ T5877] gs_usb 10-1:0.0: Disabling termination support for channel 0 (-EPIPE) [ 1593.018401][T25739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1593.078650][T19244] usb 5-1: USB disconnect, device number 34 [ 1593.188683][ T5877] usb 10-1: USB disconnect, device number 52 [ 1594.405528][T25887] FAULT_INJECTION: forcing a failure. [ 1594.405528][T25887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1594.458789][T25887] CPU: 1 UID: 0 PID: 25887 Comm: syz.2.5195 Not tainted 6.12.0-rc7-syzkaller #0 [ 1594.467891][T25887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1594.477985][T25887] Call Trace: [ 1594.481286][T25887] [ 1594.484233][T25887] dump_stack_lvl+0x241/0x360 [ 1594.488946][T25887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1594.494174][T25887] ? __pfx__printk+0x10/0x10 [ 1594.498800][T25887] ? snprintf+0xda/0x120 [ 1594.503074][T25887] should_fail_ex+0x3b0/0x4e0 [ 1594.507785][T25887] _copy_to_user+0x31/0xb0 [ 1594.512229][T25887] simple_read_from_buffer+0xca/0x150 [ 1594.517634][T25887] proc_fail_nth_read+0x1e9/0x250 [ 1594.522690][T25887] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1594.528276][T25887] ? rw_verify_area+0x55e/0x6f0 [ 1594.533154][T25887] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1594.538738][T25887] vfs_read+0x1fc/0xb70 [ 1594.542926][T25887] ? fdget_pos+0x24e/0x320 [ 1594.547374][T25887] ? __pfx_vfs_read+0x10/0x10 [ 1594.552110][T25887] ? __fget_files+0x3f3/0x470 [ 1594.556826][T25887] ? fdget_pos+0x24e/0x320 [ 1594.561278][T25887] ksys_read+0x183/0x2b0 [ 1594.565550][T25887] ? __pfx_ksys_read+0x10/0x10 [ 1594.570342][T25887] ? do_syscall_64+0x100/0x230 [ 1594.575134][T25887] ? do_syscall_64+0xb6/0x230 [ 1594.579843][T25887] do_syscall_64+0xf3/0x230 [ 1594.584375][T25887] ? clear_bhb_loop+0x35/0x90 [ 1594.589080][T25887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.595087][T25887] RIP: 0033:0x7f7d4737d15c [ 1594.599547][T25887] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1594.619181][T25887] RSP: 002b:00007f7d4817f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1594.627640][T25887] RAX: ffffffffffffffda RBX: 00007f7d47535f80 RCX: 00007f7d4737d15c [ 1594.635768][T25887] RDX: 000000000000000f RSI: 00007f7d4817f0a0 RDI: 0000000000000004 [ 1594.644384][T25887] RBP: 00007f7d4817f090 R08: 0000000000000000 R09: 0000000000000000 [ 1594.652560][T25887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1594.660646][T25887] R13: 0000000000000000 R14: 00007f7d47535f80 R15: 00007ffcef3674f8 [ 1594.668757][T25887] [ 1594.847798][T25889] Cannot find add_set index 0 as target [ 1602.522313][ T5142] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1602.542024][ T5142] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1602.550876][ T5142] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1602.558783][ T5142] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1602.578529][ T5142] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1602.625255][ T5142] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1604.772408][T21823] Bluetooth: hci3: command tx timeout [ 1604.925133][T25739] team0: Port device team_slave_0 added [ 1604.987387][T25739] team0: Port device team_slave_1 added [ 1606.755292][T25739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1606.789254][T25739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1606.934769][T21823] Bluetooth: hci3: command tx timeout [ 1607.023462][T25739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1607.711086][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.720463][T25739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1607.728514][T25739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1607.755223][T25739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1608.423124][T25966] netlink: 'syz.9.5208': attribute type 1 has an invalid length. [ 1608.469494][T25966] netlink: 224 bytes leftover after parsing attributes in process `syz.9.5208'. [ 1608.949489][T21823] Bluetooth: hci3: command tx timeout [ 1611.593423][T21823] Bluetooth: hci3: command tx timeout [ 1613.071266][T26007] xt_l2tp: unknown flags: 3b [ 1614.268452][T26016] openvswitch: netlink: Invalid VLAN frame [ 1615.089486][T26022] netlink: 352 bytes leftover after parsing attributes in process `syz.9.5219'. [ 1620.661856][ T5142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1620.689438][ T5142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1620.699366][ T5142] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1620.709216][ T5142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1620.720952][ T5142] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1620.728434][ T5142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1622.799607][ T5142] Bluetooth: hci0: command tx timeout [ 1623.311798][T26062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5228'. [ 1624.877549][ T5142] Bluetooth: hci0: command tx timeout [ 1626.949348][ T5142] Bluetooth: hci0: command tx timeout [ 1629.029392][ T5142] Bluetooth: hci0: command tx timeout [ 1633.343957][T25917] chnl_net:caif_netlink_parms(): no params data found [ 1633.374168][ T6418] bridge_slave_1: left allmulticast mode [ 1633.392627][ T6418] bridge_slave_1: left promiscuous mode [ 1633.398401][ T6418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1633.607940][ T6418] bridge_slave_0: left allmulticast mode [ 1633.626956][ T6418] bridge_slave_0: left promiscuous mode [ 1633.669369][ T6418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.842596][ T6418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1639.912157][ T6418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1639.974422][ T6418] bond0 (unregistering): Released all slaves [ 1641.151504][T25917] bridge0: port 1(bridge_slave_0) entered blocking state [ 1641.197300][T25917] bridge0: port 1(bridge_slave_0) entered disabled state [ 1641.246256][T25917] bridge_slave_0: entered allmulticast mode [ 1641.286159][T25917] bridge_slave_0: entered promiscuous mode [ 1641.331502][T25917] bridge0: port 2(bridge_slave_1) entered blocking state [ 1641.370039][T25917] bridge0: port 2(bridge_slave_1) entered disabled state [ 1641.406304][T25917] bridge_slave_1: entered allmulticast mode [ 1641.454619][T25917] bridge_slave_1: entered promiscuous mode [ 1641.601971][T25917] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1641.645203][T25917] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1641.779738][T25917] team0: Port device team_slave_0 added [ 1641.816791][T25917] team0: Port device team_slave_1 added [ 1641.953895][T25917] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1641.991210][T25917] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1642.094980][T25917] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1642.136805][T25917] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1642.158883][T25917] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1642.258141][T25917] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1642.474239][T25917] hsr_slave_0: entered promiscuous mode [ 1642.493868][T25917] hsr_slave_1: entered promiscuous mode [ 1642.528751][T25917] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1642.557069][T25917] Cannot create hsr debugfs directory [ 1643.124943][T25917] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1643.185234][T25917] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1643.247316][T25917] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1643.294546][T25917] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1643.406734][T25917] bridge0: port 2(bridge_slave_1) entered blocking state [ 1643.413980][T25917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1643.423500][T25917] bridge0: port 1(bridge_slave_0) entered blocking state [ 1643.430708][T25917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1643.641093][T25917] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1643.658830][T25917] 8021q: adding VLAN 0 to HW filter on device team0 [ 1644.738955][ T4872] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.858955][ T6418] hsr_slave_0: left promiscuous mode [ 1644.881380][ T6418] hsr_slave_1: left promiscuous mode [ 1645.072942][ T6418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1646.137550][ T6418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1649.633413][ T6418] team0 (unregistering): Port device team_slave_1 removed [ 1649.729963][ T6418] team0 (unregistering): Port device team_slave_0 removed [ 1650.668311][ T6418] bridge_slave_1: left allmulticast mode [ 1650.674232][ T6418] bridge_slave_1: left promiscuous mode [ 1650.688500][ T6418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1650.704682][ T6418] bridge_slave_0: left allmulticast mode [ 1650.718415][ T6418] bridge_slave_0: left promiscuous mode [ 1650.724977][ T6418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1650.926881][ T6418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1650.959813][ T6418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1650.987656][ T6418] bond0 (unregistering): Released all slaves [ 1651.113572][ T6418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1651.148617][ T6418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1651.307980][ T6418] team0 (unregistering): Port device team_slave_1 removed [ 1651.408722][ T6418] team0 (unregistering): Port device team_slave_0 removed [ 1658.438947][ T4872] bridge0: port 2(bridge_slave_1) entered blocking state [ 1658.446151][ T4872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1658.728573][T26219] mkiss: ax0: crc mode is auto. [ 1658.815058][T26051] chnl_net:caif_netlink_parms(): no params data found [ 1659.292321][T26051] bridge0: port 1(bridge_slave_0) entered blocking state [ 1659.333907][T26051] bridge0: port 1(bridge_slave_0) entered disabled state [ 1659.377286][T26051] bridge_slave_0: entered allmulticast mode [ 1659.409878][T26051] bridge_slave_0: entered promiscuous mode [ 1659.431592][T26051] bridge0: port 2(bridge_slave_1) entered blocking state [ 1659.456377][T26051] bridge0: port 2(bridge_slave_1) entered disabled state [ 1659.481423][T26051] bridge_slave_1: entered allmulticast mode [ 1659.500835][T26051] bridge_slave_1: entered promiscuous mode [ 1659.667127][T26051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1659.695593][T26051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1659.967325][T26051] team0: Port device team_slave_0 added [ 1660.004065][T26051] team0: Port device team_slave_1 added [ 1660.175370][T26051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1660.212204][T26051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1660.372705][T26051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1660.459318][T26051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1660.491630][T26051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1660.657283][T26051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1660.883542][T21823] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1660.895302][T21823] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1660.905825][T21823] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1660.914476][T21823] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1660.922340][T21823] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1660.932970][T21823] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1661.010416][T26051] hsr_slave_0: entered promiscuous mode [ 1661.069688][T26051] hsr_slave_1: entered promiscuous mode [ 1661.099154][T26051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1661.147125][T26051] Cannot create hsr debugfs directory [ 1661.488549][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1661.503082][ T5834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1661.514140][ T5834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1661.522583][ T5834] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1661.530415][ T5834] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1661.537814][ T5834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1663.435382][ T5834] Bluetooth: hci5: command tx timeout [ 1663.593223][ T5834] Bluetooth: hci6: command tx timeout [ 1664.123424][T21823] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1664.136857][T21823] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1664.146260][T21823] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1664.155903][T21823] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1664.168456][T21823] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1664.176532][T21823] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1665.549295][T21823] Bluetooth: hci5: command tx timeout [ 1665.681972][T21823] Bluetooth: hci6: command tx timeout [ 1666.320162][T21823] Bluetooth: hci7: command tx timeout [ 1666.692819][T26269] chnl_net:caif_netlink_parms(): no params data found [ 1666.729156][T12083] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1666.899862][T12083] usb 10-1: Using ep0 maxpacket: 32 [ 1666.907203][T12083] usb 10-1: config index 0 descriptor too short (expected 164, got 36) [ 1666.925152][T12083] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1666.960268][T12083] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1666.993611][T12083] usb 10-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1667.020302][T12083] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.060394][T12083] usb 10-1: config 0 descriptor?? [ 1667.598741][T21823] Bluetooth: hci5: command tx timeout [ 1668.130328][T21823] Bluetooth: hci6: command tx timeout [ 1668.136643][T12083] usbhid 10-1:0.0: can't add hid device: -71 [ 1668.164874][T12083] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1668.175839][T12083] usb 10-1: USB disconnect, device number 53 [ 1668.403001][T21823] Bluetooth: hci7: command tx timeout [ 1669.076274][T26269] bridge0: port 1(bridge_slave_0) entered blocking state [ 1669.120267][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.139336][T26269] bridge0: port 1(bridge_slave_0) entered disabled state [ 1669.146637][T26269] bridge_slave_0: entered allmulticast mode [ 1669.190485][T26269] bridge_slave_0: entered promiscuous mode [ 1669.231272][T26269] bridge0: port 2(bridge_slave_1) entered blocking state [ 1669.238409][T26269] bridge0: port 2(bridge_slave_1) entered disabled state [ 1669.293125][T26269] bridge_slave_1: entered allmulticast mode [ 1669.331066][T26269] bridge_slave_1: entered promiscuous mode [ 1669.528924][T26269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1669.673015][T21823] Bluetooth: hci5: command tx timeout [ 1669.692176][T26269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1669.937435][T26269] team0: Port device team_slave_0 added [ 1670.064923][T26269] team0: Port device team_slave_1 added [ 1670.150874][T21823] Bluetooth: hci6: command tx timeout [ 1670.287797][T26269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1670.295675][T26269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1670.393275][T26269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1670.426004][T26260] chnl_net:caif_netlink_parms(): no params data found [ 1670.437183][T26269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1670.444629][T26269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1670.471801][T21823] Bluetooth: hci7: command tx timeout [ 1670.478662][T26269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1671.132431][T26269] hsr_slave_0: entered promiscuous mode [ 1671.309834][T26269] hsr_slave_1: entered promiscuous mode [ 1671.324295][T26269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1671.339415][T26269] Cannot create hsr debugfs directory [ 1671.593212][T26260] bridge0: port 1(bridge_slave_0) entered blocking state [ 1671.622706][T26260] bridge0: port 1(bridge_slave_0) entered disabled state [ 1671.668264][T26260] bridge_slave_0: entered allmulticast mode [ 1671.687164][T26260] bridge_slave_0: entered promiscuous mode [ 1671.731257][T26260] bridge0: port 2(bridge_slave_1) entered blocking state [ 1671.755580][T26260] bridge0: port 2(bridge_slave_1) entered disabled state [ 1671.778587][T26260] bridge_slave_1: entered allmulticast mode [ 1671.801639][T26260] bridge_slave_1: entered promiscuous mode [ 1671.831310][T26251] chnl_net:caif_netlink_parms(): no params data found [ 1672.016419][T26260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1672.195915][T26260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1672.435551][T26260] team0: Port device team_slave_0 added [ 1672.550296][T21823] Bluetooth: hci7: command tx timeout [ 1672.758202][T26260] team0: Port device team_slave_1 added [ 1673.153567][T26251] bridge0: port 1(bridge_slave_0) entered blocking state [ 1673.174038][T26251] bridge0: port 1(bridge_slave_0) entered disabled state [ 1673.202869][T26251] bridge_slave_0: entered allmulticast mode [ 1673.224046][T26251] bridge_slave_0: entered promiscuous mode [ 1673.260914][T26251] bridge0: port 2(bridge_slave_1) entered blocking state [ 1673.293995][T26251] bridge0: port 2(bridge_slave_1) entered disabled state [ 1673.324811][T26251] bridge_slave_1: entered allmulticast mode [ 1673.343708][T26251] bridge_slave_1: entered promiscuous mode [ 1673.370844][T26260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1673.377840][T26260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1673.423662][T26260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1673.572533][T26260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1673.598977][T26260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1673.679989][T26260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1673.797120][T26251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1673.881857][T26251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1674.011690][T26260] hsr_slave_0: entered promiscuous mode [ 1674.045867][T26260] hsr_slave_1: entered promiscuous mode [ 1674.079371][T26260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1674.100749][T26260] Cannot create hsr debugfs directory [ 1674.106395][T26051] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1674.134804][T26051] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1674.365566][T26251] team0: Port device team_slave_0 added [ 1674.386730][T26051] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1674.431295][T26051] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1674.462613][T26251] team0: Port device team_slave_1 added [ 1674.809502][T26251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1674.816606][T26251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1675.173831][T26251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1675.253520][T26251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1675.282425][T26251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1675.322605][T26251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1675.375940][T26400] mkiss: ax0: crc mode is auto. [ 1680.257811][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1680.276283][ T5834] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1680.285565][ T5834] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1680.295848][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1680.303598][ T5834] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1680.311635][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1682.389967][ T5834] Bluetooth: hci2: command tx timeout [ 1684.475759][T21823] Bluetooth: hci2: command tx timeout [ 1686.549465][ T5834] Bluetooth: hci2: command tx timeout [ 1688.629625][ T5834] Bluetooth: hci2: command tx timeout [ 1694.520528][T21823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1694.533507][T21823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1694.545812][T21823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1694.554304][T21823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1694.564670][T21823] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1694.572206][T21823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1695.988259][T26251] hsr_slave_0: entered promiscuous mode [ 1696.050349][T26251] hsr_slave_1: entered promiscuous mode [ 1696.109185][T26251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1696.116803][T26251] Cannot create hsr debugfs directory [ 1696.629412][T21823] Bluetooth: hci3: command tx timeout [ 1697.027461][T26438] chnl_net:caif_netlink_parms(): no params data found [ 1697.094438][T26435] chnl_net:caif_netlink_parms(): no params data found [ 1697.285236][T26438] bridge0: port 1(bridge_slave_0) entered blocking state [ 1697.299367][T26438] bridge0: port 1(bridge_slave_0) entered disabled state [ 1697.309614][T26438] bridge_slave_0: entered allmulticast mode [ 1697.316737][T26438] bridge_slave_0: entered promiscuous mode [ 1697.407555][T26438] bridge0: port 2(bridge_slave_1) entered blocking state [ 1697.429461][T26438] bridge0: port 2(bridge_slave_1) entered disabled state [ 1697.436807][T26438] bridge_slave_1: entered allmulticast mode [ 1697.459702][T26438] bridge_slave_1: entered promiscuous mode [ 1697.470289][T26435] bridge0: port 1(bridge_slave_0) entered blocking state [ 1697.477522][T26435] bridge0: port 1(bridge_slave_0) entered disabled state [ 1697.503846][T26435] bridge_slave_0: entered allmulticast mode [ 1697.517358][T26435] bridge_slave_0: entered promiscuous mode [ 1697.590844][T26435] bridge0: port 2(bridge_slave_1) entered blocking state [ 1697.598159][T26435] bridge0: port 2(bridge_slave_1) entered disabled state [ 1697.625284][T26435] bridge_slave_1: entered allmulticast mode [ 1697.641863][T26435] bridge_slave_1: entered promiscuous mode [ 1697.663151][T26438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1697.732302][T26438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1697.788502][T26435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1697.845805][T26438] team0: Port device team_slave_0 added [ 1697.862053][T26435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1697.886708][T26438] team0: Port device team_slave_1 added [ 1698.095820][T26435] team0: Port device team_slave_0 added [ 1698.110246][T26438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1698.117240][T26438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1698.168701][T26438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1698.202854][T26435] team0: Port device team_slave_1 added [ 1698.302258][T26438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1698.316157][T26438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1698.357996][T26438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1698.709531][T21823] Bluetooth: hci3: command tx timeout [ 1699.340238][T26435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1699.347235][T26435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1699.387554][T26435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1699.449289][T26435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1699.456293][T26435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1699.532619][T26435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1699.673138][T26438] hsr_slave_0: entered promiscuous mode [ 1699.690117][T26438] hsr_slave_1: entered promiscuous mode [ 1699.706060][T26438] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1699.719213][T26438] Cannot create hsr debugfs directory [ 1699.818971][T26435] hsr_slave_0: entered promiscuous mode [ 1699.833438][T26435] hsr_slave_1: entered promiscuous mode [ 1699.852279][T26435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1699.869262][T26435] Cannot create hsr debugfs directory [ 1700.789247][T21823] Bluetooth: hci3: command tx timeout [ 1702.869385][T21823] Bluetooth: hci3: command tx timeout [ 1703.680362][ T6443] bridge_slave_1: left allmulticast mode [ 1703.695539][ T6443] bridge_slave_1: left promiscuous mode [ 1703.712337][ T6443] bridge0: port 2(bridge_slave_1) entered disabled state [ 1703.732924][ T6443] bridge_slave_0: left allmulticast mode [ 1703.738722][ T6443] bridge_slave_0: left promiscuous mode [ 1703.759370][ T6443] bridge0: port 1(bridge_slave_0) entered disabled state [ 1706.057859][ T6443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1706.101408][ T6443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1706.128506][ T6443] bond0 (unregistering): Released all slaves [ 1708.377985][ T6443] hsr_slave_0: left promiscuous mode [ 1708.397603][ T6443] hsr_slave_1: left promiscuous mode [ 1708.416070][ T6443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1708.435941][ T6443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1708.987074][ T6443] team0 (unregistering): Port device team_slave_1 removed [ 1709.179580][ T6443] team0 (unregistering): Port device team_slave_0 removed [ 1749.440457][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1779.392749][T26260] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1783.908086][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1801.513109][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1802.824689][T21823] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1804.358637][T26456] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1805.874877][T26459] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1826.818437][ T5834] Bluetooth: hci5: command tx timeout [ 1837.395197][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1837.440367][ T5834] Bluetooth: hci7: command tx timeout [ 1845.455120][T26459] Bluetooth: hci2: command tx timeout [ 1846.395766][ T30] INFO: task syz-executor:26269 blocked for more than 145 seconds. [ 1846.408903][ T30] Not tainted 6.12.0-rc7-syzkaller #0 [ 1846.699750][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1846.708489][ T30] task:syz-executor state:D stack:21728 pid:26269 tgid:26269 ppid:1 flags:0x00000004 [ 1846.776512][T26465] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1846.832201][T26468] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1846.916328][T26468] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1846.972639][ T30] Call Trace: [ 1846.975995][ T30] [ 1847.043805][T26468] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1847.054760][ T30] __schedule+0x17fa/0x4bd0 [ 1847.112800][ T30] ? __pfx___schedule+0x10/0x10 [ 1847.117744][ T30] ? __pfx_lock_release+0x10/0x10 [ 1847.141563][T26468] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1847.162590][T26468] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1847.253633][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1847.364910][ T30] ? schedule+0x90/0x320 [ 1847.429297][ T30] schedule+0x14b/0x320 [ 1847.433530][ T30] schedule_preempt_disabled+0x13/0x30 [ 1847.519247][ T30] __mutex_lock+0x6a7/0xd70 [ 1847.523849][ T30] ? __mutex_lock+0x52a/0xd70 [ 1847.528573][ T30] ? new_device_store+0x1b4/0x890 [ 1847.533952][T26465] Bluetooth: hci3: command 0x0406 tx timeout [ 1847.669891][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1847.684008][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1847.759252][ T30] new_device_store+0x1b4/0x890 [ 1847.764191][ T30] ? kernfs_fop_write_iter+0x1ea/0x500 [ 1847.869219][ T30] ? __pfx_new_device_store+0x10/0x10 [ 1847.874683][ T30] ? sysfs_kf_write+0x182/0x2a0 [ 1848.019271][ T30] ? bus_attr_store+0x4f/0xb0 [ 1848.025381][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1848.143068][ T30] kernfs_fop_write_iter+0x3a0/0x500 [ 1848.148526][ T30] vfs_write+0xaeb/0xd30 [ 1848.253199][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1848.299156][ T30] ? __pfx_vfs_write+0x10/0x10 [ 1848.303991][ T30] ? do_sys_openat2+0x17a/0x1d0 [ 1848.308891][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1848.459228][ T30] ? __pfx_call_rcu+0x10/0x10 [ 1848.463988][ T30] ? fdget_pos+0x265/0x320 [ 1848.569233][ T30] ksys_write+0x183/0x2b0 [ 1848.574377][ T30] ? __pfx_ksys_write+0x10/0x10 [ 1848.649176][ T30] ? do_syscall_64+0x100/0x230 [ 1848.654031][ T30] ? do_syscall_64+0xb6/0x230 [ 1848.658858][ T30] do_syscall_64+0xf3/0x230 [ 1848.779330][T26470] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1848.814756][T26470] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1848.830211][ T30] ? clear_bhb_loop+0x35/0x90 [ 1848.834972][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1848.902545][T26470] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1848.959118][ T30] RIP: 0033:0x7fa45ef7d1ff [ 1848.963608][ T30] RSP: 002b:00007ffe0f5bd580 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1849.115202][T26470] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1849.128903][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fa45ef7d1ff [ 1849.137008][ T30] RDX: 0000000000000003 RSI: 00007ffe0f5bd5d0 RDI: 0000000000000005 [ 1849.229825][T26470] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1849.311218][ T30] RBP: 00007fa45eff24da R08: 0000000000000000 R09: 00007ffe0f5bd3d7 [ 1849.344529][T26470] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1849.419771][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1849.427816][ T30] R13: 00007ffe0f5bd5d0 R14: 00007fa45fc64620 R15: 0000000000000003 [ 1849.609050][ T30] [ 1849.617465][ T30] INFO: task syz-executor:26435 blocked for more than 148 seconds. [ 1851.996189][T26464] Bluetooth: hci8: Opcode 0x0c1a failed: -110 [ 1852.660052][ T5142] Bluetooth: hci8: command 0x0c1a tx timeout [ 1854.916871][ T30] Not tainted 6.12.0-rc7-syzkaller #0 [ 1854.991505][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1855.119060][ T30] task:syz-executor state:D stack:21728 pid:26435 tgid:26435 ppid:1 flags:0x00000004 [ 1855.189767][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1855.239432][ T30] Call Trace: [ 1855.242769][ T30] [ 1855.245729][ T30] __schedule+0x17fa/0x4bd0 [ 1855.349432][ T30] ? __pfx___schedule+0x10/0x10 [ 1855.354455][ T30] ? __pfx_lock_release+0x10/0x10 [ 1855.453929][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1855.519209][ T30] ? schedule+0x90/0x320 [ 1855.523532][ T30] schedule+0x14b/0x320 [ 1855.527720][ T30] schedule_preempt_disabled+0x13/0x30 [ 1856.179056][ T30] __mutex_lock+0x6a7/0xd70 [ 1856.183645][ T30] ? __mutex_lock+0x52a/0xd70 [ 1856.188372][ T30] ? del_device_store+0xfc/0x480 [ 1856.249183][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1856.254714][ T30] del_device_store+0xfc/0x480 [ 1856.311823][ T30] ? __pfx_del_device_store+0x10/0x10 [ 1856.317277][ T30] ? sysfs_kf_write+0x182/0x2a0 [ 1856.369111][ T30] ? bus_attr_store+0x4f/0xb0 [ 1856.373865][ T30] ? __pfx_sysfs_kf_write+0x10/0x10