last executing test programs: 9m7.883608377s ago: executing program 1 (id=153): prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r5, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}]}, 0x34}}, 0x20) 9m7.04822067s ago: executing program 1 (id=160): syz_emit_ethernet(0x1be, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60922ff50188210000000000000000000000fffffffffffffe8000000000000002000000000000aa2c0000006400100011"], 0x0) 9m6.947326194s ago: executing program 1 (id=161): arch_prctl$ARCH_FORCE_TAGGED_SVA(0x4004) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000700000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000200000004000000020000000000"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6, 0x2}, 0x20) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xf0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "3b3232bb794772ac15ec8d4f4e544c26"}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x7f}]}}]}, 0x50}}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000600)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x401, 0x2, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x18000, 0x1680}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_NUM_PEER_NOTIF={0x5, 0x10, 0x9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40801}, 0x4) 9m5.538203822s ago: executing program 1 (id=162): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f00000000c0)=0x3, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x54, r3, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x38, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x54}}, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file0\x00', r1, &(0x7f0000000240)='./file0/file0\x00', 0x272) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a40000002300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r5}, 0x10) lremovexattr(0x0, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x1350, &(0x7f0000000800)={@random="4a3cb90000c5", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@val={0x88a8, 0x1, 0x0, 0x1}, {0x8100, 0x7, 0x0, 0x3}}, {@ipv6={0x86dd, @gre_packet={0x7, 0x6, "ba82a4", 0x1312, 0x2f, 0xff, @dev={0xfe, 0x80, '\x00', 0x11}, @dev={0xfe, 0x80, '\x00', 0x43}, {[@routing={0x32, 0x2, 0x0, 0x2, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}]}, @routing={0x6, 0x4, 0x0, 0xb, 0x0, [@mcast2, @local]}, @srh={0x32, 0x2, 0x4, 0x1, 0x1, 0x60, 0x8001, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @dstopts={0x87, 0x20, '\x00', [@jumbo={0xc2, 0x4, 0x400}, @generic={0x0, 0xc4, "eb8a90f6fb3be697cd7f8e7b80230e4570de9a1f7a430323116a7d97176e7ae1fde4c230add8afd42587d99c1cddd1962f4ecd6ed750aa27bcb07c48fde79da7654fa16b43f68d449b640f54fb16b8250d1e438f9ce553b360b83117414f8e8825a85db1d15760a1dbbe45fc1700d0c3b84b4fb35e37f540a78ac638122355f8cd67cc57baecd79a552a28f23e772e756e9d09f265f8d89ceb31cedd311fc9b351357c6973f4f735f96b0c0cad03916d5e079786adaf92df374774af989f167cc59839e4"}, @calipso={0x7, 0x30, {0x1, 0xa, 0x4, 0xd, [0x6, 0x5, 0x10000, 0x7, 0x8]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0xe9, 0x3, [0x4], "e376edcd7a9b197b8e761f9d8ae4d0fabe62a5e9f4f99de61a6972a0ac72a775da64c83f0c67f352203156253fd27047b53d4776e38cf063e9bbb63cc664f6fc5ee8924ee4e41d3d0b9b94fb823583b9e6156175296804a328098078e57c24e60a80a6a0872e6607f609d68f028d66d6346a946953fd87e22cb3ebe82cb72de245c3236a5b1a1f03b6a9bbf1988a019ced8556033bbfd738fd490d63c847a1bf7892448936b89416513e94fc26f6dd017bdc2ec164f4f15c547a5204dc8400364b9ef2c918585062a7ec198512d32a2b0bc8131a190e7abd6957fed6abde7d3f2a77168ba946bad7e8"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [], "5de70712619cf8d4d2bf6db0bfd9ff48d262e31deb5f8fab00055dd0fd5c3c88d1da3ddd53c096d84a08c5da75533b3dfe22ad6a4d6797ce249428cfb678b26917b3c0cb111e8cf0f87770ed02b262b7ec1731694519f70fd19ba94ee128952b8af7bd1b1b8666a3dcf64d764a1306a39ff2288048f874fe3eb7f6a84804dbcb063cda3d3bfcbc43318631cf1e117a805ac07d61549ff53f6c6742b7c769054b26348e1845375294abff5277fc461b8d9dffad9b552031c45cca86461d3bfa9c45cd7e567fdd3a222ad864c4b4149fca0663137941ded6652adc3cad482f0eb9713ffeaac58036f10658903cf02c0661f13ba4b71a2b5c46f4bcc90f6d281d6d3dea1853f85f43ce547f8582b906c4ea120b969af299e36d846b5f832d8572392cc7cca0b40967b9b70835b905b580174fc9f2034547770ef3436cace97ca95fe2192ef9c790413117c4a4b4247a7f7acb7c17639c94713883079b5e863c8476d817381b4cbc07c48a6cb424dc574732b56ec7b8d97d2c5098d5933391b485a650119a9e5bacc0b30aa5ab48c9795a000bd8ad22f378433227bd7694b8d9c7b746beb679c03c31432350857fc362fd01cd5bb748ff5b99c7be1304f59f06c69372192494a5d5c7d14b8a308e3d2612899ed334548be972a475286047f1680087f7bd90f6be040240c044fc4064f2ebff51fb409a974ad63a2cc530c939393a692939dd6430ac6fe57dad51e061abbd1a9334c819ced58d05334970e2d73358c9c6960bcce6918bad86dcbbc12b1a9ff74bfff2f7ac7d1d82d2c583f3225db456c32e46322ebd5e02b839fd4394d94f20823edd94d189d813b4090f4c717706dd62d38e78ff956944f8f0b75a37868456d8bb35247adb6707cae73cb28119e0180df34c1b78705676595eb00986ccf184c9fe7ce705f27be548327461c17ce272b3cba3bf4180683ba997aa79471b90b4ce7827fc93b74c03decd9e66a7588e88f98b77d3ce66ff75be0b894e09a6aa65869b9a6d8c1ad305894233799218f219c679106f50482ca32aa7f77e586be85a48741fe595b4446ea803fcc4a9693d1134e01486d2eadf81397f3c2d0f55c6d769d7d432846171cbaf04f36e1c5b4802e8128b47f708f7b8de980d25f776fd5f2cda104caabcf6b689c28a03f13ad310364aa9b877e36e23da6201732029bea69268e5605d8b0352bf82496b6cb2478d0b9a91d6f315572d92398bc852356218e8f86e8011e203edb05774e4e0a9bfb01ea45cea2ee1941e1000a04268013130e1fff79163f07f4ab9c50a99852f2cd49df8f74377472493a9ece699db41f7aeeecb2f4054b2b8eb4245f531b5cb9169cc079374b89a7cd66f93f17bbeef8b43f6c1435150fbb6974b523e1b038f4dfa77203af51a4dcedeab348bfcf2ed19fdf1739c03e7947a5460a13bb05820232f19feeedf22c7f868bf2d82bf26a66b0a6deb2814e16cb29e953e74dc33d5e939f18e6c7a074b32bd55e09230942ee4e7d61d6617306aad6de03edfff8df7fef41cbdd0cf51acfdb6fa8603eef5dc3a250c77e541024e1d9be90b2c3bac5a93e8df6fcc150dcd7080ff1062aa172accdac1d3b460ac811a8a77031b63fcabff29aff4c555129d8f89ca6b199ffe7fa10bb0109c09674b6367e394f3c3a01c58f45e2832254ec1f33883b7099e73d550af137a8cc9cd505ad89cb9395811e21e59827d432ed5bdf7b0dcf99f2db83a216a25022b0d501fa146beac4572959f08993742ddbcc1a7710ff5fb5bc5e7f51316f9f30740e89532161020964c78d55fcdc99533dd8450cf24eb0b1a83cce9d4f1a741fa81976ecad7355e942a18b42e6496e4bef77ae0e170a91f8d7d82de3b6fd48bfbf995db51bcff885924498647aa61e78cb75f5d0dd714d8bd376a765146693ba26683961ba5baf74aac5833ee6e0620fdb82ce2d0571a26383b907331fdc0b4a251777f982085f37e7f055f2db5ed4c1bac69a339f822842812d9fa0b2c03c04170110853194c546f0adad28fd7555ac814ecd66f3ecae50713ec5fc2ea5d448990b05214b2bacd237651ba625c49a4517fde257ded1128818b8e73fa0752f1fe5511d8aba70850de80d677ea3f0f82ec59efe43db2465fefad74c7cfea992ed440ad41f12bd5ff95e0f514cab00ef1377e870d28dc03f7b9718d70844e98f8d587903c3b1269e13dcf4e5e52a1f83bb5b31b13443a6a27da531aa4f82526d9360ff231772dc2e83a900ccfd9b3900f81154763b9fcf08a854c116284391efdeb744cd9b16e78508916578ea56b45571bc52e7bffdbd33db77153c33e5b5a2e35df24de8066958f026c117aad238b2d2eaa9daa3cee01172412adea4603d254634b1616111a370283b609d8ee27ead38f921d0ebf4e9f4f4265e714f79b4f3a9ccb630a71584af620b46e7f48a25a295a975d21d313c21c783aa01e952430fe05fd01f9b0f4f02d8b7d378d9caafb174610f2a162751321f0ddff77829b50ab8b54a5534c20463a2290caccbc2e12cb542202a07975e3df9e08b646c3dd2b9aba04cfe2e5c4953c4fcb54abc906cbdc27ab4588ed170c090ff50970c878a3244805d2bd5a03e7b09a6ff2223d30680395f8b764416d291eae22851fe6d2a7974f6aab7a7aca1c86d6fe2171304dcf51db6fc41bfd9d7a93d355ff2c7f4dac40d9b233f85235396767d0268128d4401826afc0064f2a85220c854a4de982ae8726c385ee663b775a3c6d99f594a7ea5f0cc2a924ee25f2f539ee2c5b1e58638d3a122939b47945eafc9a98d583fdbc4df2c8ae34628c7e8232b128a07c0856fd7ad116f6425807419b7e99cdd382714baa6ea13af1d379193f647842b9a06a3c88581845bbafc9832ccaaf8e4fd7f519bf782a149216064d4e0eef8db619739c5c0574165233430655efc218a20d827d1a99294dcff7ed17c8dd3e4eb21bf8c9313884f02ff668ea89e56df4b0d8fa907e38ea106fa162d75e0e37c20cd75f3c444239a98f166dbeffa4364fd0f5c3de16d677d4567ec1d5f8646ea6bfc846a4d86bab002e677fb86322b352cd788861f3f4c67833bd5c14ba82741fa74fad762819e037331113bfb3195423007a91309d6d273fea56c6fca74ed01d2fb3a4d5d3589c5b9366767c0b907dd2c664b07e52688e281487b6fd5b4f5ed731dd2cf12c16a72e9af81b80ee432bd5c3083685a7177b52e4436f2b544968e0d1a6d6d497c184b25529d5fdd0493d676aa374f9cfa567d8935afe0ce813dfa62a9f1291e523839c6cdc0c2602bc8e372f1142cd33b927482a1550bc40f60e583dd30b877a1b92da41c0247895006bdbf9ae333ed923dae666431758c8885def8f018485e5238b3631b5dc846728daf3f01fa2b35f46e3b31f72f60bc6b5eaf92dfc8f7ee3e5b95c98ecba11a04c0f37ac8aa56d501ef399183a708eae6c927cca719dd067c5b2207b1b6df784ada5b24f1052436edf7d21a55d2fc1e138393bf6a711e09a48e7a20906dd9cfbc8bf006bfe047f4597739af80efa4ad10abdfd1f72a489318661e05d4def1ecd82d187ab71f652a1ec1cf6581f1b280638901557728f5d482d05e18e5c9eab99ed3ffd87bc05e29740e672d7481e0eecfca45bbfce30ae0cf8de1b51d945faa781e962a4e7ec055a9357e628eb5e3fd72a5d0b40860ebd9e4aaf69a03157ec3ad9c4e1daae1eb6f61b5684adbbda63dd0d43257c64eabb96f269959530c643227717adc7851a44fe10381d4d37032a9357b6910c64bbfeb9d45c36e662784cfb89ce8d06af79aa170d328953850383efdf9bc253a453d6a6d40e238f8025f9741b614255c4011b0951d522c2def2cb05bb6fb189ae4d9686a8890d38121b2f6618880a30b98628b7111c3e20cbdcd600696e7fc9b2a3ddebf098a20178c65d6c855d8a76a7d4977df7fe949eba62aaa042a178d658e81e6c812450076cdfce425b5c918fe8a22dcb706cf038545945fa690b6fb02c91d83a349b7ad94ec42a9f69cf6bbf6f4c83169a20f3a308d6a04a06581a3fd0d8191b01c2f1de446c4d8202002013760bb6d51a9d94ad0f5dab36a3ba9588b183b6787bcdacad82b9aaad1a74adc9f05eb961fdcafcf0943cae57021e414dda16006781aca4fa5a5d06e7228ee6a34e31efb8e01c874c371eb84209e10b611236f3c6aae7744978fe99835abb957086e32dfa80bb7466a7d8ed82d20bf143d94ae63f948806d89e635af4dfae60d12c62acdd695ba87f2e1ee2e45012b506c0386a0e706db52bdadc7c2310a11b0a6e1ff3fbdf8ab0dc720675cafe0227fb13783c5d30177ab00bb1e65845f4f088299c57fee9a3caad372dc1077b965239a1c93c75b31276f616f1540eb96a776eb5acd770aece9488d49896355c67eede64f87d09787b7e419326a3221b8d048b35237a0638f71b11f96c728613185793a3d454e3dbfc2bf04bbbf69976a141518d931af75eeea5f4cc90a6a75176337bfa9f6ab240191bd6358fe4304064c2283adf7093be67d59058993430442dcf6cb20ccf3a684abcb9a324599207ebbcb97fc82c0f1d2e943024dcdba6c68038f95b42791f631550a52ceafb649980d3765e1d48f777b2d53ddbc8f7b1aa71bac48d2b1b81399f420af87b196cb2de1964806a4f7741f9c13b2e5ecc5cbed3f5c05d45c6c80a021a30016c7b902c4157ecfd2f818d3252da59a2d7b6a1c7f77e9fd5bf22ff87f7dbdcc96693d99085c60cbfca804d92f13241d2ecf1be7c393429119298c70950d00c4f31041b92e6dd95b3fb7675080c1938a33dc7e5c493645c74538ffb2b89ff87f0c8afcde2a5a74035d09fc44fcb35804a90b560a4e5516ee366ce4f92d9c7f3b8f6301076bd36a3c87db604d334bc23acd6d9ea895aa3920153fb7155af4619fca61c37316540467768e1ead7fdf7cc164e5afd4d9c736d3d3641a7ddc9dc16eacf89f61b7449285815a477ea6005e5e1db42fd83dbcdad8d5e85caa31cac2f9be2b01940901409f67de3fc9ec1eb7929b1be234dbe3f2b9b7331f95fb6433a3ac8e2271854447ba48b3f47837e68c109efee4d9c1d853137e46e1616392a78bcfccb964f28c9aa02829c8c5a2f770afaac4be4ec458c874429d8f0bb481c0d1e4f1002609843a349058d7752b92d4213c4fc031db9e2f00eef58a68d82bd25ea89950ddab51c8df9cb52799ff53736b4b1cf2a6435de490a714652d6c5c14b719e9e6fcb1c53061bbad77d1d27619c8c4f2b8c77659b9a9b46862e7f5175504a50f8f4788de6d9b57c5a346970c03f866e2c305089f8e31acb4bbce602ee42880de7d19e8fee0101572da09582bda8a79177db6c4ff043c7c2c7e59005363b74c60b82624504078dfef1433279ac05c9d012f4460ffdc615c5b74c465b7a8f9e8344c50f0a78bff4c8834e28f3e66716156ea8a7504e9fbe1eaba35dd32394ac045388cd6f93e34e80dbe6c9ec770641b3ad76070aed56d61d04d62c9d3a6f861418fec305aa0cf294a11aea7d844b6beaacced55559a1e80fcd98796ce92eae8e55284475a6df20907d8bf967db5ffca12a5d055854f24d1bcad9707bd2009d488b5fb02a419d138abfd94309079438635d1ba9ff456599b382e0ceee34b1cd906abd7354fa4f9512bb8e3b998a188e1136bd87dcea5a2c457786bd68f7b108353c0fd5f7ca2eb3b98f9b871b8238d23e6d8cb6effdd167cfa7c0795d76769fd7a1ee98a2f2b8c07ec79a194d29e3114db094dc05d8065b886f47f37893a8ace508445a8756742e"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "0ad1379f"}, {0x8, 0x88be, 0x1, {{0xd, 0x1, 0x8, 0x3, 0x1, 0x3, 0x7, 0x40}, 0x1, {0x9b9}}}, {0x8, 0x22eb, 0x4, {{0x8, 0x2, 0x4, 0x1, 0x0, 0x1, 0x7}, 0x2, {0x0, 0xab, 0x0, 0x7, 0x1}}}, {0x8, 0x6558, 0x1, "5645093eeeb94811f8be74a1231f1072a469e3257fbe177cf49eac62d860a045b340d49ffa0b66604967f4d671ae39a80af6198c3f4dc4e7dbfa02c5cb641953343c8eff47ac47eb8e9d74340a422822c3de8e82b5bcd8b8b4b81a17d91558cd536b704079b396913780b09dc5ca1e204f84780d23d506"}}}}}}}, 0x0) 9m4.823194859s ago: executing program 1 (id=168): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000640)={{@my=0x1}, @hyper, 0x0, 0x2925, 0x0, 0x20000000, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000040)={{@my=0x1}}) 9m4.391984723s ago: executing program 1 (id=177): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@private1, 0x4e20, 0x0, 0x4e22, 0x0, 0xa}, {0x5, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x24}, {0x0, 0x100000000}, 0x0, 0x0, 0x1, 0x0, 0x6, 0x3}, {{@in=@empty, 0x800, 0x33}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x4, 0xfffffffc}}, 0xe8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x7, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000300)=""/236, 0xec}], 0x2, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 9m4.224327632s ago: executing program 32 (id=177): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x26) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@dev={0xac, 0x14, 0x14, 0x15}, @in6=@private1, 0x4e20, 0x0, 0x4e22, 0x0, 0xa}, {0x5, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x24}, {0x0, 0x100000000}, 0x0, 0x0, 0x1, 0x0, 0x6, 0x3}, {{@in=@empty, 0x800, 0x33}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x0, 0x0, 0x4, 0xfffffffc}}, 0xe8) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x7, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv(r5, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000000300)=""/236, 0xec}], 0x2, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 2m10.638923415s ago: executing program 4 (id=2197): sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000040)=ANY=[@ANYBLOB='4'], 0x34}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x800}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000040)=""/4096) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r1, 0x47f9, 0x0, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4}, 0xe) listen(r4, 0x3) r5 = accept4(r4, 0x0, 0x0, 0x80800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r7 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r7, 0xc2604111, &(0x7f0000000040)={0x0, [[0x0, 0x300]]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r8, &(0x7f0000000340)="9b", &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r8}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000380), 0x12000, &(0x7f0000000540)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6}}, {@default_permissions}, {@blksize}, {@allow_other}, {@allow_other}], [{@dont_hash}]}}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r8, &(0x7f0000000040)}, 0x20) madvise(&(0x7f0000629000/0x2000)=nil, 0x2000, 0x63) r9 = socket(0x2a, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f00000011c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x4983, @remote, 0x7f}, 0x1c, &(0x7f0000000b00)=[{&(0x7f0000000640)="0e9dc4d7a425b6ed08e05c3eb70180f2705040c6506f88a4e7623cfca37db72e2db99c9fef362d7475096ad2397eee3acbd0871d2feb9e115066a882ce35afdcc3133e5a63bc8539ff3143ab507e35d935af6880722b2e8aca23a932be3f3bbcbccc2c6165d205ef4387c6239ec2e888f6b7349b5014f422b855e5724edc57bf761beb9056ed7f82abd71f9b7d31d3233bec91043fc7ec0554bb935bc5e8e860e7b9817e9fb5099a32171e69b9b91f16862ca63f4845f55aeb3502f8f62c987e932607042cd5e8c7d80a306719051ac0bbc27388ebda7326d8da3a9e627e5d196113bdac55087edaffb52d19c45d800a", 0xf0}, {&(0x7f0000000440)="8cede42d13889b07549ec9bf2d0dbbca3f755f4ba8c5b54e325f5eaec26673357a7a69c119e7d2d6ebd1534ba83dcfa445239b9dd2fc284aeca4c331c293fbee84e6b9cf4cb889", 0x47}, {&(0x7f0000000740)="39bacdb65778ec6f9fe8780c9ddd00fc30798966cdc5ef16cd9b88c7a9f09489443c290390b1199f15fa5df6cb130a82d521e764bea3c4c86d6cb02867384ea583b38ee78d54516e4e14e6d6041fbee6fbcf019a31252f70acd757b061ce78d260c0961328dbbe438a32b7fc909113a1684f2a4fde7cc8db1d84f1fc049b431da3a7a9280503ea3752e459dacee2039c067fe8a217f6c286d32888fe0abed38bfb95a1bba2", 0xa5}, {&(0x7f0000000800)="c0c8c455d8fd9ce1454cfa705cd4ff61a923482433a22fa345846221254dac745ccf7465e19f9c315de8d77f5a62fac444cfd5206c699f71ac08441efc338d929cf0bc2068f1ce0cf8f351d40c890a83159f748ea3594b7756656e6550ebebc83bb4fbfbbe8de0b683d52b469445c0efea409e0d2bbdc350a52188272aa56a14ccbaa46823e7a7960a37ad7a4356028828b9e1c032c8b68739034fa0015d93fbf5e2e2ba923971cc93be7f5f6faa843d0c5f644c7e86eef496d79315d88b88ebf5e5d689f40d1ff70839f6457ca94ee97214fddaa5c34f53dc240bf77b3fe29be10dc878c3283a05052b9d615ca054ff2c749daebf4031", 0xf7}, {&(0x7f0000000900)="f5048ea84cb00555d4601ea63b055e1fd08d4ca65a34e4c61c7fe833c284c9a634b4f2db74b46a44565f439c5ce8c35b0b8ec76595f269b6baaa67da96c9cadc7cfe875e8ecfad0ba8df51d382a58b6dc30792851e6706c3c8965b07544d6911546592b9df1201ef9f2abbbc1ea9f861ebb5adddd8cff54f3d9603132ba975b1e2e611d4bb1f3b9206545c5e1c22fe6888fb5da520d3d6e6a1773e0fb9fbe1b3747c1e887a9e26fab5090b1f6c7ab9fb964a8f85444ccb419a6b0024dfab866175d6d75b1a23", 0xc6}, {&(0x7f0000000a00)="022a7f831f6d203e60dac8a255877dad807989976433313d87f7954863e4cf0bc9edb0452574c489ca9a40075007913530b011cdbeb994122bb5ae0fa313124aa1ce7e272caff5602729bd18f9875d05362e96789cc6f432f9690be9e4679bc2ad10fbd42bd3f3f51330bb", 0x6b}, {&(0x7f0000000a80)="5c405bfb86ba00906c831092b29ce7d7c291898d6b769d48b27f93f449e562f8350ab29d245f7e3a2c296621ff7cdf2fcb18a194f8e89a9964", 0x39}, {&(0x7f0000000ac0)="921a88364914d2cdeb60632d5a8211025a51359e6ab51e369f4589924d303c480b9900ef10b272bdfbcfc92a4386842eea37bcc392070a690d1b", 0x3a}], 0x8, &(0x7f0000000b80)=[@rthdrdstopts={{0x20, 0x29, 0x37, {0x62, 0x0, '\x00', [@ra={0x5, 0x2, 0x9cfc}]}}}, @rthdr={{0x28, 0x29, 0x39, {0x3c, 0x2, 0x1, 0xa, 0x0, [@dev={0xfe, 0x80, '\x00', 0x42}]}}}], 0x48}}, {{&(0x7f0000000c80)={0xa, 0x4e21, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000e00)=[{&(0x7f0000000cc0)="c5903d91a4387e29c4658a282e3cfc32e94bc86922dd617c39f381d5", 0x1c}, {&(0x7f0000000dc0)="03785ec928bc73bd03430a39b2b2a80dde5ee6fa434e8e81d6bd39", 0x1b}], 0x2, &(0x7f0000000e40)=[@hopopts_2292={{0x90, 0x29, 0x36, {0x0, 0xe, '\x00', [@generic={0xbc, 0x56, "979f02d50384358cc02b2ecee0b1e7b2c95c747151cabe4c69633eb70d3b40faebb7cd962958d92abd9d0bba760c7c3460a54c4a01d4577cb240ce18748caf4785cc8da9576f2ad423bf39e84a77984cbaeb59141df8"}, @calipso={0x7, 0x10, {0x2, 0x2, 0x80, 0x800, [0x100000000]}}, @jumbo={0xc2, 0x4, 0x4}, @pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x6e}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x8, 0x6, 0x2, 0x0, 0x0, [@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x87, 0x1, '\x00', [@ra={0x5, 0x2, 0x2}, @pad1, @jumbo={0xc2, 0x4, 0x81}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0xe}, r6}}}, @flowinfo={{0x14}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x1, 0x4, 0x2, 0x5, 0x0, [@private1, @loopback]}}}, @rthdr_2292={{0xa8, 0x29, 0x39, {0xc, 0x12, 0x1, 0x95, 0x0, [@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @mcast1, @loopback, @mcast1, @local, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @rthdrdstopts={{0x110, 0x29, 0x37, {0x8, 0x1e, '\x00', [@generic={0x2, 0xf1, "eafb5ec465e0ca54398248bd03c4c0d175f0b2cf042381f6619cfc68f95bfca98250a536e1492f424181e10de9a5dd2a2a649043497bfd1480247d7de2a2886f6ab1c2e4a23f028139d37c164a8d28a5bedb8860546c18872b8209982dbe5bfa58f4ea45f3d4ad556d725793b0933076e52de8a7dde0691544e8ae845d94dfb2ad1c9d449fe2c478d7a79649ddd5e9c5a43a12184d1f8f45e3dc465dbc0c32fdd30a35de9262f415e9d6e0f52b32f1f4c1fe19dca7456e5ded7ccd7b274e2dc7ab4e166afd2c6328f3c2d53206397718d51cd725aaaa29dec3185b715e4681a27c4da25f94222a635c389fbb42c0085033"}]}}}], 0x348}}], 0x2, 0x20000000) fcntl$getown(r9, 0x9) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e23, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r10, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) 2m9.551943975s ago: executing program 4 (id=2205): syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f00000000c0)={0x28, 0x0, r2, 0x1000, &(0x7f0000000400)=""/4096}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) getpid() r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000240)=@req={0x28, &(0x7f00000001c0)={'ip6_vti0\x00', @ifru_settings={0x1ff, 0x0, @fr_pvc=&(0x7f0000000080)={0xdc}}}}) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r7 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r7, 0x82000000) write$vhost_msg_v2(r6, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) socket$phonet_pipe(0x23, 0x5, 0x2) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r8, &(0x7f0000000040)={0x1f, @fixed}, 0x8) setsockopt$bt_BT_VOICE(r8, 0x112, 0x13, &(0x7f0000000180)=0x60, 0x2) syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x408800) 2m8.114246838s ago: executing program 4 (id=2207): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xc02534, 0x2, 0x1, 0xffffffff}}, 0x50) 2m8.013434138s ago: executing program 4 (id=2209): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000819c00000000000000001600000000000000000000c40d899b3ea99edba1d7fa0949ead117b120e827e411b7947b0acfd86cb0838fc31992351d54874176c565d451949270eb798e685434d7a5396d32e89557c3e2aa"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r0, 0x0, 0xca, 0x1000, &(0x7f0000000500)="a09aeefe05898742caa1c57e5795f034d2a4910ac8ef129a8af21d78c05e6df8d206ff0846a7f784956f455f79f408120112bb0da8e1ae7a74bd7b8f7bb2d346723132782b6de6d5ef8b744012dfcc25a54361e35c6738b68940df10bd8fcd75391c480ee73fab252c4a90c74a9da584ad0a8049f9754523f11d681597ef33f0423af27e7caa3a2f1cafa46e613c0a120f08921d44d30acb1b08888e82af519c52665c884c0733eb12b1b3fa61c9fad64730cd9aa9dc047430f71f81108828e274a63bf42f280615d4eb", &(0x7f0000000a40)=""/4096, 0x2, 0x0, 0xfc, 0x8c, &(0x7f0000000600)="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", &(0x7f0000000380)="9fb0a1fa017b7ac6a806a4847377b29398a5b873bb9004b36e03ebef1069dc874961a65e3ac593078b3a015d09a0973fb8524fb2b3628decd00b59f66cf3e8e951adf0e461cfd87711eb24c8579a1815d8d9c53d884e09b86ec1bdecafa2c3ec46ccd8782749da3269ce250b8b83b5d41bc126d5bfd158e07b65b363c8570f6439085e44fa24020fc3ffcb80", 0x0, 0x0, 0x6}, 0x50) umount2(&(0x7f00000004c0)='./file0\x00', 0x0) (async) umount2(&(0x7f00000004c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) (async) sched_setscheduler(r5, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x10, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee6, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) (async) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1, 0x7fff) (async) mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1, 0x7fff) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x2, 0x9, 0x0, 0x0, 0x80000000000, 0x7, 0x4}, {}, 0x0, 0x6e6bbf, 0x1, 0x0, 0x2}, {{@in=@remote, 0x4d5, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x4, 0x0, 0xb7}}, 0xe8) sendmmsg(r1, &(0x7f0000000180), 0x400000000000077, 0x0) (async) sendmmsg(r1, &(0x7f0000000180), 0x400000000000077, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) 2m7.91005496s ago: executing program 4 (id=2211): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff36, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f00000000c0)="e0", 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x50) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000001c0)={r4, 0x7}, &(0x7f0000000200)=0x8) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff05"], 0x1c}}, 0x0) recvmmsg$unix(r7, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xecc}], 0x1, 0x0, 0x0, 0xa6ffffff}}], 0x8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kvm_unmap_hva_range\x00', r1}, 0x10) 2m6.136160373s ago: executing program 4 (id=2218): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)='y', 0x1}], 0x1) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0x7f, 0x0, 0x369, 0x0, 0x7}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) capset(&(0x7f0000000100)={0x19980330, r2}, &(0x7f0000000140)={0x3, 0x0, 0xfffffff9, 0xfc000000, 0x0, 0xfff}) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r1, 0x5501) 2m5.961079553s ago: executing program 33 (id=2218): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/current\x00') writev(r0, &(0x7f0000000240)=[{&(0x7f0000000080)='y', 0x1}], 0x1) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)={0x0, 0x7f, 0x0, 0x369, 0x0, 0x7}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) capset(&(0x7f0000000100)={0x19980330, r2}, &(0x7f0000000140)={0x3, 0x0, 0xfffffff9, 0xfc000000, 0x0, 0xfff}) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r1, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], [], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r1, 0x5501) 44.238766506s ago: executing program 2 (id=2646): ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0xa2465) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0xc0884123, &(0x7f0000000000)) unshare(0x44040200) sched_setscheduler(0x0, 0xf, &(0x7f0000000200)=0x2) ptrace$getregs(0xe, 0x0, 0xa, &(0x7f00000002c0)=""/4096) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x54c1}, 0x8) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) 43.766627806s ago: executing program 2 (id=2648): socket$netlink(0x10, 0x3, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x139081, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000fc0)=[{{&(0x7f0000000180)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x4}, 0x1}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000240)="ea573083ff901d1852fddda6856d134739b96bc60f05c696d68dc93944b9f16fd04aea181e47afbaee56cbfc3b6105c34c035372e6f5545b0828401a36890a7f371c7d9ae2e23cac", 0x48}, {&(0x7f0000000500)="ecb1119b821b7f", 0x7}, {&(0x7f0000000540)="3fd85e7e95b80f74070fbbb1d923b110d594f4243ae6a01e663c7911918d8f67ce278c7b", 0x24}], 0x3, &(0x7f00000005c0)=[@mark={{0x14, 0x1, 0x24, 0x8a}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x81}}, @timestamping={{0x14, 0x1, 0x25, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0xfffffff7}}], 0xc0}}, {{&(0x7f0000000680)=@hci={0x1f, 0xffffffffffffffff}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000700)="3406ab37763e6eed1164aaf9c5a5e2a1b81748ceb35f42a4f21ba1818d10ff921973cabedf3bb77c36f87e99b62580dba4be277d85d000a908695624a15acfde613e5d598bf0eff9a252ca38dc14563cda879be06868efe26bf8d15b5d399bc24caf082146f031fd89a29b401dfd5e5a02c3a98d38981bc40e0f359e6d9fd787b3f898e3a136d5", 0x87}, {&(0x7f00000007c0)="0ae79bffa2e1f930cd8f1d00edd751016bc70465783faf0b97e3aedc37249b106f76fa3f0c120395d4e7911e63328b14c8d1d6b90ac6ffc06a1c079f8d6f72baaab7e8db5ec2b8872ab0c4c91ca9cf65db0e8cd14c64767a2c15817e7ae381f4760f04b51257b0ef75c4035f7830494266bbc3c3eb5cb0b06bf290bdcaa527bed884273c9ec094cc52a4f541298cba7caa9090e9e130ec45798ddd5f2f3758628ba2f771c38936129fbd297789f3668fa911fc8332", 0xb5}, {&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000000b80)="e3955bba70fb359dac527eaaa874ebaae9dc0c20b51003e0e2a62be9692ee173a301e814a17202a527f93f1437aaf44970c5c6ee6978e4517b459ef11651b212587fc3b1e464f6b31dab65bebcd8bea586e254afcc3390181b67a7084f3a1f2ebcc0406ea8bc01ac24553d65713d8bc17b2a5b8c8d3bb7314902f91c8fb1aa7cc875e0adca0edd7e086c862eed64202725e845", 0x93}, {&(0x7f0000000c40)="29e637be9c8328050e02023c52610f60486f2be0f352d86587bc460d861be97f0ef1f5552f18af0bd1a78b754139ab3cb6007da460a202b6d856b457a1fae3cf7a1e311738221941a1a728d4d056751b27af927c49ac13b2d081e005cc383ea536d9501675b7974cf710552374d609d798336c81a5fcbd78c1b53653a273d8e8dec6", 0x82}, {&(0x7f0000000d00)="4a9e2068e72300a46e1c3bfd4e77e46662add79324d4ed5e990296858625a27d4325132c86aa6ba3790c3767ad0638574475f2b628141fbfb923cf62cee857e403db8926bd9f88c987de9a5f6d0fd80061675c146c1ab9dccca843e48db86e507cb2e614b58412d3ff7668e66235c8c60a60aee51cfd91cd4b8557fe92daf7345e44840f30a7ceacd01ced00e1", 0x8d}, {&(0x7f0000000880)="484e3a7fe1b918c4e316cb164db06fd2b3a55f5d29313c3b082995c8da9aac9181c49ec82300b99f663b91722a1fbde5034ace01fae82d7f77b30975ab6995448e4da975342a59fdc3af5ea3caf09f4be562fe646b58427f902ced57f09d51696c8758ea35f28b35cba1411e1ccb891a", 0x70}, {&(0x7f0000000dc0)="28d55f3db34dbb9f4c2a423e766c7f0ef375253edb02f8328f6b46501dcf97eaf210ea471b4ae4a34a682aa2e3238d2bd3e7a0fdc19d3148121625aabd9fee548699be6fd92fb4596c0f2166018c78c6331099aba87f98e17a41133bc1698f", 0x5f}], 0x8, &(0x7f0000000ec0)=[@timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0xa4}}, @timestamping={{0x14, 0x1, 0x25, 0x7fff}}, @txtime={{0x18, 0x1, 0x3d, 0x3959}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x8000}}, @txtime={{0x18, 0x1, 0x3d, 0xe08c}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}], 0xd8}}], 0x2, 0x4) ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000008000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00008000000000030001e722d600000000000000002300002561000000000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x18) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000380)={0x9, 0xb2bf, 0x1000, 0x8, 0x18, "6ba51a360ad169ed"}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) write$binfmt_script(r4, &(0x7f0000000180)={'#! ', './bus', [{0x20, 'm\xe9\xd1\xe0d\x1fSk\xa7\x8b+\xc5:\xc4 \r\xf2\xaan\"\txyq!\xda\xc6/\x84\xcd\xbf\xaf\xb6\xf5\x01\xf2Ej4\xb5\xcc\x81\xa9\x8e\ag\xc7>\x06yH\x00/\x1a\xactb\x92;\xd4\x9bv\x9c\xb0\xe0\xf7\xd3\x00\x00\x00\x00\x00\x8f;h\xe2-T%\x9e\x00'/90}]}, 0x64) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000940), 0x0, 0x4004000) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f00000003c0)={0x6, 0x5, 0x6, 0x800, 0x4, "38bcfa27c0a1626434ea329cf247997302b662"}) syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000080)=""/8, 0x8, 0x40000060, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) 43.703189679s ago: executing program 2 (id=2650): socket$kcm(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x38, &(0x7f0000000040)=0x7, 0x4) 42.179432057s ago: executing program 2 (id=2656): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6011, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) r1 = socket(0x2, 0x80805, 0x0) listen(r1, 0x5) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x20490420, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0x7) fchown(r4, 0x0, r5) write$P9_RSTATu(r3, &(0x7f00000005c0)={0x9c, 0x7d, 0x1, {{0x0, 0x5d, 0x9, 0x10, {0x20, 0x4, 0x2}, 0x81040000, 0x80, 0x7, 0x1, 0x6, '@[,{[!', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x4, 'GPL\x00', 0xe, 's!\x88\xd5\x1a\x05sTit\x13ch\x00'}, 0x2a, '\xcaU\xab\xaf\xbe\xa6\xe9\x06\xab\b\x8f\x13\xd9d]3|;\"\xfc\x96|\xd7\x81\xfb\x91\xe4E\xf6I\xad%\xe5\xa6\xe7\xb9\xff\xc1\xfdG\xcdS', 0x0, r5}}, 0x9c) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000440)={{}, {0x1, 0x1}, [{0x2, 0x7}, {}, {0x2, 0x1}, {0x2, 0x3}, {0x2, 0x2}, {}, {0x2, 0x1}, {0x2, 0x3}, {0x2, 0x1}], {0x4, 0x6}, [{0x8, 0x7, r2}, {0x8, 0x5, r5}, {0x8, 0x2, r5}, {0x8, 0x0, r2}, {0x8, 0x4, r2}, {}, {0x8, 0x0, r5}, {0x8, 0x2}, {0x8, 0x1, r2}, {0x8, 0x1}], {0x10, 0x2}}, 0xbc, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=0x0], 0x30}], 0x1, 0x851) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000040)={'bond0\x00', @ifru_names='ip6tnl0\x00'}) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) munlock(&(0x7f0000e4a000/0x1000)=nil, 0x1000) munlock(&(0x7f00002ab000/0x4000)=nil, 0x4000) mlock2(&(0x7f0000ea2000/0x4000)=nil, 0x4000, 0x1) munlock(&(0x7f0000e3f000/0xe000)=nil, 0xe000) 41.318880947s ago: executing program 2 (id=2660): r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000040)) (async) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) (async) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000025c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@volatile}, {@upperdir={'upperdir', 0x3d, './file1'}}], [{@appraise_type}, {@smackfsdef={'smackfsdef', 0x3d, '\x00'}}, {@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, '.'}}, {@smackfsdef={'smackfsdef', 0x3d, 'syzkaller\x00'}}]}) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) (async) chdir(&(0x7f0000000140)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) (async) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x4) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000280)=0x20) (async) read$FUSE(r2, &(0x7f0000000500)={0x2020}, 0x2020) (async) timer_settime(0x0, 0x5, &(0x7f00000001c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002740)={0x11, 0x13, &(0x7f0000002640)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xa, 0xdb, &(0x7f0000002640)=""/219, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0xffffffd2) (async) write(r3, &(0x7f0000000040)="0d000000010001", 0x7) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x20001400) (async) ioctl$PPPIOCGIDLE(r5, 0x8010743f, &(0x7f0000000000)) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) 41.223574663s ago: executing program 2 (id=2662): sched_setaffinity(0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x20000005) r0 = socket$inet6(0xa, 0x6, 0x0) setregid(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) socket$inet6(0xa, 0x80001, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) pipe(0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_emit_ethernet(0x94, &(0x7f0000000280)=ANY=[@ANYBLOB="342b5f3e94b2bbbbbbbbbbbb8100210000118ef4536f1a0e3ba20f93cf3f1c7521b5722ce522617bbc30317b2bc1059090b916c9b0436c6a62140e949d5623c7b1cb19ae02dba8ee0386316c3a29652e73314e7bc9710b62550321bec3ef1e8c58cd8559a2eeab0da664e968114d12082698599a2b47722003ccfa296a9200e21b416063f78b4671ce684b4e6a53182e5ec6a85b"], 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000000c0)=0x1, 0x4) r3 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bind$bt_hci(r2, &(0x7f00000001c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 28.43431204s ago: executing program 5 (id=2726): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="280000002c000100000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x28}], 0x1}, 0x0) (async) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x40202, 0x0) ioctl$SNDCTL_DSP_STEREO(r1, 0xc0045003, &(0x7f00000000c0)=0x1) mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000007, 0x12, r1, 0x0) ioctl$SNDCTL_DSP_POST(r1, 0x5008, 0x0) (async) ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f00000001c0)) 26.233919665s ago: executing program 34 (id=2662): sched_setaffinity(0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x20000005) r0 = socket$inet6(0xa, 0x6, 0x0) setregid(0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) socket$inet6(0xa, 0x80001, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) pipe(0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) syz_emit_ethernet(0x94, &(0x7f0000000280)=ANY=[@ANYBLOB="342b5f3e94b2bbbbbbbbbbbb8100210000118ef4536f1a0e3ba20f93cf3f1c7521b5722ce522617bbc30317b2bc1059090b916c9b0436c6a62140e949d5623c7b1cb19ae02dba8ee0386316c3a29652e73314e7bc9710b62550321bec3ef1e8c58cd8559a2eeab0da664e968114d12082698599a2b47722003ccfa296a9200e21b416063f78b4671ce684b4e6a53182e5ec6a85b"], 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000000c0)=0x1, 0x4) r3 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bind$bt_hci(r2, &(0x7f00000001c0)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 24.212538585s ago: executing program 5 (id=2749): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r3, 0x1, 0x2, 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x3, @empty, 0x1}, 0x1c) listen(r6, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 23.155125039s ago: executing program 5 (id=2753): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800000a0000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x84, &(0x7f0000000180)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) r5 = openat$binfmt_register(0xffffff9c, &(0x7f0000000240), 0x1, 0x0) write$binfmt_register(r5, &(0x7f00000000c0)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x9, 0x3a, '\\proc/sys/fs/binfmt_misc/register\x00', 0x3a, '\x00', 0x3a, './bus/file0', 0x3a, [0x43, 0x43]}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r7, 0x0, 0xfffffffffffff0b5}, 0x18) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES64=r4, @ANYRESHEX=r2, @ANYBLOB="020000000200000000000000", @ANYRES32, @ANYRES32=r1, @ANYRES64=r6], 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r8, r9, 0x2, 0x2, 0x0, @void, @value}, 0x10) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r11 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_WATCH_KEY(0x20, r11, r10, 0xffffffffffffffff) ioctl$DMA_BUF_IOCTL_SYNC(r10, 0x40086200, &(0x7f0000000140)=0x5) socket$kcm(0xa, 0x2, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r13, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r14}]}, 0x1c}}, 0x20000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 22.443157008s ago: executing program 5 (id=2755): socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) pselect6(0x40, &(0x7f0000000040)={0x0, 0xfffffffffffffffc, 0x3, 0x5b20}, 0x0, &(0x7f0000000100)={0x8, 0x0, 0xfd3f, 0xe27, 0x4, 0x0, 0x1}, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000700)={{0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x10, 0x8}, 0x0, 0x0, 0x8, 0x5, 0x7fffffff, 0x6, 0x9, 0x0, 0x1, 0x5, 0xffffffffffffffff}) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) r1 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7079, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x1000}, 0x4) r5 = socket$packet(0x11, 0x2, 0x300) r6 = syz_open_dev$vim2m(&(0x7f00000007c0), 0x2, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000900)={0x1, @pix={0x6, 0x8, 0x3631564e, 0x4, 0x5, 0x7, 0x6, 0x9, 0x1, 0x0, 0x2, 0x6}}) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f00000000c0)={0x0, 0x1000}, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1532, 0x11b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io(r7, &(0x7f0000000140)={0x2c, &(0x7f0000000900)=ANY=[@ANYBLOB='\x00\"u'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r8, 0x0) msgctl$MSG_STAT(r8, 0xb, &(0x7f0000000380)=""/235) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0xb}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 22.129849073s ago: executing program 5 (id=2760): ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2465) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0xc0884123, &(0x7f0000000000)) unshare(0x44040200) sched_setscheduler(0x0, 0xf, &(0x7f0000000200)=0x2) ptrace$getregs(0xe, 0x0, 0xa, &(0x7f00000002c0)=""/4096) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x54c1}, 0x8) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) 9.053324867s ago: executing program 5 (id=2760): ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2465) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0xc0884123, &(0x7f0000000000)) unshare(0x44040200) sched_setscheduler(0x0, 0xf, &(0x7f0000000200)=0x2) ptrace$getregs(0xe, 0x0, 0xa, &(0x7f00000002c0)=""/4096) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x54c1}, 0x8) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) 6.080631289s ago: executing program 7 (id=2828): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/sockstat6\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x800}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r3, 0xc01064c7, &(0x7f0000000280)={0x0, 0x0, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_io_uring_setup(0x1002943, &(0x7f0000001400)={0x0, 0x0, 0x10}, &(0x7f0000001480), &(0x7f00000014c0)) r4 = syz_io_uring_setup(0x34ef, &(0x7f0000000400)={0x0, 0x0, 0x1}, 0x0, &(0x7f0000001480)) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_MSG_RING={0x28, 0x0, 0x0, r4, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x2003, 0x0, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xfe, 0x10000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x6}, 0x2c) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) open(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000055000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) mount(0x0, &(0x7f0000000440)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) 5.559264382s ago: executing program 3 (id=2830): set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file0\x00', 0x1b7) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array]}}, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC, @ANYRES64, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0xe8}}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r5, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000008000000000000000000000181100e2f6b16bfc094f85d400", @ANYRES16=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESOCT, @ANYRES32=0x1, @ANYBLOB="04000000000044800000004ea462b243633c36f55232bb", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="0200000005000000030000000d00"/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x1}}, 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) stat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000700)={{{@in6=@local, @in6=@private1, 0x4e21, 0x4, 0x4e21, 0x0, 0x2, 0xa0, 0x0, 0xff, r10, r11}, {0xf, 0x3, 0x3, 0xfffffffffffffc01, 0x1, 0x1, 0x2, 0x3}, {0x0, 0x7fffffffffffffff, 0x8, 0x4}, 0x1, 0x0, 0x1, 0x1, 0x2}, {{@in=@empty, 0x4d2, 0x32}, 0x2, @in=@multicast2, 0x0, 0x0, 0x1, 0x5, 0xfbd8, 0x2, 0x800}}, 0xe8) writev(r4, &(0x7f0000000480)=[{&(0x7f0000000080)='4', 0x1}], 0x1) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r12, {0x7, 0x1f, 0x0, 0xb8126c1eaec961b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r13, 0xc0046686, 0x0) 5.332900126s ago: executing program 0 (id=2831): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) ptrace$peeksig(0x4209, r0, &(0x7f0000000040)={0x9, 0x0, 0x2}, &(0x7f0000000080)=[{}, {}]) r1 = syz_open_dev$cec(&(0x7f0000000180), 0x0, 0x40000) ioctl$CEC_RECEIVE(r1, 0xc0386106, &(0x7f00000001c0)={0x77, 0xd, 0x1, 0x7, 0xaad, 0x5, "e5ae81b18edec2e65021074345ef3311", 0x2, 0x1, 0x4, 0x4b, 0x6, 0x45, 0x3}) prctl$PR_GET_NAME(0x10, &(0x7f0000000200)=""/96) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x8a000, 0x0) mkdirat(r2, &(0x7f00000002c0)='./file0\x00', 0x1) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000300)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ptrace$getsig(0x4202, r0, 0x7ff, &(0x7f0000000540)) fsetxattr(r2, &(0x7f00000005c0)=@known='user.syz\x00', &(0x7f0000000600)='/dev/cec#\x00', 0xa, 0x3) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet(r3, &(0x7f0000000b00)={&(0x7f0000000640)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000680)="56e8eeb6bcc95ce2725cd2722ec854dc998b1fbecaeba98ea021ec5e774e0fbd7cc95719ddeb1b05e8073df71c8748db01c76acdba49a37961da7c06d91eaa8e5077eb1364c407b02aa4b044de2067dcc03544e2aafc", 0x56}, {&(0x7f0000000700)="183f72dc6d711e0692925a39616ca6454335d2f792b2a543e5aa65db961b31ea0189804eb911d1826f17bfcdc5ac584057df2ca804fef9a61a31f9d98ae9657a68873e4c1607f21510bcb702c36deccaac692d510e1fb90f0a0ceb6210e20940589456c135a82551", 0x68}, {&(0x7f0000000780)="504743adf73477cc1c8a15c62437bac1f6b1c724187d73d1d279b1982bc35800d1920ee0294300ce07875f920de4cd81322c0a16e033f7322950502047bd5917b7b4c1e0c092b88aeadf6f7bee7628314e79b2918426d8faf40697de5f844973be47d21623339132565ddaed3e1dabaf7af3ee56e78733ab9028243fe7f58d8c090f7f61ba1a70c1c56611acfa548a33753786a656c0c482d8de1894923933c596dee305dc68d0d90aab10ba4559b4b15c5df8e4f64c2bd9f1a206a4ac923cf3f9458f36a62a6db145253ad330d84cd92b28b7adcb1b4dee448eb380aa35f9f3e02aabf1a9c057ba50f089ced21821b9dbae66d8", 0xf4}, {&(0x7f0000000880)="3dcd2b15a376d7b5c5dd8bd6ba1c6aab591860a3b12961ca169a79fb94012e946adda919efb6ec49425cffdcf96bb84aea58798930a7e3a72af7ac9a997caf75e33a2b5226cbd45b91ee29cd7ffc2f2a61cc4c659cb4cb6c203e47954fa51f515ad2d90b834312b07c395b1ad3cc11b8e0d233532bc37412b61a6c8c2bf2ae772a4ec5264d32bcaeef8010e413a70ad9fb3e0fb28ea803674980b25f5c0d2ab2cd784ebc6794e80b47fdd21af9032932f24b2dbbb11fb1f7feb1406d8326c8c747271a698c839c72929d7862e1ec33444760397e076b165ff73d9dbff011223047d0f0b38b", 0xe5}, {&(0x7f0000000980)="b09d32d8e1517b602c0fac6a74b5ee18a4ef631b140ae9323428c10e906165725a1a4854ab1cb544ddcf80d15889203c915bf9bcc1bba6ebf9132a322620402097db46d13cece15b3d6fdca2c00ae8e522cc46655761f2f796005f6b9e40639aaaee65996445e5ddc6f259e56131d8bfbea1d1320ed89085eb967471b7b7c6bfbc6882f48d831cec6ee5e89f30bafed4a72e008033503fe28b5984cc7fef1b74e448284db66ef27d7eb1ae573432ff3ee01b8a27c4469f3d024c8f30fa4c021a1ffe42931fefc5b59dade8c9abdebc1a59c0af639e1fdb2327f9e20c1a366824b545835690b7b7fb1da50108", 0xec}], 0x5}, 0xc000) prctl$PR_GET_NAME(0x10, &(0x7f0000000b40)=""/4096) clock_gettime(0x0, &(0x7f0000001c00)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000001b40)={[0x3]}, &(0x7f0000001b80), &(0x7f0000001c40)={r4, r5+60000000}, 0x8) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000001c80), 0x8) r7 = epoll_create(0x0) r8 = getgid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000001dc0)={0x0, 0x0}) fstat(r3, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001ec0)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000001fc0)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f0000002000)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r13 = getgid() sendmsg$unix(r6, &(0x7f0000004140)={&(0x7f0000001cc0)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001d80)=[{&(0x7f0000001d40)="80d5247deac51436d7ea2f63eb2957301f4dfd62ff6d194bbf92f39d583ad0a0cb235c4cf504dbc64d78370e17b9ad47868a2d3eb6", 0x35}], 0x1, &(0x7f0000004040)=[@rights={{0x30, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r1, r1, r3, r7, r3]}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xffffffffffffffff, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r0, 0xee01, r10}}}, @cred={{0x1c, 0x1, 0x2, {r0, r11, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r0, r12, r13}}}], 0xd0, 0x4}, 0x4) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000004180)={"063947f5", 0xb, 0x3, 0xbe, 0x5, 0x5, "770c625bdee2312b9a7081f5d6fd41", "4807af44", "906605fb", "fe3cf6e2", ["7ec168e3ab85758cdc5a2114", "047016e8260c93366854360e", "63157a26ccfeeb032c676770", "bcae94f83aff813aa2393a58"]}) openat$cgroup_int(r6, &(0x7f0000004200)='cpuset.sched_load_balance\x00', 0x2, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r6, 0x3b88, &(0x7f0000004240)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP(r6, 0x3b85, &(0x7f0000004380)={0x28, 0x0, r14, 0x0, &(0x7f0000004280)="10e6c26a111e09bc81b81dcd4e05db57c8165b18f271088d3444faefbc2b9e9161091cba87cd0e84e903a5bbf7754becf7f8a15c5089c850424b4c8fab50e3c56924704c949d4bc5e15fb3f484d84a94a5f83da8b8221a0207b4e61ac87385ae1b7a158c2ab8b6c8af3857f37399890f431f32d3ef9dd00feb9fed986496aa898b6f669f16a7d0a45b806587deabeff350dd2dddf5c703496d05294cc4de734e22f96f99cd68f72e992f953170bd4a293aef0010745899cd5d0810cbcf432362472256169d9419d8f9e21847ddead5f7e8c5", 0xd2, 0xe000000000000}) sendmsg$AUDIT_ADD_RULE(r6, &(0x7f00000048c0)={&(0x7f00000043c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000004880)={&(0x7f0000004400)={0x44c, 0x3f3, 0x8, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x9, [0x799deb9d, 0x8, 0xc2, 0x5, 0xfff, 0x2, 0x6, 0x4b63, 0xc, 0x7, 0x6, 0x84, 0x3, 0x1, 0x5, 0xb38, 0x6, 0xf, 0x6, 0x6, 0xc, 0x6, 0xb2, 0x81, 0xe, 0x3, 0x4, 0x9, 0x9, 0x40, 0x3, 0x0, 0x8, 0xe0, 0xfff, 0x8ecd, 0x1, 0x41cb, 0x2, 0x5, 0x547, 0x3, 0x6, 0xd, 0x1, 0x7, 0xfffffc68, 0x6, 0x1, 0x80000001, 0xc90, 0x5, 0x6, 0x7, 0x3c0, 0x40, 0xfffffffc, 0x9, 0x10001, 0x200, 0x1ff, 0x9, 0x6, 0x80000001], [0x4, 0xfffffffb, 0x77bd3f70, 0x4, 0x6e4, 0x0, 0x8, 0x4, 0x5, 0xdd9d, 0x2, 0x1, 0x7, 0x6, 0x8, 0x7, 0xf4f, 0xf8, 0x100, 0x1, 0x4, 0x100, 0x4, 0x7120f542, 0x8001, 0x4, 0x5, 0x0, 0x7, 0x7, 0x0, 0x8, 0x0, 0x8000, 0x854, 0x6, 0x3, 0x6, 0x9, 0x10001, 0x1, 0x1, 0x0, 0x0, 0x0, 0xffffffc0, 0x6, 0x73, 0xbc17, 0x3, 0x6, 0x3, 0xfd9c, 0x0, 0x8, 0x7, 0xa6, 0x2, 0xfffffff0, 0x0, 0xfff, 0x6, 0x100, 0x4], [0xc8a7, 0x4, 0x4, 0x4, 0x1, 0x6, 0x1, 0x4, 0x2, 0x5, 0xd, 0x4a91, 0xd, 0x6, 0x0, 0x8, 0x2, 0x4, 0x7, 0x0, 0x2, 0xfffffff9, 0x4, 0x2, 0x5, 0x9310, 0xba16, 0x10, 0x3, 0x10, 0x400, 0xa6, 0x9, 0x2, 0x1, 0x0, 0x6, 0x3ff, 0x3, 0x7, 0x0, 0x9, 0x6, 0x8, 0x7, 0x6, 0x8, 0x5, 0x2, 0x6, 0xffff, 0xfcc, 0x8, 0xd48, 0x80000, 0x8, 0x800, 0x10000, 0x3, 0x11, 0x80000000, 0x800, 0x4, 0x7], [0x2, 0x6, 0x40, 0x1, 0x3, 0x7, 0x4, 0x90e, 0x21c, 0x4, 0xfffffff9, 0xb, 0x2969, 0x1adc, 0x2, 0x1, 0xd, 0x7ff, 0x2, 0x3, 0xfffff001, 0x6, 0x7, 0x1, 0x401, 0x5, 0x2, 0x98897976, 0x4, 0x32, 0x400, 0x9, 0x7, 0x0, 0x10001, 0x5c, 0x0, 0x4, 0xa7, 0x7, 0x8, 0x2, 0x60000, 0x81, 0x7fff, 0x1, 0x8000, 0x10000, 0x8, 0xbc8, 0x8, 0xfffffff8, 0x5, 0x9f, 0x1, 0x3e6098fb, 0x8, 0x1ff, 0x3, 0x7ff, 0x5, 0x6, 0x1d42], 0x2c, ['user.syz\x00', '/dev/cec#\x00', '.{6/#!*\x00', '!}\'\x00', '\x00', 'user.syz\x00', '&{\x00']}, ["", "", "", "", ""]}, 0x44c}, 0x1, 0x0, 0x0, 0x8000}, 0x8080) syz_open_dev$usbfs(&(0x7f0000004900), 0x6, 0x309c00) 5.288415657s ago: executing program 3 (id=2832): socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$binder(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB='max=185467440737']) r2 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0xe51b, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000240)={0x0, 0x73bd, 0x0, 0x0, 0x2fc}, &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r2, 0x381b, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 5.079085713s ago: executing program 7 (id=2833): prctl$PR_GET_KEEPCAPS(0x7) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x1e, &(0x7f00000003c0)=0xc65, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000400)=""/67, &(0x7f00000004c0)=0x43) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r4}, 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='net/ip_tables_targets\x00') pread64(r5, &(0x7f0000000200)=""/162, 0xa2, 0xae) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004bc0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7343067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d1d0b90c8997e6917226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67a4cbb1280955e9a59cd8e5e8ac68c27da3d5", 0xb6}, {&(0x7f0000000f00)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df28a3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed9", 0x61}, {&(0x7f0000000700)="6a8fa35a5ac69c3f3504610b7a65154b8a319d412cae86d445126356a7ea73e2cc334fba45667941bdeaebee3915c7685d4a2c125a1898bb727147075b79a19e162ca01c17cdb0398d7303a2955433e8f9de6d144dddc2ca170b10d505c3eb024dcacee0c139b5a9044f1f3a0fd4e958406a6ba551007ed89e2312e678f38707c8f37e5c8fe3cb977b7035", 0x8b}], 0x3}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001bc0)="5c89eeb1aa86c6f680f09cc1c1d4bc5fc6a067d295afd3aa97af3d777b81db48f9ceb270e506af840503c6fbf20760e4cd8df9c220cd0728585229123d5c61507d00561b8f1a15e64fa2779be424fdeff46058eaee7acfc80b2ae9840e9ac1e33ac8378c98695a08bdb8f2a756b1704c036e3b0ff2d1e9", 0x77}], 0x1}}], 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(r5, 0x4141, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$msr(r6, &(0x7f0000000180)=""/255, 0xff) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) write$binfmt_elf64(r6, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"/1008], 0x3f0) 4.35540953s ago: executing program 0 (id=2834): r0 = syz_open_dev$vim2m(&(0x7f0000001580), 0x57, 0x2) write$sysctl(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEN_FRAMES(r3, 0x40184152, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="110000000000c000"], 0x20) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3, {0xd17}}, './file0\x00'}) ioctl$BLKRRPART(r4, 0x125f, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0x3a) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x4000, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0xc02534, 0x2, 0x1, 0xffffffff}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x1, 0x0, [@mcast1]}}}], 0x28}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x28, 0x1, 0x0, "3a8e00000034b52ba75066c27891ca55e21f0000000000b2b678d200", 0x34324948}) 4.227941305s ago: executing program 3 (id=2835): r0 = socket(0x2, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000280), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x40, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008004}, 0x40890) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000"/35, @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_X86_SETUP_MCE(r6, 0x4008ae9c, &(0x7f0000000140)={0x7, 0x0, 0xb}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8}]}, 0x3c}}, 0x0) 3.946154889s ago: executing program 7 (id=2837): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x20, 0x17, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x4880) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) symlink(&(0x7f0000000540)='./file0\x00', &(0x7f0000000500)='./file0\x00') fchdir(0xffffffffffffffff) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) clock_gettime(0x0, &(0x7f0000000140)) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x8000}], 0x1, 0x0, 0x0, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 3.491953896s ago: executing program 0 (id=2838): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$can_j1939(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, {}, 0x1}, 0x18) syz_genetlink_get_family_id$devlink(&(0x7f0000000880), 0xffffffffffffffff) pipe(&(0x7f0000000080)) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r6 = socket$kcm(0x10, 0x2, 0x4) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r1, 0x4068aea3, &(0x7f0000000180)={0xc1, 0x0, 0x1}) recvmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2002) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000170081ae08061cdc030ec080000000000000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 3.239273167s ago: executing program 6 (id=2839): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_open_dev$MSR(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) syz_open_dev$dmmidi(0x0, 0x2, 0x42000) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000005100)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r6}, 0x18) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4c041}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000e54ad28bb67dedfa73d0e8985b7c84fc35a285832aeea110fa46be754b3fe59b5ebf03b14931c66ce4f6182b10e810593413801ba4e152ae83ac0652612fdaa6", @ANYRESDEC=r6, @ANYBLOB='\x00'/28, @ANYRES32, @ANYRES32=0x0, @ANYBLOB='\x00'/20], 0x48) 3.015561365s ago: executing program 7 (id=2840): r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x0, 0x8) timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r0}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000b1000040"]) 2.448774018s ago: executing program 0 (id=2841): r0 = socket$kcm(0x11, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x42000, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0x17) ioctl$TUNSETLINK(r3, 0x400454cd, 0x301) sendmsg(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) write(r2, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24) fcntl$lock(r1, 0x24, &(0x7f0000000000)={0x1}) mkdir(&(0x7f0000000040)='./file0\x00', 0x140) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='xfs\x00', 0x85, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27050200590200000600002fb96d", 0xe}], 0x1}, 0x0) 1.991343813s ago: executing program 6 (id=2842): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) (async) r5 = openat$vimc2(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r5, 0xc040565e, &(0x7f0000000080)={0x9, 0x101, 0x4, {0x6, 0x7, 0x3}}) (async, rerun: 32) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) (async, rerun: 32) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000000)={@empty, r4}, 0x14) (async) ioctl$VIDIOC_ENUMAUDIO(r5, 0xc0345641, &(0x7f0000000040)={0x200, "c2fb9eb46b257a20b3b4fcb6378e486b881a20b49904ea98ca23ef2042fcfb11", 0x2, 0x1}) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x235, 0x2881}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0) 1.861854812s ago: executing program 3 (id=2843): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mknod(0x0, 0xc000, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[], 0x1c) setsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) prlimit64(r2, 0x0, &(0x7f0000000180)={0x6, 0x2}, &(0x7f0000000280)) accept4$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, &(0x7f0000000240)=0x10, 0x80000) 1.861587978s ago: executing program 6 (id=2844): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x20, 0x17, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x4880) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r2, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) symlink(&(0x7f0000000540)='./file0\x00', &(0x7f0000000500)='./file0\x00') r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r3) write$tcp_mem(r3, 0x0, 0x0) close(r3) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) clock_gettime(0x0, &(0x7f0000000140)) ppoll(&(0x7f0000000100)=[{r4, 0x8000}], 0x1, 0x0, 0x0, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 1.780343704s ago: executing program 7 (id=2845): syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) listen(r0, 0x0) (async) listen(r0, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = dup(r2) r4 = open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000f140100"], 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000f140100"], 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) ftruncate(r4, 0x200004) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x38, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7, {0x0, 0x6, "5b29ab", 0x0, 0x6c, 0x0, @mcast2, @mcast1, [], "eb0000006fad50b3"}}}}}}}, 0x0) (async) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x38, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x7, {0x0, 0x6, "5b29ab", 0x0, 0x6c, 0x0, @mcast2, @mcast1, [], "eb0000006fad50b3"}}}}}}}, 0x0) read$FUSE(r3, &(0x7f00000023c0)={0x2020}, 0xfffffe9f) (async) read$FUSE(r3, &(0x7f00000023c0)={0x2020}, 0xfffffe9f) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x20301, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) pselect6(0x40, &(0x7f00000007c0), &(0x7f0000000800)={0x7f}, 0x0, 0x0, 0x0) dup3(r7, r6, 0x0) (async) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000000040)) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@broadcast, @empty, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @link_local, @private=0xa010100, @random="57330377ba25", @dev={0xac, 0x14, 0x14, 0xff}}}}}, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000003200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1472, 0x0, 0x0, 0x0, 0xff8, 0x0, &(0x7f00000031c0)={0x30, 0x30, 0x1e}}}], 0x0, 0x0, 0x0}) sendfile(r3, r4, 0x0, 0x80001d00c0d1) (async) sendfile(r3, r4, 0x0, 0x80001d00c0d1) openat(r4, 0x0, 0x0, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.370106093s ago: executing program 7 (id=2846): syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x9d, 0xea, 0x78, 0x40, 0x18b4, 0xfffb, 0xdc7b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xa0, 0x1f, 0x71}}]}}]}}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, 0x0, 0x0) r1 = io_uring_setup(0x28bc, &(0x7f00000002c0)={0x0, 0x9d31, 0x82, 0x3}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r1, 0x8, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xc7, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb5, 0x3, 0x1, 0x1, 0x80, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x4}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x202, 0x3, 0x8, 0x0, 0x1, 0x5}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0x401, 0x5, "80"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x0, 0x10, 0x3, {0x7, 0x25, 0x1, 0x82, 0x2, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x9f, 0x4, 0x80, 0x7, "7bff9a816d"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x62, 0x8, 0x9, "8542cd3693ed431083"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x2, 0x7, 0xe0, "b24e", "e172"}, @as_header={0x7, 0x24, 0x1, 0x3, 0x26, 0x4}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x4, 0x1, 0x8, "3e14414461bc596b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x7f, 0x3, 0xe, {0x7, 0x25, 0x1, 0x1, 0x80, 0x8}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x9, 0xf, 0x3, 0x8}, 0x5, &(0x7f0000000040)={0x5, 0xf, 0x5}, 0x6, [{0x9c, &(0x7f0000000200)=@string={0x9c, 0x3, "77b14e00b561bf91d9be7f82e910a4c4a629208d2bdac17ff46198ee63102359e15e5b6302592c113c94ee74eae4e2016c28e30d5419d0f531c14b87cecf258ca529b142dc7e828ca9743d429d797061b1af32732a4f77263a482442657ca1abe686d66b28c918caa23081a3bf791731a3dacb14bf2fc7a092bbe1734150b874a61f92298923779157fa338abf1347fa1dc91da47d64aa950576"}}, {0x8, &(0x7f0000000080)=@string={0x8, 0x3, "18fc81d02b72"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x827}}, {0xf, &(0x7f0000000340)=@string={0xf, 0x3, "51d46f5414af1074076f8039de"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x448}}]}) 1.369592219s ago: executing program 3 (id=2847): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, &(0x7f0000000280), 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x20000008c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x300000000000000) 1.299518013s ago: executing program 0 (id=2848): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0xfffffffffffffe43, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="840100001900010000000000fbdbdf251d0109004d001180d09178d2da3477ec73a38ffffcd82caf103bc848e79022290bd6c0375f437b167f431ad24706d7263978db87dbaa159b0fdec8e129e835688cf370555aa8c6dffe261622b114299d6f0000001e01068059"], 0x184}}, 0x40008) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', 0x0, &(0x7f0000000280), 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(0x0, r1) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x20000008c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x10001) r2 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095", @ANYRES64=r2, @ANYRES8=r2], &(0x7f00000002c0)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r2, 0x1, &(0x7f0000000380)=0x5) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES64=r4, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8805}, 0x40880) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000040)={0x8, {0x6, 0x84, 0x104a, 0x539}, {0x0, 0x8, 0xffffffff, 0x5}, {0x7, 0x4}}) r7 = syz_open_dev$admmidi(&(0x7f0000002480), 0x20, 0x101200) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r7, 0x0, 0x14) ioctl$SNDCTL_SEQ_PANIC(r8, 0x5111) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) 999.393085ms ago: executing program 6 (id=2849): setxattr$smack_xattr_label(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.SMACK64IPIN\x00', &(0x7f0000000080), 0x1, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x2a0a41, 0x102, 0x2c}, 0x18) unlink(&(0x7f0000000140)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x400) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000023c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, &(0x7f0000002380)={&(0x7f0000000280)=@ethernet={0x306}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000300)="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", 0x1000}], 0x1, &(0x7f0000001340)=[{0x28, 0x18f, 0xe9, "8d499a1e859cee49f1bcff2e900591c8e8"}, {0x1010, 0x107, 0x3, "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"}], 0x1038}, 0x0, 0x10, 0x1, {0x0, r1}}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000002400), 0x40002, 0x0) faccessat2(r0, &(0x7f0000002440)='./file0\x00', 0x105, 0x500) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xcc) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000002480)) r3 = openat$cgroup_ro(r0, &(0x7f00000024c0)='rdma.current\x00', 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000002500)='./file0\x00', &(0x7f0000002540), &(0x7f0000002580), 0x2, 0x3) write$P9_RREADDIR(r0, &(0x7f00000025c0)={0xac, 0x29, 0x1, {0x5, [{{0x80, 0x4, 0x8}, 0x117, 0x14, 0x7, './file0'}, {{0x0, 0x3, 0x7}, 0x2, 0x9, 0x7, './file0'}, {{0x20, 0x2, 0x6}, 0x1, 0x9, 0x7, './file0'}, {{0x10, 0x2, 0x3}, 0x3, 0x7, 0x7, './file0'}, {{0x0, 0x1, 0x2}, 0x1, 0x1, 0xd, './file0/file0'}]}}, 0xac) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000026c0), r3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000002900)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002700)={0x1c0, r4, 0x100, 0x70bd28, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x401}, {0x6, 0x11, 0x81}, {0x8, 0x15, 0x104}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8001}, {0x6}, {0x8, 0x15, 0x100}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x1000}, {0x8, 0x15, 0x7fffffff}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xff}, {0x8, 0x15, 0x7fffffff}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xffffffff}, {0x6, 0x11, 0xd}, {0x8, 0x15, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x9}, {0x6}, {0x8, 0x15, 0x4}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0xc15}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0xfffffffa}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002940)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$usbfs(&(0x7f0000002980), 0x43, 0x418602) sendmsg(r5, &(0x7f0000004f00)={0x0, 0x0, &(0x7f0000002a40)=[{&(0x7f00000029c0)="e3e1d2fa170c49b0291d2a02106eeed80487f46a6e82df9d6f343ac4f2a1e49b097c162a95bd8370d666c3fe6cf2d21304b59d41b77509c878ad89f647392a53e4d403d19c6b574b029818e2f1619e98fd64", 0x52}], 0x1, &(0x7f0000002a80)=[{0xb0, 0xdd, 0x21253e86, "a8c4b934532492f01e725bd554f81725b4425f2e00cc15f8eb34d7c352288ed6ee2cae25d83be1d910b065124b0ceac429aefb44795a4516fd7b5f0cd09df605e834cb4adf3da36528b8e11193355b12133a31405bb59f4e0be158583d755af3ae8cb6aecfe4a52f66b70acd1d0303ca1dba0a534c58af2f76d86e47e21f1c8b868abaca9f080f4f23ab3150e7d94b89b85cd27163cd2acb2be7"}, {0x1010, 0x10f, 0x0, "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"}, {0x1010, 0x116, 0x2a58, "f95fce01e28a692a2b1bda253c61caff49d9af2f7ef02692be9f738645c8a645abdb917ddd844a828162eb008c3f3d8a2867fb51e0f020c419ad719ce2db14da4ebab2dd96d36490862de6b7cdfcee61f10c2f11262cbc84c5e58973d6f55d63019c9a30ca51d45f772f5adac69acfcb5c0e676a57e344b0b76d507b19aac27ee4ab322c3fbbbdc145633fff64369e75040e11e60429ec9cfc2e0f557b1af6f7fc4ff270ebe69238cb454c952f052d147d84541c0c802c48d6f30b7ec7b48bc06afd3d26834720fcb026296eb0f4cca8c833b95f0d801717efbbcb3fa4d42573c9044d03527f761321d929ec0f512aeddcdb2e7b916e7ac2d242d81f3d2d6f6341a127f85693198998823789593d8fa0a4831f5e82aec6b8bfb7161e9f83a12bb7c7554d2b21b0b6555733a590f47edf9af0aba84890776395fae817c1d046819b8fb83dbf046e11a49c3893cfab2053a68f9f4176989e0aeebbd894a91463edf64850687803a241e79d0d31aabf81e053b88d3ab68965004cae2a7aac16187bb24aaedde3b767b42cccc376cc423e911471191d085c2a0242e7b4506a8222cd1c6a3c3dbdd2b66eac0edc4424735f391839eb452359b501a9cafe95a28fe401e656063ed6f6d89c6b4b01d53c993cadf90d6058a6a8019bd599d55aa12eb1d47deb0055d324befb51bc4d15290a8c6d47435ab517f7b4ede6b37f7579d70818f1090d0e8b6e53453d695da3a4ac2bf2be6c596b94385b73f4396392c04639a532d023c6f4ff524a2586d90af4e7cdbe03ccae3584230beaf18ba9e840398e5af71e3d80b3c21510c2ca769128c8cd8052b469b5a3e2b63c6dc3845b78e13a19b3749082cbe0c2ca26c9e014f67314acc6a677ce599f9560e15b2352f951042dbbe4366abe000be66238afb7b9eaa041e3ad9b8ece047c81629d69a551e11c8c4cc74eb0f16cedb130299f814c58e414da4c7b626a7a577c543682b33a81d760d5b26ab597f7b92c3004a5c430725b40104ec05d211aa69009bcc71a80fe1821592c3a9f13646947ff14983a903fa3b6e38ed1047fc0c1bb2a6011c82f200188bc39b4469ba92f80333248af7ba7eb869c45251a8eb8b72a3949e725572f6c95effc92dcb2b4350b9a1da814868cee02d9eb2f30470b174106f1c57ede1a5b97c251cf01b5fb362dc41b78b9396a276b352599ceef2e85e7529beab3be972c0f217aadbf48bd6b4fbea54dde980782df9dd2d21230919881813ce78097979fcc731bf4a3ef0955ebb71500b34778309f1d678d7efa3664a1e14b4f7188006b3cd09ceb5a933d15201d9b3139507235c31bec08c5489077dc6c09be4896af46db5c2ab4f4650cbb3f1961672c73bb622a1863ec213ffcf705db5b7f52db49ee0e8abe2ca41589cfd25ccc32935dbe902c92734a42fc3d66ab2fb36403bdb30dc0211fcb8fd7362e6eca07a5353c8e591ac2a87fd89f50abd94a31c8eb3f5fa8d2dca383fb10675422763a1f24bf94dd66a350553984b4500aa47078494338606bedd9410355050768fd5307ef886a88a2da1d06e7f86ae81de04491f190418218744333253d4273c351b03e8e5fea8aeb7c7be542f7a4315f8821370d24d2adb4afc099c71282dcbe075b46dc676556a298225179c6fbf4477761fd41edd6d228bd5ae741410f46276c57dc77395680bef139528e3c497982e4a2f6a91b8b8be837ab6fd4a50a5a9da54c1eb4bcaa5c0c82d4f90e94fb6c9d9a3cb4617d78e91e0f4ecdab214ae35a3d8a12393c7c8ad1bc264dfaa8910a3170c6728474794addf3e0233cafeaee96d5ce34b15ca2c8e70c9c8136092fb282a44cbbdfb713ef2fcc2c5e16cf587ddcdef0f6f85d9b9fb9209c00a516b7f75ede3d559f23d7b53793ddf0699deefc501e3dab0889e7ef44f9bfdec0c316c032c80f1c370f8af345db8f63a29028ea1b4f28f30c997cc81f5d995dc2def46dac0d38d596becc7f7ae70f5798f62db0cc7d3136be9913d486a0dff0e0d329c4e2afcdda25f6c2fd18f467230774fd28b863ef1a36ab1441084d5729d670c6f799c2560b9b0f6665a2399ef89a4ca899372831808fb19d6a28ba0abe9f663d8bdcd98dccb64b5b76cf287677e818e9e724b29bf0fbd9ae1706859dcdc8e286ebc4a58cfb9b3aa8b85a6ea781e037beb228cca2ffc2f7aa3c65cafca56bcc26c65ba09317ca61a27d2411c191e742c56ecbe40b792e9a193e0892b94d9d12c75e58375d42d2414ba92a784d41162fe68a542b11d0b25eb30348aadd20eda7049a2b03834168bc96a71063c54eb5f6f2848a3a6d4458c668a4b5ed5a6703f23c01354d1813336b424ea4c2e1956e293216e3e72d5d942a9c3223ca3d48dc4d4737543cf57a79f7fa7ec15fe1e346e6da91c136b7bc628f7f64d736fa4e1b715c1a08fcf4e1aa782e2cb54c817d6619e38a484901e56b869951e21d1fe0f03f7e082159603fa5625e511ae854d2d02242fb93371f69341ba1fe0ef179ef3ee30c315e85afdcddd1acd6d5616cdf0ed828ad581c820435f1ba66a994c036be2ab04196cac34b1a4e8292741139d04a7526c36ca8be47d374bdaffff90bcf25e2af620908986df7a783374d5760656fe8f5229ce24a977e4ecc1d6550c547e9a73a18fa1a9d96452ca891f728ce19cfd7969b6ffa38349d0a857db3ade5fb58e5a87429d7f54dfc6cb59771e24c70375c7018e025431071ce0bfb6f41c386ac252191f5203dcd806be0d3c601baa6e5cb49975692e7fe0360e73e78813ea2a65ca70d5ad052eecbed83c44067999cdf445c776a31f0007a26404e8a4eaa435b5a869097811f97a337051338f175b7d71def4a86528f1fd8b836e4f1fad935a5f9e625ab60114460f718baf2761580633b0cc4944d9fe587f212b5242d8b434fd5cfc170ae271e139b575da0488d5b8266c3e769c84b52fcb8b9aa4d7fcfd8368801039cf97574932feb8dd87670f3e70fcad315a4f99446a5bf8abdeb242847f5d3bac729dee5d12606268b0dd1a67fa85a63e49c1a608df0690e5bf4ce39e6f59df13b031103954088a98f743ecc3d1e547459345024e816aabe2a2b2fe983ffbac84f3e681552bd773573bc83d9b692b075bc07f1f02b336f287da421a84de965759ad9d350bb9a07f8a13dcff39898e13247c815abb4349238b29bcf9d8f1c4691c48245236cbc75e5116be4186d8d716a77c4deb3c23f6a29dd753952051e5544867bcd0817d236f844d3dd1f1b808ba85b621d74d4df5cf0f0edc431f2bf5615c0882e4a5eb61fc801a5aaf15c335f180b719392a4adec397bbf287d9a016fe540c907f0b45b09d493a1519ffb7983943bbc62a990352ef97e5265aed7f3402859c480d765f37c94eb29ca330170a32cd64a2d13d78c8dafbb4c438fd02fe9f02da8e835ae0f82dd1f94c419af0db90999f94ae57752ef88a39a4464afed815d7cf1a247cb6c4ef8158a909fd1782157ab9ad5e7631edbdd8639046d81f1aaaa90599d371dd3c567514bbef17fe385d56fd30e715b4018bba5863828d9410d0a093c1512176acc031afe0c07f9ff3426b70893b7f177b8e527d4f2903e8f1f678bb5915e1fa213302a981c1f1d4fb6abd66e79d169fe11af798275847cc38de679ad51e96257a39c588a8aa4754e37c147b089a9719e04a916abe9054ce3c3f69a2a0937caaac0252af177009b894bf538d0e9dfa8eb3ffbcf6dd7f699e19e2ef54d01c2a0a9f0216f94d2c9eae4b8d475f9aa08c978a8a0c1766c1909d03113dafe6941af2eea2df748a7c6f6941752b978fae5ed68bad05cef6dfba2b01056030f6dde1562dfc8fe138e2b7379c196027685e8ed8af60be43ab3d795a533e980897fa70d6a4567ea58df8315db548f47abba2b2786e2205b1f85a4e71dd5c0d881d6a4b1e3eaa730e45376472db6663f5a60fd29c228f62f4ae89006b4c88464201de57469ad2ca2aaaea822ee05db6e7ca6bc928eca90d44c41690983c45185aabe356b71f6b2ec49760e1d5ef5d4ae8f59051df490563827271ac0bbe0fb448cd4f566e7841514fac45693be4d3bbb78decb7734d39e9b64437c1ff0cdd27105d900b2dfe383ceac8df277258afa9112c1d6a2fc9ae00f34c5c58841f9795da44408bfe840a9456c68c84c69e93d846e900dee9c6865ec20c641c76679581cc068af41f73c4e72ae8e687525444b1365b8fe13445c5e1a63c2661fb3a11a5b834debdb691fe234ae6eb44738d10934ad9d57339b1a00b32ee8b0b3fecc823730e1683baa6401b5203934b1a0266eb922664ef6a16b8d4274480264c88a3358e1a12b6977bb3e81bfeaba08280b731e3a07810350473465a6172f99cd9995350cb4c39058f61bdc933dc04d8e583424931c1975832c9c3925724f502a68ff11c4a17170eaf8ab55442e2119f5e19803d744c56d1eccabea068b02e5b226d8f04cd7fd6d8a65fe37b78361ccd59ca441ead742ffc38e5d06443109b6040b03a7e2fc242e4699f26b99d93a14c0024029e64db5a7c39157552f71b5ac105f83678ea65ab8afc19256642162cb135bb12806a0119a80f30bbb49a4284914543a98142859a70365cbf3ed2dad4ad8871714058b1664840ae059a1c87785794cac079def4c851dc812495af4df44ca5185fb3216cfd0f67ac1f0221cdbe4c2f62a7d27007cb1d6696aa1d1a0bb7b255f8da9ddca8fb660829f7834977f603c118bfc9ee114eb49b7318d44292c0bee5de141ef38dc497278513b623724dd224e30b5fa37cdfd5f2b5c808c9cb97c0691a85971c2ca3499e027f63dd435d6e17946b821bcb82f1b4a6e5598afadf1ea8d945596096a8c371b3a4b78218ce49026214fff1f42b3f6767ba67c524e67abd9b99201e81918bf9cd11a93b499f6f4bb46cdfedcb39d2cd8a65219850473f94b1bfc46591d8f8c4d5df69ae0405299e5ccb7010653f07e04c1b8493c1b4dd30ee54c5aebca5641e47400b8b2b6ee4351e5bb580e4bffa52e504cc16a15e06fb7d11a98abdde8ed82b5320f9cbc45bd226e4664e157c70d44ec6f7f8a9101290d098f362514c00d3583ce6337bf6f1d40ba10f6c9a6f9d542b74ee6e9dfb8314545399af515b005496a5f75f4dc2bd770941122587387ad742e727596e9c5049108531c482e6f69ec6dd0c98f00820739e989fa9d2b42efd762e6e0f8dd5de1559881bfa3c008764fb0156dc8497b8a80c2a1095a9ac28253f7cd88386f1a3cc54ab56b1995c6e092afa019cba278d0aaea7e34725803116af11649b5ce8fd88dbf1d11c34ad269d7c3acdd1c6bb69ad13c68d443c6a7f58b851579fbad15ef3e26b78e4405167edb0b06e952f22058d7b6c8487e1910ef334f0ed9f3c676f1847bcc080eb60e91fc837fbe77162540f21e5fc0f3638caa80d919547168cfa16f4b74e7757cd8ba18003614a8d4a65563a61eb88fcd1725d92970fb118198f73454c09c0d2d2a03b69b59165e6e5804de4de228e67b32781892c5545539a77c5d6bc728f22869016e64508e507babbc2e0e305498f905d9d38d3e71850b26e194e3c7548a548cc48f4f977e6058196f6d513763d48f09c0a8dcf53f99d337d86bc2b1d9e6a30c3bd48e5905ad1691696c7a44ed3916f4f13c133c3cd248a80a78035c40ffa6f1e438612feb7e8bb0091e45e1dacaf2651cd82d5b5b8b0d56442e26d3713ed0fec230d6fd3606df3d3c118d26d7d1f7fc8dfa82875837ba9ef9126ab7b06297d8adc14ee3c373eabb32375179a9bcabe2e7374f9d"}, {0x18, 0x88, 0x9d4d, "7673fa94c401b5"}, {0xe0, 0x102, 0x6, "497230f5a8b43bb0000a83e60efc9ad9e223b1ffc5e9dcefadcee70cd35853035dc32c3edd0fd6f9e58d06cf69b52e4aa262109bf7caeba4cfa87fb936aeeedee4db2052a5b9c6be45556858073b5ca1f17631f428669ba5d991fa8329ce7cdd36805d198a5fb4a7eb2d788495532a0852e91cc4aba76d7de4094d6d5181694703f0ee721a2271bf978d1ba880e15f0ddccb3d5450e2f402fefa6c4196c8471f4127c9dc6d05a1a005859bd369b4cced9a24a50798d707d0302d0c005351bafd5e36a5211b0386c6f9406d97d78e3d9a"}, {0x58, 0x10e, 0x9385, "9fd897989102c248f255623cf38e15baaae32db9707985e1adc4c4a87f85787a5f1df06fa7aab340dc26b6908151e4d6e882ba9c64504e806a04f97e2494d5424ca9b2"}, {0x98, 0x29, 0x1, "f59dcfdcd3c1d4d9527fd02e35bad8f1937ae98e479f13cae03c66155f8b442557734faf24f28cb0c6a8085fe477d523807ee064cd9c02f8c9eb5cbb5b41e7bf2586df6ad5f494eeb61e68ac97d0d2a8aafdade6f05ca723c341091334a5d632b66fc0e6b9d6546b9a2e4931a1142f872182536f9e7e61d66335e5c5bb57894ef8062518de"}, {0xc8, 0x5, 0x800, "a916d0193b27e014030c4c378a887dcbb33257618914a279d76d9ba3ba034c40d09ed0fb4be1a4cec41623410be18dd4302c2f58abede8063fb8c7c7beb407813502787d48a8515c53f74ee5e6c4cd03fe87887ddede586fdaf156034a60ea21b55c16fc4197902f6c25bfa45a289bdd51b56668ddd51f79d884bfe9c3dbc093ed985ce16e825f024233d8cc96ab8e62dac5aa1f34ef20f8972382587ae4b95feffabb317c18b946f04e02beb2c74c682a28f4927edae3c7"}, {0xe8, 0x10d, 0x6, "a2115f2bf888526d421a8d2cade2dd249069655d9eca95f6a61053f40777f77c888e5cdff46114af55ffc9d18a9f4d520c77c683024e5efbbb0a43008243077b5daaf9be19e3ab48f8a4844d817ec2f683229aa56fe305f17f675afc481458cfdbd743e8227f4514c2ec86ae064b3b3ce066c49201e6f68ef29046ad819359cc00980d78db822ae4bf609ec58437ae4203ccce03a6af93f9186ae86d8bc6436b1f600c1c79f4c2d5a2e14c2ef1894bbec2bf40e17027c8fd2882ed4c7efe1a45437b2287b84c3349fe44ca719f843c6c1ed45ccd9f50"}], 0x2468}, 0x4000840) r6 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000004f40)={0x0, 0x8001}, 0x8) io_uring_enter(r0, 0x5aeb, 0x7453, 0xa, &(0x7f0000004f80)={[0x9]}, 0x8) userfaultfd(0x80000) umount2(&(0x7f0000004fc0)='./file0/file0\x00', 0x4) lgetxattr(&(0x7f0000005000)='./file0/file0\x00', &(0x7f0000005040)=@known='com.apple.system.Security\x00', &(0x7f0000005080)=""/4096, 0x1000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000006180)={&(0x7f0000006080)={0x10, 0x0, 0x0, 0x520040}, 0xc, &(0x7f0000006140)={&(0x7f00000060c0)={0x58, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x80000000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0xa001}, 0x5efb53eb82d334e8) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000006200)='./file0/file0\x00', 0x800280, 0x121) move_mount(r3, &(0x7f00000061c0)='./file0\x00', r7, &(0x7f0000006240)='./file1\x00', 0x640) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000006280)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r8, &(0x7f00000062c0)={0x67446698, 0x0, 0x2, 0x4, 0x4, "dfa2b70295d8cc6e4c3c1f139b50361b42ca5cecb7afe101fb6b8e2bcf9a4580b53fede18d00ca186a51c283e650afc646ece5b64024d1a1f5e462921d9b3b468b9f3a7b910dd4711090972ddb65244bff0bebe4abff09827ea1a1cba6c2307c86e0e40e7a7a2be2ac67448db8ddc55baf817d09a1178a81b86a245dbded5f2ab7"}, 0x91) 908.565211ms ago: executing program 6 (id=2850): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x20, 0x17, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x4880) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r1, r2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x900, 0x0) symlink(&(0x7f0000000540)='./file0\x00', &(0x7f0000000500)='./file0\x00') fchdir(0xffffffffffffffff) write$tcp_mem(0xffffffffffffffff, 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) clock_gettime(0x0, &(0x7f0000000140)) ppoll(&(0x7f0000000100)=[{r3, 0x8000}], 0x1, 0x0, 0x0, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 467.437706ms ago: executing program 3 (id=2851): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}, {0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "c4"}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x7}}], {0x14}}, 0xcc}}, 0x0) (async) listen(r0, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) r3 = accept4$unix(r0, 0x0, 0x0, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) recvfrom$unix(r3, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) 467.015993ms ago: executing program 0 (id=2852): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000440)=@in6={0xa, 0x4e20, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x200ce0c0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="4e93721e40", 0x5}], 0x1}, 0x4000040) (fail_nth: 6) 0s ago: executing program 6 (id=2853): r0 = syz_open_dev$vim2m(&(0x7f0000001580), 0x57, 0x2) write$sysctl(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYBLOB="110000000000c000"], 0x20) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xd17}}, './file0\x00'}) ioctl$BLKRRPART(r3, 0x125f, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd4, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x4000, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0xc02534, 0x2, 0x1, 0xffffffff}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) sendmsg$inet6(r4, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x1, 0x0, [@mcast1]}}}], 0x28}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x28, 0x1, 0x0, "3a8e00000034b52ba75066c27891ca55e21f0000000000b2b678d200", 0x34324948}) kernel console output (not intermixed with test programs): 5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.189211][ T5864] usb 6-1: config 0 descriptor?? [ 506.197987][ T5864] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input26 [ 506.490349][ T5180] bcm5974 6-1:0.0: could not read from device [ 506.500484][ T5180] bcm5974 6-1:0.0: could not read from device [ 506.509695][ T5864] usb 6-1: USB disconnect, device number 35 [ 506.516824][ T5180] bcm5974 6-1:0.0: could not read from device [ 506.853972][ T5864] usb 3-1: USB disconnect, device number 34 [ 506.879543][T13834] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 507.236210][T13849] ALSA: mixer_oss: invalid OSS volume 'DIGITA' [ 507.247930][ T5864] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 507.409440][ T5864] usb 3-1: Using ep0 maxpacket: 32 [ 507.416219][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 507.427817][ T5864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 507.438104][ T5864] usb 3-1: New USB device found, idVendor=046d, idProduct=c298, bcdDevice= 0.00 [ 507.447455][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.457898][ T5864] usb 3-1: config 0 descriptor?? [ 508.017267][T13864] fuse: Unknown parameter 'group_id00000000000000000000' [ 508.371497][T13860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.407204][T13860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.437880][ T5864] logitech 0003:046D:C298.0016: unbalanced collection at end of report description [ 508.455249][ T5864] logitech 0003:046D:C298.0016: parse failed [ 508.466996][ T5864] logitech 0003:046D:C298.0016: probe with driver logitech failed with error -22 [ 508.638672][ T46] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 508.797507][T13885] FAULT_INJECTION: forcing a failure. [ 508.797507][T13885] name failslab, interval 1, probability 0, space 0, times 0 [ 508.810464][T13885] CPU: 0 UID: 0 PID: 13885 Comm: syz.3.2187 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 508.821245][T13885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 508.831288][T13885] Call Trace: [ 508.834562][T13885] [ 508.837482][T13885] dump_stack_lvl+0x241/0x360 [ 508.842186][T13885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 508.847369][T13885] ? __pfx__printk+0x10/0x10 [ 508.851941][T13885] ? __pfx___might_resched+0x10/0x10 [ 508.857215][T13885] should_fail_ex+0x3b0/0x4e0 [ 508.861875][T13885] should_failslab+0xac/0x100 [ 508.866538][T13885] ? alloc_inode+0x87/0x1a0 [ 508.871027][T13885] kmem_cache_alloc_lru_noprof+0x75/0x390 [ 508.876731][T13885] alloc_inode+0x87/0x1a0 [ 508.881060][T13885] path_from_stashed+0x46e/0xba0 [ 508.885981][T13885] ? path_from_stashed+0xe2/0xba0 [ 508.890989][T13885] ? __pfx_path_from_stashed+0x10/0x10 [ 508.896432][T13885] ? _raw_spin_unlock+0x28/0x50 [ 508.901267][T13885] ? netns_get+0xcc/0x110 [ 508.905583][T13885] proc_ns_get_link+0xf9/0x240 [ 508.910330][T13885] ? __pfx_proc_ns_get_link+0x10/0x10 [ 508.915684][T13885] ? bpf_lsm_inode_follow_link+0x9/0x10 [ 508.921211][T13885] ? security_inode_follow_link+0xbe/0x340 [ 508.926996][T13885] ? __pfx_proc_ns_get_link+0x10/0x10 [ 508.932351][T13885] pick_link+0x631/0xd50 [ 508.936576][T13885] step_into+0xca9/0x1080 [ 508.940887][T13885] ? __pfx_step_into+0x10/0x10 [ 508.945631][T13885] ? proc_ns_dir_lookup+0x352/0x3a0 [ 508.950826][T13885] path_openat+0x19dd/0x3590 [ 508.955409][T13885] ? __pfx_path_openat+0x10/0x10 [ 508.960352][T13885] do_filp_open+0x27f/0x4e0 [ 508.964835][T13885] ? __pfx_do_filp_open+0x10/0x10 [ 508.969837][T13885] ? do_raw_spin_lock+0x14f/0x370 [ 508.974852][T13885] do_sys_openat2+0x13e/0x1d0 [ 508.979509][T13885] ? __pfx_do_sys_openat2+0x10/0x10 [ 508.984684][T13885] ? preempt_schedule_irq+0x144/0x1c0 [ 508.990036][T13885] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 508.995736][T13885] ? __fget_files+0x2a/0x410 [ 509.000301][T13885] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 509.006636][T13885] __x64_sys_openat+0x247/0x2a0 [ 509.011464][T13885] ? __pfx___x64_sys_openat+0x10/0x10 [ 509.016814][T13885] ? trace_irq_enable+0x2c/0x120 [ 509.021732][T13885] do_syscall_64+0xf3/0x230 [ 509.026217][T13885] ? clear_bhb_loop+0x35/0x90 [ 509.030871][T13885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.036745][T13885] RIP: 0033:0x7f0454784680 [ 509.041163][T13885] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 509.060751][T13885] RSP: 002b:00007f04525f5f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 509.069145][T13885] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0454784680 [ 509.077094][T13885] RDX: 0000000000000000 RSI: 00007f0454801b38 RDI: 00000000ffffff9c [ 509.085045][T13885] RBP: 00007f0454801b38 R08: 0000000000000000 R09: 0000000000000000 [ 509.092994][T13885] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 509.100945][T13885] R13: 0000000000000000 R14: 00007f0454975fa0 R15: 00007ffe58dbdcf8 [ 509.108901][T13885] [ 509.111957][ C0] vkms_vblank_simulate: vblank timer overrun [ 509.124265][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 509.338600][ T46] usb 1-1: config 0 has an invalid interface number: 63 but max is 0 [ 509.349956][ T46] usb 1-1: config 0 has no interface number 0 [ 509.357959][ T46] usb 1-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=22.a7 [ 509.373666][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.382080][ T46] usb 1-1: Product: syz [ 509.386450][ T46] usb 1-1: Manufacturer: syz [ 509.398138][ T46] usb 1-1: SerialNumber: syz [ 509.414506][ T46] usb 1-1: config 0 descriptor?? [ 509.629482][T13866] netlink: 'syz.0.2183': attribute type 18 has an invalid length. [ 509.640827][T13866] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.649908][T13866] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.658807][T13866] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.667537][T13866] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.732167][ T46] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 509.738788][ T46] gspca_sn9c2028: read1 error -71 [ 509.744068][ T46] gspca_sn9c2028: read1 error -71 [ 509.751681][ T46] gspca_sn9c2028: read1 error -71 [ 509.756768][ T46] sn9c2028 1-1:0.63: probe with driver sn9c2028 failed with error -71 [ 509.768543][ T46] usb 1-1: USB disconnect, device number 34 [ 509.946541][T13902] fuse: Bad value for 'user_id' [ 509.949810][ T5864] usb 3-1: USB disconnect, device number 35 [ 509.951513][T13902] fuse: Bad value for 'user_id' [ 510.029736][T13906] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2194'. [ 510.242125][T13926] netlink: 'syz.5.2201': attribute type 1 has an invalid length. [ 510.313881][T13927] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.2198'. [ 510.897601][ T5902] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 511.159907][T13940] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 511.166455][ T5902] usb 6-1: device descriptor read/64, error -71 [ 511.332425][T13942] overlayfs: failed to resolve './file0': -2 [ 511.454993][T13943] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2203'. [ 512.148897][ T5902] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 512.218186][T13948] siw: device registration error -23 [ 512.286650][ T5902] usb 6-1: device descriptor read/64, error -71 [ 512.482143][ T5902] usb usb6-port1: attempt power cycle [ 512.613281][T13954] fuse: Bad value for 'user_id' [ 512.632653][T13954] fuse: Bad value for 'user_id' [ 512.837065][ T5902] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 512.870931][ T5902] usb 6-1: device descriptor read/8, error -71 [ 514.087929][T13983] overlayfs: failed to resolve './file0': -2 [ 514.162952][T13984] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2216'. [ 514.614119][T13985] [U] ^E [ 514.652954][ T1015] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.697471][ T1015] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.752658][T13990] fuse: Bad value for 'user_id' [ 514.757643][T13990] fuse: Bad value for 'user_id' [ 514.819663][ T1015] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.201254][ T5134] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 515.230695][ T5134] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 515.240539][ T5134] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 515.255028][ T5134] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 515.263780][ T5134] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 515.271244][ T5134] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 515.296027][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 515.303606][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 515.311213][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 515.320835][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 515.335576][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 515.342829][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 515.358528][ T1015] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.213746][ T1015] bond0 (unregistering): Released all slaves [ 516.217697][ T1015] bond1 (unregistering): Released all slaves [ 516.221460][ T1015] bond2 (unregistering): Released all slaves [ 516.230555][ T1015] bond3 (unregistering): Released all slaves [ 516.256400][ T1015] bond4 (unregistering): Released all slaves [ 516.260626][ T1015] bond5 (unregistering): Released all slaves [ 516.448965][T14026] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2229'. [ 516.449576][T14026] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2229'. [ 516.455620][T14026] xt_CT: You must specify a L4 protocol and not use inversions on it [ 516.939013][T14038] overlayfs: failed to resolve './file0': -2 [ 517.067228][T14039] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2231'. [ 517.087323][T14001] chnl_net:caif_netlink_parms(): no params data found [ 517.095667][T14041] netlink: 'syz.5.2232': attribute type 25 has an invalid length. [ 517.333804][ T1015] hsr_slave_0: left promiscuous mode [ 517.340678][ T1015] hsr_slave_1: left promiscuous mode [ 517.514210][T14056] siw: device registration error -23 [ 517.530028][ T5134] Bluetooth: hci2: command tx timeout [ 517.573316][ T1015] veth1_macvtap: left promiscuous mode [ 517.763497][ T1015] veth0_macvtap: left promiscuous mode [ 517.944209][ T1015] veth1_vlan: left promiscuous mode [ 518.124017][ T1015] veth0_vlan: left promiscuous mode [ 518.680366][T14079] siw: device registration error -23 [ 519.049827][ T2928] smc: removing ib device syz2 [ 519.180398][T14001] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.195411][T14001] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.202835][T14001] bridge_slave_0: entered allmulticast mode [ 519.288429][T14001] bridge_slave_0: entered promiscuous mode [ 519.294796][ T5902] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 519.309356][T14001] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.325087][T14001] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.332321][T14001] bridge_slave_1: entered allmulticast mode [ 519.340335][T14001] bridge_slave_1: entered promiscuous mode [ 519.583324][ T5134] Bluetooth: hci2: command tx timeout [ 519.682921][ T5902] usb 3-1: Using ep0 maxpacket: 32 [ 519.727153][T14093] fuse: Bad value for 'fd' [ 519.746180][ T5902] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 519.791140][ T5902] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 519.853153][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 519.904620][ T5902] usb 3-1: Product: syz [ 519.912284][ T5902] usb 3-1: Manufacturer: syz [ 519.922389][ T5902] usb 3-1: SerialNumber: syz [ 519.961871][ T5902] usb 3-1: config 0 descriptor?? [ 519.967893][T14085] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 519.985621][T14087] fuse: Bad value for 'fd' [ 520.036286][T14001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.137295][T14001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.225165][T14103] overlayfs: failed to resolve './file0': -2 [ 520.253951][T14103] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2244'. [ 520.383489][ T5818] usb 3-1: USB disconnect, device number 36 [ 520.569802][T14001] team0: Port device team_slave_0 added [ 520.593096][T14001] team0: Port device team_slave_1 added [ 520.732143][T14102] netlink: 1284 bytes leftover after parsing attributes in process `syz.5.2246'. [ 521.105234][T14085] bridge_slave_1: entered promiscuous mode [ 521.115395][T14085] netlink: 'syz.2.2241': attribute type 2 has an invalid length. [ 521.123704][T14085] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 521.234274][T14001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.257362][T14001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.284564][T14001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.296744][T14001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.303953][T14001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 521.336136][T14001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.430186][T14001] hsr_slave_0: entered promiscuous mode [ 521.458052][T14001] hsr_slave_1: entered promiscuous mode [ 521.473727][T14001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 521.481428][T14001] Cannot create hsr debugfs directory [ 521.776461][ T5134] Bluetooth: hci2: command tx timeout [ 522.056713][T14001] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 522.087131][T14155] dccp_xmit_packet: Payload too large (65475) for featneg. [ 522.094032][T14001] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 522.118131][T14001] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 522.150707][T14001] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 522.598419][T14001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.672595][T14001] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.692411][T14001] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 522.723743][T14001] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 522.773828][ T9440] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.781015][ T9440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.830725][ T9440] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.837922][ T9440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.310615][T14207] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.2263'. [ 523.814399][ T5134] Bluetooth: hci2: command tx timeout [ 523.989738][T14001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.765823][T14001] veth0_vlan: entered promiscuous mode [ 524.808007][T14001] veth1_vlan: entered promiscuous mode [ 524.891493][T14001] veth0_macvtap: entered promiscuous mode [ 524.898964][T14001] veth1_macvtap: entered promiscuous mode [ 524.909953][T14001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 524.920883][T14001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 524.931790][T14001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.187666][T14001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.470189][T14001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 525.536134][T14001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.573011][T14001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 525.646803][T14001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.665802][T14001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.684440][T14001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.695619][T14001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.707104][T14001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 525.718388][T14001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 525.735309][T14001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 525.785044][T14001] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.810081][T14001] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.819168][T14001] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.851257][T14001] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.917307][T14263] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2271'. [ 526.312613][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.338151][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.372972][ T2928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.387246][ T2928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.179240][T12322] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 527.329422][T12322] usb 7-1: Using ep0 maxpacket: 16 [ 527.350426][T12322] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.364779][T12322] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 527.382778][T12322] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 527.393722][T12322] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.435334][T12322] usb 7-1: config 0 descriptor?? [ 527.517911][T14307] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2278'. [ 527.617674][T14313] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2280'. [ 528.327600][T14327] fuse: Bad value for 'fd' [ 528.759377][T14347] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.2285'. [ 528.986988][T14350] fuse: Bad value for 'fd' [ 529.940134][ T5902] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 530.067591][T12322] usbhid 7-1:0.0: can't add hid device: -71 [ 530.106682][T12322] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 530.167684][ T5902] usb 6-1: config 0 has an invalid descriptor of length 66, skipping remainder of the config [ 530.190325][ T5902] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 530.238080][ T5902] usb 6-1: New USB device found, idVendor=045e, idProduct=003b, bcdDevice= 0.00 [ 530.247827][T12322] usb 7-1: USB disconnect, device number 2 [ 530.278996][ T5902] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.315971][ T5902] usb 6-1: config 0 descriptor?? [ 530.493885][T14392] FAULT_INJECTION: forcing a failure. [ 530.493885][T14392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.507253][T14392] CPU: 0 UID: 0 PID: 14392 Comm: syz.0.2298 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 530.518038][T14392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 530.528134][T14392] Call Trace: [ 530.531423][T14392] [ 530.534367][T14392] dump_stack_lvl+0x241/0x360 [ 530.539062][T14392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 530.544266][T14392] ? __pfx__printk+0x10/0x10 [ 530.548872][T14392] ? snd_pcm_oss_write+0x25e/0x11f0 [ 530.554071][T14392] ? __pfx_lock_release+0x10/0x10 [ 530.559093][T14392] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 530.565076][T14392] should_fail_ex+0x3b0/0x4e0 [ 530.569749][T14392] _copy_from_user+0x2f/0xc0 [ 530.574340][T14392] snd_pcm_oss_write+0xa33/0x11f0 [ 530.579363][T14392] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 530.584813][T14392] ? rcu_is_watching+0x15/0xb0 [ 530.589579][T14392] ? bpf_lsm_file_permission+0x9/0x10 [ 530.594952][T14392] ? security_file_permission+0x74/0x280 [ 530.600589][T14392] ? rw_verify_area+0x1c3/0x6f0 [ 530.605445][T14392] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 530.610895][T14392] vfs_write+0x2a3/0xd30 [ 530.615140][T14392] ? __pfx_vfs_write+0x10/0x10 [ 530.619894][T14392] ? __fget_files+0x2a/0x410 [ 530.624471][T14392] ? __fget_files+0x395/0x410 [ 530.629151][T14392] ? __fget_files+0x2a/0x410 [ 530.633750][T14392] ksys_write+0x18f/0x2b0 [ 530.638086][T14392] ? __pfx_ksys_write+0x10/0x10 [ 530.642938][T14392] ? rcu_is_watching+0x15/0xb0 [ 530.647723][T14392] ? rcu_is_watching+0x15/0xb0 [ 530.652495][T14392] do_syscall_64+0xf3/0x230 [ 530.657003][T14392] ? clear_bhb_loop+0x35/0x90 [ 530.661677][T14392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.667571][T14392] RIP: 0033:0x7f61dbf85d19 [ 530.671981][T14392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.691579][T14392] RSP: 002b:00007f61dce24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 530.700077][T14392] RAX: ffffffffffffffda RBX: 00007f61dc175fa0 RCX: 00007f61dbf85d19 [ 530.708040][T14392] RDX: 000000000000fc36 RSI: 0000000020000500 RDI: 0000000000000004 [ 530.716000][T14392] RBP: 00007f61dce24090 R08: 0000000000000000 R09: 0000000000000000 [ 530.723960][T14392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.731918][T14392] R13: 0000000000000000 R14: 00007f61dc175fa0 R15: 00007ffec5396a98 [ 530.739886][T14392] [ 530.743001][ C0] vkms_vblank_simulate: vblank timer overrun [ 530.817698][T14396] fuse: Bad value for 'fd' [ 531.381197][ T5902] usb 6-1: string descriptor 0 read error: -71 [ 531.450423][ T5902] usb 6-1: USB disconnect, device number 40 [ 533.647918][T14448] binder: 14447:14448 ioctl c00c620f 20000340 returned -22 [ 533.688382][T14448] sp0: Synchronizing with TNC [ 533.731814][T14455] fuse: Bad value for 'fd' [ 534.594897][T14474] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 534.799088][T14483] kvm: pic: non byte write [ 534.805507][ T46] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 534.816195][T14483] sch_tbf: burst 1 is lower than device lo mtu (65550) ! [ 534.955302][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 534.969629][ T46] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 534.994714][ T46] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 535.004755][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.017980][ T46] usb 1-1: Product: syz [ 535.022209][ T46] usb 1-1: Manufacturer: syz [ 535.030175][ T46] usb 1-1: SerialNumber: syz [ 535.063739][ T46] usb 1-1: config 0 descriptor?? [ 535.069309][ T5864] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 535.071951][T14470] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 535.132478][ T46] hub 1-1:0.0: bad descriptor, ignoring hub [ 535.138663][ T46] hub 1-1:0.0: probe with driver hub failed with error -5 [ 535.158070][ T46] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input27 [ 535.333142][ T5864] usb 3-1: config 0 has an invalid descriptor of length 120, skipping remainder of the config [ 535.488802][ T5864] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 535.542612][ T5864] usb 3-1: New USB device found, idVendor=093a, idProduct=2448, bcdDevice=e4.25 [ 535.552165][ T5864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=33 [ 535.873157][ T5864] usb 3-1: Product: syz [ 535.877647][ T5864] usb 3-1: Manufacturer: syz [ 535.882265][ T5864] usb 3-1: SerialNumber: syz [ 535.898200][ T5864] usb 3-1: config 0 descriptor?? [ 536.384390][ T5864] usb 3-1: USB disconnect, device number 37 [ 537.144936][T14517] lo speed is unknown, defaulting to 1000 [ 537.151158][T14517] lo speed is unknown, defaulting to 1000 [ 537.159726][T14517] lo speed is unknown, defaulting to 1000 [ 537.176806][T14517] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 537.207158][T14517] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 537.316482][T14517] lo speed is unknown, defaulting to 1000 [ 537.324759][T14517] lo speed is unknown, defaulting to 1000 [ 537.331505][T14517] lo speed is unknown, defaulting to 1000 [ 537.338243][T14517] lo speed is unknown, defaulting to 1000 [ 537.345048][T14517] lo speed is unknown, defaulting to 1000 [ 537.563711][ T5864] usb 1-1: USB disconnect, device number 35 [ 537.563863][ C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 538.816241][T14532] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 538.822492][T14532] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 539.729937][T14564] netlink: 1284 bytes leftover after parsing attributes in process `syz.5.2340'. [ 540.030321][T14558] can: request_module (can-proto-3) failed. [ 540.582557][T12322] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 540.762778][T14593] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2351'. [ 540.775513][T12322] usb 4-1: Using ep0 maxpacket: 32 [ 540.800763][T12322] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 540.812896][T12322] usb 4-1: New USB device strings: Mfr=23, Product=2, SerialNumber=3 [ 541.202626][T12322] usb 4-1: Product: syz [ 541.212164][T12322] usb 4-1: Manufacturer: syz [ 541.273876][T12322] usb 4-1: SerialNumber: syz [ 541.692434][T12322] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 541.836889][T14606] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2355'. [ 542.432719][T14615] fuse: Invalid rootmode [ 543.697563][T14639] netlink: 'syz.6.2366': attribute type 11 has an invalid length. [ 543.709999][T14639] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2366'. [ 543.831899][T12322] gspca_stk1135: reg_w 0x200 err -71 [ 543.839209][T12322] gspca_stk1135: serial bus timeout: status=0x00 [ 543.845752][T12322] gspca_stk1135: Sensor write failed [ 543.851254][T12322] gspca_stk1135: serial bus timeout: status=0x00 [ 543.865372][T12322] gspca_stk1135: Sensor write failed [ 543.871121][T12322] gspca_stk1135: serial bus timeout: status=0x00 [ 543.873388][T14644] lo speed is unknown, defaulting to 1000 [ 543.877633][T12322] gspca_stk1135: Sensor read failed [ 543.896421][T12322] gspca_stk1135: serial bus timeout: status=0x00 [ 543.903082][T12322] gspca_stk1135: Sensor read failed [ 543.908390][T12322] gspca_stk1135: Detected sensor type unknown (0x0) [ 543.915338][T12322] gspca_stk1135: serial bus timeout: status=0x00 [ 543.924817][T12322] gspca_stk1135: Sensor read failed [ 543.944267][T12322] gspca_stk1135: serial bus timeout: status=0x00 [ 543.961552][T12322] gspca_stk1135: Sensor read failed [ 543.975305][T12322] gspca_stk1135: serial bus timeout: status=0x00 [ 543.990592][T12322] gspca_stk1135: Sensor write failed [ 543.996509][T12322] gspca_stk1135: serial bus timeout: status=0x00 [ 544.003168][T12322] gspca_stk1135: Sensor write failed [ 544.008790][T12322] stk1135 4-1:64.0: probe with driver stk1135 failed with error -71 [ 544.020337][T12322] usb 4-1: USB disconnect, device number 37 [ 545.251952][T14667] autofs: Unknown parameter '·' [ 546.336849][T14680] siw: device registration error -23 [ 546.757374][T14683] kvm: kvm [14682]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x11a00000000 [ 546.767143][T14683] kvm: kvm [14682]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x11b00000800 [ 546.881687][T14687] netlink: 10 bytes leftover after parsing attributes in process `syz.5.2378'. [ 547.261764][ T46] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 547.331222][T14692] lo speed is unknown, defaulting to 1000 [ 547.424643][T14695] pimreg3: entered allmulticast mode [ 547.436751][T14694] pimreg3: left allmulticast mode [ 547.598975][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 548.205044][T14714] overlayfs: failed to resolve './file0': -2 [ 548.546186][T14716] autofs: Unknown parameter '·' [ 549.075206][T14725] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.2387'. [ 549.441947][T14727] fuse: Bad value for 'fd' [ 549.998982][ T46] usb 1-1: unable to get BOS descriptor or descriptor too short [ 550.010392][T14737] lo speed is unknown, defaulting to 1000 [ 550.010636][ T46] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 550.032821][ T46] usb 1-1: can't read configurations, error -71 [ 550.115079][T14747] overlayfs: workdir and upperdir must be separate subtrees [ 551.159873][T14770] autofs: Unknown parameter '·' [ 552.254740][T14779] lo speed is unknown, defaulting to 1000 [ 552.431662][T14793] binder_alloc: 14792: pid 14792 spamming oneway? 1 buffers allocated for a total size of 4096 [ 553.202449][T14817] fuse: Bad value for 'fd' [ 553.534503][T14808] lo speed is unknown, defaulting to 1000 [ 553.655400][T14821] autofs: Unknown parameter '·' [ 554.676123][T12322] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 555.015311][T12322] usb 4-1: Using ep0 maxpacket: 8 [ 555.021710][T12322] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 555.032059][T12322] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 555.048914][T12322] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 555.060257][T12322] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 555.074705][T12322] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 555.084222][T12322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.245159][ T5902] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 555.299119][T14852] kvm: emulating exchange as write [ 555.362599][T12322] usb 4-1: GET_CAPABILITIES returned 0 [ 555.372908][T12322] usbtmc 4-1:16.0: can't read capabilities [ 555.405253][ T5902] usb 6-1: Using ep0 maxpacket: 16 [ 555.415140][T14853] nbd6: detected capacity change from 0 to 20 [ 555.423599][ T5902] usb 6-1: config 182 interface 0 altsetting 1 bulk endpoint 0xD has invalid maxpacket 1024 [ 555.438507][ T8334] block nbd6: Send control failed (result -89) [ 555.454255][ T5902] usb 6-1: config 182 interface 0 altsetting 1 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 555.467907][ T8334] block nbd6: Request send failed, requeueing [ 555.479244][ T5134] block nbd6: Receive control failed (result -32) [ 555.479857][ T5902] usb 6-1: config 182 interface 0 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 555.486349][ T1070] block nbd6: Dead connection, failed to find a fallback [ 555.503636][ T1070] block nbd6: shutting down sockets [ 555.509162][ T1070] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 555.518282][ T1070] buffer_io_error: 4 callbacks suppressed [ 555.518295][ T1070] Buffer I/O error on dev nbd6, logical block 0, async page read [ 555.524017][ T5902] usb 6-1: config 182 interface 0 altsetting 1 has a duplicate endpoint with address 0x8, skipping [ 555.542918][ T8334] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 555.557642][ T8334] Buffer I/O error on dev nbd6, logical block 0, async page read [ 555.569002][T14851] netlink: 'syz.6.2423': attribute type 11 has an invalid length. [ 555.576091][ T5866] usb 4-1: USB disconnect, device number 38 [ 555.585054][T14851] netlink: 140 bytes leftover after parsing attributes in process `syz.6.2423'. [ 555.600409][ T8334] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 555.609640][ T8334] Buffer I/O error on dev nbd6, logical block 0, async page read [ 555.617608][ T8334] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 555.628513][ T8334] Buffer I/O error on dev nbd6, logical block 0, async page read [ 555.636574][ T8334] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 555.646438][ T8334] Buffer I/O error on dev nbd6, logical block 0, async page read [ 555.652014][ T5902] usb 6-1: config 182 interface 0 altsetting 1 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 555.654290][ T8334] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 555.674566][ T8334] Buffer I/O error on dev nbd6, logical block 0, async page read [ 555.682589][ T8334] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 555.695110][ T8334] Buffer I/O error on dev nbd6, logical block 0, async page read [ 555.698662][ T5902] usb 6-1: config 182 interface 0 altsetting 1 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 555.713945][ T8334] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 555.713974][ T8334] Buffer I/O error on dev nbd6, logical block 0, async page read [ 555.736182][ T8334] ldm_validate_partition_table(): Disk read failed. [ 555.742995][ T8334] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 555.748232][ T5902] usb 6-1: config 182 interface 0 altsetting 1 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 555.752163][ T8334] Buffer I/O error on dev nbd6, logical block 0, async page read [ 555.765682][ T5902] usb 6-1: config 182 interface 0 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 555.787537][ T5902] usb 6-1: config 182 interface 0 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 555.787572][ T8334] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 555.800720][ T5902] usb 6-1: config 182 interface 0 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 555.808145][ T8334] Buffer I/O error on dev nbd6, logical block 0, async page read [ 555.827282][ T8334] Dev nbd6: unable to read RDB block 0 [ 555.833071][ T8334] nbd6: unable to read partition table [ 555.838896][ T8334] nbd6: partition table beyond EOD, truncated [ 555.846935][ T5902] usb 6-1: config 182 interface 0 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 555.858508][ T5902] usb 6-1: config 182 interface 0 has no altsetting 0 [ 555.873858][T14853] ldm_validate_partition_table(): Disk read failed. [ 555.881743][T14853] Dev nbd6: unable to read RDB block 0 [ 555.888088][ T5902] usb 6-1: Dual-Role OTG device on HNP port [ 555.892448][T14853] nbd6: unable to read partition table [ 555.894355][ T5902] usb 6-1: New USB device found, idVendor=1199, idProduct=9003, bcdDevice=70.90 [ 555.918649][T14853] nbd6: partition table beyond EOD, truncated [ 555.928946][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.937438][ T5902] usb 6-1: Product: syz [ 555.937711][T14853] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 555.941609][ T5902] usb 6-1: Manufacturer: syz [ 555.941626][ T5902] usb 6-1: SerialNumber: syz [ 555.943605][T14839] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 555.973656][ T8334] ldm_validate_partition_table(): Disk read failed. [ 555.974337][T14853] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=9, location=9 [ 555.991773][ T8334] Dev nbd6: unable to read RDB block 0 [ 555.996239][T14853] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=8, location=8 [ 555.998422][ T8334] nbd6: unable to read partition table [ 556.009748][T14853] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=7, location=7 [ 556.012317][ T8334] nbd6: partition table beyond EOD, truncated [ 556.025793][T14853] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 556.041593][T14853] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 556.051888][T14853] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=4, location=4 [ 556.061956][T14853] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=3, location=3 [ 556.073582][T14853] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=2, location=2 [ 556.083623][T14853] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 556.120313][T14853] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 556.135704][T14853] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=1, location=1 [ 556.157955][T14853] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=0, location=0 [ 556.202947][T14853] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 556.240896][T14853] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 556.510914][ T5902] usb 6-1: USB disconnect, device number 41 [ 556.625610][T14874] autofs: Unknown parameter '·' [ 557.378364][T14892] usb usb8: usbfs: process 14892 (syz.3.2435) did not claim interface 63 before use [ 557.553254][T14899] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.2437'. [ 557.587921][T14898] sctp: [Deprecated]: syz.5.2436 (pid 14898) Use of int in max_burst socket option. [ 557.587921][T14898] Use struct sctp_assoc_value instead [ 557.601008][T14894] lo speed is unknown, defaulting to 1000 [ 557.664040][ T5864] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 557.826070][ T5864] usb 4-1: Using ep0 maxpacket: 32 [ 557.832942][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.845813][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.856160][ T5864] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 557.881713][ T5864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.917451][ T5864] usb 4-1: config 0 descriptor?? [ 558.339165][ T5864] koneplus 0003:1E7D:2D51.0017: unknown main item tag 0x0 [ 558.346736][ T5864] koneplus 0003:1E7D:2D51.0017: unknown main item tag 0x0 [ 558.354503][ T5864] koneplus 0003:1E7D:2D51.0017: unknown main item tag 0x0 [ 558.363129][ T5864] koneplus 0003:1E7D:2D51.0017: unknown main item tag 0x0 [ 558.380222][ T5864] koneplus 0003:1E7D:2D51.0017: unknown main item tag 0x0 [ 558.412764][ T5864] koneplus 0003:1E7D:2D51.0017: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0 [ 558.418432][T14909] FAULT_INJECTION: forcing a failure. [ 558.418432][T14909] name failslab, interval 1, probability 0, space 0, times 0 [ 558.437731][T14909] CPU: 1 UID: 0 PID: 14909 Comm: syz.5.2439 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 558.448517][T14909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 558.458558][T14909] Call Trace: [ 558.461820][T14909] [ 558.464734][T14909] dump_stack_lvl+0x241/0x360 [ 558.469403][T14909] ? __pfx_dump_stack_lvl+0x10/0x10 [ 558.474585][T14909] ? __pfx__printk+0x10/0x10 [ 558.479174][T14909] ? __pfx___might_resched+0x10/0x10 [ 558.484449][T14909] should_fail_ex+0x3b0/0x4e0 [ 558.489108][T14909] should_failslab+0xac/0x100 [ 558.493775][T14909] __kmalloc_cache_noprof+0x70/0x390 [ 558.499040][T14909] ? p9_client_create+0xdd/0x1180 [ 558.504048][T14909] p9_client_create+0xdd/0x1180 [ 558.508884][T14909] ? __pfx_p9_client_create+0x10/0x10 [ 558.514246][T14909] ? __asan_memset+0x23/0x50 [ 558.518834][T14909] ? lockdep_init_map_type+0xa1/0x910 [ 558.524186][T14909] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 558.529971][T14909] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 558.535757][T14909] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 558.541981][T14909] ? rcu_is_watching+0x15/0xb0 [ 558.546741][T14909] ? __raw_spin_lock_init+0x45/0x100 [ 558.552010][T14909] v9fs_session_init+0x1e4/0x1b80 [ 558.557023][T14909] ? __pfx_v9fs_session_init+0x10/0x10 [ 558.562473][T14909] ? __kasan_kmalloc+0x98/0xb0 [ 558.567219][T14909] ? __kmalloc_cache_noprof+0x243/0x390 [ 558.572750][T14909] ? v9fs_mount+0xb2/0xa90 [ 558.577154][T14909] v9fs_mount+0xd5/0xa90 [ 558.581379][T14909] ? __kasan_kmalloc+0x98/0xb0 [ 558.586128][T14909] ? __pfx_v9fs_mount+0x10/0x10 [ 558.590959][T14909] ? __kmalloc_cache_noprof+0x243/0x390 [ 558.596520][T14909] ? legacy_init_fs_context+0x51/0xc0 [ 558.601986][T14909] ? legacy_init_fs_context+0x7e/0xc0 [ 558.607354][T14909] legacy_get_tree+0xee/0x190 [ 558.612038][T14909] ? __pfx_v9fs_mount+0x10/0x10 [ 558.616881][T14909] vfs_get_tree+0x90/0x2b0 [ 558.621282][T14909] do_new_mount+0x2be/0xb40 [ 558.625781][T14909] ? __pfx_do_new_mount+0x10/0x10 [ 558.630791][T14909] __se_sys_mount+0x2d6/0x3c0 [ 558.635467][T14909] ? __pfx___se_sys_mount+0x10/0x10 [ 558.640666][T14909] ? rcu_is_watching+0x15/0xb0 [ 558.645429][T14909] ? rcu_is_watching+0x15/0xb0 [ 558.650182][T14909] ? __x64_sys_mount+0x20/0xc0 [ 558.654933][T14909] do_syscall_64+0xf3/0x230 [ 558.659440][T14909] ? clear_bhb_loop+0x35/0x90 [ 558.664118][T14909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.670006][T14909] RIP: 0033:0x7f4e29185d19 [ 558.674407][T14909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 558.694002][T14909] RSP: 002b:00007f4e29f76038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 558.702401][T14909] RAX: ffffffffffffffda RBX: 00007f4e29375fa0 RCX: 00007f4e29185d19 [ 558.710362][T14909] RDX: 0000000020000080 RSI: 00000000200002c0 RDI: 0000000000000000 [ 558.718319][T14909] RBP: 00007f4e29f76090 R08: 0000000020000400 R09: 0000000000000000 [ 558.726276][T14909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 558.734235][T14909] R13: 0000000000000000 R14: 00007f4e29375fa0 R15: 00007ffe500b49d8 [ 558.742267][T14909] [ 558.774328][T14909] overlayfs: workdir and upperdir must be separate subtrees [ 558.802958][ T5902] IPVS: starting estimator thread 0... [ 558.816354][T14913] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2440'. [ 558.829832][T14913] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 558.893339][T14914] IPVS: using max 47 ests per chain, 112800 per kthread [ 559.006614][T14892] netlink: 'syz.3.2435': attribute type 1 has an invalid length. [ 559.038249][T14892] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2435'. [ 559.491791][ T5902] usb 4-1: USB disconnect, device number 39 [ 560.862670][T14948] netlink: 1284 bytes leftover after parsing attributes in process `syz.6.2449'. [ 561.219798][T14963] netlink: 'syz.0.2454': attribute type 10 has an invalid length. [ 561.249984][T14963] team0: Port device netdevsim0 added [ 561.751933][ T5864] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 561.818591][T14990] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2463'. [ 561.891988][ T5902] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 561.952673][ T5864] usb 1-1: Using ep0 maxpacket: 8 [ 561.979337][ T5864] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 561.991134][ T5864] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 562.001883][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.010035][ T5864] usb 1-1: Product: syz [ 562.014786][ T5864] usb 1-1: Manufacturer: syz [ 562.019554][ T5864] usb 1-1: SerialNumber: syz [ 562.101118][T15003] kernel profiling enabled (shift: 62) [ 562.102788][ T5864] usb 1-1: config 0 descriptor?? [ 562.111377][T15003] profiling shift: 62 too large [ 562.116769][ T5902] usb 6-1: Using ep0 maxpacket: 16 [ 562.118419][ T5864] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 562.131529][ T5902] usb 6-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 562.143186][ T5902] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.151396][T15003] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.151502][ T5902] usb 6-1: Product: syz [ 562.158732][T15003] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.163568][ T5902] usb 6-1: Manufacturer: syz [ 562.179146][ T5902] usb 6-1: SerialNumber: syz [ 562.191071][ T5902] usb 6-1: config 0 descriptor?? [ 563.169256][T15001] bridge_slave_1: left allmulticast mode [ 563.169715][ T5902] usb-storage 6-1:0.0: USB Mass Storage device detected [ 563.177190][ T5864] gspca_zc3xx: reg_w_i err -110 [ 563.183970][T15001] bridge_slave_1: left promiscuous mode [ 563.193682][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.201620][T15001] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.035638][T15001] bridge_slave_0: left allmulticast mode [ 564.068538][T15001] bridge_slave_0: left promiscuous mode [ 564.170998][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 564.171017][ T29] audit: type=1400 audit(1734208309.567:243): lsm=SMACK fn=smack_file_ioctl action=denied subject="w" object="_" requested=w pid=15008 comm="syz.6.2470" path="/dev/ptp0" dev="devtmpfs" ino=1265 [ 564.197221][ T5902] usb-storage 6-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 564.208380][ T5902] usb-storage 6-1:0.0: This device (054c,002e,0500 S 04 P c9) has an unneeded SubClass entry in unusual_devs.h (kernel 6.13.0-rc2-syzkaller-00292-ga446e965a188) [ 564.208380][ T5902] Please send a copy of this message to and [ 564.239660][T15001] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.363862][ T5866] usb 6-1: USB disconnect, device number 42 [ 564.655612][T15019] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.2471'. [ 564.786905][T15024] overlayfs: failed to resolve './file0': -2 [ 565.414721][ T5864] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 565.654983][ T5864] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 565.673424][ T5864] usb 1-1: USB disconnect, device number 38 [ 566.300457][T15051] autofs: Unknown parameter '·' [ 566.445432][T15032] Invalid ELF header magic: != ELF [ 567.049431][ T46] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 567.371207][T15072] netlink: 1284 bytes leftover after parsing attributes in process `syz.6.2485'. [ 567.459174][ T46] usb 3-1: device descriptor read/64, error -71 [ 567.709027][ T46] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 567.720522][T15075] mmap: syz.0.2488 (15075): VmData 25841664 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 567.849021][ T46] usb 3-1: device descriptor read/64, error -71 [ 567.969271][ T46] usb usb3-port1: attempt power cycle [ 568.308806][ T46] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 568.360019][ T46] usb 3-1: device descriptor read/8, error -71 [ 568.608486][ T46] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 568.639510][ T46] usb 3-1: device descriptor read/8, error -71 [ 568.733502][T15097] kvm: kvm [15096]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x11a00000000 [ 568.749053][ T46] usb usb3-port1: unable to enumerate USB device [ 568.751257][T15097] kvm: kvm [15096]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x11b00000800 [ 568.840997][T15107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 568.853878][T15108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 569.127402][T15112] autofs: Unknown parameter '·' [ 569.598012][ T5866] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 569.748433][ T5866] usb 7-1: Using ep0 maxpacket: 32 [ 569.759460][ T5866] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 569.800665][ T5866] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 569.827501][ T5866] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 569.842945][ T5866] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 569.863040][ T5866] usb 7-1: Product: syz [ 569.870604][ T5866] usb 7-1: Manufacturer: syz [ 569.882349][ T5866] usb 7-1: SerialNumber: syz [ 569.891764][ T5866] usb 7-1: config 0 descriptor?? [ 569.945952][T15124] FAULT_INJECTION: forcing a failure. [ 569.945952][T15124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 569.980527][T15124] CPU: 1 UID: 0 PID: 15124 Comm: syz.0.2500 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 569.991340][T15124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 570.001392][T15124] Call Trace: [ 570.004661][T15124] [ 570.007585][T15124] dump_stack_lvl+0x241/0x360 [ 570.012263][T15124] ? __pfx_dump_stack_lvl+0x10/0x10 [ 570.017455][T15124] ? __pfx__printk+0x10/0x10 [ 570.022037][T15124] ? snprintf+0xda/0x120 [ 570.026267][T15124] should_fail_ex+0x3b0/0x4e0 [ 570.030933][T15124] _copy_to_user+0x31/0xb0 [ 570.035343][T15124] simple_read_from_buffer+0xca/0x150 [ 570.040712][T15124] proc_fail_nth_read+0x1e9/0x250 [ 570.045728][T15124] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 570.051265][T15124] ? trace_contention_end+0x3c/0x120 [ 570.056541][T15124] ? bpf_lsm_file_permission+0x9/0x10 [ 570.061914][T15124] ? security_file_permission+0x74/0x280 [ 570.067539][T15124] ? rw_verify_area+0x55e/0x6f0 [ 570.072382][T15124] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 570.077924][T15124] vfs_read+0x1fc/0xb70 [ 570.082070][T15124] ? __pfx___mutex_lock+0x10/0x10 [ 570.087086][T15124] ? __pfx_vfs_read+0x10/0x10 [ 570.091756][T15124] ? __fget_files+0x2a/0x410 [ 570.096335][T15124] ? __fget_files+0x395/0x410 [ 570.101001][T15124] ? __fget_files+0x2a/0x410 [ 570.105588][T15124] ksys_read+0x18f/0x2b0 [ 570.109826][T15124] ? __pfx_ksys_read+0x10/0x10 [ 570.114588][T15124] ? rcu_is_watching+0x15/0xb0 [ 570.119346][T15124] ? rcu_is_watching+0x15/0xb0 [ 570.124106][T15124] do_syscall_64+0xf3/0x230 [ 570.128607][T15124] ? clear_bhb_loop+0x35/0x90 [ 570.133280][T15124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.139172][T15124] RIP: 0033:0x7f61dbf8472c [ 570.143581][T15124] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 570.163274][T15124] RSP: 002b:00007f61dce24030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 570.171678][T15124] RAX: ffffffffffffffda RBX: 00007f61dc175fa0 RCX: 00007f61dbf8472c [ 570.179638][T15124] RDX: 000000000000000f RSI: 00007f61dce240a0 RDI: 0000000000000006 [ 570.187640][T15124] RBP: 00007f61dce24090 R08: 0000000000000000 R09: 0000000000000000 [ 570.195599][T15124] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000002 [ 570.203568][T15124] R13: 0000000000000000 R14: 00007f61dc175fa0 R15: 00007ffec5396a98 [ 570.211537][T15124] [ 570.251245][ T46] usb 7-1: USB disconnect, device number 3 [ 570.583563][T15130] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.2501'. [ 571.332093][T15148] siw: device registration error -23 [ 571.654911][T15132] lo speed is unknown, defaulting to 1000 [ 571.920465][T15153] lo speed is unknown, defaulting to 1000 [ 572.814943][T15167] kvm: kvm [15166]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x11a00000000 [ 572.831997][T15167] kvm: kvm [15166]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x11b00000800 [ 573.155353][T15188] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.2516'. [ 573.366860][ T2150] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 573.966258][ T2150] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 573.976761][ T2150] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 573.986963][ T2150] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 573.996043][ T2150] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 574.004043][ T2150] usb 7-1: SerialNumber: syz [ 574.228312][T15205] kvm: kvm [15204]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x11a00000000 [ 574.237988][T15205] kvm: kvm [15204]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x11b00000800 [ 575.791996][T15225] FAULT_INJECTION: forcing a failure. [ 575.791996][T15225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 575.805281][T15225] CPU: 0 UID: 0 PID: 15225 Comm: syz.0.2526 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 575.816069][T15225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 575.826137][T15225] Call Trace: [ 575.829428][T15225] [ 575.832366][T15225] dump_stack_lvl+0x241/0x360 [ 575.837066][T15225] ? __pfx_dump_stack_lvl+0x10/0x10 [ 575.842280][T15225] ? __pfx__printk+0x10/0x10 [ 575.846884][T15225] ? __pfx_lock_release+0x10/0x10 [ 575.851919][T15225] ? rcu_is_watching+0x15/0xb0 [ 575.856693][T15225] ? lock_release+0xbf/0xa30 [ 575.861289][T15225] should_fail_ex+0x3b0/0x4e0 [ 575.865976][T15225] _copy_from_user+0x2f/0xc0 [ 575.870583][T15225] copy_msghdr_from_user+0xae/0x680 [ 575.875810][T15225] ? rcu_is_watching+0x15/0xb0 [ 575.880606][T15225] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 575.886455][T15225] ? __fget_files+0x2a/0x410 [ 575.891062][T15225] ? __fget_files+0x2a/0x410 [ 575.895663][T15225] __sys_recvmsg+0x200/0x390 [ 575.900264][T15225] ? __pfx___sys_recvmsg+0x10/0x10 [ 575.905382][T15225] ? __mutex_unlock_slowpath+0x21e/0x790 [ 575.911032][T15225] ? __fget_files+0x2a/0x410 [ 575.915635][T15225] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 575.921973][T15225] ? rcu_is_watching+0x15/0xb0 [ 575.926746][T15225] ? rcu_is_watching+0x15/0xb0 [ 575.931517][T15225] do_syscall_64+0xf3/0x230 [ 575.936031][T15225] ? clear_bhb_loop+0x35/0x90 [ 575.940712][T15225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.946617][T15225] RIP: 0033:0x7f61dbf85d19 [ 575.951041][T15225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.970658][T15225] RSP: 002b:00007f61dcde2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 575.979089][T15225] RAX: ffffffffffffffda RBX: 00007f61dc176160 RCX: 00007f61dbf85d19 [ 575.987057][T15225] RDX: 00000000000000a2 RSI: 0000000020000340 RDI: 0000000000000004 [ 575.995025][T15225] RBP: 00007f61dcde2090 R08: 0000000000000000 R09: 0000000000000000 [ 576.002984][T15225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.010940][T15225] R13: 0000000000000000 R14: 00007f61dc176160 R15: 00007ffec5396a98 [ 576.018908][T15225] [ 576.021990][ C0] vkms_vblank_simulate: vblank timer overrun [ 576.272761][T15230] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.2527'. [ 577.078680][T15244] lo speed is unknown, defaulting to 1000 [ 579.028439][T15273] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.2540'. [ 579.096123][ T2150] usb 7-1: 0:2 : does not exist [ 579.247615][ T2150] usb 7-1: USB disconnect, device number 4 [ 579.486071][ T46] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 579.548100][ T7409] udevd[7409]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 579.839853][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 579.851530][ T46] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 579.862406][ T46] usb 6-1: New USB device found, idVendor=05ac, idProduct=4262, bcdDevice= 0.00 [ 579.872394][ T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.907057][ T46] usb 6-1: config 0 descriptor?? [ 580.580259][T15302] autofs: Unknown parameter '·' [ 580.731496][ T46] usbhid 6-1:0.0: can't add hid device: -71 [ 580.737775][ T46] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 580.758148][ T46] usb 6-1: USB disconnect, device number 43 [ 581.414123][T15308] fuse: Bad value for 'fd' [ 581.522167][T15320] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.2553'. [ 582.571082][T15335] lo speed is unknown, defaulting to 1000 [ 583.630563][ T5866] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 583.840446][ T5866] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 583.873407][T15368] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2567'. [ 584.550499][ T5866] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 585.271007][ T5866] usb 1-1: unable to get BOS descriptor or descriptor too short [ 585.281781][ T5866] usb 1-1: no configurations [ 585.286524][ T5866] usb 1-1: can't read configurations, error -22 [ 585.345767][ T29] audit: type=1326 audit(1734208330.757:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15390 comm="syz.0.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61dbf85d19 code=0x7ffc0000 [ 585.440348][ T29] audit: type=1326 audit(1734208330.757:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15390 comm="syz.0.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f61dbf85d19 code=0x7ffc0000 [ 585.478640][T15395] lo speed is unknown, defaulting to 1000 [ 585.500704][ T29] audit: type=1326 audit(1734208330.757:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15390 comm="syz.0.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61dbf85d19 code=0x7ffc0000 [ 585.524393][ T29] audit: type=1326 audit(1734208330.757:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15390 comm="syz.0.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f61dbf85d19 code=0x7ffc0000 [ 585.545861][ C0] vkms_vblank_simulate: vblank timer overrun [ 585.653855][ T29] audit: type=1326 audit(1734208330.757:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15390 comm="syz.0.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61dbf85d19 code=0x7ffc0000 [ 585.676977][ C0] vkms_vblank_simulate: vblank timer overrun [ 585.731224][ T29] audit: type=1326 audit(1734208330.757:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15390 comm="syz.0.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f61dbf85d19 code=0x7ffc0000 [ 585.798899][ T29] audit: type=1326 audit(1734208330.757:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15390 comm="syz.0.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61dbf85d19 code=0x7ffc0000 [ 585.823012][ T29] audit: type=1326 audit(1734208330.757:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15390 comm="syz.0.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f61dbf85d19 code=0x7ffc0000 [ 585.844763][ T29] audit: type=1326 audit(1734208330.787:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15390 comm="syz.0.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61dbf85d19 code=0x7ffc0000 [ 585.866422][ T29] audit: type=1326 audit(1734208330.787:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15390 comm="syz.0.2574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61dbf85d19 code=0x7ffc0000 [ 586.027503][T15402] lo speed is unknown, defaulting to 1000 [ 586.052845][T15405] fuse: Unknown parameter 'user_i00000000000000000000' [ 586.749571][ T5914] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 586.844516][T15429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 586.939361][ T5914] usb 6-1: Using ep0 maxpacket: 32 [ 587.022965][ T5914] usb 6-1: config 3 has an invalid interface number: 23 but max is 3 [ 587.227184][ T5914] usb 6-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 587.256785][ T5914] usb 6-1: config 3 has 1 interface, different from the descriptor's value: 4 [ 587.265804][ T5914] usb 6-1: config 3 has no interface number 0 [ 587.272021][ T5914] usb 6-1: config 3 interface 23 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 587.285350][ T5914] usb 6-1: config 3 interface 23 has no altsetting 0 [ 587.468918][T15437] lo speed is unknown, defaulting to 1000 [ 587.582863][T15431] fuse: Bad value for 'fd' [ 587.589126][ T5914] usb 6-1: New USB device found, idVendor=0f11, idProduct=1081, bcdDevice=fa.b7 [ 587.600792][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.615304][ T5914] usb 6-1: Product: à°Š [ 587.619554][ T5914] usb 6-1: Manufacturer: à ” [ 587.624184][ T5914] usb 6-1: SerialNumber: ꀌ⊦̀䳊᛹淚㣟혂胫㋙“鄴궼㡽擌ê—ᔸ龑ᯈç¥èª¥î«Ê¸æ€…욈晅쟸ë§é¤£âƒˆç˜›ì³ŸÌ›ë蓢徧톲懀è‰ï¸µÂ©Æ´â¥¤çƒ§ë§¢ã„⟚똪웇簭ã¯èŽ›é¡ë«ˆâ¬¬è§©é„µë£™ç’ᤱ⌫Ħ홄톫ﭳ瑉ꃓ檹䭯Ä꿫晉æ¤à¿µî¦ºì…²ä½èš¸ã¹¿ãš›î‡˜ìŠ [ 587.674393][T15442] lo speed is unknown, defaulting to 1000 [ 587.918568][T15458] FAULT_INJECTION: forcing a failure. [ 587.918568][T15458] name failslab, interval 1, probability 0, space 0, times 0 [ 587.931690][T15458] CPU: 0 UID: 0 PID: 15458 Comm: syz.3.2594 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 587.942563][T15458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 587.952619][T15458] Call Trace: [ 587.955901][T15458] [ 587.958825][T15458] dump_stack_lvl+0x241/0x360 [ 587.963545][T15458] ? __pfx_dump_stack_lvl+0x10/0x10 [ 587.968764][T15458] ? __pfx__printk+0x10/0x10 [ 587.973378][T15458] ? vsnprintf+0x948/0x1da0 [ 587.977889][T15458] ? __pfx___might_resched+0x10/0x10 [ 587.983176][T15458] should_fail_ex+0x3b0/0x4e0 [ 587.987949][T15458] should_failslab+0xac/0x100 [ 587.992647][T15458] __kmalloc_node_noprof+0xe1/0x4d0 [ 587.997858][T15458] ? __kvmalloc_node_noprof+0x72/0x190 [ 588.003334][T15458] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 588.008809][T15458] __kvmalloc_node_noprof+0x72/0x190 [ 588.014104][T15458] alloc_netdev_mqs+0xa4/0x1080 [ 588.018962][T15458] ? __pfx_ip6_tnl_dev_setup+0x10/0x10 [ 588.024430][T15458] ? __pfx_snprintf+0x10/0x10 [ 588.029119][T15458] ? rcu_is_watching+0x15/0xb0 [ 588.033883][T15458] rtnl_create_link+0x2f9/0xc20 [ 588.038746][T15458] rtnl_newlink_create+0x210/0xa40 [ 588.043878][T15458] ? __pfx___mutex_lock+0x10/0x10 [ 588.048900][T15458] ? cap_capable+0x1b4/0x250 [ 588.053484][T15458] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 588.059118][T15458] ? ns_capable+0x8a/0xf0 [ 588.063446][T15458] rtnl_newlink+0x160d/0x2150 [ 588.068123][T15458] ? __pfx_rtnl_newlink+0x10/0x10 [ 588.073142][T15458] ? __netlink_deliver_tap+0x56b/0x7f0 [ 588.078600][T15458] ? netlink_deliver_tap+0x19d/0x1b0 [ 588.083872][T15458] ? netlink_unicast+0x7c4/0x990 [ 588.088803][T15458] ? netlink_sendmsg+0x8e4/0xcb0 [ 588.093732][T15458] ? __sock_sendmsg+0x221/0x270 [ 588.098577][T15458] ? ____sys_sendmsg+0x52a/0x7e0 [ 588.103504][T15458] ? __sys_sendmsg+0x269/0x350 [ 588.108263][T15458] ? do_syscall_64+0xf3/0x230 [ 588.112932][T15458] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.119005][T15458] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 588.125333][T15458] ? rcu_is_watching+0x15/0xb0 [ 588.130095][T15458] ? rcu_is_watching+0x15/0xb0 [ 588.134849][T15458] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 588.141165][T15458] ? lock_release+0xbf/0xa30 [ 588.145744][T15458] ? nlmon_xmit+0xaf/0x100 [ 588.150153][T15458] ? rcu_is_watching+0x15/0xb0 [ 588.154907][T15458] ? __local_bh_enable_ip+0x168/0x200 [ 588.160273][T15458] ? dev_hard_start_xmit+0x768/0x7d0 [ 588.165547][T15458] ? rcu_is_watching+0x15/0xb0 [ 588.170305][T15458] ? lock_release+0xbf/0xa30 [ 588.174889][T15458] ? __pfx_lock_release+0x10/0x10 [ 588.179905][T15458] ? cap_capable+0x1b4/0x250 [ 588.184486][T15458] ? safesetid_security_capable+0xb2/0x1d0 [ 588.190284][T15458] ? bpf_lsm_capable+0x9/0x10 [ 588.194949][T15458] ? security_capable+0x7e/0x2d0 [ 588.199875][T15458] ? __pfx_rtnl_newlink+0x10/0x10 [ 588.204889][T15458] rtnetlink_rcv_msg+0x791/0xcf0 [ 588.209814][T15458] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 588.214917][T15458] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 588.220366][T15458] ? ref_tracker_free+0x643/0x7e0 [ 588.225381][T15458] netlink_rcv_skb+0x1e3/0x430 [ 588.230134][T15458] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 588.235582][T15458] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 588.240861][T15458] ? netlink_deliver_tap+0x2e/0x1b0 [ 588.246051][T15458] netlink_unicast+0x7f6/0x990 [ 588.250812][T15458] ? __pfx_netlink_unicast+0x10/0x10 [ 588.256090][T15458] ? __virt_addr_valid+0x45f/0x530 [ 588.261187][T15458] ? __phys_addr_symbol+0x2f/0x70 [ 588.266207][T15458] ? __check_object_size+0x47a/0x730 [ 588.271489][T15458] netlink_sendmsg+0x8e4/0xcb0 [ 588.276244][T15458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 588.281518][T15458] ? lock_release+0xbf/0xa30 [ 588.286104][T15458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 588.291380][T15458] __sock_sendmsg+0x221/0x270 [ 588.296050][T15458] ____sys_sendmsg+0x52a/0x7e0 [ 588.300804][T15458] ? __pfx_____sys_sendmsg+0x10/0x10 [ 588.306074][T15458] ? __fget_files+0x2a/0x410 [ 588.310657][T15458] ? __fget_files+0x2a/0x410 [ 588.315236][T15458] __sys_sendmsg+0x269/0x350 [ 588.319815][T15458] ? __pfx_lock_release+0x10/0x10 [ 588.324835][T15458] ? __pfx___sys_sendmsg+0x10/0x10 [ 588.329940][T15458] ? __pfx_vfs_write+0x10/0x10 [ 588.334700][T15458] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 588.341015][T15458] ? rcu_is_watching+0x15/0xb0 [ 588.345770][T15458] ? rcu_is_watching+0x15/0xb0 [ 588.350523][T15458] do_syscall_64+0xf3/0x230 [ 588.355022][T15458] ? clear_bhb_loop+0x35/0x90 [ 588.359686][T15458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.365569][T15458] RIP: 0033:0x7f0454785d19 [ 588.369975][T15458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 588.389570][T15458] RSP: 002b:00007f04525f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 588.397972][T15458] RAX: ffffffffffffffda RBX: 00007f0454975fa0 RCX: 00007f0454785d19 [ 588.405933][T15458] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 588.413890][T15458] RBP: 00007f04525f6090 R08: 0000000000000000 R09: 0000000000000000 [ 588.421846][T15458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.429805][T15458] R13: 0000000000000000 R14: 00007f0454975fa0 R15: 00007ffe58dbdcf8 [ 588.437768][T15458] [ 588.440851][ C0] vkms_vblank_simulate: vblank timer overrun [ 588.747480][ T5914] ldusb 6-1:3.23: Interrupt in endpoint not found [ 588.766327][ T5914] usb 6-1: USB disconnect, device number 44 [ 589.076320][T15477] lo speed is unknown, defaulting to 1000 [ 589.183264][T15481] lo speed is unknown, defaulting to 1000 [ 589.248285][ T2150] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 589.485387][T15491] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2605'. [ 589.522005][T15475] kvm: kvm [15474]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x11a00000000 [ 589.533933][T15475] kvm: kvm [15474]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x11b00000800 [ 589.539545][ T2150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 589.551724][T15495] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2605'. [ 589.559855][ T2150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 589.589149][ T2150] usb 3-1: New USB device found, idVendor=056a, idProduct=0336, bcdDevice= 0.00 [ 589.599811][T15491] could not allocate digest TFM handle sha256-arm64-neon [ 589.606927][ T2150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.626073][ T2150] usb 3-1: config 0 descriptor?? [ 589.874654][T15501] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.2606'. [ 590.370115][ T2150] usbhid 3-1:0.0: can't add hid device: -71 [ 590.376180][ T2150] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 590.406041][ T2150] usb 3-1: USB disconnect, device number 42 [ 590.458766][T15511] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.2607'. [ 590.827517][T15515] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2611'. [ 592.112354][T15526] lo speed is unknown, defaulting to 1000 [ 592.202661][ T8] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 592.212687][T15531] lo speed is unknown, defaulting to 1000 [ 592.285718][T15542] mkiss: ax0: crc mode is auto. [ 592.389676][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 592.406390][ T8] usb 6-1: config 0 has an invalid descriptor of length 107, skipping remainder of the config [ 592.433693][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 78, changing to 10 [ 592.445062][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 57694, setting to 1024 [ 592.456341][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 592.472308][ T8] usb 6-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 592.481592][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.494266][ T8] usb 6-1: Product: syz [ 592.516265][ T8] usb 6-1: Manufacturer: syz [ 592.530966][ T8] usb 6-1: SerialNumber: syz [ 592.568551][T15542] Falling back ldisc for ttyS3. [ 592.606314][T15542] hub 9-0:1.0: USB hub found [ 592.640062][T15542] hub 9-0:1.0: 1 port detected [ 592.655057][T15538] kvm: kvm [15536]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x11a00000000 [ 592.664420][ T8] usb 6-1: config 0 descriptor?? [ 592.668584][ T8] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 592.685032][T15538] kvm: kvm [15536]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x11b00000800 [ 592.697032][T15553] netlink: 'syz.2.2622': attribute type 2 has an invalid length. [ 592.923082][T15563] netlink: 1284 bytes leftover after parsing attributes in process `syz.6.2621'. [ 593.673804][ T8] input: gspca_pac7302 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input28 [ 594.110299][T15570] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2627'. [ 594.119513][T15570] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2627'. [ 594.128653][T15570] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2627'. [ 594.689139][T15584] lo speed is unknown, defaulting to 1000 [ 594.774937][T15590] binder: 15589:15590 ioctl 40a85321 20000500 returned -22 [ 595.215222][ T2150] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 595.276215][T15605] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.2637'. [ 595.440374][ C0] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 595.447271][ C0] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 595.454115][ C0] gspca_pac7302 6-1:0.0: URB error -71, resubmitting [ 595.454835][ T5902] usb 6-1: USB disconnect, device number 45 [ 595.460788][ C0] gspca_main: Resubmit URB failed with error -19 [ 595.602927][ T2150] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.616193][ T2150] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 595.626039][ T2150] usb 4-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 595.635147][ T2150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.646136][ T2150] usb 4-1: config 0 descriptor?? [ 596.085705][ T2150] hid-led 0003:0FC5:B080.0019: unknown main item tag 0x0 [ 596.381836][T15629] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2644'. [ 596.554678][ T5902] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 596.579269][T15635] lo speed is unknown, defaulting to 1000 [ 596.781835][ T5902] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 596.795659][ T5902] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.810946][ T5902] usb 1-1: Product: syz [ 596.820307][ T5902] usb 1-1: Manufacturer: syz [ 596.825274][ T5902] usb 1-1: SerialNumber: syz [ 596.847291][ T5902] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 596.861950][ T2150] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 597.818608][ T8] usb 4-1: USB disconnect, device number 40 [ 598.013234][ T2150] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 598.020420][ T2150] ath9k_htc: Failed to initialize the device [ 598.028161][T15653] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2652'. [ 598.105260][ T2150] usb 1-1: ath9k_htc: USB layer deinitialized [ 598.600857][ T5914] usb 1-1: USB disconnect, device number 41 [ 598.629904][T15662] kvm: kvm [15660]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x11a00000000 [ 598.679088][T15675] FAULT_INJECTION: forcing a failure. [ 598.679088][T15675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.692857][T15675] CPU: 1 UID: 0 PID: 15675 Comm: syz.0.2657 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 598.703632][T15675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 598.714137][T15675] Call Trace: [ 598.717418][T15675] [ 598.720365][T15675] dump_stack_lvl+0x241/0x360 [ 598.725039][T15675] ? __pfx_dump_stack_lvl+0x10/0x10 [ 598.730230][T15675] ? __pfx__printk+0x10/0x10 [ 598.734814][T15675] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 598.740454][T15675] ? vfs_write+0x28b/0xd30 [ 598.744884][T15675] ? __pfx_lock_release+0x10/0x10 [ 598.749907][T15675] ? sb_end_write+0xe9/0x1c0 [ 598.754495][T15675] should_fail_ex+0x3b0/0x4e0 [ 598.759161][T15675] _copy_from_user+0x2f/0xc0 [ 598.763741][T15675] __sys_bpf+0x1a4/0x810 [ 598.767967][T15675] ? __pfx___sys_bpf+0x10/0x10 [ 598.772716][T15675] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 598.779031][T15675] ? rcu_is_watching+0x15/0xb0 [ 598.783793][T15675] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 598.790137][T15675] ? rcu_is_watching+0x15/0xb0 [ 598.794895][T15675] __x64_sys_bpf+0x7c/0x90 [ 598.799306][T15675] do_syscall_64+0xf3/0x230 [ 598.803801][T15675] ? clear_bhb_loop+0x35/0x90 [ 598.808466][T15675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.814359][T15675] RIP: 0033:0x7f61dbf85d19 [ 598.818784][T15675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.838418][T15675] RSP: 002b:00007f61dce24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 598.846889][T15675] RAX: ffffffffffffffda RBX: 00007f61dc175fa0 RCX: 00007f61dbf85d19 [ 598.854859][T15675] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 598.862840][T15675] RBP: 00007f61dce24090 R08: 0000000000000000 R09: 0000000000000000 [ 598.870806][T15675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.878796][T15675] R13: 0000000000000000 R14: 00007f61dc175fa0 R15: 00007ffec5396a98 [ 598.886765][T15675] [ 599.304481][T15678] lo speed is unknown, defaulting to 1000 [ 599.714670][T15698] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2665'. [ 599.932932][ T2150] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 600.093585][ T2150] usb 7-1: Using ep0 maxpacket: 32 [ 600.290981][ T2150] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe [ 600.301689][ T2150] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.390240][ T2150] usb 7-1: Product: syz [ 600.437749][ T2150] usb 7-1: Manufacturer: syz [ 600.449702][ T2150] usb 7-1: SerialNumber: syz [ 600.465366][ T2150] usb 7-1: config 0 descriptor?? [ 600.943419][ T2150] snd-usb-6fire 7-1:0.0: unknown device firmware state received from device: [ 600.970178][ T2150] eb 9a 47 80 9b f8 7a f0 [ 600.997036][ T2150] snd-usb-6fire 7-1:0.0: probe with driver snd-usb-6fire failed with error -5 [ 601.156633][T15714] kvm: kvm [15713]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x11a00000000 [ 601.169877][ T2150] usb 7-1: USB disconnect, device number 5 [ 601.193052][T15714] kvm: kvm [15713]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x11b00000800 [ 601.821152][T15726] lo speed is unknown, defaulting to 1000 [ 602.080731][T15732] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2676'. [ 602.114901][T15735] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2675'. [ 602.126432][T15735] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2675'. [ 602.805798][T15746] afs: Bad value for 'source' [ 603.248273][T15747] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.2680'. [ 603.841754][T15760] autofs: Unknown parameter '·' [ 604.145667][T15754] netlink: set zone limit has 8 unknown bytes [ 605.039375][T15783] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2689'. [ 605.897175][T15787] lo speed is unknown, defaulting to 1000 [ 606.643167][T15802] FAULT_INJECTION: forcing a failure. [ 606.643167][T15802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 606.659487][T15802] CPU: 1 UID: 0 PID: 15802 Comm: syz.5.2694 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 606.670297][T15802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 606.680373][T15802] Call Trace: [ 606.683667][T15802] [ 606.686610][T15802] dump_stack_lvl+0x241/0x360 [ 606.691310][T15802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 606.696534][T15802] ? __pfx__printk+0x10/0x10 [ 606.701147][T15802] should_fail_ex+0x3b0/0x4e0 [ 606.705843][T15802] _copy_from_user+0x2f/0xc0 [ 606.710481][T15802] memdup_user_nul+0x6c/0x100 [ 606.715176][T15802] smk_write_rules_list+0x15a/0x450 [ 606.720394][T15802] ? lock_release+0xbf/0xa30 [ 606.725003][T15802] ? __pfx_smk_write_rules_list+0x10/0x10 [ 606.730744][T15802] ? cap_capable+0x1b4/0x250 [ 606.735356][T15802] ? smack_privileged_cred+0xb9/0x380 [ 606.740747][T15802] ? __pfx_smk_write_change_rule+0x10/0x10 [ 606.746567][T15802] vfs_write+0x2a3/0xd30 [ 606.750915][T15802] ? __pfx_vfs_write+0x10/0x10 [ 606.755699][T15802] ? __fget_files+0x2a/0x410 [ 606.760302][T15802] ? __fget_files+0x395/0x410 [ 606.764989][T15802] ? __fget_files+0x2a/0x410 [ 606.769600][T15802] ksys_write+0x18f/0x2b0 [ 606.773945][T15802] ? __pfx_ksys_write+0x10/0x10 [ 606.778810][T15802] ? rcu_is_watching+0x15/0xb0 [ 606.783599][T15802] ? rcu_is_watching+0x15/0xb0 [ 606.788386][T15802] do_syscall_64+0xf3/0x230 [ 606.792919][T15802] ? clear_bhb_loop+0x35/0x90 [ 606.797609][T15802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.803523][T15802] RIP: 0033:0x7f4e29185d19 [ 606.807955][T15802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.827577][T15802] RSP: 002b:00007f4e29f76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 606.836017][T15802] RAX: ffffffffffffffda RBX: 00007f4e29375fa0 RCX: 00007f4e29185d19 [ 606.844013][T15802] RDX: 0000000000000015 RSI: 0000000020000340 RDI: 0000000000000003 [ 606.852003][T15802] RBP: 00007f4e29f76090 R08: 0000000000000000 R09: 0000000000000000 [ 606.859991][T15802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.867981][T15802] R13: 0000000000000000 R14: 00007f4e29375fa0 R15: 00007ffe500b49d8 [ 606.875974][T15802] [ 607.308709][T15811] autofs: Unknown parameter '·' [ 607.364845][T15812] fuse: Bad value for 'fd' [ 608.811635][T15843] lo speed is unknown, defaulting to 1000 [ 609.512539][T15850] netlink: 1284 bytes leftover after parsing attributes in process `syz.5.2710'. [ 609.779897][T15856] autofs: Unknown parameter '·' [ 610.575189][T15871] vivid-002: ================= START STATUS ================= [ 610.582995][T15871] vivid-002: Radio HW Seek Mode: Bounded [ 610.588850][T15871] vivid-002: Radio Programmable HW Seek: false [ 610.595168][T15871] vivid-002: RDS Rx I/O Mode: Block I/O [ 610.600885][T15871] vivid-002: Generate RBDS Instead of RDS: false [ 610.607376][T15871] vivid-002: RDS Reception: true [ 610.612513][T15871] vivid-002: RDS Program Type: 0 inactive [ 610.618505][T15871] vivid-002: RDS PS Name: inactive [ 610.623933][T15871] vivid-002: RDS Radio Text: inactive [ 610.633835][T15871] vivid-002: RDS Traffic Announcement: false inactive [ 610.640855][T15871] vivid-002: RDS Traffic Program: false inactive [ 610.647562][T15871] vivid-002: RDS Music: false inactive [ 610.653085][T15871] vivid-002: ================== END STATUS ================== [ 610.929705][T15876] bridge0: port 1(bridge_slave_1) entered disabled state [ 611.210496][T15881] dlm: no local IP address has been set [ 611.233969][T15881] dlm: cannot start dlm midcomms -107 [ 611.296734][T15886] netlink: 1264 bytes leftover after parsing attributes in process `syz.3.2721'. [ 612.007784][T15897] lo speed is unknown, defaulting to 1000 [ 612.896866][T15912] netlink: 'syz.0.2727': attribute type 10 has an invalid length. [ 613.155179][T15918] kvm: kvm [15917]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x5500000800 [ 613.168918][T15918] kvm: kvm [15917]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x7100000800 [ 613.180804][T15918] kvm: kvm [15917]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xa600000000 [ 613.192495][T15918] kvm: kvm [15917]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xb200000000 [ 613.484326][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 613.484345][ T29] audit: type=1800 audit(1734208358.901:263): pid=15931 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.2733" name="bus" dev="overlay" ino=2875 res=0 errno=0 [ 614.199420][T15940] lo speed is unknown, defaulting to 1000 [ 614.492855][T15944] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2738'. [ 614.504200][T15944] ALSA: mixer_oss: invalid OSS volume '' [ 614.689308][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 614.711596][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 614.720973][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 614.749067][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 614.759434][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 614.766848][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 614.803153][ T5134] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 614.830104][ T5134] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 614.837473][ T5134] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 614.848110][ T5134] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 614.856856][ T5134] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 614.864108][ T5134] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 615.162785][T15947] lo speed is unknown, defaulting to 1000 [ 615.294454][T15947] chnl_net:caif_netlink_parms(): no params data found [ 615.317787][T15968] lo speed is unknown, defaulting to 1000 [ 615.375842][T15947] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.383107][T15947] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.390480][T15947] bridge_slave_0: entered allmulticast mode [ 615.397386][T15947] bridge_slave_0: entered promiscuous mode [ 615.430375][T15947] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.437781][T15947] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.445150][T15947] bridge_slave_1: entered allmulticast mode [ 615.452013][T15947] bridge_slave_1: entered promiscuous mode [ 615.552253][T15947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.210896][T15947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.307997][T15980] tmpfs: Bad value for 'mpol' [ 616.631101][T15947] team0: Port device team_slave_0 added [ 616.665004][T15947] team0: Port device team_slave_1 added [ 616.710128][T15947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.717418][T15947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.753906][T15947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.769595][T15947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.777046][T15947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.808765][T15947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.852992][T15947] hsr_slave_0: entered promiscuous mode [ 616.862370][T15947] hsr_slave_1: entered promiscuous mode [ 616.882027][T15947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 616.892232][ T5134] Bluetooth: hci5: command tx timeout [ 616.899692][T15947] Cannot create hsr debugfs directory [ 617.001537][T15983] lo speed is unknown, defaulting to 1000 [ 617.439395][T15947] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 617.457332][T15947] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 617.464716][T16001] ceph: No source [ 617.472127][T15989] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 617.478455][T15989] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 617.491990][T15947] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 617.501498][T15947] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 617.623381][T15947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.864094][T15947] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.027911][ T3452] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.035071][ T3452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.071095][ T6019] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.078284][ T6019] bridge0: port 2(bridge_slave_1) entered forwarding state [ 618.083719][T16004] kvm: kvm [16003]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x11a00000000 [ 618.099987][T16004] kvm: kvm [16003]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x11b00000800 [ 618.204553][T15947] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 618.224226][T15947] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 618.655271][ T3452] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.687270][ T3452] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.734252][T15947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.772417][ T3452] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.795793][ T3452] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.880671][ T3452] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.906315][ T3452] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.972663][T15947] veth0_vlan: entered promiscuous mode [ 618.986081][ T3452] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 619.458106][ T3452] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.502653][T15947] veth1_vlan: entered promiscuous mode [ 619.587237][ T3452] bridge_slave_1: left allmulticast mode [ 619.588962][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 619.605888][ T3452] bridge0: port 1(bridge_slave_1) entered disabled state [ 619.619752][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 619.627499][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 619.635683][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 619.644360][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 619.651650][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 619.671363][ T5134] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 619.681528][ T5134] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 619.694860][ T5134] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 619.702698][ T5134] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 619.711376][ T5134] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 619.718815][ T5134] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 619.792680][ T3452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.809201][ T3452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.828048][ T3452] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 619.853143][ T3452] veth1: left promiscuous mode [ 619.858751][ T3452] bond0 (unregistering): Released all slaves [ 619.872341][ T3452] bond1 (unregistering): Released all slaves [ 619.897467][T15947] veth0_macvtap: entered promiscuous mode [ 619.907809][T15947] veth1_macvtap: entered promiscuous mode [ 619.920976][T15947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.931797][T15947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.945253][T15947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.957361][T15947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.967406][T15947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.978309][T15947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.988535][T15947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.999076][T15947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.022312][T15947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 620.055856][T16051] FAULT_INJECTION: forcing a failure. [ 620.055856][T16051] name failslab, interval 1, probability 0, space 0, times 0 [ 620.068612][T16051] CPU: 1 UID: 0 PID: 16051 Comm: syz.6.2765 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 620.079386][T16051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 620.089462][T16051] Call Trace: [ 620.092747][T16051] [ 620.095682][T16051] dump_stack_lvl+0x241/0x360 [ 620.100376][T16051] ? __pfx_dump_stack_lvl+0x10/0x10 [ 620.105583][T16051] ? __pfx__printk+0x10/0x10 [ 620.110183][T16051] ? __pfx___might_resched+0x10/0x10 [ 620.115482][T16051] should_fail_ex+0x3b0/0x4e0 [ 620.120167][T16051] should_failslab+0xac/0x100 [ 620.124943][T16051] __kmalloc_noprof+0xdd/0x4c0 [ 620.129718][T16051] ? tomoyo_encode+0x26f/0x540 [ 620.134495][T16051] tomoyo_encode+0x26f/0x540 [ 620.139102][T16051] tomoyo_realpath_from_path+0x59e/0x5e0 [ 620.144750][T16051] tomoyo_path_number_perm+0x236/0x860 [ 620.150219][T16051] ? tomoyo_path_number_perm+0x206/0x860 [ 620.155860][T16051] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 620.161865][T16051] ? __fget_files+0x2a/0x410 [ 620.166464][T16051] ? __fget_files+0x2a/0x410 [ 620.171059][T16051] security_file_ioctl+0xc6/0x2a0 [ 620.176104][T16051] __se_sys_ioctl+0x46/0x170 [ 620.180706][T16051] do_syscall_64+0xf3/0x230 [ 620.185222][T16051] ? clear_bhb_loop+0x35/0x90 [ 620.189909][T16051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.195813][T16051] RIP: 0033:0x7f8209185d19 [ 620.200234][T16051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.219851][T16051] RSP: 002b:00007f8209ef4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 620.228264][T16051] RAX: ffffffffffffffda RBX: 00007f8209376160 RCX: 00007f8209185d19 [ 620.236230][T16051] RDX: 00000000200001c0 RSI: 00000000c0d05604 RDI: 0000000000000003 [ 620.244192][T16051] RBP: 00007f8209ef4090 R08: 0000000000000000 R09: 0000000000000000 [ 620.252154][T16051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.260116][T16051] R13: 0000000000000000 R14: 00007f8209376160 R15: 00007fff224feca8 [ 620.268088][T16051] [ 620.271379][T16051] ERROR: Out of memory at tomoyo_realpath_from_path. [ 620.283923][T15947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.294557][T15947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.305302][T15947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.316185][T15947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.327925][T15947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.339034][T15947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.349057][T15947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 620.359729][T15947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 620.482562][T15947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.506482][T16043] lo speed is unknown, defaulting to 1000 [ 621.441589][T15947] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.460103][T15947] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.469005][T15947] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.477744][T15947] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.579817][ T29] audit: type=1326 audit(1734208367.005:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16067 comm="syz.3.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0454785d19 code=0x7ffc0000 [ 621.625516][ T2928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.634092][ T2928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.654276][ T29] audit: type=1326 audit(1734208367.055:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16067 comm="syz.3.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f0454785d19 code=0x7ffc0000 [ 621.681297][ T29] audit: type=1326 audit(1734208367.055:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16067 comm="syz.3.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0454785d19 code=0x7ffc0000 [ 621.703384][ T29] audit: type=1326 audit(1734208367.055:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16067 comm="syz.3.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0454785d19 code=0x7ffc0000 [ 621.724853][ C0] vkms_vblank_simulate: vblank timer overrun [ 621.724957][ T3452] hsr_slave_0: left promiscuous mode [ 621.738225][ T29] audit: type=1326 audit(1734208367.055:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16067 comm="syz.3.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0454785d19 code=0x7ffc0000 [ 621.766528][ T3452] hsr_slave_1: left promiscuous mode [ 621.766670][ T54] Bluetooth: hci0: command tx timeout [ 621.801266][ T3452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 621.834927][ T3452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 621.868989][ T29] audit: type=1326 audit(1734208367.055:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16067 comm="syz.3.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0454785d19 code=0x7ffc0000 [ 621.916714][ T29] audit: type=1326 audit(1734208367.055:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16067 comm="syz.3.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0454785d19 code=0x7ffc0000 [ 621.939309][ C0] vkms_vblank_simulate: vblank timer overrun [ 622.013397][ T29] audit: type=1326 audit(1734208367.055:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16067 comm="syz.3.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0454785d19 code=0x7ffc0000 [ 622.015378][ T3452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 622.036443][ T29] audit: type=1326 audit(1734208367.055:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16067 comm="syz.3.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0454785d19 code=0x7ffc0000 [ 622.045637][ T3452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 622.066059][ T29] audit: type=1326 audit(1734208367.055:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16067 comm="syz.3.2771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f0454785d19 code=0x7ffc0000 [ 622.192107][ T3452] veth1_macvtap: left promiscuous mode [ 622.199336][ T3452] veth0_macvtap: left promiscuous mode [ 622.205384][ T3452] veth1_vlan: left promiscuous mode [ 622.216838][ T3452] veth0_vlan: left promiscuous mode [ 622.327676][ T3452] team0 (unregistering): Port device team_slave_1 removed [ 622.433831][ T3452] team0 (unregistering): Port device team_slave_0 removed [ 623.127438][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.154957][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.289949][T16043] chnl_net:caif_netlink_parms(): no params data found [ 623.297360][T16089] fuse: Unknown parameter '0x0000000000000004' [ 623.982812][ T54] Bluetooth: hci0: command tx timeout [ 624.403946][T16102] fuse: Bad value for 'fd' [ 624.420028][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.438293][T16043] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.722901][T16043] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.730864][T16043] bridge_slave_0: entered allmulticast mode [ 624.737574][T16043] bridge_slave_0: entered promiscuous mode [ 624.745040][T16043] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.752164][T16043] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.759304][T16043] bridge_slave_1: entered allmulticast mode [ 624.766459][T16043] bridge_slave_1: entered promiscuous mode [ 624.935191][T16043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.975653][T16043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.145721][T16043] team0: Port device team_slave_0 added [ 625.157202][T16043] team0: Port device team_slave_1 added [ 625.255912][T16043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.263415][T16043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.289312][ C0] vkms_vblank_simulate: vblank timer overrun [ 625.328868][T16043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.820103][T16043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.829886][T16043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.855787][ C0] vkms_vblank_simulate: vblank timer overrun [ 625.864166][T16043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.927561][T16043] hsr_slave_0: entered promiscuous mode [ 625.936117][T16043] hsr_slave_1: entered promiscuous mode [ 625.943863][T16043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 625.951939][T16043] Cannot create hsr debugfs directory [ 626.038243][ T54] Bluetooth: hci0: command tx timeout [ 626.446956][T16140] kvm: kvm [16138]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x11a00000000 [ 626.458042][T16140] kvm: kvm [16138]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x11b00000800 [ 626.546822][T16043] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 626.555945][T16043] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 626.566584][T16043] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 626.576984][T16043] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 626.635144][T16043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 626.654802][T16043] 8021q: adding VLAN 0 to HW filter on device team0 [ 626.665695][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.672799][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.693316][T16043] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 626.705076][T16043] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 626.718711][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.725796][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.814924][T16043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.949205][T16043] veth0_vlan: entered promiscuous mode [ 626.967492][T16043] veth1_vlan: entered promiscuous mode [ 626.997906][T16043] veth0_macvtap: entered promiscuous mode [ 627.008230][T16043] veth1_macvtap: entered promiscuous mode [ 627.027128][T16043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.040106][T16043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.051656][T16043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.064783][T16043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.076280][T16043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.098882][T16043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.116765][T16043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 627.131251][T16043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.151274][T16043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 627.207049][T16043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.281056][T16043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.336106][T16043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.347280][T16043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.358981][T16043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.372122][T16043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.382536][T16043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 627.622825][T16043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 627.635740][T16043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 627.667414][T16043] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.676728][T16043] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.726984][T16043] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 627.958344][T16043] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.064946][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.077961][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.090320][ T54] Bluetooth: hci0: command tx timeout [ 628.120436][ T3452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 628.203039][ T3452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.982002][T16187] autofs: Unknown parameter '·' [ 629.339762][T16204] fuse: Unknown parameter '0x0000000000000004' [ 629.901952][T16217] overlay: Unknown parameter 'context' [ 630.741814][T16239] fuse: Bad value for 'fd' [ 631.331694][T12322] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 631.477428][T16248] autofs: Unknown parameter '·' [ 631.635277][ T3452] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.645743][T12322] usb 1-1: Using ep0 maxpacket: 32 [ 631.663220][T12322] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 631.679047][T12322] usb 1-1: config 0 has no interface number 0 [ 631.706644][T12322] usb 1-1: config 0 interface 113 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1023 [ 631.742392][T12322] usb 1-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice=58.5f [ 631.752006][T12322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.765136][T12322] usb 1-1: Product: syz [ 631.777332][T12322] usb 1-1: Manufacturer: syz [ 631.784491][T12322] usb 1-1: SerialNumber: syz [ 631.793801][T12322] usb 1-1: config 0 descriptor?? [ 631.802989][T16242] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 631.973979][ T5134] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 631.981806][ T5134] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 631.990315][ T5134] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 631.999138][ T5134] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 632.006523][ T5134] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 632.014126][ T5134] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 632.025013][T16242] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 632.032426][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 632.037018][T12322] net1080 1-1:0.113 usb0: register 'net1080' at usb-dummy_hcd.0-1, NetChip TurboCONNECT, 96:4f:a4:31:74:b1 [ 632.061499][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 632.069268][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 632.078457][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 632.085980][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 632.093880][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 632.118354][T16255] lo speed is unknown, defaulting to 1000 [ 632.182008][T16259] fuse: Unknown parameter 'fd0x0000000000000004' [ 632.258869][T12322] usb 1-1: USB disconnect, device number 42 [ 632.274487][T12322] net1080 1-1:0.113 usb0: unregister 'net1080' usb-dummy_hcd.0-1, NetChip TurboCONNECT [ 632.303378][T16255] chnl_net:caif_netlink_parms(): no params data found [ 632.365259][T16255] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.372869][T16255] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.382270][T16255] bridge_slave_0: entered allmulticast mode [ 632.390274][T16255] bridge_slave_0: entered promiscuous mode [ 632.398714][T16255] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.406138][T16255] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.414160][T16255] bridge_slave_1: entered allmulticast mode [ 632.444972][T16255] bridge_slave_1: entered promiscuous mode [ 632.456578][ T2150] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 632.531306][T16255] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.545085][T16255] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.595724][T16255] team0: Port device team_slave_0 added [ 632.606806][ T2150] usb 8-1: Using ep0 maxpacket: 16 [ 632.608836][T16255] team0: Port device team_slave_1 added [ 632.623620][ T2150] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.636147][ T2150] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.648725][ T2150] usb 8-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 632.663098][T16255] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.665786][ T2150] usb 8-1: config 0 interface 0 has no altsetting 0 [ 632.672090][T16255] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.702976][ C0] vkms_vblank_simulate: vblank timer overrun [ 632.703298][ T2150] usb 8-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 632.713155][T16255] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.748154][ T2150] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.760493][T16255] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.769640][ T2150] usb 8-1: config 0 descriptor?? [ 632.770572][T16255] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 632.800459][ C0] vkms_vblank_simulate: vblank timer overrun [ 632.831541][T16270] kvm: kvm [16269]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x11a00000000 [ 632.843307][T16270] kvm: kvm [16269]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x11b00000800 [ 632.878243][T16255] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.293844][T16255] hsr_slave_0: entered promiscuous mode [ 633.302183][T16255] hsr_slave_1: entered promiscuous mode [ 633.320005][T16255] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 633.333908][T16255] Cannot create hsr debugfs directory [ 633.473841][T16262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.482599][T16262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.494661][T16262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 633.503409][T16262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 633.519472][ T2150] hid-generic 0003:045E:05DA.001A: ignoring exceeding usage max [ 633.532962][ T2150] hid-generic 0003:045E:05DA.001A: hidraw0: USB HID v0.00 Device [HID 045e:05da] on usb-dummy_hcd.7-1/input0 [ 633.578924][ T3452] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.628671][ T3452] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.681847][ T3452] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.778940][ T3452] bridge_slave_1: left allmulticast mode [ 633.785141][ T3452] bridge_slave_1: left promiscuous mode [ 633.793508][ T3452] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.800490][ T2150] usb 8-1: USB disconnect, device number 2 [ 633.811426][ T3452] bridge_slave_0: left allmulticast mode [ 633.818863][ T3452] bridge_slave_0: left promiscuous mode [ 633.824691][ T3452] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.913717][ T3452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 633.924548][ T3452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 633.934268][ T3452] bond0 (unregistering): Released all slaves [ 634.094185][ T3452] hsr_slave_0: left promiscuous mode [ 634.100192][ T3452] hsr_slave_1: left promiscuous mode [ 634.106667][ T3452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 634.114249][ T3452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 634.122976][ T3452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 634.131056][ T3452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 634.141258][ T3452] veth1_macvtap: left promiscuous mode [ 634.147247][ T3452] veth0_macvtap: left promiscuous mode [ 634.152789][ T3452] veth1_vlan: left promiscuous mode [ 634.158280][ T3452] veth0_vlan: left promiscuous mode [ 634.158833][ T54] Bluetooth: hci0: command tx timeout [ 634.765705][ T3452] team0 (unregistering): Port device team_slave_1 removed [ 634.881832][ T3452] team0 (unregistering): Port device team_slave_0 removed [ 635.142377][T16303] team0 (unregistering): Port device C removed [ 635.154563][T16303] team0 (unregistering): Port device team_slave_1 removed [ 635.208182][T16293] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 635.214234][T16293] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 635.256713][T16306] autofs: Unknown parameter '·' [ 635.270789][T16255] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 635.306359][T16255] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 635.377531][T16255] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 635.387848][T16255] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 635.420238][T16310] devpts: called with bogus options [ 635.456526][T16255] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.474107][T16255] 8021q: adding VLAN 0 to HW filter on device team0 [ 635.485634][ T1015] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.492774][ T1015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.505921][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.513059][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.689525][T16255] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 635.830819][T16255] veth0_vlan: entered promiscuous mode [ 636.106981][T16255] veth1_vlan: entered promiscuous mode [ 636.220522][T16255] veth0_macvtap: entered promiscuous mode [ 636.229080][T16255] veth1_macvtap: entered promiscuous mode [ 636.242818][T16255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.253795][T16255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.263723][T16255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.274405][T16255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.284778][T16255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.295283][T16255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.305603][T16255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 636.316733][T16255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.397934][T16255] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 636.575384][T16255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.734784][T16255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 636.776638][T16255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 636.892632][T16255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.073044][T16255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.084759][T16255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.095089][T16255] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.109445][T16255] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.133794][T16255] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 637.187745][T16255] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.205198][T16255] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.215072][T16255] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.225233][T16255] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.329269][ T3452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.348810][ T3452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.380502][ T9448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 637.390060][ T9448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.776256][T16356] tap0: tun_chr_ioctl cmd 1074025677 [ 638.781857][T16356] tap0: linktype set to 769 [ 638.787400][T16356] netlink: 'syz.0.2841': attribute type 4 has an invalid length. [ 638.795318][T16356] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2841'. [ 638.916368][T16373] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2845'. [ 638.933504][T16372] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2845'. [ 638.963840][T16356] syz.0.2841: attempt to access beyond end of device [ 638.963840][T16356] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 638.977803][T16356] XFS (nbd0): SB validate failed with error -5. [ 639.533101][ T5866] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 639.685481][ T5866] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 639.694126][ T5866] usb 8-1: config 0 has no interface number 0 [ 639.704414][ T5866] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 639.715911][ T5866] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.725066][ T5866] usb 8-1: Product: syz [ 639.729545][ T5866] usb 8-1: Manufacturer: syz [ 639.734546][ T5866] usb 8-1: SerialNumber: syz [ 639.741705][ T5866] usb 8-1: config 0 descriptor?? [ 639.953869][T16381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 639.962563][T16381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.971734][ T5866] dvb_usb_ec168 8-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 639.985529][ T5866] usb 8-1: USB disconnect, device number 3 [ 640.217101][T16402] FAULT_INJECTION: forcing a failure. [ 640.217101][T16402] name failslab, interval 1, probability 0, space 0, times 0 [ 640.229815][T16402] CPU: 0 UID: 0 PID: 16402 Comm: syz.0.2852 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 640.240590][T16402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 640.250652][T16402] Call Trace: [ 640.253937][T16402] [ 640.256864][T16402] dump_stack_lvl+0x241/0x360 [ 640.261547][T16402] ? __pfx_dump_stack_lvl+0x10/0x10 [ 640.266747][T16402] ? __pfx__printk+0x10/0x10 [ 640.271349][T16402] ? dst_alloc+0x12b/0x190 [ 640.275766][T16402] ? icmpv6_rt_has_prefsrc+0x50/0x3d0 [ 640.281149][T16402] ? ip6_link_failure+0x3c/0x4f0 [ 640.286114][T16402] ? rcu_is_watching+0x15/0xb0 [ 640.290900][T16402] should_fail_ex+0x3b0/0x4e0 [ 640.295575][T16402] should_failslab+0xac/0x100 [ 640.300253][T16402] __kmalloc_node_noprof+0xe1/0x4d0 [ 640.305476][T16402] ? alloc_slab_obj_exts+0x3a/0xa0 [ 640.310601][T16402] alloc_slab_obj_exts+0x3a/0xa0 [ 640.315558][T16402] __memcg_slab_post_alloc_hook+0x319/0x7e0 [ 640.321528][T16402] ? dst_alloc+0x12b/0x190 [ 640.325966][T16402] ? dst_alloc+0x12b/0x190 [ 640.330377][T16402] kmem_cache_alloc_noprof+0x287/0x380 [ 640.335837][T16402] ? __pfx_ip6_dst_gc+0x10/0x10 [ 640.340713][T16402] dst_alloc+0x12b/0x190 [ 640.344955][T16402] ip6_pol_route+0xb87/0x15d0 [ 640.349631][T16402] ? ip6_pol_route+0x198/0x15d0 [ 640.354483][T16402] ? __pfx_ip6_pol_route+0x10/0x10 [ 640.359590][T16402] ? rcu_is_watching+0x15/0xb0 [ 640.364350][T16402] fib6_rule_lookup+0x286/0x790 [ 640.369198][T16402] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 640.374914][T16402] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 640.380285][T16402] ? rcu_is_watching+0x15/0xb0 [ 640.385053][T16402] ? lock_acquire+0xe3/0x550 [ 640.389634][T16402] ? __pfx_lock_acquire+0x10/0x10 [ 640.394672][T16402] ? ipv6_skip_exthdr+0x614/0x710 [ 640.399721][T16402] ? ip6_route_output_flags+0x30/0x610 [ 640.405191][T16402] ip6_route_output_flags+0x38e/0x610 [ 640.410569][T16402] icmpv6_rt_has_prefsrc+0x50/0x3d0 [ 640.415779][T16402] icmp6_send+0xda4/0x2220 [ 640.420226][T16402] ? icmp6_send+0xbb8/0x2220 [ 640.424823][T16402] ? __pfx_icmp6_send+0x10/0x10 [ 640.429702][T16402] ? preempt_count_add+0x93/0x190 [ 640.434739][T16402] ? __asan_memset+0x23/0x50 [ 640.439355][T16402] ? xfrm_lookup_with_ifid+0x19fc/0x1f60 [ 640.445010][T16402] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 640.450812][T16402] ? __xfrm_decode_session+0x908/0xf70 [ 640.456285][T16402] ip6_link_failure+0x3c/0x4f0 [ 640.461165][T16402] ? vti6_tnl_xmit+0x13b5/0x1bd0 [ 640.466099][T16402] ? __pfx_ip6_link_failure+0x10/0x10 [ 640.471476][T16402] vti6_tnl_xmit+0x13be/0x1bd0 [ 640.476243][T16402] ? __pfx_vti6_tnl_xmit+0x10/0x10 [ 640.481362][T16402] ? rcu_is_watching+0x15/0xb0 [ 640.486152][T16402] ? __pfx_lock_acquire+0x10/0x10 [ 640.491173][T16402] dev_hard_start_xmit+0x27a/0x7d0 [ 640.496290][T16402] __dev_queue_xmit+0x1b73/0x3f50 [ 640.501313][T16402] ? ___neigh_create+0x1d6f/0x2320 [ 640.506419][T16402] ? __dev_queue_xmit+0x2f4/0x3f50 [ 640.511529][T16402] ? __pfx_lock_release+0x10/0x10 [ 640.516549][T16402] ? __pfx___dev_queue_xmit+0x10/0x10 [ 640.521914][T16402] ? rcu_is_watching+0x15/0xb0 [ 640.526672][T16402] ? rcu_is_watching+0x15/0xb0 [ 640.531430][T16402] ? neigh_connected_output+0x1d5/0x450 [ 640.536980][T16402] ? read_seqbegin+0x208/0x2b0 [ 640.541763][T16402] ? ndisc_constructor+0x5c9/0x7a0 [ 640.546880][T16402] ? __pfx_read_seqbegin+0x10/0x10 [ 640.551992][T16402] ? ___neigh_create+0x1d6f/0x2320 [ 640.557125][T16402] ? neigh_connected_output+0x3a7/0x450 [ 640.562694][T16402] ip6_finish_output2+0x12c7/0x17b0 [ 640.567896][T16402] ? ip6_finish_output2+0x63a/0x17b0 [ 640.573186][T16402] ? nf_hook+0x9e/0x450 [ 640.577346][T16402] ? __ip6_local_out+0x7c1/0x800 [ 640.582293][T16402] ? __pfx_ip6_finish_output2+0x10/0x10 [ 640.587879][T16402] ? __pfx_ip6_finish_output+0x10/0x10 [ 640.593352][T16402] ? __pfx___ip6_local_out+0x10/0x10 [ 640.598644][T16402] ? ip6_mtu+0x81/0x3f0 [ 640.602797][T16402] ip6_finish_output+0x41e/0x840 [ 640.607742][T16402] ip6_send_skb+0x1b1/0x3b0 [ 640.612268][T16402] ? ip6_send_skb+0xfd/0x3b0 [ 640.616868][T16402] udp_v6_send_skb+0xbc5/0x1880 [ 640.621728][T16402] udp_v6_push_pending_frames+0x139/0x210 [ 640.627468][T16402] udpv6_sendmsg+0xe63/0x32b0 [ 640.632171][T16402] ? deref_stack_reg+0x17c/0x210 [ 640.637139][T16402] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 640.642282][T16402] ? __kernel_text_address+0xd/0x40 [ 640.647508][T16402] ? unwind_get_return_address+0x4d/0x90 [ 640.653164][T16402] ? _parse_integer_limit+0x1b5/0x200 [ 640.658568][T16402] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 640.665358][T16402] ? sock_rps_record_flow+0x1a/0x400 [ 640.670664][T16402] ? inet_send_prepare+0x21/0x260 [ 640.675725][T16402] ? inet_send_prepare+0x5a/0x260 [ 640.680764][T16402] __sock_sendmsg+0xef/0x270 [ 640.685357][T16402] ____sys_sendmsg+0x52a/0x7e0 [ 640.690121][T16402] ? __pfx_____sys_sendmsg+0x10/0x10 [ 640.695408][T16402] ? __fget_files+0x2a/0x410 [ 640.699990][T16402] ? __fget_files+0x2a/0x410 [ 640.704570][T16402] __sys_sendmsg+0x269/0x350 [ 640.709164][T16402] ? __pfx_lock_release+0x10/0x10 [ 640.714189][T16402] ? __pfx___sys_sendmsg+0x10/0x10 [ 640.719302][T16402] ? __pfx_vfs_write+0x10/0x10 [ 640.724062][T16402] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 640.730386][T16402] ? rcu_is_watching+0x15/0xb0 [ 640.735172][T16402] ? rcu_is_watching+0x15/0xb0 [ 640.739964][T16402] do_syscall_64+0xf3/0x230 [ 640.744489][T16402] ? clear_bhb_loop+0x35/0x90 [ 640.749183][T16402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.755094][T16402] RIP: 0033:0x7f61dbf85d19 [ 640.759513][T16402] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.779121][T16402] RSP: 002b:00007f61dce24038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 640.787642][T16402] RAX: ffffffffffffffda RBX: 00007f61dc175fa0 RCX: 00007f61dbf85d19 [ 640.795618][T16402] RDX: 0000000004000040 RSI: 0000000020000000 RDI: 0000000000000003 [ 640.803660][T16402] RBP: 00007f61dce24090 R08: 0000000000000000 R09: 0000000000000000 [ 640.811730][T16402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.819723][T16402] R13: 0000000000000000 R14: 00007f61dc175fa0 R15: 00007ffec5396a98 [ 640.827735][T16402] [ 640.830858][ C0] vkms_vblank_simulate: vblank timer overrun [ 640.833399][T16405] ------------[ cut here ]------------ [ 640.842583][T16405] platform vkms: [drm] vblank wait timed out on crtc 0 [ 640.852140][T16405] WARNING: CPU: 0 PID: 16405 at drivers/gpu/drm/drm_vblank.c:1307 drm_wait_one_vblank+0x97c/0xa00 [ 640.863835][T16405] Modules linked in: [ 640.867795][T16405] CPU: 0 UID: 0 PID: 16405 Comm: syz.6.2853 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 640.879782][T16405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 640.890043][T16405] RIP: 0010:drm_wait_one_vblank+0x97c/0xa00 [ 640.896894][T16405] Code: 80 3c 08 00 74 08 4c 89 ff e8 f0 25 9a fc 49 8b 1f 48 c7 c7 60 4a 71 8c 4c 89 f6 48 89 da 8b 5c 24 0c 89 d9 e8 95 f7 f6 fb 90 <0f> 0b 90 90 49 be 00 00 00 00 00 fc ff df e9 68 fb ff ff 44 89 e9 [ 640.916909][T16405] RSP: 0018:ffffc9000be2fac0 EFLAGS: 00010246 [ 640.924396][T16405] RAX: 6ed5ed439e64cc00 RBX: 0000000000000000 RCX: 0000000000080000 [ 640.932581][T16405] RDX: ffffc9000e3ad000 RSI: 0000000000021832 RDI: 0000000000021833 [ 640.940675][T16405] RBP: ffffc9000be2fc00 R08: ffffffff81600962 R09: fffffbfff1cfa210 [ 640.948917][T16405] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: 1ffff920017c5f64 [ 640.958221][T16405] R13: 00000000000092e4 R14: ffffffff8c84a7e0 R15: ffff888142341010 [ 640.966340][T16405] FS: 00007f8209f156c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 640.975422][T16405] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 640.982139][T16405] CR2: 0000000020000340 CR3: 000000003031a000 CR4: 00000000003526f0 [ 640.990546][T16405] Call Trace: [ 640.994043][T16405] [ 640.997026][T16405] ? __warn+0x165/0x4d0 [ 641.001230][T16405] ? drm_wait_one_vblank+0x97c/0xa00 [ 641.006711][T16405] ? report_bug+0x2b3/0x500 [ 641.011321][T16405] ? drm_wait_one_vblank+0x97c/0xa00 [ 641.017409][T16405] ? handle_bug+0x60/0x90 [ 641.021810][T16405] ? exc_invalid_op+0x1a/0x50 [ 641.026646][T16405] ? asm_exc_invalid_op+0x1a/0x20 [ 641.031749][T16405] ? __warn_printk+0x292/0x360 [ 641.036774][T16405] ? drm_wait_one_vblank+0x97c/0xa00 [ 641.042450][T16405] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 641.048235][T16405] ? __pfx_autoremove_wake_function+0x10/0x10 [ 641.054515][T16405] ? drm_vblank_get+0x173/0x270 [ 641.059527][T16405] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 641.065344][T16405] drm_fb_helper_ioctl+0x114/0x140 [ 641.070557][T16405] do_fb_ioctl+0x40a/0x7b0 [ 641.075828][T16405] ? __pfx_do_fb_ioctl+0x10/0x10 [ 641.080867][T16405] ? smk_tskacc+0x300/0x370 [ 641.085568][T16405] ? smack_file_ioctl+0x29e/0x3a0 [ 641.090700][T16405] ? __pfx_smack_file_ioctl+0x10/0x10 [ 641.096303][T16405] ? __fget_files+0x2a/0x410 [ 641.101004][T16405] ? __fget_files+0x2a/0x410 [ 641.106424][T16405] ? __pfx_fb_ioctl+0x10/0x10 [ 641.111208][T16405] __se_sys_ioctl+0xf5/0x170 [ 641.116141][T16405] do_syscall_64+0xf3/0x230 [ 641.120710][T16405] ? clear_bhb_loop+0x35/0x90 [ 641.125638][T16405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.131693][T16405] RIP: 0033:0x7f8209185d19 [ 641.136918][T16405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.156698][T16405] RSP: 002b:00007f8209f15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 641.165911][T16405] RAX: ffffffffffffffda RBX: 00007f8209376080 RCX: 00007f8209185d19 [ 641.174024][T16405] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000005 [ 641.182061][T16405] RBP: 00007f8209201a20 R08: 0000000000000000 R09: 0000000000000000 [ 641.190176][T16405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.198793][T16405] R13: 0000000000000000 R14: 00007f8209376080 R15: 00007fff224feca8 [ 641.206943][T16405] [ 641.210113][T16405] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 641.217405][T16405] CPU: 0 UID: 0 PID: 16405 Comm: syz.6.2853 Not tainted 6.13.0-rc2-syzkaller-00292-ga446e965a188 #0 [ 641.228156][T16405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 641.238237][T16405] Call Trace: [ 641.241516][T16405] [ 641.244439][T16405] dump_stack_lvl+0x241/0x360 [ 641.249117][T16405] ? __pfx_dump_stack_lvl+0x10/0x10 [ 641.254311][T16405] ? __pfx__printk+0x10/0x10 [ 641.258892][T16405] ? _printk+0xd5/0x120 [ 641.263046][T16405] ? __init_begin+0x41000/0x41000 [ 641.268069][T16405] ? vscnprintf+0x5d/0x90 [ 641.272388][T16405] panic+0x349/0x880 [ 641.276275][T16405] ? __warn+0x174/0x4d0 [ 641.280428][T16405] ? __pfx_panic+0x10/0x10 [ 641.284858][T16405] ? __warn+0x174/0x4d0 [ 641.289002][T16405] ? __warn+0x32c/0x4d0 [ 641.293151][T16405] __warn+0x344/0x4d0 [ 641.297123][T16405] ? drm_wait_one_vblank+0x97c/0xa00 [ 641.302411][T16405] report_bug+0x2b3/0x500 [ 641.306742][T16405] ? drm_wait_one_vblank+0x97c/0xa00 [ 641.312021][T16405] handle_bug+0x60/0x90 [ 641.316172][T16405] exc_invalid_op+0x1a/0x50 [ 641.320664][T16405] asm_exc_invalid_op+0x1a/0x20 [ 641.325509][T16405] RIP: 0010:drm_wait_one_vblank+0x97c/0xa00 [ 641.331398][T16405] Code: 80 3c 08 00 74 08 4c 89 ff e8 f0 25 9a fc 49 8b 1f 48 c7 c7 60 4a 71 8c 4c 89 f6 48 89 da 8b 5c 24 0c 89 d9 e8 95 f7 f6 fb 90 <0f> 0b 90 90 49 be 00 00 00 00 00 fc ff df e9 68 fb ff ff 44 89 e9 [ 641.350996][T16405] RSP: 0018:ffffc9000be2fac0 EFLAGS: 00010246 [ 641.357055][T16405] RAX: 6ed5ed439e64cc00 RBX: 0000000000000000 RCX: 0000000000080000 [ 641.365034][T16405] RDX: ffffc9000e3ad000 RSI: 0000000000021832 RDI: 0000000000021833 [ 641.373003][T16405] RBP: ffffc9000be2fc00 R08: ffffffff81600962 R09: fffffbfff1cfa210 [ 641.380974][T16405] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: 1ffff920017c5f64 [ 641.388935][T16405] R13: 00000000000092e4 R14: ffffffff8c84a7e0 R15: ffff888142341010 [ 641.396899][T16405] ? __warn_printk+0x292/0x360 [ 641.401665][T16405] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 641.407294][T16405] ? __pfx_autoremove_wake_function+0x10/0x10 [ 641.413354][T16405] ? drm_vblank_get+0x173/0x270 [ 641.418199][T16405] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 641.423831][T16405] drm_fb_helper_ioctl+0x114/0x140 [ 641.428937][T16405] do_fb_ioctl+0x40a/0x7b0 [ 641.433352][T16405] ? __pfx_do_fb_ioctl+0x10/0x10 [ 641.438286][T16405] ? smk_tskacc+0x300/0x370 [ 641.442798][T16405] ? smack_file_ioctl+0x29e/0x3a0 [ 641.447811][T16405] ? __pfx_smack_file_ioctl+0x10/0x10 [ 641.453176][T16405] ? __fget_files+0x2a/0x410 [ 641.457759][T16405] ? __fget_files+0x2a/0x410 [ 641.462344][T16405] ? __pfx_fb_ioctl+0x10/0x10 [ 641.467018][T16405] __se_sys_ioctl+0xf5/0x170 [ 641.471606][T16405] do_syscall_64+0xf3/0x230 [ 641.476108][T16405] ? clear_bhb_loop+0x35/0x90 [ 641.480775][T16405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.486666][T16405] RIP: 0033:0x7f8209185d19 [ 641.491071][T16405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.510665][T16405] RSP: 002b:00007f8209f15038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 641.519078][T16405] RAX: ffffffffffffffda RBX: 00007f8209376080 RCX: 00007f8209185d19 [ 641.527051][T16405] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000005 [ 641.535016][T16405] RBP: 00007f8209201a20 R08: 0000000000000000 R09: 0000000000000000 [ 641.542973][T16405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.550936][T16405] R13: 0000000000000000 R14: 00007f8209376080 R15: 00007fff224feca8 [ 641.558903][T16405] [ 641.562175][T16405] Kernel Offset: disabled [ 641.566500][T16405] Rebooting in 86400 seconds..