last executing test programs:

13.56784787s ago: executing program 0 (id=122):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r0}, 0x8)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x0)
setresuid(0x0, r1, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r2 = io_uring_setup(0x7d0, &(0x7f0000000100)={0x0, 0x39fe})
io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
syz_usb_connect(0x0, 0x36, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0xac, 0x77, 0x26, 0x40, 0x93a, 0x2468, 0xe425, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xa6, 0x0, 0x1, 0xd, 0x78, 0x6f, 0x0, [], [{{0x9, 0x5, 0xe}}]}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x22, 0xfd, 0x20}}]}}]}}, 0x0)
r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x3, 0x0)
connect$pppoe(r3, &(0x7f0000000180)={0x18, 0x0, {0x2002, @local, 'wg2\x00'}}, 0xffffffffffffff9d)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81})
write$bt_hci(r5, &(0x7f0000000080)=ANY=[], 0x6)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf9a1951}, {0xa, 0x0, 0x1046, @dev={0xfe, 0x80, '\x00', 0x32}}, r6}}, 0x48)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @local}, r6}}, 0x48)
write$RDMA_USER_CM_CMD_MIGRATE_ID(r4, &(0x7f0000000440)={0x12, 0x10, 0xfa00, {0x0, r6, r4}}, 0x18)
sendmmsg(0xffffffffffffffff, &(0x7f0000002340), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0)
recvmmsg(r8, 0x0, 0x0, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000280)={'wg2\x00'})

10.098524502s ago: executing program 0 (id=134):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="62202a3a2a20726d80"], 0x9)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x256f16877c9c3f29, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20)

7.167638237s ago: executing program 2 (id=138):
r0 = socket(0x200000100000011, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4)
r3 = syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x20080)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x4)
ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, <r5=>r1, {0x10000}}, './file0\x00'})
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = dup(r6)
ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f58704"])
r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x6b, 0x0, 0x1, 0x301, '\x00', r2, 0xffffffffffffffff, 0x3, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50)
r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffff800, '\x00', r2, 0xffffffffffffffff, 0x4, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50)
r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000680)='./file0\x00', 0x0, 0x4008, r1}, 0x18)
r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a40)={@map=r12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_ext={0x1c, 0x3b, &(0x7f0000000880)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x4}, [@map_val={0x18, 0x5, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x7}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @jmp={0x5, 0x1, 0x940f056e9422df64, 0x9, 0x5, 0xffffffffffffffe0, 0x10}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x25d}}, @ldst={0x2, 0x3, 0x4, 0xa, 0x4, 0x0, 0x4}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x2, 0x1, 0x0, r8}]}, &(0x7f0000000200)='syzkaller\x00', 0x78e9aed2, 0x0, 0x0, 0x40f00, 0x0, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x9, 0xffff7fff, 0x4}, 0x10, 0x2e5b6, 0xffffffffffffffff, 0x4, &(0x7f0000000700)=[r9, r10, 0xffffffffffffffff, r11, r12], &(0x7f0000000740)=[{0x1, 0x3, 0x9, 0x6}, {0x1, 0x3, 0x3, 0x5}, {0x3, 0x3, 0x0, 0xf}, {0x5, 0x3, 0xd, 0x4}], 0x10, 0x3, @void, @value}, 0x94)
sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="34000000020000010000000000000000d96e6c8d5e85080045f00d80724e11d569116e3a1ce41e2a560254ea0043"], 0x34}, {&(0x7f0000000640)=ANY=[@ANYBLOB="0001060000"], 0x100}], 0x2}, 0x0)
r13 = socket$nl_generic(0x10, 0x3, 0x10)
r14 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), r13)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r13, 0x8933, &(0x7f00000003c0)={'wg2\x00', <r15=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x68, r14, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r15}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @loopback, 0x1}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}]}, 0x68}}, 0x800)
r16 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r16, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x68, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x34, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2d, 0x1, "fefe807eb37bc2a7a6110a370abbe10adf32aa848edc90232d4665de2ae1583b710c20da833679ebe6"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0)

6.596236426s ago: executing program 2 (id=140):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001800010900000001ffdbdf2502180000ff000008"], 0x2c}}, 0x0)

6.491156647s ago: executing program 2 (id=141):
iopl(0x3)
fsmount(0xffffffffffffffff, 0x2000, 0x0)

6.390245086s ago: executing program 2 (id=142):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x40000000015, 0x5, 0x0)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$RTC_PIE_ON(r4, 0x7005)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000180)={0x28, 0x1, 0x0, 0x0, <r6=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f0000000200)={0x28, 0x0, 0x0, r6, 0x0, 0x0, 0xdead, 0x0, 0x0})
close_range(r3, 0xffffffffffffffff, 0x0)

5.288046833s ago: executing program 0 (id=144):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de00000000000000001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0)
socket(0xa, 0x3, 0x3a)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000700), 0x141000, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet(0x2, 0x3, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r5, r2, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1, 0xffffffff}}}}}, 0x0)

5.269750076s ago: executing program 2 (id=145):
r0 = socket$packet(0x11, 0x3, 0x300)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES8, @ANYRESHEX=r0], 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22)
ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40044160, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18f5a09e5b54b15f81824bfe8e8b2232a90000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='contention_end\x00', r1}, 0x18)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r2, 0x800448d4, &(0x7f0000000080)={0x0, 0x200, "00fa00"})
sched_setscheduler(0x0, 0x2, 0x0)

5.090955405s ago: executing program 1 (id=147):
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x0)
sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x80)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0xc, 0xfffffffffffff800}, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x2}, 0x18)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000100)={0x18, 0x0, 0x0, 0x0, &(0x7f00000000c0)})
recvfrom$phonet(0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0)

5.034326815s ago: executing program 0 (id=148):
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b0be949499ca6a5b2c467b6d3d1c0ae1e9820331afd90cc832c761aa3adf9be48c401c7f893694bf8cd19b7173cd4688904f7310af046fd490d3f2cf49b5f68aecf0bc659dc3d53c2"], &(0x7f0000000140)='GPL\x00', 0x0, 0xbd, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0)
r3 = syz_io_uring_setup(0x3430, &(0x7f0000000340)={0x0, 0x4291, 0x10100, 0x0, 0x4002014d}, &(0x7f0000001240)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0)
syz_io_uring_submit(r4, r5, 0x0)
io_uring_enter(r3, 0x567, 0xef52, 0x0, 0x0, 0x0)

3.91781442s ago: executing program 3 (id=150):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000000c0)=0x101, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x8}], 0x1c)
setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8)
recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4)
write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0x440)

3.726646107s ago: executing program 1 (id=151):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000480)={0x15, "f3c492eb0165200369be040800a9b42c000004002231a11000001cd3d9fa00", <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
recvmmsg$unix(r2, &(0x7f00000072c0)=[{{&(0x7f0000000000), 0x6e, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/62, 0x3e}, {&(0x7f0000000180)=""/194, 0xc2}, {&(0x7f00000004c0)=""/197, 0xc5}, {&(0x7f00000005c0)=""/4096, 0x1000}], 0x4}}, {{&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000003780)=[{&(0x7f00000015c0)=""/151, 0x97}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/211, 0xd3}, {&(0x7f0000002780)=""/4096, 0x1000}], 0x5}}, {{&(0x7f0000003800), 0x6e, &(0x7f0000000440)=[{&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)=""/71, 0x47}, {&(0x7f0000004900)=""/164, 0xa4}], 0x3, &(0x7f00000049c0)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000004a00), 0x6e, &(0x7f0000004b40)=[{&(0x7f0000004a80)=""/183, 0xb7}], 0x1, &(0x7f0000004b80)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xc8}}, {{&(0x7f0000004c80)=@abs, 0x6e, &(0x7f0000007180)=[{&(0x7f0000004d00)=""/148, 0x94}, {&(0x7f0000004dc0)=""/145, 0x91}, {&(0x7f0000004e80)=""/4096, 0x1000}, {&(0x7f0000005e80)=""/211, 0xd3}, {&(0x7f0000005f80)=""/55, 0x37}, {&(0x7f0000005fc0)=""/4, 0x4}, {&(0x7f0000006000)=""/131, 0x83}, {&(0x7f00000060c0)=""/156, 0x9c}, {&(0x7f0000006180)=""/4096, 0x1000}], 0x9, &(0x7f0000007240)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}], 0x5, 0x10000, 0x0)
ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000100)={"9fcaa0504b38d5004b9277c079417ff857dc9b7ac770169aed764b4d2ada8bde", r1, <r3=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"fe0d1acc7f00001f0000000000000000000000fbffffff00", r3, <r4=>0xffffffffffffffff})
ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f0000000280)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)=[{}]})

3.613336386s ago: executing program 1 (id=152):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x2, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pipe2(&(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x8001, 0x401514}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getdents64(0xffffffffffffffff, 0x0, 0x18)
close_range(0xffffffffffffffff, r1, 0x2)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req={0x7fffffff, 0x1, 0x1, 0x8}, 0x10)
socket(0x1, 0x803, 0x0)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r8 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r8, @ANYBLOB="600000000040000008000300", @ANYRES32], 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x0)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r7, 0x0)
syz_emit_ethernet(0x92, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x5c, 0x6, 0x0, @remote, @mcast2, {[], {{0xffff, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x17, 0xc2, 0x0, 0x0, 0xffff, {[@mptcp=@ack={0x1e, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "519f7eff2e9879026a27bd9807642a"}, @md5sig={0x13, 0x12, "7224407c80fe8a3616b4bf3400006cc8"}, @mptcp=@capable={0x1e, 0xc, 0x9, 0x8, 0x1, 0x6}, @generic={0x3, 0x2}, @sack={0x5, 0xe, [0x10009, 0x8, 0x7]}]}}}}}}}}, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0x40044620, 0x0)

3.548116171s ago: executing program 0 (id=153):
syz_init_net_socket$x25(0x9, 0x5, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00')
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x1fe, 0x0, 0x406, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005e2fff7ff0000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0], 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0) (async)
openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async)
syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') (async)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x1fe, 0x0, 0x406, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005e2fff7ff0000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0], 0x0) (async)

2.873482161s ago: executing program 3 (id=154):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000039780000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000004c00038048000080440001803d0001"], 0x5f8}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0)

2.76847078s ago: executing program 3 (id=156):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r1 = socket(0x26, 0x80000, 0x4)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x100000ee)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPRESSIONS={0x14, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0)
sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
sendmsg$rds(r1, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001500)=""/194, 0xc2}], 0x1, 0x0, 0x0, 0x40}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x3c}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
sendmsg$OSF_MSG_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000001a00)=ANY=[@ANYBLOB="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"], 0x964}, 0x1, 0x0, 0x0, 0x20008010}, 0x20044000)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)
setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000240)=0x90d, 0x4)
syz_emit_ethernet(0xd8, &(0x7f00000007c0)=ANY=[], 0x0)

2.631566841s ago: executing program 1 (id=157):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000480)={0x15, "f3c492eb0165200369be040800a9b42c000004002231a11000001cd3d9fa00", <r1=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000100)={"9fcaa0504b38d5004b9277c079417ff857dc9b7ac770169aed764b4d2ada8bde", r1, <r2=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"fe0d1acc7f00001f0000000000000000000000fbffffff00", r2, <r3=>0xffffffffffffffff})
ioctl$SYNC_IOC_FILE_INFO(r3, 0xc0383e04, &(0x7f0000000280)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000380)=[{}]}) (fail_nth: 5)

2.480163224s ago: executing program 4 (id=158):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003000/0x4000)=nil}) (fail_nth: 5)

2.207531396s ago: executing program 1 (id=159):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={0x0}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
open(0x0, 0x143042, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400))
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x3e}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r2)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@cipso={0x86, 0xb, 0x3, [{0x1, 0x5, "83fa62"}]}]}}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @broadcast=0xac1414bb}}}}}}, 0x0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r3, 0x30d}, 0x14}, 0x1, 0x2000000}, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x28}}, 0x0)
pipe2$watch_queue(&(0x7f0000000000), 0x80)
socket$igmp(0x2, 0x3, 0x2)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000057c0)=ANY=[@ANYBLOB="9c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c0002800600010000000000280003800c00010000000000000000000c00010000000000000000000c00010000000000000000001c0004800400010000000000000000000c000100000000000e0000000c0002000000008a8e743037"], 0x9c}, 0x1, 0xba01}, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)

2.102445214s ago: executing program 2 (id=160):
r0 = syz_io_uring_setup(0x2a20, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000180)=<r1=>0x0, &(0x7f00000002c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_RECVMSG={0xa, 0x1a, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10240, 0x0, {0x2}})
r3 = eventfd(0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000140)=r3, 0x1)
io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r4 = syz_usb_connect(0x1, 0x52a, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x32, 0x16, 0x58, 0x20, 0x2001, 0x3c1b, 0x103c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x518, 0x1, 0xf9, 0xb3, 0xf0, 0xb, [{{0x9, 0x4, 0x6c, 0x7f, 0xd, 0xdf, 0x19, 0xab, 0x8, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "0e14cca273"}, {0x5, 0x24, 0x0, 0x926f}, {0xd, 0x24, 0xf, 0x1, 0x55d, 0x7f, 0x7, 0x7}, {0x6, 0x24, 0x1a, 0x9, 0x31}, [@mbim={0xc, 0x24, 0x1b, 0xe, 0x8, 0x8, 0x4, 0x4}, @mdlm_detail={0xaa, 0x24, 0x13, 0x9, "d64beed9db561720fe236fef01b533279b0fa10057a175266e5fdeceb0935cfedbaed0a928b189e95801d1a90594c173738596ab2d03bb1e39133b6046cc80efd3e77c9619394299f487b0b73c7fd61c52e8265b9c2c5684da8631bf1934585084d7c301bf1c631770fdffb7ee1d92436623ecaba6a0c9fcb643acf125f10c574bbc6f4c9eb9e2a64060bb8975d0905a689ab1fe438dbd0a6ea14b75f5a8144a34d752f5205e"}, @mbim={0xc, 0x24, 0x1b, 0x8, 0xb, 0x66, 0xb, 0x2, 0x9}, @mbim={0xc, 0x24, 0x1b, 0x1ff, 0x3, 0x2, 0x5, 0x5, 0x8}, @mdlm_detail={0xbc, 0x24, 0x13, 0x2, "4436e46ffb3aea178955b5ea25872cd350dfa617a8c90dd5410ed80a4877b8adb97b5917e1eaf5256755c15878bbe680c49f20011b0540db255e56fd52df2577cb260767e2d03426b9f70c8a296217e4f8eb317237f74550111327f8e295380de18e0522341b1fa1398184d64c613b1e4a502c2066446b694a5bed3481bd7299ab5d1e14537f49fc3ea577799e459a279876c7c5a1eda8e07282b9d5ae6ad8f788cf1f240a87a2afe105b0b25a16ae5bb965c9de4968ed0b"}]}], [{{0x9, 0x5, 0x7, 0x0, 0x10, 0x5, 0x51, 0x3, [@generic={0x45, 0xb, "d351e3badc870408edb2ed01c1875cdbd5e975e7eccdd25acdb3db424bb48a9976c6ce20b6f85abee9fbd2d4ae04afb71353c43690271ce8f15efd3e7d0996d5f2c61c"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x0, 0x40, 0x8, 0x87, [@generic={0x2d, 0x30, "c8a7f3f14907243fddec748cc1a77fdef3beaf90183add5b7633e9559687dc6e22f5faf850a282fabc503d"}]}}, {{0x9, 0x5, 0xf, 0x4, 0x3ff, 0x6, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x9, 0x2}, @generic={0x44, 0x8, "f20c861ebbe9239ea4390bceeada90821cc670c3893861a9ed1abee333c29ee363152a5263b1dd8c8b414aecb0c8ebab0ff3114ec979848d7843bc2bccf7f80e549b"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0xc7, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xfd, 0xa16}]}}, {{0x9, 0x5, 0x4, 0x1, 0x400, 0x2, 0x2d, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb, 0x8001}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x9, 0x3, 0x6, [@generic={0x2e, 0x30, "4fb9a81b3ee13d14ddf47f93cd70e46b2161bed43ab9d6564a346f3ecaf74ae269b952b8329354e68bedcc22"}]}}, {{0x9, 0x5, 0x80, 0xd7dc750b91650284, 0x40, 0x3, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0xa}]}}, {{0x9, 0x5, 0xd, 0x2, 0x3ff, 0xa2, 0x97, 0x9b, [@generic={0x82, 0xb, "581917b49172fd3a9e524d423b495417c2cf2e4fe5dfa55761b7476931b4834eca38481fbc56641aee9f9c8c09c8584817d4611a75fa5aa99acaf4c98eb18f330dc82451c0ecb123d1dcd9c7c74ec1b266092733944b7e0c3040759fb4df4d56ea40ff2fe7cd7b4ec141a7ea077dc800f8751b3021804bb6d476ca51020f2bca"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x20, 0x5, 0x9c, 0x74, [@generic={0x7d, 0x23, "6caa16f04019c423e982fabb0b4e4335a49a16032620a7dff0f5a756b3fc96b3cfe1f1a6f6e4cf6681298a36b08396edda755a0bd1d45898f8d19cbf7d2ede10cbfc859670d5eeed264326ad3a77be5b082a9ffaf90583497212ea2ec8d1a7ae99f0f01c16fd57c57b6d16fc4b772f56614fc8a4b0f318d6df590d"}, @generic={0x2b, 0x2, "0611e2b641fc9186641416b464b9b55a1d42a92f4da278b33128cec1314b4753b5ea434d7d84313413"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x1, 0xb, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0xff}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x1}]}}, {{0x9, 0x5, 0x10f, 0x10, 0x20, 0xf4, 0x3, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x819}, @generic={0x2f, 0xc, "33fd8d0e4259e01571ae651e5ae93fea4e1656c75136737e347888134703d85897fa22ca2afb23edf026fb6e8b"}]}}, {{0x9, 0x5, 0x5, 0x4, 0x10, 0x26, 0x7, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x6, 0x800}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x1, 0x5, 0x0, [@generic={0x62, 0x23, "acf2ec79936be80d4ee72a014a54827ba5ab7f8c7240a571a07cf77e066c0e62fb3c62c09a8281394ade892c2e29d66242c45c81e76dc783df1d5ac74029bbb3c615344f6070a2a424ab98c3ebc84f72ee6b8c296c7ef8b4723847ed04e79f2c"}]}}]}}]}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x200, 0x40, 0x0, 0x1a, 0x20, 0x4}, 0x4f, &(0x7f0000000080)={0x5, 0xf, 0x4f, 0x4, [@ssp_cap={0x18, 0x10, 0xa, 0x9, 0x3, 0x9, 0xf, 0x3, [0xffff00, 0x8040cf, 0xff0f]}, @ss_container_id={0x14, 0x10, 0x4, 0xb, "a9cab5f3cc350c95e62c734c0a8cc05b"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x40, 0x7, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "83fa2e7006773648244a2c8d0e050190"}]}, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x812}}, {0xdb, &(0x7f00000007c0)=@string={0xdb, 0x3, "fb219d1ccd304eef29b850e8be462ccbedbb6a2291930f4d93cb073be4ac761aeea83ab1c0aad4350094439c1e18b3167e0e2bb86c84bda9687d5ab29c197918ba8cc27948f6392ea7c7e4cebf3ded29decdaaed24082d8a12e0698fbd4f82c37bf2c34911924ac039cc01f4fd448b5eb331f4879c60fadceba5aa28f5d7c58c3ebb5139a240a68e14bbcacb49710b6a8ab119cbbceab9c2e7d1f1c15a4d52e4e122ef806a62a22a782053489adffe6cebe53af1bc73095b2671b8b65b13f578de83d263cfe5411428311ccfe13da7bf18e823af0cc08f2400"}}, {0x93, &(0x7f00000008c0)=@string={0x93, 0x3, "3ee57e23b09647d238992918ed6452164e8c1a54de8e81bf0b896ca0a5defc393c61e62523e4c18d2cde078e158698deeb0ee6dc4906ef80517071bd1fa88d9646c7a2da464e35ee2f045af4c72a77e8d699efad59914800a7d4d67f5517bf41c9983f89beb49d59e97b3bafd58cbcaed87c39b33c0efbc32780665dd09d4611849a6e114b952ecd4162f5cb3b9c1d55d3"}}]})
syz_usb_control_io$hid(r4, &(0x7f0000000b80)={0x24, &(0x7f0000000980)={0x20, 0x11, 0x68, {0x68, 0x23, "cb322aa9fad5a8e8e0d245d68127ee1d6c5866bd75898b125f62f75321925fd992902ee36228542a2f85efd546bf68cfcdda3953f44630dd3a57d7fb822380171ae547de0838d0b54e483aea0e4363763b6cd5e7a46d55f3c34847904e3e86fef7cf325f03b0"}}, &(0x7f0000000a00)={0x0, 0x3, 0xfc, @string={0xfc, 0x3, "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"}}, &(0x7f0000000180)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x5, "ee49bd73"}, @main=@item_012={0x0, 0x0, 0xc}]}}, &(0x7f0000000b40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x50, 0xfc, 0x1, {0x22, 0x2b5}}}}, &(0x7f0000000e00)={0x2c, &(0x7f0000000bc0)={0x20, 0x10, 0x4f, "c5af6e7cbfff0e373b3c97aa0150fff95481162be5a8628f3aca13955190651e0f3b5861c0bc1298188bd8ae4322bc03d34e3a0f010a11f042a82583068a694c38e8b15852e10d0d8a27716aa9195e"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0x83}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000cc0)={0x20, 0x1, 0xf0, "ce78b05d55c53783bdea4a5f5763bb9acc0ca69efde8197281b8afdf0325d6080e78954480aaf22ee7f2f634bb6c33f3e5b82a95d634151503778a433c2b7ccc893c6b4b934d867ea3a8b76a80a89ca6cf56f99308104db36bc5af2f3d11c34d6672b868b9e8ebf48ea1cff257b0f13bfa984b1b01b35d5bcda7e0342260333ca1ddf4fd179ee8a2b9389de02c5472a7892e3c999612e14e39aff3d3aea9433fe0a24a529f1e4e5615ca70391123ae77318555212c5502fa838327f840d7fef123b3752f95f5da6513dcb2e6465e37183421d8c2a925c93c217b21dbfb3132352cf9159faeb02fbcb71bd2c6c97095e8"}, &(0x7f0000000dc0)={0x20, 0x3, 0x1, 0x7}})

1.992212736s ago: executing program 4 (id=161):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r0, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xa000}], 0x3}, 0x0)
sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)

1.839347802s ago: executing program 3 (id=162):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x20064084) (fail_nth: 5)

1.773707908s ago: executing program 4 (id=163):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f000000d040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={0x34, r3, 0x8de13c6b70ae92c3, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8f}]}]}]}, 0x34}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x20064084)

1.335812482s ago: executing program 0 (id=164):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_open_dev$tty20(0xc, 0x4, 0x1)
pselect6(0x40, &(0x7f00000044c0)={0x0, 0xffffffffffffffff, 0x1000000000200, 0x3, 0x8000000000000000}, 0x0, &(0x7f0000004540)={0x9, 0xffffffffffffbffe, 0x0, 0x48000, 0x1, 0x38, 0x8000000000000001}, 0x0, 0x0)
ioctl$TCXONC(r1, 0x540a, 0x2)
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000440)={0xfffa, [0x0, 0xffffffff], 0x1000}, 0x10)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
close(0x4)
ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000340))
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_clone(0x8000, &(0x7f0000000380)="3fa44e95c2a94066b2804d11c419aefe7b56d913b4a71945db725b366ea892aa161a782531f7040d1ced14c4901b773c2ec8516c145dcfd00068614396c89fb4ab85a8b190a943151e219b9a3e27ad6c844bf16ce7fd", 0x56, &(0x7f0000000400), &(0x7f0000000480), &(0x7f00000005c0)="665e98466d37a040174cea958e278987189435dfa9b394b72bda12f98b0156aa501b57a00d2e206971a4a2e737c55c6deca534c854c241780caee42dd1a49e192c62533ae08203465ada915d37ae1d1ee3b1a95f7c9578e5f9e0527b811994e5b0da903b9c75cb1b3b186a4b9d9571a0644eba825b024df6abb0e77ee7bcdffe09ccf5650620be9306352cac5d078154c97febf0d4253901fd1e33bf740428f9cf0621e10d32")
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000680)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000700)=""/98, 0x62}, {&(0x7f0000000780)=""/235, 0xeb}, {&(0x7f0000000880)=""/126, 0x7e}, {&(0x7f0000000a40)=""/230, 0xe6}, {&(0x7f0000000900)=""/164, 0xa4}, {&(0x7f0000000b40)=""/94, 0x5e}], 0x6, &(0x7f0000000c40)=""/4096, 0x1000}, 0x40000000)
prctl$PR_SCHED_CORE(0x3e, 0x2, r5, 0x3, &(0x7f00000004c0))
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newnexthop={0x24, 0x68, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x4}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x804)
syz_clone3(&(0x7f0000000540)={0x80000000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x20440, &(0x7f00000000c0)={[{@redirect_dir_on}, {@workdir={'workdir', 0x3d, './file0'}}, {@nfs_export_on}, {@nfs_export_off}, {@index_off}, {@redirect_dir_nofollow}, {@metacopy_on}, {@metacopy_on}, {@userxattr}, {@default_permissions}], [{@seclabel}, {@pcr={'pcr', 0x3d, 0x8}}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '&'}}, {@subj_role={'subj_role', 0x3d, '}@{'}}, {@dont_measure}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@subj_type={'subj_type', 0x3d, '..%#):!%'}}]})
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
syz_open_dev$tty20(0xc, 0x4, 0x1) (async)
pselect6(0x40, &(0x7f00000044c0)={0x0, 0xffffffffffffffff, 0x1000000000200, 0x3, 0x8000000000000000}, 0x0, &(0x7f0000004540)={0x9, 0xffffffffffffbffe, 0x0, 0x48000, 0x1, 0x38, 0x8000000000000001}, 0x0, 0x0) (async)
ioctl$TCXONC(r1, 0x540a, 0x2) (async)
setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000440)={0xfffa, [0x0, 0xffffffff], 0x1000}, 0x10) (async)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async)
close(0x4) (async)
ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000340)) (async)
socket$nl_route(0x10, 0x3, 0x0) (async)
syz_clone(0x8000, &(0x7f0000000380)="3fa44e95c2a94066b2804d11c419aefe7b56d913b4a71945db725b366ea892aa161a782531f7040d1ced14c4901b773c2ec8516c145dcfd00068614396c89fb4ab85a8b190a943151e219b9a3e27ad6c844bf16ce7fd", 0x56, &(0x7f0000000400), &(0x7f0000000480), &(0x7f00000005c0)="665e98466d37a040174cea958e278987189435dfa9b394b72bda12f98b0156aa501b57a00d2e206971a4a2e737c55c6deca534c854c241780caee42dd1a49e192c62533ae08203465ada915d37ae1d1ee3b1a95f7c9578e5f9e0527b811994e5b0da903b9c75cb1b3b186a4b9d9571a0644eba825b024df6abb0e77ee7bcdffe09ccf5650620be9306352cac5d078154c97febf0d4253901fd1e33bf740428f9cf0621e10d32") (async)
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000680)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000700)=""/98, 0x62}, {&(0x7f0000000780)=""/235, 0xeb}, {&(0x7f0000000880)=""/126, 0x7e}, {&(0x7f0000000a40)=""/230, 0xe6}, {&(0x7f0000000900)=""/164, 0xa4}, {&(0x7f0000000b40)=""/94, 0x5e}], 0x6, &(0x7f0000000c40)=""/4096, 0x1000}, 0x40000000) (async)
prctl$PR_SCHED_CORE(0x3e, 0x2, r5, 0x3, &(0x7f00000004c0)) (async)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newnexthop={0x24, 0x68, 0x1, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x4}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_GROUP={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x804) (async)
syz_clone3(&(0x7f0000000540)={0x80000000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x20440, &(0x7f00000000c0)={[{@redirect_dir_on}, {@workdir={'workdir', 0x3d, './file0'}}, {@nfs_export_on}, {@nfs_export_off}, {@index_off}, {@redirect_dir_nofollow}, {@metacopy_on}, {@metacopy_on}, {@userxattr}, {@default_permissions}], [{@seclabel}, {@pcr={'pcr', 0x3d, 0x8}}, {@appraise_type}, {@smackfsfloor={'smackfsfloor', 0x3d, '&'}}, {@subj_role={'subj_role', 0x3d, '}@{'}}, {@dont_measure}, {@smackfsroot={'smackfsroot', 0x3d, '\x00'}}, {@subj_type={'subj_type', 0x3d, '..%#):!%'}}]}) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000400000000000b702000014000000b7030000000000008500000005000000bf0900000000000056090100000000002700000000000000180100002020782500000000002020207b1af8ff00000000bda100000000000037010000f8ffffffb702000008000000b70300000000000025000000060000009c23000000000000b5030000000000008500000076000000b7000000000000009500000000000000752ece943ecd73df45480db5b408486b00ef0c836f95715b62156380cb1da38f75cb1368f09681f96e67d8697f7028fe163ea723efe0c062d679c822b9e5f7d815452fa97a665b3a80692d9c6ebff5264acdb5d015ae5f3e3b26"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async)

1.319206435s ago: executing program 4 (id=165):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket(0x40000000015, 0x5, 0x0)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0)
r4 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$RTC_PIE_ON(r4, 0x7005)
ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x722)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, <r7=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r7, r6, <r8=>0x0, 0x0, 0x0, 0x0, 0x0})
pipe2$9p(&(0x7f0000000040), 0x880)
ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r7, r8, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})
close_range(r3, 0xffffffffffffffff, 0x0)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={<r10=>0x0, @in={{0x2, 0x4e24, @empty}}, 0x8, 0x4, 0xd, 0x38, 0x82, 0xfffffffa, 0x7}, &(0x7f00000000c0)=0x9c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f00000002c0)={r10, 0xf4, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x7ff, @empty}, @in6={0xa, 0x4e23, 0x8, @rand_addr=' \x01\x00', 0x6}, @in6={0xa, 0x4e24, 0xa, @mcast1, 0x7}, @in6={0xa, 0x4e23, 0xf, @mcast1, 0x98}, @in6={0xa, 0x4e23, 0x7, @local, 0xfffffffc}, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x55a3}, @in={0x2, 0x4e20, @multicast2}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e21, 0xb53b, @empty, 0x3}]}, &(0x7f0000000300)=0x10)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 00000000000'], 0x2a, 0xfffffffffffffffc)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'trusted:', 'new '}, 0x1c, 0x0)
add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)

1.284185524s ago: executing program 3 (id=166):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000200)={0x2, @pix={0x80, 0x3, 0x3131354f, 0x7, 0xc4, 0x0, 0xa, 0x80, 0x0, 0x1, 0x1, 0x1}})

1.157114757s ago: executing program 1 (id=167):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x2, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
pipe2(&(0x7f0000000040)={<r1=>0xffffffffffffffff}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x8001, 0x401514}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x2, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getdents64(0xffffffffffffffff, 0x0, 0x18)
close_range(0xffffffffffffffff, r1, 0x2)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req={0x7fffffff, 0x1, 0x1, 0x8}, 0x10)
socket(0x1, 0x803, 0x0)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r6)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r8 = syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00')
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r8, @ANYBLOB="600000000040000008000300", @ANYRES32], 0x50}, 0x1, 0xd, 0x0, 0x480c5}, 0x0)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r7, 0x0)
syz_emit_ethernet(0x92, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x5c, 0x6, 0x0, @remote, @mcast2, {[], {{0xffff, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x17, 0xc2, 0x0, 0x0, 0xffff, {[@mptcp=@ack={0x1e, 0x4}, @exp_fastopen={0xfe, 0x13, 0xf989, "519f7eff2e9879026a27bd9807642a"}, @md5sig={0x13, 0x12, "7224407c80fe8a3616b4bf3400006cc8"}, @mptcp=@capable={0x1e, 0xc, 0x9, 0x8, 0x1, 0x6}, @generic={0x3, 0x2}, @sack={0x5, 0xe, [0x10009, 0x8, 0x7]}]}}}}}}}}, 0x0)
ioctl$FS_IOC_GETFSMAP(r5, 0x40044620, 0x0)

1.036211776s ago: executing program 3 (id=168):
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp\x00')
pread64(r0, &(0x7f000001a240)=""/102391, 0x18ff7, 0x1) (fail_nth: 5)

236.21822ms ago: executing program 4 (id=169):
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x8b9, 0x80981)
r1 = memfd_create(&(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x5)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_CAPACITY(r0, 0x4c06)

0s ago: executing program 4 (id=170):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="62202a3a2a20726d80"], 0x9)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x256f16877c9c3f29, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r9, r10, 0x5, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20)
sendmsg$inet(r7, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.85' (ED25519) to the list of known hosts.
[   56.772708][ T5807] cgroup: Unknown subsys name 'net'
[   56.905034][ T5807] cgroup: Unknown subsys name 'cpuset'
[   56.912941][ T5807] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.188255][ T5807] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   62.058638][ T5819] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   62.068637][ T5819] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   62.077247][ T5819] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   62.085502][ T5819] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   62.094528][ T5819] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   62.099393][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   62.102332][ T5819] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   62.109353][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   62.116079][ T5819] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   62.126299][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   62.137112][ T5825] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   62.144483][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   62.190774][ T5134] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   62.199132][ T5134] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   62.222311][ T5134] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   62.230336][ T5134] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   62.233431][ T5824] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   62.247096][ T5134] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   62.249533][ T5824] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   62.261770][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   62.262476][ T5824] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   62.268938][ T5134] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   62.277762][ T5824] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   62.290203][ T5834] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   62.290741][ T5824] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   62.306276][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   62.314152][ T5134] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   62.321545][ T5134] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   62.329507][ T5834] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   62.336947][ T5134] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   62.502564][ T5817] chnl_net:caif_netlink_parms(): no params data found
[   62.639205][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.646584][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.656002][ T5817] bridge_slave_0: entered allmulticast mode
[   62.662946][ T5817] bridge_slave_0: entered promiscuous mode
[   62.681046][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.688370][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.695677][ T5817] bridge_slave_1: entered allmulticast mode
[   62.702987][ T5817] bridge_slave_1: entered promiscuous mode
[   62.763851][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.790619][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.809132][ T5821] chnl_net:caif_netlink_parms(): no params data found
[   62.846767][ T5817] team0: Port device team_slave_0 added
[   62.885205][ T5817] team0: Port device team_slave_1 added
[   62.966024][ T5826] chnl_net:caif_netlink_parms(): no params data found
[   62.976438][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0
[   62.983454][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.009496][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.022287][ T5827] chnl_net:caif_netlink_parms(): no params data found
[   63.050284][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.057444][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.083596][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.195311][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.202769][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.209880][ T5821] bridge_slave_0: entered allmulticast mode
[   63.216888][ T5821] bridge_slave_0: entered promiscuous mode
[   63.224925][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.232074][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.239227][ T5821] bridge_slave_1: entered allmulticast mode
[   63.246809][ T5821] bridge_slave_1: entered promiscuous mode
[   63.271333][ T5817] hsr_slave_0: entered promiscuous mode
[   63.278292][ T5817] hsr_slave_1: entered promiscuous mode
[   63.305303][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   63.358011][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.365463][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.373298][ T5827] bridge_slave_0: entered allmulticast mode
[   63.379829][ T5827] bridge_slave_0: entered promiscuous mode
[   63.389562][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.401910][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.429797][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.437153][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.444557][ T5827] bridge_slave_1: entered allmulticast mode
[   63.451118][ T5827] bridge_slave_1: entered promiscuous mode
[   63.469372][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.477270][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.484945][ T5826] bridge_slave_0: entered allmulticast mode
[   63.491505][ T5826] bridge_slave_0: entered promiscuous mode
[   63.546171][ T5821] team0: Port device team_slave_0 added
[   63.552954][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.560089][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.567757][ T5826] bridge_slave_1: entered allmulticast mode
[   63.574958][ T5826] bridge_slave_1: entered promiscuous mode
[   63.609575][ T5821] team0: Port device team_slave_1 added
[   63.640227][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.686522][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.703178][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.710151][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.736425][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.750488][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.764299][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.771448][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.778701][ T5831] bridge_slave_0: entered allmulticast mode
[   63.786968][ T5831] bridge_slave_0: entered promiscuous mode
[   63.794997][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.802154][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.809422][ T5831] bridge_slave_1: entered allmulticast mode
[   63.816413][ T5831] bridge_slave_1: entered promiscuous mode
[   63.829415][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.836693][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.862803][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.875739][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.919227][ T5827] team0: Port device team_slave_0 added
[   63.927769][ T5827] team0: Port device team_slave_1 added
[   63.948445][ T5826] team0: Port device team_slave_0 added
[   63.995336][ T5826] team0: Port device team_slave_1 added
[   64.006761][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   64.019492][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   64.029323][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.036356][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.062589][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.075308][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.082366][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.108396][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.164351][ T5821] hsr_slave_0: entered promiscuous mode
[   64.170853][ T5821] hsr_slave_1: entered promiscuous mode
[   64.177073][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.184984][ T5821] Cannot create hsr debugfs directory
[   64.201118][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.202816][ T5824] Bluetooth: hci1: command tx timeout
[   64.208660][ T5819] Bluetooth: hci0: command tx timeout
[   64.214710][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.245037][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.257653][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.264814][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.291246][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.304880][ T5831] team0: Port device team_slave_0 added
[   64.343914][ T5831] team0: Port device team_slave_1 added
[   64.360856][ T5827] hsr_slave_0: entered promiscuous mode
[   64.361807][ T5819] Bluetooth: hci4: command tx timeout
[   64.373988][ T5827] hsr_slave_1: entered promiscuous mode
[   64.380721][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.388725][ T5827] Cannot create hsr debugfs directory
[   64.441721][ T5819] Bluetooth: hci2: command tx timeout
[   64.447404][ T5819] Bluetooth: hci3: command tx timeout
[   64.458368][ T5826] hsr_slave_0: entered promiscuous mode
[   64.464896][ T5826] hsr_slave_1: entered promiscuous mode
[   64.470871][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.478587][ T5826] Cannot create hsr debugfs directory
[   64.485216][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   64.492330][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.518370][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   64.529987][ T5817] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.559723][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   64.567710][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   64.594089][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   64.626736][ T5817] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.640537][ T5817] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.695520][ T5817] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.770731][ T5831] hsr_slave_0: entered promiscuous mode
[   64.777252][ T5831] hsr_slave_1: entered promiscuous mode
[   64.784970][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   64.792611][ T5831] Cannot create hsr debugfs directory
[   64.924490][ T5821] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   64.937299][ T5821] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   64.979674][ T5821] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   65.003179][ T5821] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   65.060646][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   65.076284][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   65.087383][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   65.098049][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   65.178295][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   65.189210][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   65.198167][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   65.210519][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   65.265203][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.303045][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   65.312750][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   65.336829][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.346424][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   65.355523][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   65.388025][ T5821] 8021q: adding VLAN 0 to HW filter on device team0
[   65.401366][ T5817] 8021q: adding VLAN 0 to HW filter on device team0
[   65.419342][ T3531] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.426630][ T3531] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.439975][ T3531] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.447121][ T3531] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.459687][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.475646][ T3531] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.482819][ T3531] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.509613][ T4776] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.516707][ T4776] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.554405][ T5827] 8021q: adding VLAN 0 to HW filter on device team0
[   65.593531][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.600594][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.649501][ T3531] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.656644][ T3531] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.696411][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.779031][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.817442][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   65.836585][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[   65.853518][ T3531] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.860652][ T3531] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.874336][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.881435][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.906476][ T5827] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   65.927437][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.934593][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.969066][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.976325][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.050064][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.107811][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.221371][ T5817] veth0_vlan: entered promiscuous mode
[   66.272141][ T5817] veth1_vlan: entered promiscuous mode
[   66.286311][ T5819] Bluetooth: hci1: command tx timeout
[   66.292135][ T5824] Bluetooth: hci0: command tx timeout
[   66.335352][ T5817] veth0_macvtap: entered promiscuous mode
[   66.362491][ T5817] veth1_macvtap: entered promiscuous mode
[   66.377948][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.441894][ T5819] Bluetooth: hci4: command tx timeout
[   66.449144][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.517833][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.521964][ T5819] Bluetooth: hci3: command tx timeout
[   66.530474][ T5819] Bluetooth: hci2: command tx timeout
[   66.538251][ T5817] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.550112][ T5817] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.559108][ T5817] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.568357][ T5817] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.583314][ T5827] veth0_vlan: entered promiscuous mode
[   66.594369][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.639582][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.648878][ T5827] veth1_vlan: entered promiscuous mode
[   66.716705][ T5821] veth0_vlan: entered promiscuous mode
[   66.751231][ T5821] veth1_vlan: entered promiscuous mode
[   66.793848][ T5827] veth0_macvtap: entered promiscuous mode
[   66.811336][ T5827] veth1_macvtap: entered promiscuous mode
[   66.812680][ T2898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.839529][ T2898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.854500][ T5821] veth0_macvtap: entered promiscuous mode
[   66.867035][ T5821] veth1_macvtap: entered promiscuous mode
[   66.880778][ T5826] veth0_vlan: entered promiscuous mode
[   66.901996][ T5831] veth0_vlan: entered promiscuous mode
[   66.933610][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.944632][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.959861][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.970820][ T5831] veth1_vlan: entered promiscuous mode
[   66.972268][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.984691][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.986538][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.005356][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.015380][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.026710][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.037465][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.047313][ T5826] veth1_vlan: entered promiscuous mode
[   67.065002][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.075642][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.088159][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.105018][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.116275][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.126339][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.137149][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.148781][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.162182][ T5827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.171137][ T5827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.180983][ T5827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.193799][ T5827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.226794][ T5817] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   67.262920][ T5831] veth0_macvtap: entered promiscuous mode
[   67.275570][ T5821] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.284635][ T5821] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.293436][ T5821] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.302222][ T5821] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.327407][ T5826] veth0_macvtap: entered promiscuous mode
[   67.336136][ T5826] veth1_macvtap: entered promiscuous mode
[   67.351173][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.361971][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.372419][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.380227][ T5901] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   67.383278][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.410517][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.421391][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.432800][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.442415][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.452972][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.462896][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.473534][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.483592][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.494433][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.505474][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.515186][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.524320][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.533374][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.542395][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.614722][ T5831] veth1_macvtap: entered promiscuous mode
[   67.756600][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.767711][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.779278][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.869497][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.966746][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.075907][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.131037][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.194202][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.369439][ T5819] Bluetooth: hci1: command tx timeout
[   68.375106][ T5824] Bluetooth: hci0: command tx timeout
[   68.393890][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.408911][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.419896][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.430566][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.441123][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.451224][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.463027][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.473324][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.483979][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.495370][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.521714][ T5819] Bluetooth: hci4: command tx timeout
[   68.544466][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.555291][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.568798][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.580201][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.590983][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.600346][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.610161][ T5824] Bluetooth: hci3: command tx timeout
[   68.615773][ T5819] Bluetooth: hci2: command tx timeout
[   68.628082][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.636230][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.702863][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.710697][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.876078][ T2898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.891165][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.891475][ T2898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.899296][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.223292][ T2898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.235528][ T2898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.300506][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.314953][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.336934][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.341369][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.504368][ T5870] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   70.551256][ T5819] Bluetooth: hci1: command tx timeout
[   70.556777][ T5819] Bluetooth: hci0: command tx timeout
[   70.602276][ T5819] Bluetooth: hci4: command tx timeout
[   71.530812][ T5819] Bluetooth: hci2: command tx timeout
[   71.536413][ T5819] Bluetooth: hci3: command tx timeout
[   71.585640][ T1292] ieee802154 phy0 wpan0: encryption failed: -22
[   71.641745][ T5870] usb 4-1: device descriptor read/64, error -71
[   72.682952][ T5932] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR
[   72.804038][ T5870] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   73.396894][ T1292] ieee802154 phy1 wpan1: encryption failed: -22
[   73.740097][   T29] audit: type=1804 audit(1733238964.128:2): pid=5942 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.10" name="/newroot/1/bus/bus" dev="overlay" ino=30 res=1 errno=0
[   74.115739][ T5953] evm: overlay not supported
[   74.882108][ T5942] Invalid ELF header magic: != ELF
[   75.478974][ T5904] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   75.488203][    T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!!
[   75.558677][ T5963] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   75.661799][ T5904] usb 2-1: Using ep0 maxpacket: 32
[   75.814615][ T5904] usb 2-1: config index 0 descriptor too short (expected 29220, got 36)
[   75.916336][ T5904] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[   75.950233][ T5904] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   75.970479][ T5904] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81
[   75.994457][ T5970] bridge0: port 3(erspan0) entered blocking state
[   76.001278][ T5970] bridge0: port 3(erspan0) entered disabled state
[   76.009132][ T5970] erspan0: entered allmulticast mode
[   76.020360][ T5970] erspan0: entered promiscuous mode
[   76.028544][ T5970] bridge0: port 3(erspan0) entered blocking state
[   76.035506][ T5970] bridge0: port 3(erspan0) entered forwarding state
[   76.162365][ T5964] warning: `syz.3.15' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   76.190356][ T5969] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.16'.
[   76.219733][ T5904] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[   76.219878][ T5969] openvswitch: netlink: Key type 2054 is out of range max 32
[   76.251308][ T5904] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[   76.260523][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.272326][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   76.281852][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   76.317695][ T5904] usb 2-1: config 0 descriptor??
[   76.384524][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   76.689970][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   76.951294][ T5870] usb 2-1: USB disconnect, device number 2
[   76.958329][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   77.021772][  T974] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   77.336840][  T974] usb 1-1: Using ep0 maxpacket: 16
[   77.365080][  T974] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   77.381785][  T974] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[   77.412444][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   77.420704][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   77.557402][  T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.571484][  T974] usb 1-1: config 0 descriptor??
[   77.613627][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   77.762492][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[   78.412259][  T974] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5
[   80.513860][ T5180] bcm5974 1-1:0.0: could not read from device
[   80.811777][ T5904] usb 1-1: USB disconnect, device number 2
[   80.849716][ T5820] bcm5974 1-1:0.0: could not read from device
[   81.148719][ T5180] bcm5974 1-1:0.0: could not read from device
[   81.293307][   T29] audit: type=1326 audit(1733238971.668:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6023 comm="syz.0.30" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe7fa77ff19 code=0x0
[   81.633857][  T974] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   81.678774][ T6035] xt_HMARK: proto mask must be zero with L3 mode
[   82.266546][    T8] cfg80211: failed to load regulatory.db
[   82.923884][ T6045] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   82.967161][ T6045] trusted_key: encrypted_key: insufficient parameters specified
[   82.977830][ T6045] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method
[   84.151555][  T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   84.163450][  T974] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   84.173724][  T974] usb 4-1: New USB device found, idVendor=056a, idProduct=037e, bcdDevice=6c.75
[   84.184190][  T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.319116][  T974] usb 4-1: config 0 descriptor??
[   84.617987][  T974] usbhid 4-1:0.0: can't add hid device: -71
[   84.624363][  T974] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   84.899163][ T6058] (syz.2.37,6058,1):ocfs2_fill_super:990 ERROR: superblock probe failed!
[   84.907916][ T6058] (syz.2.37,6058,1):ocfs2_fill_super:1178 ERROR: status = -22
[   85.347444][  T974] usb 4-1: USB disconnect, device number 4
[   85.848560][ T6070] netlink: 16 bytes leftover after parsing attributes in process `syz.2.43'.
[   86.022839][ T6067] netlink: 2684 bytes leftover after parsing attributes in process `syz.3.41'.
[   86.057480][ T6067] netlink: del zone limit has 4 unknown bytes
[   86.167205][ T6073] Driver unsupported XDP return value 0 on prog  (id 12) dev N/A, expect packet loss!
[   88.853279][ T4776] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1
[   88.872141][   T12] Bluetooth: hci5: Frame reassembly failed (-84)
[   89.334664][ T6104] overlayfs: missing 'lowerdir'
[   89.451909][ T6106] Zero length message leads to an empty skb
[   90.247301][ T6102] syz.4.52 (6102): drop_caches: 2
[   90.611917][ T6121] syz.3.57[6121] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   90.612032][ T6121] syz.3.57[6121] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   90.634284][ T6121] syz.3.57[6121] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[   90.843039][ T5819] Bluetooth: hci5: command 0x1003 tx timeout
[   90.863400][ T5824] Bluetooth: hci5: Opcode 0x1003 failed: -110
[   90.948242][ T5870] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   91.190441][ T5870] usb 4-1: Using ep0 maxpacket: 16
[   91.220002][ T5870] usb 4-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=f3.7f
[   91.265175][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.273378][ T5870] usb 4-1: Product: syz
[   91.277609][ T5870] usb 4-1: Manufacturer: syz
[   91.282293][ T5870] usb 4-1: SerialNumber: syz
[   91.301878][ T5870] usb 4-1: config 0 descriptor??
[   91.935165][ T5870] ftdi_sio 4-1:0.0: Ignoring interface reserved for JTAG
[   91.954894][ T5870] usb 4-1: USB disconnect, device number 5
[   92.195900][ T3531] Bluetooth: hci5: Frame reassembly failed (-84)
[   93.651417][ T6159] netlink: 16 bytes leftover after parsing attributes in process `syz.3.69'.
[   93.660498][ T6159] netlink: 12 bytes leftover after parsing attributes in process `syz.3.69'.
[   93.701921][   T29] audit: type=1400 audit(1733238984.038:4): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6157 comm="syz.3.69" saddr=172.30.0.4 daddr=172.20.20.170 netif=wpan0
[   94.345501][ T5824] Bluetooth: hci5: Opcode 0x1003 failed: -110
[   94.905842][ T6177] xt_TCPMSS: Only works on TCP SYN packets
[   95.057957][ T6183] netlink: 'syz.0.77': attribute type 1 has an invalid length.
[   95.095964][ T6183] netlink: 224 bytes leftover after parsing attributes in process `syz.0.77'.
[   95.180091][ T6189] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   95.187631][ T6189] IPv6: NLM_F_CREATE should be set when creating new route
[   95.796031][ T6197] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   95.912701][ T6197] trusted_key: encrypted_key: insufficient parameters specified
[   95.929715][ T6197] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method
[   97.406042][ T6210] netlink: 16 bytes leftover after parsing attributes in process `syz.1.82'.
[   97.415002][ T6210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.82'.
[   97.425602][   T29] audit: type=1400 audit(1733238987.798:5): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6199 comm="syz.1.82" saddr=172.30.0.2 daddr=172.20.20.170 netif=wpan0
[   97.581923][ T6213] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   99.198874][ T6237] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   99.279182][ T6239] trusted_key: encrypted_key: insufficient parameters specified
[   99.391825][ T5909] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[   99.543589][ T5909] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   99.561917][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.772952][ T5909] usb 4-1: config 0 descriptor??
[   99.789381][ T5909] cp210x 4-1:0.0: cp210x converter detected
[  100.722269][ T6243] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  100.929118][ T6242] trusted_key: encrypted_key: insufficient parameters specified
[  100.938201][ T6242] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method
[  103.702428][ T5909] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71
[  103.710255][ T5909] cp210x 4-1:0.0: GPIO initialisation failed: -71
[  103.722203][ T5909] usb 4-1: cp210x converter now attached to ttyUSB0
[  103.732716][ T5909] usb 4-1: USB disconnect, device number 6
[  103.743290][ T5909] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  103.751484][ T5909] cp210x 4-1:0.0: device disconnected
[  103.760209][ T6271] netlink: 16 bytes leftover after parsing attributes in process `syz.4.99'.
[  103.827421][   T29] audit: type=1400 audit(1733238994.158:6): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6260 comm="syz.4.99" saddr=172.30.0.5 daddr=172.20.20.170 netif=wpan0
[  103.861771][ T6268] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  104.311700][ T5904] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  104.461786][ T5904] usb 3-1: Using ep0 maxpacket: 8
[  104.470626][ T5904] usb 3-1: config 2 interface 0 altsetting 8 endpoint 0xC has invalid maxpacket 512, setting to 64
[  104.492511][ T5904] usb 3-1: config 2 interface 0 has no altsetting 0
[  104.511221][ T5904] usb 3-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10
[  104.537206][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.560943][ T5904] usb 3-1: Product: syz
[  104.636841][ T5904] usb 3-1: Manufacturer: syz
[  104.661740][ T5904] usb 3-1: SerialNumber: syz
[  105.920628][ T5904] usb 3-1: USB disconnect, device number 2
[  106.034732][ T6309] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  106.067260][ T6309] trusted_key: encrypted_key: insufficient parameters specified
[  106.077112][ T6309] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method
[  106.162675][ T6308] FAULT_INJECTION: forcing a failure.
[  106.162675][ T6308] name failslab, interval 1, probability 0, space 0, times 1
[  106.344037][ T6308] CPU: 1 UID: 0 PID: 6308 Comm: syz.4.111 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0
[  106.354668][ T6308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  106.364744][ T6308] Call Trace:
[  106.368034][ T6308]  <TASK>
[  106.370968][ T6308]  dump_stack_lvl+0x241/0x360
[  106.375668][ T6308]  ? __pfx_dump_stack_lvl+0x10/0x10
[  106.380892][ T6308]  should_fail_ex+0x3b0/0x4e0
[  106.385586][ T6308]  should_failslab+0xac/0x100
[  106.390286][ T6308]  kmem_cache_alloc_node_noprof+0x77/0x380
[  106.396104][ T6308]  ? __alloc_skb+0x1c3/0x440
[  106.400718][ T6308]  __alloc_skb+0x1c3/0x440
[  106.405148][ T6308]  ? __pfx___alloc_skb+0x10/0x10
[  106.410092][ T6308]  ? __rcu_read_unlock+0xa1/0x110
[  106.415127][ T6308]  ? netlink_autobind+0xd6/0x2f0
[  106.420156][ T6308]  ? netlink_autobind+0x2b0/0x2f0
[  106.425219][ T6308]  netlink_sendmsg+0x638/0xcb0
[  106.430027][ T6308]  ? __pfx_netlink_sendmsg+0x10/0x10
[  106.435335][ T6308]  ? tomoyo_socket_sendmsg_permission+0x12e/0x420
[  106.441767][ T6308]  ? __sock_sendmsg+0x54/0x270
[  106.446558][ T6308]  ? __pfx_netlink_sendmsg+0x10/0x10
[  106.451859][ T6308]  __sock_sendmsg+0x221/0x270
[  106.456561][ T6308]  ____sys_sendmsg+0x52a/0x7e0
[  106.461347][ T6308]  ? __pfx_____sys_sendmsg+0x10/0x10
[  106.466665][ T6308]  __sys_sendmsg+0x269/0x350
[  106.471286][ T6308]  ? finish_task_switch+0x1e5/0x870
[  106.476509][ T6308]  ? __pfx___sys_sendmsg+0x10/0x10
[  106.481658][ T6308]  ? __pfx_vfs_write+0x10/0x10
[  106.486546][ T6308]  ? __pfx___schedule+0x10/0x10
[  106.491429][ T6308]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  106.497781][ T6308]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  106.504132][ T6308]  ? do_syscall_64+0xb6/0x230
[  106.508831][ T6308]  do_syscall_64+0xf3/0x230
[  106.513356][ T6308]  ? clear_bhb_loop+0x35/0x90
[  106.518057][ T6308]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  106.523978][ T6308] RIP: 0033:0x7f655a37ff19
[  106.528409][ T6308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  106.548031][ T6308] RSP: 002b:00007f655b155058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  106.556485][ T6308] RAX: ffffffffffffffda RBX: 00007f655a545fa0 RCX: 00007f655a37ff19
[  106.564484][ T6308] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003
[  106.572471][ T6308] RBP: 00007f655b1550a0 R08: 0000000000000000 R09: 0000000000000000
[  106.580456][ T6308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  106.588440][ T6308] R13: 0000000000000000 R14: 00007f655a545fa0 R15: 00007ffe2c2627f8
[  106.596441][ T6308]  </TASK>
[  106.599663][    C1] vkms_vblank_simulate: vblank timer overrun
[  107.293268][   T29] audit: type=1400 audit(1733238997.688:7): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6320 comm="syz.3.115" saddr=172.30.0.4 daddr=172.20.20.170 netif=wpan0
[  107.294488][ T6323] netlink: 16 bytes leftover after parsing attributes in process `syz.3.115'.
[  108.300359][ T6328] netlink: 'syz.2.117': attribute type 1 has an invalid length.
[  108.333746][ T6328] netlink: 224 bytes leftover after parsing attributes in process `syz.2.117'.
[  108.369172][ T6333] xt_TCPMSS: Only works on TCP SYN packets
[  108.992036][ T6346] netlink: 'syz.4.121': attribute type 3 has an invalid length.
[  109.022151][ T6346] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.121'.
[  109.214726][ T6352] macsec0: entered promiscuous mode
[  109.392388][ T6351] macsec0: left promiscuous mode
[  109.563668][ T6357] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  109.596921][ T6357] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method
[  110.377347][ T6361] process 'syz.4.126' launched './file1' with NULL argv: empty string added
[  110.633471][ T5909] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  110.860044][ T5909] usb 1-1: config 0 has an invalid interface number: 166 but max is 1
[  110.965890][ T5909] usb 1-1: config 0 has no interface number 1
[  111.066424][ T5909] usb 1-1: config 0 interface 166 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  111.261661][ T5909] usb 1-1: New USB device found, idVendor=093a, idProduct=2468, bcdDevice=e4.25
[  111.270746][ T5909] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.319515][ T5909] usb 1-1: Product: syz
[  111.358342][ T5909] usb 1-1: Manufacturer: syz
[  111.371749][ T5909] usb 1-1: SerialNumber: syz
[  111.602776][ T5909] usb 1-1: config 0 descriptor??
[  111.651424][ T6375] netlink: 16 bytes leftover after parsing attributes in process `syz.2.129'.
[  111.727935][   T29] audit: type=1400 audit(1733239002.038:8): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6372 comm="syz.2.129" saddr=172.30.0.3 daddr=172.20.20.170
[  112.391250][ T5909] gspca_main: pac207-2.14.0 probing 093a:2468
[  112.441267][ T5909] gspca_pac207: Failed to read a register (index 0x0000, error -71)
[  112.458403][ T5909] usb 1-1: USB disconnect, device number 3
[  112.531722][ T5904] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  112.743029][ T6387] netlink: 16 bytes leftover after parsing attributes in process `syz.4.131'.
[  112.751773][   T29] audit: type=1400 audit(1733239003.128:9): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6381 comm="syz.4.131" saddr=172.30.0.5 daddr=172.20.20.170
[  112.915178][ T5904] usb 2-1: Using ep0 maxpacket: 32
[  113.067430][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  113.078487][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  113.088458][ T5904] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00
[  113.098078][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.122191][ T5904] usb 2-1: config 0 descriptor??
[  113.557239][ T6388] 9pnet: Could not find request transport: vir€Uo
[  114.398106][ T6407] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  116.046574][ T6419] netlink: 16 bytes leftover after parsing attributes in process `syz.2.140'.
[  116.141888][    T8] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  116.331697][    T8] usb 4-1: Using ep0 maxpacket: 8
[  116.339865][    T8] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  116.349468][    T8] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  116.388532][    T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  116.420138][    T8] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  116.438552][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.450981][    T8] usb 4-1: Product: syz
[  116.467093][    T8] usb 4-1: Manufacturer: syz
[  116.487110][    T8] usb 4-1: SerialNumber: syz
[  117.231114][ T5904] usbhid 2-1:0.0: can't add hid device: -71
[  117.275669][ T5904] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  117.329019][    T8] usb 4-1: 0:2 : does not exist
[  117.351935][ T5904] usb 2-1: USB disconnect, device number 3
[  117.372697][    T8] usb 4-1: USB disconnect, device number 7
[  117.622450][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  117.844032][ T6440] netlink: 16 bytes leftover after parsing attributes in process `syz.4.146'.
[  117.894010][   T29] audit: type=1400 audit(1733239008.238:10): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6432 comm="syz.4.146" saddr=172.30.0.5 daddr=172.20.20.170
[  118.095177][   T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  118.611804][   T25] usb 3-1: device descriptor read/64, error -71
[  119.001787][   T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  119.073119][ T6455] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  119.115580][ T6455] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method
[  119.191948][   T25] usb 3-1: device descriptor read/64, error -71
[  119.324122][   T25] usb usb3-port1: attempt power cycle
[  119.681814][ T5904] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  119.711759][   T25] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  119.765732][ T6458] netlink: 40 bytes leftover after parsing attributes in process `syz.1.152'.
[  119.781256][ T6458] ˙˙˙˙: renamed from syz_tun (while UP)
[  119.782606][   T25] usb 3-1: device descriptor read/8, error -71
[  119.832974][ T6462] FAULT_INJECTION: forcing a failure.
[  119.832974][ T6462] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  119.858331][ T5904] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  119.872173][ T5904] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  119.878763][ T6462] CPU: 0 UID: 0 PID: 6462 Comm: syz.4.155 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0
[  119.883429][ T5904] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  119.891774][ T6462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  119.891790][ T6462] Call Trace:
[  119.891797][ T6462]  <TASK>
[  119.891806][ T6462]  dump_stack_lvl+0x241/0x360
[  119.891835][ T6462]  ? __pfx_dump_stack_lvl+0x10/0x10
[  119.891857][ T6462]  ? __pfx__printk+0x10/0x10
[  119.891879][ T6462]  ? __pfx_lock_release+0x10/0x10
[  119.891905][ T6462]  should_fail_ex+0x3b0/0x4e0
[  119.891929][ T6462]  _copy_from_user+0x2f/0xc0
[  119.891953][ T6462]  copy_msghdr_from_user+0xae/0x680
[  119.891982][ T6462]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  119.892005][ T6462]  ? __fget_files+0x2a/0x410
[  119.892029][ T6462]  ? __fget_files+0x2a/0x410
[  119.892057][ T6462]  __sys_sendmsg+0x209/0x350
[  119.892078][ T6462]  ? __pfx_lock_release+0x10/0x10
[  119.892101][ T6462]  ? __pfx___sys_sendmsg+0x10/0x10
[  119.892131][ T6462]  ? __pfx_vfs_write+0x10/0x10
[  119.892174][ T6462]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  119.901440][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  119.911191][ T6462]  ? do_syscall_64+0x100/0x230
[  119.911225][ T6462]  ? do_syscall_64+0xb6/0x230
[  119.911249][ T6462]  do_syscall_64+0xf3/0x230
[  119.911271][ T6462]  ? clear_bhb_loop+0x35/0x90
[  119.911297][ T6462]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.911319][ T6462] RIP: 0033:0x7f655a37ff19
[  119.911337][ T6462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  119.911352][ T6462] RSP: 002b:00007f655b155058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  119.911374][ T6462] RAX: ffffffffffffffda RBX: 00007f655a545fa0 RCX: 00007f655a37ff19
[  119.911393][ T6462] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004
[  119.911406][ T6462] RBP: 00007f655b1550a0 R08: 0000000000000000 R09: 0000000000000000
[  119.911416][ T6462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  119.911428][ T6462] R13: 0000000000000000 R14: 00007f655a545fa0 R15: 00007ffe2c2627f8
[  119.911452][ T6462]  </TASK>
[  119.911524][    C0] vkms_vblank_simulate: vblank timer overrun
[  120.005604][ T6467] FAULT_INJECTION: forcing a failure.
[  120.005604][ T6467] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  120.007988][ T5904] usb 1-1: SerialNumber: syz
[  120.022908][ T6467] CPU: 0 UID: 0 PID: 6467 Comm: syz.1.157 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0
[  120.137278][ T6467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  120.147351][ T6467] Call Trace:
[  120.150629][ T6467]  <TASK>
[  120.153556][ T6467]  dump_stack_lvl+0x241/0x360
[  120.158265][ T6467]  ? __pfx_dump_stack_lvl+0x10/0x10
[  120.163465][ T6467]  ? __pfx__printk+0x10/0x10
[  120.168049][ T6467]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  120.173944][ T6467]  should_fail_ex+0x3b0/0x4e0
[  120.178621][ T6467]  _copy_to_user+0x31/0xb0
[  120.183040][ T6467]  sync_file_ioctl+0xdd3/0x1230
[  120.187907][ T6467]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  120.193888][ T6467]  ? __pfx_sync_file_ioctl+0x10/0x10
[  120.199176][ T6467]  ? __pfx_smack_file_ioctl+0x10/0x10
[  120.204556][ T6467]  ? __fget_files+0x2a/0x410
[  120.209158][ T6467]  ? __fget_files+0x2a/0x410
[  120.213781][ T6467]  ? __pfx_sync_file_ioctl+0x10/0x10
[  120.219065][ T6467]  __se_sys_ioctl+0xf5/0x170
[  120.223655][ T6467]  do_syscall_64+0xf3/0x230
[  120.228157][ T6467]  ? clear_bhb_loop+0x35/0x90
[  120.232842][ T6467]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.238745][ T6467] RIP: 0033:0x7fad6597ff19
[  120.243158][ T6467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  120.262761][ T6467] RSP: 002b:00007fad66747058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  120.271186][ T6467] RAX: ffffffffffffffda RBX: 00007fad65b45fa0 RCX: 00007fad6597ff19
[  120.279156][ T6467] RDX: 0000000020000280 RSI: 00000000c0383e04 RDI: 0000000000000006
[  120.287125][ T6467] RBP: 00007fad667470a0 R08: 0000000000000000 R09: 0000000000000000
[  120.295093][ T6467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  120.303062][ T6467] R13: 0000000000000000 R14: 00007fad65b45fa0 R15: 00007ffccb422718
[  120.311036][ T6467]  </TASK>
[  120.314185][    C0] vkms_vblank_simulate: vblank timer overrun
[  120.314928][   T25] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  120.334869][ T6456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  120.352093][ T6456] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  120.371118][ T5904] usb 1-1: 0:2 : does not exist
[  120.380398][   T25] usb 3-1: device descriptor read/8, error -71
[  120.380528][ T6471] netlink: 'syz.4.158': attribute type 29 has an invalid length.
[  120.437744][ T5904] usb 1-1: USB disconnect, device number 4
[  120.493906][   T25] usb usb3-port1: unable to enumerate USB device
[  120.766375][   T29] audit: type=1400 audit(1733239011.158:11): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=6478 comm="syz.1.159" saddr=172.30.0.2 daddr=172.20.20.170
[  120.787036][ T6486] netlink: 16 bytes leftover after parsing attributes in process `syz.1.159'.
[  120.832038][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  120.832750][ T6489] FAULT_INJECTION: forcing a failure.
[  120.832750][ T6489] name failslab, interval 1, probability 0, space 0, times 0
[  120.878569][ T6489] CPU: 0 UID: 0 PID: 6489 Comm: syz.3.162 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0
[  120.889209][ T6489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  120.899279][ T6489] Call Trace:
[  120.902559][ T6489]  <TASK>
[  120.905499][ T6489]  dump_stack_lvl+0x241/0x360
[  120.910200][ T6489]  ? __pfx_dump_stack_lvl+0x10/0x10
[  120.915421][ T6489]  ? __pfx__printk+0x10/0x10
[  120.920052][ T6489]  should_fail_ex+0x3b0/0x4e0
[  120.924746][ T6489]  should_failslab+0xac/0x100
[  120.929421][ T6489]  ? skb_clone+0x20c/0x390
[  120.933832][ T6489]  kmem_cache_alloc_noprof+0x70/0x380
[  120.939197][ T6489]  skb_clone+0x20c/0x390
[  120.943438][ T6489]  __netlink_deliver_tap+0x3cc/0x7f0
[  120.948743][ T6489]  ? netlink_deliver_tap+0x2e/0x1b0
[  120.953931][ T6489]  netlink_deliver_tap+0x19d/0x1b0
[  120.959035][ T6489]  netlink_unicast+0x7c4/0x990
[  120.963800][ T6489]  ? __pfx_netlink_unicast+0x10/0x10
[  120.969086][ T6489]  ? __virt_addr_valid+0x183/0x530
[  120.974192][ T6489]  ? __check_object_size+0x48e/0x900
[  120.979474][ T6489]  netlink_sendmsg+0x8e4/0xcb0
[  120.984257][ T6489]  ? __pfx_netlink_sendmsg+0x10/0x10
[  120.989557][ T6489]  ? __pfx_netlink_sendmsg+0x10/0x10
[  120.994833][ T6489]  __sock_sendmsg+0x221/0x270
[  120.999511][ T6489]  ____sys_sendmsg+0x52a/0x7e0
[  121.004279][ T6489]  ? __pfx_____sys_sendmsg+0x10/0x10
[  121.009559][ T6489]  ? __fget_files+0x2a/0x410
[  121.011693][   T25] usb 3-1: new low-speed USB device number 7 using dummy_hcd
[  121.014137][ T6489]  ? __fget_files+0x2a/0x410
[  121.014171][ T6489]  __sys_sendmsg+0x269/0x350
[  121.030686][ T6489]  ? __pfx_lock_release+0x10/0x10
[  121.035723][ T6489]  ? __pfx___sys_sendmsg+0x10/0x10
[  121.040856][ T6489]  ? __pfx_vfs_write+0x10/0x10
[  121.045640][ T6489]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  121.051968][ T6489]  ? do_syscall_64+0x100/0x230
[  121.056728][ T6489]  ? do_syscall_64+0xb6/0x230
[  121.061402][ T6489]  do_syscall_64+0xf3/0x230
[  121.065906][ T6489]  ? clear_bhb_loop+0x35/0x90
[  121.070579][ T6489]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  121.076479][ T6489] RIP: 0033:0x7f7a2bb7ff19
[  121.080919][ T6489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  121.100544][ T6489] RSP: 002b:00007f7a2ca3c058 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  121.108967][ T6489] RAX: ffffffffffffffda RBX: 00007f7a2bd45fa0 RCX: 00007f7a2bb7ff19
[  121.117006][ T6489] RDX: 0000000020064084 RSI: 0000000020000100 RDI: 0000000000000003
[  121.124979][ T6489] RBP: 00007f7a2ca3c0a0 R08: 0000000000000000 R09: 0000000000000000
[  121.132964][ T6489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  121.140940][ T6489] R13: 0000000000000000 R14: 00007f7a2bd45fa0 R15: 00007ffd694d8e68
[  121.148921][ T6489]  </TASK>
[  121.152090][    C0] vkms_vblank_simulate: vblank timer overrun
[  121.183185][   T25] usb 3-1: Invalid ep0 maxpacket: 32
[  121.407707][   T25] usb 3-1: new low-speed USB device number 8 using dummy_hcd
[  121.618230][ T6504] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  121.651845][ T6504] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method
[  122.193091][ T6507] FAULT_INJECTION: forcing a failure.
[  122.193091][ T6507] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  122.261768][ T6507] CPU: 0 UID: 0 PID: 6507 Comm: syz.3.168 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0
[  122.272847][ T6507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  122.282924][ T6507] Call Trace:
[  122.286222][ T6507]  <TASK>
[  122.289176][ T6507]  dump_stack_lvl+0x241/0x360
[  122.292674][ T6505] netlink: 40 bytes leftover after parsing attributes in process `syz.1.167'.
[  122.293868][ T6507]  ? __pfx_dump_stack_lvl+0x10/0x10
[  122.302777][   T25] usb 3-1: Invalid ep0 maxpacket: 32
[  122.307874][ T6507]  ? __pfx__printk+0x10/0x10
[  122.317790][ T6507]  should_fail_ex+0x3b0/0x4e0
[  122.322498][ T6507]  prepare_alloc_pages+0x1da/0x5b0
[  122.324889][   T25] usb usb3-port1: attempt power cycle
[  122.327628][ T6507]  __alloc_pages_noprof+0x16f/0x710
[  122.338220][ T6507]  ? __pfx___alloc_pages_noprof+0x10/0x10
[  122.343984][ T6507]  ? __pfx_lock_acquire+0x10/0x10
[  122.349038][ T6507]  alloc_pages_mpol_noprof+0x3e8/0x680
[  122.354530][ T6507]  ? __pfx_alloc_pages_mpol_noprof+0x10/0x10
[  122.360545][ T6507]  vma_alloc_folio_noprof+0x12e/0x230
[  122.365942][ T6507]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[  122.371884][ T6507]  folio_prealloc+0x2e/0x170
[  122.376497][ T6507]  handle_pte_fault+0x2518/0x68a0
[  122.381557][ T6507]  ? mark_lock+0x9a/0x360
[  122.385914][ T6507]  ? __pfx_handle_pte_fault+0x10/0x10
[  122.391314][ T6507]  ? __lock_acquire+0x1397/0x2100
[  122.396388][ T6507]  ? mt_find+0x2a9/0x920
[  122.400662][ T6507]  ? __pfx_lock_release+0x10/0x10
[  122.405723][ T6507]  handle_mm_fault+0x1053/0x1ad0
[  122.410712][ T6507]  ? __pfx_handle_mm_fault+0x10/0x10
[  122.416035][ T6507]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  122.422394][ T6507]  ? lock_mm_and_find_vma+0x9c/0x2f0
[  122.427710][ T6507]  exc_page_fault+0x2b9/0x8b0
[  122.432432][ T6507]  asm_exc_page_fault+0x26/0x30
[  122.437308][ T6507] RIP: 0010:rep_movs_alternative+0x4a/0x70
[  122.443145][ T6507] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 <f3> a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1
[  122.462782][ T6507] RSP: 0018:ffffc900034d7898 EFLAGS: 00050206
[  122.468889][ T6507] RAX: ffff8880283d6001 RBX: 000000002001a27b RCX: 0000000000000261
[  122.476889][ T6507] RDX: 0000000000000000 RSI: ffff8880283d6d85 RDI: 000000002001b000
[  122.481678][ T6505] ------------[ cut here ]------------
[  122.484862][ T6507] RBP: ffffc900034d7a08 R08: ffff8880283d6fe5 R09: 1ffff1100507adfc
[  122.484884][ T6507] R10: dffffc0000000000 R11: ffffed100507adfd R12: ffffc900034d7be8
[  122.484898][ T6507] R13: 0000000000000fe6 R14: ffff8880283d6000 R15: 1ffff9200069af28
[  122.484927][ T6507]  _copy_to_iter+0x529/0x1e70
[  122.490602][ T6505] platform vkms: [drm] vblank wait timed out on crtc 0
[  122.498524][ T6507]  ? __virt_addr_valid+0x183/0x530
[  122.498563][ T6507]  ? __pfx__copy_to_iter+0x10/0x10
[  122.498586][ T6507]  ? __virt_addr_valid+0x183/0x530
[  122.498603][ T6507]  ? __virt_addr_valid+0x183/0x530
[  122.498620][ T6507]  ? __virt_addr_valid+0x45f/0x530
[  122.498639][ T6507]  ? __phys_addr_symbol+0x2f/0x70
[  122.498657][ T6507]  ? __check_object_size+0x48e/0x900
[  122.498682][ T6507]  seq_read_iter+0xb80/0xd70
[  122.498724][ T6507]  seq_read+0x3a9/0x4f0
[  122.498745][ T6507]  ? mark_lock+0x9a/0x360
[  122.498769][ T6507]  ? __pfx_seq_read+0x10/0x10
[  122.498810][ T6507]  ? __pfx_seq_read+0x10/0x10
[  122.584485][ T6507]  proc_reg_read+0x201/0x2f0
[  122.589109][ T6507]  ? __pfx_proc_reg_read+0x10/0x10
[  122.594257][ T6507]  vfs_read+0x1fc/0xb70
[  122.598455][ T6507]  ? __pfx_vfs_read+0x10/0x10
[  122.602105][ T6505] WARNING: CPU: 1 PID: 6505 at drivers/gpu/drm/drm_vblank.c:1307 drm_wait_one_vblank+0x97c/0xa00
[  122.603147][ T6507]  ? __fget_files+0x2a/0x410
[  122.613946][ T6505] Modules linked in:
[  122.618276][ T6507]  ? __fget_files+0x395/0x410
[  122.618303][ T6507]  ? __fget_files+0x2a/0x410
[  122.618330][ T6507]  __x64_sys_pread64+0x1ac/0x240
[  122.618357][ T6507]  ? __pfx___x64_sys_pread64+0x10/0x10
[  122.618379][ T6507]  ? do_syscall_64+0x100/0x230
[  122.618403][ T6507]  ? do_syscall_64+0xb6/0x230
[  122.618426][ T6507]  do_syscall_64+0xf3/0x230
[  122.618448][ T6507]  ? clear_bhb_loop+0x35/0x90
[  122.618474][ T6507]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  122.622430][ T6505] 
[  122.626999][ T6507] RIP: 0033:0x7f7a2bb7ff19
[  122.631623][ T6505] CPU: 1 UID: 0 PID: 6505 Comm: syz.1.167 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0
[  122.636510][ T6507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  122.642098][ T6505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  122.646728][ T6507] RSP: 002b:00007f7a2ca3c058 EFLAGS: 00000246
[  122.651389][ T6505] RIP: 0010:drm_wait_one_vblank+0x97c/0xa00
[  122.655878][ T6507]  ORIG_RAX: 0000000000000011
[  122.655900][ T6507] RAX: ffffffffffffffda RBX: 00007f7a2bd45fa0 RCX: 00007f7a2bb7ff19
[  122.655918][ T6507] RDX: 0000000000018ff7 RSI: 000000002001a240 RDI: 0000000000000003
[  122.655930][ T6507] RBP: 00007f7a2ca3c0a0 R08: 0000000000000000 R09: 0000000000000000
[  122.655942][ T6507] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001
[  122.660601][ T6505] Code: 80 3c 08 00 74 08 4c 89 ff e8 e0 7d 96 fc 49 8b 1f 48 c7 c7 c0 16 71 8c 4c 89 f6 48 89 da 8b 5c 24 0c 89 d9 e8 85 68 ef fb 90 <0f> 0b 90 90 49 be 00 00 00 00 00 fc ff df e9 68 fb ff ff 44 89 e9
[  122.666470][ T6507] R13: 0000000000000000 R14: 00007f7a2bd45fa0 R15: 00007ffd694d8e68
[  122.666502][ T6507]  </TASK>
[  122.666584][    C0] vkms_vblank_simulate: vblank timer overrun
[  122.805543][ T6505] RSP: 0018:ffffc900036ffac0 EFLAGS: 00010246
[  122.811737][ T6505] RAX: 2d6dcca1faabe000 RBX: 0000000000000000 RCX: 0000000000080000
[  122.819736][ T6505] RDX: ffffc9000c759000 RSI: 0000000000061073 RDI: 0000000000061074
[  122.827834][ T6505] RBP: ffffc900036ffc00 R08: ffffffff81601b22 R09: 1ffffffff285051b
[  122.836087][ T6505] R10: dffffc0000000000 R11: fffffbfff285051c R12: 1ffff920006dff64
[  122.844159][ T6505] R13: 0000000000001b1c R14: ffffffff8c8472e0 R15: ffff8881433aa010
[  122.852223][ T6505] FS:  00007fad667476c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  122.861183][ T6505] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  122.867952][ T6505] CR2: 0000001b2f51eff8 CR3: 000000007d22a000 CR4: 00000000003526f0
[  122.876348][ T6505] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  122.884643][ T6505] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  122.892743][ T6505] Call Trace:
[  122.896048][ T6505]  <TASK>
[  122.899007][ T6505]  ? __warn+0x165/0x4d0
[  122.903275][ T6505]  ? drm_wait_one_vblank+0x97c/0xa00
[  122.908609][ T6505]  ? report_bug+0x2b3/0x500
[  122.913199][ T6505]  ? drm_wait_one_vblank+0x97c/0xa00
[  122.918529][ T6505]  ? handle_bug+0x60/0x90
[  122.922983][ T6505]  ? exc_invalid_op+0x1a/0x50
[  122.927696][ T6505]  ? asm_exc_invalid_op+0x1a/0x20
[  122.932818][ T6505]  ? __warn_printk+0x292/0x360
[  122.937618][ T6505]  ? drm_wait_one_vblank+0x97c/0xa00
[  122.943017][ T6505]  ? __pfx_drm_wait_one_vblank+0x10/0x10
[  122.948701][ T6505]  ? __pfx_autoremove_wake_function+0x10/0x10
[  122.954872][ T6505]  ? drm_vblank_get+0x173/0x270
[  122.959763][ T6505]  ? __pfx_drm_fb_helper_ioctl+0x10/0x10
[  122.965512][ T6505]  drm_fb_helper_ioctl+0x114/0x140
[  122.970657][ T6505]  do_fb_ioctl+0x40a/0x7b0
[  122.975494][ T6505]  ? __pfx_do_fb_ioctl+0x10/0x10
[  122.980726][ T6505]  ? smk_tskacc+0x300/0x370
[  122.985387][ T6505]  ? smack_file_ioctl+0x29e/0x3a0
[  122.990441][ T6505]  ? __pfx_smack_file_ioctl+0x10/0x10
[  122.995920][ T6505]  ? __fget_files+0x2a/0x410
[  123.000543][ T6505]  ? __fget_files+0x2a/0x410
[  123.005270][ T6505]  ? __pfx_fb_ioctl+0x10/0x10
[  123.009992][ T6505]  __se_sys_ioctl+0xf5/0x170
[  123.014681][ T6505]  do_syscall_64+0xf3/0x230
[  123.019228][ T6505]  ? clear_bhb_loop+0x35/0x90
[  123.024018][ T6505]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.029950][ T6505] RIP: 0033:0x7fad6597ff19
[  123.034470][ T6505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  123.054219][ T6505] RSP: 002b:00007fad66747058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  123.062725][ T6505] RAX: ffffffffffffffda RBX: 00007fad65b45fa0 RCX: 00007fad6597ff19
[  123.070728][ T6505] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000009
[  123.079128][ T6505] RBP: 00007fad659f3986 R08: 0000000000000000 R09: 0000000000000000
[  123.087542][ T6505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  123.095609][ T6505] R13: 0000000000000000 R14: 00007fad65b45fa0 R15: 00007ffccb422718
[  123.103684][ T6505]  </TASK>
[  123.106744][ T6505] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  123.114033][ T6505] CPU: 1 UID: 0 PID: 6505 Comm: syz.1.167 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0
[  123.124617][ T6505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  123.134684][ T6505] Call Trace:
[  123.137967][ T6505]  <TASK>
[  123.140899][ T6505]  dump_stack_lvl+0x241/0x360
[  123.145586][ T6505]  ? __pfx_dump_stack_lvl+0x10/0x10
[  123.150787][ T6505]  ? __pfx__printk+0x10/0x10
[  123.155379][ T6505]  ? _printk+0xd5/0x120
[  123.159539][ T6505]  ? __init_begin+0x41000/0x41000
[  123.164568][ T6505]  ? vscnprintf+0x5d/0x90
[  123.168902][ T6505]  panic+0x349/0x880
[  123.172889][ T6505]  ? __warn+0x174/0x4d0
[  123.177048][ T6505]  ? __pfx_panic+0x10/0x10
[  123.181637][ T6505]  __warn+0x344/0x4d0
[  123.185631][ T6505]  ? drm_wait_one_vblank+0x97c/0xa00
[  123.190926][ T6505]  report_bug+0x2b3/0x500
[  123.195305][ T6505]  ? drm_wait_one_vblank+0x97c/0xa00
[  123.200593][ T6505]  handle_bug+0x60/0x90
[  123.204750][ T6505]  exc_invalid_op+0x1a/0x50
[  123.209253][ T6505]  asm_exc_invalid_op+0x1a/0x20
[  123.214115][ T6505] RIP: 0010:drm_wait_one_vblank+0x97c/0xa00
[  123.220042][ T6505] Code: 80 3c 08 00 74 08 4c 89 ff e8 e0 7d 96 fc 49 8b 1f 48 c7 c7 c0 16 71 8c 4c 89 f6 48 89 da 8b 5c 24 0c 89 d9 e8 85 68 ef fb 90 <0f> 0b 90 90 49 be 00 00 00 00 00 fc ff df e9 68 fb ff ff 44 89 e9
[  123.239647][ T6505] RSP: 0018:ffffc900036ffac0 EFLAGS: 00010246
[  123.245717][ T6505] RAX: 2d6dcca1faabe000 RBX: 0000000000000000 RCX: 0000000000080000
[  123.253684][ T6505] RDX: ffffc9000c759000 RSI: 0000000000061073 RDI: 0000000000061074
[  123.261655][ T6505] RBP: ffffc900036ffc00 R08: ffffffff81601b22 R09: 1ffffffff285051b
[  123.269632][ T6505] R10: dffffc0000000000 R11: fffffbfff285051c R12: 1ffff920006dff64
[  123.277598][ T6505] R13: 0000000000001b1c R14: ffffffff8c8472e0 R15: ffff8881433aa010
[  123.285574][ T6505]  ? __warn_printk+0x292/0x360
[  123.290357][ T6505]  ? __pfx_drm_wait_one_vblank+0x10/0x10
[  123.295996][ T6505]  ? __pfx_autoremove_wake_function+0x10/0x10
[  123.302064][ T6505]  ? drm_vblank_get+0x173/0x270
[  123.306915][ T6505]  ? __pfx_drm_fb_helper_ioctl+0x10/0x10
[  123.312552][ T6505]  drm_fb_helper_ioctl+0x114/0x140
[  123.317666][ T6505]  do_fb_ioctl+0x40a/0x7b0
[  123.322085][ T6505]  ? __pfx_do_fb_ioctl+0x10/0x10
[  123.327027][ T6505]  ? smk_tskacc+0x300/0x370
[  123.331532][ T6505]  ? smack_file_ioctl+0x29e/0x3a0
[  123.336553][ T6505]  ? __pfx_smack_file_ioctl+0x10/0x10
[  123.341923][ T6505]  ? __fget_files+0x2a/0x410
[  123.346514][ T6505]  ? __fget_files+0x2a/0x410
[  123.351114][ T6505]  ? __pfx_fb_ioctl+0x10/0x10
[  123.355791][ T6505]  __se_sys_ioctl+0xf5/0x170
[  123.360384][ T6505]  do_syscall_64+0xf3/0x230
[  123.364889][ T6505]  ? clear_bhb_loop+0x35/0x90
[  123.369568][ T6505]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  123.375462][ T6505] RIP: 0033:0x7fad6597ff19
[  123.379874][ T6505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  123.399476][ T6505] RSP: 002b:00007fad66747058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  123.407902][ T6505] RAX: ffffffffffffffda RBX: 00007fad65b45fa0 RCX: 00007fad6597ff19
[  123.415877][ T6505] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000009
[  123.423847][ T6505] RBP: 00007fad659f3986 R08: 0000000000000000 R09: 0000000000000000
[  123.431814][ T6505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  123.439782][ T6505] R13: 0000000000000000 R14: 00007fad65b45fa0 R15: 00007ffccb422718
[  123.447762][ T6505]  </TASK>
[  123.451072][ T6505] Kernel Offset: disabled
[  123.455442][ T6505] Rebooting in 86400 seconds..