last executing test programs:

48.825851867s ago: executing program 2 (id=286):
r0 = syz_open_dev$radio(&(0x7f0000000440), 0x3, 0x2)
ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000100)={0x8000004, 0x0, "000097cba2760700000000000000000000000001390d3af6d74de96f48ff089c"})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000540)=ANY=[@ANYBLOB="b40800000000000071112100000000008510000002000000b7000000000000009500c200000000009500001200000000176218e17da7dff9bd18fed7bb3525437034524a132038771d9b0e2670687d6be33c6271cc1126478e453223250d59644898bdf7cb1db876f8dc"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x6000, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x4}})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
close_range(r3, r2, 0x0)
syz_io_uring_setup(0x3c5f, &(0x7f0000000240)={0x0, 0x0, 0x27, 0x2}, 0x0, 0x0)

46.879185747s ago: executing program 2 (id=290):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00'})
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) (async, rerun: 32)
prlimit64(r0, 0xab9d954d7fd47cf9, &(0x7f0000000140)={0x4, 0x8b}, 0x0) (async, rerun: 32)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) (async)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x5, 0x1, 0x11, 0x19, 0x280, &(0x7f0000000880)="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"})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async, rerun: 64)
ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, 0x0) (async, rerun: 64)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x3a)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000040)="050000000091c700", 0x8) (async, rerun: 32)
r5 = accept4(r4, 0x0, 0x0, 0x0) (rerun: 32)
sendto$inet(r5, &(0x7f0000000440)="308f6fdcd8ef95ac180e28e3b7dafa546e208e23230c54cd672deb128dccb3484fc090000000000000abc8c5ed1d0658fe873325c8de8347cf2d7dbcf7", 0xfffffffffffffc65, 0x240400c4, 0x0, 0x0) (async)
r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000104c05c4050000000113000000092100000001220500090781030000000000"], 0x0)
syz_usb_control_io(r6, 0x0, 0x0) (async, rerun: 32)
r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) (rerun: 32)
getdents(r7, &(0x7f0000000300)=""/73, 0x49)
getdents64(r7, &(0x7f0000003ec0)=""/4110, 0x100e) (async, rerun: 32)
io_uring_setup(0x3f77, &(0x7f0000000080)={0x0, 0x4de6, 0x2000, 0x3, 0xa6, 0x0, r7}) (rerun: 32)
syz_usb_control_io$hid(r6, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00220500"], 0x0}, 0x0)
syz_usb_control_io(r6, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000000)=ANY=[@ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

43.29912782s ago: executing program 2 (id=295):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x60)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$qrtrtun(r0, &(0x7f00000005c0)="253754687c06d8f58187445ffe9858217350ae0bd72487386e5fed40000000f6b4ecc8a6356cee94d42a3c4dd5ca349e026febcc2c1ebe4115e66c050c2f7247149eba608ddbf64ffbc8b282129359e61be1972f2f6072457d4c7cb98443def118ac59a62d52b69007d04c019998cecc81724339b72867", 0x77)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x3c)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x3, 0xffff2d33, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x4, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0x41, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x7, 0x3, 0x7fff, 0x4c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x8f, 0x6, 0x6, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x204, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x200010, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0xfffffffc, 0x3, 0x0, 0x7, 0x5, 0x20002f, 0xe, 0x312, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x1, 0x5, 0x1, 0xff, 0xffff8001, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x9, 0x4, 0x9, 0x8, 0x8, 0x6, 0x5, 0x0, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x3, 0x4, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x3ea, 0x8d2, 0x100009, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x7, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0x2, 0x5, 0x4, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3e, 0x3, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x0, 0xa2, 0x7, 0x1, 0x1, 0x4, 0x54fe12d2, 0xbf, 0xb, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0x0, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x100001ff, 0x6, 0x0, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xa620, 0x2, 0x200005, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0xffffffff, 0x80000000, 0x3, 0x8, 0x81, 0x3, 0x3, 0xffff, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x4, 0x9, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x9], 0x0, 0x0, 0x1, 0x1}}, 0x3c)
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r5, 0x0)

41.936117159s ago: executing program 2 (id=297):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r4, {0x7, 0x29, 0x20200}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}})
r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2)

41.641236786s ago: executing program 2 (id=298):
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x1, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='fsi_master_break\x00', r2}, 0x18)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1)
pipe2$watch_queue(&(0x7f0000000080), 0x80)
newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f00000004c0), 0x2000)
geteuid()
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'})
socket$nl_rdma(0x10, 0x3, 0x14)
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000b40)={{{@in6, @in6}}, {{@in=@local}}}, &(0x7f0000000c40)=0xe8)
getegid()
r3 = syz_open_dev$vcsn(&(0x7f0000000c80), 0x3, 0x100)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
pause()
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa7f0a00035211080045000030000000000001907881"], 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_clone3(&(0x7f0000000840)={0x92aa400, &(0x7f0000000580), &(0x7f00000005c0), &(0x7f0000000600), {0x1f}, &(0x7f0000000640)=""/150, 0x96, &(0x7f0000000700)=""/240, &(0x7f0000000800)=[0x0, 0x0], 0x2, {r3}}, 0x58)
r4 = landlock_create_ruleset(&(0x7f0000000040)={0x920, 0x1}, 0x18, 0x0)
landlock_restrict_self(r4, 0x0)
landlock_restrict_self(r4, 0x0)
r5 = fsopen(&(0x7f0000000040)='qnx6\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0)
landlock_restrict_self(r6, 0x0)
landlock_restrict_self(r6, 0x0)
landlock_restrict_self(r6, 0x0)
landlock_restrict_self(r6, 0x0)
landlock_restrict_self(r6, 0x0)

39.867216299s ago: executing program 2 (id=302):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000001ff0), 0x10)
r1 = open(0x0, 0x2a4c0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x400000000000, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000080))
mkdir(0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2)
ftruncate(r5, 0xffff)
fcntl$addseals(r5, 0x409, 0x7)
r6 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000440))
close_range(r3, 0xffffffffffffffff, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="0500"/16, @ANYBLOB="17faa7bbd2a3427fa5d8f04a9aec48f8f456e7ca32f13b41b80016c6fbf4583ea31ccdd6da900f8e95450aff77aed3663f2a06b9d15075ca729ddd10473249f9bc15926d074350c9a1459839f2fa8560edbd0d97f880cb884a29c2807bc70d748e4cf171fb5eac564685bf1787cb92d8bfde5e67691670febcdb03fe98a124eea194f4176a7ff95b4a5caa2e47e0a320021b315d2992b3ff75c1f1479f226390eceb44deb1d745c7a72fb89922a5ba78746e1bf9ce3a5b0c", @ANYRES64=0xea60, @ANYRESOCT=r4, @ANYRES16=0x0, @ANYBLOB="000000000f"], 0x20000078}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
socket$kcm(0x11, 0xa, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$kcm(0x10, 0x0, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0)
r8 = syz_clone(0x3010000, &(0x7f0000000600)="5d307f9ea7e3680e26e37309afaedfa03c3c062b95f52c5607abc4719059a6f6f23ffe5f2842cb4cbd1ef0dd738c5ce2dd3761c84cb2e9fed8bcdaf6e258b93da545f3e0522dedb9c2df0dacc0dbe12e12a5d481f3eb3d31a1f8c164080f70d5ae9f83ed987a7448af9c74c92259901d3abdd9e07052eff4feaac4843531ba733bb2894d19fb53c92aeceee000f3c83adb1971a9c87fab575bbfa6351d6c303c0b2f2f9aff3c8ec0d0a7cf3ea2eb742961cfd2f8b6b3b6f729482d48b0b08016aafd6f30e8f3e7de53a8e7e2a69d1d8dab7cbce53964f6d5100dca9d55a04112e94fca2e311fb01a0c74", 0xea, &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000700)="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")
r9 = syz_clone(0x48000000, &(0x7f0000000300), 0x0, &(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000480)="69cf4e30df601020f61e115225a8d1801285fae238096dd37763e2f53c629ad5d7d029be1f84e334d6fd9e94c7bd68fcee6e9dad8c5b32b6d4909623c20423d0f8b0bfcb36ccbd5d54fdea452eddd6f805de098afb03afd9ef4c98b6caa5142ea7b00a627ab25885446ecd74535bb3b779c5133c1317d9c2ed4adfab1502ed3eeb38726b94")
setpgid(r8, r9)
socket$netlink(0x10, 0x3, 0x5)

38.71271315s ago: executing program 0 (id=303):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), r0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, 0x0, &(0x7f00000025c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0xdcc2, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r5, 0xc02c564a, &(0x7f0000000080)={0x0, 0x0, 0x0, @discrete={0x0, 0x4}})
syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00')
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x5bbf91a1e7f99074, &(0x7f0000000000))
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00')
read$FUSE(r6, 0x0, 0x0)
sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x3, &(0x7f0000000680)=ANY=[@ANYRES64=0x0], &(0x7f0000000000)='syzkaller\x00', 0xfffffffb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r7}, 0x10)
r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r8)
sendmsg$NFC_CMD_FW_DOWNLOAD(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000015000000070014005b2d2e0008000100", @ANYRES32=0x0, @ANYBLOB="32d5b9"], 0x24}}, 0x0)

37.754943169s ago: executing program 0 (id=304):
syz_emit_ethernet(0x2a, &(0x7f0000000780)=ANY=[@ANYBLOB="ffffffffffff05009211d49c08004500001c00000000008890780a010101ffffffff110090780000007e66d3f48d06c8a521090f1e2c0ac05a049d66efc9aa8a39ddf2380b63616838fbac65d79c600b9d8a5fa1a582c09da56cd6d315b33ccd1876e7d1e0e45b829fece7765c75e5eded72bc6071a39ee0e42b5e31f2e36efc63fd441b7afba2ea01450d6c2236c5fa8f0401000100d6ce598f870aafce3996a76a90ad12e2216de59f717067b22ed55bb5e4849280cd4ab2569aca208cff8ae3f6a5"], 0x0)
quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f00000004c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB="da2261875f58323cf5704ca92bdcc7e39a892ad9ce2e9482b397d74faa777043c79850203e844203a9e244"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x1, 0x2ffffffff}, 0xc)
r4 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2}, 0x0)

35.70539013s ago: executing program 1 (id=308):
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
syz_open_dev$loop(0x0, 0x4, 0xc8440)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)={0x10, 0x140b, 0xa11, 0x70bd26, 0x25dfdbfd}, 0x10}}, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@private=0xa010100, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x0, 0xa}]}]}, 0xa0}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f00005f5000)={0xfffe, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={0x2, 0x400000000000003, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_address={0x3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0xd8}}, 0x0)

26.860112286s ago: executing program 1 (id=310):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff}, 0x13f}}, 0x45)
r2 = fcntl$dupfd(r0, 0x0, r0)
write$RDMA_USER_CM_CMD_BIND(r2, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"00000000000000000000000000000001"}, 0x500, 0x40420f00}}}, 0x90)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=0x1, 0x2e, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r6, &(0x7f0000000000)="3f000000010000", 0x7)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
read(r5, &(0x7f0000000000)=""/5, 0x37)
write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r7 = dup(r4)
write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r7}})

26.571058575s ago: executing program 4 (id=312):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f0000006840)={0x2020, 0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, {0xfffffffffffffffd, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x4, 0x2000, 0x7, r3, 0x0, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
open(&(0x7f00000001c0)='./file0/file0\x00', 0x1800, 0xfeff)
close_range(r0, 0xffffffffffffffff, 0x200000000000000)

26.474942692s ago: executing program 0 (id=313):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0)
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r4, {0x7, 0x29, 0x20200}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}})
r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2)

26.242721272s ago: executing program 1 (id=315):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
stat(&(0x7f0000007c80)='./file0\x00', &(0x7f0000007cc0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0, <r2=>0x0})
r3 = openat$smackfs_syslog(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
writev(r3, &(0x7f0000000880)=[{&(0x7f0000000480)="eb", 0x1}], 0x1)
r4 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000007d40), &(0x7f0000007d80)=0x10, 0x80000)
fcntl$getownex(r0, 0x10, &(0x7f0000007f80)={0x0, <r5=>0x0})
stat(&(0x7f0000000580)='./file0\x00', &(0x7f0000008000)={0x0, 0x0, 0x0, 0x0, <r6=>0x0})
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000080c0)=[{{&(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000540)=[{&(0x7f0000000680)="da4ae1581e77b74b662ba60b4b7914d0eb6343650f646eeb2dbb002da8a94edbea8d9ee6ac16be0bf53f6a6598dec9d33c7dd30970f1dbbc34ff43a9a0712fea872574f41b885f3dd2c9a6932911c01bb1169eb5e47b9c222e94de120dffd8c1e0a591d43bd3abafaa7b3b04a27d14e9e3ccd5bbcfda3f94dcaa96c145a81d7f0c99", 0x82}, {&(0x7f0000000740)="988dd153682687531a7ed7c196ccb225b66142ddb594d18db75b3e2625f205f39b24164009705404794c715ea1d2ad87eb69630b40f3376f2c22e6b604951493574f00961f22b3b24e1adcba5528f0849ceb3679e7912f73714f3936afb342a1c0f4b9427c2b98628cb268498328c328637d1002d1a484ab88a24359a3b057a3ea5664336c359a2c242abc", 0x8b}, {&(0x7f0000000280)}], 0x3, &(0x7f0000002200)=ANY=[@ANYBLOB="e4b3215f720100b10110012dba755c04b991e60c36becca989cce77d6584e7238d3c30d73b36dc8b7fe73655ca1dc5e0bc9c2e84d0bbbc74f10a96ae121031bcfc7cf61b6e0d7fd25cdcae1051c84d8fb2af45c3e49b625402673c4dc09516e166d8523e747ff3531172fd23f04a53897695c57bb9f65250d30248896059ec5a", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00'], 0xc0, 0x8000}}, {{&(0x7f0000000bc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002140)=[{&(0x7f0000000c40)="70c6f3ac92d2ed956d680c82abb1737694b507edaa916a07760086b0bf4e384f77d0ff7ee28362c15aae58d845d096a93150730cc444d85a59892b1b7a48e8dcf4a2c2727f18dd14596ccbe13430344537c22e34ace3bf12bcf92836217e50d000862ed351fbb13a9c891b819909b8879a3148739f79ac195d7a7e9f3959499f61e2700d05f06e27aeebec0ecb9f18faa161645a9aac132fb25db1f54b0d86688f1b8aa958cc538abf8587b896e8238a0e480188e48ca3441346baf1174f9058d03dacf55b45af3157ab703389718828f07343ff3420ad2b3df3f038e00c1022ba2fa85b6d806fe79f", 0xe9}, {&(0x7f0000000d40)="5a701ab801c7ba618fd821f1d44d45ee17af673d093d0813510d74b2e5708b39a399901d14b892040eed224317", 0x2d}, {&(0x7f0000000d80)="9711aece6784ea4f984590444ed763207ba35f1f72fe8d23614d748155fd86367e897e7ed3b5f8472228fd43729f6063b0d8dd81b44d151255c6c00cb9ea60e2235d49cedf668662bb55bfc0fbef110d21f266839f9104bf25ddb197cbb2ca0b7a1152c3da4087172e6a361cfe675136c867cb67cb7f692a42106a77af3a6bb7a7b76e5e61c0d2e0ed7a26f85d6ba5494d67f86431cf534c9d90ec4c180ebe380fa5cb4d6031e396a3b11f1fe534e6", 0xaf}, {&(0x7f0000000e40)='d', 0x1}, {&(0x7f0000000e80)="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", 0x1000}, {&(0x7f0000001e80)="0c8b877d88c01019e80ce7682f52a03320f1e16f25182d5ae3484ad171e7c6493dc49ec50dd298316d241a3b77ecf652faae7de8733bc44209be0163a6ad48587b632f19fa214d6d9e346d907777d47141f9a2e25622128a1fb80cd5fb47aba634c546ae8f4c9c1e3a0822420ceaa8aa07ce3b935119489e865abd14072e2433faf4a2fcde0ce3961844c9033029f5f0cc0596a8165c46480a1d1cfb8f4798", 0x9f}, {&(0x7f0000001f40)="0710d161b439f02aba7bb529144a15bf905594eb9ea15ed809eaa93946088a01707bb73bb21f4fe44f5427651ac62b687e77307eb74e682aa698f6ef117b9eae1892bd3fe219c32508dea8cb893066abc2c575fd99ff193d664741937d096571bdb83ee1d343fe4b0856814242e52b1e1f7aa2dc8906a46e1e7216592c43add53692b4595fa80193c08a11", 0x8b}, {&(0x7f0000002000)="8d7d40993204526789a070d55973ba7d9267e0315f57ab53e62b1c8e2cfe96071fe148903b3560f0b55f89e9325c7dc1d67a052e11556f17805f1e3a49c7022e7ed234ee7cdd527f323de12aef25adc361b11def13e9df3b8eed08b7629ff12cb4e9119872eb2891f8dcbf68d9dbb7012b0b33d8610843863b976a6db3b5b4a3e6434680c60ac1ae541b700232404bc3911f8b44f55d31f59654b24112b297091d8c4b9750e942c198c9bf478694acdec682153df4e491ecf6", 0xb9}, {&(0x7f00000020c0)="9a087a3f22d0369513c2c49a262518932dffe8e4e448304412b91a2949a11afcaa73c84ecb4527174de3a0444c172b78db3aa52f9f1fad77e21203f15da0a35c93d6a5d0d300c641478a0f9ef03c66aaa42b6b436f2e3f37059ab1e39a73c5b0f66930c283afc9a225fb29c50ca23f476da29da2", 0x74}], 0x9, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000b12f8f8ecb35305d7c6c23980306478901bd7730f5423a54221c72c5d898f30a6e7e3871a73d215d19d8383c11fd57581629ea3d5a8e8977000000002ed2fea077c58820143ee4be207ace36b635279aba42ab4a5f199425c375904831084c2887efb7c5cbcb6332e259bfc68242d413976cbf2255a046ab02c253f7617029acb78ef1ebad333fb4c5398c25bedb622094f74f518b7c9254726fc015e589291c12190ee7ed66f2a4b6134b3b9b130166c1d459f519ddc38cb6f3487c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES64=r6, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0xc0, 0x41}}, {{&(0x7f0000006780)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006840)=[{&(0x7f0000006800)="a11e201ab5202d91194a92ef1287d1c3f45ea3b6ee0b401ab836fc3626a5f756487b89540a23880afc3e5e39abf05cddc12a3feaeab43b06ebc5159301402e", 0x3f}], 0x1, 0x0, 0x0, 0x800}}, {{0x0, 0x0, &(0x7f0000006a40)=[{&(0x7f0000006880)="c55073c5b44461607fcf7dceb14882cb46bccacbd8a666583518b4417ea7a6bac45fe8e8e039e090cb86418907ca5e2d20f3ce950c6ec6f994d03a5382ef5b7da7892110fe9101d48223a524511d905a88c423addb470a32665ef1807917174b5b61396971c797a7cae834443360b866b8a551a59cfe37202faf7c446fe6", 0x7e}, {&(0x7f0000006900)="a9ddb41367dc833d136b13ab42fbc4070f85617b4daec71a4a5ad91f1c8cbb5e622a5fbc359ae45e9a68190f1b8e645c28993b3a9e8dbe38230c1c6330face57362cb6c59aba7bb7a61db761810ae2c364354a5f1fddc33dd6d2dadbfec92bdca6611ff2870b1a8578da9de0c11fc6", 0x6f}, {&(0x7f0000006980)="dbba57e6488261fd97fe84cdc788cc728bbde2c3515644ffb770d56f95e30fb06f6c4a09499978638b76e509dacaf3868c8d647939d6b095dd016796b44d7f2a8fbc9895c6d3a7446ba413a85e9f7f699716170787ba0d7f8214dc2d8f7a87b2da73811e52df204a3929a33065825814f987387edaa196e0b750745bb11097036b29ae863f9351f53aae5fdf2aa22683b60b0e1bdeba", 0x96}], 0x3, &(0x7f0000007dc0)=ANY=[@ANYBLOB="1c00000000001b000101160002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r0, @ANYRES8=r1, @ANYRES32=r0, @ANYBLOB="00357fb4"], 0xc0, 0x800}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000007e80)="aca4265fe2a12090ca01bfed3f62af6729d32889533a63cb798632349c0d114003161a0c0f72a442dc0fdb75b97795c697ba0fd8a453014e97650973c8721600a0799a0c134b545686fbafa07b99df4f881cc1a45a4f4f746b2537a834ccb92c3fcb4be02ed7fd35f9b4475b7513133a870ec9a5c691aff0dbdd97e85f5275eca50a34ca2e1a854c3e478d29be92264339fe27a2dfe112ed6200373cd9414fa2fb685beafb9bf98749", 0xa9}, {&(0x7f0000000a40)="8d0f2c9604acbdab5ec268f29423e432bebb2eed899232d55d38cdad1331399444db9df51b29aa93d4b66635b2e7da1b0ad97b60f908a1560b8789008953fa19cf4076a3128ccec578097a3fe6d34cdc93f1fc1d9e68eddaa8f300248708e9ff24775d640b9e10c8c7ed186c1159ecfd6a81fbc3f69d4bcd29160e522fcfc2d2f113cea4f4967a298189e93f0002086f2f414b09d358dd92eb7bdeb8f5d93f822814d299db48f13d9b87ca0a251724ee6cadf698e4fcc34e3586f45baa720f1a6693a672258d5fee4e2a0a469a98de32f69ee98f29eb3f2e879a82dc4f70105010b12629ee1ab1a74f79318897f833", 0xef}], 0x2, &(0x7f0000008080)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, 0xee00}}}], 0x20, 0x1}}], 0x5, 0x20088094)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f00000002c0)=""/210, 0xd2, <r8=>0x0, &(0x7f00000003c0)=""/136, 0x88}}, 0x10)
r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=r8, 0x4)
pipe(&(0x7f0000000140)={<r10=>0xffffffffffffffff})
r11 = socket$inet_udp(0x2, 0x2, 0x0)
close(r11)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa10000000000000701", @ANYBLOB="e37151d9d0e1f26b09c972f614ccc854867a1452d51d9dea42ce85f5b17d4821680123ca39d9defe0f194880f3df89892090e990dc01", @ANYRES8=r7, @ANYRESDEC=r7, @ANYBLOB, @ANYRESDEC=r9], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, r10, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
r12 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000380)='/sys/fs/smackfs/doi\x00', 0x2, 0x0)
r13 = open_tree(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1)
io_uring_setup(0x5cab, &(0x7f0000000200)={0x0, 0x758a, 0x800, 0x2, 0x47, 0x0, r13})
writev(r12, &(0x7f0000002680)=[{&(0x7f00000025c0)='8', 0x1}, {0x0, 0x2}], 0x2)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x1, &(0x7f0000000000)=@raw=[@alu={0x0, 0x0, 0x8}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r14 = syz_open_procfs(0x0, &(0x7f0000000780)='map_files\x00')
getdents(r14, 0x0, 0x0)
r15 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r15, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})

26.148904268s ago: executing program 4 (id=316):
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
getpeername$unix(r4, 0x0, &(0x7f0000000400)=0xfffffffffffffd7f)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB='=0'])
ioctl$KVM_RUN(r3, 0xae80, 0x0)
fsetxattr$security_evm(r1, 0x0, 0x0, 0x0, 0x2)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x0, 0x223, 0x0, 0x0, {0x3}}, 0x14}}, 0x0)

25.965898784s ago: executing program 0 (id=317):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @dev, @default, 0x0, [@rose, @remote, @null, @null, @null, @netrom]}, &(0x7f00000010c0)=0x40, 0x800)
connect$rose(r1, &(0x7f0000001100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x40)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000002900", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r0], 0xb8}}, 0x4004)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000011c0)={0x0, 0x10001}, 0x8)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0xc17a)
sendmmsg$inet6(r0, 0x0, 0x0, 0x24044801)
shutdown(r0, 0x1)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000370400"/18, @ANYRES32=0x0, @ANYBLOB="a9040500000000001c0012800b00010069703667726500000c0002800800040001000100080004"], 0x44}}, 0x0)

25.725723859s ago: executing program 1 (id=318):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r4, {0x7, 0x29, 0x20200}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}})
r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2)

25.230614439s ago: executing program 4 (id=320):
syz_emit_ethernet(0x46, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ppoll(0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

22.963589726s ago: executing program 32 (id=302):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000001ff0), 0x10)
r1 = open(0x0, 0x2a4c0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x400000000000, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0)
ioctl$SNAPSHOT_GET_IMAGE_SIZE(r1, 0x8008330e, &(0x7f0000000080))
mkdir(0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2)
ftruncate(r5, 0xffff)
fcntl$addseals(r5, 0x409, 0x7)
r6 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f0000000440))
close_range(r3, 0xffffffffffffffff, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="0500"/16, @ANYBLOB="17faa7bbd2a3427fa5d8f04a9aec48f8f456e7ca32f13b41b80016c6fbf4583ea31ccdd6da900f8e95450aff77aed3663f2a06b9d15075ca729ddd10473249f9bc15926d074350c9a1459839f2fa8560edbd0d97f880cb884a29c2807bc70d748e4cf171fb5eac564685bf1787cb92d8bfde5e67691670febcdb03fe98a124eea194f4176a7ff95b4a5caa2e47e0a320021b315d2992b3ff75c1f1479f226390eceb44deb1d745c7a72fb89922a5ba78746e1bf9ce3a5b0c", @ANYRES64=0xea60, @ANYRESOCT=r4, @ANYRES16=0x0, @ANYBLOB="000000000f"], 0x20000078}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
socket$kcm(0x11, 0xa, 0x300)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000700000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$kcm(0x10, 0x0, 0x10)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0)
r8 = syz_clone(0x3010000, &(0x7f0000000600)="5d307f9ea7e3680e26e37309afaedfa03c3c062b95f52c5607abc4719059a6f6f23ffe5f2842cb4cbd1ef0dd738c5ce2dd3761c84cb2e9fed8bcdaf6e258b93da545f3e0522dedb9c2df0dacc0dbe12e12a5d481f3eb3d31a1f8c164080f70d5ae9f83ed987a7448af9c74c92259901d3abdd9e07052eff4feaac4843531ba733bb2894d19fb53c92aeceee000f3c83adb1971a9c87fab575bbfa6351d6c303c0b2f2f9aff3c8ec0d0a7cf3ea2eb742961cfd2f8b6b3b6f729482d48b0b08016aafd6f30e8f3e7de53a8e7e2a69d1d8dab7cbce53964f6d5100dca9d55a04112e94fca2e311fb01a0c74", 0xea, &(0x7f0000000100), &(0x7f0000000180), &(0x7f0000000700)="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")
r9 = syz_clone(0x48000000, &(0x7f0000000300), 0x0, &(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000480)="69cf4e30df601020f61e115225a8d1801285fae238096dd37763e2f53c629ad5d7d029be1f84e334d6fd9e94c7bd68fcee6e9dad8c5b32b6d4909623c20423d0f8b0bfcb36ccbd5d54fdea452eddd6f805de098afb03afd9ef4c98b6caa5142ea7b00a627ab25885446ecd74535bb3b779c5133c1317d9c2ed4adfab1502ed3eeb38726b94")
setpgid(r8, r9)
socket$netlink(0x10, 0x3, 0x5)

21.60591856s ago: executing program 1 (id=322):
pipe(0x0)
fadvise64(0xffffffffffffffff, 0x7ff, 0x9, 0x1)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = dup(r1)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
syz_open_procfs(0xffffffffffffffff, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}], [], 0x6b}})
truncate(&(0x7f0000000240)='./file0\x00', 0x206b12)
open(&(0x7f0000000340)='./file0\x00', 0x0, 0x69)
truncate(&(0x7f0000000000)='./file0\x00', 0x4)
r4 = socket(0x2a, 0x2, 0x0)
getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0x2, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_ACT={0x4}]}}]}, 0x3c}}, 0x801)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x15, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000e0000000000000040000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="000100b705000008000000850000e9a400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xd, 0x1000, &(0x7f00000005c0)=""/4096, 0x41000, 0x84a45aac9d62de6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x1, 0x7, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000280)=[0xffffffffffffffff], &(0x7f00000002c0)=[{0x1, 0x2, 0x5, 0x4}, {0x0, 0x5, 0xe, 0x5}, {0x2, 0x4, 0x1, 0x1}], 0x10, 0x80000000, @void, @value}, 0x94)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r9, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7, 0x0, 0xfffffffffffffffc}, 0x18)
socket$kcm(0x23, 0x2, 0x0)

21.532689243s ago: executing program 4 (id=323):
syz_emit_ethernet(0x2a, &(0x7f0000000780)=ANY=[@ANYBLOB="ffffffffffff05009211d49c08004500001c00000000008890780a010101ffffffff110090780000007e66d3f48d06c8a521090f1e2c0ac05a049d66efc9aa8a39ddf2380b63616838fbac65d79c600b9d8a5fa1a582c09da56cd6d315b33ccd1876e7d1e0e45b829fece7765c75e5eded72bc6071a39ee0e42b5e31f2e36efc63fd441b7afba2ea01450d6c2236c5fa8f0401000100d6ce598f870aafce3996a76a90ad12e2216de59f717067b22ed55bb5e4849280cd4ab2569aca208cff8ae3f6a5"], 0x0)
quotactl$Q_GETQUOTA(0xffffffff80000702, &(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f00000004c0))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYBLOB="da2261875f58323cf5704ca92bdcc7e39a892ad9ce2e9482b397d74faa777043c79850203e844203a9e244"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0xac, &(0x7f0000000140)=""/172, 0x41000, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x48000}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x1, 0x2ffffffff}, 0xc)
r4 = socket$inet(0x2, 0x2, 0x1)
bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @local}, 0x10)
sendmsg$inet(r4, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2}, 0x0)

21.045953975s ago: executing program 0 (id=325):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
prlimit64(r1, 0x5, &(0x7f00000000c0)={0x80000001, 0xda2f}, &(0x7f0000000180))
r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801004800000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r8=>0xffffffffffffffff})
connect$unix(r8, 0x0, 0x0)
r9 = socket(0x8, 0x805, 0x20000000)
setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
bind$inet6(r9, 0x0, 0x0)
getpriority(0x2, 0xffffffffffffffff)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c)
setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)

20.152990514s ago: executing program 3 (id=326):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r1, &(0x7f0000004200)={0x50}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, {0xfffffffffffffffd, 0x2000000000, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x4, 0x2000, 0x7, 0x0, 0x0, 0xf0ee, 0xffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
open(&(0x7f00000001c0)='./file0/file0\x00', 0x1800, 0xfeff)
close_range(r0, 0xffffffffffffffff, 0x200000000000000)

19.91036449s ago: executing program 1 (id=327):
r0 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x68, 0x14, 0xf0b, 0x2000000, 0x0, {0x2, 0x0, 0x0, 0x0, {0x7, 0xffff}, {0xffff, 0x9}, {0xe, 0x2}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x1, 0xffe2, 0x2, 0x2, 0x7ff, 0x8}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
io_uring_setup(0x2e34, &(0x7f0000000900)={0x0, 0x100, 0x80, 0x1})
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0)
close(r1)
r2 = timerfd_create(0x0, 0x0)
ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000080)=0x10000000)
read(r2, &(0x7f0000000000)=""/14, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = dup(r2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xd, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x4)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r9 = dup(r8)
write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c)
write$6lowpan_enable(r3, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r1, 0x18000000000002a0, 0xc, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f0", 0x0, 0xb000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_usb_connect(0x5, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x4d, [{0x0, 0x0}]})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

19.661083752s ago: executing program 3 (id=328):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00')
socket$packet(0x11, 0x3, 0x300)
read$msr(r2, &(0x7f0000000540)=""/4083, 0xff3)
move_mount(r2, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000001540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
write$sysctl(r2, &(0x7f0000000080)='4\x00', 0x2)

17.742917412s ago: executing program 0 (id=329):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x60, &(0x7f0000004640)={&(0x7f0000000840)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x64}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="bf00ffff00d190000f1000000000000063000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3a)

17.741783312s ago: executing program 3 (id=330):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x88}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x2000, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0)

17.433438024s ago: executing program 3 (id=331):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0)
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, r4, {0x7, 0x29, 0x20200}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}})
r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2)

17.261182259s ago: executing program 4 (id=332):
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xfff2, 0x13f}, 0x0)
r0 = io_uring_setup(0x7c41, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x34324152, 0x0, 0x0, [{}, {}, {}, {0x1}, {}, {0xfffffffa, 0x6}], 0x0, 0x0, 0x8, 0x0, 0x1}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x541b, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a)
creat(&(0x7f00000005c0)='./file0\x00', 0x0)
r2 = io_uring_setup(0x655a, &(0x7f0000000140)={0x0, 0x0, 0x10, 0xdfffffff, 0x10c, 0x0, r0})
chdir(0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b7040000000000008500000033000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000100850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r4}, 0xc)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x0, 0x1000, 0x7b, &(0x7f0000000640)="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", &(0x7f0000000240)=""/123, 0x7, 0x0, 0xc, 0x1000, &(0x7f0000000000)="604908c8b7b46ba62e15511e", &(0x7f0000001640)="3d570c41d47607e1d0b836d7e212e9c528841ea31bac733dfc920650994c42223b9afbba3ad08b1ee93caf813d80e8e968c201c73911a7c906dd8b8c33b59bf3a374d63530883a589cb56d2b6760c8d12cc3c64853231c39cefa13f6d3c316641189806d64040fc37a87fff9de75a78608ff9589b4bfa4afd4364ab308e7bc6250ccc722c634b8f7719ebdbc0b37cb5a173d5b17d8f0bc2efc9057eb337757747e4ab96b0f21019b146f20b056155a192f7af572b34060cc59a09406e7fb17eb67901e8403b2c4f25b00be6174f46458faea1b0d7f5bb44cf4d8274d7c2631965607d9d76b99e750f9fb3da85959f4017028f69e5a574f86dc384829d686de69257e191924acfc1cc5f3359fc97fe1387a7ec2049eb3c6780f581882627c3d2f45f5790d13824859537c94765087dc649f61f9c1d5544cabccf4b5eeebdb1d72db3b0ce744fa8c87bcbe4dbe16b8c78539208bf7c5573324641f26196b2c2da38cf8f3a8512491ee2e6ec5fe0f481abf3b4b81b36d5525b89a2aebe36e7ae55f9aae5c43b2e0b4299fa09856e0f418a62b2aa4238cd02598a631c5a6c15373068b16a100c54d23b4ba3af8508fab0244ff5cd51daedf123674a66612e1dd82f54c7d3d132dda3b0ec249634987d9705c6027d3e81d33dccefad49883f67edbcef4edea819b2a684a4c115c655d6ab48422f2800483334dc31816b9b5f6c832f3d392ed9445e0931f60c1daa1fddf022f00a011bc5c6e6ced9765c9d9b0c9edbe9098477603d5e3067539d6c9a39e97f999518f4f31dcb49e189706b25e27c2395aeab8b360fffbf627bd782f9f72202ad22543d49ff96632b5d2106cb8b37a04dd4562606ecc3804dc9bf7092c54f15628ab9c0f54c5618e8135be5e4a516b56593705bc84f8740ff54aab296356634e219c76955559aabb072a2ccb0b7ce7bb1a025fd5acc629c24d135d2c078a249fca525ff424e187f1aecd31cc13a61014cd7fc93921bea38dbe739f458788648bf4e207f1d2d2890f440cfd6c30443bc128274a991cd62b4e6db891a4bbc1d9f20c4f04c371575864dba3fc8fddb5df33cedc5e902584ce613338c610cb51e1626dc905a1d4a5adecbff4c8c29c15cb69c01e25146f2061c7ed55c73ecd1422e8a9aba5c7d1b822d8de9d8752f0d534ee007329fae8182cad995540600b522932615089130baf86d82e6fe64eb67edc46a9eb3e67819b152c26ea71d9ec9aecf5839f4a01133445485cf51e59866983364ba2b8af919d1eb40a16ab0fe627b60bb853f8db10d0a34004aa38970481c83f892e84bb90e2e1667a55e84284d30221dca6f9242ce0eb8ee2742dc859342eb198befab019b6d0b66074cb40142d654b5f4f33368e47763db8aa560ebf6ce8fe3a5026b9d287fc28b0dc63dd6149ea67ebcd4bd66a426fd280325e52f82ec86509ad50c910940b129fd4f38c3bdff9de8fa4f90c7038bb4207994aa8ed4d472edfaadc337b0fb46f36233e509b0d712b90940742484bef5c9c86d9bdbca8e217d5932d41f139036eea3a02e4bda55957e18178ac2e35dc44c3530b37283e45fdc54fe4cef39ecfe7990911e42db8aedde6baa79bd6ed89ad91efc322a3da587c8dcb154ed7f73abb8233bec1f81e621d88daf1ea8b463b364c11c80937a96110f5710659da0cc7cbfe7cdad80a25ac9b64cd0223b5f61596398ac1a1f6ffd8df673e0668f165e4c82ad97d591d4a8a575c34cd4f757b4451eb1fd216927f84bf83650bb72f03566b8764d3ba6423bb099bb0e67b137c420353dca86f5a490404694ba2f79c9304bce6de5e65dd1dcd93b768a274ab9786bae0d1a007334bf3c65e58de1bca13c67ab6a6ded13152d93b10e69caf05051ff97c33906e94d7ce9a53da2d2419739a5c142d2a947f969aef66d9569f994a9ede12e7cadf9a9cd828333f119d31fd960f7d8a63d68809a0b3c6caf1b974a08b8fdc62cbaef9f9216ffb0bcf17bb37b57602582e9136c6c201283392e706f9d018580985ae962d0c6391b2d5da02b7f3d58b8c71d35c61dbc2617e84120861e4f63ae4ca9057e76b5586a33584bfcb223b81ab64ae3be2f45b7fb23f1a9c37ad41bd483304c3a081d6f915e35fec94304f67962eb93e488a3c127c401c88d3435b15c0fbd83c2d6244371f6c765df4e3bd583b1f2d425c6ae1ab636fcfd78721e73013a7b89a0bce6552b119bb2a7c4de62eac12b53599975315918e6d6241507e240cb59e3e1950138c36a06e36022ecfd6df11f1b87e3eb9679eb1986688461a8e738023c248fba49db7a36733a45d3eb2057405bf947b68cc2c4c81d6ec409ea8c8335123cf37805da3fd6dc82810c1b21ab267bb6b24b203034e1863ab9352fddb15eb3919dd9795567483200968ba535bee4354f084eee4095e0310dffcb72896c39a11a25ea112464c77b1d8487e004cc9f84805c452102e3f0b714878b32b45cd0788945f822694001612d6f22f747b0a2b2226be0ab0ebff6ea627ca7c6030a066629f5980ad19d51b284f9e41d7ef9806fde9c8c7123a42216d728b1c481add152d1a3cd220b1cb6135bc4f4cc0ae6dc40224632a9920008f366fce380501c3a535b9581ab82148bd70b9acd8e3f7c719c1fa23ebc473b1b4ea790681ac7f4e6b3abd83a8040a964d2b6b442cf9edd95d4090dbb20c3f2b4fffba5f3e0f530da750b35bdac0ab4817949c66f645879a65a3fd0b4767fa520372e8218cf54389473e8905788d3127678cfd07a87f28709581d4084471ecf50dcebee77aa21d3a88df2d18b82ef5a79001a7ee79428b6d4ca3b255256b03ffc0183c6724e1ccfac2f16a75c05de046fb4227bf7a0b59d603cd4a9688b5b87b0710e2ef4a39fa2aa1582f894fbc86c6022699fc5609d203fdc73e62bafe312cde7c0d46d926a27ff0ed683f4f6b47be02ec8fae0dc8acc818f82275bb845fcc6898e2fd0c94f4b2306584fa5d3f7d7fec2367bf36cf34bb02eec0f56b96f83dd090b414c198decf0347233e5a0a30ea0fa8cd365ebdccac91c8a59e2e0c74d96ed44d52753fa0a573690ef62e6326fb56cb4ca08eea22084240e806716b4f18aa58e51b8b02fa25d87ef410977e07688905a0b8f76c063441c67d436c163ec98ef0d218951bff4b33dd7c78a5fb155328b22bfd9a801623fa1d5b95e5e57a777d7c4145974176dc911cdb32b3c86871c7e828fe1a3e9333b52e161c78c3acf8a9a6d679bc562145101cabe22bde2a3c9c10789d43a5273d7f91dd1d6e581b89d6e1225124edcc6c159f26df75004aa9ddb6c58c4725ef9ac8f6b1bb4f7eaa52304a6542d95295b350ac58a49b4f8476de3f8a1271889e1fd556238eab483feb2513ede31f666f9a1ea14740a2846b1465202ef5ecb130e5cdec10eb51944d51578134ea7e799ae2daab0477bee0d8d60e2a24991324ac64a898cc39904e63b531c69a85a690aec73efb9902be92b40c886404bdfe83ca14e7d2a1dfd50b30bb53020b216476bb726ffe49264877ad8cf4f935fe1182f45c8bc3b92f85e5266452e312690ded8dbd73ad783555902d910c1ae3378a1fdbdb7f8e272399ad1a6ce3b00ab5f35dc7db723f338faaa9eb1484a7ad7ff8e5c7b6c6e425ef5418d4370a5bf8f33f61e0b01cacaa954b64ffab8b7dd09c94b05a190fc8f54b4b79000bc21a1de96d131fb28c326b72182fc5a595570adf4e332999819b42e15954cb8b87c12ed54b6bb2407804e0734b310f4111bf1044ecf26a6d615c04023ed4b04a917267071c8e3120d2362b605698534f3ee62f42b32b41b2dafc20bffb1eac406ff128302e07d7ddc92c9229780dce50d89985d054da4bb0b5fef10499b7cf859d3c78c655dd53cd5b0b11fcea05f53f6421396ade31234c3a149c7832bd511b61424caa3eb22868c69abae793ace07d309f83a0532ff5cffe5cb4e9a1a4a9d8eaf1356f3a8544b45a739fbfa1a116a37184680221fa9108a1ef83a0a5e873790456bf439af830fa94435dcbea696cfdea355892735584dacd7741907bc6db7d27ccc267de0a8ceb35ebfaa814b4eac8f3ea1837280146d5e0a34fe335c5276e4b6cd1c73670783ab62c7e6ec08490689cff5e727a73a831d255214ecb66bbe52234113531b95e7f0d883c7903897d8e0056feae2d0c28f91684f17bdf00eb839aa329099548de925f33a0bc0f80958b7ffa0499b8cd27ac34edbb3e72b7f9f364c67ca537c4756952fd3f938905cc34a6cc32657886c220ba6bf6629138574cc1990cb8e37913fdf83f8b5b590a94604585db5fcfeb16d00093d34a35f7611243ca252a3002f634cb975f727b55b1323cefaf34f204992c87fb5374cad15d69a67da6cd78dd6c0107eb16cb18527568723954d1c68f55bcbe4e73e3b011cebfe0fc9f657f0112f88846ad9621a858e7970b044d87b9e50c795d0e94562e20cd78fea00b95efdcb9151432f98d20d9ac15f8ebcaacfd273f1fdb1cd28694bb9bc395f29dd35b23c5dd7ceb6db2cb114662f3d0a5e58cd26e4702d387f2039440a81d406cc14cbeb52c82f60aaba4a580dba583783cbee2602da114fa11db0c1c4caecf4f056b0d9fb01560066f81f90bb3740b6997a132d7c656007e683a4f5da70dd44ff3a9a79456e6cc4cfbe4889633f1dbbfe3252bedfa18ff8679064a03516db60a67a6c8e0fd93bc4c5803473aabc89a79057cb2ac32bc9bf82a4adb4f6fb5b6051145d2f43799f83e79c011c18bdfe785fe9c2aa715a3644889696dd6aabfe49283eef71b567835068f918ffe5f649df29575d111543d2f4e3bca8142d9cd7a3fd2cc6e3f80181daf366cd29151e000c20527f87da898b5d7e2019add02d53c86c3ddf8bb827da7063cf391a5d01c2766f25736f13d1f0d66338e493813255baeaf7177085942abe73bdccc882bc155686d08229f587b662bcfd312f0edad6cbae8b5f9988dac10d57ea143a81cab204ac2ae9ddff4d2632c6d2b671c3fc5aa3d22f6203f5f02d00407e6c850b4a6bb015b1ca3be194761ab4ce66822395cfb7008c2b88a219ad50e060f91cafe55076fd78e53fdceb9d12f0451f7ab01286ed13e7ae504aa725024fef67f811ba21a2e8bd4658d602dfc8977d10cd35b9798cbfe119a22e6a0ffbd531dc9b35b861fb37d9abef7ae29c36bfdf1a3d2c9848ecef48caa9ca8b3b0aaa4edfdbd3189016d446bf8f53bd38de78193d6790ff8ae799f7228ff68bf64cd2a57690d1657a702161899b609f66058180ab272a27082a767054fbf37eab62e0f8b76e0441772e268957ef16568d701165baa4486cbcdea5849c137b48a74f44ca87f28e9d97718b80ff41874a97e976a3a3d063d0f48f3a5e6747b5ce04016f77e71c90f106a8fc9f5656841328ac3079b26716ef5127d4d1ad1cf400f510c4ff26744c8bdd4372fea23e62c3695e6ea122bde78cda50ddae42d04122ec041b1fd5cab200c9105737051ac5aaaf0b95e4e54278eeff10ed83368bc732c7af76eff673fc537567cf12aff943be62678c39e211b211290865a467bbc8a6b761b6f442b4f9b63fd944aa739dd5943acdaf57f3c6c72e88e13b216602f8f331207a793556159f67dac16ca193da3cd07ed37982d13ccfbea2af00e34ef2f3ffcf0e9a70911d63f63171d3816a4fc6639f1f990ce4faebf5644aed7d4fe0a82180d6ee9edfc25868dd31150c76acf6a6256f5e68682fe255f3af6b0cb77951cb0bb8afbe00d2365753b4bdcd7b19a694773a540b785ee6abf1a0041fdbeabed1ac69f", 0x4, 0x0, 0x80000000}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = syz_open_dev$dri(&(0x7f0000000040), 0x100006, 0x0)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x80, 0x5, 0x9, 0x0, {0xa, 0xd6, 0x1c, 0x7, 0xfe, 0x401, 0xfff5, 0xa, 0x0, 0x52, 0x8000, 0x7e9, 0x401, 0x5, "cb630dab3a0338057401a192419598961f50dc45c87d55b42a28b8f01c0e0e7a"}})
close_range(r2, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x2e, &(0x7f0000000080)={@empty, @remote, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, 0x0)

16.939589901s ago: executing program 3 (id=333):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x7f, 0x4, 0x0, 0x0, @multicast}, 0x10)
sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0)

16.618227181s ago: executing program 4 (id=334):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @dev, @default, 0x0, [@rose, @remote, @null, @null, @null, @netrom]}, &(0x7f00000010c0)=0x40, 0x800)
connect$rose(r1, &(0x7f0000001100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x40)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000002900", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r0], 0xb8}}, 0x4004)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000011c0)={0x0, 0x10001}, 0x8)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0xc17a)
sendmmsg$inet6(r0, 0x0, 0x0, 0x24044801)
shutdown(r0, 0x1)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000370400"/19, @ANYRES32=0x0, @ANYBLOB="a9040500000000001c0012800b00010069703667726500000c0002800800040001000100080004"], 0x44}}, 0x0)

15.657374041s ago: executing program 3 (id=335):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb)
preadv2(r4, &(0x7f0000000280)=[{&(0x7f0000000040)=""/235, 0xeb}], 0x1, 0xfffffff8, 0x496, 0x4)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, 0x0)
syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x80)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
rseq(0x0, 0x0, 0x0, 0x0)
r5 = timerfd_create(0x9, 0x0)
timerfd_settime(r5, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x1, 0x3}, 0x6)
readv(r5, 0x0, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
close_range(r3, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x90, 0x0, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000000000000850000000f000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='ext4_writepages\x00', r7}, 0x10)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6)

4.29344257s ago: executing program 33 (id=327):
r0 = socket(0x10, 0x3, 0x4)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@newqdisc={0x68, 0x14, 0xf0b, 0x2000000, 0x0, {0x2, 0x0, 0x0, 0x0, {0x7, 0xffff}, {0xffff, 0x9}, {0xe, 0x2}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}}, {0x4}}, {{0x1c, 0x1, {0x0, 0x1, 0xffe2, 0x2, 0x2, 0x7ff, 0x8}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x80)
io_uring_setup(0x2e34, &(0x7f0000000900)={0x0, 0x100, 0x80, 0x1})
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_serviced_recursive\x00', 0x26e1, 0x0)
close(r1)
r2 = timerfd_create(0x0, 0x0)
ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f0000000080)=0x10000000)
read(r2, &(0x7f0000000000)=""/14, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r3 = dup(r2)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xd, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x4)
r5 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r5, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r9 = dup(r8)
write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c)
write$6lowpan_enable(r3, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r1, 0x18000000000002a0, 0xc, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f0", 0x0, 0xb000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_usb_connect(0x5, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x4d, [{0x0, 0x0}]})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

2.310158881s ago: executing program 34 (id=329):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x60, &(0x7f0000004640)={&(0x7f0000000840)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10}}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x64}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="bf00ffff00d190000f1000000000000063000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3a)

1.166390096s ago: executing program 35 (id=334):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000040)=@full={0xb, @dev, @default, 0x0, [@rose, @remote, @null, @null, @null, @netrom]}, &(0x7f00000010c0)=0x40, 0x800)
connect$rose(r1, &(0x7f0000001100)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x40)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000002900", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r0], 0xb8}}, 0x4004)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000011c0)={0x0, 0x10001}, 0x8)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0xc17a)
sendmmsg$inet6(r0, 0x0, 0x0, 0x24044801)
shutdown(r0, 0x1)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000370400"/19, @ANYRES32=0x0, @ANYBLOB="a9040500000000001c0012800b00010069703667726500000c0002800800040001000100080004"], 0x44}}, 0x0)

0s ago: executing program 36 (id=335):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_wakeup_irq', 0x0, 0xb)
preadv2(r4, &(0x7f0000000280)=[{&(0x7f0000000040)=""/235, 0xeb}], 0x1, 0xfffffff8, 0x496, 0x4)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, 0x0, 0x0)
syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x80)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
rseq(0x0, 0x0, 0x0, 0x0)
r5 = timerfd_create(0x9, 0x0)
timerfd_settime(r5, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x1, 0x3}, 0x6)
readv(r5, 0x0, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
close_range(r3, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x90, 0x0, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000000000000850000000f000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='ext4_writepages\x00', r7}, 0x10)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.163' (ED25519) to the list of known hosts.
[   66.522920][ T5805] cgroup: Unknown subsys name 'net'
[   66.628822][ T5805] cgroup: Unknown subsys name 'cpuset'
[   66.636604][ T5805] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   68.029577][ T5805] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   70.336094][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   70.345012][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   70.356149][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   70.371108][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   70.379521][ T5820] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   70.391859][ T5827] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   70.396318][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   70.399758][ T5827] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   70.413309][ T5820] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   70.414159][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   70.428320][ T5827] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   70.435968][ T5827] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   70.437639][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   70.444515][ T5827] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   70.451789][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   70.464599][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   70.466176][ T5827] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   70.473200][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   70.479064][ T5827] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   70.486645][ T5832] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   70.493369][ T5827] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   70.499507][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   70.507048][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   70.514247][ T5832] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   70.520692][ T5827] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   70.535110][ T5827] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   70.542560][ T5827] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   70.549728][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   70.576112][   T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   70.587961][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   70.950581][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   70.964190][ T5824] chnl_net:caif_netlink_parms(): no params data found
[   71.022427][ T5816] chnl_net:caif_netlink_parms(): no params data found
[   71.036499][ T5815] chnl_net:caif_netlink_parms(): no params data found
[   71.122809][ T5828] chnl_net:caif_netlink_parms(): no params data found
[   71.242221][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.252329][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.260096][ T5833] bridge_slave_0: entered allmulticast mode
[   71.267746][ T5833] bridge_slave_0: entered promiscuous mode
[   71.276132][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.283217][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.290596][ T5833] bridge_slave_1: entered allmulticast mode
[   71.297323][ T5833] bridge_slave_1: entered promiscuous mode
[   71.344658][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.352234][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.359443][ T5824] bridge_slave_0: entered allmulticast mode
[   71.366327][ T5824] bridge_slave_0: entered promiscuous mode
[   71.399922][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.409213][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.417776][ T5824] bridge_slave_1: entered allmulticast mode
[   71.424345][ T5824] bridge_slave_1: entered promiscuous mode
[   71.442209][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.449907][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.457183][ T5815] bridge_slave_0: entered allmulticast mode
[   71.463722][ T5815] bridge_slave_0: entered promiscuous mode
[   71.472808][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[   71.474453][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.484677][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[   71.486809][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.499746][ T5815] bridge_slave_1: entered allmulticast mode
[   71.507156][ T5815] bridge_slave_1: entered promiscuous mode
[   71.516190][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.526664][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.533761][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.541039][ T5816] bridge_slave_0: entered allmulticast mode
[   71.548904][ T5816] bridge_slave_0: entered promiscuous mode
[   71.556947][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.564044][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.571397][ T5816] bridge_slave_1: entered allmulticast mode
[   71.578109][ T5816] bridge_slave_1: entered promiscuous mode
[   71.612087][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.647630][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.658760][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.683300][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.694635][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.706881][ T5833] team0: Port device team_slave_0 added
[   71.724831][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state
[   71.732147][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.739420][ T5828] bridge_slave_0: entered allmulticast mode
[   71.746420][ T5828] bridge_slave_0: entered promiscuous mode
[   71.760654][ T5833] team0: Port device team_slave_1 added
[   71.768353][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   71.780088][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   71.795132][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state
[   71.802454][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.809909][ T5828] bridge_slave_1: entered allmulticast mode
[   71.819862][ T5828] bridge_slave_1: entered promiscuous mode
[   71.858187][ T5824] team0: Port device team_slave_0 added
[   71.875652][ T5815] team0: Port device team_slave_0 added
[   71.882084][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.889400][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.915970][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.936346][ T5816] team0: Port device team_slave_0 added
[   71.951833][ T5824] team0: Port device team_slave_1 added
[   71.974405][ T5815] team0: Port device team_slave_1 added
[   71.980643][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.987743][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.014088][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.032567][ T5816] team0: Port device team_slave_1 added
[   72.055354][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   72.085956][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.092919][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.119658][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.132366][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.139722][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.165879][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.179681][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   72.203010][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.210126][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.236420][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.249525][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.256518][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.283266][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.317482][ T5833] hsr_slave_0: entered promiscuous mode
[   72.323993][ T5833] hsr_slave_1: entered promiscuous mode
[   72.331079][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.338275][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.364433][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.381355][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.388348][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.415001][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.442129][ T5828] team0: Port device team_slave_0 added
[   72.450142][ T5828] team0: Port device team_slave_1 added
[   72.474164][ T5815] hsr_slave_0: entered promiscuous mode
[   72.480747][ T5815] hsr_slave_1: entered promiscuous mode
[   72.489943][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.498318][ T5815] Cannot create hsr debugfs directory
[   72.535038][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0
[   72.542070][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.568684][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   72.583890][ T5824] hsr_slave_0: entered promiscuous mode
[   72.590073][ T5836] Bluetooth: hci0: command tx timeout
[   72.596030][ T5826] Bluetooth: hci1: command tx timeout
[   72.596275][ T5826] Bluetooth: hci2: command tx timeout
[   72.601814][ T5836] Bluetooth: hci4: command tx timeout
[   72.616482][ T5824] hsr_slave_1: entered promiscuous mode
[   72.622583][ T5824] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.630760][ T5824] Cannot create hsr debugfs directory
[   72.655791][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1
[   72.662741][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   72.688769][ T5836] Bluetooth: hci3: command tx timeout
[   72.694427][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   72.732728][ T5816] hsr_slave_0: entered promiscuous mode
[   72.739124][ T5816] hsr_slave_1: entered promiscuous mode
[   72.745149][ T5816] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.753283][ T5816] Cannot create hsr debugfs directory
[   72.859438][ T5828] hsr_slave_0: entered promiscuous mode
[   72.866130][ T5828] hsr_slave_1: entered promiscuous mode
[   72.872301][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   72.880054][ T5828] Cannot create hsr debugfs directory
[   73.094513][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   73.106598][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   73.139292][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   73.160038][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   73.181856][ T5815] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   73.210519][ T5815] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   73.231153][ T5815] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   73.245121][ T5815] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   73.269586][ T5816] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   73.311881][ T5816] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   73.330385][ T5816] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   73.346198][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   73.356255][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   73.366777][ T5816] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   73.393751][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   73.402522][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   73.453533][ T5824] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   73.470941][ T5824] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   73.484631][ T5824] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   73.496239][ T5824] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   73.512886][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.572167][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   73.613070][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.620354][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.645137][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.671289][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.678435][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.730138][ T5815] 8021q: adding VLAN 0 to HW filter on device team0
[   73.755311][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.765682][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.773349][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.780492][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.813877][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.820985][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.852055][ T5816] 8021q: adding VLAN 0 to HW filter on device team0
[   73.893769][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0
[   73.910317][ T3457] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.917446][ T3457] bridge0: port 1(bridge_slave_0) entered forwarding state
[   73.952083][ T5824] 8021q: adding VLAN 0 to HW filter on device team0
[   73.967381][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   73.974468][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   73.984465][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   73.991547][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.000848][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.007953][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.024012][ T5828] 8021q: adding VLAN 0 to HW filter on device team0
[   74.106887][   T67] bridge0: port 1(bridge_slave_0) entered blocking state
[   74.113994][   T67] bridge0: port 1(bridge_slave_0) entered forwarding state
[   74.170221][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state
[   74.177481][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state
[   74.299916][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.353999][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.509493][ T5833] veth0_vlan: entered promiscuous mode
[   74.534041][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.561817][ T5833] veth1_vlan: entered promiscuous mode
[   74.590560][ T5815] veth0_vlan: entered promiscuous mode
[   74.622325][ T5815] veth1_vlan: entered promiscuous mode
[   74.633501][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.664721][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.674142][ T5835] Bluetooth: hci0: command tx timeout
[   74.674172][   T54] Bluetooth: hci4: command tx timeout
[   74.680289][ T5836] Bluetooth: hci2: command tx timeout
[   74.688124][ T5826] Bluetooth: hci1: command tx timeout
[   74.746522][ T5826] Bluetooth: hci3: command tx timeout
[   74.763415][ T5828] veth0_vlan: entered promiscuous mode
[   74.777443][ T5815] veth0_macvtap: entered promiscuous mode
[   74.791219][ T5816] veth0_vlan: entered promiscuous mode
[   74.808131][ T5815] veth1_macvtap: entered promiscuous mode
[   74.815343][ T5833] veth0_macvtap: entered promiscuous mode
[   74.824007][ T5828] veth1_vlan: entered promiscuous mode
[   74.834019][ T5816] veth1_vlan: entered promiscuous mode
[   74.843419][ T5833] veth1_macvtap: entered promiscuous mode
[   74.883621][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.903261][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.914645][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.928638][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.939209][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.956793][ T5816] veth0_macvtap: entered promiscuous mode
[   74.964769][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.976184][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.986998][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.003135][ T5816] veth1_macvtap: entered promiscuous mode
[   75.020145][ T5815] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.029419][ T5815] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.039064][ T5815] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.047878][ T5815] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.076561][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.085301][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.094487][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.104325][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.129788][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.140637][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.153028][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.163498][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.174912][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.184719][ T5828] veth0_macvtap: entered promiscuous mode
[   75.207663][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.219667][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.235541][ T5816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.246246][ T5816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.257254][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.287092][ T5816] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.297236][ T5816] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.309987][ T5816] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.319083][ T5816] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.338016][ T5828] veth1_macvtap: entered promiscuous mode
[   75.364820][ T5824] veth0_vlan: entered promiscuous mode
[   75.394236][ T5824] veth1_vlan: entered promiscuous mode
[   75.452520][ T5824] veth0_macvtap: entered promiscuous mode
[   75.466757][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.474713][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.484784][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.496917][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.506908][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.517578][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.528281][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.538909][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.550442][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.572346][ T5824] veth1_macvtap: entered promiscuous mode
[   75.590671][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.593395][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.608191][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.609881][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.627302][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.639513][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.649423][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.660801][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.671476][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.700030][  T737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.710246][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.719228][  T737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.727298][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.737383][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.747304][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.780688][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.780686][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.780707][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.798649][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.804871][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.827609][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.837807][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.848581][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.858560][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.870922][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.882222][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.912982][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.923660][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.933516][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.944054][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.954616][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.965143][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.975211][ T5824] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.985885][ T5824] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.999088][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.022782][  T737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.040524][  T737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.056755][ T5815] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   76.085282][ T5824] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   76.097512][ T5824] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   76.108273][ T5824] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   76.122431][ T5824] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   76.137430][  T737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.145266][  T737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.327402][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.355597][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.396395][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.409847][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.535270][ T5909] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET)
[   76.545347][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.571101][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.585317][ T5909] syzkaller1: entered promiscuous mode
[   76.603932][ T5909] syzkaller1: entered allmulticast mode
[   76.655623][    T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   76.745701][ T5826] Bluetooth: hci2: command tx timeout
[   76.759943][ T5826] Bluetooth: hci0: command tx timeout
[   76.765977][ T5826] Bluetooth: hci1: command tx timeout
[   76.771736][ T5826] Bluetooth: hci4: command tx timeout
[   76.826995][ T5836] Bluetooth: hci3: command tx timeout
[   76.849862][   T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.972764][   T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   77.429830][    T8] usb 4-1: config 0 has an invalid interface number: 122 but max is 0
[   77.445427][    T8] usb 4-1: config 0 has no interface number 0
[   77.457820][    T8] usb 4-1: config 0 interface 122 has no altsetting 0
[   77.480981][    T8] usb 4-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67
[   77.498737][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.508975][ T5913] ALSA: mixer_oss: invalid OSS volume ''
[   77.525971][ T5913] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.539124][    T8] usb 4-1: Product: syz
[   77.549871][    T8] usb 4-1: Manufacturer: syz
[   77.554621][    T8] usb 4-1: SerialNumber: syz
[   77.577902][    T8] usb 4-1: config 0 descriptor??
[   77.627216][ T5917] fuse: Unknown parameter 'use00000000000000000000'
[   77.647727][   T29] audit: type=1800 audit(1737045957.625:2): pid=5915 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.6" name="/" dev="9p" ino=2 res=0 errno=0
[   77.707105][ T5917] netfs: Couldn't get user pages (rc=-14)
[   77.731276][   T29] audit: type=1800 audit(1737045957.705:3): pid=5919 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.5" name="/" dev="9p" ino=2 res=0 errno=0
[   77.822651][   T29] audit: type=1800 audit(1737045957.795:4): pid=5923 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.8" name="/" dev="9p" ino=2 res=0 errno=0
[   77.863333][ T5923] Zero length message leads to an empty skb
[   78.032833][ T5902] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4'.
[   78.054793][ T5902] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   78.296150][   T29] audit: type=1800 audit(1737045958.265:5): pid=5926 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.9" name="/" dev="9p" ino=2 res=0 errno=0
[   78.417431][ T5931] overlayfs: failed to resolve './file1': -2
[   78.556497][ T5900] usb 4-1: USB disconnect, device number 2
[   78.610468][ T5900] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected.
[   78.690550][ T5901] delete_channel: no stack
[   78.697816][   T25] cfg80211: failed to load regulatory.db
[   78.771561][ T5930] syz.0.11 (5930) used greatest stack depth: 18776 bytes left
[   78.825973][ T5836] Bluetooth: hci4: command tx timeout
[   78.831420][ T5836] Bluetooth: hci1: command tx timeout
[   78.836989][ T5826] Bluetooth: hci0: command tx timeout
[   78.842405][ T5826] Bluetooth: hci2: command tx timeout
[   78.906332][ T5826] Bluetooth: hci3: command tx timeout
[   80.826139][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   80.915458][  T974] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   80.993763][ T5965] fuse: Unknown parameter 'use00000000000000000000'
[   81.101105][  T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   81.114947][  T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   81.428651][   T29] audit: type=1326 audit(1737045961.395:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5956 comm="syz.4.19" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe118b85d29 code=0x0
[   81.450589][  T974] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   81.463656][  T974] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   81.475486][  T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.534059][  T974] usb 3-1: config 0 descriptor??
[   82.134673][ T5965] netfs: Couldn't get user pages (rc=-14)
[   82.165620][   T29] audit: type=1800 audit(1737045961.545:7): pid=5961 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.18" name="/" dev="9p" ino=2 res=0 errno=0
[   82.281003][ T5961] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   82.335356][ T5961] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   82.355253][  T974] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[   82.378798][  T974] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   82.620783][ T5977] trusted_key: syz.3.23 sent an empty control message without MSG_MORE.
[   82.846627][   T29] audit: type=1800 audit(1737045962.825:8): pid=5978 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.21" name="/" dev="9p" ino=2 res=0 errno=0
[   83.834041][ T5869] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   84.283178][   T58] usb 3-1: reset high-speed USB device number 2 using dummy_hcd
[   84.305541][ T5869] usb 4-1: Using ep0 maxpacket: 16
[   84.312059][ T5869] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[   84.320623][ T5869] usb 4-1: config 0 has no interface number 0
[   84.336508][ T5869] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   84.515723][ T5869] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   84.527543][   T58] usb 3-1: device descriptor read/64, error -32
[   84.539194][ T5869] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[   84.549290][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[   84.560434][ T5869] usb 4-1: Product: syz
[   84.564961][ T5869] usb 4-1: SerialNumber: syz
[   84.776051][   T58] usb 3-1: reset high-speed USB device number 2 using dummy_hcd
[   84.951287][   T58] usb 3-1: device descriptor read/64, error -32
[   85.049089][ T5955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   85.132464][ T5955] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   85.245254][ T5869] usb 4-1: config 0 descriptor??
[   85.257095][ T5869] cm109 4-1:0.8: invalid payload size 0, expected 4
[   85.265439][ T5869] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input5
[   85.416542][ T5999] FAULT_INJECTION: forcing a failure.
[   85.416542][ T5999] name fail_usercopy, interval 1, probability 0, space 0, times 1
[   85.462198][ T5999] CPU: 1 UID: 0 PID: 5999 Comm: syz.1.27 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0
[   85.472747][ T5999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[   85.482820][ T5999] Call Trace:
[   85.486115][ T5999]  <TASK>
[   85.489063][ T5999]  dump_stack_lvl+0x241/0x360
[   85.493781][ T5999]  ? __pfx_dump_stack_lvl+0x10/0x10
[   85.499022][ T5999]  ? __wake_up_klogd+0xcc/0x110
[   85.503922][ T5999]  should_fail_ex+0x3b0/0x4e0
[   85.508631][ T5999]  _copy_to_user+0x31/0xb0
[   85.513084][ T5999]  simple_read_from_buffer+0xca/0x150
[   85.518493][ T5999]  proc_fail_nth_read+0x1e9/0x250
[   85.523558][ T5999]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   85.529134][ T5999]  ? rw_verify_area+0x55e/0x6f0
[   85.534009][ T5999]  ? __pfx_proc_fail_nth_read+0x10/0x10
[   85.539592][ T5999]  vfs_read+0x1fc/0xb70
[   85.543776][ T5999]  ? __pfx___mutex_lock+0x10/0x10
[   85.548845][ T5999]  ? __pfx_vfs_read+0x10/0x10
[   85.553589][ T5999]  ? __fget_files+0x2a/0x410
[   85.558205][ T5999]  ? __fget_files+0x395/0x410
[   85.562920][ T5999]  ? __fget_files+0x2a/0x410
[   85.567545][ T5999]  ksys_read+0x18f/0x2b0
[   85.571813][ T5999]  ? __pfx_ksys_read+0x10/0x10
[   85.576599][ T5999]  ? do_syscall_64+0x100/0x230
[   85.581393][ T5999]  ? do_syscall_64+0xb6/0x230
[   85.586096][ T5999]  do_syscall_64+0xf3/0x230
[   85.590625][ T5999]  ? clear_bhb_loop+0x35/0x90
[   85.595319][ T5999]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   85.601249][ T5999] RIP: 0033:0x7fe09a98473c
[   85.605689][ T5999] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[   85.625323][ T5999] RSP: 002b:00007fe09b79b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[   85.633767][ T5999] RAX: ffffffffffffffda RBX: 00007fe09ab75fa0 RCX: 00007fe09a98473c
[   85.641758][ T5999] RDX: 000000000000000f RSI: 00007fe09b79b0a0 RDI: 0000000000000006
[   85.649750][ T5999] RBP: 00007fe09b79b090 R08: 0000000000000000 R09: 0000000000000000
[   85.657755][ T5999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[   85.665746][ T5999] R13: 0000000000000000 R14: 00007fe09ab75fa0 R15: 00007ffedfab86b8
[   85.673745][ T5999]  </TASK>
[   86.134454][    C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71
[   86.141202][  T974] usb 4-1: USB disconnect, device number 3
[   86.141682][    C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[   86.357736][  T974] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[   87.885015][ T6026] netlink: 20 bytes leftover after parsing attributes in process `syz.0.33'.
[   88.118208][    T8] usb 3-1: USB disconnect, device number 2
[   88.181207][ T6042] kvm: emulating exchange as write
[   88.291470][ T6046] tipc: Started in network mode
[   88.296760][ T6046] tipc: Node identity ac14140f, cluster identity 4711
[   88.316665][ T6046] tipc: New replicast peer: 255.255.255.255
[   88.323278][ T6046] tipc: Enabled bearer <udp:syz2>, priority 10
[   88.345352][ T6046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.39'.
[   88.376035][ T5869] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   88.668343][    T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   88.695574][ T5869] usb 5-1: Using ep0 maxpacket: 8
[   88.702103][ T5869] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[   88.711242][ T5869] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   88.715499][ T5868] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[   88.726272][ T5869] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   88.950950][ T5868] usb 4-1: config index 0 descriptor too short (expected 62, got 34)
[   89.073650][ T5868] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   89.256280][ T5868] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD9, changing to 0x89
[   89.342319][ T5869] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[   89.352795][ T5869] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   89.365924][ T5869] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   89.375006][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.375074][ T5868] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[   89.455648][    T8] usb 3-1: device descriptor read/64, error -71
[   89.500268][  T974] tipc: Node number set to 2886997007
[   89.509717][ T5868] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[   89.519256][ T5868] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.528037][ T5868] usb 4-1: Product: syz
[   89.532226][ T5868] usb 4-1: Manufacturer: syz
[   89.538025][ T5868] usb 4-1: SerialNumber: syz
[   89.544547][ T5868] usb 4-1: config 0 descriptor??
[   89.620363][ T5869] usb 5-1: usb_control_msg returned -32
[   89.626145][ T5869] usbtmc 5-1:16.0: can't read capabilities
[   89.707023][    T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   89.764261][ T5868] usb 4-1: USB disconnect, device number 4
[   89.865601][    T8] usb 3-1: device descriptor read/64, error -71
[   89.965563][ T5869] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   89.985815][    T8] usb usb3-port1: attempt power cycle
[   90.008230][ T6068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   90.017003][ T6068] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   90.705445][ T5869] usb 2-1: Using ep0 maxpacket: 16
[   90.712492][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.723600][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.733804][ T5869] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   90.752174][ T5869] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice= 0.00
[   90.812757][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.859650][ T5869] usb 2-1: config 0 descriptor??
[   90.912927][ T6074] netlink: 12 bytes leftover after parsing attributes in process `syz.3.47'.
[   91.163182][    T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   91.252062][ T5899] usb 5-1: USB disconnect, device number 2
[   91.306847][   T58] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   91.337163][ T5869] input: HID 0955:7214 Haptics as /devices/virtual/input/input7
[   91.361083][ T5869] shield 0003:0955:7214.0002: Registered Thunderstrike controller
[   91.361304][ T5869] shield 0003:0955:7214.0002: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0
[   91.376564][    T8] usb 3-1: device not accepting address 5, error -71
[   91.478986][   T58] usb 4-1: Using ep0 maxpacket: 8
[   91.485105][   T58] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[   91.485136][   T58] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[   91.485174][   T58] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   91.485224][   T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.582472][ T5871] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[   91.583233][ T5871] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[   91.583599][ T5871] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[   91.584978][ T5871] shield 0003:0955:7214.0002: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[   91.618196][   T58] usb 2-1: USB disconnect, device number 2
[   91.736633][    T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   91.764733][    T8] usb 3-1: Using ep0 maxpacket: 32
[   91.772233][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   91.772269][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   91.772304][    T8] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00
[   91.772329][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.774333][    T8] usb 3-1: config 0 descriptor??
[   92.194889][    T8] usbhid 3-1:0.0: can't add hid device: -71
[   92.206642][    T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   92.228222][    T8] usb 3-1: USB disconnect, device number 6
[   92.805721][ T5899] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   93.028719][ T5899] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[   93.180062][   T29] audit: type=1800 audit(1737045973.135:9): pid=6100 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.55" name="/" dev="9p" ino=2 res=0 errno=0
[   93.233009][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.387635][ T6100] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   93.427103][ T6100] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   93.617446][ T5899] usb 2-1: Product: syz
[   93.621672][ T5899] usb 2-1: Manufacturer: syz
[   93.626932][ T5899] usb 2-1: SerialNumber: syz
[   93.635280][ T5899] usb 2-1: config 0 descriptor??
[   94.487001][   T58] usb 4-1: USB disconnect, device number 5
[   94.503739][ T5899] hso 2-1:0.0: Failed to find BULK IN ep
[   94.526520][ T5899] usb-storage 2-1:0.0: USB Mass Storage device detected
[   94.749313][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   94.851728][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   94.945652][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   95.653559][ T5899] usb 2-1: USB disconnect, device number 3
[   95.925525][   T29] audit: type=1326 audit(1737045975.895:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6139 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09a985d29 code=0x7ffc0000
[   95.999670][   T29] audit: type=1326 audit(1737045975.935:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6139 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09a985d29 code=0x7ffc0000
[   96.147147][   T29] audit: type=1326 audit(1737045975.935:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6139 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe09a985d29 code=0x7ffc0000
[   96.247741][   T29] audit: type=1326 audit(1737045975.935:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6139 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09a985d29 code=0x7ffc0000
[   96.268968][    C0] vkms_vblank_simulate: vblank timer overrun
[   96.285028][   T29] audit: type=1326 audit(1737045975.935:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6139 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe09a985d29 code=0x7ffc0000
[   96.812651][   T29] audit: type=1326 audit(1737045975.945:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6139 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09a985d29 code=0x7ffc0000
[   96.872117][   T29] audit: type=1326 audit(1737045975.945:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6139 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09a985d29 code=0x7ffc0000
[   96.953915][   T29] audit: type=1326 audit(1737045975.945:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6139 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe09a985d29 code=0x7ffc0000
[   97.011725][ T6158] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   97.029238][   T29] audit: type=1326 audit(1737045975.945:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6139 comm="syz.1.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09a985d29 code=0x7ffc0000
[   97.416542][ T5899] IPVS: starting estimator thread 0...
[   97.545576][ T6168] IPVS: using max 24 ests per chain, 57600 per kthread
[   98.743222][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   99.500569][   T29] kauditd_printk_skb: 35 callbacks suppressed
[   99.500588][   T29] audit: type=1800 audit(1737045979.475:54): pid=6189 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.77" name="bus" dev="overlay" ino=121 res=0 errno=0
[  100.385591][ T6174] tipc: Started in network mode
[  100.390492][ T6174] tipc: Node identity 4, cluster identity 4711
[  100.396742][ T6174] tipc: Node number set to 4
[  100.635523][   T58] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  101.375631][ T6209] syz.3.84(6209): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  101.769222][   T58] usb 2-1: Using ep0 maxpacket: 16
[  102.225893][ T5826] Bluetooth: hci0: Invalid connection link type handle 0x00c9
[  102.509608][   T58] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  102.530332][   T58] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  102.540024][   T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.548147][   T58] usb 2-1: Product: syz
[  102.552342][   T58] usb 2-1: Manufacturer: syz
[  102.557037][   T58] usb 2-1: SerialNumber: syz
[  102.567183][   T58] usb 2-1: config 0 descriptor??
[  102.577985][   T58] dm9601 2-1:0.0: probe with driver dm9601 failed with error -22
[  102.585803][  T974] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  102.605811][   T58] sr9700 2-1:0.0: probe with driver sr9700 failed with error -22
[  102.816476][  T974] usb 3-1: Using ep0 maxpacket: 16
[  102.845231][  T974] usb 3-1: unable to get BOS descriptor or descriptor too short
[  102.859525][  T974] usb 3-1: config 5 has too many interfaces: 164, using maximum allowed: 32
[  102.870564][  T974] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  102.878270][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.4.90'.
[  102.884999][  T974] usb 3-1: config 5 has 0 interfaces, different from the descriptor's value: 164
[  102.914001][  T974] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=44.99
[  102.932931][  T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.945255][  T974] usb 3-1: Product: syz
[  102.954231][  T974] usb 3-1: Manufacturer: syz
[  102.961003][  T974] usb 3-1: SerialNumber: syz
[  103.105438][   T58] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  103.209773][  T974] usb 3-1: USB disconnect, device number 7
[  103.245467][   T58] usb 1-1: device descriptor read/64, error -71
[  103.485684][   T58] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  104.395511][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  104.425509][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  104.564664][  T974] usb 2-1: USB disconnect, device number 4
[  104.775760][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  104.782777][   T58] usb 1-1: device descriptor read/64, error -71
[  104.785849][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  105.536279][   T58] usb usb1-port1: attempt power cycle
[  105.969093][   T58] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  105.985588][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  106.156561][   T58] usb 1-1: device descriptor read/8, error -71
[  106.469343][ T6278] FAULT_INJECTION: forcing a failure.
[  106.469343][ T6278] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  106.484587][ T6278] CPU: 1 UID: 0 PID: 6278 Comm: syz.3.99 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0
[  106.495119][ T6278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  106.505189][ T6278] Call Trace:
[  106.508487][ T6278]  <TASK>
[  106.511438][ T6278]  dump_stack_lvl+0x241/0x360
[  106.516150][ T6278]  ? __pfx_dump_stack_lvl+0x10/0x10
[  106.521384][ T6278]  ? __pfx__printk+0x10/0x10
[  106.526001][ T6278]  ? _raw_spin_unlock+0x28/0x50
[  106.530891][ T6278]  ? drm_ioctl_kernel+0x337/0x440
[  106.535948][ T6278]  should_fail_ex+0x3b0/0x4e0
[  106.540649][ T6278]  _copy_to_user+0x31/0xb0
[  106.545094][ T6278]  drm_ioctl+0x635/0xad0
[  106.549358][ T6278]  ? __pfx_drm_mode_atomic_ioctl+0x10/0x10
[  106.555189][ T6278]  ? __pfx_drm_ioctl+0x10/0x10
[  106.559998][ T6278]  ? __fget_files+0x2a/0x410
[  106.564618][ T6278]  ? __pfx_drm_ioctl+0x10/0x10
[  106.569400][ T6278]  __se_sys_ioctl+0xf5/0x170
[  106.574009][ T6278]  do_syscall_64+0xf3/0x230
[  106.578555][ T6278]  ? clear_bhb_loop+0x35/0x90
[  106.583266][ T6278]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.589192][ T6278] RIP: 0033:0x7fb1cc185d29
[  106.593619][ T6278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  106.613256][ T6278] RSP: 002b:00007fb1c9ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  106.621694][ T6278] RAX: ffffffffffffffda RBX: 00007fb1cc375fa0 RCX: 00007fb1cc185d29
[  106.629685][ T6278] RDX: 0000000020000380 RSI: 00000000c03864bc RDI: 0000000000000003
[  106.637675][ T6278] RBP: 00007fb1c9ff6090 R08: 0000000000000000 R09: 0000000000000000
[  106.645684][ T6278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  106.653673][ T6278] R13: 0000000000000000 R14: 00007fb1cc375fa0 R15: 00007ffe039b72c8
[  106.661674][ T6278]  </TASK>
[  106.664867][    C1] vkms_vblank_simulate: vblank timer overrun
[  107.262741][ T6291] netlink: 'syz.1.104': attribute type 2 has an invalid length.
[  107.537806][ T5867] usb 5-1: new low-speed USB device number 3 using dummy_hcd
[  107.678871][ T5867] usb 5-1: device descriptor read/64, error -71
[  108.844428][ T5867] usb 5-1: new low-speed USB device number 4 using dummy_hcd
[  109.178896][    T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  109.245834][ T5867] usb 5-1: device descriptor read/64, error -71
[  109.379892][ T5867] usb usb5-port1: attempt power cycle
[  109.390132][    T8] usb 2-1: no configurations
[  109.398171][    T8] usb 2-1: can't read configurations, error -22
[  109.875531][    T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  110.074298][    T8] usb 2-1: no configurations
[  110.084663][    T8] usb 2-1: can't read configurations, error -22
[  110.138983][    T8] usb usb2-port1: attempt power cycle
[  111.042163][ T6337] ptrace attach of "./syz-executor exec"[5815] was attempted by ""[6337]
[  111.084315][ T6337] dvmrp0: entered allmulticast mode
[  111.254477][ T6355] netlink: 24 bytes leftover after parsing attributes in process `syz.1.121'.
[  111.454745][ T6360] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  111.565477][ T5900] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  111.718338][ T5900] usb 3-1: Using ep0 maxpacket: 32
[  111.744819][ T5900] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  111.764195][ T5900] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  111.775403][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  111.784585][ T6369] delete_channel: no stack
[  111.789936][ T5900] usb 3-1: Product: syz
[  111.795925][ T5900] usb 3-1: Manufacturer: syz
[  111.800589][ T5900] usb 3-1: SerialNumber: syz
[  111.826703][ T5900] usb 3-1: config 0 descriptor??
[  111.845005][ T6357] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  112.163889][ T6357] netlink: 'syz.2.123': attribute type 2 has an invalid length.
[  112.216109][    T8] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  112.296340][ T6382] FAULT_INJECTION: forcing a failure.
[  112.296340][ T6382] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  112.309558][ T6382] CPU: 1 UID: 0 PID: 6382 Comm: syz.3.131 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0
[  112.320172][ T6382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  112.330227][ T6382] Call Trace:
[  112.333509][ T6382]  <TASK>
[  112.336440][ T6382]  dump_stack_lvl+0x241/0x360
[  112.341128][ T6382]  ? __pfx_dump_stack_lvl+0x10/0x10
[  112.346328][ T6382]  ? __pfx__printk+0x10/0x10
[  112.350926][ T6382]  should_fail_ex+0x3b0/0x4e0
[  112.355604][ T6382]  strncpy_from_user+0x36/0x270
[  112.360461][ T6382]  getname_flags+0xf1/0x540
[  112.364975][ T6382]  ? do_syscall_64+0x100/0x230
[  112.369761][ T6382]  __x64_sys_renameat2+0xad/0xe0
[  112.374709][ T6382]  do_syscall_64+0xf3/0x230
[  112.379224][ T6382]  ? clear_bhb_loop+0x35/0x90
[  112.383898][ T6382]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.389797][ T6382] RIP: 0033:0x7fb1cc185d29
[  112.394213][ T6382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  112.413817][ T6382] RSP: 002b:00007fb1c9fb4038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c
[  112.422231][ T6382] RAX: ffffffffffffffda RBX: 00007fb1cc376160 RCX: 00007fb1cc185d29
[  112.430199][ T6382] RDX: 0000000000000006 RSI: 0000000020000380 RDI: 0000000000000006
[  112.438169][ T6382] RBP: 00007fb1c9fb4090 R08: 0000000000000002 R09: 0000000000000000
[  112.446141][ T6382] R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000001
[  112.454105][ T6382] R13: 0000000000000000 R14: 00007fb1cc376160 R15: 00007ffe039b72c8
[  112.462083][ T6382]  </TASK>
[  112.465120][    C1] vkms_vblank_simulate: vblank timer overrun
[  113.229756][    T8] usb 1-1: config index 0 descriptor too short (expected 31, got 27)
[  113.239075][    T8] usb 1-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid wMaxPacketSize 0
[  113.259157][    T8] usb 1-1: config 1 interface 0 has no altsetting 0
[  113.274946][    T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72
[  113.297376][    T8] usb 1-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3
[  113.326009][ T5867] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  113.345477][    T8] usb 1-1: Product: syz
[  113.349724][    T8] usb 1-1: Manufacturer: syz
[  113.354346][    T8] usb 1-1: SerialNumber: syz
[  113.413463][ T6391] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  113.420248][ T6391] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  113.430871][ T6391] vhci_hcd vhci_hcd.0: Device attached
[  113.497408][ T5867] usb 2-1: config 0 has no interfaces?
[  113.508905][ T5867] usb 2-1: language id specifier not provided by device, defaulting to English
[  113.520214][ T5867] usb 2-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40
[  113.530158][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.539742][ T5867] usb 2-1: Product: syz
[  113.544115][ T5867] usb 2-1: Manufacturer: 靰ﻥ傖ᅅ㞴岼먊ߧᚨ筨鴴㝮렃舊陌睬ٶ寥淴駖켧ἲ㯩譅㯂֫凑ᶜ鎣䟒ᣇ邛྽ⰨꢅŦꂙ섾倞ࡢᅗ힋䒺⿰挱
[  113.562361][ T5867] usb 2-1: SerialNumber: syz
[  113.567602][ T6396] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  113.586302][ T5867] usb 2-1: config 0 descriptor??
[  113.615645][ T5869] vhci_hcd: vhci_device speed not set
[  113.675603][ T5869] usb 41-1: new full-speed USB device number 2 using vhci_hcd
[  113.695515][   T58] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  113.881721][   T58] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 15
[  113.893058][   T58] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  113.909119][   T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  113.920595][   T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  113.934236][   T58] usb 5-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  113.943749][   T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.952127][   T58] usb 5-1: Product: syz
[  113.956726][   T58] usb 5-1: Manufacturer: syz
[  113.961450][   T58] usb 5-1: SerialNumber: syz
[  113.971290][   T58] usb 5-1: config 0 descriptor??
[  113.978241][ T6391] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[  113.987828][    T8] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 6 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  114.192895][  T974] usb 1-1: USB disconnect, device number 6
[  114.203177][  T974] usblp1: removed
[  114.327535][    T8] usb 2-1: USB disconnect, device number 8
[  114.442573][ T5867] usb 3-1: USB disconnect, device number 8
[  114.464083][ T6399] random: crng reseeded on system resumption
[  114.559511][ T6404] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  115.285767][  T974] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  115.377566][ T6414] netlink: 'syz.3.142': attribute type 10 has an invalid length.
[  115.437713][ T6414] team0: Port device netdevsim0 added
[  115.466974][  T974] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  115.487722][  T974] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  115.530310][  T974] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[  115.641062][  T974] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64
[  115.685694][  T974] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  115.700069][  T974] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  115.708389][  T974] usb 3-1: Product: syz
[  115.712587][  T974] usb 3-1: Manufacturer: syz
[  115.768492][ T6406] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  115.813044][  T974] cdc_wdm 3-1:1.0: skipping garbage
[  115.818777][  T974] cdc_wdm 3-1:1.0: skipping garbage
[  115.853330][  T974] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[  115.859621][  T974] cdc_wdm 3-1:1.0: Unknown control protocol
[  115.926820][ T6426] netlink: 4168 bytes leftover after parsing attributes in process `syz.0.144'.
[  116.026273][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  116.033028][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  116.040051][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  116.046682][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  116.055755][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  116.062377][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  116.069953][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  116.076573][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  116.083741][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  116.090363][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  116.097567][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  116.104189][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  116.110635][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  116.117241][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  116.125482][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  116.132112][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  116.142507][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  116.149115][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  116.156521][ T5900] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  116.164577][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[  116.164600][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[  116.597214][ T6432] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  117.012574][ T5867] usb 3-1: USB disconnect, device number 9
[  117.012619][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[  117.183008][ T6392] vhci_hcd: connection reset by peer
[  117.190064][   T58] powermate: Expected payload of 3--6 bytes, found 64 bytes!
[  117.205135][   T58] input: Griffin SoundKnob as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input10
[  117.205821][ T5900] usb 2-1: Using ep0 maxpacket: 8
[  117.232790][   T11] vhci_hcd: stop threads
[  117.258769][   T11] vhci_hcd: release socket
[  117.264760][    C0] powermate: config urb returned -71
[  117.275508][    C0] powermate: config urb returned -71
[  117.281047][ T5900] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7
[  117.281589][    C0] powermate: config urb returned -71
[  117.297300][    C0] powermate: config urb returned -71
[  117.314010][   T11] vhci_hcd: disconnect device
[  117.316294][ T5900] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  117.339201][   T58] usb 5-1: USB disconnect, device number 6
[  117.345440][    C0] powermate 5-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  117.369137][ T5900] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  117.401065][ T5900] usb 2-1: Product: syz
[  117.411645][ T5900] usb 2-1: Manufacturer: syz
[  117.428180][ T5900] usb 2-1: SerialNumber: syz
[  117.881001][ T5900] usb 2-1: Invalid connection information received from device
[  117.942747][ T5867] usb 2-1: USB disconnect, device number 9
[  117.955775][   T58] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  118.213252][   T58] usb 4-1: Using ep0 maxpacket: 8
[  118.250282][   T58] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  118.261203][   T58] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  118.275427][   T58] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  118.288510][   T58] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  118.301503][   T58] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  118.314757][   T58] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  118.359916][   T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.602041][   T58] usb 4-1: usb_control_msg returned -32
[  118.631778][   T58] usbtmc 4-1:16.0: can't read capabilities
[  118.868950][ T5869] vhci_hcd: vhci_device speed not set
[  118.944453][  T974] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  119.126376][  T974] usb 1-1: Using ep0 maxpacket: 32
[  119.221752][  T974] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[  119.315406][  T974] usb 1-1: config 0 has no interface number 0
[  119.321552][  T974] usb 1-1: config 0 interface 12 has no altsetting 0
[  119.355093][  T974] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  119.364383][  T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.379621][  T974] usb 1-1: Product: syz
[  119.391858][  T974] usb 1-1: Manufacturer: syz
[  119.408130][  T974] usb 1-1: SerialNumber: syz
[  119.426667][  T974] usb 1-1: config 0 descriptor??
[  119.559021][ T5900] IPVS: starting estimator thread 0...
[  119.561712][   T29] audit: type=1326 audit(1737045999.535:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6475 comm="syz.2.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9282385d29 code=0x7ffc0000
[  119.585797][    C0] vkms_vblank_simulate: vblank timer overrun
[  119.633615][   T29] audit: type=1326 audit(1737045999.545:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6475 comm="syz.2.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f9282385d29 code=0x7ffc0000
[  119.654924][    C0] vkms_vblank_simulate: vblank timer overrun
[  119.655532][ T6477] IPVS: using max 24 ests per chain, 57600 per kthread
[  119.707095][   T29] audit: type=1326 audit(1737045999.595:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6475 comm="syz.2.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9282385d29 code=0x7ffc0000
[  119.762163][   T29] audit: type=1326 audit(1737045999.595:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6475 comm="syz.2.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9282385d29 code=0x7ffc0000
[  119.822521][   T29] audit: type=1326 audit(1737045999.595:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6480 comm="syz.2.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f92823b85e5 code=0x7ffc0000
[  119.879358][   T29] audit: type=1326 audit(1737045999.665:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6475 comm="syz.2.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9282385d29 code=0x7ffc0000
[  119.900584][    C0] vkms_vblank_simulate: vblank timer overrun
[  119.913678][   T29] audit: type=1326 audit(1737045999.665:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6475 comm="syz.2.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9282385d29 code=0x7ffc0000
[  119.935092][    C0] vkms_vblank_simulate: vblank timer overrun
[  119.982749][   T29] audit: type=1326 audit(1737045999.665:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6475 comm="syz.2.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9282385d29 code=0x7ffc0000
[  120.004061][    C0] vkms_vblank_simulate: vblank timer overrun
[  120.015543][   T29] audit: type=1326 audit(1737045999.665:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6475 comm="syz.2.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9282385d29 code=0x7ffc0000
[  120.036839][    C0] vkms_vblank_simulate: vblank timer overrun
[  120.049366][   T29] audit: type=1326 audit(1737045999.665:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6475 comm="syz.2.155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f9282385d29 code=0x7ffc0000
[  120.831696][ T5900] usb 4-1: USB disconnect, device number 6
[  120.864266][  T974] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  120.938348][  T974] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71
[  120.978537][ T6501] FAULT_INJECTION: forcing a failure.
[  120.978537][ T6501] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  121.005804][  T974] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  121.067230][  T974] f81534 1-1:0.12: probe with driver f81534 failed with error -71
[  121.257485][ T6501] CPU: 1 UID: 0 PID: 6501 Comm: syz.1.160 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0
[  121.268221][ T6501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  121.278312][ T6501] Call Trace:
[  121.281616][ T6501]  <TASK>
[  121.284566][ T6501]  dump_stack_lvl+0x241/0x360
[  121.289289][ T6501]  ? __pfx_dump_stack_lvl+0x10/0x10
[  121.294507][ T6501]  ? __pfx__printk+0x10/0x10
[  121.299118][ T6501]  ? __pfx_lock_release+0x10/0x10
[  121.304166][ T6501]  should_fail_ex+0x3b0/0x4e0
[  121.308870][ T6501]  _copy_from_user+0x2f/0xc0
[  121.313496][ T6501]  memdup_user+0x64/0xc0
[  121.317772][ T6501]  snd_ctl_ioctl+0x5b7/0x1880
[  121.322494][ T6501]  ? __pfx_snd_ctl_ioctl+0x10/0x10
[  121.327640][ T6501]  ? kasan_save_track+0x51/0x80
[  121.332536][ T6501]  ? kasan_save_track+0x3f/0x80
[  121.337406][ T6501]  ? kasan_save_free_info+0x40/0x50
[  121.342644][ T6501]  ? __kasan_slab_free+0x59/0x70
[  121.347612][ T6501]  ? kfree+0x196/0x430
[  121.351734][ T6501]  ? tomoyo_path_number_perm+0x679/0x860
[  121.357389][ T6501]  ? security_file_ioctl+0xc6/0x2a0
[  121.362604][ T6501]  ? __se_sys_ioctl+0x46/0x170
[  121.367480][ T6501]  ? do_syscall_64+0xf3/0x230
[  121.372185][ T6501]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.378291][ T6501]  ? do_vfs_ioctl+0xf07/0x2e40
[  121.383092][ T6501]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  121.388148][ T6501]  ? mark_lock+0x9a/0x360
[  121.392517][ T6501]  ? tomoyo_path_number_perm+0x206/0x860
[  121.398173][ T6501]  ? __pfx_lock_release+0x10/0x10
[  121.403226][ T6501]  ? tomoyo_path_number_perm+0x679/0x860
[  121.408896][ T6501]  ? tomoyo_path_number_perm+0x679/0x860
[  121.414549][ T6501]  ? tomoyo_path_number_perm+0x6f9/0x860
[  121.420195][ T6501]  ? __lock_acquire+0x1397/0x2100
[  121.425255][ T6501]  ? tomoyo_path_number_perm+0x206/0x860
[  121.430922][ T6501]  ? smack_log+0x123/0x540
[  121.435366][ T6501]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  121.441365][ T6501]  ? __pfx_smack_log+0x10/0x10
[  121.446149][ T6501]  ? smk_access+0x4ab/0x4e0
[  121.450682][ T6501]  ? smk_tskacc+0x300/0x370
[  121.455219][ T6501]  ? smack_file_ioctl+0x2f7/0x3a0
[  121.460286][ T6501]  ? __pfx_smack_file_ioctl+0x10/0x10
[  121.465700][ T6501]  ? __fget_files+0x2a/0x410
[  121.470343][ T6501]  ? __fget_files+0x2a/0x410
[  121.474953][ T6501]  ? __pfx_snd_ctl_ioctl+0x10/0x10
[  121.480098][ T6501]  __se_sys_ioctl+0xf5/0x170
[  121.484734][ T6501]  do_syscall_64+0xf3/0x230
[  121.489276][ T6501]  ? clear_bhb_loop+0x35/0x90
[  121.493974][ T6501]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.499894][ T6501] RIP: 0033:0x7fe09a985d29
[  121.504346][ T6501] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  121.523972][ T6501] RSP: 002b:00007fe09b79b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  121.525465][ T6507] fuse: Bad value for 'fd'
[  121.532409][ T6501] RAX: ffffffffffffffda RBX: 00007fe09ab75fa0 RCX: 00007fe09a985d29
[  121.544820][ T6501] RDX: 0000000020000540 RSI: 00000000c4c85513 RDI: 0000000000000004
[  121.549606][ T6507] netfs: Couldn't get user pages (rc=-14)
[  121.552791][ T6501] RBP: 00007fe09b79b090 R08: 0000000000000000 R09: 0000000000000000
[  121.552810][ T6501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  121.552823][ T6501] R13: 0000000000000000 R14: 00007fe09ab75fa0 R15: 00007ffedfab86b8
[  121.582482][ T6501]  </TASK>
[  121.592147][  T974] usb 1-1: USB disconnect, device number 7
[  121.619028][ T6510] FAULT_INJECTION: forcing a failure.
[  121.619028][ T6510] name failslab, interval 1, probability 0, space 0, times 0
[  121.661056][ T6510] CPU: 0 UID: 0 PID: 6510 Comm: syz.0.163 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0
[  121.671679][ T6510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  121.681752][ T6510] Call Trace:
[  121.685046][ T6510]  <TASK>
[  121.688011][ T6510]  dump_stack_lvl+0x241/0x360
[  121.692727][ T6510]  ? __pfx_dump_stack_lvl+0x10/0x10
[  121.697962][ T6510]  ? __pfx__printk+0x10/0x10
[  121.702596][ T6510]  ? __kmalloc_node_noprof+0xb9/0x4d0
[  121.708000][ T6510]  ? __pfx___might_resched+0x10/0x10
[  121.713336][ T6510]  should_fail_ex+0x3b0/0x4e0
[  121.718051][ T6510]  should_failslab+0xac/0x100
[  121.722772][ T6510]  __kmalloc_node_noprof+0xe1/0x4d0
[  121.727976][ T6510]  ? __kvmalloc_node_noprof+0x72/0x190
[  121.733471][ T6510]  __kvmalloc_node_noprof+0x72/0x190
[  121.738796][ T6510]  nf_tables_commit+0xc4f/0x9180
[  121.743751][ T6510]  ? do_raw_spin_unlock+0x13c/0x8b0
[  121.748974][ T6510]  ? __folio_put+0x2b3/0x360
[  121.753580][ T6510]  ? __pfx_nf_tables_commit+0x10/0x10
[  121.758956][ T6510]  ? free_large_kmalloc+0xfe/0x180
[  121.764068][ T6510]  ? nf_tables_newrule+0x23cc/0x2980
[  121.769357][ T6510]  ? kfree+0x212/0x430
[  121.773435][ T6510]  ? nft_trans_rule_add+0x30f/0x430
[  121.778647][ T6510]  ? nf_tables_newrule+0x2461/0x2980
[  121.783952][ T6510]  ? __pfx_nf_tables_newrule+0x10/0x10
[  121.789427][ T6510]  ? __nla_parse+0x40/0x60
[  121.793857][ T6510]  nfnetlink_rcv+0xc77/0x2ab0
[  121.798572][ T6510]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  121.803730][ T6510]  ? netlink_deliver_tap+0x2e/0x1b0
[  121.809037][ T6510]  ? skb_clone+0x240/0x390
[  121.813456][ T6510]  ? __pfx_lock_release+0x10/0x10
[  121.818500][ T6510]  ? netlink_deliver_tap+0x2e/0x1b0
[  121.823706][ T6510]  netlink_unicast+0x7f6/0x990
[  121.828482][ T6510]  ? __pfx_netlink_unicast+0x10/0x10
[  121.833783][ T6510]  ? __virt_addr_valid+0x45f/0x530
[  121.838919][ T6510]  ? __phys_addr_symbol+0x2f/0x70
[  121.843971][ T6510]  ? __check_object_size+0x47a/0x730
[  121.849267][ T6510]  netlink_sendmsg+0x8e4/0xcb0
[  121.854043][ T6510]  ? __pfx_netlink_sendmsg+0x10/0x10
[  121.859339][ T6510]  ? __pfx_netlink_sendmsg+0x10/0x10
[  121.864624][ T6510]  __sock_sendmsg+0x221/0x270
[  121.869404][ T6510]  ____sys_sendmsg+0x52a/0x7e0
[  121.874191][ T6510]  ? __pfx_____sys_sendmsg+0x10/0x10
[  121.879480][ T6510]  ? __fget_files+0x2a/0x410
[  121.884079][ T6510]  ? __fget_files+0x2a/0x410
[  121.888690][ T6510]  __sys_sendmsg+0x269/0x350
[  121.893291][ T6510]  ? __pfx_lock_release+0x10/0x10
[  121.898325][ T6510]  ? __pfx___sys_sendmsg+0x10/0x10
[  121.903454][ T6510]  ? __pfx_vfs_write+0x10/0x10
[  121.908246][ T6510]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  121.914581][ T6510]  ? do_syscall_64+0x100/0x230
[  121.919355][ T6510]  ? do_syscall_64+0xb6/0x230
[  121.924036][ T6510]  do_syscall_64+0xf3/0x230
[  121.928550][ T6510]  ? clear_bhb_loop+0x35/0x90
[  121.933235][ T6510]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.939153][ T6510] RIP: 0033:0x7f840f785d29
[  121.943570][ T6510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  121.963193][ T6510] RSP: 002b:00007f84105b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  121.971610][ T6510] RAX: ffffffffffffffda RBX: 00007f840f975fa0 RCX: 00007f840f785d29
[  121.979580][ T6510] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003
[  121.987556][ T6510] RBP: 00007f84105b3090 R08: 0000000000000000 R09: 0000000000000000
[  121.995541][ T6510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  122.003517][ T6510] R13: 0000000000000000 R14: 00007f840f975fa0 R15: 00007fffbc8d17e8
[  122.011498][ T6510]  </TASK>
[  122.014599][    C0] vkms_vblank_simulate: vblank timer overrun
[  122.073919][ T6513] FAULT_INJECTION: forcing a failure.
[  122.073919][ T6513] name failslab, interval 1, probability 0, space 0, times 0
[  122.184504][ T6513] CPU: 1 UID: 0 PID: 6513 Comm: syz.4.164 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0
[  122.195152][ T6513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  122.205242][ T6513] Call Trace:
[  122.208548][ T6513]  <TASK>
[  122.211513][ T6513]  dump_stack_lvl+0x241/0x360
[  122.216233][ T6513]  ? __pfx_dump_stack_lvl+0x10/0x10
[  122.221468][ T6513]  ? __pfx__printk+0x10/0x10
[  122.226090][ T6513]  ? kmem_cache_alloc_noprof+0x48/0x380
[  122.231671][ T6513]  ? __pfx___might_resched+0x10/0x10
[  122.236997][ T6513]  should_fail_ex+0x3b0/0x4e0
[  122.241704][ T6513]  should_failslab+0xac/0x100
[  122.246418][ T6513]  ? ptlock_alloc+0x20/0x70
[  122.250948][ T6513]  kmem_cache_alloc_noprof+0x70/0x380
[  122.256364][ T6513]  ptlock_alloc+0x20/0x70
[  122.260723][ T6513]  pte_alloc_one+0xd3/0x510
[  122.265252][ T6513]  ? __pfx_pte_alloc_one+0x10/0x10
[  122.270400][ T6513]  __pte_alloc+0x79/0x3c0
[  122.274762][ T6513]  ? __pfx___pte_alloc+0x10/0x10
[  122.279744][ T6513]  handle_pte_fault+0x4d3e/0x5ed0
[  122.284808][ T6513]  ? deref_stack_reg+0x17c/0x210
[  122.289767][ T6513]  ? stack_trace_save+0x118/0x1d0
[  122.294817][ T6513]  ? __pfx_handle_pte_fault+0x10/0x10
[  122.300216][ T6513]  ? mark_lock+0x9a/0x360
[  122.304560][ T6513]  ? __lock_acquire+0x1397/0x2100
[  122.309611][ T6513]  ? mt_find+0x2a9/0x920
[  122.313858][ T6513]  ? __pfx_lock_release+0x10/0x10
[  122.318903][ T6513]  handle_mm_fault+0x1053/0x1ad0
[  122.323869][ T6513]  ? __pfx_handle_mm_fault+0x10/0x10
[  122.329166][ T6513]  ? __pfx_find_vma+0x10/0x10
[  122.333844][ T6513]  ? vma_is_secretmem+0xd/0x50
[  122.338621][ T6513]  ? check_vma_flags+0x3ee/0x5a0
[  122.343576][ T6513]  __get_user_pages+0x1c82/0x49e0
[  122.348640][ T6513]  ? __pfx___get_user_pages+0x10/0x10
[  122.354036][ T6513]  __gup_longterm_locked+0xe64/0x17f0
[  122.359410][ T6513]  ? __pfx_lock_acquire+0x10/0x10
[  122.364443][ T6513]  ? lock_acquire+0x264/0x550
[  122.369126][ T6513]  ? __pfx___gup_longterm_locked+0x10/0x10
[  122.374936][ T6513]  ? down_read+0x82b/0xa40
[  122.379358][ T6513]  ? __pfx___might_resched+0x10/0x10
[  122.384649][ T6513]  ? is_valid_gup_args+0x124/0x200
[  122.389769][ T6513]  pin_user_pages_remote+0x132/0x1f0
[  122.395061][ T6513]  ? __pfx_pin_user_pages_remote+0x10/0x10
[  122.400873][ T6513]  ? down_read+0x82b/0xa40
[  122.405297][ T6513]  iopt_pages_rw_access+0x681/0x970
[  122.410515][ T6513]  ? __pfx_iopt_pages_rw_access+0x10/0x10
[  122.416239][ T6513]  ? interval_tree_iter_first+0x22f/0x260
[  122.422053][ T6513]  ? iopt_area_contig_init+0x17c/0x220
[  122.427521][ T6513]  iommufd_access_rw+0x35f/0x570
[  122.432473][ T6513]  ? __pfx_iommufd_access_rw+0x10/0x10
[  122.437958][ T6513]  ? __kvmalloc_node_noprof+0x72/0x190
[  122.443455][ T6513]  iommufd_test+0x33e7/0x4270
[  122.448170][ T6513]  ? __pfx_iommufd_test+0x10/0x10
[  122.453217][ T6513]  ? __pfx___might_resched+0x10/0x10
[  122.458513][ T6513]  ? __might_fault+0xaa/0x120
[  122.463203][ T6513]  ? __pfx_lock_release+0x10/0x10
[  122.468240][ T6513]  ? __might_fault+0xc6/0x120
[  122.472929][ T6513]  iommufd_fops_ioctl+0x4d6/0x5a0
[  122.477964][ T6513]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  122.483562][ T6513]  ? __fget_files+0x2a/0x410
[  122.488175][ T6513]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  122.493745][ T6513]  __se_sys_ioctl+0xf5/0x170
[  122.498362][ T6513]  do_syscall_64+0xf3/0x230
[  122.502888][ T6513]  ? clear_bhb_loop+0x35/0x90
[  122.507567][ T6513]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.513466][ T6513] RIP: 0033:0x7fe118b85d29
[  122.517891][ T6513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  122.537506][ T6513] RSP: 002b:00007fe1199a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  122.545933][ T6513] RAX: ffffffffffffffda RBX: 00007fe118d75fa0 RCX: 00007fe118b85d29
[  122.553914][ T6513] RDX: 0000000020000300 RSI: 0000000000003ba0 RDI: 0000000000000003
[  122.561889][ T6513] RBP: 00007fe1199a1090 R08: 0000000000000000 R09: 0000000000000000
[  122.569863][ T6513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  122.577840][ T6513] R13: 0000000000000000 R14: 00007fe118d75fa0 R15: 00007ffd82df41d8
[  122.585831][ T6513]  </TASK>
[  124.136330][ T5867] usb 1-1: new low-speed USB device number 8 using dummy_hcd
[  124.307534][ T5867] usb 1-1: too many configurations: 14, using maximum allowed: 8
[  124.334295][ T5867] usb 1-1: unable to read config index 0 descriptor/start: -61
[  124.342022][ T5867] usb 1-1: can't read configurations, error -61
[  124.381886][ T6561] FAULT_INJECTION: forcing a failure.
[  124.381886][ T6561] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  124.475590][ T5867] usb 1-1: new low-speed USB device number 9 using dummy_hcd
[  124.491578][ T6561] CPU: 0 UID: 0 PID: 6561 Comm: syz.4.175 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0
[  124.502203][ T6561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  124.512261][ T6561] Call Trace:
[  124.515575][ T6561]  <TASK>
[  124.518517][ T6561]  dump_stack_lvl+0x241/0x360
[  124.523212][ T6561]  ? __pfx_dump_stack_lvl+0x10/0x10
[  124.528421][ T6561]  ? __pfx__printk+0x10/0x10
[  124.533119][ T6561]  ? __pfx_lock_release+0x10/0x10
[  124.538168][ T6561]  should_fail_ex+0x3b0/0x4e0
[  124.542853][ T6561]  _copy_from_user+0x2f/0xc0
[  124.547458][ T6561]  do_semtimedop+0x1ca/0x2c0
[  124.552062][ T6561]  ? __pfx_do_semtimedop+0x10/0x10
[  124.557200][ T6561]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  124.563531][ T6561]  ? do_syscall_64+0x100/0x230
[  124.568313][ T6561]  ? do_syscall_64+0xb6/0x230
[  124.573007][ T6561]  do_syscall_64+0xf3/0x230
[  124.577516][ T6561]  ? clear_bhb_loop+0x35/0x90
[  124.582192][ T6561]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  124.588096][ T6561] RIP: 0033:0x7fe118b85d29
[  124.592518][ T6561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  124.612125][ T6561] RSP: 002b:00007fe1199a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000041
[  124.620542][ T6561] RAX: ffffffffffffffda RBX: 00007fe118d75fa0 RCX: 00007fe118b85d29
[  124.628529][ T6561] RDX: 0000000000000002 RSI: 0000000020000180 RDI: 0000000000000000
[  124.636507][ T6561] RBP: 00007fe1199a1090 R08: 0000000000000000 R09: 0000000000000000
[  124.644477][ T6561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  124.652449][ T6561] R13: 0000000000000000 R14: 00007fe118d75fa0 R15: 00007ffd82df41d8
[  124.660436][ T6561]  </TASK>
[  124.663600][    C0] vkms_vblank_simulate: vblank timer overrun
[  124.800737][ T5867] usb 1-1: too many configurations: 14, using maximum allowed: 8
[  124.915679][ T5867] usb 1-1: unable to read config index 0 descriptor/start: -61
[  125.085390][ T5867] usb 1-1: can't read configurations, error -61
[  125.122732][ T5867] usb usb1-port1: attempt power cycle
[  125.126325][ T6575] fuse: Bad value for 'fd'
[  126.146335][ T5867] usb 1-1: new low-speed USB device number 10 using dummy_hcd
[  126.198471][ T5867] usb 1-1: too many configurations: 14, using maximum allowed: 8
[  126.226827][ T5867] usb 1-1: unable to read config index 0 descriptor/start: -61
[  126.235038][ T5867] usb 1-1: can't read configurations, error -61
[  126.378434][ T5867] usb 1-1: new low-speed USB device number 11 using dummy_hcd
[  126.411448][ T5867] usb 1-1: too many configurations: 14, using maximum allowed: 8
[  126.423748][ T5867] usb 1-1: unable to read config index 0 descriptor/start: -61
[  126.436883][ T5867] usb 1-1: can't read configurations, error -61
[  126.443715][ T5867] usb usb1-port1: unable to enumerate USB device
[  126.555550][ T5871] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  126.596377][  T974] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  126.915743][  T974] usb 5-1: Using ep0 maxpacket: 8
[  127.307106][  T974] usb 5-1: no configurations
[  127.324656][  T974] usb 5-1: can't read configurations, error -22
[  127.415863][ T5871] usb 4-1: Using ep0 maxpacket: 16
[  127.434702][ T5871] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  127.456623][ T5871] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  127.475940][ T5871] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  127.503456][ T5871] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  127.505832][  T974] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  127.513847][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.530873][ T5871] usb 4-1: Product: syz
[  127.535836][ T5871] usb 4-1: Manufacturer: syz
[  127.555424][ T5871] usb 4-1: SerialNumber: syz
[  127.685631][  T974] usb 5-1: Using ep0 maxpacket: 8
[  127.695633][  T974] usb 5-1: no configurations
[  127.705863][  T974] usb 5-1: can't read configurations, error -22
[  127.741487][  T974] usb usb5-port1: attempt power cycle
[  127.840739][ T6615] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  127.841307][ T6620] fuse: Bad value for 'fd'
[  127.879129][ T6615] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  127.893031][ T6620] netfs: Couldn't get user pages (rc=-14)
[  128.146064][  T974] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  128.146581][ T5871] usb 4-1: 0:2 : does not exist
[  128.189586][  T974] usb 5-1: Using ep0 maxpacket: 8
[  128.195595][  T974] usb 5-1: no configurations
[  128.208876][  T974] usb 5-1: can't read configurations, error -22
[  128.346767][  T974] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  128.396027][  T974] usb 5-1: Using ep0 maxpacket: 8
[  128.402198][  T974] usb 5-1: no configurations
[  128.418785][  T974] usb 5-1: can't read configurations, error -22
[  128.434465][ T5871] usb 4-1: 1:0: failed to get current value for ch 0 (-22)
[  128.437802][  T974] usb usb5-port1: unable to enumerate USB device
[  128.616775][ T5871] usb 4-1: USB disconnect, device number 7
[  128.646527][ T5867] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  128.805451][ T5867] usb 3-1: Using ep0 maxpacket: 8
[  128.812127][ T5867] usb 3-1: config 0 has an invalid interface number: 155 but max is 1
[  128.820991][ T5867] usb 3-1: config 0 has an invalid interface number: 245 but max is 1
[  128.820997][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  128.821018][ T5867] usb 3-1: config 0 has no interface number 0
[  129.070430][ T5867] usb 3-1: config 0 has no interface number 1
[  129.076658][ T5867] usb 3-1: config 0 interface 155 has no altsetting 0
[  129.083455][ T5867] usb 3-1: config 0 interface 245 has no altsetting 0
[  129.090321][ T5867] usb 3-1: New USB device found, idVendor=04c8, idProduct=0720, bcdDevice=b8.b6
[  129.099507][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.112254][ T5867] usb 3-1: config 0 descriptor??
[  129.155501][  T974] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  129.295451][  T974] usb 2-1: device descriptor read/64, error -71
[  129.445421][   T25] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  129.486275][ T5867] usb 3-1: string descriptor 0 read error: -71
[  129.509927][ T5867] usb 3-1: USB disconnect, device number 10
[  129.708357][  T974] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  129.736974][   T25] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  129.747281][   T25] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  129.757349][   T25] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  129.766448][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  130.058817][  T974] usb 2-1: device descriptor read/64, error -71
[  130.530300][  T974] usb usb2-port1: attempt power cycle
[  130.585520][   T25] usb 4-1: SerialNumber: syz
[  130.772113][ T6664] FAULT_INJECTION: forcing a failure.
[  130.772113][ T6664] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  130.785967][ T6664] CPU: 1 UID: 0 PID: 6664 Comm: syz.2.203 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0
[  130.791228][ T6661] netfs: Couldn't get user pages (rc=-14)
[  130.796571][ T6664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  130.796603][ T6664] Call Trace:
[  130.796611][ T6664]  <TASK>
[  130.796620][ T6664]  dump_stack_lvl+0x241/0x360
[  130.796653][ T6664]  ? __pfx_dump_stack_lvl+0x10/0x10
[  130.796679][ T6664]  ? __pfx__printk+0x10/0x10
[  130.796709][ T6664]  ? snprintf+0xda/0x120
[  130.796735][ T6664]  should_fail_ex+0x3b0/0x4e0
[  130.796767][ T6664]  _copy_to_user+0x31/0xb0
[  130.796799][ T6664]  simple_read_from_buffer+0xca/0x150
[  130.796832][ T6664]  proc_fail_nth_read+0x1e9/0x250
[  130.796863][ T6664]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  130.796894][ T6664]  ? rw_verify_area+0x55e/0x6f0
[  130.796916][ T6664]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  130.796946][ T6664]  vfs_read+0x1fc/0xb70
[  130.796975][ T6664]  ? __pfx___mutex_lock+0x10/0x10
[  130.882169][ T6664]  ? __pfx_vfs_read+0x10/0x10
[  130.886863][ T6664]  ? __fget_files+0x2a/0x410
[  130.891473][ T6664]  ? __fget_files+0x395/0x410
[  130.896153][ T6664]  ? __fget_files+0x2a/0x410
[  130.900748][ T6664]  ksys_read+0x18f/0x2b0
[  130.904997][ T6664]  ? __pfx_ksys_read+0x10/0x10
[  130.909767][ T6664]  ? do_syscall_64+0x100/0x230
[  130.914540][ T6664]  ? do_syscall_64+0xb6/0x230
[  130.919246][ T6664]  do_syscall_64+0xf3/0x230
[  130.923782][ T6664]  ? clear_bhb_loop+0x35/0x90
[  130.928470][ T6664]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.934376][ T6664] RIP: 0033:0x7f928238473c
[  130.938795][ T6664] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  130.958412][ T6664] RSP: 002b:00007f9283238030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  130.966836][ T6664] RAX: ffffffffffffffda RBX: 00007f9282575fa0 RCX: 00007f928238473c
[  130.974806][ T6664] RDX: 000000000000000f RSI: 00007f92832380a0 RDI: 0000000000000005
[  130.982774][ T6664] RBP: 00007f9283238090 R08: 0000000000000000 R09: 0000000000000000
[  130.990741][ T6664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  130.998728][ T6664] R13: 0000000000000000 R14: 00007f9282575fa0 R15: 00007ffecc105498
[  131.006734][ T6664]  </TASK>
[  131.009775][    C1] vkms_vblank_simulate: vblank timer overrun
[  131.075479][  T974] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  131.108693][  T974] usb 2-1: device descriptor read/8, error -71
[  131.355466][  T974] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  131.376495][  T974] usb 2-1: device descriptor read/8, error -71
[  131.485933][  T974] usb usb2-port1: unable to enumerate USB device
[  132.653166][ T6685] fuse: Bad value for 'rootmode'
[  132.802030][   T25] usb 4-1: 0:2 : does not exist
[  132.807180][   T25] usb 4-1: unit 255 not found!
[  132.917012][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  132.923339][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  133.036939][   T25] usb 4-1: USB disconnect, device number 8
[  133.041905][ T5898] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  133.756264][ T6697] process 'syz.1.214' launched '/dev/fd/5' with NULL argv: empty string added
[  133.776050][ T5831] udevd[5831]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  133.863880][ T6699] netfs: Couldn't get user pages (rc=-14)
[  133.958993][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.975396][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.025404][ T5898] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  134.034480][ T5898] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.058757][ T5898] usb 3-1: config 0 descriptor??
[  134.363086][ T5898] usbhid 3-1:0.0: can't add hid device: -71
[  134.369510][ T5898] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  134.397605][ T5898] usb 3-1: USB disconnect, device number 11
[  134.511718][ T6717] netlink: 92 bytes leftover after parsing attributes in process `syz.4.219'.
[  135.353797][ T6713] delete_channel: no stack
[  136.356837][ T5867] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  137.386872][  T974] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  137.393366][ T6732] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  137.521543][   T29] kauditd_printk_skb: 3 callbacks suppressed
[  137.521574][   T29] audit: type=1800 audit(1737046017.485:68): pid=6724 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.224" name="/" dev="9p" ino=2 res=0 errno=0
[  137.533838][ T6732] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  137.582459][  T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.660282][  T974] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.876288][  T974] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  137.912347][  T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.475441][ T5867] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  138.609286][  T974] usb 1-1: config 0 descriptor??
[  138.693116][ T5867] usb 2-1: Using ep0 maxpacket: 8
[  138.716319][ T6746] =======================================================
[  138.716319][ T6746] WARNING: The mand mount option has been deprecated and
[  138.716319][ T6746]          and is ignored by this kernel. Remove the mand
[  138.716319][ T6746]          option from the mount to silence this warning.
[  138.716319][ T6746] =======================================================
[  138.812366][ T5867] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  138.841222][ T5867] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  138.894787][ T5867] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  138.932527][ T5867] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  138.995754][ T5867] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  139.026202][  T974] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor
[  139.044916][ T5867] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  139.049611][  T974] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0003/input/input11
[  139.070182][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.498380][ T5867] usb 2-1: usb_control_msg returned -32
[  139.714157][  T974] keytouch 0003:0926:3333.0003: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  139.729594][ T5867] usbtmc 2-1:16.0: can't read capabilities
[  140.225142][ T6770] usbtmc 2-1:16.0: INITIATE_ABORT_BULK_OUT returned 0
[  140.335971][   T25] usb 1-1: reset high-speed USB device number 12 using dummy_hcd
[  140.460807][ T5900] usb 2-1: USB disconnect, device number 15
[  140.737728][ T6792] FAULT_INJECTION: forcing a failure.
[  140.737728][ T6792] name failslab, interval 1, probability 0, space 0, times 0
[  140.760116][ T6792] CPU: 1 UID: 0 PID: 6792 Comm: syz.4.240 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0
[  140.770743][ T6792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  140.780806][ T6792] Call Trace:
[  140.784091][ T6792]  <TASK>
[  140.787029][ T6792]  dump_stack_lvl+0x241/0x360
[  140.791722][ T6792]  ? __pfx_dump_stack_lvl+0x10/0x10
[  140.796921][ T6792]  ? __pfx__printk+0x10/0x10
[  140.801511][ T6792]  ? kmem_cache_alloc_noprof+0x48/0x380
[  140.807063][ T6792]  ? __pfx___might_resched+0x10/0x10
[  140.812356][ T6792]  should_fail_ex+0x3b0/0x4e0
[  140.817033][ T6792]  should_failslab+0xac/0x100
[  140.821716][ T6792]  ? mas_alloc_nodes+0x25b/0x7e0
[  140.826657][ T6792]  kmem_cache_alloc_noprof+0x70/0x380
[  140.832040][ T6792]  mas_alloc_nodes+0x25b/0x7e0
[  140.836818][ T6792]  mas_preallocate+0x575/0x8d0
[  140.841587][ T6792]  ? __pfx_mas_preallocate+0x10/0x10
[  140.846881][ T6792]  ? __mas_set_range+0x133/0x3c0
[  140.851823][ T6792]  __split_vma+0x302/0xc50
[  140.856241][ T6792]  ? ima_match_policy+0x111/0x2230
[  140.861353][ T6792]  ? __pfx___split_vma+0x10/0x10
[  140.866293][ T6792]  ? __pfx_validate_chain+0x10/0x10
[  140.871494][ T6792]  ? __pfx_up_write+0x10/0x10
[  140.876171][ T6792]  ? ima_get_action+0x75/0xb0
[  140.880850][ T6792]  vms_gather_munmap_vmas+0x2e6/0x1600
[  140.886328][ T6792]  ? mtree_range_walk+0x6fd/0x8e0
[  140.891359][ T6792]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  140.897264][ T6792]  ? mas_find+0x8c0/0xbb0
[  140.901600][ T6792]  __mmap_region+0x7c4/0x2d30
[  140.906284][ T6792]  ? validate_chain+0x11e/0x5920
[  140.911241][ T6792]  ? __pfx_lock_release+0x10/0x10
[  140.916275][ T6792]  ? __pfx___mmap_region+0x10/0x10
[  140.921386][ T6792]  ? __lock_acquire+0x1397/0x2100
[  140.926434][ T6792]  ? __pfx_validate_chain+0x10/0x10
[  140.931643][ T6792]  ? mark_lock+0x9a/0x360
[  140.936007][ T6792]  ? arch_get_unmapped_area_topdown+0x28e/0xc50
[  140.942256][ T6792]  ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10
[  140.948852][ T6792]  ? cap_mmap_addr+0x163/0x2c0
[  140.953655][ T6792]  mmap_region+0x1d0/0x2c0
[  140.958079][ T6792]  ? security_mmap_addr+0x6f/0x250
[  140.963207][ T6792]  do_mmap+0x97a/0x10d0
[  140.967376][ T6792]  ? __pfx_do_mmap+0x10/0x10
[  140.971967][ T6792]  ? __pfx_down_write_killable+0x10/0x10
[  140.977626][ T6792]  ? __pfx_lock_acquire+0x10/0x10
[  140.982720][ T6792]  vm_mmap_pgoff+0x1dd/0x3d0
[  140.987324][ T6792]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  140.992439][ T6792]  ? __fget_files+0x2a/0x410
[  140.997035][ T6792]  ? __fget_files+0x395/0x410
[  141.001727][ T6792]  ? __fget_files+0x2a/0x410
[  141.006338][ T6792]  ksys_mmap_pgoff+0x4eb/0x720
[  141.011110][ T6792]  ? __x64_sys_mmap+0x7f/0x140
[  141.015888][ T6792]  do_syscall_64+0xf3/0x230
[  141.020400][ T6792]  ? clear_bhb_loop+0x35/0x90
[  141.025082][ T6792]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.030983][ T6792] RIP: 0033:0x7fe118b85d29
[  141.035406][ T6792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  141.055021][ T6792] RSP: 002b:00007fe1199a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  141.063464][ T6792] RAX: ffffffffffffffda RBX: 00007fe118d75fa0 RCX: 00007fe118b85d29
[  141.071440][ T6792] RDX: 0000000002000002 RSI: 0000000000002000 RDI: 0000000020ffd000
[  141.079413][ T6792] RBP: 00007fe1199a1090 R08: 0000000000000008 R09: 0000000000000000
[  141.087383][ T6792] R10: 0000000000008012 R11: 0000000000000246 R12: 0000000000000001
[  141.095358][ T6792] R13: 0000000000000000 R14: 00007fe118d75fa0 R15: 00007ffd82df41d8
[  141.103347][ T6792]  </TASK>
[  142.036667][  T974] usb 1-1: USB disconnect, device number 12
[  142.086859][ T6816] mmap: syz.2.249 (6816): VmData 37597184 exceed data ulimit 7. Update limits or use boot option ignore_rlimit_data.
[  142.205555][ T5898] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  142.365564][ T5898] usb 2-1: Using ep0 maxpacket: 16
[  142.376272][ T5898] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  142.387337][ T5898] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  142.411541][ T5898] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  142.428666][ T5898] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  142.444410][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.454141][ T5898] usb 2-1: Product: syz
[  142.463478][ T5898] usb 2-1: Manufacturer: syz
[  142.474369][ T5898] usb 2-1: SerialNumber: syz
[  143.235670][ T5898] usb 2-1: 2:1 : format type 0 is detected, processed as PCM
[  143.309417][ T6832] ntfs3(nullb0): Primary boot signature is not NTFS.
[  143.386054][ T6832] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  143.625466][ T5869] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  143.795464][ T5869] usb 5-1: Using ep0 maxpacket: 8
[  144.663437][ T6851] syz.3.257 (6851) used greatest stack depth: 17200 bytes left
[  144.809545][ T5898] usb 2-1: 2:1: cannot get freq at ep 0x82
[  144.831675][ T5869] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00
[  144.840891][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.852359][ T5869] usb 5-1: config 0 descriptor??
[  145.205227][ T5898] usb 2-1: USB disconnect, device number 16
[  145.501705][ T5869] usbhid 5-1:0.0: can't add hid device: -71
[  145.508007][ T5869] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  145.517504][ T5869] usb 5-1: USB disconnect, device number 11
[  145.682928][ T6028] udevd[6028]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  145.885493][ T5899] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  145.977590][ T6863] ptm ptm35: ldisc open failed (-12), clearing slot 35
[  146.037425][ T5899] usb 1-1: config 0 has an invalid interface number: 2 but max is 0
[  146.053848][ T5899] usb 1-1: config 0 has no interface number 0
[  146.061056][ T5899] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.080138][ T5899] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.090150][   T25] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  146.107568][ T5899] usb 1-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00
[  146.117192][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.143011][ T5899] usb 1-1: config 0 descriptor??
[  146.255950][   T25] usb 4-1: Using ep0 maxpacket: 32
[  146.305244][   T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  146.660919][   T25] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  146.679280][   T25] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  146.688260][   T25] usb 4-1: Product: syz
[  146.692571][   T25] usb 4-1: Manufacturer: syz
[  146.707494][   T25] usb 4-1: SerialNumber: syz
[  146.754607][   T25] usb 4-1: config 0 descriptor??
[  146.794799][ T6861] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  146.886772][ T5899] usbhid 1-1:0.2: can't add hid device: -71
[  146.896396][ T5899] usbhid 1-1:0.2: probe with driver usbhid failed with error -71
[  146.920347][ T5899] usb 1-1: USB disconnect, device number 13
[  147.441274][ T6878] binder: BINDER_SET_CONTEXT_MGR already set
[  147.447719][ T6878] binder: 6877:6878 ioctl 4018620d 20004a80 returned -16
[  149.446624][ T5899] usb 4-1: USB disconnect, device number 9
[  149.550530][ T6894] openvswitch: netlink: Message has 1247 unknown bytes.
[  149.582411][ T6894] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  150.316191][ T5900] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  150.616228][ T5900] usb 3-1: Using ep0 maxpacket: 8
[  150.624760][ T5900] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00
[  150.654305][ T5900] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.698776][ T5900] usb 3-1: config 0 descriptor??
[  150.765486][ T6906] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6)
[  150.772045][ T6906] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  150.823756][ T6906] vhci_hcd vhci_hcd.0: Device attached
[  150.915432][  T974] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  150.950248][ T5900] usbhid 3-1:0.0: can't add hid device: -71
[  150.960353][ T5900] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  150.975721][ T5900] usb 3-1: USB disconnect, device number 12
[  150.995706][ T6911] vhci_hcd: connection closed
[  151.014655][  T737] vhci_hcd: stop threads
[  151.023794][  T737] vhci_hcd: release socket
[  151.028584][  T737] vhci_hcd: disconnect device
[  151.066232][ T5871] vhci_hcd: vhci_device speed not set
[  151.092043][  T974] usb 4-1: Using ep0 maxpacket: 16
[  151.156771][  T974] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  151.185215][  T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  151.213127][ T5899] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  151.324513][  T974] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  151.354782][  T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.388062][  T974] usb 4-1: Product: syz
[  151.392258][  T974] usb 4-1: Manufacturer: syz
[  151.419024][  T974] usb 4-1: SerialNumber: syz
[  151.439487][  T974] usb 4-1: config 0 descriptor??
[  151.462277][ T5899] usb 5-1: Using ep0 maxpacket: 8
[  151.560595][  T974] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  151.605175][ T5899] usb 5-1: too many configurations: 253, using maximum allowed: 8
[  151.679050][  T974] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  151.766674][ T6927] netfs: Couldn't get user pages (rc=-14)
[  151.837501][ T5899] usb 5-1: unable to read config index 0 descriptor/start: -61
[  151.845117][ T5899] usb 5-1: can't read configurations, error -61
[  152.470586][ T5899] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  153.618129][  T974] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  153.713616][ T5899] usb 5-1: Using ep0 maxpacket: 8
[  153.763096][ T5899] usb 5-1: too many configurations: 253, using maximum allowed: 8
[  155.081787][  T974] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  155.171992][ T5899] usb 5-1: unable to read config index 0 descriptor/start: -71
[  155.187858][  T974] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[  155.194842][  T974] em28xx 4-1:0.0: No AC97 audio processor
[  156.175653][ T5899] usb 5-1: can't read configurations, error -71
[  156.514954][ T5899] usb usb5-port1: attempt power cycle
[  157.199930][  T974] usb 4-1: USB disconnect, device number 10
[  157.214230][  T974] em28xx 4-1:0.0: Disconnecting em28xx
[  157.297552][  T974] em28xx 4-1:0.0: Freeing device
[  158.195537][ T5869] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  158.540402][ T5869] usb 1-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice=cc.10
[  158.564499][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.606903][ T5869] usb 1-1: Product: syz
[  158.628874][ T5869] usb 1-1: Manufacturer: syz
[  159.013643][ T5869] usb 1-1: SerialNumber: syz
[  159.020787][ T5869] usb 1-1: config 0 descriptor??
[  159.057752][ T5869] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12
[  159.342167][ T6972] x_tables: duplicate underflow at hook 3
[  159.348692][ T5826] Bluetooth: hci3: adv larger than maximum supported
[  159.348750][ T5826] Bluetooth: hci3: Malformed LE Event: 0x0d
[  159.917634][ T6981] netlink: 36 bytes leftover after parsing attributes in process `syz.3.294'.
[  160.163306][ T6985] fuse: Unknown parameter 'use00000000000000000000'
[  160.217187][ T6985] netfs: Couldn't get user pages (rc=-14)
[  160.660714][ T5826] Bluetooth: hci1: unknown advertising packet type: 0xaa
[  160.660765][ T5826] Bluetooth: hci1: unknown advertising packet type: 0x81
[  160.675416][ T5826] Bluetooth: hci1: Dropping invalid advertising data
[  160.689700][ T5826] Bluetooth: hci1: Malformed LE Event: 0x02
[  160.833031][ T5178] bcm5974 1-1:0.0: could not read from device
[  160.851449][ T5869] usb 1-1: USB disconnect, device number 14
[  161.367169][ T5869] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  161.579589][ T5869] usb 1-1: Using ep0 maxpacket: 32
[  161.628825][ T5869] usb 1-1: unable to get BOS descriptor or descriptor too short
[  161.667662][ T5869] usb 1-1: config 7 has an invalid interface number: 128 but max is 0
[  161.709967][ T5869] usb 1-1: config 7 contains an unexpected descriptor of type 0x1, skipping
[  161.742105][ T5869] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  161.779488][ T5869] usb 1-1: config 7 has no interface number 0
[  161.805115][ T5869] usb 1-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0x17, changing to 0x7
[  161.843556][ T5869] usb 1-1: config 7 interface 128 altsetting 2 bulk endpoint 0x7 has invalid maxpacket 32
[  161.879096][ T5869] usb 1-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11
[  161.929732][ T5869] usb 1-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  161.971481][ T5869] usb 1-1: config 7 interface 128 has no altsetting 0
[  162.003341][ T6987] syz.2.298 (6987): drop_caches: 2
[  162.022175][ T5869] usb 1-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13
[  162.045235][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.069747][ T5869] usb 1-1: Product: syz
[  162.084144][ T5869] usb 1-1: Manufacturer: syz
[  162.101018][ T5869] usb 1-1: SerialNumber: syz
[  162.118972][ T6991] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  162.643783][ T5869] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  162.663452][ T5869] usb 1-1: MIDIStreaming interface descriptor not found
[  162.748646][ T5869] usb 1-1: USB disconnect, device number 15
[  162.765518][ T5817] udevd[5817]: Error opening device "/dev/input/event4": No such file or directory
[  162.801950][ T5817] udevd[5817]: Unable to EVIOCGABS device "/dev/input/event4"
[  162.849445][ T5817] udevd[5817]: Unable to EVIOCGABS device "/dev/input/event4"
[  162.880489][ T5817] udevd[5817]: Unable to EVIOCGABS device "/dev/input/event4"
[  162.894305][ T5817] udevd[5817]: Unable to EVIOCGABS device "/dev/input/event4"
[  163.066178][ T6027] udevd[6027]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  169.083755][    C1] sched: DL replenish lagged too much
[  171.158711][ T7031] input: syz1 as /devices/virtual/input/input13
[  175.055713][ T7032] netlink: 'syz.4.309': attribute type 1 has an invalid length.
[  175.430915][ T7038] Bluetooth: MGMT ver 1.23
[  175.796820][ T7043] netfs: Couldn't get user pages (rc=-14)
[  175.993565][ T7048] smk_cipso_doi:706 cipso add rc = -17
[  176.063445][   T29] audit: type=1326 audit(1737046056.035:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7047 comm="syz.1.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09a985d29 code=0x7ffc0000
[  176.144634][   T29] audit: type=1326 audit(1737046056.035:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7047 comm="syz.1.315" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe09a985d29 code=0x7ffc0000
[  176.637186][ T7056] fuse: Unknown parameter '0x0000000000000006'
[  176.673678][ T7060] netlink: 36 bytes leftover after parsing attributes in process `syz.0.317'.
[  176.718266][ T7056] netfs: Couldn't get user pages (rc=-14)
[  181.229083][ T7070] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  181.738324][ T7070] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  182.399739][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  182.412976][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  182.421452][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  182.429816][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  182.438802][ T5836] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  182.471550][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  184.585766][ T5836] Bluetooth: hci1: command tx timeout
[  184.751192][ T7100] netfs: Couldn't get user pages (rc=-14)
[  185.856916][ T7109] netlink: 36 bytes leftover after parsing attributes in process `syz.4.334'.
[  186.665519][ T5836] Bluetooth: hci1: command tx timeout
[  188.747351][ T5836] Bluetooth: hci1: command tx timeout
[  190.825664][ T5836] Bluetooth: hci1: command tx timeout
[  194.352974][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  194.359462][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  196.449173][ T5836] Bluetooth: hci0: command 0x0406 tx timeout
[  196.455379][ T5830] Bluetooth: hci4: command 0x0406 tx timeout
[  196.461426][ T5830] Bluetooth: hci2: command 0x0406 tx timeout
[  196.467655][ T5827] Bluetooth: hci3: command 0x0406 tx timeout
[  198.100874][ T5826] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  198.109913][ T5826] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  198.118337][ T5826] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  198.132510][ T5826] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  198.152164][ T5826] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  198.159812][ T5826] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  200.149629][ T5823] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  200.158699][ T5823] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  200.167092][ T5823] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  200.177427][ T5823] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  200.185164][ T5823] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  200.192412][ T5823] Bluetooth: hci5: command tx timeout
[  200.199338][ T5823] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  201.248954][ T5823] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  201.263145][ T5823] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  201.283421][ T5823] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  201.292165][ T5823] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  201.309493][ T5823] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  201.319802][ T5823] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  202.265593][ T5823] Bluetooth: hci6: command tx timeout
[  202.272242][ T5823] Bluetooth: hci5: command tx timeout
[  202.327150][ T5826] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  202.336475][ T5826] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  202.344282][ T5826] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  202.353189][ T5826] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  202.363422][ T5826] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  202.370902][ T5826] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  203.385463][ T5826] Bluetooth: hci7: command tx timeout
[  204.345593][ T5823] Bluetooth: hci6: command tx timeout
[  204.352552][ T5826] Bluetooth: hci5: command tx timeout
[  204.430655][ T5826] Bluetooth: hci8: command tx timeout
[  205.470838][ T5826] Bluetooth: hci7: command tx timeout
[  206.425987][ T5826] Bluetooth: hci5: command tx timeout
[  206.431466][ T5826] Bluetooth: hci6: command tx timeout
[  206.505643][ T5826] Bluetooth: hci8: command tx timeout
[  207.550583][ T5826] Bluetooth: hci7: command tx timeout
[  208.506768][ T5826] Bluetooth: hci6: command tx timeout
[  208.585578][ T5826] Bluetooth: hci8: command tx timeout
[  209.635409][ T5826] Bluetooth: hci7: command tx timeout
[  210.665582][ T5826] Bluetooth: hci8: command tx timeout
[  241.473954][ T5823] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  241.485528][ T5823] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  241.494343][ T5823] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  241.502487][ T5823] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  241.512308][ T5823] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  241.520912][ T5823] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  243.545497][ T5823] Bluetooth: hci9: command tx timeout
[  245.625467][ T5823] Bluetooth: hci9: command tx timeout
[  247.705621][ T5823] Bluetooth: hci9: command tx timeout
[  249.785561][ T5823] Bluetooth: hci9: command tx timeout
[  255.794524][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  255.800921][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  258.754140][ T5826] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  258.765587][ T5826] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  258.774555][ T5826] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  258.784490][ T5826] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  258.796963][ T5826] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  258.809446][ T5826] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  260.570459][ T5823] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  260.584897][ T5823] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  260.593340][ T5823] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  260.603433][ T5823] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  260.611294][ T5823] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  260.618827][ T5823] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  260.905671][ T5826] Bluetooth: hci10: command tx timeout
[  261.617051][ T5826] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1
[  261.628274][ T5826] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9
[  261.636208][ T5826] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9
[  261.645610][ T5826] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4
[  261.653630][ T5826] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3
[  261.661373][ T5826] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2
[  262.665593][ T5826] Bluetooth: hci11: command tx timeout
[  262.713192][ T5823] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1
[  262.724256][ T5823] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9
[  262.732877][ T5823] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9
[  262.741025][ T5823] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4
[  262.749176][ T5823] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3
[  262.765572][ T5823] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2
[  262.985504][ T5826] Bluetooth: hci10: command tx timeout
[  263.705453][ T5826] Bluetooth: hci12: command tx timeout
[  264.745532][ T5826] Bluetooth: hci11: command tx timeout
[  264.825546][ T5823] Bluetooth: hci13: command tx timeout
[  265.065619][ T5823] Bluetooth: hci10: command tx timeout
[  265.785429][ T5823] Bluetooth: hci12: command tx timeout
[  266.825517][ T5823] Bluetooth: hci11: command tx timeout
[  266.905543][ T5823] Bluetooth: hci13: command tx timeout
[  267.145485][ T5823] Bluetooth: hci10: command tx timeout
[  267.865422][ T5823] Bluetooth: hci12: command tx timeout
[  268.905487][ T5823] Bluetooth: hci11: command tx timeout
[  268.985694][ T5823] Bluetooth: hci13: command tx timeout
[  269.964777][ T5823] Bluetooth: hci12: command tx timeout
[  271.065711][ T5823] Bluetooth: hci13: command tx timeout
[  302.965433][ T5826] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1
[  302.976637][ T5826] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9
[  302.985627][ T5826] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9
[  303.001383][ T5826] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4
[  303.010392][ T5826] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3
[  303.019152][ T5826] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2
[  305.065567][ T5826] Bluetooth: hci14: command tx timeout
[  307.145438][ T5826] Bluetooth: hci14: command tx timeout
[  309.070372][ T5826] Bluetooth: hci1: command 0x0406 tx timeout
[  309.225489][ T5826] Bluetooth: hci14: command tx timeout
[  311.305479][ T5826] Bluetooth: hci14: command tx timeout
[  317.232336][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  317.243796][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  319.514561][   T54] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1
[  319.530888][   T54] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9
[  319.539511][   T54] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9
[  319.558130][   T54] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4
[  319.566334][   T54] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3
[  319.573858][   T54] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2
[  321.625647][   T54] Bluetooth: hci15: command tx timeout
[  321.828451][ T5826] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1
[  321.843083][ T5826] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9
[  321.851552][ T5826] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9
[  321.860016][ T5826] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4
[  321.874434][ T5826] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3
[  321.885692][ T5826] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2
[  322.135805][   T54] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1
[  322.150335][   T54] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9
[  322.159412][   T54] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9
[  322.167961][   T54] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4
[  322.182223][   T54] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3
[  322.190223][   T54] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2
[  322.923069][ T5826] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1
[  322.932285][ T5826] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9
[  322.940536][ T5826] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9
[  322.950160][ T5826] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4
[  322.958132][ T5826] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3
[  322.970425][ T5826] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2
[  323.705559][ T5826] Bluetooth: hci15: command tx timeout
[  323.945652][ T5826] Bluetooth: hci16: command tx timeout
[  324.265880][ T5826] Bluetooth: hci17: command tx timeout
[  324.444495][ T5826] Bluetooth: hci7: command 0x0406 tx timeout
[  324.450691][   T54] Bluetooth: hci6: command 0x0406 tx timeout
[  324.456846][   T54] Bluetooth: hci5: command 0x0406 tx timeout
[  325.070783][ T5826] Bluetooth: hci18: command tx timeout
[  325.785582][ T5826] Bluetooth: hci15: command tx timeout
[  326.032114][ T5826] Bluetooth: hci16: command tx timeout
[  326.345393][ T5826] Bluetooth: hci17: command tx timeout
[  327.150968][ T5826] Bluetooth: hci18: command tx timeout
[  327.865653][ T5827] Bluetooth: hci15: command tx timeout
[  328.105625][ T5827] Bluetooth: hci16: command tx timeout
[  328.427266][ T5827] Bluetooth: hci17: command tx timeout
[  329.225446][ T5827] Bluetooth: hci18: command tx timeout
[  329.551075][ T5827] Bluetooth: hci8: command 0x0406 tx timeout
[  330.185607][ T5827] Bluetooth: hci16: command tx timeout
[  330.505501][ T5827] Bluetooth: hci17: command tx timeout
[  331.305550][ T5827] Bluetooth: hci18: command tx timeout
[  333.239089][   T30] INFO: task jbd2/sda1-8:5155 blocked for more than 143 seconds.
[  333.249485][   T30]       Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0
[  333.278442][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  333.315522][   T30] task:jbd2/sda1-8     state:D stack:24080 pid:5155  tgid:5155  ppid:2      flags:0x00004000
[  333.364782][   T30] Call Trace:
[  333.375037][   T30]  <TASK>
[  333.387731][   T30]  __schedule+0x17fb/0x4be0
[  333.392309][   T30]  ? __pfx___schedule+0x10/0x10
[  333.491065][   T30]  ? __pfx_lock_release+0x10/0x10
[  333.533496][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  333.589025][   T30]  ? schedule+0x90/0x320
[  333.593353][   T30]  schedule+0x14b/0x320
[  333.620417][   T30]  io_schedule+0x8d/0x110
[  333.624827][   T30]  bit_wait_io+0x12/0xd0
[  333.642612][   T30]  __wait_on_bit+0xb0/0x2f0
[  333.653303][   T30]  ? __pfx_bit_wait_io+0x10/0x10
[  333.658612][   T30]  out_of_line_wait_on_bit+0x1d5/0x260
[  333.664127][   T30]  ? __pfx_bit_wait_io+0x10/0x10
[  333.676576][   T30]  ? __pfx_out_of_line_wait_on_bit+0x10/0x10
[  333.682609][   T30]  ? __pfx_wake_bit_function+0x10/0x10
[  333.694221][   T30]  jbd2_journal_commit_transaction+0x3d09/0x6560
[  333.701057][   T30]  ? __pfx_jbd2_journal_commit_transaction+0x10/0x10
[  333.713510][   T30]  ? lockdep_hardirqs_on+0x99/0x150
[  333.722517][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  333.737179][   T30]  ? __try_to_del_timer_sync+0x2ad/0x340
[  333.742894][   T30]  ? __pfx___timer_delete_sync+0x10/0x10
[  333.754763][   T30]  ? __pfx_do_raw_write_lock+0x10/0x10
[  333.760525][   T30]  ? prepare_to_wait+0x186/0x210
[  333.773474][   T30]  ? schedule+0x90/0x320
[  333.778117][   T30]  kjournald2+0x41c/0x7b0
[  333.782493][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  333.794492][   T30]  ? __pfx_kjournald2+0x10/0x10
[  333.799709][   T30]  ? __pfx_autoremove_wake_function+0x10/0x10
[  333.811660][   T30]  ? __kthread_parkme+0x169/0x1d0
[  333.818501][   T30]  ? __pfx_kjournald2+0x10/0x10
[  333.823401][   T30]  kthread+0x2f0/0x390
[  333.835343][   T30]  ? __pfx_kjournald2+0x10/0x10
[  333.840233][   T30]  ? __pfx_kthread+0x10/0x10
[  333.844863][   T30]  ret_from_fork+0x4b/0x80
[  333.855722][   T30]  ? __pfx_kthread+0x10/0x10
[  333.860352][   T30]  ret_from_fork_asm+0x1a/0x30
[  333.865213][   T30]  </TASK>
[  333.875721][   T30] INFO: task syz-executor:7084 blocked for more than 144 seconds.
[  333.883588][   T30]       Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0
[  333.897335][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  333.911329][   T30] task:syz-executor    state:D stack:22480 pid:7084  tgid:7084  ppid:1      flags:0x00000004
[  333.931950][   T30] Call Trace:
[  333.943525][   T30]  <TASK>
[  333.961780][   T30]  __schedule+0x17fb/0x4be0
[  333.966636][   T30]  ? __pfx___schedule+0x10/0x10
[  333.971531][   T30]  ? __pfx_lock_release+0x10/0x10
[  333.982828][   T30]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[  333.989166][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  333.995099][   T30]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  334.008640][   T30]  ? schedule+0x90/0x320
[  334.012938][   T30]  schedule+0x14b/0x320
[  334.021012][   T30]  schedule_preempt_disabled+0x13/0x30
[  334.030826][   T30]  __mutex_lock+0x7e7/0xee0
[  334.039564][   T30]  ? __mutex_lock+0x5ef/0xee0
[  334.044309][   T30]  ? __tun_chr_ioctl+0x48c/0x2400
[  334.055373][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  334.064233][   T30]  ? __might_fault+0xc6/0x120
[  334.070684][   T30]  __tun_chr_ioctl+0x48c/0x2400
[  334.079346][   T30]  ? __pfx___tun_chr_ioctl+0x10/0x10
[  334.084684][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  334.093315][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  334.103376][   T30]  ? __pfx_tun_chr_ioctl+0x10/0x10
[  334.115345][   T30]  __se_sys_ioctl+0xf5/0x170
[  334.119998][   T30]  do_syscall_64+0xf3/0x230
[  334.124588][   T30]  ? clear_bhb_loop+0x35/0x90
[  334.134034][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.140264][   T30] RIP: 0033:0x7f2e4fb8592b
[  334.144712][   T30] RSP: 002b:00007ffdffb782a0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  334.160601][   T30] RAX: ffffffffffffffda RBX: 00007f2e4fd75f40 RCX: 00007f2e4fb8592b
[  334.174116][   T30] RDX: 00007ffdffb78320 RSI: 00000000400454ca RDI: 00000000000000c8
[  334.190560][   T30] RBP: 00007f2e4fd76738 R08: 0000000000000000 R09: 0000000000000000
[  334.202159][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000008
[  334.212482][   T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000
[  334.223755][   T30]  </TASK>
[  334.229421][   T30] INFO: task syz.0.329:7096 blocked for more than 144 seconds.
[  334.241303][   T30]       Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0
[  334.251326][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  334.263838][   T30] task:syz.0.329       state:D stack:26816 pid:7096  tgid:7095  ppid:5828   flags:0x00000004
[  334.277823][   T30] Call Trace:
[  334.281147][   T30]  <TASK>
[  334.284667][   T30]  __schedule+0x17fb/0x4be0
[  334.297151][   T30]  ? __pfx___schedule+0x10/0x10
[  334.302050][   T30]  ? __pfx_lock_release+0x10/0x10
[  334.312340][   T30]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[  334.319511][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  334.330996][   T30]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  334.337679][   T30]  ? schedule+0x90/0x320
[  334.341983][   T30]  schedule+0x14b/0x320
[  334.352396][   T30]  schedule_preempt_disabled+0x13/0x30
[  334.358263][   T30]  __mutex_lock+0x7e7/0xee0
[  334.362823][   T30]  ? __mutex_lock+0x5ef/0xee0
[  334.374941][   T30]  ? rtnetlink_rcv_msg+0x6e6/0xcf0
[  334.380397][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  334.387515][   T30]  rtnetlink_rcv_msg+0x6e6/0xcf0
[  334.392516][   T30]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  334.409427][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  334.414944][   T30]  ? ref_tracker_free+0x643/0x7e0
[  334.423360][   T30]  netlink_rcv_skb+0x1e3/0x430
[  334.430681][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  334.439754][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  334.445103][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  334.452659][   T30]  netlink_unicast+0x7f6/0x990
[  334.462407][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  334.470856][   T30]  ? __virt_addr_valid+0x45f/0x530
[  334.479461][   T30]  ? __phys_addr_symbol+0x2f/0x70
[  334.484523][   T30]  ? __check_object_size+0x47a/0x730
[  334.492735][   T30]  netlink_sendmsg+0x8e4/0xcb0
[  334.502371][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  334.515527][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  334.520857][   T30]  __sock_sendmsg+0x221/0x270
[  334.534075][   T30]  ____sys_sendmsg+0x52a/0x7e0
[  334.539485][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[  334.544968][   T30]  ? __fget_files+0x2a/0x410
[  334.555272][   T30]  ? __fget_files+0x2a/0x410
[  334.559912][   T30]  __sys_sendmsg+0x269/0x350
[  334.564585][   T30]  ? __pfx___sys_sendmsg+0x10/0x10
[  334.575116][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  334.582006][   T30]  ? do_syscall_64+0x100/0x230
[  334.595072][   T30]  ? do_syscall_64+0xb6/0x230
[  334.600090][   T30]  do_syscall_64+0xf3/0x230
[  334.604640][   T30]  ? clear_bhb_loop+0x35/0x90
[  334.614893][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.624960][   T30] RIP: 0033:0x7f840f785d29
[  334.636731][   T30] RSP: 002b:00007f84105b3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  334.645205][   T30] RAX: ffffffffffffffda RBX: 00007f840f975fa0 RCX: 00007f840f785d29
[  334.659778][   T30] RDX: 0000000000000000 RSI: 00000000200007c0 RDI: 0000000000000003
[  334.668284][   T30] RBP: 00007f840f801b08 R08: 0000000000000000 R09: 0000000000000000
[  334.682526][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  334.692373][   T30] R13: 0000000000000000 R14: 00007f840f975fa0 R15: 00007fffbc8d17e8
[  334.706685][   T30]  </TASK>
[  334.709788][   T30] INFO: task syz.4.334:7109 blocked for more than 144 seconds.
[  334.721042][   T30]       Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0
[  334.734329][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  334.751909][   T30] task:syz.4.334       state:D stack:24912 pid:7109  tgid:7105  ppid:5824   flags:0x00004004
[  334.762409][   T30] Call Trace:
[  334.771246][   T30]  <TASK>
[  334.774211][   T30]  __schedule+0x17fb/0x4be0
[  334.781187][   T30]  ? __pfx___schedule+0x10/0x10
[  334.791887][   T30]  ? __pfx_lock_release+0x10/0x10
[  334.797863][   T30]  ? _raw_spin_unlock_irqrestore+0x8f/0x140
[  334.803832][   T30]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  334.814984][   T30]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  334.821646][   T30]  ? schedule+0x90/0x320
[  334.832230][   T30]  schedule+0x14b/0x320
[  334.840241][   T30]  schedule_preempt_disabled+0x13/0x30
[  334.852633][   T30]  __mutex_lock+0x7e7/0xee0
[  334.857478][   T30]  ? __mutex_lock+0x5ef/0xee0
[  334.862232][   T30]  ? rtnl_newlink+0xce2/0x2210
[  334.872727][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  334.880165][   T30]  ? cap_capable+0x1b4/0x250
[  334.884799][   T30]  ? safesetid_security_capable+0xb2/0x1d0
[  334.895665][   T30]  ? ns_capable+0x8a/0xf0
[  334.900951][   T30]  ? rtnl_link_get_net_capable+0x168/0x340
[  334.911551][   T30]  rtnl_newlink+0xce2/0x2210
[  334.919034][   T30]  ? __pfx_rtnl_newlink+0x10/0x10
[  334.924116][   T30]  ? __netlink_deliver_tap+0x56b/0x7f0
[  334.934250][   T30]  ? __pfx_validate_chain+0x10/0x10
[  334.940792][   T30]  ? __sock_sendmsg+0x221/0x270
[  334.953934][   T30]  ? ____sys_sendmsg+0x52a/0x7e0
[  334.960245][   T30]  ? __sys_sendmsg+0x269/0x350
[  334.965052][   T30]  ? do_syscall_64+0xf3/0x230
[  334.976691][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  334.983336][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  335.001561][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  335.015567][   T30]  ? mark_lock+0x9a/0x360
[  335.019970][   T30]  ? __lock_acquire+0x1397/0x2100
[  335.025057][   T30]  ? __pfx_lock_release+0x10/0x10
[  335.035830][   T30]  ? cap_capable+0x1b4/0x250
[  335.040459][   T30]  ? safesetid_security_capable+0xb2/0x1d0
[  335.052268][   T30]  ? __pfx_rtnl_newlink+0x10/0x10
[  335.061869][   T30]  rtnetlink_rcv_msg+0x791/0xcf0
[  335.074756][   T30]  ? rtnetlink_rcv_msg+0x1a7/0xcf0
[  335.080179][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  335.091771][   T30]  ? ref_tracker_free+0x643/0x7e0
[  335.097223][   T30]  netlink_rcv_skb+0x1e3/0x430
[  335.102032][   T30]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  335.115132][   T30]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  335.120840][   T30]  ? netlink_deliver_tap+0x2e/0x1b0
[  335.131650][   T30]  netlink_unicast+0x7f6/0x990
[  335.136716][   T30]  ? __pfx_netlink_unicast+0x10/0x10
[  335.142072][   T30]  ? __virt_addr_valid+0x45f/0x530
[  335.155304][   T30]  ? __phys_addr_symbol+0x2f/0x70
[  335.160400][   T30]  ? __check_object_size+0x47a/0x730
[  335.175905][   T30]  netlink_sendmsg+0x8e4/0xcb0
[  335.180743][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  335.192929][   T30]  ? __pfx_netlink_sendmsg+0x10/0x10
[  335.198589][   T30]  __sock_sendmsg+0x221/0x270
[  335.203320][   T30]  ____sys_sendmsg+0x52a/0x7e0
[  335.214062][   T30]  ? __pfx_____sys_sendmsg+0x10/0x10
[  335.219728][   T30]  ? __fget_files+0x2a/0x410
[  335.224369][   T30]  ? __fget_files+0x2a/0x410
[  335.234727][   T30]  __sys_sendmsg+0x269/0x350
[  335.241130][   T30]  ? __pfx___sys_sendmsg+0x10/0x10
[  335.251738][   T30]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  335.258490][   T30]  ? do_syscall_64+0x100/0x230
[  335.263320][   T30]  ? do_syscall_64+0xb6/0x230
[  335.273695][   T30]  do_syscall_64+0xf3/0x230
[  335.284120][   T30]  ? clear_bhb_loop+0x35/0x90
[  335.294780][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  335.301024][   T30] RIP: 0033:0x7fe118b85d29
[  335.311449][   T30] RSP: 002b:00007fe11995f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  335.320533][   T30] RAX: ffffffffffffffda RBX: 00007fe118d76160 RCX: 00007fe118b85d29
[  335.334062][   T30] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000007
[  335.342332][   T30] RBP: 00007fe118c01b08 R08: 0000000000000000 R09: 0000000000000000
[  335.355289][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  335.363314][   T30] R13: 0000000000000000 R14: 00007fe118d76160 R15: 00007ffd82df41d8
[  335.376717][   T30]  </TASK>
[  335.379856][   T30] 
[  335.379856][   T30] Showing all locks held in the system:
[  335.397309][   T30] 1 lock held by khungtaskd/30:
[  335.402295][   T30]  #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0
[  335.419363][   T30] 3 locks held by kworker/u8:4/67:
[  335.424506][   T30]  #0: ffff888030a46948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840
[  335.442106][   T30]  #1: ffffc9000218fd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840
[  335.463209][   T30]  #2: ffffffff8fca0bc8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30
[  335.473166][   T30] 4 locks held by kworker/u9:1/5132:
[  335.483894][   T30]  #0: ffff8880505b9148 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840
[  335.495585][   T30]  #1: ffffc9000e207d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840
[  335.518533][   T30]  #2: ffff888011f5cd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1ec/0x400
[  335.532905][   T30]  #3: ffff888011f5c078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1e4/0x11f0
[  335.543024][   T30] 2 locks held by getty/5573:
[  335.555919][   T30]  #0: ffff8880354620a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  335.570351][   T30]  #1: ffffc9000330b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00
[  335.581824][   T30] 5 locks held by kworker/u9:3/5823:
[  335.591773][   T30]  #0: ffff888079008948 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840
[  335.606139][   T30]  #1: ffffc90003e3fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840
[  335.632007][   T30]  #2: ffff88801e734d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1ec/0x400
[  335.649334][   T30]  #3: ffff88801e734078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1e4/0x11f0
[  335.661423][   T30]  #4: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830
[  335.675510][   T30] 4 locks held by kworker/u9:4/5826:
[  335.680840][   T30]  #0: ffff88804d64b148 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840
[  335.698927][   T30]  #1: ffffc90003e5fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840
[  335.717446][   T30]  #2: ffff88802917cd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1ec/0x400
[  335.735032][   T30]  #3: ffff88802917c078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1e4/0x11f0
[  335.748892][   T30] 4 locks held by kworker/u9:6/5830:
[  335.754244][   T30]  #0: ffff888024cd0948 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840
[  335.772832][   T30]  #1: ffffc90003ecfd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840
[  335.791354][   T30]  #2: ffff88805f474d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1ec/0x400
[  335.802039][   T30]  #3: ffff88805f474078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1e4/0x11f0
[  335.819435][   T30] 4 locks held by kworker/u9:8/5835:
[  335.824766][   T30]  #0: ffff88807c2bd948 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840
[  335.844188][   T30]  #1: ffffc90003f5fd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840
[  335.864919][   T30]  #2: ffff888035134d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1ec/0x400
[  335.875534][   T30]  #3: ffff888035134078 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x1e4/0x11f0
[  335.891002][   T30] 6 locks held by kworker/1:5/5899:
[  335.896544][   T30] 2 locks held by syz.2.302/6999:
[  335.902138][   T30]  #0: ffffffff8fc94710 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570
[  335.915265][   T30]  #1: ffffffff8fca0bc8 (rtnl_mutex){+.+.}-{4:4}, at: setup_net+0x602/0x9e0
[  335.924060][   T30] 1 lock held by syz-executor/7084:
[  335.934539][   T30]  #0: ffffffff8fca0bc8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x48c/0x2400
[  335.955308][   T30] 1 lock held by syz.1.327/7087:
[  335.960300][   T30] 1 lock held by syz.0.329/7096:
[  335.972041][   T30]  #0: ffffffff8fca0bc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x6e6/0xcf0
[  335.981820][   T30] 1 lock held by syz.4.334/7109:
[  335.993455][   T30]  #0: ffffffff8fca0bc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xce2/0x2210
[  336.002900][   T30] 1 lock held by syz-executor/7118:
[  336.014301][   T30]  #0: ffffffff8fca0bc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0
[  336.024707][   T30] 1 lock held by syz-executor/7121:
[  336.044581][   T30]  #0: ffffffff8fca0bc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0
[  336.054444][   T30] 1 lock held by syz-executor/7124:
[  336.065409][   T30]  #0: ffffffff8fca0bc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0
[  336.074896][   T30] 1 lock held by syz-executor/7127:
[  336.089114][   T30]  #0: ffffffff8fca0bc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0
[  336.102947][   T30] 1 lock held by syz-executor/7136:
[  336.111379][   T30]  #0: ffffffff8fca0bc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0
[  336.128915][   T30] 1 lock held by syz-executor/7142:
[  336.134187][   T30]  #0: ffffffff8fca0bc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0
[  336.145361][   T30] 1 lock held by syz-executor/7147:
[  336.150632][   T30]  #0: ffffffff8fca0bc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0
[  336.166019][   T30] 1 lock held by syz-executor/7150:
[  336.171243][   T30]  #0: ffffffff8fca0bc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0
[  336.189323][   T30] 1 lock held by syz-executor/7153:
[  336.194576][   T30]  #0: ffffffff8fca0bc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0
[  336.212074][   T30] 1 lock held by syz-executor/7156:
[  336.224512][   T30]  #0: ffffffff8fca0bc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0
[  336.234873][   T30] 1 lock held by dhcpcd/7161:
[  336.246581][   T30]  #0: ffff8880515d8258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcb0
[  336.262113][   T30] 1 lock held by syz-executor/7163:
[  336.267701][   T30]  #0: ffffffff8fca0bc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0
[  336.282667][   T30] 1 lock held by syz-executor/7169:
[  336.292640][   T30]  #0: ffffffff8fca0bc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0
[  336.308679][   T30] 1 lock held by syz-executor/7171:
[  336.314376][   T30]  #0: ffffffff8fca0bc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0
[  336.330027][   T30] 1 lock held by syz-executor/7174:
[  336.337045][   T30]  #0: ffffffff8fca0bc8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0
[  336.352080][   T30] 
[  336.354433][   T30] =============================================
[  336.354433][   T30] 
[  336.363441][   T30] NMI backtrace for cpu 0
[  336.367831][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0
[  336.378381][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  336.388470][   T30] Call Trace:
[  336.391777][   T30]  <TASK>
[  336.394733][   T30]  dump_stack_lvl+0x241/0x360
[  336.399448][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  336.404675][   T30]  ? __pfx__printk+0x10/0x10
[  336.409308][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  336.414278][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  336.419772][   T30]  ? _printk+0xd5/0x120
[  336.423953][   T30]  ? __pfx__printk+0x10/0x10
[  336.428582][   T30]  ? __wake_up_klogd+0xcc/0x110
[  336.433479][   T30]  ? __pfx__printk+0x10/0x10
[  336.438102][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  336.443162][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  336.449177][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  336.455187][   T30]  watchdog+0xff6/0x1040
[  336.459455][   T30]  ? watchdog+0x1ea/0x1040
[  336.463904][   T30]  ? __pfx_watchdog+0x10/0x10
[  336.468612][   T30]  kthread+0x2f0/0x390
[  336.472714][   T30]  ? __pfx_watchdog+0x10/0x10
[  336.477427][   T30]  ? __pfx_kthread+0x10/0x10
[  336.482042][   T30]  ret_from_fork+0x4b/0x80
[  336.486478][   T30]  ? __pfx_kthread+0x10/0x10
[  336.491091][   T30]  ret_from_fork_asm+0x1a/0x30
[  336.495895][   T30]  </TASK>
[  336.499641][   T30] Sending NMI from CPU 0 to CPUs 1:
[  336.504884][    C1] NMI backtrace for cpu 1
[  336.504897][    C1] CPU: 1 UID: 0 PID: 24 Comm: ksoftirqd/1 Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0
[  336.504915][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  336.504924][    C1] RIP: 0010:deref_stack_reg+0xe/0x210
[  336.504945][    C1] Code: 58 3b 75 0a 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 41 55 41 54 53 48 83 ec 20 <48> 89 54 24 18 49 89 f0 49 89 fe 48 ba 00 00 00 00 00 fc ff df 48
[  336.504959][    C1] RSP: 0018:ffffc90000a17338 EFLAGS: 00000282
[  336.504973][    C1] RAX: fffffffffffffff0 RBX: ffffffff91222ce4 RCX: 0000000000000000
[  336.504985][    C1] RDX: ffffc90000a174a0 RSI: ffffc90000a17d30 RDI: ffffc90000a17460
[  336.504997][    C1] RBP: dffffc0000000000 R08: ffffc90000a174bf R09: 0000000000000000
[  336.505008][    C1] R10: ffffc90000a174b0 R11: fffff52000142e98 R12: ffffc90000a19000
[  336.505020][    C1] R13: ffffc90000a17460 R14: ffffffff8a6064f4 R15: ffffc90000a174b0
[  336.505032][    C1] FS:  0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  336.505045][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  336.505056][    C1] CR2: 000000002002a000 CR3: 000000005bdb0000 CR4: 00000000003526f0
[  336.505069][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  336.505078][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  336.505088][    C1] Call Trace:
[  336.505093][    C1]  <NMI>
[  336.505100][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  336.505120][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  336.505139][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  336.505157][    C1]  ? nmi_handle+0x2a/0x5a0
[  336.505181][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  336.505202][    C1]  ? nmi_handle+0x14f/0x5a0
[  336.505219][    C1]  ? nmi_handle+0x2a/0x5a0
[  336.505242][    C1]  ? deref_stack_reg+0xe/0x210
[  336.505260][    C1]  ? default_do_nmi+0x63/0x160
[  336.505279][    C1]  ? exc_nmi+0x123/0x1f0
[  336.505296][    C1]  ? end_repeat_nmi+0xf/0x53
[  336.505312][    C1]  ? ip6_finish_output2+0x1284/0x17b0
[  336.505339][    C1]  ? deref_stack_reg+0xe/0x210
[  336.505355][    C1]  ? deref_stack_reg+0xe/0x210
[  336.505374][    C1]  ? deref_stack_reg+0xe/0x210
[  336.505391][    C1]  </NMI>
[  336.505396][    C1]  <IRQ>
[  336.505403][    C1]  ? ip6_finish_output2+0x1284/0x17b0
[  336.505422][    C1]  unwind_next_frame+0x1799/0x22d0
[  336.505443][    C1]  ? __dev_queue_xmit+0x1b73/0x3f50
[  336.505464][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  336.505489][    C1]  arch_stack_walk+0x11c/0x150
[  336.505508][    C1]  ? ip6_finish_output2+0x1284/0x17b0
[  336.505529][    C1]  stack_trace_save+0x118/0x1d0
[  336.505553][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  336.505576][    C1]  ? validate_chain+0x11e/0x5920
[  336.505596][    C1]  ? NF_HOOK+0x29e/0x450
[  336.505617][    C1]  ? skb_clone+0x20c/0x390
[  336.505642][    C1]  kasan_save_track+0x3f/0x80
[  336.505660][    C1]  ? kasan_save_track+0x3f/0x80
[  336.505678][    C1]  ? __kasan_slab_alloc+0x66/0x80
[  336.505697][    C1]  ? kmem_cache_alloc_noprof+0x1d9/0x380
[  336.505720][    C1]  ? skb_clone+0x20c/0x390
[  336.505737][    C1]  ? dev_queue_xmit_nit+0x249/0xca0
[  336.505751][    C1]  ? dev_hard_start_xmit+0x15f/0x7d0
[  336.505767][    C1]  ? __dev_queue_xmit+0x1b73/0x3f50
[  336.505806][    C1]  __kasan_slab_alloc+0x66/0x80
[  336.505826][    C1]  ? skb_clone+0x131/0x390
[  336.505843][    C1]  kmem_cache_alloc_noprof+0x1d9/0x380
[  336.505869][    C1]  skb_clone+0x20c/0x390
[  336.505886][    C1]  ? dev_queue_xmit_nit+0x3fe/0xca0
[  336.505901][    C1]  dev_queue_xmit_nit+0x249/0xca0
[  336.505916][    C1]  ? dev_queue_xmit_nit+0x2b/0xca0
[  336.505931][    C1]  ? validate_xmit_skb+0x9b8/0xff0
[  336.505951][    C1]  dev_hard_start_xmit+0x15f/0x7d0
[  336.505968][    C1]  ? __pfx_validate_xmit_skb+0x10/0x10
[  336.505990][    C1]  __dev_queue_xmit+0x1b73/0x3f50
[  336.506014][    C1]  ? __dev_queue_xmit+0x2f4/0x3f50
[  336.506034][    C1]  ? __pfx___dev_queue_xmit+0x10/0x10
[  336.506061][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  336.506079][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  336.506096][    C1]  ? __ipv6_neigh_lookup_noref+0x4e1/0x680
[  336.506116][    C1]  ? ip6_finish_output2+0x107f/0x17b0
[  336.506135][    C1]  ? ip6_finish_output2+0x63a/0x17b0
[  336.506153][    C1]  ip6_finish_output2+0x1284/0x17b0
[  336.506175][    C1]  ? ip6_finish_output2+0x63a/0x17b0
[  336.506195][    C1]  ? __pfx_ip6_finish_output2+0x10/0x10
[  336.506216][    C1]  ? ip6_mtu+0x81/0x3f0
[  336.506232][    C1]  ip6_finish_output+0x41e/0x840
[  336.506251][    C1]  synproxy_send_tcp_ipv6+0x568/0x7c0
[  336.506269][    C1]  ? __pfx_synproxy_send_tcp_ipv6+0x10/0x10
[  336.506290][    C1]  ? __pfx___alloc_skb+0x10/0x10
[  336.506306][    C1]  ? skb_put+0x114/0x1f0
[  336.506323][    C1]  synproxy_send_client_synack_ipv6+0x827/0xcc0
[  336.506345][    C1]  ? __pfx_synproxy_send_client_synack_ipv6+0x10/0x10
[  336.506362][    C1]  ? synproxy_pernet+0x45/0x270
[  336.506381][    C1]  nft_synproxy_do_eval+0x739/0xa60
[  336.506401][    C1]  ? __pfx_nft_synproxy_do_eval+0x10/0x10
[  336.506420][    C1]  ? __pfx_validate_chain+0x10/0x10
[  336.506445][    C1]  nft_do_chain+0x4ad/0x1da0
[  336.506464][    C1]  ? nf_nat_inet_fn+0xa30/0xd10
[  336.506484][    C1]  ? __pfx_nft_do_chain+0x10/0x10
[  336.506510][    C1]  ? nf_nat_ipv6_fn+0x2cb/0x3e0
[  336.506533][    C1]  ? __pfx_nf_nat_ipv6_fn+0x10/0x10
[  336.506554][    C1]  nft_do_chain_inet+0x418/0x6b0
[  336.506572][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  336.506587][    C1]  ? nf_nat_ipv6_local_in+0x1cd/0x620
[  336.506610][    C1]  ? __pfx_nf_nat_ipv6_local_in+0x10/0x10
[  336.506634][    C1]  ? nf_nat_ipv6_fn+0x2cb/0x3e0
[  336.506657][    C1]  ? __pfx_nft_do_chain_inet+0x10/0x10
[  336.506672][    C1]  nf_hook_slow+0xc3/0x220
[  336.506696][    C1]  ? __pfx_ip6_input_finish+0x10/0x10
[  336.506715][    C1]  ? __pfx_ip6_input_finish+0x10/0x10
[  336.506734][    C1]  NF_HOOK+0x29e/0x450
[  336.506754][    C1]  ? NF_HOOK+0x9a/0x450
[  336.506771][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  336.506791][    C1]  ? __pfx_ip6_input_finish+0x10/0x10
[  336.506811][    C1]  ? ip6_rcv_finish_core+0x1fb/0x410
[  336.506832][    C1]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  336.506851][    C1]  NF_HOOK+0x3a4/0x450
[  336.506868][    C1]  ? skb_orphan+0xae/0xd0
[  336.506887][    C1]  ? NF_HOOK+0x9a/0x450
[  336.506905][    C1]  ? __pfx_NF_HOOK+0x10/0x10
[  336.506924][    C1]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  336.506946][    C1]  ? __pfx_ipv6_rcv+0x10/0x10
[  336.506964][    C1]  __netif_receive_skb+0x1ea/0x650
[  336.506986][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  336.507002][    C1]  ? __pfx___netif_receive_skb+0x10/0x10
[  336.507022][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  336.507038][    C1]  ? __pfx_lock_release+0x10/0x10
[  336.507054][    C1]  ? _raw_spin_lock_irq+0xdf/0x120
[  336.507079][    C1]  process_backlog+0x662/0x15b0
[  336.507103][    C1]  ? process_backlog+0x33b/0x15b0
[  336.507128][    C1]  ? __pfx_process_backlog+0x10/0x10
[  336.507149][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  336.507166][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  336.507184][    C1]  __napi_poll+0xcb/0x490
[  336.507205][    C1]  net_rx_action+0x89b/0x1240
[  336.507236][    C1]  ? __pfx_net_rx_action+0x10/0x10
[  336.507258][    C1]  ? __pfx_tmigr_handle_remote+0x10/0x10
[  336.507291][    C1]  handle_softirqs+0x2d4/0x9b0
[  336.507316][    C1]  ? __irq_exit_rcu+0xf7/0x220
[  336.507339][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  336.507362][    C1]  ? irqtime_account_irq+0xd4/0x1e0
[  336.507381][    C1]  __irq_exit_rcu+0xf7/0x220
[  336.507402][    C1]  ? __pfx___irq_exit_rcu+0x10/0x10
[  336.507425][    C1]  ? rcu_is_watching+0x15/0xb0
[  336.507446][    C1]  irq_exit_rcu+0x9/0x30
[  336.507466][    C1]  sysvec_irq_work+0xa3/0xc0
[  336.507483][    C1]  </IRQ>
[  336.507488][    C1]  <TASK>
[  336.507493][    C1]  asm_sysvec_irq_work+0x1a/0x20
[  336.507507][    C1] RIP: 0010:finish_task_switch+0x1ea/0x870
[  336.507527][    C1] Code: c9 50 e8 49 0c 0c 00 48 83 c4 08 4c 89 f7 e8 ed 39 00 00 e9 de 04 00 00 4c 89 f7 e8 e0 28 55 0a e8 6b 89 38 00 fb 48 8b 5d c0 <48> 8d bb f8 15 00 00 48 89 f8 48 c1 e8 03 49 be 00 00 00 00 00 fc
[  336.507540][    C1] RSP: 0018:ffffc900001e7ac8 EFLAGS: 00000282
[  336.507553][    C1] RAX: 6e64bc0d4d510500 RBX: ffff88801d2d0000 RCX: ffffffff9a378903
[  336.507565][    C1] RDX: dffffc0000000000 RSI: ffffffff8c0a98e0 RDI: ffffffff8c5edea0
[  336.507577][    C1] RBP: ffffc900001e7b10 R08: ffffffff90185937 R09: 1ffffffff2030b26
[  336.507589][    C1] R10: dffffc0000000000 R11: fffffbfff2030b27 R12: 1ffff110170e7eac
[  336.507600][    C1] R13: dffffc0000000000 R14: ffff8880b863e740 R15: ffff8880b873f560
[  336.507620][    C1]  ? finish_task_switch+0x1e5/0x870
[  336.507646][    C1]  __schedule+0x1803/0x4be0
[  336.507671][    C1]  ? lockdep_softirqs_on+0x334/0x5a0
[  336.507692][    C1]  ? __pfx___schedule+0x10/0x10
[  336.507718][    C1]  ? __pfx___might_resched+0x10/0x10
[  336.507740][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  336.507759][    C1]  ? preempt_schedule+0xe1/0xf0
[  336.507779][    C1]  preempt_schedule_common+0x84/0xd0
[  336.507817][    C1]  preempt_schedule+0xe1/0xf0
[  336.507841][    C1]  ? __pfx_preempt_schedule+0x10/0x10
[  336.507865][    C1]  ? run_ksoftirqd+0xe3/0x130
[  336.507882][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  336.507900][    C1]  preempt_schedule_thunk+0x1a/0x30
[  336.507918][    C1]  ? __pfx_ksoftirqd_should_run+0x10/0x10
[  336.507935][    C1]  ? smpboot_thread_fn+0x2d3/0xa30
[  336.507962][    C1]  ? smpboot_thread_fn+0x4fb/0xa30
[  336.507988][    C1]  ? smpboot_thread_fn+0x656/0xa30
[  336.508016][    C1]  ? __pfx_ksoftirqd_should_run+0x10/0x10
[  336.508033][    C1]  smpboot_thread_fn+0x65b/0xa30
[  336.508060][    C1]  ? smpboot_thread_fn+0x4e/0xa30
[  336.508091][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  336.508119][    C1]  kthread+0x2f0/0x390
[  336.508138][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  336.508165][    C1]  ? __pfx_kthread+0x10/0x10
[  336.508186][    C1]  ret_from_fork+0x4b/0x80
[  336.508202][    C1]  ? __pfx_kthread+0x10/0x10
[  336.508222][    C1]  ret_from_fork_asm+0x1a/0x30
[  336.508255][    C1]  </TASK>
[  337.531325][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  337.538316][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc7-syzkaller-00043-g619f0b6fad52 #0
[  337.548847][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  337.558938][   T30] Call Trace:
[  337.562248][   T30]  <TASK>
[  337.565206][   T30]  dump_stack_lvl+0x241/0x360
[  337.569918][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  337.575147][   T30]  ? __pfx__printk+0x10/0x10
[  337.579766][   T30]  ? vscnprintf+0x5d/0x90
[  337.584120][   T30]  panic+0x349/0x880
[  337.588063][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  337.594251][   T30]  ? __pfx_panic+0x10/0x10
[  337.598709][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  337.604120][   T30]  ? __irq_work_queue_local+0x137/0x410
[  337.609700][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  337.615100][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  337.621287][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  337.627473][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  337.633659][   T30]  watchdog+0x1035/0x1040
[  337.638017][   T30]  ? watchdog+0x1ea/0x1040
[  337.642468][   T30]  ? __pfx_watchdog+0x10/0x10
[  337.647166][   T30]  kthread+0x2f0/0x390
[  337.651261][   T30]  ? __pfx_watchdog+0x10/0x10
[  337.655966][   T30]  ? __pfx_kthread+0x10/0x10
[  337.660577][   T30]  ret_from_fork+0x4b/0x80
[  337.665014][   T30]  ? __pfx_kthread+0x10/0x10
[  337.669629][   T30]  ret_from_fork_asm+0x1a/0x30
[  337.674436][   T30]  </TASK>
[  337.677792][   T30] Kernel Offset: disabled
[  337.682122][   T30] Rebooting in 86400 seconds..