last executing test programs:

6m30.934006915s ago: executing program 3 (id=633):
getpid() (async)
r0 = getpid()
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r1, @ANYBLOB="0000000001000000300012800b0001006272696467650000200002800c002e000000000001000000080031"], 0x50}}, 0x0)
syz_pidfd_open(r0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x8c}, 0x0)
getpid() (async)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000b40)=[{{&(0x7f0000000980)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000b00), 0x0, 0x0, 0x0, 0x24044811}}], 0x1, 0x4048040) (async)
sendmmsg$unix(r4, &(0x7f0000000b40)=[{{&(0x7f0000000980)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000b00), 0x0, 0x0, 0x0, 0x24044811}}], 0x1, 0x4048040)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES64=r4], &(0x7f0000001dc0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r7=>r5, @ANYRES64=r4], &(0x7f0000001dc0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="22110000bff751ad32eeb44594c3a53f3f5a30458dff352fa66f8162a2a670dd21ff484298188f3b57ed2ae101195e25763d704c70965d74c67030ed5a536e587a19e7c7ad0cca44086107b76e56a50c00000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000"], &(0x7f0000000440)='syzkaller\x00', 0x7, 0xfe, &(0x7f0000000480)=""/254, 0x41000, 0xa46179ba914d5f10, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000640)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x4, 0x3, 0x8, 0x3}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000740)=[r5], &(0x7f0000000780)=[{0x5, 0x3, 0x6}, {0x4, 0x2, 0xb, 0xa}, {0x3, 0x5, 0x2, 0x4}, {0x1, 0x5, 0x3, 0x9}, {0x4, 0x3, 0x7, 0xf}, {0x0, 0x1, 0x7, 0x9}, {0x0, 0x3, 0x800000b, 0x1}, {0x3, 0x4, 0x7, 0x1}, {0x5, 0x4, 0x6, 0x4}, {0x0, 0x4, 0x7, 0xc}], 0x10, 0x4, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='itimer_state\x00', r8}, 0x18)
r9 = userfaultfd(0x80801)
ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000dc0)=ANY=[@ANYRESOCT=r6, @ANYRES32=r3, @ANYRES16=r1, @ANYRES32=0x0, @ANYRES8=r9, @ANYBLOB="000000000000000000000000000000840000000008000000000000006ccc463444202ab8d63a5c4f4502a1e3bea9cdaf01a617f1de4aa56e33ad1bfa8ac301000000000000800cb5ae8e7274e0a6fbaf35dee76b76a6ce003937928efee2547801fb4d8e776da5c2d55e1153ebd4c614516c1ff320241c85ffda2f52352772e57264033e42e26b3bd4cec0189bbd68bb7ea2633f9968fc08d5e9ee28b46c2cdd700b890af88397f4e6d267e06e19cd353fb17c8c4b2c12a56b923b6fd529878ebc"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000006100000600000000bf91000000000000b7020000000000008500000000000000b7000000000000009500"], &(0x7f0000000100)='GPL\x00', 0x4, 0x103, &(0x7f0000000140)=""/259, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000006100000600000000bf91000000000000b7020000000000008500000000000000b7000000000000009500"], &(0x7f0000000100)='GPL\x00', 0x4, 0x103, &(0x7f0000000140)=""/259, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bind$inet6(r10, &(0x7f0000d84000)={0xa, 0x2, 0x40}, 0x1c)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000200)='./bus\x00', 0x100)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_auto}]}) (async)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_auto}]})
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

6m29.522565885s ago: executing program 3 (id=638):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0000010000000008001b"], 0x24}}, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x80800)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
clock_nanosleep(0xfffffff2, 0x225c17d03, &(0x7f0000000400), 0x0)
sendmmsg$alg(r2, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)="75899b166ef465ebdf3985d305c82df3806ad9922917ca929f6a4bf1cda392e0a041dc6133af6fcd6c232805d9af87535e796adbada01cbd73bf446315e8ad07d64cb17cbfacd81381c880c373a19b898201e80e0f48e26d0ece", 0x5a}, {&(0x7f0000000980)="35d141df804fa269d5af2383cb9f41003dd63924be096c8a80d3e2422de820e311e5d03071c91caa7a6ec1bfb3daf9c19e4ec468da48fbc1f529d2052e0b6a96c26b9750db3d2da4e7a064ad205122408f2de4e007c56b657733c67f9a4db5e23fabe5e98bbb", 0x66}], 0x2, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x20008890)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000880)=""/234, 0xea}], 0x1}, 0x0)
r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
sendmmsg(r1, &(0x7f00000032c0)=[{{&(0x7f0000000800)=@llc={0x1a, 0x309, 0x6, 0x98, 0x1a, 0x4}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000a00)="9fe4c309e29fbd265c982b874b145cf466025d051438c73351de84ae0629c413e0d1a581419bede6ae45d0741a759a0c3b3743d9f4e7e1add0a33056ef43af4572410728322ac90a2788d7325a2344acede101b2da6e1c421e081994638c5b53a39be57b78b3e076927761fdde51aac523fefa02c56371c07fc934dcaad8e8fbc8cf6d1d45614ddac48e16321b5c91b571f3421a5742a2a305bc0835dc62f7d7abda31ddaa41ac765b985944bf30aa701b3f203006dc8f44bbcd1e67722e46a5fd1458f5365023149862bc0888265c18568f24d0cf747caa6f9fb4236fc187c88af154237ff0", 0xe6}, {&(0x7f0000000b00)="15315c1606921bc942659e4e2716ae4524dd9848f4fa2ea9ba085e998839003da5ef293191d4acb2adb9855c5f8b1cd9f0b66bda87ad9abd4e794aa3d241851b0d1397a6739c7f746cc0b569488f0566baf0941f940881c3ab65e609021de9abf0ae1bc1c36eb75dce370cd81d4cc7e1fe41136eb2", 0x75}, {&(0x7f0000000b80)="c98a0721a44b78310dfda95888005d6c287aa207c6933b70a2fdc931dc82b3f79577a75216e2a1ff32250b89aa28c2946df013c5f7affcce2d37d094a1bdbf2645d600bd736544bb0be85670361c6a5abf843f14cf985a916a5f95b475bf4ab55c43db56f1380709bb09c8850571c2ef017651c2f54316b8ecf84137ae8ef7bc1016790665be185110d680999e585a8b1db8dfe9ac5ee217454b01b828ce92cf2e8f435402390f21511048b2b7369968828706f042999d94f145b7b18b045a088527c9b531ab09d7a5f79970dd739bfdf3b0", 0xd2}, {&(0x7f0000000c80)="7ca8d1c083b5dd6430fba7f85586ff5d4bc80a93f0f692f52045d2323a14bfb800ba51360a42cff0aa0d9c20d819ac9644a8600c868d27cba74ef330ce9f40e8d89c56b6bc03d21d9ce02e12a9bb3ef5ac42814116183ecce8bdea3b6e6b8f34c3b3452f88154f38ef9a049b96223d8f02d784a65f92f3d84daaa027f7b06fdab5844dd5a04ce2cb89c0053f3afcf2f4462ad2f3683de75f3be248af5f093ec8b1b7d03d97b3a06e0039915d1ebcb20fcf07a5cf1e149e", 0xb7}, {&(0x7f0000000040)}], 0x5, &(0x7f0000000dc0)=[{0x88, 0x116, 0xe, "0335bcfb63219623ba7b71890b326299ead1ef5f951fe346f4dd3fb88377f95c34aec078be57145631ff51facdde0ea45bea2c55f73d32db1ba98cc8665bf7a6fd8d5217308aefd3f2be031d9abb707ff93e0c96a3ae150b91ede72b38ea8d23caffdb91d39df8b83d6041603bd4a49c5cbb55a534"}, {0x1010, 0x6, 0x0, "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"}, {0x1010, 0x1, 0x1, "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"}, {0x20, 0x10f, 0x1, "7319497544a115d7947d"}], 0x20c8}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000002ec0)="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", 0xfc}, {&(0x7f0000002fc0)="2bbd7d3a0efcc4d7ba1da6b5b7c72cb1f0957f1ff5ea5f164be8749cf353820249d5a6ae285d858381bb1b903e839b30d8e1f6eec4bd5daa0e9d5379680ea0d0560a7ae0172000c5e9a7dedb135d645da28e98315e75e889ee13d0720f6d6f36e58d8fae11f5f8f4d915b7a7cd74c186dc69a7dddef255ef8659466e76fdb17f27ae50d7ca85ccb7ca0ee006279aed5a6c96fb8d586262466f47fe1e2825b4d5cc1f7e9977cc4509205a24ee447c5d020122b1107410793e7d68c1855c86dc1fd0e21522583012c4da08532c960afe24faf82dc611e9a708fe21f1ad96521e5ca75ca6ef52b712f798726a1d06150687af7ec461", 0xf4}, {&(0x7f00000030c0)="f8920a0ed38cd0111e8bb1ce24d506563e61797cb785506fe0839f7f57b342a5b1c639e58cd6d5fc421492362b6524965bc55bfd676618daa85d3341f962df9d96af2dbb049cd0f48ea383e409b7f60e2bdaffd6c98f3afbaa447053ef25b935d75a66db5946015561999860dd722ad09882cb8856132c78779330247f75e0cc097276680acb98f215d98fa2e06b3514", 0x90}, {&(0x7f0000003180)="5e4338e69698db27631829fc8155d84489b1ee38d0ae5458842cd37519d21e365d80fdb90d2b13f481e48d3349a48032efc05896393920804353f591aad81d4b5764c12db3c49be25d0c9cd3fc40c3ee6c77c6d8f01ebce3a6f4a459f884c4c122c6fb9b2932c65fa233", 0x6a}], 0x4, &(0x7f0000003200)=[{0xc0, 0x101, 0xffffffff, "9a07d8179989869fbf6b537d6c3d4a7a5a1663d7a8459bdad70f4b48e4fa6f2484d61e01d1bdeebf68c89fe24ed4a928262fc31558f0d917ed5dfb651a8fe0f7bc86c13bbca8c2fc8ba364144882dd993936b9d30065b215c4eb932f2768c2aa61ece990f0f4011c922072b246f619b756c8d2411c81f6687ba9962fc14c3adf4dddfa634ec48d07a78d67c9cbf6cf7e669ec9e0237652e4c752d8b7eca256087b3829c26afcb6209d0e5396733ced89"}], 0xc0}}], 0x2, 0x4040010)
getresuid(&(0x7f0000000500)=<r4=>0x0, &(0x7f0000000600), &(0x7f0000000640))
mount$pvfs2(&(0x7f00000003c0), &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0), 0x1000000, &(0x7f0000000700)=ANY=[@ANYBLOB="291c2c73797a746e6c313ba91e924200ccbe2c697036657273707e051fa6d2c292c78bc52d6d44fbcf36cf5b12c8802f26672c6657776e65", @ANYRESDEC=r4, @ANYBLOB=',fsmagic=0x00000000000000b8,\x00'])
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', <r6=>0x0, 0x2f, 0x2, 0x5, 0x4, 0x6b, @mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}, 0x7808, 0x10, 0x3}})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x74, r5, 0x90, 0x70bd28, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40001}, 0x10)

6m28.327785796s ago: executing program 3 (id=643):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x8000003d)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=<r1=>0x0)
r2 = syz_open_procfs(r1, &(0x7f0000000300)='fd\x00')
writev(r2, &(0x7f00000001c0)=[{&(0x7f00000000c0)='w', 0x1}, {&(0x7f0000000340)="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", 0x16b}, {&(0x7f0000000040)="f9534b9c5be985b24be0fc9d4347289937bf1dae5a2b16e0b9b4ef95ae9630083b64808d74e0be2a7d6d8e654eb13c024d4f05b6f55a986de3f4ba079d17c18934d24687831df4912c8cc9865a9c572592a41db6d9f0cc16252ea821f0519f1965adb145", 0xffffff7b}], 0x3)
open(&(0x7f00000000c0)='./bus\x00', 0x1431c2, 0x0)

6m28.05950313s ago: executing program 3 (id=644):
socket$alg(0x26, 0x5, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x48240, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
recvfrom$inet_nvme(0xffffffffffffffff, &(0x7f0000000640)=""/4096, 0x1000, 0x2000, &(0x7f0000000380)=@generic={0x11, "d71d9c1bf36be386b8195be2f96732daece168ab8c4756fcaaaaa57ab4d9fa9c5e136c872457faea878081b25c7ac9863e328325d3608f7b92b91789fb2322981d60e78ecebc51a8a848ac66a135cbf9adb555f5fff1d2552ce4b120288f1c606bebc17e3b75c547a1c41ac89d1be3f0e179d586d665ef8397dfdbdaa865"}, 0x80)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c)
listen(r4, 0x3)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='b *:* r\x00'], 0x8)
r6 = openat$cgroup_devices(r5, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="6215033a2a"], 0x8)

6m27.117004622s ago: executing program 3 (id=645):
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0)
gettid()
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x64, 0x6, 0x508, 0x0, 0xd0, 0xd0, 0x368, 0x1a8, 0x438, 0x438, 0x438, 0x438, 0x438, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x438}}, {{@ipv6={@mcast2, @private1, [], [], 'pim6reg1\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@mcast1}}}, {{@ipv6={@private0, @remote, [], [], 'tunl0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568)
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x81, 0x0)
r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0)

6m26.929793528s ago: executing program 3 (id=646):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=<r0=>0x0)
prlimit64(r0, 0x6, 0x0, &(0x7f0000000200))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[], &(0x7f00000000c0)=""/209, 0x1a, 0xd1, 0x1, 0x0, 0x0, @void, @value}, 0x28)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x61)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r4, &(0x7f0000000140)="96", 0x1, 0x1, &(0x7f0000000240)={0xa, 0x0, 0x0, @private2}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4)
close(0x3)
r5 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/access\x00', 0x2, 0x0)
writev(r5, &(0x7f00000000c0)=[{0x0}], 0x1)
syz_open_procfs(0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000600))

6m11.238419825s ago: executing program 32 (id=646):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=<r0=>0x0)
prlimit64(r0, 0x6, 0x0, &(0x7f0000000200))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000c40)=ANY=[], &(0x7f00000000c0)=""/209, 0x1a, 0xd1, 0x1, 0x0, 0x0, @void, @value}, 0x28)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0)
r2 = socket$igmp6(0xa, 0x3, 0x2)
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'})
write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x61)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r4, &(0x7f0000000140)="96", 0x1, 0x1, &(0x7f0000000240)={0xa, 0x0, 0x0, @private2}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4)
close(0x3)
r5 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/access\x00', 0x2, 0x0)
writev(r5, &(0x7f00000000c0)=[{0x0}], 0x1)
syz_open_procfs(0x0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000000600))

4m57.751186979s ago: executing program 1 (id=943):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe)
connect$vsock_stream(r0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(0xffffffffffffffff, 0x15)
chdir(&(0x7f0000000300)='./file0\x00')
socket$xdp(0x2c, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
modify_ldt$write(0x1, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c00000048a6540319e0b5850000000002000000090003007379"], 0x68}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0xe8}}, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0xfeffffff00000000, 0x1ff0000aa}, @private2}}}}}}, 0x0)

4m56.276653645s ago: executing program 1 (id=946):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
socket$inet_mptcp(0x2, 0x1, 0x106)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xfc}}, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)

4m52.043935645s ago: executing program 1 (id=965):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, 0x0)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r0, 0x8008f513, &(0x7f0000000000))
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r1)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x44, r2, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0x7fffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x44}}, 0x4000)

4m51.821441476s ago: executing program 1 (id=969):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000040)={0x0, &(0x7f0000000300), 0x0, 0x1})
syz_usb_connect(0x0, 0x36, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000d48e8840c21536007abb000000010902240001100040000904004b028d4add0c0912070008000908000905066b"], 0x0)

4m48.631365524s ago: executing program 1 (id=986):
syz_open_dev$tty1(0xc, 0x4, 0x1)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x80801)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)

4m47.546327198s ago: executing program 1 (id=988):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="01180100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24, @ANYRES32, @ANYBLOB], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffff}, 0x0)
r2 = getpid()
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x680400, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(r2, 0x3, &(0x7f0000000340)=0x1)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f000001b700)=""/102392, 0xfffffdb5)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="310300000000040000000800000008002b000300000008000300", @ANYRES32=r7, @ANYBLOB="f10031000500000008003c000b0000000500290000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
mlock(&(0x7f0000000000/0x2000)=nil, 0x2000)
pwrite64(0xffffffffffffffff, &(0x7f0000000140)="719ec0f402df35704cd0f2130b56ee7ed4992166e9503b6f7e17145d1d62a1753ef776fe0261cae6e12c70cdd94faf079f0ee0edeb6d1594634fb507ea5c49a02ef73e48dd485c3472721029a8703d402c004de6864944bce83c04028c2169de830d2f4a00da2c1fe0ccc36b3c68be0fc363ca7ae2a974104c8a893d5b7cf4e4f96d4a5dcdcf2c25892a9a398e442828f21909d00ded5762e8cc800aaacb095c95537a00642456a554", 0xa9, 0x8)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x80000000)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, 0x0, 0x0)
sendmmsg$unix(r9, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010023bd700002dc0e00000000000000990007000000730000000500a300000000000500a20005000000"], 0x30}, 0x1, 0x0, 0x0, 0xc000850}, 0x4046000)

4m32.343515015s ago: executing program 33 (id=988):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="01180100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/24, @ANYRES32, @ANYBLOB], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffff}, 0x0)
r2 = getpid()
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x680400, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(r2, 0x3, &(0x7f0000000340)=0x1)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f000001b700)=""/102392, 0xfffffdb5)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan1\x00'})
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000040)={0x0, 0x7000, 0x1})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r5)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', <r7=>0x0})
sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="310300000000040000000800000008002b000300000008000300", @ANYRES32=r7, @ANYBLOB="f10031000500000008003c000b0000000500290000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
mlock(&(0x7f0000000000/0x2000)=nil, 0x2000)
pwrite64(0xffffffffffffffff, &(0x7f0000000140)="719ec0f402df35704cd0f2130b56ee7ed4992166e9503b6f7e17145d1d62a1753ef776fe0261cae6e12c70cdd94faf079f0ee0edeb6d1594634fb507ea5c49a02ef73e48dd485c3472721029a8703d402c004de6864944bce83c04028c2169de830d2f4a00da2c1fe0ccc36b3c68be0fc363ca7ae2a974104c8a893d5b7cf4e4f96d4a5dcdcf2c25892a9a398e442828f21909d00ded5762e8cc800aaacb095c95537a00642456a554", 0xa9, 0x8)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x80000000)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xb635773f07ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
connect$unix(r8, 0x0, 0x0)
sendmmsg$unix(r9, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010023bd700002dc0e00000000000000990007000000730000000500a300000000000500a20005000000"], 0x30}, 0x1, 0x0, 0x0, 0xc000850}, 0x4046000)

2m39.458621092s ago: executing program 2 (id=1381):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, 0x0, 0x0)
r1 = landlock_create_ruleset(0x0, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18)
socket$inet6_udplite(0xa, 0x2, 0x88)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
landlock_restrict_self(r1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
landlock_restrict_self(r1, 0x0)

2m39.336775744s ago: executing program 2 (id=1386):
r0 = socket(0x2, 0x3, 0x6)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0xa, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty, {[@cipso={0x86, 0x13, 0x3, [{0x1, 0xd, "578e0c0300640000000000"}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010600000000000000000900"], 0x38}}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x40, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe3000/0x18000)=nil, &(0x7f0000000400)=[@text64={0x40, 0x0}], 0x1, 0x67, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000640)=0x4)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7f, 0x4, 0x5, 0x0, 0x7, 0x6, 0x6, 0x7, 0x1, 0x0, 0xbf, 0x5, 0x0, 0x8000, 0x802, 0x4, 0xa, 0x1, 0x6, '\x00', 0x3f, 0x7})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
pipe2(&(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
fcntl$setpipe(r5, 0x407, 0x0)
write$FUSE_INIT(r5, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50)
vmsplice(r5, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00'}, 0x10)
fcntl$setpipe(r5, 0x407, 0x2000000)
pipe(&(0x7f00000002c0)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
fcntl$setpipe(r6, 0x8, 0x80000000)
ioctl$sock_inet_udp_SIOCINQ(r4, 0x541b, 0x0)
r7 = socket$unix(0x1, 0x2, 0x0)
getsockopt$sock_cred(r7, 0x1, 0x43, 0x0, &(0x7f0000000300)=0x4f)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b7080000000000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
munlock(&(0x7f0000cb5000/0x3000)=nil, 0x3000)
fstat(r0, &(0x7f0000000080))
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0xffff0000, 0x10, 0x0, &(0x7f0000000400)="2b206d074843b397737ea49da2ba4c5d", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50)

2m37.671232915s ago: executing program 2 (id=1392):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x81, 0x0, 0x2)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x7000, 0xdddd1000, 0x0, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x3000, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0xff, 0x4, 0x0, 0xe, 0x0, 0x3c}, {0x0, 0x0, 0xd, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xa, 0x6, 0x5, 0x0, 0x3}, {0x5000, 0xdddd0000, 0x0, 0x0, 0x0, 0x1, 0x0, 0xa, 0x26}, {0x80a0000}, {0xeeef0000}, 0xfdfcffdb, 0x0, 0x0, 0x28, 0xb, 0xf801, 0x0, [0x0, 0x0, 0x1]})

2m37.461485594s ago: executing program 2 (id=1397):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020)
sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0xd4, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xfffc}, {}, {0x4, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0xa4, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_KEYS={0x8, 0x1, 0x107e6}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x2000}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_EMATCHES={0x60, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf}}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x998, 0x3, 0x4}, {0x6189, 0x81, 0x100, 0x9}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x4}, {0x2, 0x1, 0x3}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0xe7, 0x2, 0x2}, {0x800, 0x4, 0x2, "14562646"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_FLOW_MASK={0x8, 0x6, 0xfffffff7}, @TCA_FLOW_XOR={0x8}, @TCA_FLOW_RSHIFT={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xb7c}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0xc004884}, 0x0)

2m37.265003137s ago: executing program 2 (id=1400):
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r0, 0x0, 0x0, 0x0)

2m37.147126864s ago: executing program 2 (id=1402):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300, 0x0, 0x8000}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0)
r2 = getpgrp(0xffffffffffffffff)
syz_open_procfs(r2, &(0x7f0000000040)='oom_score\x00')
r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=[{0x80, 0x0, 0x0, 0x100}, {0x7c, 0x0, 0x0, 0xfffffffe}, {0x6, 0x8}]})
r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r4, &(0x7f0000000140)='disconnect aa:aa:aa:aa:aa:11 1', 0x16)
write$dsp(r3, &(0x7f0000000200)="2eec4f600c15d9ad9e83224620d5356572bd1d4647b826d57d839d38e578a9a9b3b73c484b539f2181158c2bd5074d2145de3f3b91646c024fb744c7a3d51cc6e235536bda5037bb50d5ce282d4f84684e6272d6bafd3bafa4f14a18d4384d9220084803a79f5b7e147c3f340e44bbe7662f33671e122225ff9a527f4a896ccd31d950edc13f71e5bb8f5ddc63cef78fdd9db45875675f93223fc40293d9e378ebf030f37c3ac29a98b3f804aa71af883b649ac221418d0045c46d285422db9c912be2e9dfaa12d4c923bfdeb32e6723", 0xfffffe8d)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000300)=0x3)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300, 0x0, 0x8000}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) (async)
getpgrp(0xffffffffffffffff) (async)
syz_open_procfs(r2, &(0x7f0000000040)='oom_score\x00') (async)
openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=[{0x80, 0x0, 0x0, 0x100}, {0x7c, 0x0, 0x0, 0xfffffffe}, {0x6, 0x8}]}) (async)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
write$6lowpan_control(r4, &(0x7f0000000140)='disconnect aa:aa:aa:aa:aa:11 1', 0x16) (async)
write$dsp(r3, &(0x7f0000000200)="2eec4f600c15d9ad9e83224620d5356572bd1d4647b826d57d839d38e578a9a9b3b73c484b539f2181158c2bd5074d2145de3f3b91646c024fb744c7a3d51cc6e235536bda5037bb50d5ce282d4f84684e6272d6bafd3bafa4f14a18d4384d9220084803a79f5b7e147c3f340e44bbe7662f33671e122225ff9a527f4a896ccd31d950edc13f71e5bb8f5ddc63cef78fdd9db45875675f93223fc40293d9e378ebf030f37c3ac29a98b3f804aa71af883b649ac221418d0045c46d285422db9c912be2e9dfaa12d4c923bfdeb32e6723", 0xfffffe8d) (async)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000300)=0x3) (async)

2m22.070697957s ago: executing program 34 (id=1402):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300, 0x0, 0x8000}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0)
r2 = getpgrp(0xffffffffffffffff)
syz_open_procfs(r2, &(0x7f0000000040)='oom_score\x00')
r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=[{0x80, 0x0, 0x0, 0x100}, {0x7c, 0x0, 0x0, 0xfffffffe}, {0x6, 0x8}]})
r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r4, &(0x7f0000000140)='disconnect aa:aa:aa:aa:aa:11 1', 0x16)
write$dsp(r3, &(0x7f0000000200)="2eec4f600c15d9ad9e83224620d5356572bd1d4647b826d57d839d38e578a9a9b3b73c484b539f2181158c2bd5074d2145de3f3b91646c024fb744c7a3d51cc6e235536bda5037bb50d5ce282d4f84684e6272d6bafd3bafa4f14a18d4384d9220084803a79f5b7e147c3f340e44bbe7662f33671e122225ff9a527f4a896ccd31d950edc13f71e5bb8f5ddc63cef78fdd9db45875675f93223fc40293d9e378ebf030f37c3ac29a98b3f804aa71af883b649ac221418d0045c46d285422db9c912be2e9dfaa12d4c923bfdeb32e6723", 0xfffffe8d)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000300)=0x3)
socket$netlink(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r0, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300, 0x0, 0x8000}, 0x0) (async)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
sendmmsg$alg(r1, &(0x7f0000000140), 0x4924b68, 0x0) (async)
getpgrp(0xffffffffffffffff) (async)
syz_open_procfs(r2, &(0x7f0000000040)='oom_score\x00') (async)
openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0) (async)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=[{0x80, 0x0, 0x0, 0x100}, {0x7c, 0x0, 0x0, 0xfffffffe}, {0x6, 0x8}]}) (async)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
write$6lowpan_control(r4, &(0x7f0000000140)='disconnect aa:aa:aa:aa:aa:11 1', 0x16) (async)
write$dsp(r3, &(0x7f0000000200)="2eec4f600c15d9ad9e83224620d5356572bd1d4647b826d57d839d38e578a9a9b3b73c484b539f2181158c2bd5074d2145de3f3b91646c024fb744c7a3d51cc6e235536bda5037bb50d5ce282d4f84684e6272d6bafd3bafa4f14a18d4384d9220084803a79f5b7e147c3f340e44bbe7662f33671e122225ff9a527f4a896ccd31d950edc13f71e5bb8f5ddc63cef78fdd9db45875675f93223fc40293d9e378ebf030f37c3ac29a98b3f804aa71af883b649ac221418d0045c46d285422db9c912be2e9dfaa12d4c923bfdeb32e6723", 0xfffffe8d) (async)
ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000300)=0x3) (async)

10.995886841s ago: executing program 0 (id=1909):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=0x0], 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000140)={r0, &(0x7f00000002c0)="7915ad9def89335fb1b5515c63d1ca6c4b6c9d214c2e65ee2ef9848094f7620a6616d7b1c3ea987755db65046c461368426962909c74dca03020ff3ff692fb186c3fcaef236c7b00459972228778ff735a6d9f713735a6b537421cee07ae5d0bb88678eb375f5bfe", &(0x7f0000000340)=""/174, 0x190afee0caf75a8}, 0x20)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x8c}}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x40002, r0, 0x4}, 0x38)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000c7ce360863078120abd001e402010902120001000000000904000000ff", @ANYRESDEC=0x0], 0x0)

7.77146509s ago: executing program 0 (id=1917):
socket(0x10, 0x803, 0x0)
socket$inet6(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
io_uring_setup(0x2d58, &(0x7f0000000380)={0x0, 0x62cc, 0x400, 0x8000002, 0x34b})
r0 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10)
r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_emit_vhci(&(0x7f0000000080)=ANY=[], 0xe)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
shmat(0x0, &(0x7f0000ff8000/0x5000)=nil, 0x7000)
shmctl$IPC_RMID(0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004080000000000000002000000200000000000000000000009030000000000000000000004"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a2, &(0x7f0000000000)='bridge0\x00')
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
setuid(0xee01)
openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000002640), 0x1, 0x0)
ioctl$mixer_OSS_GETVERSION(r1, 0x80086303, &(0x7f0000000000))
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)

7.724770036s ago: executing program 6 (id=1918):
r0 = socket$netlink(0x10, 0x3, 0x0) (async)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r2 = syz_io_uring_setup(0x497, &(0x7f0000002180)={0x0, 0x787f, 0x1, 0x4, 0x286}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000000c0)=0x20) (async)
io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3}]}, 0x1, 0x1}, 0x1) (async, rerun: 32)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async, rerun: 32)
ioctl$BTRFS_IOC_QGROUP_CREATE(r1, 0x4010942a, &(0x7f0000000140)={0x0, 0xfffffffffffffffe})
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r1, 0x0, 0x0, 0x0, 0x200, 0x1, {0x1}}) (async)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0)
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) (async)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="180000005200010000000000000000000a000400f0e00000"], 0x18}}, 0x4040)

7.595393142s ago: executing program 6 (id=1919):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004300000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=<r1=>0x0)
prlimit64(r1, 0x4, 0x0, &(0x7f0000000300))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0)
r4 = openat$cgroup_ro(r3, &(0x7f0000000240)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2, r4}, 0x3a)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000000)=@v1={0x0, @aes256, 0x10, @auto="c6e544f49561f95a"})
read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x0)
mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f000001b700)={0x2020}, 0x2020)
syz_fuse_handle_req(r5, &(0x7f00000041c0)="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", 0x2000, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$phonet_pipe(0x23, 0x5, 0x2)
setsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, 0x0, 0x0)
socket(0x2, 0x80805, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r7 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r7, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtaction={0xe4, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0xd0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2, 0xffffffffffffffff}, 0x2, r8}}]}, {0x4, 0xa}, {0xc}, {0xc}}}, @m_bpf={0x7c, 0x10, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x7000000, 0x0, 0x6, 0x8, 0x400000}}, @TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x8, 0x1, 0x6, 0x4}}, @TCA_ACT_BPF_FD={0x8}]}, {0xc, 0x6, "dba10b29acdef8b5"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xe4}}, 0x0)

6.725350827s ago: executing program 0 (id=1921):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c)
setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080)={0x8}, 0x4)
sendto$inet6(r0, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0xa000000, @loopback, 0xffffffff}, 0x1c)

6.295093929s ago: executing program 4 (id=1923):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe)
connect$vsock_stream(r0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
mkdir(0xffffffffffffffff, 0x15)
chdir(&(0x7f0000000300)='./file0\x00')
socket$xdp(0x2c, 0x3, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
modify_ldt$write(0x1, &(0x7f0000000200)={0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c00000048a6540319e0b58500000000020000000900030073797a32000002000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0000802800018023"], 0xe8}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0xfeffffff00000000, 0x1ff0000aa}, @private2}}}}}}, 0x0)

6.113865011s ago: executing program 6 (id=1924):
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = syz_io_uring_setup(0x550a, &(0x7f0000000500)={0x0, 0x8008000, 0x100, 0x0, 0xfffffffd}, &(0x7f00000001c0), &(0x7f00000000c0))
io_uring_register$IORING_REGISTER_FILES2(r0, 0xd, &(0x7f0000000180)={0x200000000000001f, 0x0, 0x0, &(0x7f0000000200), &(0x7f0000000080)=[0x4, 0x9]}, 0x20)
r1 = socket$kcm(0x2, 0x5, 0x84)
sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2000)
r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000080), 0x6)
close_range(r3, 0xffffffffffffffff, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000280)={{0x1, 0x4}, 'port1\x00', 0x2c, 0x83154753ea8f4ea8, 0x4, 0x9, 0x2, 0x8, 0x3ff, 0x0, 0x1, 0x8})
sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080)
sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}, 0x240448c4)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0)
sendfile(r6, r6, 0x0, 0x9)

5.163231467s ago: executing program 5 (id=1926):
r0 = socket$igmp6(0xa, 0x3, 0x2)
sendmmsg$inet6(r0, &(0x7f0000003080)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0xf5}}, {{&(0x7f0000000180)={0xa, 0x100, 0x0, @mcast1}, 0x1c, 0x0}}], 0x2, 0x0)

4.725885567s ago: executing program 6 (id=1927):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0)
sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x204010}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x100, 0x70bd6d, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x800)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x6}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x81}, 0x20004840)
syz_io_uring_setup(0x4f59, &(0x7f0000000100)={0x0, 0x22e1, 0x800, 0x0, 0xc3}, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000200))
syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x2, 0x0, 0xce, 0x0, 0x1})
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0})
r6 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0)
sendfile(r6, r7, 0x0, 0x4000000000010046)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r8, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r8, 0x0)
r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r5, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xf, 0x0, r7, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./file0\x00', r8, 0x400, 0x1, {0x0, r9}})

4.693141671s ago: executing program 0 (id=1928):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
listen(r4, 0x1ff)
r5 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x800, 0xffffffff, 0x199}, &(0x7f00000003c0)=<r6=>0x0, &(0x7f0000000200)=<r7=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4)
syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r5, 0x8008a8, 0x0, 0x5, 0x0, 0x0)

4.692852304s ago: executing program 5 (id=1929):
mkdir(&(0x7f0000000600)='./file0\x00', 0xe8)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x80800)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec68ba339b8fd15e58983b3da942"], 0xb0)
getresuid(&(0x7f0000000000), &(0x7f0000000480), &(0x7f00000004c0)=<r3=>0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',privport,access=', @ANYRESDEC=r3])
lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=@known='user.syz\x00')

4.67960513s ago: executing program 4 (id=1930):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="14000000040000000800000007ffffec00"], 0x50)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x9)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004020000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(r8, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0x0, 0x1}, {0x61, 0x800}, @rumble={0x7, 0x5}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0xd4, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfffc}, {}, {0x4, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0xa4, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_KEYS={0x8, 0x1, 0x107e6}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x2000}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_EMATCHES={0x60, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf}}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x998, 0x3, 0x4}, {0x6189, 0x81, 0x100, 0x9}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x4}, {0x2, 0x1, 0x3}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0xe7, 0x2, 0x2}, {0x800, 0x4, 0x2, "14562646"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_FLOW_MASK={0x8, 0x6, 0xfffffff7}, @TCA_FLOW_XOR={0x8}, @TCA_FLOW_RSHIFT={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xb7c}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0xc004884}, 0x0)

4.565382775s ago: executing program 5 (id=1931):
r0 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x34, 0x10, 0x503, 0xff7f, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0)

4.407543411s ago: executing program 6 (id=1932):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="110000ec04003e09560400000009000000000000ec142a4af8389958c3fa4082be483b3ad5d0cfa23f645797a3e329d2f8cb3ad5cc861e4637f51eb6f3", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000200"/28], 0x50)
r0 = syz_open_dev$usbfs(0x0, 0x1ff, 0x440401)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
timerfd_create(0x9, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0100000008000000050000000500000041000000", @ANYRES32=r0, @ANYBLOB="03000000000000000000000000000000000000005e58d570525db75aabe3513e58df6b610860d1a3be074995cac02e4328e01675a10202c488e188e47f974425eb7328b1f69306deb560bb926d299ad0afe7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)="adf64f16963b1ee3ee7ce214ee8b784e390d586ac7c1c9f53b38b0ab7e2b9d3d781dd56b7206f5adb15d08c50b3c30019cc3e0cd2a254a4baeb8e5d587edd8c1e97b01e3dc28b8df72edfbd943e864f7856541103dc07541eb22c94156a8180c1782fe61520fd9cfab90c0ef4f0ba0911805ef6adcba69ae114b5c4dc3e62e83759f87836c56dc87f24b31f44227a549264be419e9d1b774c0ef8ccdab0974c016f4cad1fdc4f8b2e36b945dce5324c238d4effdfab8f0aa03cdcc9cea8852a521db4aa66dddc6fbadef6ccc49bbe342c90c6e0f8a00fa11cc2636be4920687ff3f93bf8eb70f615", &(0x7f00000004c0)="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", 0x20000402, r1}, 0x38)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, &(0x7f0000000340), &(0x7f0000000000)=""/27}, 0x20)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x10048000)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x12002, 0x0)
r4 = socket(0x10, 0x3, 0x0)
sendto$inet6(r4, &(0x7f0000000100)="c10e000018001f06b9409b0dffff110d0207be040205060506100a044300040018000000fac8388827a685a168d9a44604094565360c648dcaaf6c26c291214549932fde4a460c89b6ec0cff3959547f509058ba86c902fc3a10004a320c0400160012000a00000000000000000000080756ede4ccbe5880", 0xec1, 0x0, 0x0, 0x9e5e111c47e3504f)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x3)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000040), 0x6)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff})
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvfrom$unix(r6, &(0x7f0000000000)=""/30, 0x1e, 0x40000000, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000eafa7240936901b0293df400100109021b000124a800800904000001030000000905", @ANYRES32], 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

3.529315645s ago: executing program 4 (id=1934):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="3504000040000511d25a35400c00020001ffe42037153e371d04018006041000450000002a560000e7", 0x29}, {&(0x7f0000000180)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d2103e394ac9f8e51bc893635b4e5f760d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc2261c238a5159ea98db9c00aeef644ae98a8cb8da3ff3b7ba14d7971910b559623af829524d83bf19f18628464076329140e0203fc75859185ccd019302afb784e41e16cf2d31db7aba83d0f500ce25fc2d7f524a04cfaa0015ea8a297477a5517f8a4ac167083a321c78070974afc897fb738fbcfeac169844fd7fc11fff502c02b7607007ead2007a18006a6ca8dc2d0119f01d7083c2ab5760ac7b24d7bf26b9030cf455a08385f9e662cbe0c3ca6e6fd4ac0c8566c0fca986c68ef7016a11d3e44253b6f2d07d53505ed58b8ad410f89425046321b4a9b27b5e777bdfa0ebf7abf3d91b319129c48853d8e5cbc4a2c5c560b007eafe03e3332f6017f3164c7f602180aad23dfe5e770fe8855f45925e342b7dfd7ddaa68b65065465cdf4d5b8d995d6e6a7042ebea3d139c6a616232eb4efd1a50d0e6db3188a8e98375fda2a7ebd4cd59b9ea626c13685b05e6cf4d484e32869fd7c7167dbfa48b1529e5dd5f5a02673ccc7dbedfd75e34f3f9eb3c7833734a59acada6dd2ff364475e03f2219deedb5d0c941f2177a23167adcc5a15f4e5441ed537f26a1620df057aeb55b2ad3a00a77e23d304ed6034dd5ec9b2cfe777ca21ec4f48abdafa0d66a78d653068ef871bdc6598fd32edcba60c675a1e8f4e81e83f73414c179bfb7f329d71fe6e291fb2eaa59b9636cb6a74d0deb46a18c77f37abf0894a7083e0e4c237ff7c24872668ac40e307569a975b2765af8d3268d11b473d5d7544edd1ed0e507c119e128daf7e75c349c9b3de603580d52a6c118acf924216130364bfab8d59969e4dbee0a9208adb7bfa855556be06a666334a0612e4ff3fc6f4ddb9a0c209301081f34824496480d688ae9bd0c3c28ea8ecfe01a2b86dcb3750686a89891d9abf0d584c854b4bc6096293fbc8707312f424996361ef9261ef3ba7cd2ddffb0e3c81e6b962d680e02f7a672dc26476c256459e2c2ed94b8461b56ff944edc1a8cd93d0258fcc2f094615c152be66884103af11ff46315cdc9f00"/1031, 0x407}], 0x2}, 0x140458d0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x292e, r2}, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
link(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x24000, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))

3.355555217s ago: executing program 5 (id=1935):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
prlimit64(0x0, 0x7, &(0x7f0000001040)={0x3, 0x10}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x4, 0x1, 0x3, 0x8, 0x9, 0x8004}, {0x4, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

3.354988069s ago: executing program 7 (id=1936):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000580))
ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x50, 0x8, 0x0, 0xfffffff8}, {0x6}]})
write$ppp(r2, &(0x7f0000000300)="4daf8a728ed3a61d5cd180603db71c969b3af760625b5ec8d4f7755ecb7d515591f0655abf7ad5ae159acc1d4f2a443b2d759323b3a99f861b5a78e39a84122243d50d1bd5ceeff52374e9c8744c9cd918d158929a0e739965c017bccb388dda77f845d05278c0efb56dea09db8928212f8256200e164c8a2a374a1bdc81f6a400184eec0264e207ff8fed94097e91686bb2a2ff9a2a11f1c1d70aed7cdce4dc4a8645375600"/179, 0xb3)
r3 = syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0xffffff45, 0x0, 0x0, 0x8fc0, 0x65f40})
bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @none, 0x3d}, 0xa)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES64=r4, @ANYBLOB="040000000000000008003f006563060008001b"], 0x30}}, 0x0)
connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, @none, 0x1}, 0xa)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async)
socket$inet_mptcp(0x2, 0x1, 0x106) (async)
setsockopt$inet_opts(r0, 0x0, 0x0, 0x0, 0x0) (async)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) (async)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) (async)
ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000580)) (async)
ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x50, 0x8, 0x0, 0xfffffff8}, {0x6}]}) (async)
write$ppp(r2, &(0x7f0000000300)="4daf8a728ed3a61d5cd180603db71c969b3af760625b5ec8d4f7755ecb7d515591f0655abf7ad5ae159acc1d4f2a443b2d759323b3a99f861b5a78e39a84122243d50d1bd5ceeff52374e9c8744c9cd918d158929a0e739965c017bccb388dda77f845d05278c0efb56dea09db8928212f8256200e164c8a2a374a1bdc81f6a400184eec0264e207ff8fed94097e91686bb2a2ff9a2a11f1c1d70aed7cdce4dc4a8645375600"/179, 0xb3) (async)
syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) (async)
ioctl$VIDIOC_S_HW_FREQ_SEEK(r3, 0x40305652, &(0x7f00000000c0)={0x0, 0x1, 0xffffff45, 0x0, 0x0, 0x8fc0, 0x65f40}) (async)
bind$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, @none, 0x3d}, 0xa) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES64=r4, @ANYBLOB="040000000000000008003f006563060008001b"], 0x30}}, 0x0) (async)
connect$bt_rfcomm(r1, &(0x7f00000000c0)={0x1f, @none, 0x1}, 0xa) (async)

3.036269414s ago: executing program 5 (id=1937):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40600000000000073113200000000008510000002000000b7000000000000009500c200"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001200)={{{@in=@rand_addr=0x64010100, @in6=@mcast1, 0x4e23, 0x8000, 0x4e1d, 0x3, 0x2, 0x20, 0x20, 0x17}, {0x80000000, 0x6, 0x8, 0x3, 0xc, 0x81, 0xff, 0x7}, {0x7, 0x4d, 0x3, 0x4}, 0x85, 0xfffffffd, 0x1, 0x0, 0x3}, {{@in6=@empty, 0x4d6, 0x33}, 0x2, @in6=@mcast1, 0xfffffffe, 0x4, 0x0, 0x0, 0x5, 0x8, 0x1000000}}, 0xe8)
syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, 0x0, 0x0)
r1 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000240)="03", 0x1, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000180)={r1, r2, r2}, &(0x7f00000000c0)=""/51, 0x33, &(0x7f0000000340)={&(0x7f0000000140)={'md5\x00'}})
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffff, 0x3}, 0x6)
r4 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r4, 0x10d, 0xb6, &(0x7f0000000140), &(0x7f0000000080)=0x4)
write$binfmt_misc(r3, &(0x7f0000001280), 0x6)

2.671536103s ago: executing program 5 (id=1938):
r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r3=>0x0})
r4 = socket$alg(0x26, 0x5, 0x0)
accept$alg(r4, 0x0, 0x0)
sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@bridge_dellink={0x34, 0x11, 0x5, 0x40000008, 0xffffffff, {0x7, 0x0, 0x0, r3, 0x10}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x2, 0x0, 0x1, [{0x8, 0x14, 0x0, 0x0, 0xd}]}}]}]}, 0x34}}, 0x4000)
r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ff199610b90661408801010203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r5, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x2a, @string={0x2a, 0x3, "22e5e5a617dce5dd9fb7b9f480ed31ebd022fadfe2a932ddc27c26a6dc60b3890a635da550e36242"}}}, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205649, &(0x7f0000000100)={0x98f90a, 0x300, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90a, 0x8000, '\x00', @ptr=0x20002000}})
socket$nl_netfilter(0x10, 0x3, 0xc)

2.551777005s ago: executing program 4 (id=1939):
r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
r2 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x6}]}}]}, 0x38}}, 0x50)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d0fc60fde3030303030303030303009b030303030303130303030302c757365725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r0]) (async)
read$FUSE(r1, &(0x7f000000c3c0)={0x2020}, 0x2020) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 64)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x60700, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async, rerun: 64)
r4 = getpid() (rerun: 64)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) (async)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async, rerun: 32)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001580), 0x103000, 0x0) (rerun: 32)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async)
r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0)
write$tcp_mem(r7, &(0x7f0000000280)={0x51, 0x2d, 0x5, 0x3a, 0x6, 0x2c}, 0x48) (async)
r8 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0xfffffffffffffffd)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000000)) (async)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) (async)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) (async)
r9 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x1489c, &(0x7f0000000580)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="60fbea26f33fd3f28c3bcd69593ab8cfac9f72a3d1a8961ed00b76f27cbf542c63cc0e048553c349086997fab04e95050b0e938fdbb53a977a47d6a4bb10a830a1c71306ad509e74d62cc27efdd8e3d19193fc2a40fda019ca559a2c22811450f2fcab0a71a7c7294c12fbe20551074dea0fbe01891294c9cb5157dcab2456b4e2e4a45a9b7c70b73f2feccdeac2a42c3a", @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000002,\x00']) (async)
sched_setaffinity(r4, 0x8, &(0x7f0000000740)=0x18c4c058) (async, rerun: 32)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) (rerun: 32)
syz_io_uring_setup(0x2a20, &(0x7f0000000080)={0x0, 0x0, 0x40, 0x0, 0x10000}, 0x0, &(0x7f00000002c0)) (async)
syz_open_dev$tty1(0xc, 0x4, 0x1)

2.387655997s ago: executing program 7 (id=1940):
r0 = socket$inet(0x2, 0x3, 0x6f)
setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000002c0)='team0\x00', 0x10)
sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0xff97, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000f00), 0x8800, 0x0)
read(r1, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000080)={<r2=>0x0, 0x3, 0x70}, &(0x7f00000000c0)=0xc)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000100)={r2, 0x0, 0x29}, 0x8)

2.387377374s ago: executing program 4 (id=1941):
prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20)
sendto$llc(0xffffffffffffffff, &(0x7f0000000400)="54269e88a6f23287aaccd3f3dcb01fdcd0b520c26de48a58a6a01a2e5afc4b431f57dbcd59ae7a3d1b98ab0eaea39338d6c29ea6e56d40d0c87be4ccbbb17d9d3f1264536bb45c1779cdbdea253eb9812231f1fa203583a2cc3d571086113411fa1d0a5ea58602d0635cb8b1f4bfca461d168dfed29ccedbd5fb19fbe235ebea0e18bd2a120909a19894f394fc99ada5f3e55fa5da5146e7f83cd06be965fe91eacd8699b6e855c62b185a88ade7e77520b0f8ec321d3a4304bd53998af0acb47215c5a7e406c0acfd56e8443852fde7e9", 0xd1, 0x44012, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
eventfd2(0x5, 0x80000)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="0f01ca0f08c4e2cd8c5e00c4e121d9a2f7ffffff3e660f3830570b0f00950f0000000f017a000f08f30f59a1580000000f2297", 0x33}], 0x1, 0x42, 0x0, 0x0)
r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18)
syz_emit_ethernet(0xbe, &(0x7f0000000500)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @broadcast, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e2560000000000000001"}, {0x0, 0x9, "020007651442eb"}, {0x1, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x7, 0x10, '\x00'/14}, {0x0, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x0, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "7f36c525"}]}]}}}}}}}, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0xc, 0xff, 0xff})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2.351506204s ago: executing program 7 (id=1942):
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6d1cb49ada2c127b, 0x59032, 0xffffffffffffffff, 0x0) (async)
set_mempolicy(0x0, &(0x7f0000000080)=0x4716, 0x4000000001f) (async)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) (async)
r0 = socket(0xa, 0x3, 0x3a) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r2, &(0x7f0000000200)={0x1f, 0x1f, @fixed}, 0xe) (async)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r3, 0x10d, 0xa6, &(0x7f0000000000), &(0x7f0000000240)=0x4) (async)
syz_usb_connect(0x0, 0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100002c464708c2153b003e66010203010902220001000000000904000001e3fe11000905000000000000000705936b90"], 0x0) (async)
syz_usbip_server_init(0x5) (async)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) (async)
setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000400)={0x2, 0x1, 0x10, 0x0, 0x2}, 0xc) (async)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0)
close(r4) (async)
ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0300002000"}) (async)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000100)={0xf54000, 0x3447504d, 0x6358, 0x0, 0x1, @stepwise={{0xfffffffa, 0x6}, {0x95, 0x1}, {0x10000, 0x6}}})

2.270983977s ago: executing program 7 (id=1943):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0xd, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
recvfrom$x25(0xffffffffffffffff, &(0x7f0000000540)=""/168, 0xa8, 0x203, &(0x7f00000003c0)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000040)={0x39d0, 0xc, 0x8001, 0xffffffffffffffff, 0x8000})

2.156150829s ago: executing program 4 (id=1944):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="14000000040000000800000007ffffec00"], 0x50)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x9)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x87f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8080}, 0x40020)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000004020000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r8 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(r8, 0x40304580, &(0x7f0000000b40)={0x52, 0x1, 0x1, {0x0, 0x1}, {0x61, 0x800}, @rumble={0x7, 0x5}})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtfilter={0xd4, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfffc}, {}, {0x4, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0xa4, 0x2, [@TCA_FLOW_ADDEND={0x8, 0x5, 0x5}, @TCA_FLOW_KEYS={0x8, 0x1, 0x107e6}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x2000}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_EMATCHES={0x60, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xf}}, @TCA_EMATCH_TREE_LIST={0x44, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x998, 0x3, 0x4}, {0x6189, 0x81, 0x100, 0x9}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x4}, {0x2, 0x1, 0x3}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0xe7, 0x2, 0x2}, {0x800, 0x4, 0x2, "14562646"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}]}, @TCA_FLOW_MASK={0x8, 0x6, 0xfffffff7}, @TCA_FLOW_XOR={0x8}, @TCA_FLOW_RSHIFT={0x8}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xb7c}]}}]}, 0xd4}, 0x1, 0x0, 0x0, 0xc004884}, 0x0)

1.904838119s ago: executing program 0 (id=1945):
epoll_create1(0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x35a4d706)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x0, 0x3000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

1.548947246s ago: executing program 7 (id=1946):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000300)="03f6f19a0d084c750059847e72aea4c1", 0x10)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000340)=0x5c7, 0x4)
syz_emit_ethernet(0x52, &(0x7f0000000440)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x14}, {[@lsrr={0x83, 0x7, 0xd5, [@multicast2]}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x0, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)
r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000080)={0x1, 0x5, 0x8, &(0x7f0000000040)={0x4, "33f252548f71b306908b5b7a869aadfd2bbbdf78abed14277565291bf153806ad5"}})

1.455409175s ago: executing program 7 (id=1947):
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x4, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x810, &(0x7f0000000000)={0xa, 0x5e20, 0x0, @mcast1}, 0x1c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0)
r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, <r5=>r1, {0xfbee, 0xe5f8}}, './file0\x00'})
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r5, &(0x7f0000000240)="d46671aaacc8b307787d401acc0fbf7541c42b1d9b42f5bc43429d611f8bb4ede023df86a90621965d054f38a11b7dba3cd7bf91e46108b035341fb86da4e9cbd0c12359867ca1c11d043fbeb347b4da1a428c62346965708f9b19326533ee1ff7bc44797469bd7ccba83e79c6966e7b47b266afa35032838bad17cff38d816a6d68fdd02e66e5d1c5f415e61675c1ad", &(0x7f0000000100)}, 0x20)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r7 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0xe133, 0x10100}, &(0x7f0000000300)=<r8=>0x0, &(0x7f0000000100)=<r9=>0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r7, @ANYRES8=r1], 0x48)
r10 = syz_init_net_socket$ax25(0x3, 0x3, 0x7)
setsockopt$ax25_int(r10, 0x101, 0xc, &(0x7f0000000080)=0x10000, 0x4)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff)
syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))
sendmsg$NBD_CMD_DISCONNECT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r12, 0x1, 0x70bd2b, 0x8, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x20000004)
connect$ax25(r10, &(0x7f0000000100)={{0x3, @bcast, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48)
syz_io_uring_submit(r8, r9, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
io_uring_enter(r7, 0x7a98, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'netdevsim0\x00', <r13=>0x0})
r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000300400095"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd62, @void, @value}, 0x94)
r15 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x34, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r13}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x8}, @IFLA_XDP_FD={0x8, 0x1, r14}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x88000}, 0x0)
ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000040)={0x3, 0x0, [{0x2, 0xffffff00, 0xe46, 0x7bc, 0xff}, {0xc84201344975a19e, 0xbf7c, 0x10, 0x7, 0x4}, {0x80000001, 0x6, 0x101, 0x400, 0x5}]})

1.32857082s ago: executing program 6 (id=1948):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES16], 0x48)
socket$inet_mptcp(0x2, 0x1, 0x106)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8)
setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x4, &(0x7f0000000040)=0x3e, 0x4)
ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0)
getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, &(0x7f0000000140)=0xfffffffffffffe93)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r4 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
fstat(r4, 0x0)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000240)=0x800, 0x4)
openat$ppp(0xffffffffffffff9c, 0x0, 0x5e1702, 0x0)
bind$xdp(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f00000001c0)=0x4f1a, 0x4)
setsockopt$sock_int(r5, 0x1, 0x35, 0x0, 0x0)
syz_emit_ethernet(0x4e, &(0x7f00000002c0)=ANY=[@ANYRES32=r0, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYRES8=r4], 0x0)

0s ago: executing program 0 (id=1949):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1)
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="3504000040000511d25a35400c00020001ffe42037153e371d04018006041000450000002a560000e7", 0x29}, {&(0x7f0000000180)="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"/1031, 0x407}], 0x2}, 0x140458d0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000000)={0x292e, r2}, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0x0)
link(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000700), 0x24000, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))

kernel console output (not intermixed with test programs):

2*256kB (UME) 8*512kB (UM) 7*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3905056kB
[  531.310682][T10446] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  531.320247][T10446] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  531.329543][T10446] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  531.339245][T10446] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  531.349006][T10446] 29641 total pagecache pages
[  531.353777][T10446] 0 pages in swap cache
[  531.357935][T10446] Free swap  = 124876kB
[  531.362073][T10446] Total swap = 124996kB
[  531.366424][T10446] 2097051 pages RAM
[  531.370213][T10446] 0 pages HighMem/MovableOnly
[  531.374896][T10446] 427449 pages reserved
[  531.379027][T10446] 0 pages cma reserved
[  533.191594][T10465] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1298'.
[  534.078916][T10471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1299'.
[  534.122832][T10471] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1299'.
[  534.702756][ T5851] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  534.839803][T10487] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.1303'.
[  534.892712][ T5851] usb 7-1: unable to get BOS descriptor or descriptor too short
[  534.941239][ T5851] usb 7-1: config 1 interface 1 has no altsetting 0
[  534.962770][ T5851] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  534.975078][ T5851] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.998244][ T5851] usb 7-1: Product: syz
[  535.012070][ T5851] usb 7-1: Manufacturer: syz
[  535.064028][ T5851] usb 7-1: SerialNumber: syz
[  535.392843][   T82] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  535.644241][   T82] usb 3-1: config 0 has an invalid interface number: 91 but max is 0
[  535.682897][   T82] usb 3-1: config 0 has an invalid interface number: 157 but max is 0
[  535.731939][   T82] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  535.780835][   T82] usb 3-1: config 0 has no interface number 0
[  535.791070][   T82] usb 3-1: config 0 has no interface number 1
[  535.801455][   T82] usb 3-1: config 0 interface 91 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  535.822838][   T82] usb 3-1: too many endpoints for config 0 interface 157 altsetting 181: 132, using maximum allowed: 30
[  535.899878][   T82] usb 3-1: config 0 interface 157 altsetting 181 has 1 endpoint descriptor, different from the interface descriptor's value: 132
[  535.947207][   T82] usb 3-1: config 0 interface 91 has no altsetting 0
[  535.984395][   T82] usb 3-1: config 0 interface 157 has no altsetting 0
[  536.016552][   T82] usb 3-1: New USB device found, idVendor=0b05, idProduct=4200, bcdDevice=de.08
[  536.050625][   T82] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  536.109219][   T82] usb 3-1: Product: syz
[  536.118540][   T82] usb 3-1: Manufacturer: 﫪軓㵹愱謼┙葎뿒鷕䮆梃㒔ฬ਱띃譣雊䋉
[  536.158489][   T82] usb 3-1: SerialNumber: syz
[  536.192271][   T82] usb 3-1: config 0 descriptor??
[  537.181098][   T82] usb 3-1: USB disconnect, device number 30
[  537.231894][ T5851] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  537.291099][ T5851] usb 7-1: USB disconnect, device number 9
[  538.004028][T10514] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1311'.
[  539.228178][    T9] IPVS: starting estimator thread 0...
[  539.241663][T10524] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  539.363117][T10533] IPVS: using max 28 ests per chain, 67200 per kthread
[  539.769446][T10537] xt_l2tp: v2 sid > 0xffff: 262144
[  540.793734][T10555] FAULT_INJECTION: forcing a failure.
[  540.793734][T10555] name failslab, interval 1, probability 0, space 0, times 0
[  541.472323][T10556] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1324'.
[  541.481642][T10555] CPU: 1 UID: 0 PID: 10555 Comm: syz.2.1325 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  541.481666][T10555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  541.481676][T10555] Call Trace:
[  541.481682][T10555]  <TASK>
[  541.481689][T10555]  dump_stack_lvl+0x241/0x360
[  541.481716][T10555]  ? __pfx_dump_stack_lvl+0x10/0x10
[  541.481736][T10555]  ? __pfx__printk+0x10/0x10
[  541.481754][T10555]  ? __lock_acquire+0xad5/0xd80
[  541.481783][T10555]  should_fail_ex+0x424/0x570
[  541.481807][T10555]  should_failslab+0xac/0x100
[  541.481833][T10555]  kmem_cache_alloc_noprof+0x78/0x390
[  541.481857][T10555]  ? skb_clone+0x20c/0x390
[  541.481876][T10555]  skb_clone+0x20c/0x390
[  541.481895][T10555]  __netlink_deliver_tap+0x3c4/0x7f0
[  541.481920][T10555]  ? netlink_deliver_tap+0x2e/0x1b0
[  541.481935][T10555]  netlink_deliver_tap+0x19d/0x1b0
[  541.481953][T10555]  netlink_unicast+0x7c6/0x9a0
[  541.481983][T10555]  ? __pfx_netlink_unicast+0x10/0x10
[  541.482005][T10555]  ? __virt_addr_valid+0x45f/0x530
[  541.482023][T10555]  ? __phys_addr_symbol+0x2f/0x70
[  541.482045][T10555]  ? __check_object_size+0x478/0x720
[  541.482068][T10555]  netlink_sendmsg+0x8e8/0xce0
[  541.482091][T10555]  ? __pfx_netlink_sendmsg+0x10/0x10
[  541.482114][T10555]  ? __pfx_netlink_sendmsg+0x10/0x10
[  541.482129][T10555]  __sock_sendmsg+0x221/0x270
[  541.482150][T10555]  ____sys_sendmsg+0x53c/0x870
[  541.482179][T10555]  ? __pfx_____sys_sendmsg+0x10/0x10
[  541.482201][T10555]  ? __fget_files+0x2a/0x420
[  541.482221][T10555]  ? __fget_files+0x2a/0x420
[  541.482243][T10555]  __sys_sendmsg+0x271/0x360
[  541.482269][T10555]  ? __pfx___sys_sendmsg+0x10/0x10
[  541.482322][T10555]  ? do_syscall_64+0xb6/0x230
[  541.482351][T10555]  do_syscall_64+0xf3/0x230
[  541.482369][T10555]  ? clear_bhb_loop+0x45/0xa0
[  541.482387][T10555]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  541.482402][T10555] RIP: 0033:0x7f4e2f18d169
[  541.482417][T10555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  541.482431][T10555] RSP: 002b:00007f4e2ffe9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  541.482450][T10555] RAX: ffffffffffffffda RBX: 00007f4e2f3a5fa0 RCX: 00007f4e2f18d169
[  541.482462][T10555] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[  541.482472][T10555] RBP: 00007f4e2ffe9090 R08: 0000000000000000 R09: 0000000000000000
[  541.482482][T10555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  541.482492][T10555] R13: 0000000000000000 R14: 00007f4e2f3a5fa0 R15: 00007ffcaf1ef868
[  541.482515][T10555]  </TASK>
[  541.756780][   T30] audit: type=1400 audit(1742997794.263:226): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="^" requested=w pid=10558 comm="syz.6.1327" dest=20003
[  541.833004][   T81] wlan1: Trigger new scan to find an IBSS to join
[  541.854498][T10565] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1326'.
[  542.103776][ T7334] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  542.612897][ T7334] usb 3-1: Using ep0 maxpacket: 16
[  542.620679][ T7334] usb 3-1: too many configurations: 201, using maximum allowed: 8
[  542.639150][ T7334] usb 3-1: unable to read config index 0 descriptor/start: -61
[  542.652869][ T7334] usb 3-1: can't read configurations, error -61
[  542.832763][ T7334] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[  543.770275][    T9] usb 7-1: new full-speed USB device number 10 using dummy_hcd
[  543.794870][ T7334] usb 3-1: Using ep0 maxpacket: 16
[  543.801134][ T7334] usb 3-1: too many configurations: 201, using maximum allowed: 8
[  543.810556][ T7334] usb 3-1: unable to read config index 0 descriptor/start: -61
[  543.822928][ T7334] usb 3-1: can't read configurations, error -61
[  543.829614][ T7334] usb usb3-port1: attempt power cycle
[  543.945416][    T9] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  543.964790][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  543.979492][    T9] usb 7-1: Product: syz
[  543.987442][    T9] usb 7-1: Manufacturer: syz
[  543.992597][    T9] usb 7-1: SerialNumber: syz
[  544.001320][    T9] usb 7-1: config 0 descriptor??
[  544.159342][    T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  544.205220][    T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  544.215721][ T7334] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[  544.739001][    T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19)
[  544.756725][ T7334] usb 3-1: Using ep0 maxpacket: 16
[  544.764641][ T7334] usb 3-1: too many configurations: 201, using maximum allowed: 8
[  545.500061][ T7334] usb 3-1: unable to read config index 0 descriptor/start: -71
[  545.537856][ T7334] usb 3-1: can't read configurations, error -71
[  545.629606][T10603] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  545.671786][T10603] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  545.767002][ T5999] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.817216][T10606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1340'.
[  545.832976][ T3014] wlan1: Trigger new scan to find an IBSS to join
[  546.025690][ T5999] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.515309][ T5838] usb 7-1: USB disconnect, device number 10
[  546.642934][ T5999] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.816951][ T7822] wlan1: Creating new IBSS network, BSSID 56:05:d5:24:91:16
[  547.015899][ T5999] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  548.266321][T10633] FAULT_INJECTION: forcing a failure.
[  548.266321][T10633] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  548.279389][T10633] CPU: 0 UID: 0 PID: 10633 Comm: syz.6.1346 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  548.279404][T10633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  548.279410][T10633] Call Trace:
[  548.279415][T10633]  <TASK>
[  548.279421][T10633]  dump_stack_lvl+0x241/0x360
[  548.279437][T10633]  ? __pfx_dump_stack_lvl+0x10/0x10
[  548.279449][T10633]  ? __pfx__printk+0x10/0x10
[  548.279464][T10633]  should_fail_ex+0x424/0x570
[  548.279479][T10633]  _copy_from_user+0x2d/0xb0
[  548.279491][T10633]  copy_msghdr_from_user+0xb3/0x580
[  548.279506][T10633]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  548.279516][T10633]  ? __fget_files+0x2a/0x420
[  548.279527][T10633]  ? __fget_files+0x2a/0x420
[  548.279540][T10633]  __sys_sendmsg+0x20a/0x360
[  548.279557][T10633]  ? __pfx___sys_sendmsg+0x10/0x10
[  548.279588][T10633]  ? do_syscall_64+0xb6/0x230
[  548.279602][T10633]  do_syscall_64+0xf3/0x230
[  548.279614][T10633]  ? clear_bhb_loop+0x45/0xa0
[  548.279625][T10633]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  548.279635][T10633] RIP: 0033:0x7fa9b5d8d169
[  548.279645][T10633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  548.279654][T10633] RSP: 002b:00007fa9b6c65038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  548.279666][T10633] RAX: ffffffffffffffda RBX: 00007fa9b5fa5fa0 RCX: 00007fa9b5d8d169
[  548.279678][T10633] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000008
[  548.279685][T10633] RBP: 00007fa9b6c65090 R08: 0000000000000000 R09: 0000000000000000
[  548.279691][T10633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  548.279696][T10633] R13: 0000000000000000 R14: 00007fa9b5fa5fa0 R15: 00007ffd6ce3aac8
[  548.279709][T10633]  </TASK>
[  549.543621][T10644] netlink: 'syz.4.1350': attribute type 1 has an invalid length.
[  550.203764][T10654] FAULT_INJECTION: forcing a failure.
[  550.203764][T10654] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  550.236124][T10654] CPU: 1 UID: 0 PID: 10654 Comm: syz.6.1353 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  550.236151][T10654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  550.236161][T10654] Call Trace:
[  550.236167][T10654]  <TASK>
[  550.236174][T10654]  dump_stack_lvl+0x241/0x360
[  550.236201][T10654]  ? __pfx_dump_stack_lvl+0x10/0x10
[  550.236220][T10654]  ? __pfx__printk+0x10/0x10
[  550.236244][T10654]  should_fail_ex+0x424/0x570
[  550.236267][T10654]  _copy_to_user+0x31/0xb0
[  550.236286][T10654]  simple_read_from_buffer+0xdc/0x170
[  550.236312][T10654]  proc_fail_nth_read+0x1ef/0x260
[  550.236332][T10654]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  550.236352][T10654]  ? rw_verify_area+0x246/0x630
[  550.236369][T10654]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  550.236387][T10654]  vfs_read+0x21f/0xb90
[  550.236409][T10654]  ? __pfx___mutex_lock+0x10/0x10
[  550.236431][T10654]  ? __pfx_vfs_read+0x10/0x10
[  550.236451][T10654]  ? __fget_files+0x2a/0x420
[  550.236477][T10654]  ? __fget_files+0x39d/0x420
[  550.236492][T10654]  ? __fget_files+0x2a/0x420
[  550.236513][T10654]  ksys_read+0x19d/0x2d0
[  550.236533][T10654]  ? __pfx_ksys_read+0x10/0x10
[  550.236556][T10654]  ? do_syscall_64+0xb6/0x230
[  550.236578][T10654]  do_syscall_64+0xf3/0x230
[  550.236598][T10654]  ? clear_bhb_loop+0x45/0xa0
[  550.236617][T10654]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  550.236631][T10654] RIP: 0033:0x7fa9b5d8bb7c
[  550.236647][T10654] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  550.236660][T10654] RSP: 002b:00007fa9b6c65030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  550.236677][T10654] RAX: ffffffffffffffda RBX: 00007fa9b5fa5fa0 RCX: 00007fa9b5d8bb7c
[  550.236689][T10654] RDX: 000000000000000f RSI: 00007fa9b6c650a0 RDI: 0000000000000004
[  550.236704][T10654] RBP: 00007fa9b6c65090 R08: 0000000000000000 R09: 0000000000000000
[  550.236713][T10654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  550.236723][T10654] R13: 0000000000000000 R14: 00007fa9b5fa5fa0 R15: 00007ffd6ce3aac8
[  550.236744][T10654]  </TASK>
[  550.532934][ T7034] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[  550.704823][ T7034] usb 3-1: Using ep0 maxpacket: 32
[  550.720307][ T7034] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  550.732905][ T7034] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  550.744100][ T7034] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  550.761066][ T7034] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  550.810182][ T7034] usb 3-1: config 0 descriptor??
[  550.817466][ T7034] hub 3-1:0.0: USB hub found
[  551.020696][ T7034] hub 3-1:0.0: 1 port detected
[  551.288899][ T5999] bond0 (unregistering): Released all slaves
[  551.313598][T10644] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  551.316183][T10647] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  551.386089][T10667] tipc: Started in network mode
[  551.399623][T10667] tipc: Node identity 7, cluster identity 4711
[  551.648262][T10667] tipc: Node number set to 7
[  551.914905][    T9] usb 1-1: new full-speed USB device number 39 using dummy_hcd
[  552.079657][    T9] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  552.090840][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  552.107143][ T5999] hsr_slave_0: left promiscuous mode
[  552.123447][    T9] usb 1-1: Product: syz
[  552.128203][ T5999] hsr_slave_1: left promiscuous mode
[  552.134394][    T9] usb 1-1: Manufacturer: syz
[  552.140078][    T9] usb 1-1: SerialNumber: syz
[  552.157058][    T9] usb 1-1: config 0 descriptor??
[  552.172895][ T5999] veth1_macvtap: left promiscuous mode
[  552.180125][    T9] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  552.191670][ T5999] veth0_macvtap: left promiscuous mode
[  552.201854][ T5999] veth1_vlan: left promiscuous mode
[  552.208671][    T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  552.219623][ T5999] veth0_vlan: left promiscuous mode
[  552.226599][    T9] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19)
[  552.228792][T10669] syz.4.1357: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  552.262962][ T5852] hub 3-1:0.0: activate --> -90
[  552.276468][T10669] CPU: 1 UID: 0 PID: 10669 Comm: syz.4.1357 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  552.276502][T10669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  552.276513][T10669] Call Trace:
[  552.276520][T10669]  <TASK>
[  552.276528][T10669]  dump_stack_lvl+0x241/0x360
[  552.276556][T10669]  ? __pfx_dump_stack_lvl+0x10/0x10
[  552.276590][T10669]  ? __pfx__printk+0x10/0x10
[  552.276608][T10669]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  552.276630][T10669]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  552.276649][T10669]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  552.276670][T10669]  warn_alloc+0x27c/0x410
[  552.276693][T10669]  ? __pfx_warn_alloc+0x10/0x10
[  552.276718][T10669]  ? vb2_vmalloc_alloc+0xf2/0x340
[  552.276737][T10669]  ? __get_vm_area_node+0x1c8/0x2d0
[  552.276755][T10669]  ? __get_vm_area_node+0x25c/0x2d0
[  552.276778][T10669]  __vmalloc_node_range_noprof+0x634/0x1390
[  552.276818][T10669]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  552.276841][T10669]  ? __kasan_kmalloc+0x9d/0xb0
[  552.276868][T10669]  vmalloc_user_noprof+0x74/0x80
[  552.276888][T10669]  ? vb2_vmalloc_alloc+0xf2/0x340
[  552.276907][T10669]  vb2_vmalloc_alloc+0xf2/0x340
[  552.276928][T10669]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[  552.276947][T10669]  __vb2_queue_alloc+0xa16/0x16f0
[  552.276983][T10669]  vb2_core_reqbufs+0xd3b/0x17d0
[  552.276999][T10669]  ? rcu_is_watching+0x15/0xb0
[  552.277028][T10669]  ? __pfx_vb2_core_reqbufs+0x10/0x10
[  552.277044][T10669]  ? lockdep_hardirqs_on+0x9d/0x150
[  552.277080][T10669]  v4l2_m2m_ioctl_reqbufs+0x14b/0x230
[  552.277103][T10669]  __video_do_ioctl+0xc0b/0xdd0
[  552.277127][T10669]  ? __pfx___video_do_ioctl+0x10/0x10
[  552.277153][T10669]  video_usercopy+0x986/0x1390
[  552.277185][T10669]  ? __pfx___video_do_ioctl+0x10/0x10
[  552.277202][T10669]  ? __pfx_video_usercopy+0x10/0x10
[  552.277227][T10669]  ? smack_file_ioctl+0x306/0x3b0
[  552.277260][T10669]  ? tomoyo_file_ioctl+0x10/0x30
[  552.277281][T10669]  v4l2_ioctl+0x189/0x1e0
[  552.277305][T10669]  ? __pfx_v4l2_ioctl+0x10/0x10
[  552.277332][T10669]  __se_sys_ioctl+0xf1/0x160
[  552.277357][T10669]  do_syscall_64+0xf3/0x230
[  552.277380][T10669]  ? clear_bhb_loop+0x45/0xa0
[  552.277400][T10669]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  552.277425][T10669] RIP: 0033:0x7f40bf58d169
[  552.277442][T10669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  552.277456][T10669] RSP: 002b:00007f40c046b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  552.277481][T10669] RAX: ffffffffffffffda RBX: 00007f40bf7a6080 RCX: 00007f40bf58d169
[  552.277493][T10669] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000003
[  552.277505][T10669] RBP: 00007f40bf60e2a0 R08: 0000000000000000 R09: 0000000000000000
[  552.277516][T10669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  552.277527][T10669] R13: 0000000000000000 R14: 00007f40bf7a6080 R15: 00007ffd7c361f78
[  552.277549][T10669]  </TASK>
[  552.277576][T10669] Mem-Info:
[  552.334524][T10671] FAULT_INJECTION: forcing a failure.
[  552.334524][T10671] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  552.351637][T10669] active_anon:36 inactive_anon:7043 isolated_anon:0
[  552.351637][T10669]  active_file:3296 inactive_file:9686 isolated_file:0
[  552.351637][T10669]  unevictable:768 dirty:90 writeback:0
[  552.351637][T10669]  slab_reclaimable:10494 slab_unreclaimable:101589
[  552.351637][T10669]  mapped:29870 shmem:1420 pagetables:978
[  552.351637][T10669]  sec_pagetables:0 bounce:0
[  552.351637][T10669]  kernel_misc_reclaimable:0
[  552.351637][T10669]  free:1350405 free_pcp:3259 free_cma:0
[  552.399219][T10671] CPU: 0 UID: 0 PID: 10671 Comm: syz.6.1358 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  552.399246][T10671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  552.399256][T10671] Call Trace:
[  552.399263][T10671]  <TASK>
[  552.399270][T10671]  dump_stack_lvl+0x241/0x360
[  552.399297][T10671]  ? __pfx_dump_stack_lvl+0x10/0x10
[  552.399317][T10671]  ? __pfx__printk+0x10/0x10
[  552.399342][T10671]  should_fail_ex+0x424/0x570
[  552.399367][T10671]  _copy_to_user+0x31/0xb0
[  552.399385][T10671]  simple_read_from_buffer+0xdc/0x170
[  552.399414][T10671]  proc_fail_nth_read+0x1ef/0x260
[  552.399434][T10671]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  552.399454][T10671]  ? rw_verify_area+0x246/0x630
[  552.399473][T10671]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  552.399492][T10671]  vfs_read+0x21f/0xb90
[  552.399514][T10671]  ? __pfx___mutex_lock+0x10/0x10
[  552.399536][T10671]  ? __pfx_vfs_read+0x10/0x10
[  552.399558][T10671]  ? __fget_files+0x2a/0x420
[  552.399575][T10671]  ? __fget_files+0x39d/0x420
[  552.399591][T10671]  ? __fget_files+0x2a/0x420
[  552.399613][T10671]  ksys_read+0x19d/0x2d0
[  552.399634][T10671]  ? __pfx_ksys_read+0x10/0x10
[  552.399657][T10671]  ? do_syscall_64+0xb6/0x230
[  552.399681][T10671]  do_syscall_64+0xf3/0x230
[  552.399701][T10671]  ? clear_bhb_loop+0x45/0xa0
[  552.399719][T10671]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  552.399735][T10671] RIP: 0033:0x7fa9b5d8bb7c
[  552.399749][T10671] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  552.399762][T10671] RSP: 002b:00007fa9b6c65030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  552.399780][T10671] RAX: ffffffffffffffda RBX: 00007fa9b5fa5fa0 RCX: 00007fa9b5d8bb7c
[  552.399792][T10671] RDX: 000000000000000f RSI: 00007fa9b6c650a0 RDI: 0000000000000015
[  552.399802][T10671] RBP: 00007fa9b6c65090 R08: 0000000000000000 R09: 0000000000000000
[  552.399813][T10671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  552.399822][T10671] R13: 0000000000000000 R14: 00007fa9b5fa5fa0 R15: 00007ffd6ce3aac8
[  552.399843][T10671]  </TASK>
[  552.702599][T10652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  552.707420][T10669] Node 0 active_anon:144kB inactive_anon:39672kB active_file:13184kB inactive_file:38736kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:130980kB dirty:360kB writeback:0kB shmem:15544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11504kB pagetables:4112kB sec_pagetables:0kB all_unreclaimable? no
[  553.059575][T10652] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  553.079658][T10669] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  553.128103][T10669] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  553.169543][T10669] lowmem_reserve[]: 0 2491 2492 2492 2492
[  553.176976][T10669] Node 0 DMA32 free:1448460kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:40kB inactive_anon:50964kB active_file:12820kB inactive_file:38724kB unevictable:1536kB writepending:388kB present:3129332kB managed:2551256kB mlocked:0kB bounce:0kB free_pcp:21840kB local_pcp:9384kB free_cma:0kB
[  553.222747][T10669] lowmem_reserve[]: 0 0 0 0 0
[  553.393285][T10669] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:168kB active_file:368kB inactive_file:8kB unevictable:0kB writepending:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  553.541828][T10669] lowmem_reserve[]: 0 0 0 0 0
[  553.583277][T10669] Node 1 Normal free:3905056kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  553.657809][T10669] lowmem_reserve[]: 0 0 0 0 0
[  553.668517][T10669] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  553.687682][T10669] Node 0 DMA32: 1236*4kB (UME) 351*8kB (UME) 7*16kB (UME) 461*32kB (UME) 214*64kB (ME) 119*128kB (ME) 32*256kB (UM) 59*512kB (UM) 40*1024kB (UM) 21*2048kB (UME) 315*4096kB (UM) = 1464152kB
[  553.707082][T10669] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  553.719642][T10669] Node 1 Normal: 218*4kB (UME) 71*8kB (UME) 40*16kB (UME) 194*32kB (UME) 93*64kB (UME) 29*128kB (UME) 12*256kB (UME) 8*512kB (UM) 7*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3905056kB
[  553.739477][T10669] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  553.749804][T10669] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  553.760189][ T5852] usb 3-1-port1: config error
[  553.765978][T10669] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  553.777292][T10669] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  553.789172][T10669] 17697 total pagecache pages
[  553.796381][ T5852] hub 3-1:0.0: hub_ext_port_status failed (err = -32)
[  553.812700][ T5852] usb 3-1-port1: connect-debounce failed
[  553.813911][T10669] 0 pages in swap cache
[  553.822586][T10669] Free swap  = 124888kB
[  553.825893][ T5852] usb 3-1-port1: cannot disable (err = -32)
[  553.843612][T10669] Total swap = 124996kB
[  553.848042][T10669] 2097051 pages RAM
[  553.852033][T10669] 0 pages HighMem/MovableOnly
[  553.863131][T10669] 427449 pages reserved
[  553.942978][T10669] 0 pages cma reserved
[  554.181635][T10686] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  554.792934][ T5851] usb 3-1: USB disconnect, device number 35
[  556.282456][ T5851] usb 1-1: USB disconnect, device number 39
[  556.768148][T10711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1369'.
[  557.494697][   T30] audit: type=1400 audit(1742997810.003:227): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="^" requested=w pid=10730 comm="syz.6.1374" daddr=::ffff:172.20.20.55 dest=20257
[  557.610580][T10738] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[  558.712909][T10716] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  558.713096][   T54] Bluetooth: hci2: command 0x0406 tx timeout
[  558.727614][T10716] Bluetooth: hci2: Opcode 0x0406 failed: -110
[  559.391980][T10716] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  559.398122][T10716] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  559.409494][T10716] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  559.415995][T10716] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  559.423865][T10716] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  559.429824][T10716] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  559.438153][T10716] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  559.635628][   T30] audit: type=1400 audit(1742997812.143:228): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="^" requested=w pid=10760 comm="syz.0.1384" daddr=fe80::aa dest=3
[  559.722872][ T5852] usb 5-1: new full-speed USB device number 36 using dummy_hcd
[  559.744274][T10767] TCP: TCP_TX_DELAY enabled
[  559.912799][ T5852] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  559.936753][ T5852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.957020][ T5852] usb 5-1: Product: syz
[  559.961217][ T5852] usb 5-1: Manufacturer: syz
[  559.978594][ T5852] usb 5-1: SerialNumber: syz
[  559.991334][ T5852] usb 5-1: config 0 descriptor??
[  560.032236][ T5852] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  560.333865][ T5852] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  560.998851][ T5824] Bluetooth: hci2: command 0x0406 tx timeout
[  561.005210][   T54] Bluetooth: hci4: command 0x0406 tx timeout
[  561.195277][ T5852] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19)
[  561.397141][T10791] usb usb8: usbfs: process 10791 (syz.6.1393) did not claim interface 0 before use
[  561.435009][   T54] Bluetooth: hci3: command 0x0405 tx timeout
[  561.522777][   T54] Bluetooth: hci5: command 0x0c1a tx timeout
[  561.856579][   T30] audit: type=1326 audit(1742997814.363:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10817 comm="syz.2.1402" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4e2f18d169 code=0x0
[  561.912586][T10820] FAULT_INJECTION: forcing a failure.
[  561.912586][T10820] name (null), interval 1, probability 0, space 0, times 1
[  561.931603][T10820] CPU: 0 UID: 0 PID: 10820 Comm: syz.0.1399 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  561.931630][T10820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  561.931640][T10820] Call Trace:
[  561.931646][T10820]  <TASK>
[  561.931654][T10820]  dump_stack_lvl+0x241/0x360
[  561.931681][T10820]  ? __pfx_dump_stack_lvl+0x10/0x10
[  561.931701][T10820]  ? __pfx__printk+0x10/0x10
[  561.931724][T10820]  ? blk_mq_get_tag+0x97c/0xb20
[  561.931742][T10820]  should_fail_ex+0x424/0x570
[  561.931767][T10820]  null_queue_rq+0x36f/0xd60
[  561.931792][T10820]  ? __pfx_autoremove_wake_function+0x10/0x10
[  561.931817][T10820]  null_queue_rqs+0x1e9/0x370
[  561.931845][T10820]  ? __pfx_null_queue_rqs+0x10/0x10
[  561.931874][T10820]  ? blk_mq_flush_plug_list+0x284/0x1880
[  561.931895][T10820]  ? blk_mq_flush_plug_list+0x284/0x1880
[  561.931917][T10820]  blk_mq_flush_plug_list+0x56c/0x1880
[  561.931940][T10820]  ? rcu_is_watching+0x15/0xb0
[  561.931958][T10820]  ? blk_add_rq_to_plug+0x2f7/0x4b0
[  561.931979][T10820]  ? __pfx_blk_mq_flush_plug_list+0x10/0x10
[  561.931997][T10820]  ? blk_mq_submit_bio+0xfbb/0x25e0
[  561.932021][T10820]  ? blk_mq_submit_bio+0x496/0x25e0
[  561.932043][T10820]  __blk_flush_plug+0x422/0x500
[  561.932067][T10820]  ? __pfx___blk_flush_plug+0x10/0x10
[  561.932091][T10820]  __submit_bio+0x56d/0x6d0
[  561.932112][T10820]  ? __pfx___submit_bio+0x10/0x10
[  561.932132][T10820]  ? 0xffffffffa0001d4c
[  561.932146][T10820]  ? rcu_is_watching+0x15/0xb0
[  561.932169][T10820]  submit_bio_noacct_nocheck+0x4d5/0xe30
[  561.932189][T10820]  ? kernel_text_address+0xa7/0xe0
[  561.932212][T10820]  ? __pfx___might_resched+0x10/0x10
[  561.932234][T10820]  ? iov_iter_bvec_advance+0x220/0x240
[  561.932251][T10820]  ? __pfx_submit_bio_noacct_nocheck+0x10/0x10
[  561.932299][T10820]  submit_bio_wait+0x107/0x210
[  561.932318][T10820]  ? __pfx_submit_bio_wait+0x10/0x10
[  561.932346][T10820]  ? bio_init+0x11e/0x250
[  561.932364][T10820]  blkdev_direct_IO+0xec7/0x1560
[  561.932386][T10820]  ? __pfx_blkdev_direct_IO+0x10/0x10
[  561.932411][T10820]  ? __pfx_submit_bio_wait_endio+0x10/0x10
[  561.932434][T10820]  ? rcu_is_watching+0x15/0xb0
[  561.932452][T10820]  ? kiocb_invalidate_pages+0xf8/0x140
[  561.932476][T10820]  blkdev_direct_write+0x7d/0x140
[  561.932494][T10820]  blkdev_write_iter+0x560/0x740
[  561.932524][T10820]  iter_file_splice_write+0xbdf/0x1530
[  561.932568][T10820]  ? __pfx_iter_file_splice_write+0x10/0x10
[  561.932607][T10820]  ? bpf_lsm_file_permission+0x9/0x10
[  561.932627][T10820]  ? rw_verify_area+0x246/0x630
[  561.932648][T10820]  ? __pfx_iter_file_splice_write+0x10/0x10
[  561.932669][T10820]  do_splice+0xda7/0x1920
[  561.932684][T10820]  ? __lock_acquire+0xad5/0xd80
[  561.932718][T10820]  ? pipe_clear_nowait+0x1ad/0x250
[  561.932736][T10820]  ? __pfx_do_splice+0x10/0x10
[  561.932750][T10820]  ? __fget_files+0x2a/0x420
[  561.932774][T10820]  __se_sys_splice+0x2dc/0x450
[  561.932794][T10820]  ? __pfx___se_sys_splice+0x10/0x10
[  561.932813][T10820]  ? __x64_sys_splice+0x21/0xf0
[  561.932831][T10820]  do_syscall_64+0xf3/0x230
[  561.932854][T10820]  ? clear_bhb_loop+0x45/0xa0
[  561.932873][T10820]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  561.932889][T10820] RIP: 0033:0x7fd27f78d169
[  561.932904][T10820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  561.932918][T10820] RSP: 002b:00007fd280606038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113
[  561.932937][T10820] RAX: ffffffffffffffda RBX: 00007fd27f9a6160 RCX: 00007fd27f78d169
[  561.932949][T10820] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003
[  561.932959][T10820] RBP: 00007fd280606090 R08: 000000000004ffe6 R09: 0000000000000000
[  561.932970][T10820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  561.932980][T10820] R13: 0000000000000001 R14: 00007fd27f9a6160 R15: 00007ffce2624de8
[  561.933003][T10820]  </TASK>
[  562.405122][ T5851] usb 5-1: USB disconnect, device number 36
[  562.876464][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  563.032874][   T54] Bluetooth: hci4: command 0x0406 tx timeout
[  563.569333][   T54] Bluetooth: hci3: command 0x0405 tx timeout
[  563.592845][   T54] Bluetooth: hci5: command 0x0c1a tx timeout
[  563.996884][T10854] netlink: 'syz.0.1413': attribute type 1 has an invalid length.
[  564.044794][T10854] veth5: entered promiscuous mode
[  564.053005][T10854] bond2: (slave veth5): Enslaving as a backup interface with a down link
[  564.342743][ T5852] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[  564.710670][ T5852] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  564.740288][ T5852] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  564.749943][ T5852] usb 7-1: Product: syz
[  564.754456][ T5852] usb 7-1: Manufacturer: syz
[  564.759705][ T5852] usb 7-1: SerialNumber: syz
[  564.799728][ T5852] usb 7-1: config 0 descriptor??
[  565.155443][ T5852] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  565.184190][ T5852] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  565.200614][ T5852] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19)
[  565.672759][ T5824] Bluetooth: hci5: command 0x0c1a tx timeout
[  565.847974][T10874] bridge1: entered promiscuous mode
[  566.329317][T10890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1425'.
[  566.338723][T10890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1425'.
[  567.194347][ T5851] usb 7-1: USB disconnect, device number 11
[  569.231925][T10931] i2c i2c-0: Invalid block write size 34
[  569.432749][ T5851] usb 7-1: new full-speed USB device number 12 using dummy_hcd
[  569.735841][ T5851] usb 7-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  569.745417][ T5851] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  569.762668][ T5851] usb 7-1: Product: syz
[  569.766861][ T5851] usb 7-1: Manufacturer: syz
[  569.791897][ T5851] usb 7-1: SerialNumber: syz
[  569.803833][ T5851] usb 7-1: config 0 descriptor??
[  569.805639][T10937] input input17: cannot allocate more than FF_MAX_EFFECTS effects
[  569.821268][ T5851] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  569.844622][ T5851] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  569.874011][ T5851] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) error while loading driver (-19)
[  570.869624][   T30] audit: type=1400 audit(1742997823.363:230): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="^" requested=w pid=10946 comm="syz.5.1444" daddr=fe80::
[  572.132525][ T7034] usb 7-1: USB disconnect, device number 12
[  573.363506][ T7034] usb 7-1: new full-speed USB device number 13 using dummy_hcd
[  573.512951][ T7034] usb 7-1: device descriptor read/64, error -71
[  573.752991][ T7034] usb 7-1: new full-speed USB device number 14 using dummy_hcd
[  573.958338][ T7034] usb 7-1: device descriptor read/64, error -71
[  574.073125][ T7034] usb usb7-port1: attempt power cycle
[  574.522802][ T7034] usb 7-1: new full-speed USB device number 15 using dummy_hcd
[  574.653683][ T7034] usb 7-1: device descriptor read/8, error -71
[  574.892754][ T7034] usb 7-1: new full-speed USB device number 16 using dummy_hcd
[  574.948455][ T7034] usb 7-1: device descriptor read/8, error -71
[  574.981957][T11013] openvswitch: netlink: Message has 8 unknown bytes.
[  575.078441][ T7034] usb usb7-port1: unable to enumerate USB device
[  575.180847][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1466'.
[  575.191830][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1466'.
[  575.972420][T11021] vivid-000: =================  START STATUS  =================
[  575.980326][T11021] vivid-000: Generate PTS: true
[  575.985618][T11021] vivid-000: Generate SCR: true
[  575.990516][T11021] tpg source WxH: 640x360 (Y'CbCr)
[  575.999660][T11021] tpg field: 1
[  576.003156][T11021] tpg crop: 640x360@0x0
[  576.009778][T11021] tpg compose: 640x360@0x0
[  576.033517][T11021] tpg colorspace: 8
[  576.037361][T11021] tpg transfer function: 0/0
[  576.041956][T11021] tpg Y'CbCr encoding: 0/0
[  576.048177][T11021] tpg quantization: 0/0
[  576.052333][T11021] tpg RGB range: 0/2
[  576.061230][T11021] vivid-000: ==================  END STATUS  ==================
[  576.156175][   T30] audit: type=1400 audit(1742997828.663:231): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="^" requested=w pid=11027 comm="syz.0.1470"
[  576.323297][T11038] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  576.332418][T11038] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  576.348780][T11038] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  576.356696][T11038] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock
[  576.915048][ T6127] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  577.512788][ T7034] usb 1-1: new full-speed USB device number 40 using dummy_hcd
[  577.792477][ T7034] usb 1-1: unable to read config index 0 descriptor/start: -61
[  577.812542][ T7034] usb 1-1: can't read configurations, error -61
[  577.952770][ T7034] usb 1-1: new full-speed USB device number 41 using dummy_hcd
[  577.953093][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  577.970262][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  577.978210][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  577.990015][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  577.998514][   T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  578.007868][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  578.091646][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  578.185683][ T7034] usb 1-1: unable to read config index 0 descriptor/start: -61
[  578.324621][ T7034] usb 1-1: can't read configurations, error -61
[  578.349197][ T7034] usb usb1-port1: attempt power cycle
[  578.353219][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.023460][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.217940][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  579.292931][ T7034] usb 1-1: new full-speed USB device number 42 using dummy_hcd
[  579.922084][ T7034] usb 1-1: unable to read config index 0 descriptor/start: -61
[  579.949932][ T7034] usb 1-1: can't read configurations, error -61
[  579.951513][T11054] chnl_net:caif_netlink_parms(): no params data found
[  580.072925][ T5824] Bluetooth: hci1: command tx timeout
[  580.123586][ T7034] usb 1-1: new full-speed USB device number 43 using dummy_hcd
[  580.200502][ T7034] usb 1-1: device descriptor read/8, error -71
[  580.243894][T11054] bridge0: port 1(bridge_slave_0) entered blocking state
[  580.279104][T11054] bridge0: port 1(bridge_slave_0) entered disabled state
[  580.339934][ T7034] usb usb1-port1: unable to enumerate USB device
[  580.672858][T11054] bridge_slave_0: entered allmulticast mode
[  580.688110][T11054] bridge_slave_0: entered promiscuous mode
[  582.033624][ T5838] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  582.152762][ T5824] Bluetooth: hci1: command tx timeout
[  582.200141][ T5838] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  582.220875][ T5838] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  582.293291][ T5838] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  582.353051][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  582.369204][ T5838] usb 1-1: SerialNumber: syz
[  582.701734][   T13] bond0 (unregistering): Released all slaves
[  582.781273][T11054] bridge0: port 2(bridge_slave_1) entered blocking state
[  582.801532][T11054] bridge0: port 2(bridge_slave_1) entered disabled state
[  582.814767][T11054] bridge_slave_1: entered allmulticast mode
[  582.868334][T11054] bridge_slave_1: entered promiscuous mode
[  583.149743][T11054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  583.328458][T11054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  584.013489][T11054] team0: Port device team_slave_0 added
[  584.116363][ T5838] usb 1-1: 0:2 : does not exist
[  584.173254][ T5838] usb 1-1: USB disconnect, device number 44
[  584.204309][   T13] hsr_slave_0: left promiscuous mode
[  584.242854][ T5824] Bluetooth: hci1: command tx timeout
[  584.377901][   T13] hsr_slave_1: left promiscuous mode
[  584.446500][   T13] veth1_macvtap: left promiscuous mode
[  584.452064][   T13] veth0_macvtap: left promiscuous mode
[  584.474507][   T13] veth1_vlan: left promiscuous mode
[  585.795333][   T30] audit: type=1400 audit(1742997838.253:232): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="^" requested=w pid=11132 comm="syz.6.1497" daddr=::ffff:127.0.0.1 dest=20001
[  586.437597][ T5824] Bluetooth: hci1: command tx timeout
[  587.053486][T11137] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1499'.
[  588.856222][T11054] team0: Port device team_slave_1 added
[  588.907245][T11156] veth2: entered allmulticast mode
[  588.972003][T11159] bridge0: port 3(vlan2) entered blocking state
[  588.980145][T11159] bridge0: port 3(vlan2) entered disabled state
[  588.986600][T11159] vlan2: entered allmulticast mode
[  588.991733][T11159] bridge0: entered allmulticast mode
[  589.006517][T11159] vlan2: left allmulticast mode
[  589.011419][T11159] bridge0: left allmulticast mode
[  589.054917][T11054] batman_adv: batadv0: Adding interface: batadv_slave_0
[  589.061890][T11054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  589.106071][T11054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  589.118271][T11054] batman_adv: batadv0: Adding interface: batadv_slave_1
[  589.126292][T11054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  589.182077][T11054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  589.376285][T11054] hsr_slave_0: entered promiscuous mode
[  589.410370][T11054] hsr_slave_1: entered promiscuous mode
[  589.417444][T11054] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  589.445646][T11054] Cannot create hsr debugfs directory
[  589.572854][ T7034] usb 1-1: new high-speed USB device number 45 using dummy_hcd
[  589.732933][ T7034] usb 1-1: Using ep0 maxpacket: 32
[  589.803044][ T7034] usb 1-1: config 0 has an invalid interface number: 4 but max is 0
[  590.001679][ T7034] usb 1-1: config 0 has no interface number 0
[  590.038341][ T7034] usb 1-1: too many endpoints for config 0 interface 4 altsetting 8: 91, using maximum allowed: 30
[  590.091061][ T7034] usb 1-1: config 0 interface 4 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 91
[  590.244433][T11054] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  590.253784][T11054] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  590.266454][T11054] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  590.276370][ T7034] usb 1-1: config 0 interface 4 has no altsetting 0
[  590.285345][ T7034] usb 1-1: New USB device found, idVendor=9a89, idProduct=00a5, bcdDevice=ef.64
[  590.285869][T11054] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  590.294592][ T7034] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  590.313398][ T7034] usb 1-1: config 0 descriptor??
[  591.108536][T11054] 8021q: adding VLAN 0 to HW filter on device bond0
[  591.132030][T11054] 8021q: adding VLAN 0 to HW filter on device team0
[  591.148203][ T7820] bridge0: port 1(bridge_slave_0) entered blocking state
[  591.155358][ T7820] bridge0: port 1(bridge_slave_0) entered forwarding state
[  591.229117][T11054] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  591.241464][T11054] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  591.348958][ T3014] bridge0: port 2(bridge_slave_1) entered blocking state
[  591.356092][ T3014] bridge0: port 2(bridge_slave_1) entered forwarding state
[  591.946547][ T7034] usb 1-1: string descriptor 0 read error: -71
[  591.963470][ T7034] usb 1-1: USB disconnect, device number 45
[  592.426395][T11204] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1517'.
[  592.535372][T11054] 8021q: adding VLAN 0 to HW filter on device batadv0
[  593.729141][T11054] veth0_vlan: entered promiscuous mode
[  593.740528][T11054] veth1_vlan: entered promiscuous mode
[  593.832925][T11226] FAULT_INJECTION: forcing a failure.
[  593.832925][T11226] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  593.846169][T11226] CPU: 1 UID: 0 PID: 11226 Comm: syz.0.1521 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  593.846195][T11226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  593.846218][T11226] Call Trace:
[  593.846224][T11226]  <TASK>
[  593.846231][T11226]  dump_stack_lvl+0x241/0x360
[  593.846258][T11226]  ? __pfx_dump_stack_lvl+0x10/0x10
[  593.846277][T11226]  ? __pfx__printk+0x10/0x10
[  593.846302][T11226]  should_fail_ex+0x424/0x570
[  593.846327][T11226]  _copy_from_user+0x2d/0xb0
[  593.846347][T11226]  sctp_setsockopt+0xd6/0x11e0
[  593.846374][T11226]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  593.846394][T11226]  do_sock_setsockopt+0x3b1/0x710
[  593.846427][T11226]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  593.846449][T11226]  ? __fget_files+0x2a/0x420
[  593.846468][T11226]  ? __fget_files+0x39d/0x420
[  593.846485][T11226]  ? __fget_files+0x2a/0x420
[  593.846506][T11226]  __x64_sys_setsockopt+0x1ee/0x280
[  593.846533][T11226]  do_syscall_64+0xf3/0x230
[  593.846556][T11226]  ? clear_bhb_loop+0x45/0xa0
[  593.846575][T11226]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  593.846591][T11226] RIP: 0033:0x7fd27f78d169
[  593.846606][T11226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  593.846620][T11226] RSP: 002b:00007fd280627038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  593.846638][T11226] RAX: ffffffffffffffda RBX: 00007fd27f9a6080 RCX: 00007fd27f78d169
[  593.846650][T11226] RDX: 000000000000001e RSI: 0000000000000084 RDI: 0000000000000005
[  593.846660][T11226] RBP: 00007fd280627090 R08: 0000000000000004 R09: 0000000000000000
[  593.846671][T11226] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001
[  593.846681][T11226] R13: 0000000000000000 R14: 00007fd27f9a6080 R15: 00007ffce2624de8
[  593.846702][T11226]  </TASK>
[  594.035580][    C1] vkms_vblank_simulate: vblank timer overrun
[  594.380582][T11054] veth0_macvtap: entered promiscuous mode
[  594.448588][T11054] veth1_macvtap: entered promiscuous mode
[  594.544297][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  594.817343][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  594.833252][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  594.838871][T11234] netlink: 'syz.6.1523': attribute type 2 has an invalid length.
[  594.844034][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  594.897239][T11054] batman_adv: batadv0: Interface activated: batadv_slave_0
[  594.936211][T11229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1516'.
[  594.946401][T11054] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  594.957755][T11234] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1523'.
[  594.991471][   T30] audit: type=1400 audit(1742997847.473:233): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="^" object="_" requested=w pid=11232 comm="syz.5.1524" saddr=fe80::14 daddr=fe80::aa dest=16385
[  595.034130][T11054] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  595.063771][T11054] batman_adv: batadv0: Interface activated: batadv_slave_1
[  595.128386][T11054] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  595.170815][T11054] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  595.207826][T11054] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  595.247999][T11054] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  597.956866][ T7820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  598.114952][ T7820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  598.374169][ T7824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  598.398396][ T7824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  599.112779][ T5824] Bluetooth: hci1: command tx timeout
[  599.288928][T11287] syzkaller0: entered allmulticast mode
[  599.524224][T11287] syzkaller0 (unregistering): left allmulticast mode
[  600.046314][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1539'.
[  600.058543][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1539'.
[  600.601232][T11316] Cannot find del_set index 0 as target
[  604.531096][T11358] : entered promiscuous mode
[  604.574465][T11359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1554'.
[  604.583679][T11359] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1554'.
[  607.318417][T11384] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  607.680361][T11390] bridge_slave_0: left allmulticast mode
[  607.706058][T11390] bridge_slave_0: left promiscuous mode
[  607.723101][T11390] bridge0: port 1(bridge_slave_0) entered disabled state
[  607.777940][T11390] bridge_slave_1: left allmulticast mode
[  607.802245][T11390] bridge_slave_1: left promiscuous mode
[  607.835150][T11392] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1564'.
[  607.860961][T11390] bridge0: port 2(bridge_slave_1) entered disabled state
[  607.917153][T11390] bond0: (slave bond_slave_0): Releasing backup interface
[  608.044240][   T57] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  608.050319][T11398] FAULT_INJECTION: forcing a failure.
[  608.050319][T11398] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  608.073063][T11390] bond0: (slave bond_slave_1): Releasing backup interface
[  608.087161][T11399] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1565'.
[  608.097545][T11399] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1565'.
[  608.122807][T11398] CPU: 1 UID: 0 PID: 11398 Comm: syz.4.1566 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  608.122834][T11398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  608.122844][T11398] Call Trace:
[  608.122850][T11398]  <TASK>
[  608.122857][T11398]  dump_stack_lvl+0x241/0x360
[  608.122882][T11398]  ? __pfx_dump_stack_lvl+0x10/0x10
[  608.122900][T11398]  ? __pfx__printk+0x10/0x10
[  608.122923][T11398]  should_fail_ex+0x424/0x570
[  608.122945][T11398]  _copy_from_user+0x2d/0xb0
[  608.122962][T11398]  move_addr_to_kernel+0x8c/0x170
[  608.122979][T11398]  __sys_sendto+0x26a/0x4c0
[  608.123004][T11398]  ? __pfx___sys_sendto+0x10/0x10
[  608.123031][T11398]  ? __fget_files+0x2a/0x420
[  608.123053][T11398]  ? ksys_write+0x275/0x2d0
[  608.123077][T11398]  __x64_sys_sendto+0xde/0x100
[  608.123101][T11398]  do_syscall_64+0xf3/0x230
[  608.123121][T11398]  ? clear_bhb_loop+0x45/0xa0
[  608.123138][T11398]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  608.123153][T11398] RIP: 0033:0x7f40bf58d169
[  608.123167][T11398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  608.123180][T11398] RSP: 002b:00007f40c048c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  608.123197][T11398] RAX: ffffffffffffffda RBX: 00007f40bf7a5fa0 RCX: 00007f40bf58d169
[  608.123208][T11398] RDX: 00000000000005b2 RSI: 0000200000000180 RDI: 0000000000000003
[  608.123217][T11398] RBP: 00007f40c048c090 R08: 0000200000000140 R09: 0000000000000014
[  608.123226][T11398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  608.123233][T11398] R13: 0000000000000000 R14: 00007f40bf7a5fa0 R15: 00007ffd7c361f78
[  608.123250][T11398]  </TASK>
[  608.555262][T11390] team0: Port device team_slave_0 removed
[  608.669714][T11390] team0: Port device team_slave_1 removed
[  608.694207][T11390] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  608.705653][T11390] batman_adv: batadv0: Removing interface: batadv_slave_0
[  608.736110][T11390] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  608.749922][T11390] batman_adv: batadv0: Removing interface: batadv_slave_1
[  608.779145][T11391] team0: Mode changed to "loadbalance"
[  611.339671][T11428] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1574'.
[  611.542858][T11431] FAULT_INJECTION: forcing a failure.
[  611.542858][T11431] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  611.556526][T11431] CPU: 0 UID: 0 PID: 11431 Comm: syz.6.1575 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  611.556551][T11431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  611.556561][T11431] Call Trace:
[  611.556568][T11431]  <TASK>
[  611.556575][T11431]  dump_stack_lvl+0x241/0x360
[  611.556601][T11431]  ? __pfx_dump_stack_lvl+0x10/0x10
[  611.556628][T11431]  ? dump_stack+0x9/0x15
[  611.556649][T11431]  should_fail_ex+0x424/0x570
[  611.556671][T11431]  _copy_from_user+0x2d/0xb0
[  611.556689][T11431]  sk_setsockopt+0x2af/0x3340
[  611.556719][T11431]  ? __pfx_sk_setsockopt+0x10/0x10
[  611.556742][T11431]  ? vfs_write+0xb29/0xd10
[  611.556769][T11431]  ? ksys_write+0x24e/0x2d0
[  611.556791][T11431]  ? __lock_acquire+0xad5/0xd80
[  611.556819][T11431]  do_sock_setsockopt+0x2fe/0x710
[  611.556846][T11431]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  611.556867][T11431]  ? __fget_files+0x2a/0x420
[  611.556888][T11431]  ? __fget_files+0x39d/0x420
[  611.556904][T11431]  ? __fget_files+0x2a/0x420
[  611.556925][T11431]  __x64_sys_setsockopt+0x1ee/0x280
[  611.556954][T11431]  do_syscall_64+0xf3/0x230
[  611.556976][T11431]  ? clear_bhb_loop+0x45/0xa0
[  611.556996][T11431]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  611.557012][T11431] RIP: 0033:0x7fa9b5d8d169
[  611.557027][T11431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  611.557041][T11431] RSP: 002b:00007fa9b6c44038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  611.557060][T11431] RAX: ffffffffffffffda RBX: 00007fa9b5fa6080 RCX: 00007fa9b5d8d169
[  611.557072][T11431] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000007
[  611.557082][T11431] RBP: 00007fa9b6c44090 R08: 0000000000000010 R09: 0000000000000000
[  611.557093][T11431] R10: 0000200000ab9ff0 R11: 0000000000000246 R12: 0000000000000001
[  611.557104][T11431] R13: 0000000000000000 R14: 00007fa9b5fa6080 R15: 00007ffd6ce3aac8
[  611.557126][T11431]  </TASK>
[  611.766835][ T5852] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  611.952839][ T5852] usb 5-1: Using ep0 maxpacket: 16
[  611.968414][ T5852] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  612.048142][ T5852] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=9a.1d
[  612.110983][ T5852] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  612.192844][ T5852] usb 5-1: Product: syz
[  612.215051][ T5852] usb 5-1: Manufacturer: syz
[  612.225736][ T5852] usb 5-1: SerialNumber: syz
[  612.232076][ T5852] usb 5-1: config 0 descriptor??
[  612.247256][ T5852] ims_pcu 5-1:0.0: Zero length descriptor
[  612.254341][ T5852] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22
[  612.477771][    T9] usb 5-1: USB disconnect, device number 37
[  613.502521][T11449] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1581'.
[  613.512695][T11449] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1581'.
[  615.713354][T11462] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1583'.
[  616.618178][T11483] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1589'.
[  616.952752][    T9] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  617.242720][    T9] usb 7-1: Using ep0 maxpacket: 16
[  617.903847][    T9] usb 7-1: config 8 has an invalid interface number: 211 but max is 0
[  617.930540][    T9] usb 7-1: config 8 has no interface number 0
[  617.962930][    T9] usb 7-1: config 8 interface 211 has no altsetting 0
[  617.976419][    T9] usb 7-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=81.87
[  617.995195][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.013414][    T9] usb 7-1: Product: syz
[  618.021818][   T30] audit: type=1400 audit(1742997870.523:234): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="^" requested=w pid=11495 comm="syz.4.1593"
[  618.044317][    T9] usb 7-1: Manufacturer: syz
[  618.054351][    T9] usb 7-1: SerialNumber: syz
[  619.143367][T11506] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1596'.
[  619.258267][   T30] audit: type=1400 audit(1742997871.753:235): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="^" requested=w pid=11510 comm="syz.0.1597" daddr=fc02::
[  619.706362][T11514] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1588'.
[  619.864150][T11514] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  620.884327][T11525] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1600'.
[  620.902759][T11525] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1600'.
[  620.993186][    T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  622.326789][    T9] snd-usb-audio 7-1:8.211: probe with driver snd-usb-audio failed with error -2
[  622.379367][    T9] usb 7-1: USB disconnect, device number 17
[  622.876502][T11548] pimreg: entered allmulticast mode
[  624.203302][T11561] FAULT_INJECTION: forcing a failure.
[  624.203302][T11561] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  624.216637][T11561] CPU: 1 UID: 0 PID: 11561 Comm: syz.0.1611 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  624.216654][T11561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  624.216661][T11561] Call Trace:
[  624.216665][T11561]  <TASK>
[  624.216670][T11561]  dump_stack_lvl+0x241/0x360
[  624.216688][T11561]  ? __pfx_dump_stack_lvl+0x10/0x10
[  624.216703][T11561]  ? __pfx__printk+0x10/0x10
[  624.216718][T11561]  should_fail_ex+0x424/0x570
[  624.216732][T11561]  _copy_to_user+0x31/0xb0
[  624.216744][T11561]  simple_read_from_buffer+0xdc/0x170
[  624.216761][T11561]  proc_fail_nth_read+0x1ef/0x260
[  624.216773][T11561]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  624.216785][T11561]  ? rw_verify_area+0x246/0x630
[  624.216797][T11561]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  624.216808][T11561]  vfs_read+0x21f/0xb90
[  624.216821][T11561]  ? __pfx___mutex_lock+0x10/0x10
[  624.216834][T11561]  ? __pfx_vfs_read+0x10/0x10
[  624.216847][T11561]  ? __fget_files+0x2a/0x420
[  624.216858][T11561]  ? __fget_files+0x39d/0x420
[  624.216867][T11561]  ? __fget_files+0x2a/0x420
[  624.216879][T11561]  ksys_read+0x19d/0x2d0
[  624.216892][T11561]  ? __pfx_ksys_read+0x10/0x10
[  624.216906][T11561]  ? do_syscall_64+0xb6/0x230
[  624.216920][T11561]  do_syscall_64+0xf3/0x230
[  624.216932][T11561]  ? clear_bhb_loop+0x45/0xa0
[  624.216943][T11561]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  624.216953][T11561] RIP: 0033:0x7fd27f78bb7c
[  624.216962][T11561] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  624.216970][T11561] RSP: 002b:00007fd280648030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  624.216982][T11561] RAX: ffffffffffffffda RBX: 00007fd27f9a5fa0 RCX: 00007fd27f78bb7c
[  624.216990][T11561] RDX: 000000000000000f RSI: 00007fd2806480a0 RDI: 000000000000000b
[  624.216996][T11561] RBP: 00007fd280648090 R08: 0000000000000000 R09: 0000000000000000
[  624.217002][T11561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  624.217008][T11561] R13: 0000000000000000 R14: 00007fd27f9a5fa0 R15: 00007ffce2624de8
[  624.217021][T11561]  </TASK>
[  624.456665][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  625.447784][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1617'.
[  625.467786][T11585] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1617'.
[  626.211584][T11590] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  626.223236][T11590] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  626.242830][T11590] overlayfs: missing 'lowerdir'
[  626.307717][   T30] audit: type=1800 audit(1742997878.793:236): pid=11591 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.5.1619" name="bus" dev="overlay" ino=1040 res=0 errno=0
[  626.378037][T11595] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1620'.
[  626.557852][T11605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1622'.
[  626.812845][T11605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1622'.
[  628.559985][T11628] ax25_connect(): syz.6.1629 uses autobind, please contact jreuter@yaina.de
[  629.069257][T11632] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  629.353815][T11632] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  629.520388][T11637] gre1: entered promiscuous mode
[  629.525484][T11637] gre1: entered allmulticast mode
[  630.213792][T11632] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  630.477401][T11632] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  630.598026][T11632] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  630.668074][T11632] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  630.701374][   T30] audit: type=1400 audit(1742997883.203:237): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="^" requested=w pid=11647 comm="syz.5.1634" daddr=::ffff:172.20.20.255
[  630.730389][T11632] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  630.801022][T11632] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  630.995870][T11660] fuse: Bad value for 'group_id'
[  630.998226][T11657] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  631.001015][T11660] fuse: Bad value for 'group_id'
[  631.798770][T11657] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1638'.
[  631.820923][T11666] 8021q: adding VLAN 0 to HW filter on device bond2
[  631.846043][T11653] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  631.852388][T11653] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  631.968074][T11653] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  631.974254][T11653] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  631.985381][T11653] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  631.992150][T11653] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  632.035096][T11653] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  632.035529][T11676] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1638'.
[  632.049700][T11653] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  632.160290][   T30] audit: type=1400 audit(1742997884.643:238): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="^" requested=w pid=11665 comm="syz.5.1640" dest=2
[  632.838343][T11688] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  633.524146][T11691] overlayfs: failed to resolve './file0': -2
[  634.254524][T11703] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1648'.
[  634.537542][T11691] evm: overlay not supported
[  634.718565][   T30] audit: type=1400 audit(1742997887.223:239): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="^" object="_" requested=w pid=11693 comm="syz.5.1647" saddr=fe80::aa daddr=fe80::aa dest=20002
[  634.761583][T11706] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1649'.
[  635.452315][T11720] syz.5.1652: attempt to access beyond end of device
[  635.452315][T11720] loop5: rw=2048, sector=2, nr_sectors = 1 limit=0
[  635.466253][T11720] hfsplus: unable to find HFS+ superblock
[  636.683956][T11738] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1658'.
[  636.885675][   T30] audit: type=1326 audit(1742997889.393:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11741 comm="syz.7.1659" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb15d18d169 code=0x0
[  636.950641][   T30] audit: type=1326 audit(1742997889.433:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11741 comm="syz.7.1659" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb15d18d169 code=0x0
[  637.066585][T11725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  637.184202][T11747] wlan0 speed is unknown, defaulting to 1000
[  637.190796][T11747] wlan0 speed is unknown, defaulting to 1000
[  637.198365][T11747] wlan0 speed is unknown, defaulting to 1000
[  637.296473][T11747] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  637.424684][   T30] audit: type=1400 audit(1742997889.933:242): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="^" requested=w pid=11751 comm="syz.6.1662" daddr=fe80::24
[  637.444985][T11747] wlan0 speed is unknown, defaulting to 1000
[  637.477047][T11747] wlan0 speed is unknown, defaulting to 1000
[  637.489091][T11747] wlan0 speed is unknown, defaulting to 1000
[  637.513767][T11747] wlan0 speed is unknown, defaulting to 1000
[  637.538395][T11747] wlan0 speed is unknown, defaulting to 1000
[  637.879897][T11759] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1663'.
[  638.567177][T11763] bond2: (slave veth5): Releasing backup interface
[  638.794240][T11766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1665'.
[  640.000295][   T36] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  641.187483][   T30] audit: type=1326 audit(1742997893.693:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11804 comm="syz.4.1680" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f40bf58d169 code=0x0
[  641.208614][    C1] vkms_vblank_simulate: vblank timer overrun
[  642.130236][T11808] TCP: out of memory -- consider tuning tcp_mem
[  642.331248][T11820] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1682'.
[  642.344741][T11820] netlink: 80 bytes leftover after parsing attributes in process `syz.6.1682'.
[  646.612688][T11866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1695'.
[  646.752392][T11867] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1695'.
[  649.131962][T11891] FAULT_INJECTION: forcing a failure.
[  649.131962][T11891] name failslab, interval 1, probability 0, space 0, times 0
[  649.286652][T11891] CPU: 1 UID: 0 PID: 11891 Comm: syz.5.1700 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  649.286679][T11891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  649.286690][T11891] Call Trace:
[  649.286696][T11891]  <TASK>
[  649.286704][T11891]  dump_stack_lvl+0x241/0x360
[  649.286732][T11891]  ? __pfx_dump_stack_lvl+0x10/0x10
[  649.286752][T11891]  ? __pfx__printk+0x10/0x10
[  649.286773][T11891]  ? __pfx___might_resched+0x10/0x10
[  649.286800][T11891]  should_fail_ex+0x424/0x570
[  649.286824][T11891]  should_failslab+0xac/0x100
[  649.286851][T11891]  __kmalloc_noprof+0xdf/0x4d0
[  649.286866][T11891]  ? tomoyo_realpath_from_path+0xc2/0x5e0
[  649.286890][T11891]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[  649.286918][T11891]  tomoyo_realpath_from_path+0xcf/0x5e0
[  649.286951][T11891]  tomoyo_path_number_perm+0x245/0x790
[  649.286975][T11891]  ? tomoyo_path_number_perm+0x215/0x790
[  649.286999][T11891]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  649.287025][T11891]  ? ksys_write+0x24e/0x2d0
[  649.287052][T11891]  ? __lock_acquire+0xad5/0xd80
[  649.287086][T11891]  ? __fget_files+0x2a/0x420
[  649.287103][T11891]  ? __fget_files+0x2a/0x420
[  649.287123][T11891]  ? __fget_files+0x2a/0x420
[  649.287143][T11891]  security_file_ioctl+0xc6/0x2a0
[  649.287167][T11891]  __se_sys_ioctl+0x46/0x160
[  649.287190][T11891]  do_syscall_64+0xf3/0x230
[  649.287212][T11891]  ? clear_bhb_loop+0x45/0xa0
[  649.287232][T11891]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  649.287249][T11891] RIP: 0033:0x7feadc78d169
[  649.287264][T11891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  649.287279][T11891] RSP: 002b:00007feadd57f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  649.287298][T11891] RAX: ffffffffffffffda RBX: 00007feadc9a6160 RCX: 00007feadc78d169
[  649.287311][T11891] RDX: 0000200000000040 RSI: 00000000c4c85513 RDI: 0000000000000006
[  649.287322][T11891] RBP: 00007feadd57f090 R08: 0000000000000000 R09: 0000000000000000
[  649.287333][T11891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  649.287343][T11891] R13: 0000000000000000 R14: 00007feadc9a6160 R15: 00007ffe779f9a18
[  649.287365][T11891]  </TASK>
[  649.287381][T11891] ERROR: Out of memory at tomoyo_realpath_from_path.
[  649.457375][    C1] vkms_vblank_simulate: vblank timer overrun
[  650.064920][T11903] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1705'.
[  650.075672][T11903] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1705'.
[  650.426273][T11905] virt_wifi0 speed is unknown, defaulting to 1000
[  650.442812][T11905] virt_wifi0 speed is unknown, defaulting to 1000
[  650.485634][T11905] virt_wifi0 speed is unknown, defaulting to 1000
[  650.530252][T11905] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  650.705079][T11905] virt_wifi0 speed is unknown, defaulting to 1000
[  650.769717][T11905] virt_wifi0 speed is unknown, defaulting to 1000
[  650.789750][T11905] virt_wifi0 speed is unknown, defaulting to 1000
[  650.807772][T11905] virt_wifi0 speed is unknown, defaulting to 1000
[  650.820805][T11905] virt_wifi0 speed is unknown, defaulting to 1000
[  651.349863][T11914] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1707'.
[  651.466244][T11914] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1707'.
[  652.505913][T11926] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1711'.
[  652.963256][T11936] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1713'.
[  654.142440][    T9] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  655.023810][    T9] usb 1-1: Using ep0 maxpacket: 8
[  655.036609][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  655.047393][    T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  655.056420][    T9] usb 1-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00
[  655.068726][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  655.083853][    T9] usb 1-1: config 0 descriptor??
[  655.452314][T11964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1721'.
[  655.557647][T11964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1721'.
[  655.822427][    T9] usb 1-1: USB disconnect, device number 46
[  656.361632][T11982] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1727'.
[  657.655508][T11992] FAULT_INJECTION: forcing a failure.
[  657.655508][T11992] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  657.669009][T11992] CPU: 0 UID: 0 PID: 11992 Comm: syz.0.1730 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  657.669034][T11992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  657.669044][T11992] Call Trace:
[  657.669050][T11992]  <TASK>
[  657.669057][T11992]  dump_stack_lvl+0x241/0x360
[  657.669082][T11992]  ? __pfx_dump_stack_lvl+0x10/0x10
[  657.669114][T11992]  should_fail_ex+0x424/0x570
[  657.669137][T11992]  _copy_from_user+0x2d/0xb0
[  657.669156][T11992]  ucma_write+0x17f/0x430
[  657.669182][T11992]  ? __pfx_ucma_write+0x10/0x10
[  657.669203][T11992]  ? __pfx_ucma_write+0x10/0x10
[  657.669224][T11992]  ? rw_verify_area+0x1f0/0x630
[  657.669241][T11992]  ? vfs_write+0x207/0xd10
[  657.669256][T11992]  ? vfs_write+0x2a1/0xd10
[  657.669276][T11992]  ? __pfx_ucma_write+0x10/0x10
[  657.669295][T11992]  vfs_write+0x2bc/0xd10
[  657.669315][T11992]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  657.669340][T11992]  ? __pfx_vfs_write+0x10/0x10
[  657.669362][T11992]  ? __rcu_read_unlock+0xa1/0x110
[  657.669381][T11992]  ? __fget_files+0x2a/0x420
[  657.669399][T11992]  ? __fget_files+0x39d/0x420
[  657.669415][T11992]  ? __fget_files+0x2a/0x420
[  657.669437][T11992]  ksys_write+0x19d/0x2d0
[  657.669459][T11992]  ? __pfx_ksys_write+0x10/0x10
[  657.669482][T11992]  ? trace_irq_enable+0x2c/0x120
[  657.669505][T11992]  do_syscall_64+0xf3/0x230
[  657.669528][T11992]  ? clear_bhb_loop+0x45/0xa0
[  657.669547][T11992]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  657.669563][T11992] RIP: 0033:0x7fd27f78d169
[  657.669579][T11992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  657.669592][T11992] RSP: 002b:00007fd280627038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  657.669611][T11992] RAX: ffffffffffffffda RBX: 00007fd27f9a6080 RCX: 00007fd27f78d169
[  657.669623][T11992] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000005
[  657.669634][T11992] RBP: 00007fd280627090 R08: 0000000000000000 R09: 0000000000000000
[  657.669644][T11992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  657.669655][T11992] R13: 0000000000000000 R14: 00007fd27f9a6080 R15: 00007ffce2624de8
[  657.669676][T11992]  </TASK>
[  658.700506][T12012] x_tables: duplicate underflow at hook 2
[  658.802312][T12016] IPVS: set_ctl: invalid protocol: 168 100.1.1.1:20001
[  658.811895][T12016] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1738'.
[  658.870564][T12019] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  660.859564][T12036] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1744'.
[  660.923331][   T30] audit: type=1400 audit(1742997913.433:244): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="^" requested=w pid=12033 comm="syz.6.1744" daddr=fe80::aa dest=20004
[  662.884317][T12066] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  664.231569][   T30] audit: type=1326 audit(1742997916.733:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12070 comm="syz.0.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27f78d169 code=0x7ffc0000
[  664.608452][T12079] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1755'.
[  664.627887][   T30] audit: type=1326 audit(1742997916.763:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12070 comm="syz.0.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27f78d169 code=0x7ffc0000
[  664.815164][   T30] audit: type=1326 audit(1742997916.793:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12070 comm="syz.0.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd27f78bad0 code=0x7ffc0000
[  664.838540][   T30] audit: type=1326 audit(1742997916.793:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12070 comm="syz.0.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd27f78bad0 code=0x7ffc0000
[  664.924211][   T30] audit: type=1326 audit(1742997916.843:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12070 comm="syz.0.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27f78d169 code=0x7ffc0000
[  665.014708][   T30] audit: type=1326 audit(1742997916.843:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12070 comm="syz.0.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27f78d169 code=0x7ffc0000
[  665.380883][   T30] audit: type=1326 audit(1742997916.853:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12070 comm="syz.0.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7fd27f78d169 code=0x7ffc0000
[  665.528576][   T30] audit: type=1326 audit(1742997916.853:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12070 comm="syz.0.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27f78d169 code=0x7ffc0000
[  665.635734][   T30] audit: type=1326 audit(1742997916.883:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12070 comm="syz.0.1754" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd27f78d169 code=0x7ffc0000
[  666.213421][T12097] netlink: 108 bytes leftover after parsing attributes in process `syz.6.1762'.
[  666.222754][T12097] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1762'.
[  667.224287][T12110] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1757'.
[  668.693301][T12129] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1772'.
[  668.841608][T12135] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1775'.
[  669.147703][T12146] syz.7.1777: attempt to access beyond end of device
[  669.147703][T12146] loop7: rw=0, sector=0, nr_sectors = 1 limit=0
[  669.161524][T12146] efs: cannot read volume header
[  669.899424][T12159] CIFS: iocharset name too long
[  670.166667][T12161] sctp: [Deprecated]: syz.0.1779 (pid 12161) Use of int in max_burst socket option.
[  670.166667][T12161] Use struct sctp_assoc_value instead
[  671.600144][T12174] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1785'.
[  672.349986][   T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  672.855775][T12160] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  672.925398][T12179] FAULT_INJECTION: forcing a failure.
[  672.925398][T12179] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  672.938885][T12179] CPU: 0 UID: 0 PID: 12179 Comm: syz.4.1784 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  672.938907][T12179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  672.938917][T12179] Call Trace:
[  672.938923][T12179]  <TASK>
[  672.938928][T12179]  dump_stack_lvl+0x241/0x360
[  672.938952][T12179]  ? __pfx_dump_stack_lvl+0x10/0x10
[  672.938967][T12179]  ? __pfx__printk+0x10/0x10
[  672.938989][T12179]  should_fail_ex+0x424/0x570
[  672.939009][T12179]  _copy_from_user+0x2d/0xb0
[  672.939026][T12179]  memdup_user+0x6b/0xd0
[  672.939043][T12179]  strndup_user+0x68/0xd0
[  672.939058][T12179]  __se_sys_mount+0xe6/0x400
[  672.939073][T12179]  ? irqentry_exit+0x63/0x90
[  672.939092][T12179]  ? lockdep_hardirqs_on+0x9d/0x150
[  672.939114][T12179]  ? __pfx___se_sys_mount+0x10/0x10
[  672.939133][T12179]  ? trace_irq_enable+0x2c/0x120
[  672.939148][T12179]  ? __x64_sys_mount+0x20/0xc0
[  672.939162][T12179]  do_syscall_64+0xf3/0x230
[  672.939182][T12179]  ? clear_bhb_loop+0x45/0xa0
[  672.939199][T12179]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  672.939214][T12179] RIP: 0033:0x7f40bf58d169
[  672.939229][T12179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  672.939242][T12179] RSP: 002b:00007f40c046b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  672.939260][T12179] RAX: ffffffffffffffda RBX: 00007f40bf7a6080 RCX: 00007f40bf58d169
[  672.939271][T12179] RDX: 0000200000000140 RSI: 0000200000000040 RDI: 0000200000000000
[  672.939283][T12179] RBP: 00007f40c046b090 R08: 0000000000000000 R09: 0000000000000000
[  672.939292][T12179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  672.939302][T12179] R13: 0000000000000000 R14: 00007f40bf7a6080 R15: 00007ffd7c361f78
[  672.939322][T12179]  </TASK>
[  673.633044][T12160] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  673.754782][T12160] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  674.986394][T12160] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  675.052414][T12197] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1791'.
[  675.578166][T12160] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  675.624582][T12160] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  675.896928][T12160] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  675.911654][T12160] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  676.892853][T12212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1795'.
[  682.009617][T12261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1810'.
[  684.365553][   T30] kauditd_printk_skb: 9 callbacks suppressed
[  684.365572][   T30] audit: type=1326 audit(1742997936.873:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12296 comm="syz.4.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40bf58d169 code=0x7ffc0000
[  684.572523][   T30] audit: type=1326 audit(1742997936.873:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12296 comm="syz.4.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40bf58d169 code=0x7ffc0000
[  684.932749][   T30] audit: type=1326 audit(1742997936.903:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12296 comm="syz.4.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7f40bf58d169 code=0x7ffc0000
[  684.965302][   T30] audit: type=1326 audit(1742997936.903:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12296 comm="syz.4.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40bf58d169 code=0x7ffc0000
[  685.767714][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  686.354481][T12299] FAULT_INJECTION: forcing a failure.
[  686.354481][T12299] name failslab, interval 1, probability 0, space 0, times 0
[  686.367169][T12299] CPU: 1 UID: 0 PID: 12299 Comm: syz.0.1821 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  686.367191][T12299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  686.367202][T12299] Call Trace:
[  686.367208][T12299]  <TASK>
[  686.367215][T12299]  dump_stack_lvl+0x241/0x360
[  686.367239][T12299]  ? __pfx_dump_stack_lvl+0x10/0x10
[  686.367258][T12299]  ? __pfx__printk+0x10/0x10
[  686.367274][T12299]  ? __pfx___might_resched+0x10/0x10
[  686.367290][T12299]  should_fail_ex+0x424/0x570
[  686.367305][T12299]  should_failslab+0xac/0x100
[  686.367321][T12299]  kmem_cache_alloc_node_noprof+0x7d/0x3b0
[  686.367337][T12299]  ? __alloc_skb+0x1c2/0x480
[  686.367352][T12299]  __alloc_skb+0x1c2/0x480
[  686.367366][T12299]  ? __pfx___alloc_skb+0x10/0x10
[  686.367380][T12299]  ? netlink_autobind+0xd6/0x2f0
[  686.367390][T12299]  ? netlink_autobind+0x2b0/0x2f0
[  686.367401][T12299]  netlink_sendmsg+0x65c/0xce0
[  686.367415][T12299]  ? __pfx_netlink_sendmsg+0x10/0x10
[  686.367429][T12299]  ? __pfx_netlink_sendmsg+0x10/0x10
[  686.367438][T12299]  __sock_sendmsg+0x221/0x270
[  686.367451][T12299]  ____sys_sendmsg+0x53c/0x870
[  686.367468][T12299]  ? __pfx_____sys_sendmsg+0x10/0x10
[  686.367481][T12299]  ? __fget_files+0x2a/0x420
[  686.367492][T12299]  ? __fget_files+0x2a/0x420
[  686.367505][T12299]  __sys_sendmsg+0x271/0x360
[  686.367521][T12299]  ? __pfx___sys_sendmsg+0x10/0x10
[  686.367552][T12299]  ? do_syscall_64+0xb6/0x230
[  686.367566][T12299]  do_syscall_64+0xf3/0x230
[  686.367579][T12299]  ? clear_bhb_loop+0x45/0xa0
[  686.367591][T12299]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  686.367600][T12299] RIP: 0033:0x7fd27f78d169
[  686.367610][T12299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  686.367620][T12299] RSP: 002b:00007fd280648038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  686.367632][T12299] RAX: ffffffffffffffda RBX: 00007fd27f9a5fa0 RCX: 00007fd27f78d169
[  686.367639][T12299] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000008
[  686.367645][T12299] RBP: 00007fd280648090 R08: 0000000000000000 R09: 0000000000000000
[  686.367651][T12299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  686.367658][T12299] R13: 0000000000000000 R14: 00007fd27f9a5fa0 R15: 00007ffce2624de8
[  686.367670][T12299]  </TASK>
[  686.684697][   T30] audit: type=1326 audit(1742997936.903:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12296 comm="syz.4.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40bf58d169 code=0x7ffc0000
[  686.706907][   T30] audit: type=1326 audit(1742997936.903:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12296 comm="syz.4.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f40bf58d169 code=0x7ffc0000
[  686.728530][   T30] audit: type=1326 audit(1742997936.903:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12296 comm="syz.4.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40bf58d169 code=0x7ffc0000
[  686.750227][   T30] audit: type=1326 audit(1742997936.903:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12296 comm="syz.4.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40bf58d169 code=0x7ffc0000
[  686.772815][   T30] audit: type=1326 audit(1742997936.903:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12296 comm="syz.4.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f40bf58d169 code=0x7ffc0000
[  686.944605][T12320] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1827'.
[  686.970991][   T30] audit: type=1326 audit(1742997939.473:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12296 comm="syz.4.1820" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40bf58d169 code=0x7ffc0000
[  687.065919][T12324] netlink: 'syz.6.1829': attribute type 10 has an invalid length.
[  687.081231][T12324] hsr0: entered promiscuous mode
[  687.108808][T12324] bond0: (slave hsr0): The slave device specified does not support setting the MAC address
[  687.130574][T12324] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  687.166393][T12324] bond0: (slave hsr0): Error -22 calling dev_set_mtu
[  688.752557][T12324] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1829'.
[  689.392334][T12337] openvswitch: netlink: nsh attr 0 has unexpected len 96 expected 0
[  689.487449][T12337] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  689.587774][T12342] tipc: New replicast peer: 0.0.0.0
[  689.608958][T12342] tipc: Enabled bearer <udp:syz2>, priority 10
[  690.025661][T12348] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1835'.
[  691.084486][   T30] kauditd_printk_skb: 23 callbacks suppressed
[  691.084505][   T30] audit: type=1326 audit(1742997943.593:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12360 comm="syz.4.1838" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f40bf58d169 code=0x0
[  693.192106][T12392] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1847'.
[  693.576725][T12400] 9pnet: p9_errstr2errno: server reported unknown error �@�L��	O00000000000000000005
[  693.684052][T12399] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1850'.
[  693.702038][T12404] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1851'.
[  693.742855][T12406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  693.940893][T12410] FAULT_INJECTION: forcing a failure.
[  693.940893][T12410] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  693.958505][T12410] CPU: 0 UID: 0 PID: 12410 Comm: syz.4.1849 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  693.958531][T12410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  693.958541][T12410] Call Trace:
[  693.958547][T12410]  <TASK>
[  693.958553][T12410]  dump_stack_lvl+0x241/0x360
[  693.958571][T12410]  ? __pfx_dump_stack_lvl+0x10/0x10
[  693.958583][T12410]  ? __pfx__printk+0x10/0x10
[  693.958598][T12410]  should_fail_ex+0x424/0x570
[  693.958613][T12410]  _copy_from_user+0x2d/0xb0
[  693.958625][T12410]  copy_msghdr_from_user+0xb3/0x580
[  693.958639][T12410]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  693.958655][T12410]  __sys_sendmmsg+0x361/0x7b0
[  693.958674][T12410]  ? __pfx___sys_sendmmsg+0x10/0x10
[  693.958699][T12410]  ? rcu_read_lock_any_held+0xbb/0x160
[  693.958710][T12410]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  693.958721][T12410]  ? vfs_write+0xb29/0xd10
[  693.958737][T12410]  ? ksys_write+0x24e/0x2d0
[  693.958750][T12410]  ? __mutex_unlock_slowpath+0x229/0x800
[  693.958773][T12410]  ? ksys_write+0x275/0x2d0
[  693.958788][T12410]  __x64_sys_sendmmsg+0xa0/0xb0
[  693.958803][T12410]  do_syscall_64+0xf3/0x230
[  693.958816][T12410]  ? clear_bhb_loop+0x45/0xa0
[  693.958827][T12410]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  693.958837][T12410] RIP: 0033:0x7f40bf58d169
[  693.958847][T12410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  693.958854][T12410] RSP: 002b:00007f40c046b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  693.958866][T12410] RAX: ffffffffffffffda RBX: 00007f40bf7a6080 RCX: 00007f40bf58d169
[  693.958873][T12410] RDX: 00000000000002e9 RSI: 0000200000000480 RDI: 0000000000000004
[  693.958880][T12410] RBP: 00007f40c046b090 R08: 0000000000000000 R09: 0000000000000000
[  693.958886][T12410] R10: 000000000000ff00 R11: 0000000000000246 R12: 0000000000000002
[  693.958892][T12410] R13: 0000000000000000 R14: 00007f40bf7a6080 R15: 00007ffd7c361f78
[  693.958904][T12410]  </TASK>
[  694.329986][T12412] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1853'.
[  695.037160][ T5842] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  695.634536][ T5842] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  695.644314][ T5842] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  695.654027][ T5842] usb 7-1: config 0 descriptor??
[  696.287324][ T5842] cp210x 7-1:0.0: cp210x converter detected
[  696.499126][ T5842] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  696.712958][T12436] overlay: ./file1 is not a directory
[  696.745422][T12436] fuse: blksize only supported for fuseblk
[  696.802066][ T5842] usb 7-1: cp210x converter now attached to ttyUSB0
[  696.894003][T12440] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  697.313863][ T5842] usb 7-1: USB disconnect, device number 18
[  697.441400][T12443] FAULT_INJECTION: forcing a failure.
[  697.441400][T12443] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  697.454499][T12443] CPU: 0 UID: 0 PID: 12443 Comm: syz.0.1861 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  697.454515][T12443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  697.454522][T12443] Call Trace:
[  697.454526][T12443]  <TASK>
[  697.454531][T12443]  dump_stack_lvl+0x241/0x360
[  697.454547][T12443]  ? __pfx_dump_stack_lvl+0x10/0x10
[  697.454559][T12443]  ? __pfx__printk+0x10/0x10
[  697.454573][T12443]  should_fail_ex+0x424/0x570
[  697.454588][T12443]  _copy_to_user+0x31/0xb0
[  697.454600][T12443]  simple_read_from_buffer+0xdc/0x170
[  697.454616][T12443]  proc_fail_nth_read+0x1ef/0x260
[  697.454629][T12443]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  697.454641][T12443]  ? rw_verify_area+0x246/0x630
[  697.454653][T12443]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  697.454664][T12443]  vfs_read+0x21f/0xb90
[  697.454677][T12443]  ? __pfx___mutex_lock+0x10/0x10
[  697.454691][T12443]  ? __pfx_vfs_read+0x10/0x10
[  697.454704][T12443]  ? __fget_files+0x2a/0x420
[  697.454715][T12443]  ? __fget_files+0x39d/0x420
[  697.454724][T12443]  ? __fget_files+0x2a/0x420
[  697.454737][T12443]  ksys_read+0x19d/0x2d0
[  697.454749][T12443]  ? __pfx_ksys_read+0x10/0x10
[  697.454763][T12443]  ? do_syscall_64+0xb6/0x230
[  697.454777][T12443]  do_syscall_64+0xf3/0x230
[  697.454789][T12443]  ? clear_bhb_loop+0x45/0xa0
[  697.454800][T12443]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  697.454810][T12443] RIP: 0033:0x7fd27f78bb7c
[  697.454820][T12443] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  697.454828][T12443] RSP: 002b:00007fd280627030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  697.454839][T12443] RAX: ffffffffffffffda RBX: 00007fd27f9a6080 RCX: 00007fd27f78bb7c
[  697.454846][T12443] RDX: 000000000000000f RSI: 00007fd2806270a0 RDI: 0000000000000007
[  697.454853][T12443] RBP: 00007fd280627090 R08: 0000000000000000 R09: 0000000000000000
[  697.454859][T12443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  697.454864][T12443] R13: 0000000000000000 R14: 00007fd27f9a6080 R15: 00007ffce2624de8
[  697.454877][T12443]  </TASK>
[  697.686380][ T5842] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  697.805346][ T5842] cp210x 7-1:0.0: device disconnected
[  697.818119][T12450] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1863'.
[  698.229015][ T5851] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  698.262487][T12458] FAULT_INJECTION: forcing a failure.
[  698.262487][T12458] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  698.275780][T12458] CPU: 0 UID: 0 PID: 12458 Comm: syz.6.1866 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  698.275806][T12458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  698.275815][T12458] Call Trace:
[  698.275819][T12458]  <TASK>
[  698.275824][T12458]  dump_stack_lvl+0x241/0x360
[  698.275841][T12458]  ? __pfx_dump_stack_lvl+0x10/0x10
[  698.275856][T12458]  ? dump_stack+0x9/0x15
[  698.275868][T12458]  should_fail_ex+0x424/0x570
[  698.275883][T12458]  _copy_from_user+0x2d/0xb0
[  698.275895][T12458]  copy_msghdr_from_user+0xb3/0x580
[  698.275909][T12458]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  698.275920][T12458]  ? __fget_files+0x2a/0x420
[  698.275939][T12458]  ? __fget_files+0x2a/0x420
[  698.275952][T12458]  __sys_sendmsg+0x20a/0x360
[  698.275968][T12458]  ? __pfx___sys_sendmsg+0x10/0x10
[  698.276000][T12458]  ? do_syscall_64+0xb6/0x230
[  698.276014][T12458]  do_syscall_64+0xf3/0x230
[  698.276027][T12458]  ? clear_bhb_loop+0x45/0xa0
[  698.276038][T12458]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  698.276048][T12458] RIP: 0033:0x7fa9b5d8d169
[  698.276058][T12458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  698.276067][T12458] RSP: 002b:00007fa9b6c44038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  698.276079][T12458] RAX: ffffffffffffffda RBX: 00007fa9b5fa6080 RCX: 00007fa9b5d8d169
[  698.276086][T12458] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004
[  698.276092][T12458] RBP: 00007fa9b6c44090 R08: 0000000000000000 R09: 0000000000000000
[  698.276098][T12458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  698.276104][T12458] R13: 0000000000000000 R14: 00007fa9b5fa6080 R15: 00007ffd6ce3aac8
[  698.276116][T12458]  </TASK>
[  698.892743][ T5851] usb 1-1: Using ep0 maxpacket: 8
[  698.904322][ T5851] usb 1-1: config 1 interface 0 altsetting 64 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  698.921092][ T5851] usb 1-1: config 1 interface 0 has no altsetting 0
[  698.969506][ T5851] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  698.982846][ T5851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  698.995087][ T5851] usb 1-1: Product: ࠄ
[  699.012668][ T5851] usb 1-1: Manufacturer: 疎楓붭죧瀿⦂響닗堜싄뿘왣ᓖ䋏漁ಽ逨靡땄묙慄诺믙蛀敦뻑虡艴뇢濳䰖﫫乞菎ֽԢㆂ斟寬ኾ౤礩痤굛㏃ム廲츅힇畎띵佯
[  699.059643][ T5851] usb 1-1: SerialNumber: syz
[  699.199195][T12465] overlayfs: failed to resolve './file0': -2
[  699.326164][ T5851] usb 1-1: USB disconnect, device number 47
[  699.509750][T12473] kAFS: No cell specified
[  699.952724][T12475] 9pnet_fd: Insufficient options for proto=fd
[  699.960498][T12470] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1869'.
[  700.124819][T12478] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1871'.
[  701.323205][ T5842] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  701.592277][   T82] IPVS: starting estimator thread 0...
[  701.714010][ T5842] usb 7-1: device descriptor read/64, error -71
[  701.714761][T12496] IPVS: using max 51 ests per chain, 122400 per kthread
[  701.742276][T12500] FAULT_INJECTION: forcing a failure.
[  701.742276][T12500] name failslab, interval 1, probability 0, space 0, times 0
[  701.791177][T12500] CPU: 0 UID: 0 PID: 12500 Comm: syz.4.1879 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  701.791205][T12500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  701.791216][T12500] Call Trace:
[  701.791222][T12500]  <TASK>
[  701.791230][T12500]  dump_stack_lvl+0x241/0x360
[  701.791258][T12500]  ? __pfx_dump_stack_lvl+0x10/0x10
[  701.791278][T12500]  ? __pfx__printk+0x10/0x10
[  701.791299][T12500]  ? __pfx___might_resched+0x10/0x10
[  701.791324][T12500]  should_fail_ex+0x424/0x570
[  701.791349][T12500]  should_failslab+0xac/0x100
[  701.791381][T12500]  kmem_cache_alloc_noprof+0x78/0x390
[  701.791406][T12500]  ? getname_flags+0xb6/0x530
[  701.791426][T12500]  getname_flags+0xb6/0x530
[  701.791445][T12500]  user_path_at+0x24/0x60
[  701.791465][T12500]  __x64_sys_fchmodat+0xf7/0x1c0
[  701.791491][T12500]  ? __pfx___x64_sys_fchmodat+0x10/0x10
[  701.791519][T12500]  ? do_syscall_64+0xb6/0x230
[  701.791544][T12500]  do_syscall_64+0xf3/0x230
[  701.791565][T12500]  ? clear_bhb_loop+0x45/0xa0
[  701.791584][T12500]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  701.791599][T12500] RIP: 0033:0x7f40bf58d169
[  701.791615][T12500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  701.791628][T12500] RSP: 002b:00007f40c048c038 EFLAGS: 00000246 ORIG_RAX: 000000000000010c
[  701.791645][T12500] RAX: ffffffffffffffda RBX: 00007f40bf7a5fa0 RCX: 00007f40bf58d169
[  701.791657][T12500] RDX: 00000000000001ff RSI: 0000200000000440 RDI: ffffffffffffff9c
[  701.791669][T12500] RBP: 00007f40c048c090 R08: 0000000000000000 R09: 0000000000000000
[  701.791680][T12500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  701.791690][T12500] R13: 0000000000000000 R14: 00007f40bf7a5fa0 R15: 00007ffd7c361f78
[  701.791712][T12500]  </TASK>
[  702.033779][ T5842] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  702.233393][ T5842] usb 7-1: device descriptor read/64, error -71
[  702.393763][ T5842] usb usb7-port1: attempt power cycle
[  703.048984][T12524] FAULT_INJECTION: forcing a failure.
[  703.048984][T12524] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  703.062222][T12524] CPU: 1 UID: 0 PID: 12524 Comm: syz.5.1888 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  703.062247][T12524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  703.062257][T12524] Call Trace:
[  703.062263][T12524]  <TASK>
[  703.062270][T12524]  dump_stack_lvl+0x241/0x360
[  703.062297][T12524]  ? __pfx_dump_stack_lvl+0x10/0x10
[  703.062317][T12524]  ? __pfx__printk+0x10/0x10
[  703.062343][T12524]  should_fail_ex+0x424/0x570
[  703.062368][T12524]  _copy_to_user+0x31/0xb0
[  703.062387][T12524]  sctp_getsockopt_interleaving_supported+0x490/0x620
[  703.062418][T12524]  ? __pfx_sctp_getsockopt_interleaving_supported+0x10/0x10
[  703.062452][T12524]  sctp_getsockopt+0x80c/0xbb0
[  703.062475][T12524]  ? __pfx_sock_common_getsockopt+0x10/0x10
[  703.062497][T12524]  do_sock_getsockopt+0x391/0x740
[  703.062525][T12524]  ? __pfx_do_sock_getsockopt+0x10/0x10
[  703.062547][T12524]  ? __fget_files+0x2a/0x420
[  703.062565][T12524]  ? __fget_files+0x39d/0x420
[  703.062580][T12524]  ? __fget_files+0x2a/0x420
[  703.062605][T12524]  __x64_sys_getsockopt+0x2a3/0x370
[  703.062629][T12524]  ? __pfx___x64_sys_getsockopt+0x10/0x10
[  703.062658][T12524]  ? do_syscall_64+0xb6/0x230
[  703.062681][T12524]  do_syscall_64+0xf3/0x230
[  703.062703][T12524]  ? clear_bhb_loop+0x45/0xa0
[  703.062721][T12524]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  703.062737][T12524] RIP: 0033:0x7feadc78d169
[  703.062752][T12524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  703.062766][T12524] RSP: 002b:00007feadd57f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037
[  703.062785][T12524] RAX: ffffffffffffffda RBX: 00007feadc9a6160 RCX: 00007feadc78d169
[  703.062796][T12524] RDX: 000000000000007d RSI: 0000000000000084 RDI: 0000000000000008
[  703.062805][T12524] RBP: 00007feadd57f090 R08: 0000200000001080 R09: 0000000000000000
[  703.062816][T12524] R10: 00002000000022c0 R11: 0000000000000246 R12: 0000000000000001
[  703.062826][T12524] R13: 0000000000000000 R14: 00007feadc9a6160 R15: 00007ffe779f9a18
[  703.062849][T12524]  </TASK>
[  703.423182][ T5842] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  703.528976][ T5842] usb 7-1: device descriptor read/8, error -71
[  703.618207][   T13] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  703.953986][T12548] QAT: failed to copy from user cfg_data.
[  703.963875][   T30] audit: type=1400 audit(1742997956.463:297): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="^" requested=w pid=12542 comm="syz.6.1893" daddr=fe80::18 dest=20003
[  705.428247][T12561] bridge0: port 1(vlan2) entered blocking state
[  705.467117][T12561] bridge0: port 1(vlan2) entered disabled state
[  705.529905][T12561] vlan2: entered allmulticast mode
[  705.591598][T12561] batadv0: entered allmulticast mode
[  705.685427][T12561] vlan2: entered promiscuous mode
[  705.801616][T12561] batadv0: entered promiscuous mode
[  705.880684][T12561] bridge0: port 1(vlan2) entered blocking state
[  705.887381][T12561] bridge0: port 1(vlan2) entered forwarding state
[  706.082184][T12574] FAULT_INJECTION: forcing a failure.
[  706.082184][T12574] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  706.095532][T12574] CPU: 0 UID: 0 PID: 12574 Comm: syz.6.1902 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  706.095557][T12574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  706.095568][T12574] Call Trace:
[  706.095575][T12574]  <TASK>
[  706.095581][T12574]  dump_stack_lvl+0x241/0x360
[  706.095608][T12574]  ? __pfx_dump_stack_lvl+0x10/0x10
[  706.095628][T12574]  ? __pfx__printk+0x10/0x10
[  706.095654][T12574]  should_fail_ex+0x424/0x570
[  706.095678][T12574]  _copy_from_user+0x2d/0xb0
[  706.095697][T12574]  hidp_sock_ioctl+0x1f5/0x8c0
[  706.095716][T12574]  ? __pfx_hidp_sock_ioctl+0x10/0x10
[  706.095762][T12574]  ? tomoyo_path_number_perm+0x684/0x790
[  706.095785][T12574]  ? tomoyo_path_number_perm+0x215/0x790
[  706.095810][T12574]  sock_do_ioctl+0x15a/0x490
[  706.095827][T12574]  ? __pfx_smack_log+0x10/0x10
[  706.095846][T12574]  ? __pfx_sock_do_ioctl+0x10/0x10
[  706.095874][T12574]  ? smk_tskacc+0x300/0x370
[  706.095894][T12574]  ? smack_file_ioctl+0x2a7/0x3b0
[  706.095915][T12574]  sock_ioctl+0x64a/0x900
[  706.095933][T12574]  ? __pfx_sock_ioctl+0x10/0x10
[  706.095949][T12574]  ? __fget_files+0x2a/0x420
[  706.095968][T12574]  ? __fget_files+0x2a/0x420
[  706.095987][T12574]  ? __pfx_sock_ioctl+0x10/0x10
[  706.096005][T12574]  __se_sys_ioctl+0xf1/0x160
[  706.096027][T12574]  do_syscall_64+0xf3/0x230
[  706.096049][T12574]  ? clear_bhb_loop+0x45/0xa0
[  706.096067][T12574]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  706.096083][T12574] RIP: 0033:0x7fa9b5d8d169
[  706.096098][T12574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  706.096112][T12574] RSP: 002b:00007fa9b6c65038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  706.096132][T12574] RAX: ffffffffffffffda RBX: 00007fa9b5fa5fa0 RCX: 00007fa9b5d8d169
[  706.096144][T12574] RDX: 0000200000000000 RSI: 00000000400448c9 RDI: 0000000000000006
[  706.096155][T12574] RBP: 00007fa9b6c65090 R08: 0000000000000000 R09: 0000000000000000
[  706.096166][T12574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  706.096176][T12574] R13: 0000000000000000 R14: 00007fa9b5fa5fa0 R15: 00007ffd6ce3aac8
[  706.096198][T12574]  </TASK>
[  706.599523][T12579] tunl0: entered allmulticast mode
[  706.776326][T12584] FAULT_INJECTION: forcing a failure.
[  706.776326][T12584] name failslab, interval 1, probability 0, space 0, times 0
[  706.791488][T12584] CPU: 0 UID: 0 PID: 12584 Comm: syz.4.1906 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  706.791505][T12584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  706.791512][T12584] Call Trace:
[  706.791516][T12584]  <TASK>
[  706.791521][T12584]  dump_stack_lvl+0x241/0x360
[  706.791538][T12584]  ? __pfx_dump_stack_lvl+0x10/0x10
[  706.791550][T12584]  ? __pfx__printk+0x10/0x10
[  706.791563][T12584]  ? __pfx___might_resched+0x10/0x10
[  706.791578][T12584]  should_fail_ex+0x424/0x570
[  706.791593][T12584]  should_failslab+0xac/0x100
[  706.791609][T12584]  __kmalloc_noprof+0xdf/0x4d0
[  706.791617][T12584]  ? tomoyo_realpath_from_path+0xc2/0x5e0
[  706.791632][T12584]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[  706.791648][T12584]  tomoyo_realpath_from_path+0xcf/0x5e0
[  706.791667][T12584]  tomoyo_path_number_perm+0x245/0x790
[  706.791680][T12584]  ? tomoyo_path_number_perm+0x215/0x790
[  706.791693][T12584]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  706.791708][T12584]  ? ksys_write+0x24e/0x2d0
[  706.791723][T12584]  ? __lock_acquire+0xad5/0xd80
[  706.791742][T12584]  ? __fget_files+0x2a/0x420
[  706.791752][T12584]  ? __fget_files+0x2a/0x420
[  706.791762][T12584]  ? __fget_files+0x2a/0x420
[  706.791774][T12584]  security_file_ioctl+0xc6/0x2a0
[  706.791794][T12584]  __se_sys_ioctl+0x46/0x160
[  706.791807][T12584]  do_syscall_64+0xf3/0x230
[  706.791820][T12584]  ? clear_bhb_loop+0x45/0xa0
[  706.791832][T12584]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  706.791841][T12584] RIP: 0033:0x7f40bf58d169
[  706.791852][T12584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  706.791860][T12584] RSP: 002b:00007f40c048c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  706.791872][T12584] RAX: ffffffffffffffda RBX: 00007f40bf7a5fa0 RCX: 00007f40bf58d169
[  706.791879][T12584] RDX: 0000200000000040 RSI: 0000000080104592 RDI: 0000000000000003
[  706.791886][T12584] RBP: 00007f40c048c090 R08: 0000000000000000 R09: 0000000000000000
[  706.791892][T12584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  706.791898][T12584] R13: 0000000000000000 R14: 00007f40bf7a5fa0 R15: 00007ffd7c361f78
[  706.791910][T12584]  </TASK>
[  706.792387][T12584] ERROR: Out of memory at tomoyo_realpath_from_path.
[  708.292779][   T30] audit: type=1400 audit(1742997960.733:298): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="^" requested=w pid=12595 comm="syz.6.1910" daddr=fc02::
[  708.796909][ T5842] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  708.864960][ T7034] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0
[  709.653196][ T7034] hid-generic 0000:0000:0000.000C: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  709.740813][ T5842] usb 1-1: Using ep0 maxpacket: 8
[  709.775106][ T5842] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab
[  709.792727][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  709.801279][ T5842] usb 1-1: Product: syz
[  709.807737][ T5842] usb 1-1: Manufacturer: syz
[  709.812743][ T5842] usb 1-1: SerialNumber: syz
[  709.819058][ T5842] usb 1-1: config 0 descriptor??
[  710.568455][ T5842] usb 1-1: USB disconnect, device number 48
[  710.972991][T12624] futex_wake_op: syz.4.1916 tries to shift op by 144; fix this program
[  711.255036][T12628] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1918'.
[  712.712335][T12642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1923'.
[  714.722261][T12668] bond3: entered promiscuous mode
[  714.970534][T12668] 8021q: adding VLAN 0 to HW filter on device bond3
[  715.190239][T12667] netlink: 'syz.6.1932': attribute type 4 has an invalid length.
[  715.198223][T12667] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.1932'.
[  715.263730][ T5852] usb 7-1: new full-speed USB device number 23 using dummy_hcd
[  715.635155][ T5852] usb 7-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  715.705307][ T5852] usb 7-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  715.837082][ T5852] usb 7-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  716.002400][ T5852] usb 7-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  716.041187][ T5852] usb 7-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  716.042802][T12686] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1936'.
[  716.158314][ T5852] usb 7-1: Manufacturer: syz
[  716.181067][ T5852] usb 7-1: SerialNumber: syz
[  716.188156][T12677] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  717.459940][T12721] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1947'.
[  717.590191][ T5852] yealink 7-1:36.0: invalid payload size 64, expected 16
[  717.603831][T12722] block nbd7: NBD_DISCONNECT
[  717.609244][T12722] ax25_connect(): syz.7.1947 uses autobind, please contact jreuter@yaina.de
[  717.639394][ T5852] input: Yealink usb-p1k as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:36.0/input/input19
[  717.671866][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  717.678872][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  717.686001][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  717.701882][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  717.709364][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  717.717382][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  717.725899][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  717.733219][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  717.740218][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  717.747008][    C1] yealink 7-1:36.0: unexpected response 0
[  717.753054][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  717.760051][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  717.766856][    C1] yealink 7-1:36.0: unexpected response 0
[  717.772805][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  717.779757][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  717.786549][    C1] yealink 7-1:36.0: unexpected response 0
[  717.792553][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  717.799581][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  717.806371][    C1] yealink 7-1:36.0: unexpected response 0
[  717.812293][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  717.819529][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  717.826300][    C1] yealink 7-1:36.0: unexpected response 0
[  717.832557][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  717.839605][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  717.846378][    C1] yealink 7-1:36.0: unexpected response 0
[  717.852294][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  717.859238][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  717.866019][    C1] yealink 7-1:36.0: unexpected response 0
[  717.871926][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  717.878866][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  717.885620][    C1] yealink 7-1:36.0: unexpected response 0
[  717.891504][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  717.898422][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  717.905184][    C1] yealink 7-1:36.0: unexpected response 0
[  717.911073][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  717.918454][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  717.925309][    C1] yealink 7-1:36.0: unexpected response 0
[  717.931190][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  717.938112][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  717.944869][    C1] yealink 7-1:36.0: unexpected response 0
[  717.950742][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  717.957669][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  717.964421][    C1] yealink 7-1:36.0: unexpected response 0
[  717.970288][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  717.977270][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  717.984030][    C1] yealink 7-1:36.0: unexpected response 0
[  717.989938][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  717.996985][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.003769][    C1] yealink 7-1:36.0: unexpected response 0
[  718.009663][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.016600][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.023362][    C1] yealink 7-1:36.0: unexpected response 0
[  718.029473][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.036634][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.043401][    C1] yealink 7-1:36.0: unexpected response 0
[  718.049284][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.056201][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.062957][    C1] yealink 7-1:36.0: unexpected response 0
[  718.068879][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.075801][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.082550][    C1] yealink 7-1:36.0: unexpected response 0
[  718.088470][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.095391][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.102164][    C1] yealink 7-1:36.0: unexpected response 0
[  718.108085][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.115080][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.121922][    C1] yealink 7-1:36.0: unexpected response 0
[  718.128083][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.135339][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.142096][    C1] yealink 7-1:36.0: unexpected response 0
[  718.147973][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.154912][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.161701][    C1] yealink 7-1:36.0: unexpected response 0
[  718.167640][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.174569][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.181327][    C1] yealink 7-1:36.0: unexpected response 0
[  718.187200][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.194127][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.200892][    C1] yealink 7-1:36.0: unexpected response 0
[  718.206812][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.213734][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.220491][    C1] yealink 7-1:36.0: unexpected response 0
[  718.226578][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.233830][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.240592][    C1] yealink 7-1:36.0: unexpected response 0
[  718.246497][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.253429][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.260192][    C1] yealink 7-1:36.0: unexpected response 0
[  718.266076][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.273011][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.279774][    C1] yealink 7-1:36.0: unexpected response 0
[  718.285728][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.292702][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.299472][    C1] yealink 7-1:36.0: unexpected response 0
[  718.305354][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.312275][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.319050][    C1] yealink 7-1:36.0: unexpected response 0
[  718.324991][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.332206][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.338985][    C1] yealink 7-1:36.0: unexpected response 0
[  718.344919][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.351870][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.358724][    C1] yealink 7-1:36.0: unexpected response 0
[  718.364647][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.371570][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.378320][    C1] yealink 7-1:36.0: unexpected response 0
[  718.384261][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.391185][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.397937][    C1] yealink 7-1:36.0: unexpected response 0
[  718.403883][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.410792][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.417543][    C1] yealink 7-1:36.0: unexpected response 0
[  718.423479][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.430713][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.437481][    C1] yealink 7-1:36.0: unexpected response 0
[  718.443386][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.450330][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.457095][    C1] yealink 7-1:36.0: unexpected response 0
[  718.463030][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.469950][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.476712][    C1] yealink 7-1:36.0: unexpected response 0
[  718.482696][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.489642][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.496398][    C1] yealink 7-1:36.0: unexpected response 0
[  718.502301][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.509341][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.516099][    C1] yealink 7-1:36.0: unexpected response 0
[  718.521990][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.528942][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.535706][    C1] yealink 7-1:36.0: unexpected response 0
[  718.543055][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.550357][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.557152][    C1] yealink 7-1:36.0: unexpected response 0
[  718.563100][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.570018][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.576780][    C1] yealink 7-1:36.0: unexpected response 0
[  718.582690][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.589660][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.596429][    C1] yealink 7-1:36.0: unexpected response 0
[  718.602334][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.609284][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.616040][    C1] yealink 7-1:36.0: unexpected response 0
[  718.621965][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.628942][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.635700][    C1] yealink 7-1:36.0: unexpected response 0
[  718.641835][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.649028][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.655794][    C1] yealink 7-1:36.0: unexpected response 0
[  718.661715][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.668720][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.675508][    C1] yealink 7-1:36.0: unexpected response 0
[  718.681418][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.688408][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.695169][    C1] yealink 7-1:36.0: unexpected response 0
[  718.701066][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.708229][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.715021][    C1] yealink 7-1:36.0: unexpected response 0
[  718.721126][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.728124][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.734892][    C1] yealink 7-1:36.0: unexpected response 0
[  718.743220][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.750726][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.757524][    C1] yealink 7-1:36.0: unexpected response 0
[  718.765234][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.772217][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.777375][T12720] ------------[ cut here ]------------
[  718.779173][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.784904][T12720] refcount_t: decrement hit 0; leaking memory.
[  718.791779][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.804704][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.811467][    C1] yealink 7-1:36.0: unexpected response 0
[  718.817373][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.824410][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.831206][    C1] yealink 7-1:36.0: unexpected response 0
[  718.837155][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.853020][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.859906][    C1] yealink 7-1:36.0: unexpected response 0
[  718.866334][    C1] yealink 7-1:36.0: urb_ctl_callback - urb status -71
[  718.873277][ T5852] usb 7-1: USB disconnect, device number 23
[  718.873367][    C1] yealink 7-1:36.0: urb_irq_callback - urb status -71
[  718.886033][    C1] yealink 7-1:36.0: unexpected response 0
[  718.891766][    C1] yealink 7-1:36.0: urb_irq_callback - usb_submit_urb failed -19
[  718.990682][T12720] WARNING: CPU: 1 PID: 12720 at lib/refcount.c:31 refcount_warn_saturate+0xfa/0x1d0
[  719.000381][T12720] Modules linked in:
[  719.004526][T12720] CPU: 1 UID: 0 PID: 12720 Comm: syz.7.1947 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  719.016657][T12720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  719.026942][T12720] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0
[  719.033334][T12720] Code: b2 00 00 00 e8 27 22 cf fc 5b 5d c3 cc cc cc cc e8 1b 22 cf fc c6 05 8e c5 31 0b 01 90 48 c7 c7 40 d0 7f 8c e8 17 3a 8e fc 90 <0f> 0b 90 90 eb d9 e8 fb 21 cf fc c6 05 6b c5 31 0b 01 90 48 c7 c7
[  719.053435][T12720] RSP: 0018:ffffc900048afb68 EFLAGS: 00010246
[  719.059504][T12720] RAX: 0a8aac9d53676600 RBX: ffff888024f7064c RCX: ffff888026321e00
[  719.067918][T12720] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  719.076115][T12720] RBP: 0000000000000004 R08: ffffffff81826ce2 R09: 1ffffffff2077a6e
[  719.084232][T12720] R10: dffffc0000000000 R11: fffffbfff2077a6f R12: ffff88807ee48830
[  719.092195][T12720] R13: 0000000000000000 R14: ffff888024f7064c R15: ffff888024f70608
[  719.100295][T12720] FS:  000055557a534500(0000) GS:ffff88812535a000(0000) knlGS:0000000000000000
[  719.109349][T12720] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  719.116175][T12720] CR2: 00007fd27f979178 CR3: 00000000642ce000 CR4: 00000000003526f0
[  719.124261][T12720] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  719.132243][T12720] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  719.140370][T12720] Call Trace:
[  719.143762][T12720]  <TASK>
[  719.147021][T12720]  ? __warn+0x165/0x4d0
[  719.151190][T12720]  ? refcount_warn_saturate+0xfa/0x1d0
[  719.156982][T12720]  ? report_bug+0x2b3/0x500
[  719.161474][T12720]  ? refcount_warn_saturate+0xfa/0x1d0
[  719.166983][T12720]  ? refcount_warn_saturate+0xfa/0x1d0
[  719.172447][T12720]  ? refcount_warn_saturate+0xfc/0x1d0
[  719.177971][T12720]  ? handle_bug+0x89/0x170
[  719.182385][T12720]  ? exc_invalid_op+0x1a/0x50
[  719.187148][T12720]  ? asm_exc_invalid_op+0x1a/0x20
[  719.192157][T12720]  ? __warn_printk+0x2a2/0x360
[  719.196984][T12720]  ? refcount_warn_saturate+0xfa/0x1d0
[  719.202428][T12720]  ? refcount_warn_saturate+0xf9/0x1d0
[  719.207920][T12720]  ref_tracker_free+0x6ab/0x7e0
[  719.212802][T12720]  ? __pfx_ref_tracker_free+0x10/0x10
[  719.218162][T12720]  ? ax25_destroy_socket+0x551/0x5c0
[  719.223465][T12720]  ax25_release+0x368/0x960
[  719.227962][T12720]  sock_close+0xbc/0x240
[  719.232186][T12720]  ? __pfx_sock_close+0x10/0x10
[  719.237086][T12720]  __fput+0x3e9/0x9f0
[  719.241081][T12720]  task_work_run+0x251/0x310
[  719.245706][T12720]  ? _raw_spin_unlock+0x28/0x50
[  719.250845][T12720]  ? __pfx_task_work_run+0x10/0x10
[  719.256268][T12720]  ? syscall_exit_to_user_mode+0xa3/0x340
[  719.261998][T12720]  syscall_exit_to_user_mode+0x13f/0x340
[  719.267687][T12720]  do_syscall_64+0x100/0x230
[  719.272265][T12720]  ? clear_bhb_loop+0x45/0xa0
[  719.277062][T12720]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.282980][T12720] RIP: 0033:0x7fb15d18d169
[  719.287382][T12720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  719.307041][T12720] RSP: 002b:00007fff83374678 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  719.315483][T12720] RAX: 0000000000000000 RBX: 00007fb15d3a7ba0 RCX: 00007fb15d18d169
[  719.323590][T12720] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  719.331556][T12720] RBP: 00007fb15d3a7ba0 R08: 0000000000000274 R09: 0000001e8337496f
[  719.339573][T12720] R10: 00007fb15d3a7ac0 R11: 0000000000000246 R12: 00000000000af5b9
[  719.347579][T12720] R13: 00007fb15d3a6160 R14: ffffffffffffffff R15: 00007fff83374790
[  719.355994][T12720]  </TASK>
[  719.359014][T12720] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  719.366274][T12720] CPU: 1 UID: 0 PID: 12720 Comm: syz.7.1947 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) 
[  719.377991][T12720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  719.388029][T12720] Call Trace:
[  719.391292][T12720]  <TASK>
[  719.394235][T12720]  dump_stack_lvl+0x241/0x360
[  719.398897][T12720]  ? __pfx_dump_stack_lvl+0x10/0x10
[  719.404078][T12720]  ? __pfx__printk+0x10/0x10
[  719.408652][T12720]  ? vscnprintf+0x5d/0x90
[  719.412982][T12720]  panic+0x349/0x880
[  719.416860][T12720]  ? __warn+0x174/0x4d0
[  719.421007][T12720]  ? __pfx_panic+0x10/0x10
[  719.425429][T12720]  __warn+0x344/0x4d0
[  719.429394][T12720]  ? refcount_warn_saturate+0xfa/0x1d0
[  719.434836][T12720]  report_bug+0x2b3/0x500
[  719.439151][T12720]  ? refcount_warn_saturate+0xfa/0x1d0
[  719.444594][T12720]  ? refcount_warn_saturate+0xfa/0x1d0
[  719.450033][T12720]  ? refcount_warn_saturate+0xfc/0x1d0
[  719.455477][T12720]  handle_bug+0x89/0x170
[  719.459724][T12720]  exc_invalid_op+0x1a/0x50
[  719.464216][T12720]  asm_exc_invalid_op+0x1a/0x20
[  719.469058][T12720] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0
[  719.475122][T12720] Code: b2 00 00 00 e8 27 22 cf fc 5b 5d c3 cc cc cc cc e8 1b 22 cf fc c6 05 8e c5 31 0b 01 90 48 c7 c7 40 d0 7f 8c e8 17 3a 8e fc 90 <0f> 0b 90 90 eb d9 e8 fb 21 cf fc c6 05 6b c5 31 0b 01 90 48 c7 c7
[  719.494722][T12720] RSP: 0018:ffffc900048afb68 EFLAGS: 00010246
[  719.500777][T12720] RAX: 0a8aac9d53676600 RBX: ffff888024f7064c RCX: ffff888026321e00
[  719.508753][T12720] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  719.516718][T12720] RBP: 0000000000000004 R08: ffffffff81826ce2 R09: 1ffffffff2077a6e
[  719.524676][T12720] R10: dffffc0000000000 R11: fffffbfff2077a6f R12: ffff88807ee48830
[  719.532645][T12720] R13: 0000000000000000 R14: ffff888024f7064c R15: ffff888024f70608
[  719.540608][T12720]  ? __warn_printk+0x2a2/0x360
[  719.545368][T12720]  ? refcount_warn_saturate+0xf9/0x1d0
[  719.550810][T12720]  ref_tracker_free+0x6ab/0x7e0
[  719.555667][T12720]  ? __pfx_ref_tracker_free+0x10/0x10
[  719.561060][T12720]  ? ax25_destroy_socket+0x551/0x5c0
[  719.566339][T12720]  ax25_release+0x368/0x960
[  719.570830][T12720]  sock_close+0xbc/0x240
[  719.575068][T12720]  ? __pfx_sock_close+0x10/0x10
[  719.579907][T12720]  __fput+0x3e9/0x9f0
[  719.583875][T12720]  task_work_run+0x251/0x310
[  719.588452][T12720]  ? _raw_spin_unlock+0x28/0x50
[  719.593284][T12720]  ? __pfx_task_work_run+0x10/0x10
[  719.598388][T12720]  ? syscall_exit_to_user_mode+0xa3/0x340
[  719.604091][T12720]  syscall_exit_to_user_mode+0x13f/0x340
[  719.609707][T12720]  do_syscall_64+0x100/0x230
[  719.614283][T12720]  ? clear_bhb_loop+0x45/0xa0
[  719.618954][T12720]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  719.624827][T12720] RIP: 0033:0x7fb15d18d169
[  719.629223][T12720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  719.648825][T12720] RSP: 002b:00007fff83374678 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  719.657257][T12720] RAX: 0000000000000000 RBX: 00007fb15d3a7ba0 RCX: 00007fb15d18d169
[  719.665257][T12720] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  719.673236][T12720] RBP: 00007fb15d3a7ba0 R08: 0000000000000274 R09: 0000001e8337496f
[  719.681191][T12720] R10: 00007fb15d3a7ac0 R11: 0000000000000246 R12: 00000000000af5b9
[  719.689146][T12720] R13: 00007fb15d3a6160 R14: ffffffffffffffff R15: 00007fff83374790
[  719.697108][T12720]  </TASK>
[  719.700395][T12720] Kernel Offset: disabled
[  719.704782][T12720] Rebooting in 86400 seconds..