last executing test programs: 23m17.596548311s ago: executing program 4 (id=44): r0 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x3, 0x88, 0x0, 0x0, 0x6, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) 23m17.113010343s ago: executing program 4 (id=46): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r2, &(0x7f0000001340)=[{&(0x7f0000000a40)='d', 0xfdef}], 0x1) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="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", 0x2000, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 23m14.527930825s ago: executing program 4 (id=50): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200087300fe8000000000000000000020000000bbfe8000"/50], 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/power/pm_debug_messages', 0x21a02, 0x62) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, 0x0, 0xfe33) sendfile(r1, r3, 0x0, 0x101) mmap$binder(&(0x7f00008d6000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x5) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) symlink(&(0x7f00000049c0)='.\x00', &(0x7f00000059c0)='./file0\x00') ioctl$VIDIOC_TRY_DECODER_CMD(r3, 0xc0485661, &(0x7f0000000300)={0x1, 0x1, @start={0x1}}) 23m13.435293417s ago: executing program 4 (id=53): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000800)={0x0, {0x1, 0x0, 0x4, 0x3, 0x3, 0x80000001}}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000000800000000040000090000", @ANYRES32, @ANYBLOB], 0x50) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c03414adb7fa1c790a421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e609000cf5329cb7f1821ec7ecca1db0eb2d7144f29af11fe655838a74d923d12c78e80000004d0010"], 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'}) ioctl$UI_DEV_SETUP(r5, 0x5501, 0x0) write$uinput_user_dev(r5, &(0x7f0000000900)={'syz1\x00', {0x0, 0x0, 0x6}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x3, 0x0, 0x20, 0x3, 0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x101], [0x10, 0x0, 0x7, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0x1, 0x800, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x3, 0x0, 0x5, 0x40000000, 0xffffffff, 0xfffffffc, 0x7fffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x8c, 0x0, 0x0, 0x4, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x4, 0x0, 0x7, 0x0, 0xfffffffc], [0x0, 0x4, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0xb78, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x520, 0xffffffff, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0xfffffffc, 0x2af, 0x0, 0x9, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xff, 0x4000005, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0xfffffffe], [0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x20e, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x1, 0x7fff, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x3, 0x4, 0xfffffffe, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x3, 0x3, 0xfffffffd, 0x53591b27, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x0, 0x3]}, 0x45c) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) 23m11.870957854s ago: executing program 4 (id=58): pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0/../file0\x00') 23m10.832096219s ago: executing program 4 (id=60): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shmget$private(0x0, 0x4000, 0x808, &(0x7f0000007000/0x4000)=nil) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000040)=@id, 0x10) shutdown(r2, 0x2) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x19, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) 22m55.224182049s ago: executing program 32 (id=60): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shmget$private(0x0, 0x4000, 0x808, &(0x7f0000007000/0x4000)=nil) socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000040)=@id, 0x10) shutdown(r2, 0x2) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x19, 0x0, &(0x7f0000000280)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) 1m34.522443361s ago: executing program 3 (id=2619): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000000480)={0x0, 0x1064, 0x80, 0x0, 0x264}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x6}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000040)="62031400d755af176510120800afbcf72fe12b7f96e5521c8cf217", 0x1b}, {&(0x7f00000008c0)="d898f51891d3dee6b6e6fbfaff1d08000000d65de3cbbc0ee9880bfe2ec06d4853af46355cbe", 0x26}, {&(0x7f00000013c0)="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", 0xf29}], 0x3}, 0x4084) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x2, 0xa3d8, &(0x7f00000005c0)=[{&(0x7f0000000240)="5db5bd", 0x3}], 0x10000000000002a8, 0x8, 0x1, {0x2}}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f401088070"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000180)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x1, 0xfffffffa, 0x17, @empty, @mcast1, 0x40, 0x0, 0x4fd, 0xfffffffd}}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000b40)={0x5d8, r5, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}, @WGDEVICE_A_PEERS={0x56c, 0x8, 0x0, 0x1, [{0x1dc, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x8d, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @remote}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "082fe3cfe8813cd1b83759f8304d25dc84324accd9ef38f643678c43ae548be8"}, @WGPEER_A_ALLOWEDIPS={0x180, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}, {0x5, 0x3, 0x2}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @broadcast}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2ab8a5e6e2c1381666e43e4067f694fc7b5bc0f46abcdfac7c5ed543ed60f2e4"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0967df71c9d8f97598ac1bc01eb7d8a2d27c704d42fae9594ecef33ad7ef1ecd"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0xb4, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_ALLOWEDIPS={0x44, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2f}}}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "11ccc3e435763087fce4353f74ab80787be3705a6ba58be41bdc2c7be5a9ee22"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x14c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x10c, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x753, @mcast1, 0x9}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @empty}}]}, {0xc0, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x6f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1, @loopback, 0x40}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8d263172e830dadde335e433605cec7b67b5838ecbe16e3b32310a8cddc078f5"}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_FLAGS={0x8}]}, 0x5d8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) listen(r4, 0x0) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) r9 = epoll_create(0x4) r10 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f0000000040)={0x90000000}) 1m32.877862455s ago: executing program 3 (id=2622): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000640)="d48c8225ddfdf2c06c27763617468581389d34126760ba3dd0fe077a7c2ce378dd62cafeeb4ba1493766d09fd561d69a5bf8109ffcd3e43d8c16b9c3fa92d4439c5af1fa4775d01dcf0748a24ab51b52fbe75287a4b9aaa18fd479bdd154b4efe531a242d90a1ca2799c242bfd4ddd8271448d3415bd3a907ad340dc2fa2471393212d02eb25242808cffdc4e7a646211c18ac8602f5fc1e4f82b72871a8d42f37988365ff226c1523bf01617976641421438e16378094c94f2e55a44150d9a358d92606afb12f21a63daadbb143d6ccdae88d53521b9fe51f", 0xd9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a6590", 0x38}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae", 0xe}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}}], 0x2, 0xc0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1m31.923849708s ago: executing program 3 (id=2628): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xac) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$dsp1(0xffffff9c, &(0x7f00000001c0), 0x24003, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0x4c, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) ioctl$SOUND_OLD_MIXER_INFO(r0, 0x80304d65, &(0x7f0000000280)) shutdown(0xffffffffffffffff, 0x1) mount$overlay(0x0, 0x0, &(0x7f0000000200), 0xd4, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 1m30.503743959s ago: executing program 3 (id=2632): r0 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1/file0\x00', 0x111) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000000)={0x1, 0x4, 0x8bd0, 0x10003, 0x0, "4a073b267df2e98c69ba36c5095c911abad88f", 0x4, 0x7}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r3, 0x4188aea7, &(0x7f0000000000)=ANY=[@ANYRES64=r0]) 1m30.232354053s ago: executing program 3 (id=2635): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16=r0, @ANYRES16=r0], 0x4c}}, 0x4000804) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32=r4], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m29.943856981s ago: executing program 3 (id=2636): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x10a}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000a7000/0x4000)=nil, 0x4000}, 0x2}) getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xe, 0x3c, &(0x7f00000000c0)="e0b9547e98a78c1e00b111f0f9ec", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(&(0x7f0000000280)) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8, 0x1) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x30000851) r5 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_DQEVENT(r5, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r5, 0xc0506107, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000040)={0xfffffffffffffff9, 0x4, 0x0, 0x89b}) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c60000", 0x4b}], 0x1) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6, 0x0, 0x102000000}, 0x18) 1m29.786162521s ago: executing program 33 (id=2636): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x10a}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000a7000/0x4000)=nil, 0x4000}, 0x2}) getpid() r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xe, 0x3c, &(0x7f00000000c0)="e0b9547e98a78c1e00b111f0f9ec", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x0, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) times(&(0x7f0000000280)) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8, 0x1) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x30000851) r5 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_DQEVENT(r5, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r5, 0xc0506107, 0x0) ioctl$IOC_PR_PREEMPT(r5, 0x40046109, &(0x7f0000000040)={0xfffffffffffffff9, 0x4, 0x0, 0x89b}) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c60000", 0x4b}], 0x1) ioctl$FS_IOC_GETFSLABEL(r1, 0x800452d2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r6, 0x0, 0x102000000}, 0x18) 17.492930482s ago: executing program 2 (id=2916): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r4}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_gettime(r5, 0x0) rt_sigprocmask(0x2, &(0x7f0000001140)={[0x8386]}, 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 14.824536947s ago: executing program 2 (id=2920): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16=r0, @ANYRES16=r0], 0x4c}}, 0x4000804) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32=r4], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 14.450339345s ago: executing program 2 (id=2922): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x1c1002) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) dup(0xffffffffffffffff) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000190001002bbd7000000000000a0000000000c80a0000000008"], 0x38}}, 0x804) setsockopt$inet_group_source_req(r3, 0x0, 0x15, &(0x7f0000000a40)={0x0, {{0x2, 0x0, @dev}}, {{0x2, 0x0, @loopback}}}, 0x3) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, 0x0, 0x0) timer_create(0xb, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000000)={0x0, 0x7, 0x1, 0x0, 0x0, 0x9, '&\x00', 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0xe}) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000140)={0x1, {0x80000000, 0x4, 0x20009, 0x8000006}, {0x10, 0x3, 0x7, 0x800}, {0x8001, 0x1}}) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz0\x00', @default, 0xfffffdb8, 0x2, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) 13.49334119s ago: executing program 2 (id=2924): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x298, 0x30, 0x300, 0x71bd2a, 0x25dfdbff, {}, [{0x284, 0x1, [@m_gact={0x1ec, 0x17, 0x0, 0x0, {{0x9}, {0x4}, {0x1bd, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x30, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_bpf={0x2c, 0xa, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0x38, 0x10, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 12.916729965s ago: executing program 2 (id=2925): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000200)=0x7ffffff8) ioctl$EVIOCGRAB(r3, 0x40044590, 0x0) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000180)={r1, 0x58, &(0x7f0000000100)}, 0x10) syz_open_dev$evdev(0x0, 0x0, 0x60000) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) 11.671258705s ago: executing program 2 (id=2927): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000200)=0x7ffffff8) ioctl$EVIOCGRAB(r3, 0x40044590, 0x0) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000180)={r1, 0x58, &(0x7f0000000100)}, 0x10) syz_open_dev$evdev(0x0, 0x0, 0x60000) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) 9.345847175s ago: executing program 5 (id=2933): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16], 0x4c}}, 0x4000804) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 9.100907855s ago: executing program 6 (id=2934): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x298, 0x30, 0x300, 0x71bd2a, 0x25dfdbff, {}, [{0x284, 0x1, [@m_gact={0x1ec, 0x17, 0x0, 0x0, {{0x9}, {0x4}, {0x1bd, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x30, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_bpf={0x2c, 0xa, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_bpf={0x38, 0x10, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x298}, 0x1, 0x0, 0x0, 0x4000810}, 0x20040800) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 8.336341721s ago: executing program 5 (id=2937): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @broadcast}, 0x14) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002d000b02d25a806f8c6394f9031a0400", 0x14}], 0x1}, 0x0) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000001a00000a8500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000000000002000040"]) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0x14, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x30, r9, 0x1, 0x0, 0x100000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x0, 0x8}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x9004) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r11, &(0x7f0000000140)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x9, 0x0) 7.980570539s ago: executing program 6 (id=2938): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffff"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002ac0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000000021000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.775815151s ago: executing program 0 (id=2939): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x509, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r4}, 0x10) sendto$inet6(r2, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r5}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r6, 0xc0305710, &(0x7f0000000000)={0xa1674f8ecb7b78f5, 0x81, 0x55, 0x0, 0x7}) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/consoles\x00', 0x0, 0x0) r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r8, r7, &(0x7f0000002080)=0x64, 0x23b) fcntl$getownex(r8, 0x10, &(0x7f0000000080)={0x0, 0x0}) sched_setscheduler(r9, 0x0, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a20000000010a01000000000000000000010000000900010073797a300000000040000000160a01000000000000000000050000000900010063797a30000000000900020073797a31000000001400038008000240000000020800014000000000380000001a0a0101000b000000000000010000000900020073797a3000000000090001"], 0xc0}}, 0x0) 7.59428993s ago: executing program 6 (id=2940): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16], 0x4c}}, 0x4000804) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32=r3], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.540496441s ago: executing program 1 (id=2941): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b70800000000"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32=r3], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.349973903s ago: executing program 5 (id=2942): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x200, 0x104, 0x16}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x3cd842, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000300000900020073857a30000000000800410073697700140033006c6f00000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x0, 0x0, 0x0, 0x5b4230ff, 0x0, 0x0, 0x40f00, 0x2a, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf739, @void, @value}, 0x94) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x2c}, 0x44004) 7.34873792s ago: executing program 6 (id=2943): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000400)={0xa}) syz_usb_connect(0x4, 0x24, 0x0, 0x0) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) 7.288723937s ago: executing program 1 (id=2944): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = getpgrp(0x0) kcmp(r4, r3, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) openat$rfkill(0xffffffffffffff9c, &(0x7f0000002ac0), 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x0) 7.20438093s ago: executing program 0 (id=2945): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002ac0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000000021000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32=r3], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 6.275141598s ago: executing program 0 (id=2946): r0 = socket$packet(0x11, 0xa, 0x300) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa}}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x20048498}, 0x48011) syz_emit_ethernet(0x2e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000002080045000020000e08000084907800000000ffffffffdd9dec79219eb57f00d024c7a8325427483dc530fa152385c37c2dc5d04932bddbecf8e1078ee7aeb73ccfa53aaa5170e2b6f316a31a8adce77c679be67e6dafd824219e66e5439c8da12cceb621ed45a5e6f8a43386866f324bc0275c2fe454fde9ce9bee759907c7a2d48ccba21adbe4475d0f16f4c8717f249a59531cedc02d29ea24c989b7dbd4a679fa015500f46dfbe0a453f652067544369f45f796b72a28e82531b6"], 0x0) 6.099606024s ago: executing program 5 (id=2947): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0xdce, &(0x7f0000000480)={0x0, 0x40007734, 0x80, 0x0, 0x40000183}, &(0x7f0000000000), 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000b00)=0x7) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x9, 0x0) io_setup(0x4, &(0x7f0000000340)=0x0) io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r3, 0x0, 0x0, 0x80000000, 0x0, 0x1}]) r5 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r5, 0xc0044dff, &(0x7f0000000100)=0xf5) syz_genetlink_get_family_id$net_dm(&(0x7f0000000200), r1) ioperm(0x0, 0x9, 0x3) prctl$PR_SET_SECCOMP(0x41, 0x2, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)=""/91, &(0x7f0000000080)=0x5b) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000180), 0x180, 0x0) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r1) sendmsg$NFC_CMD_GET_SE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r6, 0x709}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="a4000000000801020000000000000000000000031c0004800800014000000000080001400000700008000140000000050900010073797a300000000014000480080001400000000608000140"], 0xa4}, 0x1, 0x0, 0x0, 0x8000}, 0x4000090) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0xf, 0x400000000000, 0x25, 0x8, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x40000000000e7, 0x0, 0x2}]) r7 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f00000003c0)='iocharset', &(0x7f0000000400)='io#harsetY\\\b\x17T=-\x01\xcb\xdenAb\x87\xac\xe8$\xdb4\xde\x01\xaeR\x19\xb3\xcc\x89G\xf9\xe2\xc5\xeae\xd2\xc9\xdb\xb4EDOC\xe6y\xc8 \xa0\x87\x82xO\xacMjL\xe6\\\x83\xef^\x032\'\'^\xeb\xbf\xbdy\xe1\x8e\x01\xcc\x0e\xfc\xa3\"\xf1d\xce\x05\xe1%\x95\x1d\x88\xeb\xde\xd7\x82Nz\x06k\xcen\v\xce\x193\x05\xbe\xf6\x00\x16R\x83j^\xf4\xaf\xbeq{\x92q\xc9\x96$\xb7\xc7\x8f\xce\x05J\x927\x01\xdf\xc6\'\x9c\xcb\xad\xfa\xd3\x9a\xb6\x02\x97%\x03|\x94^N\x19Q^}\x97\xa9\xdb\x83\xd2\x95\xe8\x03\xecR\xdc\x00\x00', 0x0) 6.018476607s ago: executing program 0 (id=2948): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0) writev(r0, &(0x7f0000002a80)=[{&(0x7f0000000340)="48e35492ff63a19b117b0ecb704de0af33845f11058bb6a78bd8a50d89a0431d713b11e73c2a2bb6ad15c33103fa6001fd564237c468c7abecd8dfe168565f407186f6e5", 0x44}, {0x0}], 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/467, @ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = add_key(&(0x7f00000004c0)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$read(0xb, r2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x30313953, 0x0, 0xa, [{}, {0x10}, {}, {0xfffffffe}, {}, {}, {0x0, 0xfffffffd}], 0x0, 0xfd, 0x3, 0x0, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) ioctl$FIOCLEX(r3, 0x5451) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffffff, 0x0, r5, 0x0, 0x276) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x18, &(0x7f0000000980)=ANY=[@ANYBLOB="2166fdfab368f05e0680dcebe0180000009a01000000000000050000008f0c0000d5903d0fe25e92e49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a8000000de48eb04a23fd18dec90db36f408ebdcd557a2320657cc03298123cc892b762675577d309b6e97d5c60c2e7914bd1126fd0d8067883f546b8741c15064daaf8ab6800166bb56470baa4a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b7463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550998e08189ca17a4517ee7ab6ec9d9447e1cad8cbe793f98f4f345b49efca70adde0be0ab1fe33f90982", @ANYRES32=r6], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1, 0x15, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x10, 0xb, @void, @value}, 0x94) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x20000000008) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) 4.714876931s ago: executing program 6 (id=2949): prlimit64(0x0, 0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d00000085000000500000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 4.428168707s ago: executing program 5 (id=2950): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000000000950000000000000089e2d90aa1795cc26efb1dacf01150510936875c66d6a7d6eb12d4cdbc5c0ce0d29df91940d8ca08008e7aa5b3c9a10909d6e18b263131bf965f55746df5189a2e23905ae4dc5340e0eb74eb523d5b77a763cccb768b4453c8b1b1dd0a71983b5c2cfe11f3d30228772b0b798ebaf5abde2ce3ec34f8c6f13ee1f181ac563ba7a7edc9be94452da6d7eb67ae3243cb393245efd0dd21de9553cbd1a8516282de458c44d1ddae97af584de743d44ed18d20dd3b2c42cf1e8b27788dfc562367d46197198cd19fda89a6feca6c738b1d4b2522"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_usb_connect(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000280), 0x8000000004, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f0000000040)={0x9, 0x1, 0x2, "f819ebf45608e255b61c5deb3eb574d486d27e0600000000040000000006f100"}) fcntl$addseals(r3, 0x409, 0xf) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x0) accept4$unix(r5, 0x0, 0x0, 0x0) inotify_init1(0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000640)=@filter={'filter\x00', 0x2, 0x4, 0x4a8, 0xffffffff, 0xc8, 0xc8, 0x0, 0xfeffffff, 0xffffffff, 0x4f8, 0x4f8, 0x4f8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@private1, @mcast1, [], [], 'macsec0\x00', 'rose0\x00'}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x4, 0x0, 0x40, 0x0, 0x2, 0xf8e74ba, 0x1ff, 0x5d8}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc}, {}, {0xffff, 0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000e00)={@fallback=r6, 0x15, 0x1, 0xd29, &(0x7f00000000c0)=[0x0], 0x1, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000e40)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[], 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000300)={'erspan0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x80, 0x700, 0x5, 0x1, {{0xd, 0x4, 0x0, 0xa, 0x34, 0x65, 0x0, 0x6, 0x4, 0x0, @private=0xa010101, @multicast2, {[@cipso={0x86, 0x1f, 0x0, [{0x5, 0x12, "44d2b2bc4753d30974f9ce53fb996b17"}, {0x0, 0x7, "83d850dda1"}]}]}}}}}) r9 = creat(&(0x7f0000000340)='./file0\x00', 0xecf86c37d53049cc) close(r9) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r8, @ANYRES32=r0, @ANYBLOB="060000000a000000874a1912c541cc189f2dbbfc72b43e4a978e58d173e3d6a789bfed9491b8ee1b0478004c528d6c72802acef467438171632c141d3705d9f77b3e69e76f2d89c4a7fac89ebe8dab5b0ca4e4b4b9394605bca7883e771afd6d32fbf2955d240d70dcb927a463eae0a03cfb7e1a0fc39b7120b015b816752963ac850c2900d4744648623e5ea55b46a5e9e2b3bca93b82c257a9b7a14641ff7ec764540eb2d74f5ab1362fc298e77994", @ANYRES32=r0, @ANYBLOB, @ANYRES32=r9, @ANYBLOB, @ANYRES64=r7], 0x20) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f0000000380)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r10, 0x40182103, &(0x7f0000000240)={r11, 0x1, r10, 0x6}) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) 4.358566247s ago: executing program 1 (id=2951): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0xfffffffe, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000080)={0x3, 0x6, 0x65c}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x679fd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r6, 0x545c, 0x7cb7562f2d67) ioctl$TIOCMSET(r6, 0x5418, &(0x7f0000000140)=0xfffffdfb) r7 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @ioapic={0x0, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x0, 0x81, '\x00', 0x7f}, {0x41, 0xf0, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x9, '\x00', 0x11}, {0x7, 0x8, 0x3, '\x00', 0x8f}, {0xfe, 0x7c, 0x3, '\x00', 0xfd}, {0xf, 0x2, 0x8, '\x00', 0xaa}, {0x7, 0x8, 0x4, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0xa, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xfc, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x4c, 0x3, '\x00', 0xa}, {0x8, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0xc, 0x5e, 0x4, '\x00', 0x2}, {0x5, 0x5, 0xf, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xf, '\x00', 0x3}, {0x5e, 0x6, 0xb, '\x00', 0x3}, {0x7f, 0x5, 0x7, '\x00', 0x4}, {0xb3, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x0, '\x00', 0x7}, {0x81, 0xc, 0x92, '\x00', 0x8}]}}) mount$overlay(0x0, 0x0, 0x0, 0x44002, 0x0) mremap(&(0x7f000013c000/0x4000)=nil, 0x4000, 0x3000, 0x2, &(0x7f000051f000/0x3000)=nil) ioperm(0x2, 0x0, 0xab9) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, 0x0, 0x8, 0x0) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x1, 0x2, 0x1, 0x3, 0x2}, 0x20) 4.062221777s ago: executing program 0 (id=2952): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r3, 0x40044590, &(0x7f0000000200)=0x7ffffff8) ioctl$EVIOCGRAB(r3, 0x40044590, 0x0) bpf$BPF_GET_MAP_INFO(0x3, &(0x7f0000000180)={r1, 0x58, &(0x7f0000000100)}, 0x10) syz_open_dev$evdev(0x0, 0x0, 0x60000) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r4, &(0x7f0000002080)={0xfc, {"a2336848149e516d4b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9903f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928d28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f2730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b81305c038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849cd9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484539ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1f93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b2804563407308c58c89d9e99c81769177e6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463373b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e080000007ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3933ed07c2b8081c128ad2706f48261ff07000000000000613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59500000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 3.296375254s ago: executing program 1 (id=2953): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0) writev(r0, &(0x7f0000002a80)=[{&(0x7f0000000340)="48e35492ff63a19b117b0ecb704de0af33845f11058bb6a78bd8a50d89a0431d713b11e73c2a2bb6ad15c33103fa6001fd564237c468c7abecd8dfe168565f407186f6e5", 0x44}, {0x0}], 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000ac0)=ANY=[@ANYBLOB="611267000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf67000000000000160602000fff52007607000010000000d60700000ee60000bf050000000000001f63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070400000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999f9d60bb39d0af449deaa27ea949e8f9000d885dfea2783835e29eb532ba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f2686ee970d6482a2e7ddbf51c74ccac1c7b21bde7d1af255d6ebff9bff35e3888a0e356d82e43407a6d7fa94b2100204000000000000009ab62d7b07ba0a71a72145edade9941f04000000000000004ea9e4c70ef8b7407740ab3312edee62a4dc2fc85755d387bfa1bc8eb71fbe11b2216cc8d1f0160c237d929b49da28724b95555b74be2f76fb5f330b015a68587a75c01300"/467, @ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = add_key(&(0x7f00000004c0)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$read(0xb, r2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x30313953, 0x0, 0xa, [{}, {0x10}, {}, {0xfffffffe}, {}, {}, {0x0, 0xfffffffd}], 0x0, 0xfd, 0x3, 0x0, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) ioctl$FIOCLEX(r3, 0x5451) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffffff, 0x0, r5, 0x0, 0x276) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x18, &(0x7f0000000980)=ANY=[@ANYBLOB="2166fdfab368f05e0680dcebe0180000009a01000000000000050000008f0c0000d5903d0fe25e92e49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a8000000de48eb04a23fd18dec90db36f408ebdcd557a2320657cc03298123cc892b762675577d309b6e97d5c60c2e7914bd1126fd0d8067883f546b8741c15064daaf8ab6800166bb56470baa4a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b7463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550998e08189ca17a4517ee7ab6ec9d9447e1cad8cbe793f98f4f345b49efca70adde0be0ab1fe33f90982", @ANYRES32=r6], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1, 0x15, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x10, 0xb, @void, @value}, 0x94) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r7, 0x400455c8, 0x20000000008) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xe, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x12, &(0x7f0000000440)=""/18, 0x41000, 0x4a, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000400)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0xfffffffe, 0x10, 0x800, 0x5}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000700)=[{0xfffffffd, 0x484, 0x8}, {0x3, 0x5, 0x5}, {0x5, 0x4, 0xe, 0x5}, {0x3, 0x3, 0xe, 0x7}, {0x5, 0x10, 0xb, 0x2}], 0x10, 0x4, @void, @value}, 0x94) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) 1.66405587s ago: executing program 1 (id=2954): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000001cc0), r0) sendmsg$NFC_CMD_GET_DEVICE(r0, 0x0, 0x4000000) 1.553929977s ago: executing program 0 (id=2955): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002ac0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000000021000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32=r3], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.288426241s ago: executing program 6 (id=2956): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x141202, 0x0) writev(r0, &(0x7f0000002a80)=[{&(0x7f0000000340)="48e35492ff63a19b117b0ecb704de0af33845f11058bb6a78bd8a50d89a0431d713b11e73c2a2bb6ad15c33103fa6001fd564237c468c7abecd8dfe168565f407186f6e5", 0x44}, {0x0}], 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000ac0)=ANY=[@ANYBLOB="611267000000000061134c0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf67000000000000160602000fff52007607000010000000d60700000ee60000bf050000000000001f63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070400000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999f9d60bb39d0af449deaa27ea949e8f9000d885dfea2783835e29eb532ba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f2686ee970d6482a2e7ddbf51c74ccac1c7b21bde7d1af255d6ebff9bff35e3888a0e356d82e43407a6d7fa94b2100204000000000000009ab62d7b07ba0a71a72145edade9941f04000000000000004ea9e4c70ef8b7407740ab3312edee62a4dc2fc85755d387bfa1bc8eb71fbe11b2216cc8d1f0160c237d929b49da28724b95555b74be2f76fb5f330b015a68587a75c01300"/467, @ANYRESHEX=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = add_key(&(0x7f00000004c0)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$read(0xb, r2, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x0, 0x0, 0x30313953, 0x0, 0xa, [{}, {0x10}, {}, {0xfffffffe}, {}, {}, {0x0, 0xfffffffd}], 0x0, 0xfd, 0x3, 0x0, 0x3}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) ioctl$FIOCLEX(r3, 0x5451) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffffff, 0x0, r5, 0x0, 0x276) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x18, &(0x7f0000000980)=ANY=[@ANYBLOB="2166fdfab368f05e0680dcebe0180000009a01000000000000050000008f0c0000d5903d0fe25e92e49d69c127a073c160a2e47ba3c3e5dd5f4ef66aede2387e24f6a5867909d956a8000000de48eb04a23fd18dec90db36f408ebdcd557a2320657cc03298123cc892b762675577d309b6e97d5c60c2e7914bd1126fd0d8067883f546b8741c15064daaf8ab6800166bb56470baa4a3def588f8141dd1f7b18446fcef0f36c55ee16878fe632cb3ac4fab8b89cbc7caabe65831a1bedf5ee7f49416e9c2601b720b7463b9e4aa74f783504234fd4da8e69fc24dcbfe03362320b", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550998e08189ca17a4517ee7ab6ec9d9447e1cad8cbe793f98f4f345b49efca70adde0be0ab1fe33f90982", @ANYRES32=r6], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x1, 0x15, 0x472, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x10, 0xb, @void, @value}, 0x94) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x20000000008) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xe, &(0x7f0000000ac0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x6, 0x12, &(0x7f0000000440)=""/18, 0x41000, 0x4a, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000400)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000600)={0xfffffffe, 0x10, 0x800, 0x5}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000700)=[{0xfffffffd, 0x484, 0x8}, {0x3, 0x5, 0x5}, {0x5, 0x4, 0xe, 0x5}, {0x3, 0x3, 0xe, 0x7}, {0x5, 0x10, 0xb, 0x2}], 0x10, 0x4, @void, @value}, 0x94) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef43c000000e3bd6efb440009000e000a0010000000ba8000001201", 0x2e}], 0x1}, 0x0) 1.287549408s ago: executing program 1 (id=2957): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00', @ANYRES16], 0x4c}}, 0x4000804) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 5 (id=2958): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000400)={0xa}) syz_usb_connect(0x4, 0x24, 0x0, 0x0) epoll_pwait(r1, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0) kernel console output (not intermixed with test programs): 74873][ T1213] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1254.794411][ T1213] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1255.406533][T15437] lo speed is unknown, defaulting to 1000 [ 1255.426909][T15437] lo speed is unknown, defaulting to 1000 [ 1255.464251][T15437] lo speed is unknown, defaulting to 1000 [ 1255.706503][ T1213] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1255.715503][ T1213] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1255.943019][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1256.032503][ T5917] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1256.123683][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1256.134248][ T9] usb 3-1: config 0 has no interfaces? [ 1256.147694][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1256.157885][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.169851][ T9] usb 3-1: Product: syz [ 1256.174424][ T9] usb 3-1: Manufacturer: syz [ 1256.179170][ T9] usb 3-1: SerialNumber: syz [ 1256.193871][ T5917] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1256.208956][ T9] usb 3-1: config 0 descriptor?? [ 1256.254972][ T5917] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1256.275052][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.301129][ T5917] usb 1-1: config 0 descriptor?? [ 1256.339374][ T5917] pwc: Askey VC010 type 2 USB webcam detected. [ 1256.346648][ T1213] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 1256.356840][ T1213] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1256.381284][ T1213] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 1256.404886][ T1213] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 1256.452434][ T1213] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 1256.465966][ T1213] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1256.698822][ T1213] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1256.710640][ T1213] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 1256.718200][ T1213] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 1256.727849][ T1213] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 1256.736611][ T1213] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1256.746786][ T5917] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1256.759307][ T1213] usb 6-1: USB disconnect, device number 11 [ 1256.761607][ T5917] pwc: recv_control_msg error -32 req 02 val 2700 [ 1256.788061][ T5917] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1256.918145][ T5917] pwc: recv_control_msg error -32 req 04 val 1000 [ 1256.926041][ T5917] pwc: recv_control_msg error -32 req 04 val 1300 [ 1256.933380][ T5917] pwc: recv_control_msg error -32 req 04 val 1400 [ 1256.941000][ T5917] pwc: recv_control_msg error -32 req 02 val 2000 [ 1256.948004][ T5917] pwc: recv_control_msg error -32 req 02 val 2100 [ 1256.955127][ T5917] pwc: recv_control_msg error -32 req 04 val 1500 [ 1256.962262][ T5917] pwc: recv_control_msg error -32 req 02 val 2500 [ 1256.969177][ T5917] pwc: recv_control_msg error -32 req 02 val 2400 [ 1256.976362][ T5917] pwc: recv_control_msg error -32 req 02 val 2600 [ 1256.984801][ T5917] pwc: recv_control_msg error -32 req 02 val 2900 [ 1256.994082][ T5917] pwc: recv_control_msg error -32 req 02 val 2800 [ 1257.204123][ T5917] pwc: recv_control_msg error -71 req 04 val 1200 [ 1257.237516][ T5917] pwc: Registered as video103. [ 1257.281792][ T5917] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input45 [ 1257.484251][ T5917] usb 1-1: USB disconnect, device number 15 [ 1257.974357][T10562] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1258.412817][T10562] usb 6-1: Using ep0 maxpacket: 16 [ 1258.457654][T10562] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1258.495840][T10562] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1258.535231][T10562] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1258.546265][T10562] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.564124][T10562] usb 6-1: Product: syz [ 1258.578486][T10562] usb 6-1: Manufacturer: syz [ 1258.602173][T10562] usb 6-1: SerialNumber: syz [ 1258.634958][T10562] usb 6-1: config 0 descriptor?? [ 1258.666778][T10562] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1258.688609][T10562] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1258.768007][ T9] usb 3-1: USB disconnect, device number 14 [ 1259.790345][T10562] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1260.280578][T10562] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1261.958763][T10562] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1262.021895][T10562] em28xx 6-1:0.0: No AC97 audio processor [ 1262.096544][T10562] usb 6-1: USB disconnect, device number 12 [ 1262.128252][T10562] em28xx 6-1:0.0: Disconnecting em28xx [ 1262.169496][T10562] em28xx 6-1:0.0: Freeing device [ 1264.142015][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1264.501968][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1264.539408][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1264.583971][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1264.630899][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1264.682020][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.690832][ T10] usb 1-1: Product: syz [ 1264.711184][ T10] usb 1-1: Manufacturer: syz [ 1264.721346][ T10] usb 1-1: SerialNumber: syz [ 1264.726107][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1264.752944][ T10] usb 1-1: config 0 descriptor?? [ 1264.770400][ T10] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1264.787473][ T10] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1265.106204][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1265.116457][ T9] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1265.126021][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.142979][ T9] usb 6-1: config 0 descriptor?? [ 1265.155297][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 1265.442915][ T10] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1265.450394][ T10] em28xx 1-1:0.0: Config register raw data: 0x00 [ 1265.552724][T10562] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1265.566428][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1265.581097][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 1265.724340][T10562] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1265.747217][T10562] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1265.787611][T10562] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1265.830868][T10562] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.883240][T10562] usb 4-1: config 0 descriptor?? [ 1266.007498][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1266.025897][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 1266.046751][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 1266.053976][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 1266.066836][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 1266.082520][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 1266.092611][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 1266.112490][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 1266.337591][ T9] pwc: recv_control_msg error -32 req 02 val 2600 [ 1266.351954][ T9] pwc: recv_control_msg error -32 req 02 val 2900 [ 1266.359041][ T9] pwc: recv_control_msg error -32 req 02 val 2800 [ 1266.369311][ T9] pwc: recv_control_msg error -32 req 04 val 1100 [ 1266.382292][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 1266.393826][ T9] pwc: Registered as video103. [ 1266.414505][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input46 [ 1266.462179][ T9] usb 6-1: USB disconnect, device number 13 [ 1266.532239][T15171] udevd[15171]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 1266.568923][T15171] udevd[15171]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 1266.751005][T10562] usb 1-1: USB disconnect, device number 16 [ 1266.759591][T10562] em28xx 1-1:0.0: Disconnecting em28xx [ 1266.852981][T10562] em28xx 1-1:0.0: Freeing device [ 1267.383441][T15579] bond0: entered promiscuous mode [ 1267.400769][T15579] bond_slave_0: entered promiscuous mode [ 1267.411086][T15579] bond_slave_1: entered promiscuous mode [ 1267.499214][T15570] lo speed is unknown, defaulting to 1000 [ 1267.506689][T15570] lo speed is unknown, defaulting to 1000 [ 1267.514235][T15570] lo speed is unknown, defaulting to 1000 [ 1268.955383][T10562] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1269.067378][ T5885] usb 4-1: USB disconnect, device number 12 [ 1269.158582][T10562] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.203346][ T30] audit: type=1800 audit(1749806468.226:91): pid=15595 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.2231" name="bus" dev="overlay" ino=2558 res=0 errno=0 [ 1269.931919][T10562] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1269.967220][T10562] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.405277][T10562] usb 1-1: config 0 descriptor?? [ 1270.466683][T10562] pwc: Askey VC010 type 2 USB webcam detected. [ 1270.519815][T10562] pwc: send_video_command error -71 [ 1270.552404][T10562] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1270.569637][T10562] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 1270.641027][T10562] usb 1-1: USB disconnect, device number 17 [ 1271.131986][T10562] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1272.349362][T10562] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1272.381686][T10562] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1272.410424][T10562] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.530681][T10562] usb 1-1: config 0 descriptor?? [ 1272.633759][T10562] pwc: Askey VC010 type 2 USB webcam detected. [ 1274.280019][T10562] pwc: send_video_command error -71 [ 1274.285346][T10562] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1274.301981][T10562] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 1274.354308][T10562] usb 1-1: USB disconnect, device number 18 [ 1275.422028][ T5917] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1275.692119][ T5917] usb 6-1: Using ep0 maxpacket: 16 [ 1275.703303][ T5917] usb 6-1: config 8 has an invalid interface number: 39 but max is 0 [ 1275.712887][ T5917] usb 6-1: config 8 has no interface number 0 [ 1275.719006][ T5917] usb 6-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1275.748759][ T5917] usb 6-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1275.769064][ T5917] usb 6-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 1275.807546][ T5917] usb 6-1: config 8 interface 39 has no altsetting 0 [ 1275.821723][ T5917] usb 6-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 1275.858546][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.868341][ T5917] usb 6-1: Product: syz [ 1275.874886][ T5917] usb 6-1: Manufacturer: syz [ 1275.879496][ T5917] usb 6-1: SerialNumber: syz [ 1276.175036][ T1213] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1276.416942][ T5917] ipheth 6-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 1276.425760][ T5917] ipheth 6-1:8.39: probe with driver ipheth failed with error -71 [ 1276.445547][ T5917] usb 6-1: USB disconnect, device number 14 [ 1276.482598][T10562] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1276.752433][T10562] usb 1-1: Using ep0 maxpacket: 16 [ 1276.852311][T10562] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1276.942122][T10562] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1277.027809][T10562] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1277.211749][T10562] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.220186][T10562] usb 1-1: Product: syz [ 1277.224578][T10562] usb 1-1: Manufacturer: syz [ 1277.229526][T10562] usb 1-1: SerialNumber: syz [ 1277.237364][T10562] usb 1-1: config 0 descriptor?? [ 1277.252776][T10562] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1277.263431][T10562] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1277.391881][ T1213] usb 3-1: Using ep0 maxpacket: 16 [ 1277.406370][ T1213] usb 3-1: config 8 has an invalid interface number: 39 but max is 0 [ 1277.421907][ T1213] usb 3-1: config 8 has no interface number 0 [ 1277.428044][ T1213] usb 3-1: config 8 interface 39 altsetting 1 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1277.440056][ T1213] usb 3-1: config 8 interface 39 altsetting 1 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1277.455161][ T1213] usb 3-1: config 8 interface 39 altsetting 1 bulk endpoint 0x8F has invalid maxpacket 0 [ 1277.501559][ T1213] usb 3-1: config 8 interface 39 has no altsetting 0 [ 1277.532858][ T1213] usb 3-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 1277.589034][ T1213] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.656597][ T1213] usb 3-1: Product: syz [ 1277.697138][ T1213] usb 3-1: Manufacturer: syz [ 1277.730551][ T1213] usb 3-1: SerialNumber: syz [ 1278.230888][T10562] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1278.638609][T10562] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1279.171217][ T1213] ipheth 3-1:8.39: ipheth_get_macaddr: usb_control_msg: -71 [ 1279.213782][ T1213] ipheth 3-1:8.39: probe with driver ipheth failed with error -71 [ 1279.299590][ T1213] usb 3-1: USB disconnect, device number 15 [ 1279.322952][T10562] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 1279.336182][T10562] em28xx 1-1:0.0: No AC97 audio processor [ 1279.706388][ T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1280.654538][T10562] usb 1-1: USB disconnect, device number 19 [ 1280.681909][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 1280.685218][T10562] em28xx 1-1:0.0: Disconnecting em28xx [ 1280.781215][ T9] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1280.908625][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.917312][ T9] usb 6-1: Product: syz [ 1280.921488][ T9] usb 6-1: Manufacturer: syz [ 1280.926460][ T9] usb 6-1: SerialNumber: syz [ 1281.025872][ T9] usb 6-1: config 0 descriptor?? [ 1281.035509][T10562] em28xx 1-1:0.0: Freeing device [ 1281.318848][ T9] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1283.644630][ T9] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1284.632063][ T9] usb 6-1: USB disconnect, device number 15 [ 1286.129083][T15746] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2276'. [ 1286.906208][ T1213] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1287.112657][T14947] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1287.192471][ T1213] usb 4-1: Using ep0 maxpacket: 16 [ 1287.209045][ T1213] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1287.231606][ T1213] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1287.290312][ T1213] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1287.302446][T14947] usb 2-1: Using ep0 maxpacket: 16 [ 1287.442548][T14947] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1287.461931][ T1213] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.486393][T14947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1287.501157][ T1213] usb 4-1: Product: syz [ 1287.507976][ T1213] usb 4-1: Manufacturer: syz [ 1287.513150][ T1213] usb 4-1: SerialNumber: syz [ 1287.525359][T14947] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1287.545888][ T1213] usb 4-1: config 0 descriptor?? [ 1287.553858][T14947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.575724][ T1213] usb 4-1: can't set config #0, error -71 [ 1287.589601][T14947] usb 2-1: Product: syz [ 1287.596299][ T1213] usb 4-1: USB disconnect, device number 13 [ 1287.606634][T14947] usb 2-1: Manufacturer: syz [ 1287.620730][T14947] usb 2-1: SerialNumber: syz [ 1287.642202][T14947] usb 2-1: config 0 descriptor?? [ 1287.750473][T14947] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1287.876563][T14947] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1288.985700][T14947] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1289.066935][T14947] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1290.777299][T14947] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1290.784348][T14947] em28xx 2-1:0.0: No AC97 audio processor [ 1291.056152][ T5917] usb 2-1: USB disconnect, device number 19 [ 1291.062835][ T5917] em28xx 2-1:0.0: Disconnecting em28xx [ 1291.094250][ T5917] em28xx 2-1:0.0: Freeing device [ 1294.014386][T15802] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2291'. [ 1299.987047][T15866] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1300.063495][T15866] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.082243][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.088556][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.376621][T15871] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.465901][T15866] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1300.487438][T15866] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.568251][T15871] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.875993][T15866] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1300.990156][T15866] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.533199][T15871] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.630818][T15866] bridge0: port 3(netdevsim0) entered disabled state [ 1301.693917][T15866] netdevsim netdevsim3 netdevsim0 (unregistering): left allmulticast mode [ 1301.725778][T15866] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 1301.740718][T15866] bridge0: port 3(netdevsim0) entered disabled state [ 1301.768101][T15866] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1301.781512][T15866] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.819002][T15871] bridge0: port 3(netdevsim0) entered disabled state [ 1301.850395][T15871] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 1301.859474][T15871] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 1301.883038][T15871] bridge0: port 3(netdevsim0) entered disabled state [ 1301.901025][T15871] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1301.966216][T15883] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.621323][T15883] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.730909][T15866] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1302.739344][T15866] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1302.761144][T15871] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1302.789684][T15883] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.813810][T15866] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1302.822531][T15866] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1302.839366][T15871] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1302.865489][T15871] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1302.887207][T15866] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1302.896444][T15866] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1302.936169][T15883] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.952167][T14937] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1302.965788][T15871] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1302.978609][T15866] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1302.987778][T15866] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.133615][T14937] usb 3-1: Using ep0 maxpacket: 8 [ 1303.158622][T14937] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1303.180059][T14937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.184150][T15883] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.190153][T14937] usb 3-1: Product: syz [ 1303.244123][T14937] usb 3-1: Manufacturer: syz [ 1303.249149][T14937] usb 3-1: SerialNumber: syz [ 1303.263794][T14937] usb 3-1: config 0 descriptor?? [ 1303.310167][T15883] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.339800][T15883] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.378016][T15883] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.540647][T14937] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1303.552265][ T5885] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1303.802382][ T5885] usb 4-1: Using ep0 maxpacket: 8 [ 1303.874468][ T5885] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1303.957017][ T5885] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.355506][ T5885] usb 4-1: Product: syz [ 1304.360644][ T5885] usb 4-1: Manufacturer: syz [ 1304.366020][ T5885] usb 4-1: SerialNumber: syz [ 1304.383895][ T5885] usb 4-1: config 0 descriptor?? [ 1304.767046][ T5885] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1305.229786][T15920] overlayfs: missing 'lowerdir' [ 1305.926303][T14937] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1307.308351][T14937] usb 3-1: USB disconnect, device number 16 [ 1307.478331][ T5885] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1307.491379][ T5885] usb 4-1: USB disconnect, device number 14 [ 1309.428295][T15956] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.119474][T15956] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1310.475846][T15956] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1311.219672][T15956] bridge0: port 3(netdevsim0) entered disabled state [ 1311.323853][T15956] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 1311.337528][T15956] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 1311.382981][T15956] bridge0: port 3(netdevsim0) entered disabled state [ 1311.630098][T15956] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1312.598568][T15956] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1312.622903][T15956] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1313.569187][T15980] overlayfs: missing 'lowerdir' [ 1313.919983][T15956] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.334816][T15956] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.122392][T15998] overlayfs: missing 'lowerdir' [ 1322.782042][ T5917] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1322.951921][ T5917] usb 6-1: Using ep0 maxpacket: 16 [ 1322.969325][ T5917] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1323.001595][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1323.845264][ T5917] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1323.861944][ T5917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1323.870060][ T5917] usb 6-1: Product: syz [ 1323.874385][ T5917] usb 6-1: Manufacturer: syz [ 1323.878992][ T5917] usb 6-1: SerialNumber: syz [ 1323.885028][T16063] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2366'. [ 1323.913080][ T5917] usb 6-1: config 0 descriptor?? [ 1323.934671][ T5917] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1324.098585][T16071] binder: 16055:16071 ioctl c0306201 0 returned -14 [ 1324.872684][ T5917] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1325.077166][ T5917] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1325.086092][ T5917] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1325.714413][ T5917] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 1325.724231][ T5917] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1325.781419][ T5917] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 1325.791446][ T5917] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 1325.961200][ T5917] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 1326.021059][ T5917] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1326.246288][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 1326.256414][ T5917] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 1326.265526][ T5917] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 1326.287567][ T5917] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 1326.305367][ T5917] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 1326.369493][ T5917] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 1326.422096][ T5917] usb 6-1: USB disconnect, device number 16 [ 1328.223283][T16116] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1328.268262][T16116] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.388554][T16116] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1328.464090][T16116] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.790207][T16116] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1328.806701][T16116] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.878478][T16116] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1328.890592][T16116] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.186781][T16116] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1329.222091][T16116] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.380582][T16116] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1329.582360][T16116] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.228630][T16116] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1330.396239][T16116] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.433049][T16116] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1330.450125][T16124] overlayfs: missing 'lowerdir' [ 1330.468226][T16116] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1330.694120][T14947] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1331.761929][T14947] usb 3-1: Using ep0 maxpacket: 8 [ 1331.776982][T14947] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1331.806426][T14947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1331.838807][T14947] usb 3-1: Product: syz [ 1331.856732][T14947] usb 3-1: Manufacturer: syz [ 1331.875545][T14947] usb 3-1: SerialNumber: syz [ 1333.069655][T14947] usb 3-1: config 0 descriptor?? [ 1333.427594][T16161] siw: device registration error -23 [ 1334.190291][T14947] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -71 [ 1334.201171][T14947] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1334.213320][T14947] usb 3-1: USB disconnect, device number 17 [ 1334.267973][T16167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2398'. [ 1337.485897][T16196] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.116513][T16196] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1338.469404][T16196] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.242052][T14947] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1339.658361][T16196] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1339.668291][T14947] usb 3-1: Using ep0 maxpacket: 8 [ 1339.678592][T14947] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1339.697802][T14947] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1339.706218][T14947] usb 3-1: Product: syz [ 1339.710381][T14947] usb 3-1: Manufacturer: syz [ 1339.716132][T14947] usb 3-1: SerialNumber: syz [ 1339.736891][T14947] usb 3-1: config 0 descriptor?? [ 1339.828702][T16196] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1340.016728][T14947] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1340.063427][T16196] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.047068][T16196] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.070739][T16196] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1341.743812][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 1341.752473][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 1341.760705][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 1341.768942][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 1341.778280][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 1341.786483][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 1341.794792][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 1341.803147][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 1341.810957][T14947] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1341.920097][T14947] usb 3-1: USB disconnect, device number 18 [ 1342.574934][T16236] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2419'. [ 1346.620363][T16263] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1347.574114][T16281] siw: device registration error -23 [ 1360.305471][T16381] overlayfs: missing 'lowerdir' [ 1360.752538][T16400] rdma_rxe: rxe_newlink: failed to add lo [ 1361.518115][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.524536][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1368.020550][T16482] rdma_rxe: rxe_newlink: failed to add lo [ 1368.774687][T16484] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2490'. [ 1370.251026][T16496] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2494'. [ 1372.557276][T16535] rdma_rxe: rxe_newlink: failed to add lo [ 1374.460179][T16551] sz1: rxe_newlink: already configured on lo [ 1375.442406][T16565] sz1: rxe_newlink: already configured on lo [ 1378.454363][T16584] rdma_rxe: rxe_newlink: failed to add lo [ 1380.455829][T16580] overlayfs: missing 'lowerdir' [ 1380.913019][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1381.082494][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1381.090687][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1381.103239][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1381.139142][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1381.148718][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1381.161210][ T9] usb 3-1: Product: syz [ 1381.166601][ T9] usb 3-1: Manufacturer: syz [ 1381.171351][ T9] usb 3-1: SerialNumber: syz [ 1381.180003][ T9] usb 3-1: config 0 descriptor?? [ 1381.712400][T16612] siw: device registration error -23 [ 1383.191995][T16634] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2530'. [ 1384.133765][ T43] usb 3-1: USB disconnect, device number 19 [ 1392.705932][T16737] rdma_rxe: rxe_newlink: failed to add lo [ 1395.827956][T16774] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2570'. [ 1396.787352][T16796] rdma_rxe: rxe_newlink: failed to add lo [ 1398.134886][T16808] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2582'. [ 1398.264788][T16813] rdma_rxe: rxe_newlink: failed to add lo [ 1398.942728][T16827] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2588'. [ 1399.775521][T16834] CIFS mount error: No usable UNC path provided in device string! [ 1399.775521][T16834] [ 1399.813025][T16834] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1399.975472][T16842] batadv_slave_1: entered promiscuous mode [ 1399.993325][T16841] batadv_slave_1: left promiscuous mode [ 1400.818050][T16859] rdma_rxe: rxe_newlink: failed to add lo [ 1403.591471][T16887] mmap: syz.1.2611 (16887) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1404.041402][T16902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1404.134226][T16907] sz1: rxe_newlink: already configured on lo [ 1404.617130][ T5917] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1404.635617][T16902] batadv_slave_0: entered promiscuous mode [ 1404.772706][T16908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2614'. [ 1404.787810][T16902] batadv_slave_0: entered allmulticast mode [ 1404.952003][ T5917] usb 1-1: Using ep0 maxpacket: 32 [ 1405.057869][T16914] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2617'. [ 1405.082612][ T5917] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1405.107685][T16914] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2617'. [ 1405.120564][ T5917] usb 1-1: config 0 has no interface number 0 [ 1405.179561][ T5917] usb 1-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1405.293367][ T5917] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1405.368221][ T5917] usb 1-1: New USB device found, idVendor=5324, idProduct=5aac, bcdDevice=50.d8 [ 1405.437277][ T5917] usb 1-1: New USB device strings: Mfr=80, Product=182, SerialNumber=127 [ 1405.479900][T16913] netlink: 'syz.2.2618': attribute type 10 has an invalid length. [ 1405.486088][ T5917] usb 1-1: Product: syz [ 1405.543010][T16913] team0: Device ipvlan1 failed to register rx_handler [ 1405.550819][ T5917] usb 1-1: Manufacturer: syz [ 1405.617214][ T5917] usb 1-1: SerialNumber: syz [ 1405.648105][ T5917] usb 1-1: config 0 descriptor?? [ 1406.090838][T14908] Bluetooth: hci2: command 0x0406 tx timeout [ 1406.983327][T16938] IPVS: set_ctl: invalid protocol: 43 172.20.20.170:20004 [ 1407.949192][T16956] rdma_rxe: rxe_newlink: failed to add lo [ 1408.543807][T16957] rdma_rxe: rxe_newlink: failed to add lo [ 1409.014760][ T43] usb 1-1: USB disconnect, device number 20 [ 1409.507070][T11816] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1409.518700][T11816] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.576574][T11816] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1409.586497][T11816] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.613182][ T43] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1409.641168][T11816] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1409.673983][T11816] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.723872][T16972] FAULT_INJECTION: forcing a failure. [ 1409.723872][T16972] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1409.738202][T16972] CPU: 1 UID: 0 PID: 16972 Comm: syz.1.2638 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 1409.738226][T16972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1409.738243][T16972] Call Trace: [ 1409.738253][T16972] [ 1409.738262][T16972] dump_stack_lvl+0x189/0x250 [ 1409.738292][T16972] ? __pfx____ratelimit+0x10/0x10 [ 1409.738317][T16972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1409.738341][T16972] ? __pfx__printk+0x10/0x10 [ 1409.738359][T16972] ? __might_fault+0xb0/0x130 [ 1409.738391][T16972] should_fail_ex+0x414/0x560 [ 1409.738417][T16972] _copy_from_user+0x2d/0xb0 [ 1409.738435][T16972] __sys_bind+0x199/0x3e0 [ 1409.738456][T16972] ? __pfx___sys_bind+0x10/0x10 [ 1409.738486][T16972] ? __pfx_ksys_write+0x10/0x10 [ 1409.738503][T16972] ? rcu_is_watching+0x15/0xb0 [ 1409.738535][T16972] __x64_sys_bind+0x7a/0x90 [ 1409.738553][T16972] do_syscall_64+0xfa/0x3b0 [ 1409.738568][T16972] ? lockdep_hardirqs_on+0x9c/0x150 [ 1409.738591][T16972] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1409.738609][T16972] ? clear_bhb_loop+0x60/0xb0 [ 1409.738630][T16972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1409.738647][T16972] RIP: 0033:0x7ff7d4b8e929 [ 1409.738666][T16972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1409.738682][T16972] RSP: 002b:00007ff7d5954038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1409.738701][T16972] RAX: ffffffffffffffda RBX: 00007ff7d4db5fa0 RCX: 00007ff7d4b8e929 [ 1409.738714][T16972] RDX: 0000000000000040 RSI: 00002000000000c0 RDI: 0000000000000004 [ 1409.738726][T16972] RBP: 00007ff7d5954090 R08: 0000000000000000 R09: 0000000000000000 [ 1409.738738][T16972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1409.738749][T16972] R13: 0000000000000000 R14: 00007ff7d4db5fa0 R15: 00007ffc66bf2068 [ 1409.738778][T16972] [ 1410.049425][T14908] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1410.055536][T11816] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1410.088087][T14908] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1410.100492][T16978] FAULT_INJECTION: forcing a failure. [ 1410.100492][T16978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1410.100550][ T43] usb 1-1: device descriptor read/64, error -71 [ 1410.119925][T14908] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1410.127971][T11816] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1410.140119][T14908] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1410.148341][T14908] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1410.172052][T16978] CPU: 1 UID: 0 PID: 16978 Comm: syz.5.2640 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 1410.172074][T16978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1410.172084][T16978] Call Trace: [ 1410.172091][T16978] [ 1410.172099][T16978] dump_stack_lvl+0x189/0x250 [ 1410.172126][T16978] ? __pfx____ratelimit+0x10/0x10 [ 1410.172158][T16978] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1410.172181][T16978] ? __pfx__printk+0x10/0x10 [ 1410.172199][T16978] ? __might_fault+0xb0/0x130 [ 1410.172231][T16978] should_fail_ex+0x414/0x560 [ 1410.172257][T16978] _copy_from_user+0x2d/0xb0 [ 1410.172276][T16978] __se_sys_openat2+0x142/0x2c0 [ 1410.172296][T16978] ? __pfx___se_sys_openat2+0x10/0x10 [ 1410.172328][T16978] ? do_syscall_64+0xbe/0x3b0 [ 1410.172348][T16978] do_syscall_64+0xfa/0x3b0 [ 1410.172362][T16978] ? lockdep_hardirqs_on+0x9c/0x150 [ 1410.172384][T16978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.172400][T16978] ? clear_bhb_loop+0x60/0xb0 [ 1410.172420][T16978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.172435][T16978] RIP: 0033:0x7f49c178e929 [ 1410.172448][T16978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1410.172460][T16978] RSP: 002b:00007f49c265d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 1410.172477][T16978] RAX: ffffffffffffffda RBX: 00007f49c19b5fa0 RCX: 00007f49c178e929 [ 1410.172489][T16978] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 1410.172500][T16978] RBP: 00007f49c265d090 R08: 0000000000000000 R09: 0000000000000000 [ 1410.172510][T16978] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 1410.172521][T16978] R13: 0000000000000001 R14: 00007f49c19b5fa0 R15: 00007ffe819e6ec8 [ 1410.172549][T16978] [ 1410.400416][T16980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2642'. [ 1410.541977][ T43] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1410.800789][ T43] usb 1-1: device descriptor read/64, error -71 [ 1410.812175][ T6980] Bluetooth: hci5: Frame reassembly failed (-84) [ 1410.867540][ T6980] Bluetooth: hci5: Frame reassembly failed (-84) [ 1410.994740][ T43] usb usb1-port1: attempt power cycle [ 1411.074092][T16973] lo speed is unknown, defaulting to 1000 [ 1411.082699][T16973] lo speed is unknown, defaulting to 1000 [ 1411.123269][T16973] lo speed is unknown, defaulting to 1000 [ 1411.189332][T11816] bridge_slave_1: left allmulticast mode [ 1411.205873][T11816] bridge_slave_1: left promiscuous mode [ 1411.222473][T11816] bridge0: port 2(bridge_slave_1) entered disabled state [ 1411.257592][T11816] bridge_slave_0: left allmulticast mode [ 1411.281967][T11816] bridge_slave_0: left promiscuous mode [ 1411.301309][T11816] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.391951][ T43] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1411.413358][ T43] usb 1-1: device descriptor read/8, error -71 [ 1411.655221][ T43] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1411.682705][ T43] usb 1-1: device descriptor read/8, error -71 [ 1411.794927][ T43] usb usb1-port1: unable to enumerate USB device [ 1411.967241][T11816] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1411.978358][T11816] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1411.989042][T11816] bond0 (unregistering): Released all slaves [ 1412.098900][T11816] tipc: Disabling bearer [ 1412.112244][T11816] tipc: Left network mode [ 1412.162184][T11816] IPVS: stopping master sync thread 10333 ... [ 1412.164386][T17011] xt_TCPMSS: Only works on TCP SYN packets [ 1412.232447][T14908] Bluetooth: hci1: command tx timeout [ 1412.435333][ T43] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1412.608675][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 1412.634720][ T43] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1412.690918][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.707940][T17027] input: syz1 as /devices/virtual/input/input47 [ 1412.712510][T11337] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1412.732539][ T43] usb 6-1: Product: syz [ 1412.740957][ T43] usb 6-1: Manufacturer: syz [ 1412.746200][ T43] usb 6-1: SerialNumber: syz [ 1412.861141][ T43] usb 6-1: config 0 descriptor?? [ 1412.931240][ T43] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1412.954118][T16973] chnl_net:caif_netlink_parms(): no params data found [ 1413.178657][ T43] gspca_stk1135: reg_w 0x2 err -71 [ 1413.185926][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1413.201888][ T43] gspca_stk1135: Sensor write failed [ 1413.207221][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1413.239192][ T43] gspca_stk1135: Sensor write failed [ 1413.270500][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1413.411966][ T43] gspca_stk1135: Sensor read failed [ 1413.417261][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1413.446087][ T43] gspca_stk1135: Sensor read failed [ 1413.456363][ T43] gspca_stk1135: Detected sensor type unknown (0x0) [ 1413.481504][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1413.488006][T11816] hsr_slave_0: left promiscuous mode [ 1413.494237][ T43] gspca_stk1135: Sensor read failed [ 1413.503081][T11816] hsr_slave_1: left promiscuous mode [ 1413.509085][T11816] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1413.516494][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1413.522909][ T43] gspca_stk1135: Sensor read failed [ 1413.528135][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1413.537467][ T43] gspca_stk1135: Sensor write failed [ 1413.542854][ T43] gspca_stk1135: serial bus timeout: status=0x00 [ 1413.550023][T11816] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1413.557826][ T43] gspca_stk1135: Sensor write failed [ 1413.563738][ T43] stk1135 6-1:0.0: probe with driver stk1135 failed with error -71 [ 1413.572181][T11816] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1413.587632][ T43] usb 6-1: USB disconnect, device number 17 [ 1413.640398][T11816] veth1_macvtap: left promiscuous mode [ 1413.655296][T11816] veth0_macvtap: left promiscuous mode [ 1413.660994][T11816] veth1_vlan: left promiscuous mode [ 1413.666913][T11816] veth0_vlan: left promiscuous mode [ 1413.946266][T17055] FAULT_INJECTION: forcing a failure. [ 1413.946266][T17055] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1413.971908][T17055] CPU: 0 UID: 0 PID: 17055 Comm: syz.5.2658 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 1413.971933][T17055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1413.971943][T17055] Call Trace: [ 1413.971951][T17055] [ 1413.971959][T17055] dump_stack_lvl+0x189/0x250 [ 1413.971987][T17055] ? __pfx____ratelimit+0x10/0x10 [ 1413.972012][T17055] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1413.972034][T17055] ? __pfx__printk+0x10/0x10 [ 1413.972053][T17055] ? fs_reclaim_acquire+0x7d/0x100 [ 1413.972084][T17055] should_fail_ex+0x414/0x560 [ 1413.972120][T17055] prepare_alloc_pages+0x213/0x610 [ 1413.972150][T17055] __alloc_frozen_pages_noprof+0x123/0x370 [ 1413.972178][T17055] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1413.972199][T17055] ? process_measurement+0x1640/0x1a40 [ 1413.972230][T17055] ? policy_nodemask+0x27c/0x720 [ 1413.972247][T17055] ? __lock_acquire+0xab9/0xd20 [ 1413.972274][T17055] alloc_pages_mpol+0x232/0x4a0 [ 1413.972300][T17055] vma_alloc_folio_noprof+0xe4/0x200 [ 1413.972323][T17055] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1413.972356][T17055] folio_prealloc+0x30/0x180 [ 1413.972379][T17055] __handle_mm_fault+0x2c88/0x5620 [ 1413.972417][T17055] ? __pfx___handle_mm_fault+0x10/0x10 [ 1413.972453][T17055] ? find_vma+0xe7/0x160 [ 1413.972471][T17055] ? __pfx_find_vma+0x10/0x10 [ 1413.972494][T17055] handle_mm_fault+0x2d5/0x7f0 [ 1413.972523][T17055] do_user_addr_fault+0x764/0x1390 [ 1413.972560][T17055] exc_page_fault+0x76/0xf0 [ 1413.972585][T17055] asm_exc_page_fault+0x26/0x30 [ 1413.972601][T17055] RIP: 0010:filldir+0x2a2/0x6c0 [ 1413.972620][T17055] Code: 88 ff 4c 89 ff 4c 89 e6 e8 8b ac 88 ff 4d 39 e7 0f 82 7c 02 00 00 49 39 ef 0f 87 73 02 00 00 0f 01 cb 0f ae e8 48 8b 44 24 50 <49> 89 44 24 08 48 8b 4c 24 08 48 8b 44 24 58 48 89 01 48 8b 04 24 [ 1413.972634][T17055] RSP: 0018:ffffc9000fa37be8 EFLAGS: 00050287 [ 1413.972649][T17055] RAX: 0000000000000000 RBX: ffffc9000fa37e38 RCX: ffff88802c6f0000 [ 1413.972662][T17055] RDX: 0000000000000000 RSI: 0000200000001fc0 RDI: 0000200000001fd8 [ 1413.972673][T17055] RBP: 00007ffffffff000 R08: 000000000000c298 R09: 0000000000000004 [ 1413.972684][T17055] R10: 0000000000000001 R11: ffffffff8237a140 R12: 0000200000001fc0 [ 1413.972695][T17055] R13: ffffffff8b9b55e0 R14: 0000000000000001 R15: 0000200000001fd8 [ 1413.972712][T17055] ? __pfx_filldir+0x10/0x10 [ 1413.972739][T17055] ? filldir+0x285/0x6c0 [ 1413.972769][T17055] proc_task_readdir+0x220/0xd00 [ 1413.972792][T17055] ? iterate_dir+0x49f/0x770 [ 1413.972807][T17055] ? __pfx_filldir+0x10/0x10 [ 1413.972832][T17055] ? __pfx_proc_task_readdir+0x10/0x10 [ 1413.972856][T17055] ? iterate_dir+0x49f/0x770 [ 1413.972872][T17055] ? down_read_killable+0x1d1/0x350 [ 1413.972895][T17055] iterate_dir+0x5af/0x770 [ 1413.972919][T17055] __se_sys_getdents+0xe4/0x250 [ 1413.972940][T17055] ? __pfx___se_sys_getdents+0x10/0x10 [ 1413.972956][T17055] ? ksys_write+0x22a/0x250 [ 1413.972972][T17055] ? __pfx_filldir+0x10/0x10 [ 1413.972991][T17055] ? __pfx_ksys_write+0x10/0x10 [ 1413.973015][T17055] ? do_syscall_64+0xbe/0x3b0 [ 1413.973034][T17055] do_syscall_64+0xfa/0x3b0 [ 1413.973047][T17055] ? lockdep_hardirqs_on+0x9c/0x150 [ 1413.973069][T17055] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1413.973085][T17055] ? clear_bhb_loop+0x60/0xb0 [ 1413.973114][T17055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1413.973129][T17055] RIP: 0033:0x7f49c178e929 [ 1413.973144][T17055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1413.973158][T17055] RSP: 002b:00007f49c265d038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 1413.973174][T17055] RAX: ffffffffffffffda RBX: 00007f49c19b5fa0 RCX: 00007f49c178e929 [ 1413.973186][T17055] RDX: 00000000000000b8 RSI: 0000200000001fc0 RDI: 0000000000000004 [ 1413.973197][T17055] RBP: 00007f49c265d090 R08: 0000000000000000 R09: 0000000000000000 [ 1413.973207][T17055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1413.973217][T17055] R13: 0000000000000000 R14: 00007f49c19b5fa0 R15: 00007ffe819e6ec8 [ 1413.973246][T17055] [ 1414.374884][T11337] Bluetooth: hci1: command tx timeout [ 1414.630727][T11816] team0 (unregistering): Port device team_slave_1 removed [ 1414.675327][T11816] team0 (unregistering): Port device team_slave_0 removed [ 1415.098202][ T5917] lo speed is unknown, defaulting to 1000 [ 1415.104479][ T5917] infiniband s…z0: ib_query_port failed (-19) [ 1415.262492][T16973] bridge0: port 1(bridge_slave_0) entered blocking state [ 1415.269670][T16973] bridge0: port 1(bridge_slave_0) entered disabled state [ 1415.322292][T16973] bridge_slave_0: entered allmulticast mode [ 1415.346365][T16973] bridge_slave_0: entered promiscuous mode [ 1415.354510][T17076] Invalid source name [ 1415.360842][T17074] FAULT_INJECTION: forcing a failure. [ 1415.360842][T17074] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1415.390498][T16973] bridge0: port 2(bridge_slave_1) entered blocking state [ 1415.442929][T16973] bridge0: port 2(bridge_slave_1) entered disabled state [ 1415.450699][T17074] CPU: 1 UID: 0 PID: 17074 Comm: syz.5.2664 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 1415.450723][T17074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1415.450734][T17074] Call Trace: [ 1415.450741][T17074] [ 1415.450748][T17074] dump_stack_lvl+0x189/0x250 [ 1415.450777][T17074] ? __pfx____ratelimit+0x10/0x10 [ 1415.450802][T17074] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1415.450826][T17074] ? __pfx__printk+0x10/0x10 [ 1415.450844][T17074] ? __might_fault+0xb0/0x130 [ 1415.450875][T17074] should_fail_ex+0x414/0x560 [ 1415.450901][T17074] _copy_from_user+0x2d/0xb0 [ 1415.450920][T17074] userio_char_write+0xc0/0x430 [ 1415.450945][T17074] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1415.450976][T17074] ? __pfx_userio_char_write+0x10/0x10 [ 1415.450998][T17074] ? bpf_struct_ops_map_free_ksyms+0x180/0x190 [ 1415.451019][T17074] ? security_file_permission+0x75/0x290 [ 1415.451042][T17074] ? rw_verify_area+0x258/0x650 [ 1415.451060][T17074] ? __pfx_userio_char_write+0x10/0x10 [ 1415.451085][T17074] vfs_write+0x27e/0xa90 [ 1415.451113][T17074] ? __pfx_vfs_write+0x10/0x10 [ 1415.451133][T17074] ? __fget_files+0x2a/0x420 [ 1415.451157][T17074] ? __fget_files+0x2a/0x420 [ 1415.451176][T17074] ? __fget_files+0x3a0/0x420 [ 1415.451196][T17074] ? __fget_files+0x2a/0x420 [ 1415.451226][T17074] ksys_write+0x145/0x250 [ 1415.451247][T17074] ? __pfx_ksys_write+0x10/0x10 [ 1415.451264][T17074] ? rcu_is_watching+0x15/0xb0 [ 1415.451292][T17074] ? do_syscall_64+0xbe/0x3b0 [ 1415.451312][T17074] do_syscall_64+0xfa/0x3b0 [ 1415.451327][T17074] ? lockdep_hardirqs_on+0x9c/0x150 [ 1415.451349][T17074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.451366][T17074] ? clear_bhb_loop+0x60/0xb0 [ 1415.451388][T17074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.451403][T17074] RIP: 0033:0x7f49c178e929 [ 1415.451419][T17074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1415.451434][T17074] RSP: 002b:00007f49c265d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1415.451452][T17074] RAX: ffffffffffffffda RBX: 00007f49c19b5fa0 RCX: 00007f49c178e929 [ 1415.451465][T17074] RDX: 0000000000000002 RSI: 0000200000000100 RDI: 0000000000000003 [ 1415.451476][T17074] RBP: 00007f49c265d090 R08: 0000000000000000 R09: 0000000000000000 [ 1415.451488][T17074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1415.451498][T17074] R13: 0000000000000000 R14: 00007f49c19b5fa0 R15: 00007ffe819e6ec8 [ 1415.451527][T17074] [ 1415.472603][T16973] bridge_slave_1: entered allmulticast mode [ 1415.721974][T17079] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2667'. [ 1415.741035][T16973] bridge_slave_1: entered promiscuous mode [ 1415.851411][T16973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1415.946334][T16973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1416.160072][T16973] team0: Port device team_slave_0 added [ 1416.208208][T16973] team0: Port device team_slave_1 added [ 1416.392525][T11337] Bluetooth: hci1: command tx timeout [ 1416.409444][T16973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1416.431872][T16973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1416.489016][T16973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1416.507457][T16973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1416.545669][T16973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1416.641472][T16973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1417.561024][T16973] hsr_slave_0: entered promiscuous mode [ 1417.573329][T16973] hsr_slave_1: entered promiscuous mode [ 1417.600095][T16973] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1417.661956][T16973] Cannot create hsr debugfs directory [ 1417.708676][T17124] FAULT_INJECTION: forcing a failure. [ 1417.708676][T17124] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1417.741948][T17124] CPU: 0 UID: 0 PID: 17124 Comm: syz.5.2681 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 1417.741971][T17124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1417.741982][T17124] Call Trace: [ 1417.741989][T17124] [ 1417.741996][T17124] dump_stack_lvl+0x189/0x250 [ 1417.742025][T17124] ? __pfx____ratelimit+0x10/0x10 [ 1417.742054][T17124] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1417.742078][T17124] ? __pfx__printk+0x10/0x10 [ 1417.742107][T17124] should_fail_ex+0x414/0x560 [ 1417.742134][T17124] _copy_to_user+0x31/0xb0 [ 1417.742153][T17124] simple_read_from_buffer+0xe1/0x170 [ 1417.742180][T17124] proc_fail_nth_read+0x1df/0x250 [ 1417.742207][T17124] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1417.742233][T17124] ? rw_verify_area+0x258/0x650 [ 1417.742251][T17124] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1417.742275][T17124] vfs_read+0x200/0x980 [ 1417.742294][T17124] ? tomoyo_socket_bind_permission+0x150/0x290 [ 1417.742321][T17124] ? j1939_sk_bind+0x61/0xbf0 [ 1417.742342][T17124] ? __pfx_vfs_read+0x10/0x10 [ 1417.742361][T17124] ? bpf_lsm_socket_bind+0x9/0x20 [ 1417.742384][T17124] ? __sys_bind+0x2e9/0x3e0 [ 1417.742405][T17124] ? __pfx___sys_bind+0x10/0x10 [ 1417.742429][T17124] ksys_read+0x145/0x250 [ 1417.742450][T17124] ? __pfx_ksys_read+0x10/0x10 [ 1417.742466][T17124] ? rcu_is_watching+0x15/0xb0 [ 1417.742495][T17124] ? do_syscall_64+0xbe/0x3b0 [ 1417.742514][T17124] do_syscall_64+0xfa/0x3b0 [ 1417.742529][T17124] ? lockdep_hardirqs_on+0x9c/0x150 [ 1417.742551][T17124] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.742568][T17124] ? clear_bhb_loop+0x60/0xb0 [ 1417.742589][T17124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.742606][T17124] RIP: 0033:0x7f49c178d33c [ 1417.742621][T17124] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1417.742636][T17124] RSP: 002b:00007f49c265d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1417.742655][T17124] RAX: ffffffffffffffda RBX: 00007f49c19b5fa0 RCX: 00007f49c178d33c [ 1417.742668][T17124] RDX: 000000000000000f RSI: 00007f49c265d0a0 RDI: 0000000000000004 [ 1417.742679][T17124] RBP: 00007f49c265d090 R08: 0000000000000000 R09: 0000000000000000 [ 1417.742690][T17124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1417.742700][T17124] R13: 0000000000000000 R14: 00007f49c19b5fa0 R15: 00007ffe819e6ec8 [ 1417.742728][T17124] [ 1418.062117][T17129] openvswitch: netlink: nsh attribute has 2 unknown bytes. [ 1418.474789][T11337] Bluetooth: hci1: command tx timeout [ 1418.755492][T17143] netlink: 'syz.1.2685': attribute type 10 has an invalid length. [ 1418.987458][T17143] team0: Device ipvlan1 failed to register rx_handler [ 1419.151624][T17147] vlan2: entered allmulticast mode [ 1419.162032][T17147] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 1419.322934][ T1213] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1419.350083][T16973] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1419.394529][T16973] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1419.445744][T16973] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1419.494123][T16973] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1419.508302][ T1213] usb 6-1: config 0 has no interfaces? [ 1419.516737][ T1213] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1419.529735][ T1213] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.642423][ T1213] usb 6-1: Product: syz [ 1419.687205][ T1213] usb 6-1: Manufacturer: syz [ 1419.718643][ T1213] usb 6-1: SerialNumber: syz [ 1420.008766][ T1213] usb 6-1: config 0 descriptor?? [ 1421.152354][ T9] usb 6-1: USB disconnect, device number 18 [ 1421.267503][T16973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1421.291535][T16973] 8021q: adding VLAN 0 to HW filter on device team0 [ 1421.304146][ T9268] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.311241][ T9268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1421.368986][ T9268] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.376199][ T9268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1421.463815][T16973] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1422.670176][T16973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1422.714320][T17223] FAULT_INJECTION: forcing a failure. [ 1422.714320][T17223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1422.738789][T17223] CPU: 1 UID: 0 PID: 17223 Comm: syz.1.2704 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 1422.738813][T17223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1422.738825][T17223] Call Trace: [ 1422.738832][T17223] [ 1422.738840][T17223] dump_stack_lvl+0x189/0x250 [ 1422.738869][T17223] ? __pfx____ratelimit+0x10/0x10 [ 1422.738893][T17223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1422.738916][T17223] ? __pfx__printk+0x10/0x10 [ 1422.738934][T17223] ? __might_fault+0xb0/0x130 [ 1422.738966][T17223] should_fail_ex+0x414/0x560 [ 1422.738993][T17223] _copy_from_user+0x2d/0xb0 [ 1422.739011][T17223] ___sys_sendmsg+0x158/0x2a0 [ 1422.739035][T17223] ? __pfx____sys_sendmsg+0x10/0x10 [ 1422.739087][T17223] ? __fget_files+0x2a/0x420 [ 1422.739108][T17223] ? __fget_files+0x3a0/0x420 [ 1422.739138][T17223] __x64_sys_sendmsg+0x19b/0x260 [ 1422.739162][T17223] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1422.739199][T17223] ? __pfx_ksys_write+0x10/0x10 [ 1422.739216][T17223] ? rcu_is_watching+0x15/0xb0 [ 1422.739245][T17223] ? do_syscall_64+0xbe/0x3b0 [ 1422.739264][T17223] do_syscall_64+0xfa/0x3b0 [ 1422.739279][T17223] ? lockdep_hardirqs_on+0x9c/0x150 [ 1422.739301][T17223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1422.739318][T17223] ? clear_bhb_loop+0x60/0xb0 [ 1422.739339][T17223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1422.739355][T17223] RIP: 0033:0x7ff7d4b8e929 [ 1422.739370][T17223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1422.739385][T17223] RSP: 002b:00007ff7d5954038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1422.739403][T17223] RAX: ffffffffffffffda RBX: 00007ff7d4db5fa0 RCX: 00007ff7d4b8e929 [ 1422.739416][T17223] RDX: 0000000000004800 RSI: 0000200000000300 RDI: 0000000000000004 [ 1422.739427][T17223] RBP: 00007ff7d5954090 R08: 0000000000000000 R09: 0000000000000000 [ 1422.739438][T17223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1422.739448][T17223] R13: 0000000000000000 R14: 00007ff7d4db5fa0 R15: 00007ffc66bf2068 [ 1422.739476][T17223] [ 1423.059274][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.177174][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.647073][T16973] veth0_vlan: entered promiscuous mode [ 1424.685399][T16973] veth1_vlan: entered promiscuous mode [ 1424.849121][T16973] veth0_macvtap: entered promiscuous mode [ 1424.917312][T17276] FAULT_INJECTION: forcing a failure. [ 1424.917312][T17276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1424.930913][T17276] CPU: 1 UID: 0 PID: 17276 Comm: syz.1.2712 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 1424.930936][T17276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1424.930946][T17276] Call Trace: [ 1424.930953][T17276] [ 1424.930961][T17276] dump_stack_lvl+0x189/0x250 [ 1424.930989][T17276] ? __pfx____ratelimit+0x10/0x10 [ 1424.931013][T17276] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1424.931034][T17276] ? __pfx__printk+0x10/0x10 [ 1424.931052][T17276] ? __might_fault+0xb0/0x130 [ 1424.931084][T17276] should_fail_ex+0x414/0x560 [ 1424.931111][T17276] _copy_from_user+0x2d/0xb0 [ 1424.931130][T17276] get_timespec64+0x8e/0x1a0 [ 1424.931152][T17276] ? __pfx_get_timespec64+0x10/0x10 [ 1424.931182][T17276] __se_sys_clock_nanosleep+0x1af/0x380 [ 1424.931207][T17276] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 1424.931226][T17276] ? rcu_is_watching+0x15/0xb0 [ 1424.931254][T17276] ? do_syscall_64+0xbe/0x3b0 [ 1424.931282][T17276] do_syscall_64+0xfa/0x3b0 [ 1424.931297][T17276] ? lockdep_hardirqs_on+0x9c/0x150 [ 1424.931320][T17276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1424.931336][T17276] ? clear_bhb_loop+0x60/0xb0 [ 1424.931356][T17276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1424.931372][T17276] RIP: 0033:0x7ff7d4b8e929 [ 1424.931388][T17276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1424.931403][T17276] RSP: 002b:00007ff7d5954038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 1424.931421][T17276] RAX: ffffffffffffffda RBX: 00007ff7d4db5fa0 RCX: 00007ff7d4b8e929 [ 1424.931435][T17276] RDX: 0000200000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 1424.931445][T17276] RBP: 00007ff7d5954090 R08: 0000000000000000 R09: 0000000000000000 [ 1424.931456][T17276] R10: 0000200000001b40 R11: 0000000000000246 R12: 0000000000000001 [ 1424.931467][T17276] R13: 0000000000000000 R14: 00007ff7d4db5fa0 R15: 00007ffc66bf2068 [ 1424.931496][T17276] [ 1424.951531][T16973] veth1_macvtap: entered promiscuous mode [ 1425.402830][T16973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1425.451471][T16973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1425.481240][T16973] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.510326][T16973] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.543590][T16973] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1425.571225][T16973] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1426.381984][ T5917] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1426.542217][ T5917] usb 2-1: Using ep0 maxpacket: 32 [ 1426.563852][ T5917] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 1426.610571][ T5917] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1426.649822][ T3535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1426.662370][ T5917] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1426.671332][ T5917] usb 2-1: config 1 has no interface number 0 [ 1426.675933][ T3535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1426.918088][ T5917] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1426.941402][ T5917] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1426.970069][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1426.979338][ T5917] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1426.990878][ T5917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.998955][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1427.032202][ T5917] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 1427.388797][T17314] loop6: detected capacity change from 0 to 63 [ 1427.398068][T17312] FAULT_INJECTION: forcing a failure. [ 1427.398068][T17312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1427.404393][T16895] Buffer I/O error on dev loop6, logical block 0, async page read [ 1427.428019][T17314] Buffer I/O error on dev loop6, logical block 0, async page read [ 1427.439189][T17314] Buffer I/O error on dev loop6, logical block 0, async page read [ 1427.451924][T17312] CPU: 1 UID: 0 PID: 17312 Comm: syz.0.2723 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 1427.451947][T17312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1427.451959][T17312] Call Trace: [ 1427.451966][T17312] [ 1427.451972][T17312] dump_stack_lvl+0x189/0x250 [ 1427.452000][T17312] ? __pfx____ratelimit+0x10/0x10 [ 1427.452028][T17312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1427.452049][T17312] ? __pfx__printk+0x10/0x10 [ 1427.452067][T17312] ? __might_fault+0xb0/0x130 [ 1427.452098][T17312] should_fail_ex+0x414/0x560 [ 1427.452124][T17312] _copy_from_user+0x2d/0xb0 [ 1427.452142][T17312] __x64_sys_signalfd+0xec/0x170 [ 1427.452165][T17312] ? __pfx___x64_sys_signalfd+0x10/0x10 [ 1427.452185][T17312] ? rcu_is_watching+0x15/0xb0 [ 1427.452214][T17312] ? do_syscall_64+0xbe/0x3b0 [ 1427.452234][T17312] do_syscall_64+0xfa/0x3b0 [ 1427.452248][T17312] ? lockdep_hardirqs_on+0x9c/0x150 [ 1427.452271][T17312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.452289][T17312] ? clear_bhb_loop+0x60/0xb0 [ 1427.452309][T17312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.452326][T17312] RIP: 0033:0x7fe0f198e929 [ 1427.452341][T17312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1427.452356][T17312] RSP: 002b:00007fe0f2722038 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 1427.452374][T17312] RAX: ffffffffffffffda RBX: 00007fe0f1bb5fa0 RCX: 00007fe0f198e929 [ 1427.452388][T17312] RDX: 0000000000000008 RSI: 0000200000002340 RDI: 0000000000000003 [ 1427.452399][T17312] RBP: 00007fe0f2722090 R08: 0000000000000000 R09: 0000000000000000 [ 1427.452410][T17312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1427.452420][T17312] R13: 0000000000000000 R14: 00007fe0f1bb5fa0 R15: 00007ffe274b3048 [ 1427.452449][T17312] [ 1427.473869][T16895] Buffer I/O error on dev loop6, logical block 0, async page read [ 1427.603796][T17323] FAULT_INJECTION: forcing a failure. [ 1427.603796][T17323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1427.682556][ T5917] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 1427.682883][T17323] CPU: 0 UID: 0 PID: 17323 Comm: syz.5.2725 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 1427.682915][T17323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1427.682925][T17323] Call Trace: [ 1427.682932][T17323] [ 1427.682940][T17323] dump_stack_lvl+0x189/0x250 [ 1427.682972][T17323] ? __pfx____ratelimit+0x10/0x10 [ 1427.682996][T17323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1427.683019][T17323] ? __pfx__printk+0x10/0x10 [ 1427.683037][T17323] ? __might_fault+0xb0/0x130 [ 1427.683068][T17323] should_fail_ex+0x414/0x560 [ 1427.683093][T17323] _copy_from_user+0x2d/0xb0 [ 1427.683112][T17323] ___sys_sendmsg+0x158/0x2a0 [ 1427.683136][T17323] ? __pfx____sys_sendmsg+0x10/0x10 [ 1427.683197][T17323] ? __fget_files+0x2a/0x420 [ 1427.683217][T17323] ? __fget_files+0x3a0/0x420 [ 1427.683248][T17323] __x64_sys_sendmsg+0x19b/0x260 [ 1427.683271][T17323] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1427.683301][T17323] ? __pfx_ksys_write+0x10/0x10 [ 1427.683317][T17323] ? rcu_is_watching+0x15/0xb0 [ 1427.683346][T17323] ? do_syscall_64+0xbe/0x3b0 [ 1427.683365][T17323] do_syscall_64+0xfa/0x3b0 [ 1427.683380][T17323] ? lockdep_hardirqs_on+0x9c/0x150 [ 1427.683402][T17323] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.683418][T17323] ? clear_bhb_loop+0x60/0xb0 [ 1427.683439][T17323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.683454][T17323] RIP: 0033:0x7f49c178e929 [ 1427.683470][T17323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1427.683485][T17323] RSP: 002b:00007f49c263c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1427.683503][T17323] RAX: ffffffffffffffda RBX: 00007f49c19b6080 RCX: 00007f49c178e929 [ 1427.683516][T17323] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000003 [ 1427.683527][T17323] RBP: 00007f49c263c090 R08: 0000000000000000 R09: 0000000000000000 [ 1427.683537][T17323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1427.683547][T17323] R13: 0000000000000000 R14: 00007f49c19b6080 R15: 00007ffe819e6ec8 [ 1427.683574][T17323] [ 1427.725695][T16895] Buffer I/O error on dev loop6, logical block 0, async page read [ 1427.949137][T16895] Buffer I/O error on dev loop6, logical block 0, async page read [ 1427.957498][T17327] Buffer I/O error on dev loop6, logical block 0, async page read [ 1427.977131][T14937] usb 2-1: USB disconnect, device number 20 [ 1427.987246][T14937] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 1427.998075][T17327] Buffer I/O error on dev loop6, logical block 0, async page read [ 1428.017070][T17329] Buffer I/O error on dev loop6, logical block 0, async page read [ 1428.032223][T17314] Buffer I/O error on dev loop6, logical block 0, async page read [ 1428.262994][T17343] FAULT_INJECTION: forcing a failure. [ 1428.262994][T17343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1428.342122][T17343] CPU: 1 UID: 0 PID: 17343 Comm: syz.5.2731 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 1428.342147][T17343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1428.342158][T17343] Call Trace: [ 1428.342165][T17343] [ 1428.342173][T17343] dump_stack_lvl+0x189/0x250 [ 1428.342201][T17343] ? __pfx____ratelimit+0x10/0x10 [ 1428.342225][T17343] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1428.342248][T17343] ? __pfx__printk+0x10/0x10 [ 1428.342266][T17343] ? __might_fault+0xb0/0x130 [ 1428.342297][T17343] should_fail_ex+0x414/0x560 [ 1428.342324][T17343] _copy_from_user+0x2d/0xb0 [ 1428.342342][T17343] ___sys_sendmsg+0x158/0x2a0 [ 1428.342366][T17343] ? __pfx____sys_sendmsg+0x10/0x10 [ 1428.342422][T17343] ? __fget_files+0x2a/0x420 [ 1428.342443][T17343] ? __fget_files+0x3a0/0x420 [ 1428.342473][T17343] __x64_sys_sendmsg+0x19b/0x260 [ 1428.342496][T17343] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1428.342526][T17343] ? __pfx_ksys_write+0x10/0x10 [ 1428.342543][T17343] ? rcu_is_watching+0x15/0xb0 [ 1428.342571][T17343] ? do_syscall_64+0xbe/0x3b0 [ 1428.342591][T17343] do_syscall_64+0xfa/0x3b0 [ 1428.342605][T17343] ? lockdep_hardirqs_on+0x9c/0x150 [ 1428.342628][T17343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.342644][T17343] ? clear_bhb_loop+0x60/0xb0 [ 1428.342666][T17343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.342682][T17343] RIP: 0033:0x7f49c178e929 [ 1428.342697][T17343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1428.342711][T17343] RSP: 002b:00007f49c265d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1428.342730][T17343] RAX: ffffffffffffffda RBX: 00007f49c19b5fa0 RCX: 00007f49c178e929 [ 1428.342743][T17343] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 1428.342754][T17343] RBP: 00007f49c265d090 R08: 0000000000000000 R09: 0000000000000000 [ 1428.342773][T17343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1428.342783][T17343] R13: 0000000000000000 R14: 00007f49c19b5fa0 R15: 00007ffe819e6ec8 [ 1428.342811][T17343] [ 1429.887833][T17361] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1429.998947][T17363] trusted_key: syz.5.2738 sent an empty control message without MSG_MORE. [ 1431.246744][T14908] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1431.255483][T14908] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1431.269671][T14908] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1431.279191][T14908] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1431.287355][T14908] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1431.428443][T17381] lo speed is unknown, defaulting to 1000 [ 1431.498955][T17381] lo speed is unknown, defaulting to 1000 [ 1431.739193][T17394] netlink: 'syz.5.2746': attribute type 10 has an invalid length. [ 1431.776536][T17394] team0: Device ipvlan1 failed to register rx_handler [ 1432.243885][ T3535] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1432.403791][ T3535] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1432.446024][T17401] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1433.313767][ T3535] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.353313][T11337] Bluetooth: hci3: command tx timeout [ 1433.473245][ T3535] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.808008][ T3535] bridge_slave_1: left allmulticast mode [ 1434.827033][ T3535] bridge_slave_1: left promiscuous mode [ 1434.848807][ T3535] bridge0: port 2(bridge_slave_1) entered disabled state [ 1434.968322][ T3535] bridge_slave_0: left allmulticast mode [ 1435.001359][ T3535] bridge_slave_0: left promiscuous mode [ 1435.009408][ T3535] bridge0: port 1(bridge_slave_0) entered disabled state [ 1435.435728][T11337] Bluetooth: hci3: command tx timeout [ 1435.977318][T17447] rdma_rxe: rxe_newlink: failed to add lo [ 1436.946623][ T3535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1437.512360][T11337] Bluetooth: hci3: command tx timeout [ 1437.617518][ T3535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1437.795838][ T3535] bond0 (unregistering): Released all slaves [ 1437.953443][ T3535] IPVS: stopping master sync thread 9939 ... [ 1438.157757][T17478] FAULT_INJECTION: forcing a failure. [ 1438.157757][T17478] name failslab, interval 1, probability 0, space 0, times 1 [ 1438.195717][T17478] CPU: 1 UID: 0 PID: 17478 Comm: syz.6.2763 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 1438.195742][T17478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1438.195752][T17478] Call Trace: [ 1438.195760][T17478] [ 1438.195768][T17478] dump_stack_lvl+0x189/0x250 [ 1438.195798][T17478] ? __pfx____ratelimit+0x10/0x10 [ 1438.195822][T17478] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1438.195845][T17478] ? __pfx__printk+0x10/0x10 [ 1438.195867][T17478] ? __pfx___might_resched+0x10/0x10 [ 1438.195890][T17478] ? fs_reclaim_acquire+0x7d/0x100 [ 1438.195918][T17478] should_fail_ex+0x414/0x560 [ 1438.195945][T17478] should_failslab+0xa8/0x100 [ 1438.195968][T17478] __kmalloc_noprof+0xcb/0x4f0 [ 1438.195986][T17478] ? kfree+0x4d/0x440 [ 1438.196001][T17478] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1438.196030][T17478] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1438.196057][T17478] ? tomoyo_domain+0xda/0x130 [ 1438.196086][T17478] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1438.196107][T17478] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1438.196131][T17478] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1438.196170][T17478] ? __lock_acquire+0xab9/0xd20 [ 1438.196212][T17478] ? __fget_files+0x2a/0x420 [ 1438.196237][T17478] ? __fget_files+0x2a/0x420 [ 1438.196257][T17478] ? __fget_files+0x3a0/0x420 [ 1438.196276][T17478] ? __fget_files+0x2a/0x420 [ 1438.196309][T17478] security_file_ioctl+0xcb/0x2d0 [ 1438.196334][T17478] __se_sys_ioctl+0x47/0x170 [ 1438.196354][T17478] do_syscall_64+0xfa/0x3b0 [ 1438.196370][T17478] ? lockdep_hardirqs_on+0x9c/0x150 [ 1438.196394][T17478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.196411][T17478] ? clear_bhb_loop+0x60/0xb0 [ 1438.196432][T17478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.196449][T17478] RIP: 0033:0x7fccc9b8e929 [ 1438.196465][T17478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1438.196479][T17478] RSP: 002b:00007fcccaaae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1438.196498][T17478] RAX: ffffffffffffffda RBX: 00007fccc9db5fa0 RCX: 00007fccc9b8e929 [ 1438.196510][T17478] RDX: 0000200000000040 RSI: 0000000000008923 RDI: 0000000000000005 [ 1438.196521][T17478] RBP: 00007fcccaaae090 R08: 0000000000000000 R09: 0000000000000000 [ 1438.196532][T17478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1438.196542][T17478] R13: 0000000000000000 R14: 00007fccc9db5fa0 R15: 00007fffef652d28 [ 1438.196570][T17478] [ 1438.196578][T17478] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1438.891274][T17478] : renamed from bond0 (while UP) [ 1439.592288][T11337] Bluetooth: hci3: command tx timeout [ 1440.162352][T17505] rdma_rxe: rxe_newlink: failed to add lo [ 1441.946028][T17524] input: syz0 as /devices/virtual/input/input49 [ 1442.009811][T17524] input: failed to attach handler leds to device input49, error: -6 [ 1442.102382][ T5917] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1442.120599][ T43] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1442.301880][ T3535] hsr_slave_0: left promiscuous mode [ 1442.313533][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 1442.330885][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1442.346468][ T3535] hsr_slave_1: left promiscuous mode [ 1442.362784][ T3535] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1442.370239][ T3535] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1442.387741][ T43] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1442.397355][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.406752][ T3535] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1442.417040][ T43] usb 3-1: Product: syz [ 1442.421246][ T43] usb 3-1: Manufacturer: syz [ 1442.428167][ T3535] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1442.436860][ T43] usb 3-1: SerialNumber: syz [ 1442.452583][ T43] usb 3-1: config 0 descriptor?? [ 1442.474340][ T43] hub 3-1:0.0: bad descriptor, ignoring hub [ 1442.490529][ T43] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1442.500924][ T3535] veth1_macvtap: left promiscuous mode [ 1442.522154][ T3535] veth0_macvtap: left promiscuous mode [ 1442.527876][ T3535] veth1_vlan: left promiscuous mode [ 1442.557215][ T43] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input50 [ 1442.572467][ T3535] veth0_vlan: left promiscuous mode [ 1442.598276][ T43] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 1442.654896][ T43] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 1442.761714][ T43] usb 3-1: USB disconnect, device number 20 [ 1443.348277][ T3535] team0 (unregistering): Port device team_slave_1 removed [ 1443.408876][ T3535] team0 (unregistering): Port device team_slave_0 removed [ 1444.267917][T17381] chnl_net:caif_netlink_parms(): no params data found [ 1444.489911][T17562] FAULT_INJECTION: forcing a failure. [ 1444.489911][T17562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1444.505893][T17562] CPU: 0 UID: 0 PID: 17562 Comm: syz.5.2781 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 1444.505917][T17562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1444.505928][T17562] Call Trace: [ 1444.505934][T17562] [ 1444.505942][T17562] dump_stack_lvl+0x189/0x250 [ 1444.505970][T17562] ? __pfx____ratelimit+0x10/0x10 [ 1444.505995][T17562] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1444.506018][T17562] ? __pfx__printk+0x10/0x10 [ 1444.506036][T17562] ? __might_fault+0xb0/0x130 [ 1444.506065][T17562] should_fail_ex+0x414/0x560 [ 1444.506090][T17562] _copy_from_user+0x2d/0xb0 [ 1444.506107][T17562] __se_sys_rt_sigtimedwait+0xea/0x2b0 [ 1444.506136][T17562] ? __pfx___se_sys_rt_sigtimedwait+0x10/0x10 [ 1444.506160][T17562] ? fput+0xa0/0xd0 [ 1444.506183][T17562] ? ksys_write+0x22a/0x250 [ 1444.506203][T17562] ? __pfx_ksys_write+0x10/0x10 [ 1444.506218][T17562] ? rcu_is_watching+0x15/0xb0 [ 1444.506247][T17562] ? do_syscall_64+0xbe/0x3b0 [ 1444.506266][T17562] do_syscall_64+0xfa/0x3b0 [ 1444.506281][T17562] ? lockdep_hardirqs_on+0x9c/0x150 [ 1444.506304][T17562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1444.506319][T17562] ? clear_bhb_loop+0x60/0xb0 [ 1444.506339][T17562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1444.506355][T17562] RIP: 0033:0x7f49c178e929 [ 1444.506370][T17562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1444.506385][T17562] RSP: 002b:00007f49c265d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000080 [ 1444.506403][T17562] RAX: ffffffffffffffda RBX: 00007f49c19b5fa0 RCX: 00007f49c178e929 [ 1444.506416][T17562] RDX: 0000000000000000 RSI: 0000200000005c80 RDI: 0000200000000100 [ 1444.506427][T17562] RBP: 00007f49c265d090 R08: 0000000000000000 R09: 0000000000000000 [ 1444.506438][T17562] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 1444.506449][T17562] R13: 0000000000000000 R14: 00007f49c19b5fa0 R15: 00007ffe819e6ec8 [ 1444.506477][T17562] [ 1444.789514][T17569] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2783'. [ 1444.872745][T14937] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1444.911592][T17381] bridge0: port 1(bridge_slave_0) entered blocking state [ 1444.919442][T17381] bridge0: port 1(bridge_slave_0) entered disabled state [ 1444.953368][T17381] bridge_slave_0: entered allmulticast mode [ 1444.968166][T17381] bridge_slave_0: entered promiscuous mode [ 1444.999538][T17381] bridge0: port 2(bridge_slave_1) entered blocking state [ 1445.007301][T17381] bridge0: port 2(bridge_slave_1) entered disabled state [ 1445.015356][T17381] bridge_slave_1: entered allmulticast mode [ 1445.023107][T17381] bridge_slave_1: entered promiscuous mode [ 1445.032875][T14937] usb 3-1: Using ep0 maxpacket: 16 [ 1445.044393][T14937] usb 3-1: too many endpoints for config 0 interface 0 altsetting 255: 254, using maximum allowed: 30 [ 1445.075655][T14937] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 197, changing to 11 [ 1445.269042][T14937] usb 3-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1445.556048][T14937] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1445.579382][T14937] usb 3-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 1445.600425][T14937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1445.677894][T14937] usb 3-1: config 0 descriptor?? [ 1445.690760][T17381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1445.726681][T17381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1445.957386][T17381] team0: Port device team_slave_0 added [ 1445.989550][T17381] team0: Port device team_slave_1 added [ 1446.158187][T17381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1446.170420][T14937] topre 0003:0853:0148.0001: hidraw0: USB HID vc9.b6 Device [HID 0853:0148] on usb-dummy_hcd.2-1/input0 [ 1446.197344][T17381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1446.236606][T17381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1446.279089][T17381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1446.296427][T17381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1446.377405][T14937] usb 3-1: USB disconnect, device number 21 [ 1446.407815][T17381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1446.444024][T17605] netlink: 'syz.5.2792': attribute type 1 has an invalid length. [ 1446.515748][T17601] fido_id[17601]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1446.670444][T17381] hsr_slave_0: entered promiscuous mode [ 1446.704134][T17381] hsr_slave_1: entered promiscuous mode [ 1446.710432][T17381] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1446.742578][T17381] Cannot create hsr debugfs directory [ 1446.770204][T17613] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2794'. [ 1446.971955][T14947] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1447.163646][T14947] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1447.163675][T14947] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1447.163699][T14947] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1447.163720][T14947] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1447.163758][T14947] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1447.163779][T14947] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1447.166574][T14947] usb 7-1: config 0 descriptor?? [ 1447.469065][T17628] FAULT_INJECTION: forcing a failure. [ 1447.469065][T17628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1447.476417][T14947] hdpvr 7-1:0.0: unexpected answer of status request, len -71 [ 1447.504388][T17628] CPU: 1 UID: 0 PID: 17628 Comm: syz.0.2800 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 1447.504412][T17628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1447.504423][T17628] Call Trace: [ 1447.504431][T17628] [ 1447.504438][T17628] dump_stack_lvl+0x189/0x250 [ 1447.504467][T17628] ? __pfx____ratelimit+0x10/0x10 [ 1447.504491][T17628] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1447.504515][T17628] ? __pfx__printk+0x10/0x10 [ 1447.504546][T17628] should_fail_ex+0x414/0x560 [ 1447.504573][T17628] _copy_from_user+0x2d/0xb0 [ 1447.504591][T17628] alg_setkey+0xb8/0x190 [ 1447.504616][T17628] alg_setsockopt+0x3da/0x4a0 [ 1447.504637][T17628] ? __pfx_alg_setsockopt+0x10/0x10 [ 1447.504658][T17628] do_sock_setsockopt+0x257/0x3e0 [ 1447.504681][T17628] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1447.504705][T17628] ? __fget_files+0x2a/0x420 [ 1447.504735][T17628] __x64_sys_setsockopt+0x18b/0x220 [ 1447.504757][T17628] do_syscall_64+0xfa/0x3b0 [ 1447.504768][T17628] ? lockdep_hardirqs_on+0x9c/0x150 [ 1447.504787][T17628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1447.504800][T17628] ? clear_bhb_loop+0x60/0xb0 [ 1447.504816][T17628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1447.504830][T17628] RIP: 0033:0x7fe0f198e929 [ 1447.504844][T17628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1447.504857][T17628] RSP: 002b:00007fe0f2722038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1447.504874][T17628] RAX: ffffffffffffffda RBX: 00007fe0f1bb5fa0 RCX: 00007fe0f198e929 [ 1447.504883][T17628] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 1447.504891][T17628] RBP: 00007fe0f2722090 R08: 0000000000000000 R09: 0000000000000000 [ 1447.504899][T17628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1447.504907][T17628] R13: 0000000000000000 R14: 00007fe0f1bb5fa0 R15: 00007ffe274b3048 [ 1447.504932][T17628] [ 1447.522198][T17625] kvm: Disabled LAPIC found during irq injection [ 1447.726360][T14947] hdpvr 7-1:0.0: device init failed [ 1447.731671][T14947] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -12 [ 1447.758619][T14947] usb 7-1: USB disconnect, device number 2 [ 1447.981993][T14937] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1448.168266][T17381] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1448.182234][T14937] usb 1-1: config 0 has no interfaces? [ 1448.199373][T14937] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1448.200712][T17381] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1448.242003][T14937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.256918][T14937] usb 1-1: Product: syz [ 1448.259118][T17381] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1448.264794][T14937] usb 1-1: Manufacturer: syz [ 1448.299987][T14937] usb 1-1: SerialNumber: syz [ 1448.308306][T17381] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1448.316501][T14937] usb 1-1: config 0 descriptor?? [ 1448.529445][T14947] usb 1-1: USB disconnect, device number 26 [ 1448.698398][T17381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1448.759867][T17381] 8021q: adding VLAN 0 to HW filter on device team0 [ 1448.834711][ T6980] bridge0: port 1(bridge_slave_0) entered blocking state [ 1448.841911][ T6980] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1448.892821][ T6347] bridge0: port 2(bridge_slave_1) entered blocking state [ 1448.899993][ T6347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1449.112927][T14947] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1449.878116][T14947] usb 7-1: config 0 has an invalid interface number: 246 but max is 0 [ 1450.274050][T14947] usb 7-1: config 0 has no interface number 0 [ 1450.349412][T14947] usb 7-1: New USB device found, idVendor=28a7, idProduct=71ab, bcdDevice=df.39 [ 1450.378706][T14947] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1450.439193][T14947] usb 7-1: Product: syz [ 1450.470266][T14947] usb 7-1: Manufacturer: syz [ 1450.526751][T14947] usb 7-1: SerialNumber: syz [ 1450.691419][T14947] usb 7-1: config 0 descriptor?? [ 1450.790486][T14947] cdc_wdm 7-1:0.246: More than one union descriptor, skipping ... [ 1450.851193][T14947] cdc_wdm 7-1:0.246: probe with driver cdc_wdm failed with error -22 [ 1451.109642][T14947] usb 7-1: USB disconnect, device number 3 [ 1451.498889][T17381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1451.629490][T17381] veth0_vlan: entered promiscuous mode [ 1451.685189][T17381] veth1_vlan: entered promiscuous mode [ 1451.710134][T17712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1451.760827][T17381] veth0_macvtap: entered promiscuous mode [ 1451.789235][T17381] veth1_macvtap: entered promiscuous mode [ 1451.851385][T17381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1451.868657][T17381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1451.891970][ T9] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1451.896194][T17381] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.913749][T17381] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.927812][T17381] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1451.939080][T17381] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1452.065634][ T9] usb 1-1: too many configurations: 151, using maximum allowed: 8 [ 1452.078723][ T6347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1452.103213][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1452.125461][ T6347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1452.145639][ T9] usb 1-1: config 0 has no interfaces? [ 1452.170451][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1452.185687][ T9] usb 1-1: config 0 has no interfaces? [ 1452.193463][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1452.207220][ T9] usb 1-1: config 0 has no interfaces? [ 1452.214344][T17728] FAULT_INJECTION: forcing a failure. [ 1452.214344][T17728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1452.228757][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1452.233385][T17448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1452.239649][ T9] usb 1-1: config 0 has no interfaces? [ 1452.254296][T17722] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1452.268716][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1452.270934][T17448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1452.279105][T17728] CPU: 0 UID: 0 PID: 17728 Comm: syz.5.2818 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 1452.279128][T17728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1452.279139][T17728] Call Trace: [ 1452.279146][T17728] [ 1452.279153][T17728] dump_stack_lvl+0x189/0x250 [ 1452.279179][T17728] ? __pfx____ratelimit+0x10/0x10 [ 1452.279205][T17728] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1452.279228][T17728] ? __pfx__printk+0x10/0x10 [ 1452.279245][T17728] ? __might_fault+0xb0/0x130 [ 1452.279316][T17728] should_fail_ex+0x414/0x560 [ 1452.279348][T17728] _copy_from_user+0x2d/0xb0 [ 1452.279367][T17728] ___sys_sendmsg+0x158/0x2a0 [ 1452.279391][T17728] ? __pfx____sys_sendmsg+0x10/0x10 [ 1452.279445][T17728] ? __fget_files+0x2a/0x420 [ 1452.279466][T17728] ? __fget_files+0x3a0/0x420 [ 1452.279497][T17728] __x64_sys_sendmsg+0x19b/0x260 [ 1452.279520][T17728] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1452.279549][T17728] ? __pfx_ksys_write+0x10/0x10 [ 1452.279574][T17728] ? do_syscall_64+0xbe/0x3b0 [ 1452.279593][T17728] do_syscall_64+0xfa/0x3b0 [ 1452.279608][T17728] ? lockdep_hardirqs_on+0x9c/0x150 [ 1452.279629][T17728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.279646][T17728] ? clear_bhb_loop+0x60/0xb0 [ 1452.279667][T17728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.279683][T17728] RIP: 0033:0x7f49c178e929 [ 1452.279699][T17728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1452.279713][T17728] RSP: 002b:00007f49c261b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1452.279732][T17728] RAX: ffffffffffffffda RBX: 00007f49c19b6160 RCX: 00007f49c178e929 [ 1452.279744][T17728] RDX: 0000000000000080 RSI: 0000200000000300 RDI: 0000000000000003 [ 1452.279755][T17728] RBP: 00007f49c261b090 R08: 0000000000000000 R09: 0000000000000000 [ 1452.279766][T17728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1452.279777][T17728] R13: 0000000000000001 R14: 00007f49c19b6160 R15: 00007ffe819e6ec8 [ 1452.279804][T17728] [ 1452.279935][ T9] usb 1-1: config 0 has no interfaces? [ 1452.551002][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1452.562371][ T9] usb 1-1: config 0 has no interfaces? [ 1452.581418][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1452.597276][ T9] usb 1-1: config 0 has no interfaces? [ 1452.618028][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1452.641994][ T9] usb 1-1: config 0 has no interfaces? [ 1452.672247][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7 [ 1452.681520][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130 [ 1452.703190][ T9] usb 1-1: Product: syz [ 1452.763944][ T9] usb 1-1: Manufacturer: syz [ 1452.778728][ T9] usb 1-1: SerialNumber: syz [ 1452.856540][T17739] lo speed is unknown, defaulting to 1000 [ 1452.862862][T17739] lo speed is unknown, defaulting to 1000 [ 1452.873303][T17739] lo speed is unknown, defaulting to 1000 [ 1452.987128][T17739] infiniband s…z0: RDMA CMA: cma_listen_on_dev, error -98 [ 1453.218681][T17739] lo speed is unknown, defaulting to 1000 [ 1453.239455][T17739] lo speed is unknown, defaulting to 1000 [ 1453.321406][T17739] lo speed is unknown, defaulting to 1000 [ 1453.328911][T17739] lo speed is unknown, defaulting to 1000 [ 1453.336429][T17739] lo speed is unknown, defaulting to 1000 [ 1453.363303][ T9] usb 1-1: config 0 descriptor?? [ 1453.655353][T17742] netlink: 'syz.1.2736': attribute type 10 has an invalid length. [ 1453.678567][ T5917] usb 1-1: USB disconnect, device number 27 [ 1453.717917][T17742] team0: Device ipvlan1 failed to register rx_handler [ 1454.353771][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1454.797671][ T9] usb 3-1: config 0 has no interfaces? [ 1454.817410][ T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1455.080580][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.115062][ T9] usb 3-1: Product: syz [ 1455.119344][ T9] usb 3-1: Manufacturer: syz [ 1455.521927][ T9] usb 3-1: SerialNumber: syz [ 1455.533651][ T9] usb 3-1: config 0 descriptor?? [ 1455.771358][ T9] usb 3-1: USB disconnect, device number 22 [ 1456.822827][T17780] FAULT_INJECTION: forcing a failure. [ 1456.822827][T17780] name failslab, interval 1, probability 0, space 0, times 0 [ 1456.886403][T17780] CPU: 1 UID: 0 PID: 17780 Comm: syz.5.2832 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 1456.886429][T17780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1456.886440][T17780] Call Trace: [ 1456.886447][T17780] [ 1456.886455][T17780] dump_stack_lvl+0x189/0x250 [ 1456.886483][T17780] ? __pfx____ratelimit+0x10/0x10 [ 1456.886507][T17780] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1456.886530][T17780] ? __pfx__printk+0x10/0x10 [ 1456.886554][T17780] ? __pfx___might_resched+0x10/0x10 [ 1456.886575][T17780] ? fs_reclaim_acquire+0x7d/0x100 [ 1456.886603][T17780] should_fail_ex+0x414/0x560 [ 1456.886630][T17780] should_failslab+0xa8/0x100 [ 1456.886654][T17780] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1456.886673][T17780] ? getname_flags+0xb8/0x540 [ 1456.886699][T17780] getname_flags+0xb8/0x540 [ 1456.886726][T17780] do_sys_openat2+0xbc/0x1c0 [ 1456.886753][T17780] ? __pfx_do_sys_openat2+0x10/0x10 [ 1456.886777][T17780] ? ksys_write+0x22a/0x250 [ 1456.886799][T17780] ? __pfx_ksys_write+0x10/0x10 [ 1456.886815][T17780] ? rcu_is_watching+0x15/0xb0 [ 1456.886842][T17780] __x64_sys_openat+0x138/0x170 [ 1456.886871][T17780] do_syscall_64+0xfa/0x3b0 [ 1456.886886][T17780] ? lockdep_hardirqs_on+0x9c/0x150 [ 1456.886909][T17780] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1456.886925][T17780] ? clear_bhb_loop+0x60/0xb0 [ 1456.886953][T17780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1456.886969][T17780] RIP: 0033:0x7f49c178d290 [ 1456.886985][T17780] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1456.887000][T17780] RSP: 002b:00007f49c265cb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1456.887019][T17780] RAX: ffffffffffffffda RBX: 0000000000000102 RCX: 00007f49c178d290 [ 1456.887031][T17780] RDX: 0000000000000102 RSI: 00007f49c265cc10 RDI: 00000000ffffff9c [ 1456.887042][T17780] RBP: 00007f49c265cc10 R08: 0000000000000000 R09: 0000000000000000 [ 1456.887053][T17780] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 1456.887064][T17780] R13: 0000000000000000 R14: 00007f49c19b5fa0 R15: 00007ffe819e6ec8 [ 1456.887092][T17780] [ 1457.103446][ C1] vkms_vblank_simulate: vblank timer overrun [ 1458.365422][T14908] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1458.391464][T14908] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1458.412572][T14908] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1458.446038][T14908] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1458.458360][T14908] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1458.636132][T17797] netlink: 'syz.6.2836': attribute type 10 has an invalid length. [ 1458.981962][T17797] team0: Device ipvlan1 failed to register rx_handler [ 1459.286915][T17820] nbd: must specify an index to disconnect [ 1459.455359][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1460.059456][T17802] lo speed is unknown, defaulting to 1000 [ 1460.097660][T17802] lo speed is unknown, defaulting to 1000 [ 1460.475571][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1460.757499][T17845] ubi31: attaching mtd0 [ 1461.125382][T14908] Bluetooth: hci4: command tx timeout [ 1461.521672][T17845] ubi31: scanning is finished [ 1461.527080][T17845] ubi31: empty MTD device detected [ 1461.719112][T17845] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 1461.919352][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1461.963503][T17802] lo speed is unknown, defaulting to 1000 [ 1461.969372][T17859] IPv6: sit1: Disabled Multicast RS [ 1462.048265][T17863] FAULT_INJECTION: forcing a failure. [ 1462.048265][T17863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1462.215653][T17863] CPU: 1 UID: 0 PID: 17863 Comm: syz.6.2850 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 1462.215678][T17863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1462.215689][T17863] Call Trace: [ 1462.215696][T17863] [ 1462.215704][T17863] dump_stack_lvl+0x189/0x250 [ 1462.215732][T17863] ? __pfx____ratelimit+0x10/0x10 [ 1462.215757][T17863] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1462.215780][T17863] ? __pfx__printk+0x10/0x10 [ 1462.215798][T17863] ? __might_fault+0xb0/0x130 [ 1462.215829][T17863] should_fail_ex+0x414/0x560 [ 1462.215854][T17863] _copy_from_user+0x2d/0xb0 [ 1462.215872][T17863] ___sys_sendmsg+0x158/0x2a0 [ 1462.215896][T17863] ? __pfx____sys_sendmsg+0x10/0x10 [ 1462.215953][T17863] ? __fget_files+0x2a/0x420 [ 1462.215973][T17863] ? __fget_files+0x3a0/0x420 [ 1462.216004][T17863] __x64_sys_sendmsg+0x19b/0x260 [ 1462.216027][T17863] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1462.216058][T17863] ? __pfx_ksys_write+0x10/0x10 [ 1462.216075][T17863] ? rcu_is_watching+0x15/0xb0 [ 1462.216102][T17863] ? do_syscall_64+0xbe/0x3b0 [ 1462.216123][T17863] do_syscall_64+0xfa/0x3b0 [ 1462.216137][T17863] ? lockdep_hardirqs_on+0x9c/0x150 [ 1462.216159][T17863] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.216176][T17863] ? clear_bhb_loop+0x60/0xb0 [ 1462.216197][T17863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.216213][T17863] RIP: 0033:0x7fccc9b8e929 [ 1462.216230][T17863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1462.216244][T17863] RSP: 002b:00007fcccaaae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1462.216262][T17863] RAX: ffffffffffffffda RBX: 00007fccc9db5fa0 RCX: 00007fccc9b8e929 [ 1462.216275][T17863] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1462.216286][T17863] RBP: 00007fcccaaae090 R08: 0000000000000000 R09: 0000000000000000 [ 1462.216297][T17863] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1462.216307][T17863] R13: 0000000000000000 R14: 00007fccc9db5fa0 R15: 00007fffef652d28 [ 1462.216335][T17863] [ 1462.428366][ C1] vkms_vblank_simulate: vblank timer overrun [ 1462.731652][ T36] bridge0: port 3(netdevsim0) entered disabled state [ 1462.800665][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 1462.814810][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 1462.824803][ T36] bridge0: port 3(netdevsim0) entered disabled state [ 1462.836371][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1463.232188][T14908] Bluetooth: hci4: command tx timeout [ 1463.712412][T17880] warning: `syz.1.2855' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1463.784118][T17884] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2857'. [ 1463.885532][T17880] kvm: Disabled LAPIC found during irq injection [ 1464.017578][T17802] chnl_net:caif_netlink_parms(): no params data found [ 1464.110476][T17896] FAULT_INJECTION: forcing a failure. [ 1464.110476][T17896] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1464.160069][T17896] CPU: 1 UID: 0 PID: 17896 Comm: syz.6.2861 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 1464.160098][T17896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1464.160109][T17896] Call Trace: [ 1464.160116][T17896] [ 1464.160124][T17896] dump_stack_lvl+0x189/0x250 [ 1464.160159][T17896] ? __pfx____ratelimit+0x10/0x10 [ 1464.160184][T17896] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1464.160207][T17896] ? __pfx__printk+0x10/0x10 [ 1464.160225][T17896] ? __might_fault+0xb0/0x130 [ 1464.160257][T17896] should_fail_ex+0x414/0x560 [ 1464.160283][T17896] _copy_from_user+0x2d/0xb0 [ 1464.160301][T17896] ___sys_sendmsg+0x158/0x2a0 [ 1464.160325][T17896] ? __pfx____sys_sendmsg+0x10/0x10 [ 1464.160381][T17896] ? __fget_files+0x2a/0x420 [ 1464.160402][T17896] ? __fget_files+0x3a0/0x420 [ 1464.160433][T17896] __x64_sys_sendmsg+0x19b/0x260 [ 1464.160458][T17896] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1464.160488][T17896] ? __pfx_ksys_write+0x10/0x10 [ 1464.160505][T17896] ? rcu_is_watching+0x15/0xb0 [ 1464.160534][T17896] ? do_syscall_64+0xbe/0x3b0 [ 1464.160553][T17896] do_syscall_64+0xfa/0x3b0 [ 1464.160568][T17896] ? lockdep_hardirqs_on+0x9c/0x150 [ 1464.160590][T17896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.160607][T17896] ? clear_bhb_loop+0x60/0xb0 [ 1464.160628][T17896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.160644][T17896] RIP: 0033:0x7fccc9b8e929 [ 1464.160660][T17896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1464.160675][T17896] RSP: 002b:00007fcccaaae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1464.160693][T17896] RAX: ffffffffffffffda RBX: 00007fccc9db5fa0 RCX: 00007fccc9b8e929 [ 1464.160706][T17896] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1464.160717][T17896] RBP: 00007fcccaaae090 R08: 0000000000000000 R09: 0000000000000000 [ 1464.160728][T17896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1464.160739][T17896] R13: 0000000000000000 R14: 00007fccc9db5fa0 R15: 00007fffef652d28 [ 1464.160767][T17896] [ 1464.368344][ C1] vkms_vblank_simulate: vblank timer overrun [ 1464.452088][ T36] bridge_slave_1: left allmulticast mode [ 1464.467996][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1464.488329][ T36] bridge_slave_1: left promiscuous mode [ 1464.533582][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1464.674411][ T36] bridge_slave_0: left allmulticast mode [ 1464.680082][ T36] bridge_slave_0: left promiscuous mode [ 1464.689331][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 1464.697468][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1464.708660][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1464.745363][ T10] usb 3-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 1465.113864][T17909] sz1: rxe_newlink: already configured on lo [ 1465.146233][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.185078][ T10] usb 3-1: config 0 descriptor?? [ 1465.272998][T14908] Bluetooth: hci4: command tx timeout [ 1465.618367][ T10] cypress 0003:04B4:0001.0002: unexpected long global item [ 1465.656449][ T10] cypress 0003:04B4:0001.0002: parse failed [ 1465.675611][ T10] cypress 0003:04B4:0001.0002: probe with driver cypress failed with error -22 [ 1465.817981][T17892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1465.843692][T17892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1465.859093][ T36] gretap0 (unregistering): left promiscuous mode [ 1466.298593][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1466.311744][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1466.328027][ T36] bond0 (unregistering): Released all slaves [ 1467.125516][T13789] usb 3-1: USB disconnect, device number 23 [ 1467.164242][ T36] tipc: Disabling bearer [ 1467.180022][ T36] tipc: Left network mode [ 1467.278918][T17802] bridge0: port 1(bridge_slave_0) entered blocking state [ 1467.292584][ T36] IPVS: stopping master sync thread 11424 ... [ 1467.301190][T17802] bridge0: port 1(bridge_slave_0) entered disabled state [ 1467.316480][T17802] bridge_slave_0: entered allmulticast mode [ 1467.326399][T17802] bridge_slave_0: entered promiscuous mode [ 1467.352080][T14908] Bluetooth: hci4: command tx timeout [ 1468.049131][T17802] bridge0: port 2(bridge_slave_1) entered blocking state [ 1468.198309][T17802] bridge0: port 2(bridge_slave_1) entered disabled state [ 1468.261000][T17802] bridge_slave_1: entered allmulticast mode [ 1468.273475][T17958] netlink: 'syz.5.2872': attribute type 10 has an invalid length. [ 1468.549661][T17802] bridge_slave_1: entered promiscuous mode [ 1468.640906][T17955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2873'. [ 1468.700044][T17958] team0: Device ipvlan1 failed to register rx_handler [ 1469.055432][T17802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1469.068565][T17802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1469.261615][T17802] team0: Port device team_slave_0 added [ 1469.298594][T17802] team0: Port device team_slave_1 added [ 1469.400341][T17802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1469.408466][T17802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1469.439069][T17802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1469.452519][T17802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1469.475531][T17802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1470.057047][T17802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1470.622502][ T36] hsr_slave_0: left promiscuous mode [ 1470.649249][ T36] hsr_slave_1: left promiscuous mode [ 1470.746033][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1470.843741][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1470.966941][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1471.077427][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1471.156443][ T36] veth1_macvtap: left promiscuous mode [ 1471.167043][ T36] veth0_macvtap: left promiscuous mode [ 1471.255935][ T36] veth1_vlan: left promiscuous mode [ 1471.261388][ T36] veth0_vlan: left promiscuous mode [ 1471.820233][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1471.858143][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1472.236932][T17802] hsr_slave_0: entered promiscuous mode [ 1472.243810][T17802] hsr_slave_1: entered promiscuous mode [ 1472.250116][T17802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1472.272309][T17802] Cannot create hsr debugfs directory [ 1476.402811][T18069] netlink: 'syz.5.2897': attribute type 10 has an invalid length. [ 1476.465522][T18069] team0: Device ipvlan1 failed to register rx_handler [ 1476.710288][T17802] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1476.789607][T17802] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1476.880668][T17802] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1476.945612][T17802] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1477.102043][ T5917] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1477.796360][ T5917] usb 6-1: Using ep0 maxpacket: 8 [ 1477.829630][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1477.871682][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1477.931160][ T5917] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1477.992336][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024 [ 1478.042133][ T5917] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1478.078815][T17802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1478.085427][ T5917] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1478.085454][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1478.106960][ T5917] usb 6-1: config 0 descriptor?? [ 1478.147889][T18090] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1478.169023][T17802] 8021q: adding VLAN 0 to HW filter on device team0 [ 1478.175797][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1478.238441][ T9269] bridge0: port 1(bridge_slave_0) entered blocking state [ 1478.245637][ T9269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1478.362376][ T10] usb 3-1: config 0 has no interfaces? [ 1478.379013][ T9269] bridge0: port 2(bridge_slave_1) entered blocking state [ 1478.382301][T14908] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 1478.386169][ T9269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1478.401890][ T5917] usb 6-1: USB disconnect, device number 19 [ 1478.409992][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1478.480978][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.530598][ T10] usb 3-1: Product: syz [ 1478.558417][ T10] usb 3-1: Manufacturer: syz [ 1478.582376][ T10] usb 3-1: SerialNumber: syz [ 1479.053653][ T10] usb 3-1: config 0 descriptor?? [ 1479.115651][ T3535] Bluetooth: hci5: Frame reassembly failed (-84) [ 1479.423838][ T10] usb 3-1: USB disconnect, device number 24 [ 1479.598566][T17802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1479.666717][T17802] veth0_vlan: entered promiscuous mode [ 1479.818983][T18137] netlink: 'syz.5.2910': attribute type 10 has an invalid length. [ 1479.916253][T18137] team0: Device ipvlan1 failed to register rx_handler [ 1480.172258][T17802] veth1_vlan: entered promiscuous mode [ 1480.455806][T18141] netlink: 'syz.1.2911': attribute type 10 has an invalid length. [ 1480.515031][T18141] team0: Device ipvlan1 failed to register rx_handler [ 1480.712770][T17802] veth0_macvtap: entered promiscuous mode [ 1480.777416][T17802] veth1_macvtap: entered promiscuous mode [ 1480.792215][T14908] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1483.405170][T17802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1483.566835][T18155] team_slave_0: entered promiscuous mode [ 1483.572845][T18155] team_slave_1: entered promiscuous mode [ 1483.710270][T18155] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1483.835055][T18155] team0: Device macvtap1 is already an upper device of the team interface [ 1483.911033][T18155] team_slave_0: left promiscuous mode [ 1483.911112][T18155] team_slave_1: left promiscuous mode [ 1484.647584][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.670052][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.903434][T17802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1484.957361][T17802] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1484.982588][T17802] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1484.991337][T17802] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1485.029028][T17802] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1485.096088][T18175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2921'. [ 1485.173429][T18179] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2922'. [ 1486.177873][T18186] netlink: 'syz.5.2923': attribute type 10 has an invalid length. [ 1486.202828][T18186] team0: Device ipvlan1 failed to register rx_handler [ 1486.432729][ T5917] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 1486.573897][ T9268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1486.585621][ T9268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1486.616669][ T5917] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1486.654888][ T5917] usb 2-1: not running at top speed; connect to a high speed hub [ 1486.697278][ T5917] usb 2-1: config 129 has an invalid interface number: 28 but max is 0 [ 1486.819564][ T5917] usb 2-1: config 129 has no interface number 0 [ 1486.819755][ T5917] usb 2-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 1486.819795][ T5917] usb 2-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64 [ 1486.819834][ T5917] usb 2-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1486.819873][ T5917] usb 2-1: config 129 interface 28 has no altsetting 0 [ 1486.996904][ T5917] usb 2-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57 [ 1486.996959][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1486.997007][ T5917] usb 2-1: Product: syz [ 1486.997054][ T5917] usb 2-1: Manufacturer: syz [ 1486.997102][ T5917] usb 2-1: SerialNumber: syz [ 1487.105043][ T6923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1487.184004][ T6923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1487.285239][T18175] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1487.804948][T18175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2921'. [ 1488.202755][ T5917] etas_es58x 2-1:129.28: Starting syz syz (Serial Number syz) [ 1488.374609][ T5917] etas_es58x 2-1:129.28: could not retrieve the product info string [ 1489.161913][ T5917] usb 2-1: USB disconnect, device number 21 [ 1489.192896][ T5917] etas_es58x 2-1:129.28: Disconnecting syz syz [ 1490.967334][T18237] rdma_rxe: rxe_newlink: failed to add lo [ 1491.959813][T11337] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1491.970398][T11337] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1491.981686][T11337] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1491.993349][T11337] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1492.001154][T11337] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1492.026413][T18256] netlink: 'syz.0.2939': attribute type 2 has an invalid length. [ 1492.086395][T18248] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2939'. [ 1492.098310][T18256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2939'. [ 1492.249645][ T1099] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1492.441336][T18249] lo speed is unknown, defaulting to 1000 [ 1493.030034][ T6347] Bluetooth: hci5: Frame reassembly failed (-84) [ 1493.056493][T18249] lo speed is unknown, defaulting to 1000 [ 1493.386975][ T1099] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.072424][T11337] Bluetooth: hci0: command tx timeout [ 1494.640876][T18249] lo speed is unknown, defaulting to 1000 [ 1494.806640][ T1099] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1494.863006][T18281] netlink: 'syz.0.2948': attribute type 10 has an invalid length. [ 1495.043607][T14908] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1495.051041][T18281] team0: Device ipvlan1 failed to register rx_handler [ 1495.457126][ T1099] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1496.011895][ T5917] usb 6-1: new low-speed USB device number 20 using dummy_hcd [ 1496.157404][T11337] Bluetooth: hci0: command tx timeout [ 1496.259955][ T5917] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1496.315091][ T5917] usb 6-1: config 179 has no interface number 0 [ 1496.341736][ T5917] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1496.341766][ T5917] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 1496.341798][ T5917] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1496.345337][ T5917] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 34, setting to 8 [ 1496.345364][ T5917] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1496.345408][ T5917] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1496.345430][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.361608][T18293] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1496.361793][T18293] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1498.092489][ T1099] bridge_slave_1: left allmulticast mode [ 1498.111075][ T1099] bridge_slave_1: left promiscuous mode [ 1498.123060][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1498.224105][ T1099] bridge_slave_0: left allmulticast mode [ 1498.232517][T11337] Bluetooth: hci0: command tx timeout [ 1498.249841][ T1099] bridge_slave_0: left promiscuous mode [ 1498.291163][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1498.315423][T18328] netlink: 'syz.6.2956': attribute type 10 has an invalid length. [ 1498.992930][ T30] audit: type=1326 audit(1749806698.006:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18292 comm="syz.5.2950" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49c178e929 code=0x7fc00000 [ 1499.434442][T14937] usb 6-1: USB disconnect, device number 20 [ 1499.434597][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1499.449103][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1499.457896][ C1] ================================================================== [ 1499.465968][ C1] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23d/0x290 [ 1499.473788][ C1] Read of size 4 at addr ffff88804b70405c by task kworker/1:1/43 [ 1499.481516][ C1] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1499.483860][ C1] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 1499.483887][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1499.483902][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 1499.483935][ C1] Call Trace: [ 1499.483943][ C1] [ 1499.483951][ C1] dump_stack_lvl+0x189/0x250 [ 1499.483981][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 1499.484001][ C1] ? rcu_is_watching+0x15/0xb0 [ 1499.484028][ C1] ? __kasan_check_byte+0x12/0x40 [ 1499.484052][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1499.484079][ C1] ? rcu_is_watching+0x15/0xb0 [ 1499.484106][ C1] ? lock_release+0x4b/0x3e0 [ 1499.484133][ C1] ? __virt_addr_valid+0x1c8/0x5c0 [ 1499.484151][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 1499.484170][ C1] print_report+0xd2/0x2b0 [ 1499.484193][ C1] ? do_raw_spin_lock+0x23d/0x290 [ 1499.484213][ C1] kasan_report+0x118/0x150 [ 1499.484237][ C1] ? do_raw_spin_lock+0x23d/0x290 [ 1499.484261][ C1] do_raw_spin_lock+0x23d/0x290 [ 1499.484280][ C1] ? __wake_up_common_lock+0x2f/0x1f0 [ 1499.484303][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1499.484327][ C1] _raw_spin_lock_irqsave+0xb3/0xf0 [ 1499.484355][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1499.484381][ C1] ? kcov_remote_stop+0x78/0x6d0 [ 1499.484407][ C1] __wake_up_common_lock+0x2f/0x1f0 [ 1499.484432][ C1] __usb_hcd_giveback_urb+0x4d7/0x690 [ 1499.484454][ C1] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 1499.484476][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 1499.484501][ C1] ? usb_hcd_giveback_urb+0x10e/0x420 [ 1499.484523][ C1] dummy_timer+0x862/0x4550 [ 1499.484566][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1499.484586][ C1] ? __pfx_process_backlog+0x10/0x10 [ 1499.484616][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1499.484638][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1499.484657][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1499.484676][ C1] __hrtimer_run_queues+0x529/0xc60 [ 1499.484711][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1499.484737][ C1] ? read_tsc+0x9/0x20 [ 1499.484763][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 1499.484791][ C1] handle_softirqs+0x286/0x870 [ 1499.484819][ C1] ? do_softirq+0xec/0x180 [ 1499.484846][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1499.484874][ C1] ? wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 1499.484902][ C1] do_softirq+0xec/0x180 [ 1499.484928][ C1] [ 1499.484934][ C1] [ 1499.484942][ C1] ? __pfx_do_softirq+0x10/0x10 [ 1499.484971][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 1499.484995][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 1499.485021][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1499.485050][ C1] ? do_raw_read_unlock+0x3d/0x80 [ 1499.485071][ C1] wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 1499.485101][ C1] wg_packet_tx_worker+0x1c8/0x7c0 [ 1499.485129][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1499.485154][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1499.485182][ C1] process_scheduled_works+0xade/0x17b0 [ 1499.485220][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1499.485254][ C1] worker_thread+0x8a0/0xda0 [ 1499.485290][ C1] kthread+0x70e/0x8a0 [ 1499.485310][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1499.485337][ C1] ? __pfx_kthread+0x10/0x10 [ 1499.485357][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1499.485382][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1499.485407][ C1] ? __pfx_kthread+0x10/0x10 [ 1499.485425][ C1] ret_from_fork+0x3fc/0x770 [ 1499.485448][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1499.485474][ C1] ? __switch_to_asm+0x39/0x70 [ 1499.485491][ C1] ? __switch_to_asm+0x33/0x70 [ 1499.485507][ C1] ? __pfx_kthread+0x10/0x10 [ 1499.485526][ C1] ret_from_fork_asm+0x1a/0x30 [ 1499.485557][ C1] [ 1499.485564][ C1] [ 1499.847288][ C1] Allocated by task 5917: [ 1499.851599][ C1] kasan_save_track+0x3e/0x80 [ 1499.856265][ C1] __kasan_kmalloc+0x93/0xb0 [ 1499.860840][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 1499.866198][ C1] xpad_probe+0x428/0x1fc0 [ 1499.870606][ C1] usb_probe_interface+0x641/0xbc0 [ 1499.875706][ C1] really_probe+0x26a/0x9a0 [ 1499.880206][ C1] __driver_probe_device+0x18c/0x2f0 [ 1499.885480][ C1] driver_probe_device+0x4f/0x430 [ 1499.890491][ C1] __device_attach_driver+0x2ce/0x530 [ 1499.895862][ C1] bus_for_each_drv+0x251/0x2e0 [ 1499.900702][ C1] __device_attach+0x2b8/0x400 [ 1499.905453][ C1] bus_probe_device+0x185/0x260 [ 1499.910293][ C1] device_add+0x7b6/0xb50 [ 1499.914607][ C1] usb_set_configuration+0x1a87/0x20e0 [ 1499.920056][ C1] usb_generic_driver_probe+0x8d/0x150 [ 1499.925506][ C1] usb_probe_device+0x1c4/0x390 [ 1499.930344][ C1] really_probe+0x26a/0x9a0 [ 1499.934839][ C1] __driver_probe_device+0x18c/0x2f0 [ 1499.940113][ C1] driver_probe_device+0x4f/0x430 [ 1499.945121][ C1] __device_attach_driver+0x2ce/0x530 [ 1499.950483][ C1] bus_for_each_drv+0x251/0x2e0 [ 1499.955339][ C1] __device_attach+0x2b8/0x400 [ 1499.960089][ C1] bus_probe_device+0x185/0x260 [ 1499.964927][ C1] device_add+0x7b6/0xb50 [ 1499.969237][ C1] usb_new_device+0xa39/0x16c0 [ 1499.973988][ C1] hub_event+0x2941/0x4a00 [ 1499.978396][ C1] process_scheduled_works+0xade/0x17b0 [ 1499.983935][ C1] worker_thread+0x8a0/0xda0 [ 1499.988517][ C1] kthread+0x70e/0x8a0 [ 1499.992576][ C1] ret_from_fork+0x3fc/0x770 [ 1499.997155][ C1] ret_from_fork_asm+0x1a/0x30 [ 1500.001903][ C1] [ 1500.004208][ C1] Freed by task 14937: [ 1500.008254][ C1] kasan_save_track+0x3e/0x80 [ 1500.012919][ C1] kasan_save_free_info+0x46/0x50 [ 1500.017934][ C1] __kasan_slab_free+0x62/0x70 [ 1500.022682][ C1] kfree+0x18e/0x440 [ 1500.026560][ C1] xpad_disconnect+0x350/0x480 [ 1500.031315][ C1] usb_unbind_interface+0x26b/0x8f0 [ 1500.036496][ C1] device_release_driver_internal+0x4d9/0x7c0 [ 1500.042551][ C1] bus_remove_device+0x34d/0x410 [ 1500.047477][ C1] device_del+0x511/0x8e0 [ 1500.051789][ C1] usb_disable_device+0x3e9/0x8a0 [ 1500.056815][ C1] usb_disconnect+0x330/0x910 [ 1500.061498][ C1] hub_event+0x1cdb/0x4a00 [ 1500.065925][ C1] process_scheduled_works+0xade/0x17b0 [ 1500.071462][ C1] worker_thread+0x8a0/0xda0 [ 1500.076051][ C1] kthread+0x70e/0x8a0 [ 1500.080112][ C1] ret_from_fork+0x3fc/0x770 [ 1500.084702][ C1] ret_from_fork_asm+0x1a/0x30 [ 1500.089455][ C1] [ 1500.091764][ C1] The buggy address belongs to the object at ffff88804b704000 [ 1500.091764][ C1] which belongs to the cache kmalloc-1k of size 1024 [ 1500.105803][ C1] The buggy address is located 92 bytes inside of [ 1500.105803][ C1] freed 1024-byte region [ffff88804b704000, ffff88804b704400) [ 1500.119593][ C1] [ 1500.121910][ C1] The buggy address belongs to the physical page: [ 1500.128313][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x4b700 [ 1500.137057][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1500.145539][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1500.153075][ C1] page_type: f5(slab) [ 1500.157041][ C1] raw: 00fff00000000040 ffff88801a441dc0 ffffea0001773600 dead000000000002 [ 1500.165609][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1500.174178][ C1] head: 00fff00000000040 ffff88801a441dc0 ffffea0001773600 dead000000000002 [ 1500.182841][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1500.191504][ C1] head: 00fff00000000003 ffffea00012dc001 00000000ffffffff 00000000ffffffff [ 1500.200162][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1500.208812][ C1] page dumped because: kasan: bad access detected [ 1500.215206][ C1] page_owner tracks the page as allocated [ 1500.220900][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 15, tgid 15 (ksoftirqd/0), ts 111434314283, free_ts 111283469690 [ 1500.239904][ C1] post_alloc_hook+0x240/0x2a0 [ 1500.244663][ C1] get_page_from_freelist+0x21d5/0x22b0 [ 1500.250199][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 1500.256006][ C1] alloc_pages_mpol+0x232/0x4a0 [ 1500.260854][ C1] allocate_slab+0x8a/0x3b0 [ 1500.265348][ C1] ___slab_alloc+0xbfc/0x1480 [ 1500.270011][ C1] __kmalloc_noprof+0x305/0x4f0 [ 1500.274848][ C1] ieee802_11_parse_elems_full+0x152/0x2b20 [ 1500.280756][ C1] ieee80211_inform_bss+0x10c/0x10a0 [ 1500.286032][ C1] cfg80211_inform_single_bss_data+0xd02/0x1ac0 [ 1500.292272][ C1] cfg80211_inform_bss_data+0x1fb/0x3b20 [ 1500.297909][ C1] cfg80211_inform_bss_frame_data+0x417/0x7b0 [ 1500.303965][ C1] ieee80211_bss_info_update+0x746/0x9e0 [ 1500.309586][ C1] ieee80211_scan_rx+0x593/0xa20 [ 1500.314513][ C1] ieee80211_rx_list+0x22fc/0x2d80 [ 1500.319612][ C1] ieee80211_rx_napi+0x1a8/0x3d0 [ 1500.324540][ C1] page last free pid 9 tgid 9 stack trace: [ 1500.330324][ C1] __free_frozen_pages+0xc65/0xe60 [ 1500.335425][ C1] __put_partials+0x161/0x1c0 [ 1500.340090][ C1] put_cpu_partial+0x17c/0x250 [ 1500.344844][ C1] __slab_free+0x2f7/0x400 [ 1500.349248][ C1] qlist_free_all+0x97/0x140 [ 1500.353823][ C1] kasan_quarantine_reduce+0x148/0x160 [ 1500.359263][ C1] __kasan_slab_alloc+0x22/0x80 [ 1500.364100][ C1] __kmalloc_cache_noprof+0x1be/0x3d0 [ 1500.369462][ C1] usb_control_msg+0x73/0x3e0 [ 1500.374131][ C1] hub_ext_port_status+0x116/0x820 [ 1500.379227][ C1] hub_port_reset+0x72e/0x1750 [ 1500.383973][ C1] hub_port_init+0xfb9/0x2800 [ 1500.388633][ C1] hub_event+0x2518/0x4a00 [ 1500.393040][ C1] process_scheduled_works+0xade/0x17b0 [ 1500.398574][ C1] worker_thread+0x8a0/0xda0 [ 1500.403153][ C1] kthread+0x70e/0x8a0 [ 1500.407218][ C1] [ 1500.409531][ C1] Memory state around the buggy address: [ 1500.415144][ C1] ffff88804b703f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1500.423190][ C1] ffff88804b703f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1500.431232][ C1] >ffff88804b704000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1500.439274][ C1] ^ [ 1500.446187][ C1] ffff88804b704080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1500.454230][ C1] ffff88804b704100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1500.462270][ C1] ================================================================== [ 1500.470323][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1500.477521][ C1] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Not tainted 6.16.0-rc1-syzkaller-00101-g27605c8c0f69 #0 PREEMPT(full) [ 1500.489404][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1500.499464][ C1] Workqueue: wg-crypt-wg0 wg_packet_tx_worker [ 1500.505537][ C1] Call Trace: [ 1500.508802][ C1] [ 1500.511631][ C1] dump_stack_lvl+0x99/0x250 [ 1500.516216][ C1] ? __asan_memcpy+0x40/0x70 [ 1500.520811][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1500.526002][ C1] ? __pfx__printk+0x10/0x10 [ 1500.530580][ C1] panic+0x2db/0x790 [ 1500.534470][ C1] ? __pfx_panic+0x10/0x10 [ 1500.538879][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1500.544762][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1500.551078][ C1] ? print_memory_metadata+0x314/0x400 [ 1500.556527][ C1] ? do_raw_spin_lock+0x23d/0x290 [ 1500.561538][ C1] check_panic_on_warn+0x89/0xb0 [ 1500.566462][ C1] ? do_raw_spin_lock+0x23d/0x290 [ 1500.571474][ C1] end_report+0x78/0x160 [ 1500.575708][ C1] kasan_report+0x129/0x150 [ 1500.580204][ C1] ? do_raw_spin_lock+0x23d/0x290 [ 1500.585215][ C1] do_raw_spin_lock+0x23d/0x290 [ 1500.590052][ C1] ? __wake_up_common_lock+0x2f/0x1f0 [ 1500.595414][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1500.600801][ C1] _raw_spin_lock_irqsave+0xb3/0xf0 [ 1500.605994][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1500.611881][ C1] ? kcov_remote_stop+0x78/0x6d0 [ 1500.616810][ C1] __wake_up_common_lock+0x2f/0x1f0 [ 1500.621998][ C1] __usb_hcd_giveback_urb+0x4d7/0x690 [ 1500.627356][ C1] ? usb_hcd_unlink_urb_from_ep+0x2c/0x110 [ 1500.633148][ C1] ? __pfx___usb_hcd_giveback_urb+0x10/0x10 [ 1500.639031][ C1] ? usb_hcd_giveback_urb+0x10e/0x420 [ 1500.644389][ C1] dummy_timer+0x862/0x4550 [ 1500.648890][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1500.654254][ C1] ? __pfx_process_backlog+0x10/0x10 [ 1500.659532][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1500.664460][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1500.669384][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 1500.674306][ C1] __hrtimer_run_queues+0x529/0xc60 [ 1500.679504][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1500.685215][ C1] ? read_tsc+0x9/0x20 [ 1500.689275][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 1500.694388][ C1] handle_softirqs+0x286/0x870 [ 1500.699158][ C1] ? do_softirq+0xec/0x180 [ 1500.703570][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1500.708850][ C1] ? wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 1500.714736][ C1] do_softirq+0xec/0x180 [ 1500.718967][ C1] [ 1500.721882][ C1] [ 1500.724798][ C1] ? __pfx_do_softirq+0x10/0x10 [ 1500.729643][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 1500.734919][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 1500.740108][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1500.745819][ C1] ? do_raw_read_unlock+0x3d/0x80 [ 1500.750831][ C1] wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 1500.756549][ C1] wg_packet_tx_worker+0x1c8/0x7c0 [ 1500.761653][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1500.766841][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1500.772552][ C1] process_scheduled_works+0xade/0x17b0 [ 1500.778096][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1500.784073][ C1] worker_thread+0x8a0/0xda0 [ 1500.788664][ C1] kthread+0x70e/0x8a0 [ 1500.792725][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1500.797829][ C1] ? __pfx_kthread+0x10/0x10 [ 1500.802418][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1500.807621][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1500.812814][ C1] ? __pfx_kthread+0x10/0x10 [ 1500.817391][ C1] ret_from_fork+0x3fc/0x770 [ 1500.821974][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1500.827078][ C1] ? __switch_to_asm+0x39/0x70 [ 1500.831833][ C1] ? __switch_to_asm+0x33/0x70 [ 1500.836587][ C1] ? __pfx_kthread+0x10/0x10 [ 1500.841162][ C1] ret_from_fork_asm+0x1a/0x30 [ 1500.845917][ C1] [ 1500.849150][ C1] Kernel Offset: disabled [ 1500.853458][ C1] Rebooting in 86400 seconds..