last executing test programs: 14.955644918s ago: executing program 3 (id=85): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_connect(0x5, 0x48, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 13.448833657s ago: executing program 2 (id=87): r0 = socket(0x2, 0x80805, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$binfmt_script(r4, &(0x7f0000000180), 0xb) r5 = inotify_init1(0x0) inotify_add_watch(r5, &(0x7f00000000c0)='.\x00', 0xa4000061) copy_file_range(r4, &(0x7f0000000080), r3, 0x0, 0xfffffffffffffff8, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x51a23}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback={0x41, 0xfffffffffffffffe}}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x7fff}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x20040000) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000440)={0x53, 0x0, 0x6, 0xab, @scatter={0x0, 0x0, 0x0}, &(0x7f00000003c0)="080000000344", 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000240)={0xffff, 0x1, 0x1, 0x80101, r6}, 0x10) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000140)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r7, 0x7ab, &(0x7f0000000080)={&(0x7f0000000280)={{@host}, {@hyper, 0x6}, 0x400, "787c2ce2fba15d4e9f8e96bc11e2ca247a20c3e26661b174fe1825253be9e8480cb4f3524914f59ba189c1429727ef39b4164f93bb821987b3b7f73495bc8e745304668e0e46798c7f5917ea8428d41cab5612336f04000300000000008e9c1c86a394feb64fb06f77dadbcb20fc62741432b7dca37007d68e98fe46135d6a1c5ed42102f58daa5211319db84aa9abac734be47c908dc3ffa3aa7b61ec16d3d1209fc618f6c4532ea582628502ac46d167db6d53d8f3184df68414e6b6ec0109664c570e155654e03d58dadd0e5a7bab42bbb4a9afdefc115eb1609e7b50dbd94b94ba09000000000000001c9e4a41d3e16af21d6c897a1121bc14de16e78d6d7f2ae79db44e302539fd926e0b91e0fc589e2fa19b218d0508b5ce3ad40d03936693ca5aa41ddc07cf492874569ab037e0530e38245b98131ae0c9afd871df5f51331938764f5a7dd96890edd467b2fbc335ed081729b5ea722a98b34d0dac6de995de4ee263c81b2567b3f87e0897857edd5d7e97d61fc6705feab4846010d4828cc879f95cddb69ff6438f2a109285c46d8224c36069d30c3c9cf4a6800ae224111136bd9c1e06c4bfc4685d7bb6a72345772b3ce9bf105490743dc4b700f24ce6b250b95e6c383fe44967a55d140baf0ec339e3815b29a2246cb5c953048c43266485bbd9d0caecf00e9501a4433b54930cba54e06607ada2f5d818e4804294fcf53058e58e0d33d4aa6dc943811056908fe9116e65cdddac1d2fb24d1eacee389af38b7e5a7056d0de50c6b49fb38388cf28c2d6dd3dbbab84ffbef4b0c02a77f018e8a9749a557909e6aa96185d268dad7744b094d8c6134b89efe26674d65f908f9c3a8c201f661fc26efe0eff248d3a473fe32a5b3643bfad8f186c2af3fbaa1d38560c1244c79a0e48893eefb792af281650f34f6c2d9a6c622aba234b63586713cb66179a0897d98ee5228569c32c1a682807c8db7eb197ccbbd6549db86a6a9aebbf5dc14060f22e2b07d6166f43c25ae0c88be7a4dc38e7ed08972a355b0e5d6fc43b8e5594fa6b36a36a44bb94b75eaff11dc17105f54beda54da2a1ea1acfab354745057dd2e7725f2c8450b19fdf37e19f6ce43449e9191f5a5beb4a1bc176f6130052e83acefd8ff18d592bb75f15f86c9113e4bd67ad420c33ae706cdc10060277b83ef30a50d4ac19c9a791b309377aa20a4743bbb799abc3ba58071b628c9ba8103bbfe389939e55296ec9b4f8d3a03aff30ce9aa0dd6e5158a672be8f3d82f6ca67ee29e8b234840cf7846e604e5b8135abd94d71fe0a79180e75d4e193ea8df466c087b660fe984943751a9f6df8545699701d478c2b3daa949155770e74835bcd972de27afd20b02ce0e504c15b0237437200"}, 0x418, 0x761}) 13.108630746s ago: executing program 3 (id=90): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001680), 0x109801) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r6, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r8, 0xc0745645, &(0x7f0000000100)={0x6, [0xff, 0x9, 0x8, 0x7fff, 0x1005, 0x800, 0x7, 0xfffe, 0xfc01, 0x1, 0x2, 0x10, 0x400, 0xa, 0x10, 0x8006, 0x7, 0xa, 0xc1, 0x9, 0x4, 0x3, 0x97, 0x4577, 0x2, 0x1, 0x82, 0x1, 0x4, 0x8544, 0xb, 0x4, 0x6, 0x7685, 0x98bd, 0x0, 0x7fff, 0x4, 0x5, 0x2, 0x0, 0x809, 0xe9da, 0x2, 0x6, 0x3, 0x4000, 0x5], 0xb}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=0x0, @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa2000000ffb703000008000000b70400000000000085000000010000009500"/65], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000540000001f0001"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f00000016c0)={{0x3, 0x2, 0x1, 0x1, 0x7f7}, 0x4, 0x2}) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x6, &(0x7f0000000840)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000870000001800000007000000000000000300000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) readv(r11, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/175, 0xaf}, {&(0x7f0000000140)=""/145, 0x91}, {&(0x7f0000000200)=""/86, 0x56}, {&(0x7f0000000340)=""/187, 0xbb}, {&(0x7f0000000400)=""/248, 0xf8}, {&(0x7f0000000500)=""/148, 0x94}], 0x6) 13.108176044s ago: executing program 2 (id=91): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = syz_io_uring_setup(0x5e9, &(0x7f0000000480)={0x0, 0x9e6e, 0x1000, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0, 0x20000044}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e23, @broadcast}}, 0x3d, 0x7, 0xfffffff7, 0x1, 0x8, 0x101, 0x8}, &(0x7f0000000000)=0x9c) r6 = syz_open_dev$vim2m(&(0x7f0000000580), 0x7, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x7, 0x1, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000f000061107c000000000095000000000000004ea5c500b90377903b4aa80723006d305a8b409318761be47d3f561e98ea4f1530db29cebfa2c848254ce22fbd564f09352884bf2eab2748fd147da83b78723f46440c373646"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x3, r8, 0x1, 0x0, 0x6, @random="43907396624f"}, 0x14) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r10 = socket$packet(0x11, 0x2, 0x300) bind$packet(r10, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x82, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) preadv(r9, &(0x7f0000003940)=[{&(0x7f00000002c0)=""/57, 0x39}], 0x1, 0x32, 0xfffffffe) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) 12.702453457s ago: executing program 0 (id=92): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_SET(r1, 0x1, 0x0) shmctl$SHM_LOCK(r1, 0xb) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x1000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x40305828, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163", 0x6) accept4(r2, 0x0, 0x0, 0x80000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, 0x0, 0x0, 0x200000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0x69) 10.80193025s ago: executing program 3 (id=93): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockname(r0, 0x0, &(0x7f0000000180)) syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_procfs(0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz0\x00', {0x3, 0x9, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x8, 0x3, 0x7f, 0x20000006, 0x4d, 0x20006, 0x5f, 0xa, 0x5, 0x1, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x101, 0x3c57, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x9, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x400, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0xffff8001, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0x388000, 0x2bb, 0x6c7, 0x9, 0x7ff, 0x3, 0x0, 0x0, 0x5, 0x2b, 0xe, 0x312, 0x0, 0xea4, 0x0, 0xfff, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0xd86, 0x2, 0x4, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x200004, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x2, 0x3], [0x7, 0xfffffff9, 0x4, 0x5, 0xfffffffe, 0x103, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0xff, 0xb, 0x2, 0x2, 0x2, 0x7, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x7, 0x6, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x3, 0x5, 0x1b, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x80000000], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x5, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x0, 0x6, 0x10000016, 0xffffffff, 0x80000000, 0x4, 0xffffffff, 0xc8, 0x3453, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0xb, 0xae, 0x8, 0x6, 0x4, 0x3, 0x100, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0x40b1e, 0xd7, 0x200, 0xffff3441, 0x3]}, 0x45c) ftruncate(0xffffffffffffffff, 0xffff) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x0) ioctl$BLKREPORTZONE(r4, 0xc0101282, &(0x7f0000000400)) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0xb, 0x0, 0x0) 9.936390889s ago: executing program 0 (id=94): r0 = ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000000)={0x1, 0x5, [{0xffffffffffffffff, 0x0, 0x100000000, 0x100000000}, {0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0xfffffffffffff000}, {0xffffffffffffffff, 0x0, 0x1000000000000, 0x8000}, {0xffffffffffffffff, 0x0, 0x0, 0x8000}, {0xffffffffffffffff, 0x0, 0x10000, 0xfffff000}]}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) r1 = accept$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @netrom}, [@rose, @null, @rose, @netrom, @rose, @netrom, @netrom, @netrom]}, &(0x7f0000000140)=0x48) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000180)={0x2, @default, @rose={'rose', 0x0}, 0x4, 'syz0\x00', @bcast, 0x4, 0x5, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r2 = dup3(r1, r0, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000200)={0x0, @bt={0xffffffff, 0x5, 0x1, 0x3, 0x61c9, 0x3ff, 0x5, 0xfffff1c4, 0xfffffff7, 0x40, 0x3, 0x6, 0x21000000, 0x2077, 0x1, 0x4, {0x9, 0x1f2}, 0x40, 0x5}}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r2, 0xc0385720, &(0x7f00000002c0)) ioctl$int_out(r2, 0x2a30, &(0x7f0000000300)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1, {0xfffffffc}}, './file0\x00'}) syz_init_net_socket$llc(0x1a, 0x2, 0x0) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000003c0), r2) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r4, 0x400, 0xf, 0x25dfdbff, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PEER_V4={0x8, 0x8, @remote}, @FOU_ATTR_IPPROTO={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x48}, 0x8000) r5 = dup2(r0, r0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r3) sendmsg$TIPC_CMD_DISABLE_BEARER(r5, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0xd564dd7ba311bf49}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, r6, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000600)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x8, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x40, 0x4, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000680)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f00000006c0)={r7}) r8 = accept4$netrom(r5, &(0x7f0000000700)={{0x3, @null}, [@bcast, @bcast, @default, @remote, @rose, @bcast, @bcast, @rose]}, &(0x7f0000000780)=0x48, 0x80000) ioctl$sock_netrom_SIOCADDRT(r8, 0x890b, &(0x7f00000007c0)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x1, 'syz0\x00', @null, 0x6, 0x5, [@default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000840)={{0x1, 0x1, 0x18, r3, {0x81}}, './file0\x00'}) setsockopt$MRT6_TABLE(r3, 0x29, 0xcf, &(0x7f0000000880)=0xffffffff, 0x4) fcntl$getownex(r1, 0x10, &(0x7f00000008c0)) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b40)={0x2c, &(0x7f0000000900)={0x40, 0xb, 0x50, {0x50, 0x0, "b4b90cbee5a1de32e411ee28ca0b2b70d7be6319df590065f8e4db4c0d01635110428cb73810a1520d7db9ed0de6f8a169b55139d68350b490ef98c9a218b62f990708565c4da4e5a8497a52e795"}}, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40c}}, &(0x7f00000009c0)={0x0, 0xf, 0xde, {0x5, 0xf, 0xde, 0x1, [@generic={0xd9, 0x10, 0x4, "5ac6c3d3c78a1753f77ec5cd5f58556c0c7624f71bb34ce4aed5ac708c7d9af0cd8dfe3625656f3500d62b5578a18aa9551f48a136d5dfa5821fdac89d0672788e11dab15cc7113e347388182e667cb0fd1c7eb91ac54285886ea81a74fcbb8eb71e0c343c2940679206defccfaae26760bbd9e48d899c66f8df30e1be77b3d8e54736441ed5396f16cb88151ba856295ec8b984c5ae83103cc08357c2dbb658ba1fccfede635aacd0a4237289cf86e38a576909090ec0011de470742d43ea12085084e64dcfb82b62f7ad275cf3e07a8c19d0149e3c"}]}}, &(0x7f0000000ac0)={0x20, 0x29, 0xf, {0xf, 0x29, 0xd7, 0x2, 0x8, 0x80, "9af443b1", "e7b16557"}}, &(0x7f0000000b00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x2, 0x23, 0xc, 0x1, 0xe5e6, 0x4}}}, &(0x7f0000001040)={0x84, &(0x7f0000000b80)={0x20, 0x1, 0xc7, "ca70c54c45ed02b8f17f84a19b385d0ed76d993baf9adc04da6fd84d944f8900c3867a583f9c0980e0b654ef2a081e4acecbfe03a04313328c8178fa4f0877bc2bfdb8a9707710e791e4dc95ce1d29e7bad899b415baed3f0ab7bc4ce3b2e084fb4f86981e0d161905f6cadee070917502d9e0fcc77aff2594f7d49b12d2a622ad7bd0003e9fd9dacbe87a438bba6df6439da00db9f56f949f7369e0ce8818cd783795cfdad02bf698d5c918e6a43342b32f2ee7dbe6f7a3f253720a0c9966c31fe933294fe145"}, &(0x7f0000000c80)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000cc0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000d00)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000d40)={0x20, 0x0, 0x8, {0x120, 0x4, [0xff0f]}}, &(0x7f0000000d80)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000dc0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000e00)={0x40, 0xb, 0x2, "3f9f"}, &(0x7f0000000e40)={0x40, 0xf, 0x2, 0xc}, &(0x7f0000000e80)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000ec0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000000f00)={0x40, 0x19, 0x2, "9d42"}, &(0x7f0000000f40)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000f80)={0x40, 0x1c, 0x1, 0x8}, &(0x7f0000000fc0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000001000)={0x40, 0x21, 0x1, 0x4}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001140)={&(0x7f0000001100)='btrfs_handle_em_exist\x00', r9, 0x0, 0x5}, 0x18) pipe2(&(0x7f0000001180)={0xffffffffffffffff}, 0x4000) ioctl$sock_netrom_SIOCADDRT(r10, 0x890b, &(0x7f00000011c0)={0x0, @bcast, @netrom={'nr', 0x0}, 0x890, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @default]}) r11 = ioctl$TUNGETDEVNETNS(r10, 0x54e3, 0x0) writev(r11, &(0x7f0000001840)=[{&(0x7f0000001240)="98004cb07830fa89be51598ec66ab570023787f1c2923eb1c3bf52516d66453668425bbcf9d6c4d08d07fe9eb6cb", 0x2e}, {&(0x7f0000001280)="3d4c83e26db6aa63a62463197c8b932b5aebaa089387db5c3046526172acd50d8fa54b45a2a634cbd8da27a4bdd8f5fb105a69e867f6a63553c1504873961866a7cd93d686dee9f20b41760e6c9aa8cc00492cc12ec624a86386ed632a10fa50b1", 0x61}, {&(0x7f0000001300)="92caf7995aa330f9078a6454f39284d823c210e88a095674ddcf08e858a4991e4db312e58a7b214bc9bc9a19a1d050d1978d0cea2933fc689cf5b59b72dca751081b9fca8a73daecc36dc4e5e2ae95990cb59637bc9a7b193c0f6636e034e817bc08971e723a9b25f60fdb3f6f29951972acd80c98229a39968df37e1f986abe8f49ff7f882f3aff58dfb74ae3334f6cc2b7d2a9975b64241488f2b13843995cd2b08fb8074a895823c26cd2024b05785202561dcc87f2ec324903cbc02ac57a338a1fb126492cf695b45f053b7781323c4599883ee2e7c00b81f7df", 0xdc}, {&(0x7f0000001400)="4a2d9d949acafbcc7760f063f0bb46503778990127085604d63f9f476c1a15fd3a117126565b8827d0381fc8609c9e3d26c56da050d1107b8a05bc516bcb5e75703e7d7a86f75dde529800c57aa29843c6a2e7d8aadcc1b373272c837c46141f07d5ce58aa2dc90ba80b1e733eee4b8d3d5b1f12a479fa1751d9908e3f216d2fcfcded7521ee5afa3a57b3a3bd8a117fe237210e71a385a549e8a11771e0a6e31d4ceefebe74b0358f", 0xa9}, {&(0x7f00000014c0)="77e6d497057ca37e832f6dd35df672c3623f382bd27578fb72d4a820b85e4db17d29d9efba620d4634850f17b1798a98e05161d07246a6de2cd5533dfae460e2041870a2f575bd49700bb40f96ac06b7978d2d3a1470ee0958da8f504d0542ea3a3beb337f0efe2a9c9868b198a09551a03d3e29beed22fda84b6c708062d3caa257c41d90", 0x85}, {&(0x7f0000001580)="579cadea997c0d2c5706e8e3dfccfa39782bf9b43962fbb762c63446dc66e4b2cd4748a552e9b0666d47356ecaa58bdae4ec53d01f0dd0f883c573d54ecdf976bc311a2d36b9066e252aa528200753b86c47a9f31edb3de481d2a6455392ded5ff2a45cfd80a5f9bfb612330cc95490799ecc5d06f0583bab84231777aaa59d927f17119d284df46f8548e25a0201b6e08f7095996cbbb58a611d4d237880bb0b70d50c15cc7c48492b211f0abc2fa2cb86e21350dc155ca0809e77b431f1eb2764e708dd387d7df019c822e31", 0xcd}, {&(0x7f0000001680)="d2a045b4687663509acadc99fccb4397a1b33fb465d5f8f3227dd54706309eb632e722c1d55a0c6753eb42b77bc04340c92f3e58a2ca669e8acc1d3f51", 0x3d}, {&(0x7f00000016c0)="f3a0c9a4804edc1368cf871a20256582775b12bac0ba5adae69d6f7e747afa7f7cc814c005434ca122b4986de663a6b2e23af12a10bf553d1398c2ade6bff450d24458ea655681660ac468cbed8ea8a38a7dc234f8db2da8afe0471683d10c64cd5c099867d9d0da3e93a4e9d2b46ef4e45ba038f89b88ff01cc61384c49030406f1fc1a25f1f81e3543e2cb81bf32bfe7030e5a322759fa7a1340a3a025", 0x9e}, {&(0x7f0000001780)="11088a190f6a820ea432f427cdd16cd03d146a1dafd8c7aaaeed04c7311ddc27278400b87e0d4fc6d63488abd4bef86d3f73a3aadb3ac68fd3f6af0f75c7b56c49d4f713b286751dfb6c8faa1476d23c41fed43a60f3edb9b5bcb5fe229e6f161d6d393d03ac6ab6fb6e13b40f6451a9a8b05f51860673a096099b8a0e2fbd5d06ac5fbf02a49415d1d1ef8d73a59718e57aac619b95ecde61dd565a09604f", 0x9f}], 0x9) 9.580230425s ago: executing program 4 (id=95): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r1) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0xfffb, @empty, 0x3}, 0x1c) r2 = socket(0x10, 0x3, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r3 = epoll_create1(0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/wakeup_count', 0x141000, 0x20) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000200)={0xa000000a}) finit_module(r4, 0x0, 0x3) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='oom_adj\x00') mount$9p_fd(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040), 0x20000, &(0x7f0000000500)=ANY=[@ANYRESHEX=r2, @ANYRESHEX=r5, @ANYBLOB="2c77177a0cdb403ad9bfe96b4f4872b5b6908a03b63ff39a671423486732dbeebd3ee4c6e7ad060000003ee6000fb6e943930771a3705f6b2f6ae04ce448be8dcf6850a6e7fc3106", @ANYRESHEX=r5]) syz_io_uring_setup(0x2e37, &(0x7f0000000240)={0x0, 0x69e1, 0x4, 0x0, 0x295, 0x0, r5}, &(0x7f00000002c0)=0x0, &(0x7f0000000400)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}) move_mount(r4, &(0x7f0000000240)='./file0\x00', r5, &(0x7f0000000280)='./file0/file0\x00', 0x67) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xf0ffffff) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0\x00', 0x20842, 0x4) read$FUSE(r8, 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0xd0}, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r8, 0x7, 0x0, 0x0, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r9, &(0x7f0000000180)={0xa, 0x4e24, 0xfff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c) io_uring_setup(0x5a6a, &(0x7f0000000480)={0x0, 0x8a14, 0x1000, 0x0, 0x16a}) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, 0x0, 0x4008095) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec", 0x43, 0x0, 0x0, 0x0) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) write$sequencer(r10, &(0x7f0000000040)=ANY=[@ANYBLOB="fe0e233ed4d4a04afff10121ff000604"], 0x10) ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000340)) 8.783008945s ago: executing program 3 (id=96): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000800850000006d000000850000000800000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000380), 0xc, 0xc2580) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r5, 0xc008551b, &(0x7f0000000040)=ANY=[]) 8.640842559s ago: executing program 0 (id=97): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async, rerun: 64) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffffff}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, &(0x7f0000000140)={0xa, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f0000000100)={0x0, &(0x7f0000000180)=[{}, {}, {}, {}], r4, 0x0, '\x00', 0x0, 0x4}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000001c0)={&(0x7f0000000180)=[r2], 0x1, 0x0, r4, 0x2, 0x7, 0x3, 0xee8, {0x1, 0x8, 0x0, 0x81, 0x80, 0x5, 0x7, 0x8, 0x348a, 0xdfaa, 0x800, 0x7, 0x101, 0x1, "757e4b653549f51a421fd43dcaf3fef269c508cfa98a391b7f7a210825725017"}}) (async, rerun: 64) syz_usb_control_io$printer(r0, 0x0, 0x0) (rerun: 64) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x7048, 0x1) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (rerun: 32) syz_emit_ethernet(0xae, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x78, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1803"}, {0x0, 0x1, "000500640000000000000000"}, {0x0, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f00000002c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.360976445s ago: executing program 2 (id=98): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="120100ffd2e77610"], 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)}], 0x1}, 0x20000000) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000000), 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd_index=0x4, 0x80000000, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e80, 0xa, 0x0, 0x0) 7.355275806s ago: executing program 4 (id=99): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3213000000dc000000060a010400000000000000000100000508000b4000000000b4000480200001800d00010073796e70726f7879000000000c000280060001400000000034000180080001006c6f670028000280080006400000000d110002402b24292d2d2a5d24402c2d400000000006000440000700003c0001800900010068617368000000002c0002800800"], 0x150}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000380), 0xc, 0xc2580) 7.311401891s ago: executing program 3 (id=100): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_connect(0x5, 0x48, &(0x7f0000000580)=ANY=[], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) 5.97407678s ago: executing program 1 (id=104): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_SET(r1, 0x1, 0x0) shmctl$SHM_LOCK(r1, 0xb) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x1000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x40305828, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163", 0x6) accept4(r2, 0x0, 0x0, 0x80000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, 0x0, 0x0, 0x200000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0x69) 5.868810895s ago: executing program 4 (id=105): syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e"], 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x36, &(0x7f0000000280)=[{0x2, 0xa6, 0x2, 0x3}, {0x2, 0x8, 0x8, 0xfffc}, {0xaee, 0x2, 0xac, 0x1000}, {0x40, 0xaf, 0x5, 0x2}, {0x6, 0x80, 0x0, 0x2}, {0x0, 0x3, 0x5, 0x9}]}, 0x10) write$binfmt_misc(r0, 0x0, 0x0) r2 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x1e, &(0x7f0000000440)={0xfffffffa, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_usb_control_io(r2, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000000)={0x40, 0x12, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) 4.757245786s ago: executing program 2 (id=106): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3, 0x0, 0x7f, 0x3) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000004000000ff"], 0x50) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f94ea3c92b", 0x14}], 0x1}, 0x0) 4.716995523s ago: executing program 0 (id=107): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockname(r0, 0x0, &(0x7f0000000180)) syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_procfs(0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz0\x00', {0x3, 0x9, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x8, 0x3, 0x7f, 0x20000006, 0x4d, 0x20006, 0x5f, 0xa, 0x5, 0x1, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x101, 0x3c57, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x9, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x400, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0xffff8001, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0x388000, 0x2bb, 0x6c7, 0x9, 0x7ff, 0x3, 0x0, 0x0, 0x5, 0x2b, 0xe, 0x312, 0x0, 0xea4, 0x0, 0xfff, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0xd86, 0x2, 0x4, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x200004, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x2, 0x3], [0x7, 0xfffffff9, 0x4, 0x5, 0xfffffffe, 0x103, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0xff, 0xb, 0x2, 0x2, 0x2, 0x7, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x7, 0x6, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x3, 0x5, 0x1b, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x80000000], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x5, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x0, 0x6, 0x10000016, 0xffffffff, 0x80000000, 0x4, 0xffffffff, 0xc8, 0x3453, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0xb, 0xae, 0x8, 0x6, 0x4, 0x3, 0x100, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0x40b1e, 0xd7, 0x200, 0xffff3441, 0x3]}, 0x45c) ftruncate(0xffffffffffffffff, 0xffff) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x0) ioctl$BLKREPORTZONE(r4, 0xc0101282, &(0x7f0000000400)) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0xb, 0x0, 0x0) 4.602556187s ago: executing program 1 (id=108): add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000580)={0x0, &(0x7f00000005c0), 0x0, 0x0, 0x53}) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = add_key$keyring(&(0x7f00000003c0), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfcd21fcad7ff090f83f210982f8938caa52dd8d39af14c31ed56ad59300", 0x39}, 0xfffffffffffffe71, 0xffffffffffffffff) keyctl$revoke(0x3, r2) keyctl$search(0xa, r1, &(0x7f0000000280)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x3}, r2) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f00000001c0), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000240)='\t', 0x1, r3) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000400), 0x608200, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x80, 0x5, 0x9, 0x0, {0x9, 0x1000, 0x101c, 0x10, 0x4, 0x401, 0x100, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000640)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x8, 0x4, 0x4}) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="043b0aaaaaaaaaaa1003000000cfa5bec7d696c68e68"], 0xd) 2.784835867s ago: executing program 0 (id=109): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000004) connect$inet6(r0, 0x0, 0x0) 2.755360178s ago: executing program 4 (id=110): r0 = inotify_init() (async) r1 = socket(0xa, 0x1, 0x84) r2 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @loopback}}}, 0x108) r3 = dup3(r2, r1, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000000)={0x1, {{0x2, 0x4e20, @multicast2}}, 0x0, 0x1, [{{0x2, 0x4e21, @multicast2}}]}, 0x110) r4 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e23, @multicast2}}}, 0x108) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x7, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000008000000850000002300000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa2) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r7 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$smackfs_ipv6host(r7, &(0x7f0000000080)=@l2={{0xa2, 0x3a, 0x3, 0x3a, 0xdd9, 0x3a, 0x2a, 0x3a, 0x8, 0x3a, 0xed, 0x3a, 0x8000000000000001, 0x3a, 0x1}, 0x2f, 0x30, 0x20, 'y\x81C~\xb0\xdc`i%IB\'\x1c@,'}, 0xbd) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, 0x0, &(0x7f00000004c0)) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={r5, 0xfe, 0xfffffffffffffffd}, 0x10) (async) r8 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) syz_usb_control_io$cdc_ecm(r8, 0x0, &(0x7f0000000240)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200604000000a9f915f5"], 0x0, 0x0}) (async) r9 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r9, 0x82, 0x164, &(0x7f0000000580)={[{0xf2, 0x4e00, "7aac9892ee02b15b667dd13e22ae927548192d2f98df56e332320055a955199bbe0ed0d41de68e11abed423881d4c4ca816a2dea1ef90fe48f339132e8b72f5d35ac55bd4a30eddd0eaf03658cf019c92cd45f14c59cd4116f1824042ddce3d9b2a0ec69b848b530b14c83646916ab8b105d768c01a740b1dcd9823fa17ed2e00800e2bcebc86defb6a162db0f1b22706d34318028e720400608cac3aa26a6281b0c318adb63fbcb368909ae020169fbee6f205c4a8584aac30bb7d21dab67d229531bf026d851d871d5803b12c7d2bd6d0d3a33bbd850e2cb87cbb46582138bcdc43c8c2426aeeeaa007a10ac9d123497b6"}, {0x2d, 0x4e00, "c3f5958e3d65161899d5f1a74b61cf173e4038d63ed210c9acab97e08806325e24d11a5359ffeb3f460763023a"}, {0x31, 0x4e00, "1fd9db9a3d25490e088165b8cc56ec229c8b413a6b0d919107f774a387fbfc1920930dd2d248ca9b50a8237d42d5b8fc2c"}]}) 2.649352279s ago: executing program 2 (id=111): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x1) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f00000019c0)={{0x1, 0x0, 0x5, 0x0, 0x8}, 0x2, 0x85, 'id0\x00', 'timer1\x00', 0x0, 0x0, 0xb9, 0x10001, 0xff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 2.526095723s ago: executing program 3 (id=112): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0d00000006000000040000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0x200000a, 0x1, 0x5}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x9e, 0x0, 0x0, 0x0, @time={0x1505, 0x1002}, {0x0, 0x3e}, {0x9}, @queue={0x2, {0x7, 0x10001}}}], 0x1c) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) 2.525670101s ago: executing program 1 (id=113): openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r0 = dup(0xffffffffffffffff) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, &(0x7f0000000200)={0x19c, 0xd2c6}) unshare(0x22020400) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) pidfd_send_signal(r2, 0x22, 0x0, 0x0) 2.440620603s ago: executing program 0 (id=114): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) waitid(0x2, 0x0, &(0x7f0000000100), 0x41000004, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x476c, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x40f, 0x8000, 0x8, 0xbe}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="bbf7e57c4de56c7731339ee97259146262725acd2d74122968789a11814c492e2185c119992bb8464b4a9881798ce633b75b3c097a4ac3e27b78cb728f2a95b5495f4b94833728fb5754a9ee39f3aa2763191020d45ba83fa98f35b742ccd81c203d3099c7632f73e65b5241734b68d39fd4abccb4e8d5eb5d598818e90818bb4449"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000580)={0x2c, &(0x7f0000000180)=ANY=[@ANYRESDEC=r0, @ANYRESOCT=r1, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) landlock_restrict_self(0xffffffffffffffff, 0x0) fspick(r6, &(0x7f0000000000)='.\x00', 0x0) 2.005710953s ago: executing program 1 (id=115): syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@remote, 0xfffe, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x34ff, 0x0, 0x2}, {{@in=@local, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800, 0x800}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x32}, 0x80ff, @in6=@mcast2, 0x0, 0x1, 0x2, 0x0, 0x1}]}]}, 0x17c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) prlimit64(0x0, 0xe, &(0x7f0000000740)={0x8, 0x8b}, 0x0) r2 = gettid() r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000100)={0x0, 0x1, 0xf82f, 0x10000}) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) io_submit(0x0, 0x5, &(0x7f0000000680)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0xfff1, r1, &(0x7f0000000200)="b9f6f45814e4fde9f093028adbaa80fb69d3be163b43ba4b7a29307ff9da7b6082f716fff0ddb88ae202f926f8f3bec5c35befc5c7292e5e470f1160e45a279907fbf0902bbd444c24fcb1deff5ebc04614d5541fb1bbf0078faefa793814c544a15c3dae6944dc6f8456cd84cea124bdcbf4a6424e816de46690f4b617d64215d480bfea5b429dfc2c0d219bc54e2f13404337d19f331ff257acfc12bf43dec5ebeb8b21db76f5faf4a9b06fc6f6b853d95f4742ffe2cd2ce405944f5c9f587040e225d4359306e43d22256c2b5668428c3a56f", 0xd4, 0xd, 0x0, 0x4}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x8807, r1, &(0x7f0000000480)="832e02bd6deedf4c60d1a1ef62a988a3471a486390575aa2c3a8be69160b70c35ba304232ec0be25a9b76144bdccaebed4a74b636189581e30c65e5a7cedca4275e6e7d9b1e6eb2cdad803bc63191f0aa249636d080c41790772d1efa8b610e6b42bd8df8f6c929ecc1599951d105a8bf67b78f165a2b8ab7be1e9ce2270fd218d9017df34c5983d4b140c68bbf622da1a6afbad3eab2366a0c8e07cbf1b70b2a6254433", 0xa4, 0x7fffffffffffffff, 0x0, 0x4}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x3, 0xffffffffffffffff, &(0x7f0000000340)="48e44acc3821079c0f638dbd79bd0d0f2afc4a0984ec3e8d81c86998528ff8b7ed076ee63cc77cd160c18e391433", 0x2e, 0x1, 0x0, 0x1, r1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x7, r1, &(0x7f0000000580)="fc62c142bf6d9f373cc76da4b6c65532301325848174", 0x16, 0x200, 0x0, 0x2, r1}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x3, 0xffffffffffffffff, &(0x7f0000000600)="6d6087b6ed92a7a4e83f07835f8bd6655ce350dd4f688b84bc7674536dc524afc27ad2c786ad53ff1bb4880a9dfa89f32c11db3597193d31", 0x38, 0x0, 0x0, 0x2, r1}]) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 1.948909887s ago: executing program 4 (id=116): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="120100ffd2e77610"], 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)}], 0x1}, 0x20000000) setsockopt$sock_attach_bpf(r2, 0x1, 0x7, &(0x7f0000000000), 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd_index=0x4, 0x80000000, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e80, 0xa, 0x0, 0x0) 821.01563ms ago: executing program 1 (id=117): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) r2 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0x1000) syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a01"], 0x14}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4400d800", @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000000000008"], 0x44}, 0x1, 0x0, 0x0, 0x20008802}, 0x30) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x8801) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000100)=0x7, 0x4) listen(0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000fa461ad7e48489bffa56020013f811186809fc071200000f0000ff3f21396963d43e89b0ee000000170a001700e0da8979d2fc6ca9e48270faf047145bc79e0b9971bcbedac0eeed49dbacf96eeb9b912cc16ce06b8a416e551bbf8c00c774461dfac48219fef1aedf5bc9eb6f6b993cb35bab8014fb3597624155d71ffd4e87d3d3e9e49c", 0x88}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64]) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000080)={0xf0f041}) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) 641.246255ms ago: executing program 2 (id=118): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000ffc000/0x1000)=nil) shmctl$IPC_SET(r1, 0x1, 0x0) shmctl$SHM_LOCK(r1, 0xb) shmat(r1, &(0x7f0000ffd000/0x3000)=nil, 0x1000) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x40305828, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163", 0x6) accept4(r2, 0x0, 0x0, 0x80000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x200000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0x69) 3.009169ms ago: executing program 1 (id=119): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockname(r0, 0x0, &(0x7f0000000180)) syz_init_net_socket$netrom(0x6, 0x5, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_procfs(0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz0\x00', {0x3, 0x9, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x8, 0x8, 0x80, 0x8, 0x3, 0x7f, 0x20000006, 0x4d, 0x20006, 0x5f, 0xa, 0x5, 0x1, 0xffffff01, 0x6, 0xff, 0x6, 0x5, 0x4, 0x0, 0x101, 0x3c57, 0x0, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x5, 0x7, 0x83, 0x9, 0x4c74, 0x0, 0x242, 0x2, 0xe, 0x0, 0x400, 0x7, 0x17, 0x21, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x85, 0x6, 0xffff8001, 0x3ff, 0x83, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0x388000, 0x2bb, 0x6c7, 0x9, 0x7ff, 0x3, 0x0, 0x0, 0x5, 0x2b, 0xe, 0x312, 0x0, 0xea4, 0x0, 0xfff, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0xff, 0x0, 0x1000ff, 0x5, 0x1000005, 0x5f31, 0xd, 0xd86, 0x2, 0x4, 0x8, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0xbc2, 0x1, 0xfe000000, 0x8, 0x2, 0x200004, 0x9, 0x3, 0x3, 0x9, 0x4, 0x3, 0x3, 0xbc45, 0x48c93690, 0x2, 0x3], [0x7, 0xfffffff9, 0x4, 0x5, 0xfffffffe, 0x103, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x3, 0x5, 0x800000, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x3038, 0xff, 0xb, 0x2, 0x2, 0x2, 0x7, 0x20000008, 0x4, 0x16d01, 0x6, 0x38, 0x800003, 0x600, 0x80, 0xbf7, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x4a9, 0x5, 0x6, 0xac8, 0x5, 0x7, 0x6, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x3, 0x5, 0x1b, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x80000000], [0x9, 0xbb33, 0xa, 0xb, 0x5, 0x938, 0x6, 0x5, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x3, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x7, 0x1, 0x2, 0x14c, 0x0, 0x6, 0x10000016, 0xffffffff, 0x80000000, 0x4, 0xffffffff, 0xc8, 0x3453, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0xb, 0xae, 0x8, 0x6, 0x4, 0x3, 0x100, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x8, 0x4, 0x5, 0x40b1e, 0xd7, 0x200, 0xffff3441, 0x3]}, 0x45c) ftruncate(0xffffffffffffffff, 0xffff) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x0) ioctl$BLKREPORTZONE(r4, 0xc0101282, &(0x7f0000000400)) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0xb, 0x0, 0x0) 0s ago: executing program 4 (id=120): syz_usb_connect(0x0, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e"], 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x36, &(0x7f0000000280)=[{0x2, 0xa6, 0x2, 0x3}, {0x2, 0x8, 0x8, 0xfffc}, {0xaee, 0x2, 0xac, 0x1000}, {0x40, 0xaf, 0x5, 0x2}, {0x6, 0x80, 0x0, 0x2}, {0x0, 0x3, 0x5, 0x9}]}, 0x10) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) r2 = syz_usb_connect(0x1, 0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x1e, &(0x7f0000000440)={0xfffffffa, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) syz_usb_control_io(r2, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000000)={0x40, 0x12, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.39' (ED25519) to the list of known hosts. [ 349.827976][ T5841] cgroup: Unknown subsys name 'net' [ 350.069870][ T5841] cgroup: Unknown subsys name 'cpuset' [ 350.124671][ T5841] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 352.086211][ T5841] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 356.456145][ T5130] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 356.471774][ T5130] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 356.472949][ T5862] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 356.492638][ T5862] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 356.501552][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 356.503080][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 356.519955][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 356.533558][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 356.547636][ T5862] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 356.550805][ T5862] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 356.569252][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 356.570224][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 356.572210][ T5130] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 356.573658][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 356.578062][ T5130] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 356.637625][ T5130] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 356.655308][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 356.657930][ T5130] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 356.660505][ T5130] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 356.661929][ T5130] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 356.781113][ T5130] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 356.787157][ T5130] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 356.789226][ T5130] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 356.791887][ T5130] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 356.793305][ T5130] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 357.776312][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 357.792095][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 357.848557][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 357.857113][ T5864] chnl_net:caif_netlink_parms(): no params data found [ 358.121262][ T5866] chnl_net:caif_netlink_parms(): no params data found [ 358.595720][ T5862] Bluetooth: hci2: command tx timeout [ 358.674063][ T5862] Bluetooth: hci0: command tx timeout [ 358.674070][ T5130] Bluetooth: hci1: command tx timeout [ 358.753974][ T5862] Bluetooth: hci3: command tx timeout [ 358.835483][ T5862] Bluetooth: hci4: command tx timeout [ 358.965282][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.966872][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.967379][ T5851] bridge_slave_0: entered allmulticast mode [ 358.969417][ T5851] bridge_slave_0: entered promiscuous mode [ 358.990775][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.990939][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.991155][ T5860] bridge_slave_0: entered allmulticast mode [ 358.994827][ T5860] bridge_slave_0: entered promiscuous mode [ 359.126361][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.126467][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.126612][ T5851] bridge_slave_1: entered allmulticast mode [ 359.128473][ T5851] bridge_slave_1: entered promiscuous mode [ 359.141940][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.142089][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.142645][ T5860] bridge_slave_1: entered allmulticast mode [ 359.146782][ T5860] bridge_slave_1: entered promiscuous mode [ 359.148944][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.149156][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.149705][ T5853] bridge_slave_0: entered allmulticast mode [ 359.152746][ T5853] bridge_slave_0: entered promiscuous mode [ 359.167323][ T5864] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.167470][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.167681][ T5864] bridge_slave_0: entered allmulticast mode [ 359.171132][ T5864] bridge_slave_0: entered promiscuous mode [ 359.434868][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.434998][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.435134][ T5853] bridge_slave_1: entered allmulticast mode [ 359.436987][ T5853] bridge_slave_1: entered promiscuous mode [ 359.440373][ T5864] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.440481][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.440756][ T5864] bridge_slave_1: entered allmulticast mode [ 359.442638][ T5864] bridge_slave_1: entered promiscuous mode [ 359.768881][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.769149][ T5866] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.769368][ T5866] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.769543][ T5866] bridge_slave_0: entered allmulticast mode [ 359.771625][ T5866] bridge_slave_0: entered promiscuous mode [ 359.779529][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.038469][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.038778][ T5866] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.038883][ T5866] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.039006][ T5866] bridge_slave_1: entered allmulticast mode [ 360.040876][ T5866] bridge_slave_1: entered promiscuous mode [ 360.045147][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.051012][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.059364][ T5864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.318705][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.321633][ T5864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.656802][ T5851] team0: Port device team_slave_0 added [ 360.661148][ T5866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.663255][ T5860] team0: Port device team_slave_0 added [ 360.674973][ T5862] Bluetooth: hci2: command tx timeout [ 360.754054][ T5862] Bluetooth: hci1: command tx timeout [ 360.754066][ T5130] Bluetooth: hci0: command tx timeout [ 360.817335][ T5851] team0: Port device team_slave_1 added [ 360.820232][ T5866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.822195][ T5860] team0: Port device team_slave_1 added [ 360.825299][ T5853] team0: Port device team_slave_0 added [ 360.829347][ T5864] team0: Port device team_slave_0 added [ 360.833845][ T5862] Bluetooth: hci3: command tx timeout [ 360.913948][ T5862] Bluetooth: hci4: command tx timeout [ 361.026283][ T5853] team0: Port device team_slave_1 added [ 361.028795][ T5864] team0: Port device team_slave_1 added [ 361.715870][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.715883][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.715903][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.719577][ T5866] team0: Port device team_slave_0 added [ 361.720755][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.720770][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.720797][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.916057][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.916075][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.916102][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.918775][ T5866] team0: Port device team_slave_1 added [ 361.920978][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.920993][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.921012][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.922134][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.922149][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.922168][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.923426][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.923440][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.923478][ T5864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.040858][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.040879][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.040912][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.042462][ T5864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.042477][ T5864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.042519][ T5864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.205762][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.205783][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.205802][ T5866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.297064][ T5866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.297077][ T5866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 362.297096][ T5866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.591454][ T5851] hsr_slave_0: entered promiscuous mode [ 362.592648][ T5851] hsr_slave_1: entered promiscuous mode [ 362.672323][ T5860] hsr_slave_0: entered promiscuous mode [ 362.673341][ T5860] hsr_slave_1: entered promiscuous mode [ 362.676896][ T5860] debugfs: 'hsr0' already exists in 'hsr' [ 362.677055][ T5860] Cannot create hsr debugfs directory [ 362.755546][ T5862] Bluetooth: hci2: command tx timeout [ 362.834309][ T5862] Bluetooth: hci0: command tx timeout [ 362.834362][ T5862] Bluetooth: hci1: command tx timeout [ 362.865559][ T5864] hsr_slave_0: entered promiscuous mode [ 362.866553][ T5864] hsr_slave_1: entered promiscuous mode [ 362.867262][ T5864] debugfs: 'hsr0' already exists in 'hsr' [ 362.867285][ T5864] Cannot create hsr debugfs directory [ 362.876554][ T5853] hsr_slave_0: entered promiscuous mode [ 362.878156][ T5853] hsr_slave_1: entered promiscuous mode [ 362.879255][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 362.879284][ T5853] Cannot create hsr debugfs directory [ 362.913971][ T5130] Bluetooth: hci3: command tx timeout [ 363.004220][ T5130] Bluetooth: hci4: command tx timeout [ 363.191072][ T5866] hsr_slave_0: entered promiscuous mode [ 363.192048][ T5866] hsr_slave_1: entered promiscuous mode [ 363.192722][ T5866] debugfs: 'hsr0' already exists in 'hsr' [ 363.192743][ T5866] Cannot create hsr debugfs directory [ 364.833879][ T5130] Bluetooth: hci2: command tx timeout [ 364.915322][ T5130] Bluetooth: hci1: command tx timeout [ 364.915357][ T5130] Bluetooth: hci0: command tx timeout [ 364.983620][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 365.005788][ T5130] Bluetooth: hci3: command tx timeout [ 365.033346][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 365.069573][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 365.074220][ T5130] Bluetooth: hci4: command tx timeout [ 365.131740][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 365.237279][ T5860] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 365.287697][ T5860] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 365.323300][ T5860] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 365.377380][ T5860] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 365.531693][ T5864] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 365.571940][ T5864] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 365.589812][ T5864] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 365.649544][ T5864] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 365.791431][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 365.837378][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 365.880457][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 365.927911][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 366.054376][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.071938][ T5866] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 366.118666][ T5866] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 366.155877][ T5866] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 366.192179][ T5866] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 366.275442][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.317494][ T5902] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.318019][ T5902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.354301][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.376200][ T5902] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.376343][ T5902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.457771][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.498391][ T5864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.513204][ T182] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.513353][ T182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.557594][ T5902] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.557686][ T5902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.609898][ T5864] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.653219][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.669995][ T5902] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.671007][ T5902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.728316][ T182] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.728434][ T182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.815714][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.850337][ T5866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.872629][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.872938][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.909903][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.910138][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.972701][ T5866] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.022648][ T182] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.022794][ T182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.088011][ T5902] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.088216][ T5902] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.187220][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.440369][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.506812][ T5851] veth0_vlan: entered promiscuous mode [ 367.562762][ T5851] veth1_vlan: entered promiscuous mode [ 367.681414][ T5864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.767945][ T5860] veth0_vlan: entered promiscuous mode [ 367.851480][ T5851] veth0_macvtap: entered promiscuous mode [ 367.863363][ T5860] veth1_vlan: entered promiscuous mode [ 367.928544][ T5851] veth1_macvtap: entered promiscuous mode [ 367.967713][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.036907][ T5866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.065812][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.108862][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.145914][ T5860] veth0_macvtap: entered promiscuous mode [ 368.177118][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.180925][ T5860] veth1_macvtap: entered promiscuous mode [ 368.182880][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.208522][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.223491][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.350302][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 368.375237][ T5853] veth0_vlan: entered promiscuous mode [ 368.454484][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 368.500333][ T5866] veth0_vlan: entered promiscuous mode [ 368.520431][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.537894][ T5853] veth1_vlan: entered promiscuous mode [ 368.567758][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.572379][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.593547][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.617225][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.617252][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.660909][ T5866] veth1_vlan: entered promiscuous mode [ 368.696175][ T5864] veth0_vlan: entered promiscuous mode [ 368.808344][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.808367][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.809501][ T5864] veth1_vlan: entered promiscuous mode [ 368.980956][ T5853] veth0_macvtap: entered promiscuous mode [ 369.003216][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.003237][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.029931][ T5853] veth1_macvtap: entered promiscuous mode [ 369.035724][ T5866] veth0_macvtap: entered promiscuous mode [ 369.105802][ T5866] veth1_macvtap: entered promiscuous mode [ 369.184219][ T1270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.184241][ T1270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.231620][ T5864] veth0_macvtap: entered promiscuous mode [ 369.247662][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.288576][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.301133][ T5864] veth1_macvtap: entered promiscuous mode [ 369.312548][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.348026][ T5866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.370233][ T5901] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.375561][ T5901] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.380875][ T5901] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.401658][ T5901] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.428964][ T5901] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.432722][ T5901] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.451671][ T5972] mmap: syz.2.6 (5972) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 369.451856][ T5901] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.481226][ T5901] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.546722][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.600926][ T5977] FAULT_INJECTION: forcing a failure. [ 369.600926][ T5977] name failslab, interval 1, probability 0, space 0, times 1 [ 369.600981][ T5977] CPU: 1 UID: 0 PID: 5977 Comm: syz.2.7 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 369.601005][ T5977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 369.601026][ T5977] Call Trace: [ 369.601034][ T5977] [ 369.601048][ T5977] dump_stack_lvl+0x189/0x250 [ 369.601095][ T5977] ? __pfx____ratelimit+0x10/0x10 [ 369.601123][ T5977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.601155][ T5977] ? __pfx__printk+0x10/0x10 [ 369.601187][ T5977] ? __pfx___might_resched+0x10/0x10 [ 369.601219][ T5977] should_fail_ex+0x46c/0x600 [ 369.601253][ T5977] should_failslab+0xa8/0x100 [ 369.601290][ T5977] __kmalloc_noprof+0xcc/0x7d0 [ 369.601319][ T5977] ? kfree+0x51/0x950 [ 369.601343][ T5977] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 369.601375][ T5977] tomoyo_realpath_from_path+0xe3/0x5d0 [ 369.601402][ T5977] ? tomoyo_domain+0xda/0x130 [ 369.601432][ T5977] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 369.601465][ T5977] tomoyo_path_number_perm+0x1e8/0x5a0 [ 369.601501][ T5977] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 369.601538][ T5977] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 369.601565][ T5977] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.601599][ T5977] ? __lock_acquire+0xab9/0xd20 [ 369.601655][ T5977] ? __fget_files+0x2a/0x420 [ 369.601690][ T5977] ? __fget_files+0x2a/0x420 [ 369.601720][ T5977] ? __fget_files+0x3a6/0x420 [ 369.601749][ T5977] ? __fget_files+0x2a/0x420 [ 369.601792][ T5977] security_file_ioctl+0xcb/0x2d0 [ 369.601829][ T5977] __se_sys_ioctl+0x47/0x170 [ 369.601858][ T5977] do_syscall_64+0xfa/0x3b0 [ 369.601884][ T5977] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.601920][ T5977] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.601960][ T5977] ? clear_bhb_loop+0x60/0xb0 [ 369.601987][ T5977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.602007][ T5977] RIP: 0033:0x7f929274eec9 [ 369.602033][ T5977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.602051][ T5977] RSP: 002b:00007f92909b6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 369.602081][ T5977] RAX: ffffffffffffffda RBX: 00007f92929a5fa0 RCX: 00007f929274eec9 [ 369.602098][ T5977] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000007 [ 369.602112][ T5977] RBP: 00007f92909b6090 R08: 0000000000000000 R09: 0000000000000000 [ 369.602126][ T5977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.602138][ T5977] R13: 00007f92929a6038 R14: 00007f92929a5fa0 R15: 00007ffc1c47eeb8 [ 369.602173][ T5977] [ 369.602181][ T5977] ERROR: Out of memory at tomoyo_realpath_from_path. [ 369.762266][ T5981] FAULT_INJECTION: forcing a failure. [ 369.762266][ T5981] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 369.762344][ T5981] CPU: 0 UID: 0 PID: 5981 Comm: syz.3.4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 369.762372][ T5981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 369.762387][ T5981] Call Trace: [ 369.762396][ T5981] [ 369.762406][ T5981] dump_stack_lvl+0x189/0x250 [ 369.762451][ T5981] ? __pfx____ratelimit+0x10/0x10 [ 369.762481][ T5981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.762516][ T5981] ? __pfx__printk+0x10/0x10 [ 369.762561][ T5981] should_fail_ex+0x46c/0x600 [ 369.762598][ T5981] _copy_to_user+0x31/0xb0 [ 369.762625][ T5981] simple_read_from_buffer+0xe1/0x170 [ 369.762664][ T5981] proc_fail_nth_read+0x1b6/0x220 [ 369.762706][ T5981] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 369.762736][ T5981] ? rw_verify_area+0x2ac/0x4e0 [ 369.762765][ T5981] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 369.762794][ T5981] vfs_read+0x203/0xa30 [ 369.762835][ T5981] ? __pfx_vfs_read+0x10/0x10 [ 369.762865][ T5981] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 369.762913][ T5981] ? mutex_lock_nested+0x154/0x1d0 [ 369.762948][ T5981] ? fdget_pos+0x253/0x320 [ 369.762992][ T5981] ksys_read+0x14b/0x260 [ 369.763026][ T5981] ? __pfx_ksys_read+0x10/0x10 [ 369.763053][ T5981] ? rcu_is_watching+0x15/0xb0 [ 369.763087][ T5981] ? do_syscall_64+0xbe/0x3b0 [ 369.763122][ T5981] do_syscall_64+0xfa/0x3b0 [ 369.763150][ T5981] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.763177][ T5981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.763199][ T5981] ? clear_bhb_loop+0x60/0xb0 [ 369.763229][ T5981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.763253][ T5981] RIP: 0033:0x7fca5085d8dc [ 369.763275][ T5981] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 369.763295][ T5981] RSP: 002b:00007fca4eaa5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 369.763321][ T5981] RAX: ffffffffffffffda RBX: 00007fca50ab6090 RCX: 00007fca5085d8dc [ 369.763339][ T5981] RDX: 000000000000000f RSI: 00007fca4eaa50a0 RDI: 0000000000000004 [ 369.763355][ T5981] RBP: 00007fca4eaa5090 R08: 0000000000000000 R09: 0000000000000000 [ 369.763370][ T5981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.763385][ T5981] R13: 00007fca50ab6128 R14: 00007fca50ab6090 R15: 00007ffeb5bdf928 [ 369.763422][ T5981] [ 369.913364][ T5977] warning: `syz.2.7' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 369.988484][ T5864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 370.179952][ T5986] netlink: 'syz.2.9': attribute type 21 has an invalid length. [ 370.207965][ T5986] netlink: 'syz.2.9': attribute type 1 has an invalid length. [ 370.208458][ T5986] netlink: 144 bytes leftover after parsing attributes in process `syz.2.9'. [ 370.283956][ T58] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.303007][ T5902] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.324840][ T5902] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.337002][ T5902] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.365730][ T5989] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 370.552384][ T1270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.552406][ T1270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.634639][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 370.762908][ T5982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.762928][ T5982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 370.966175][ T5982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 370.966197][ T5982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.003727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 371.003753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 371.212819][ T5902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.212840][ T5902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.350788][ T5903] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.350809][ T5903] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 371.632488][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.632511][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 375.239826][ T6031] FAULT_INJECTION: forcing a failure. [ 375.239826][ T6031] name failslab, interval 1, probability 0, space 0, times 0 [ 375.239864][ T6031] CPU: 0 UID: 0 PID: 6031 Comm: syz.1.19 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 375.239889][ T6031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 375.239902][ T6031] Call Trace: [ 375.239911][ T6031] [ 375.239920][ T6031] dump_stack_lvl+0x189/0x250 [ 375.239959][ T6031] ? __pfx____ratelimit+0x10/0x10 [ 375.239985][ T6031] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.240017][ T6031] ? __pfx__printk+0x10/0x10 [ 375.240049][ T6031] ? __pfx___might_resched+0x10/0x10 [ 375.240080][ T6031] should_fail_ex+0x46c/0x600 [ 375.240113][ T6031] should_failslab+0xa8/0x100 [ 375.240149][ T6031] __kmalloc_noprof+0xcc/0x7d0 [ 375.240178][ T6031] ? kfree+0x51/0x950 [ 375.240201][ T6031] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 375.240233][ T6031] tomoyo_realpath_from_path+0xe3/0x5d0 [ 375.240295][ T6031] ? tomoyo_domain+0xda/0x130 [ 375.240326][ T6031] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 375.240360][ T6031] tomoyo_path_number_perm+0x1e8/0x5a0 [ 375.240395][ T6031] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 375.240430][ T6031] ? __lock_acquire+0xab9/0xd20 [ 375.240476][ T6031] ? __lock_acquire+0xab9/0xd20 [ 375.240530][ T6031] ? __fget_files+0x2a/0x420 [ 375.240565][ T6031] ? __fget_files+0x2a/0x420 [ 375.240594][ T6031] ? __fget_files+0x3a6/0x420 [ 375.240623][ T6031] ? __fget_files+0x2a/0x420 [ 375.240659][ T6031] security_file_ioctl+0xcb/0x2d0 [ 375.240695][ T6031] __se_sys_ioctl+0x47/0x170 [ 375.240723][ T6031] do_syscall_64+0xfa/0x3b0 [ 375.240749][ T6031] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.240774][ T6031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.240796][ T6031] ? clear_bhb_loop+0x60/0xb0 [ 375.240823][ T6031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.240843][ T6031] RIP: 0033:0x7fa20a58eec9 [ 375.240862][ T6031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.240880][ T6031] RSP: 002b:00007fa2087f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 375.240903][ T6031] RAX: ffffffffffffffda RBX: 00007fa20a7e5fa0 RCX: 00007fa20a58eec9 [ 375.240920][ T6031] RDX: 0000200000000200 RSI: 00000000c0606610 RDI: 0000000000000003 [ 375.240934][ T6031] RBP: 00007fa2087f6090 R08: 0000000000000000 R09: 0000000000000000 [ 375.240947][ T6031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.240960][ T6031] R13: 00007fa20a7e6038 R14: 00007fa20a7e5fa0 R15: 00007ffe0d912708 [ 375.240994][ T6031] [ 375.241003][ T6031] ERROR: Out of memory at tomoyo_realpath_from_path. [ 375.734096][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18'. [ 375.878680][ T6038] netlink: 120 bytes leftover after parsing attributes in process `syz.2.21'. [ 375.878923][ T6038] block nbd0: not configured, cannot reconfigure [ 375.994924][ T3118] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 376.442668][ T3118] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 376.442699][ T3118] usb 4-1: config 1 has no interface number 0 [ 376.442773][ T3118] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 376.442800][ T3118] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 376.442826][ T3118] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.391412][ T3118] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 377.391444][ T3118] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.391474][ T3118] usb 4-1: Product: syz [ 377.391489][ T3118] usb 4-1: Manufacturer: syz [ 377.391504][ T3118] usb 4-1: SerialNumber: syz [ 377.717654][ T6035] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 378.093673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 378.093710][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 378.093832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 378.093865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 378.093893][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 378.093933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 378.094022][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 378.404918][ T6035] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 378.498206][ T6061] FAULT_INJECTION: forcing a failure. [ 378.498206][ T6061] name failslab, interval 1, probability 0, space 0, times 0 [ 378.498302][ T6061] CPU: 1 UID: 0 PID: 6061 Comm: syz.0.26 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 378.498327][ T6061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 378.498340][ T6061] Call Trace: [ 378.498348][ T6061] [ 378.498358][ T6061] dump_stack_lvl+0x189/0x250 [ 378.498400][ T6061] ? __pfx____ratelimit+0x10/0x10 [ 378.498427][ T6061] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.498459][ T6061] ? __pfx__printk+0x10/0x10 [ 378.498490][ T6061] ? __pfx___might_resched+0x10/0x10 [ 378.498521][ T6061] should_fail_ex+0x46c/0x600 [ 378.498554][ T6061] should_failslab+0xa8/0x100 [ 378.498589][ T6061] __kmalloc_noprof+0xcc/0x7d0 [ 378.498618][ T6061] ? kfree+0x51/0x950 [ 378.498641][ T6061] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 378.498672][ T6061] tomoyo_realpath_from_path+0xe3/0x5d0 [ 378.498698][ T6061] ? tomoyo_domain+0xda/0x130 [ 378.498728][ T6061] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 378.498761][ T6061] tomoyo_path_number_perm+0x1e8/0x5a0 [ 378.498796][ T6061] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 378.498832][ T6061] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 378.498859][ T6061] ? lockdep_hardirqs_on+0x9c/0x150 [ 378.498892][ T6061] ? __lock_acquire+0xab9/0xd20 [ 378.498947][ T6061] ? __fget_files+0x2a/0x420 [ 378.498982][ T6061] ? __fget_files+0x2a/0x420 [ 378.499023][ T6061] ? __fget_files+0x3a6/0x420 [ 378.499057][ T6061] ? __fget_files+0x2a/0x420 [ 378.499091][ T6061] security_file_ioctl+0xcb/0x2d0 [ 378.499126][ T6061] __se_sys_ioctl+0x47/0x170 [ 378.499154][ T6061] do_syscall_64+0xfa/0x3b0 [ 378.499178][ T6061] ? lockdep_hardirqs_on+0x9c/0x150 [ 378.499201][ T6061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.499223][ T6061] ? clear_bhb_loop+0x60/0xb0 [ 378.499248][ T6061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.499268][ T6061] RIP: 0033:0x7fb1170feec9 [ 378.499286][ T6061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.499304][ T6061] RSP: 002b:00007fb115345038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 378.499326][ T6061] RAX: ffffffffffffffda RBX: 00007fb117356090 RCX: 00007fb1170feec9 [ 378.499341][ T6061] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 378.499371][ T6061] RBP: 00007fb115345090 R08: 0000000000000000 R09: 0000000000000000 [ 378.499384][ T6061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.499395][ T6061] R13: 00007fb117356128 R14: 00007fb117356090 R15: 00007fffed8b7d68 [ 378.499427][ T6061] [ 378.513024][ T6061] ERROR: Out of memory at tomoyo_realpath_from_path. [ 379.168938][ T6035] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 379.735877][ T3118] sierra_net 4-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07 [ 379.756897][ C0] vkms_vblank_simulate: vblank timer overrun [ 379.916713][ C0] vkms_vblank_simulate: vblank timer overrun [ 379.988212][ C0] vkms_vblank_simulate: vblank timer overrun [ 380.163878][ C0] vkms_vblank_simulate: vblank timer overrun [ 380.352221][ C0] vkms_vblank_simulate: vblank timer overrun [ 380.921793][ T3118] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 380.921950][ T3118] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 380.922648][ T3118] sierra_net 4-1:1.7 wwan0: Submit SYNC failed -71 [ 380.922672][ T3118] sierra_net 4-1:1.7 wwan0: Send SYNC failed, status -71 [ 380.994555][ T6035] syz.3.20 (6035) used greatest stack depth: 16632 bytes left [ 381.193460][ T3118] usb 4-1: USB disconnect, device number 2 [ 381.200929][ T3118] sierra_net 4-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.3-1, Sierra Wireless USB-to-WWAN Modem [ 381.312137][ T6090] netlink: 68 bytes leftover after parsing attributes in process `syz.0.35'. [ 381.318885][ C0] vkms_vblank_simulate: vblank timer overrun [ 381.460910][ C0] vkms_vblank_simulate: vblank timer overrun [ 381.870532][ C0] vkms_vblank_simulate: vblank timer overrun [ 381.978418][ T6101] netlink: 'syz.3.37': attribute type 1 has an invalid length. [ 382.513808][ C0] vkms_vblank_simulate: vblank timer overrun [ 383.150252][ C0] vkms_vblank_simulate: vblank timer overrun [ 383.977757][ T5911] sierra_net 4-1:1.7 wwan0 (unregistering): Send SYNC failed, status -19 [ 383.977862][ T5911] sierra_net 4-1:1.7 wwan0 (unregistering): Send SYNC failed, status -19 [ 385.146647][ T992] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 386.145278][ T5925] sierra_net 4-1:1.7 wwan0 (unregistering): Send SYNC failed, status -19 [ 386.266175][ T5925] sierra_net 4-1:1.7 wwan0 (unregistering): Send SYNC failed, status -19 [ 388.574344][ T5925] sierra_net 4-1:1.7 wwan0 (unregistering): Send SYNC failed, status -19 [ 388.574437][ T5925] sierra_net 4-1:1.7 wwan0 (unregistering): Send SYNC failed, status -19 [ 389.909420][ C1] vkms_vblank_simulate: vblank timer overrun [ 389.923724][ T992] usb 1-1: Using ep0 maxpacket: 16 [ 389.973490][ T992] usb 1-1: device descriptor read/all, error -71 [ 389.979615][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.979734][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.471503][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.525304][ T3118] sierra_net 4-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19 [ 391.329386][ C1] vkms_vblank_simulate: vblank timer overrun [ 391.669593][ T6125] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 391.766967][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.435220][ T6133] netlink: 16 bytes leftover after parsing attributes in process `syz.0.42'. [ 392.447238][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.061778][ C1] vkms_vblank_simulate: vblank timer overrun [ 394.610551][ T6144] 9pnet_fd: Insufficient options for proto=fd [ 395.431831][ C0] vkms_vblank_simulate: vblank timer overrun [ 395.826896][ C0] vkms_vblank_simulate: vblank timer overrun [ 395.911751][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.055525][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.370095][ C0] vkms_vblank_simulate: vblank timer overrun [ 396.738070][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.437348][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.476281][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.616080][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.760033][ C0] vkms_vblank_simulate: vblank timer overrun [ 397.797877][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.111649][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.293866][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.378004][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.444707][ T992] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 398.601154][ T992] usb 1-1: config 8 has an invalid interface number: 177 but max is 0 [ 398.601185][ T992] usb 1-1: config 8 has no interface number 0 [ 398.601236][ T992] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 398.601267][ T992] usb 1-1: config 8 interface 177 has no altsetting 0 [ 398.601302][ T992] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 398.601325][ T992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.624174][ T6169] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 399.707847][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.794956][ T992] usb 1-1: string descriptor 0 read error: -71 [ 399.902258][ C0] ir_toy 1-1:8.177: out urb status: -71 [ 400.413766][ T992] ir_toy 1-1:8.177: could not write reset command: -110 [ 400.417011][ T992] ir_toy 1-1:8.177: probe with driver ir_toy failed with error -110 [ 401.767905][ T6208] FAULT_INJECTION: forcing a failure. [ 401.767905][ T6208] name failslab, interval 1, probability 0, space 0, times 0 [ 401.767941][ T6208] CPU: 1 UID: 0 PID: 6208 Comm: syz.1.64 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 401.767965][ T6208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 401.767978][ T6208] Call Trace: [ 401.767986][ T6208] [ 401.767996][ T6208] dump_stack_lvl+0x189/0x250 [ 401.768033][ T6208] ? __pfx____ratelimit+0x10/0x10 [ 401.768059][ T6208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.768091][ T6208] ? __pfx__printk+0x10/0x10 [ 401.768122][ T6208] ? __pfx___might_resched+0x10/0x10 [ 401.768149][ T6208] ? fs_reclaim_acquire+0x7d/0x100 [ 401.768197][ T6208] should_fail_ex+0x46c/0x600 [ 401.768228][ T6208] ? __alloc_skb+0x112/0x2d0 [ 401.768254][ T6208] should_failslab+0xa8/0x100 [ 401.768286][ T6208] ? __alloc_skb+0x112/0x2d0 [ 401.768307][ T6208] kmem_cache_alloc_node_noprof+0x78/0x6e0 [ 401.768337][ T6208] ? netlink_autobind+0xdb/0x300 [ 401.768369][ T6208] __alloc_skb+0x112/0x2d0 [ 401.768397][ T6208] netlink_sendmsg+0x5c6/0xb30 [ 401.768432][ T6208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.768466][ T6208] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 401.768496][ T6208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.768523][ T6208] __sock_sendmsg+0x219/0x270 [ 401.768546][ T6208] __sys_sendto+0x3c7/0x520 [ 401.768575][ T6208] ? __pfx___sys_sendto+0x10/0x10 [ 401.768627][ T6208] ? ksys_write+0x230/0x260 [ 401.768657][ T6208] ? __pfx_ksys_write+0x10/0x10 [ 401.768680][ T6208] ? rcu_is_watching+0x15/0xb0 [ 401.768704][ T6208] __x64_sys_sendto+0xde/0x100 [ 401.768731][ T6208] do_syscall_64+0xfa/0x3b0 [ 401.768757][ T6208] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.768781][ T6208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.768803][ T6208] ? clear_bhb_loop+0x60/0xb0 [ 401.768828][ T6208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.768848][ T6208] RIP: 0033:0x7fa20a58eec9 [ 401.768867][ T6208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.768884][ T6208] RSP: 002b:00007fa2087f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 401.768907][ T6208] RAX: ffffffffffffffda RBX: 00007fa20a7e5fa0 RCX: 00007fa20a58eec9 [ 401.768922][ T6208] RDX: 000000000000004c RSI: 0000200000000080 RDI: 0000000000000004 [ 401.768935][ T6208] RBP: 00007fa2087f6090 R08: 0000000000000000 R09: 0000000000000000 [ 401.768948][ T6208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.768960][ T6208] R13: 00007fa20a7e6038 R14: 00007fa20a7e5fa0 R15: 00007ffe0d912708 [ 401.768993][ T6208] [ 402.064080][ T992] usb 1-1: USB disconnect, device number 4 [ 402.404759][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 402.992640][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 402.995215][ T9] usb 2-1: config 1 has an invalid descriptor of length 54, skipping remainder of the config [ 402.995243][ T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 402.995265][ T9] usb 2-1: config 1 has no interface number 1 [ 402.995364][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 402.995409][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 56, changing to 4 [ 402.995436][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 12624, setting to 1023 [ 403.150163][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 403.150194][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.150215][ T9] usb 2-1: Product: 砙訖Ꞌ셒睤◖㹲 [ 403.150231][ T9] usb 2-1: Manufacturer: В [ 403.150246][ T9] usb 2-1: SerialNumber: ⠉ [ 403.265848][ T6219] netlink: 120 bytes leftover after parsing attributes in process `syz.3.69'. [ 403.265880][ T6219] block nbd0: not configured, cannot reconfigure [ 403.266075][ T6219] netlink: 120 bytes leftover after parsing attributes in process `syz.3.69'. [ 403.266096][ T6219] block nbd0: not configured, cannot reconfigure [ 403.266247][ T6219] netlink: 120 bytes leftover after parsing attributes in process `syz.3.69'. [ 403.266267][ T6219] block nbd0: not configured, cannot reconfigure [ 403.266422][ T6219] netlink: 120 bytes leftover after parsing attributes in process `syz.3.69'. [ 403.266441][ T6219] block nbd0: not configured, cannot reconfigure [ 403.266591][ T6219] netlink: 120 bytes leftover after parsing attributes in process `syz.3.69'. [ 403.266609][ T6219] block nbd0: not configured, cannot reconfigure [ 403.266755][ T6219] netlink: 120 bytes leftover after parsing attributes in process `syz.3.69'. [ 403.266775][ T6219] block nbd0: not configured, cannot reconfigure [ 403.266939][ T6219] netlink: 120 bytes leftover after parsing attributes in process `syz.3.69'. [ 403.266960][ T6219] block nbd0: not configured, cannot reconfigure [ 403.267115][ T6219] netlink: 120 bytes leftover after parsing attributes in process `syz.3.69'. [ 403.267136][ T6219] block nbd0: not configured, cannot reconfigure [ 403.267323][ T6219] netlink: 120 bytes leftover after parsing attributes in process `syz.3.69'. [ 403.267358][ T6219] block nbd0: not configured, cannot reconfigure [ 403.267536][ T6219] netlink: 120 bytes leftover after parsing attributes in process `syz.3.69'. [ 403.267556][ T6219] block nbd0: not configured, cannot reconfigure [ 403.267721][ T6219] block nbd0: not configured, cannot reconfigure [ 403.267887][ T6219] block nbd0: not configured, cannot reconfigure [ 403.268051][ T6219] block nbd0: not configured, cannot reconfigure [ 403.268238][ T6219] block nbd0: not configured, cannot reconfigure [ 403.268407][ T6219] block nbd0: not configured, cannot reconfigure [ 403.268593][ T6219] block nbd0: not configured, cannot reconfigure [ 403.268758][ T6219] block nbd0: not configured, cannot reconfigure [ 403.268921][ T6219] block nbd0: not configured, cannot reconfigure [ 403.269085][ T6219] block nbd0: not configured, cannot reconfigure [ 403.269252][ T6219] block nbd0: not configured, cannot reconfigure [ 403.269426][ T6219] block nbd0: not configured, cannot reconfigure [ 403.269596][ T6219] block nbd0: not configured, cannot reconfigure [ 403.269755][ T6219] block nbd0: not configured, cannot reconfigure [ 403.269927][ T6219] block nbd0: not configured, cannot reconfigure [ 403.270083][ T6219] block nbd0: not configured, cannot reconfigure [ 403.270298][ T6219] block nbd0: not configured, cannot reconfigure [ 403.270471][ T6219] block nbd0: not configured, cannot reconfigure [ 403.270639][ T6219] block nbd0: not configured, cannot reconfigure [ 403.270802][ T6219] block nbd0: not configured, cannot reconfigure [ 403.271003][ T6219] block nbd0: not configured, cannot reconfigure [ 403.271166][ T6219] block nbd0: not configured, cannot reconfigure [ 403.271358][ T6219] block nbd0: not configured, cannot reconfigure [ 403.271522][ T6219] block nbd0: not configured, cannot reconfigure [ 403.271685][ T6219] block nbd0: not configured, cannot reconfigure [ 403.271848][ T6219] block nbd0: not configured, cannot reconfigure [ 403.272011][ T6219] block nbd0: not configured, cannot reconfigure [ 403.272174][ T6219] block nbd0: not configured, cannot reconfigure [ 403.272376][ T6219] block nbd0: not configured, cannot reconfigure [ 403.272542][ T6219] block nbd0: not configured, cannot reconfigure [ 403.272737][ T6219] block nbd0: not configured, cannot reconfigure [ 403.272901][ T6219] block nbd0: not configured, cannot reconfigure [ 403.273064][ T6219] block nbd0: not configured, cannot reconfigure [ 403.273226][ T6219] block nbd0: not configured, cannot reconfigure [ 403.273422][ T6219] block nbd0: not configured, cannot reconfigure [ 403.273586][ T6219] block nbd0: not configured, cannot reconfigure [ 403.342302][ T6219] block nbd0: not configured, cannot reconfigure [ 403.342508][ T6219] block nbd0: not configured, cannot reconfigure [ 403.342698][ T6219] block nbd0: not configured, cannot reconfigure [ 403.342922][ T6219] block nbd0: not configured, cannot reconfigure [ 403.343107][ T6219] block nbd0: not configured, cannot reconfigure [ 403.343280][ T6219] block nbd0: not configured, cannot reconfigure [ 403.343491][ T6219] block nbd0: not configured, cannot reconfigure [ 403.343853][ T6219] block nbd0: not configured, cannot reconfigure [ 403.347594][ T6219] block nbd0: not configured, cannot reconfigure [ 403.347799][ T6219] block nbd0: not configured, cannot reconfigure [ 403.347992][ T6219] block nbd0: not configured, cannot reconfigure [ 403.348175][ T6219] block nbd0: not configured, cannot reconfigure [ 403.348356][ T6219] block nbd0: not configured, cannot reconfigure [ 403.348531][ T6219] block nbd0: not configured, cannot reconfigure [ 403.348706][ T6219] block nbd0: not configured, cannot reconfigure [ 403.348879][ T6219] block nbd0: not configured, cannot reconfigure [ 403.349053][ T6219] block nbd0: not configured, cannot reconfigure [ 403.349238][ T6219] block nbd0: not configured, cannot reconfigure [ 403.349410][ T6219] block nbd0: not configured, cannot reconfigure [ 403.349582][ T6219] block nbd0: not configured, cannot reconfigure [ 405.637651][ T9] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 405.934370][ T9] usb 2-1: USB disconnect, device number 2 [ 406.996947][ T6253] FAULT_INJECTION: forcing a failure. [ 406.996947][ T6253] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.996983][ T6253] CPU: 0 UID: 0 PID: 6253 Comm: syz.0.78 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 406.997007][ T6253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 406.997020][ T6253] Call Trace: [ 406.997028][ T6253] [ 406.997037][ T6253] dump_stack_lvl+0x189/0x250 [ 406.997074][ T6253] ? __pfx____ratelimit+0x10/0x10 [ 406.997100][ T6253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.997131][ T6253] ? __pfx__printk+0x10/0x10 [ 406.997172][ T6253] should_fail_ex+0x46c/0x600 [ 406.997205][ T6253] _copy_to_user+0x31/0xb0 [ 406.997227][ T6253] simple_read_from_buffer+0xe1/0x170 [ 406.997263][ T6253] proc_fail_nth_read+0x1b6/0x220 [ 406.997290][ T6253] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 406.997316][ T6253] ? rw_verify_area+0x2ac/0x4e0 [ 406.997342][ T6253] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 406.997368][ T6253] vfs_read+0x203/0xa30 [ 406.997403][ T6253] ? __pfx_vfs_read+0x10/0x10 [ 406.997425][ T6253] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 406.997468][ T6253] ? mutex_lock_nested+0x154/0x1d0 [ 406.997498][ T6253] ? fdget_pos+0x253/0x320 [ 406.997538][ T6253] ksys_read+0x14b/0x260 [ 406.997563][ T6253] ? __se_sys_quotactl_fd+0x3c5/0x410 [ 406.997594][ T6253] ? __pfx_ksys_read+0x10/0x10 [ 406.997625][ T6253] ? do_syscall_64+0xbe/0x3b0 [ 406.997654][ T6253] do_syscall_64+0xfa/0x3b0 [ 406.997678][ T6253] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.997701][ T6253] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.997744][ T6253] ? clear_bhb_loop+0x60/0xb0 [ 406.997768][ T6253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.997813][ T6253] RIP: 0033:0x7fb1170fd8dc [ 406.997831][ T6253] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 406.997848][ T6253] RSP: 002b:00007fb115366030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 406.997869][ T6253] RAX: ffffffffffffffda RBX: 00007fb117355fa0 RCX: 00007fb1170fd8dc [ 406.997884][ T6253] RDX: 000000000000000f RSI: 00007fb1153660a0 RDI: 0000000000000004 [ 406.997897][ T6253] RBP: 00007fb115366090 R08: 0000000000000000 R09: 0000000000000000 [ 406.997909][ T6253] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 406.997922][ T6253] R13: 00007fb117356038 R14: 00007fb117355fa0 R15: 00007fffed8b7d68 [ 406.997954][ T6253] [ 407.446214][ T6037] udevd[6037]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 408.953957][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 409.105254][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 409.107942][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 409.107974][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 409.107995][ T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 409.108019][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 409.108041][ T31] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 409.108079][ T31] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 409.108102][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.454395][ T31] usb 5-1: config 0 descriptor?? [ 409.683459][ T6276] __nla_validate_parse: 55 callbacks suppressed [ 409.683509][ T6276] netlink: 12 bytes leftover after parsing attributes in process `syz.2.84'. [ 410.282856][ T5130] Bluetooth: hci5: urb ffff888027c49b00 submission failed (90) [ 410.302121][ T6265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.303177][ T6265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.820834][ T6284] Zero length message leads to an empty skb [ 414.067297][ T6050] usb 5-1: USB disconnect, device number 2 [ 415.904193][ T6318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.96'. [ 416.973847][ T6050] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 417.217283][ T31] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 417.314238][ T6050] usb 3-1: Using ep0 maxpacket: 16 [ 417.392017][ T6333] netlink: 12 bytes leftover after parsing attributes in process `syz.4.99'. [ 417.880886][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.880948][ T31] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 417.880974][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.043790][ T6018] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 418.173806][ T6018] usb 4-1: device descriptor read/64, error -71 [ 418.221839][ T6050] usb 3-1: unable to get BOS descriptor or descriptor too short [ 418.221938][ T6050] usb 3-1: no configurations [ 418.221951][ T6050] usb 3-1: can't read configurations, error -22 [ 418.243784][ T31] usb 1-1: config 0 descriptor?? [ 418.262106][ T31] pwc: Askey VC010 type 2 USB webcam detected. [ 418.415569][ T6018] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 418.602243][ T6018] usb 4-1: device descriptor read/64, error -71 [ 418.748503][ T6018] usb usb4-port1: attempt power cycle [ 418.972279][ T31] pwc: recv_control_msg error -32 req 02 val 2b00 [ 419.155240][ T31] pwc: recv_control_msg error -32 req 02 val 2700 [ 419.182275][ T31] pwc: recv_control_msg error -32 req 02 val 2c00 [ 419.191091][ T31] pwc: recv_control_msg error -32 req 04 val 1000 [ 419.191826][ T31] pwc: recv_control_msg error -32 req 04 val 1300 [ 419.203830][ T6018] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 419.210132][ T31] pwc: recv_control_msg error -32 req 04 val 1400 [ 419.221940][ T31] pwc: recv_control_msg error -32 req 02 val 2000 [ 419.224502][ T6018] usb 4-1: device descriptor read/8, error -71 [ 419.347641][ T31] pwc: recv_control_msg error -71 req 02 val 2100 [ 419.348132][ T31] pwc: recv_control_msg error -71 req 04 val 1500 [ 419.348510][ T31] pwc: recv_control_msg error -71 req 02 val 2500 [ 419.348884][ T31] pwc: recv_control_msg error -71 req 02 val 2400 [ 419.349319][ T31] pwc: recv_control_msg error -71 req 02 val 2600 [ 419.349756][ T31] pwc: recv_control_msg error -71 req 02 val 2900 [ 419.351806][ T31] pwc: recv_control_msg error -71 req 02 val 2800 [ 419.353881][ T31] pwc: recv_control_msg error -71 req 04 val 1100 [ 419.354421][ T31] pwc: recv_control_msg error -71 req 04 val 1200 [ 419.425444][ T31] pwc: Registered as video103. [ 419.440597][ T31] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 419.473903][ T6018] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 419.474065][ T992] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 419.494467][ T6018] usb 4-1: device descriptor read/8, error -71 [ 419.623735][ T992] usb 5-1: Using ep0 maxpacket: 8 [ 419.626707][ T992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 419.626751][ T992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 419.626775][ T992] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 419.626799][ T992] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 419.626822][ T992] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 419.626863][ T992] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 419.626887][ T992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.815159][ T992] usb 5-1: config 0 descriptor?? [ 419.866066][ T31] usb 1-1: USB disconnect, device number 5 [ 419.884527][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.899205][ T6018] usb usb4-port1: unable to enumerate USB device [ 421.402304][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.505329][ T5130] Bluetooth: hci5: urb ffff88802681c500 submission failed (90) [ 421.526444][ T992] usb 5-1: USB disconnect, device number 3 [ 422.046833][ C0] vkms_vblank_simulate: vblank timer overrun [ 422.402882][ C0] vkms_vblank_simulate: vblank timer overrun [ 422.544193][ C0] vkms_vblank_simulate: vblank timer overrun [ 422.841829][ C0] vkms_vblank_simulate: vblank timer overrun [ 422.903853][ T31] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 422.904136][ C1] raw-gadget.1 gadget.0: ignoring, device is not running [ 422.923945][ T992] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 423.035399][ T31] usb 1-1: device descriptor read/64, error -32 [ 423.089396][ T992] usb 5-1: Using ep0 maxpacket: 16 [ 423.239439][ T992] usb 5-1: unable to get BOS descriptor or descriptor too short [ 423.239533][ T992] usb 5-1: no configurations [ 423.239546][ T992] usb 5-1: can't read configurations, error -22 [ 423.334117][ T31] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 423.513898][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 423.520735][ T31] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 423.520771][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 423.520993][ T6389] vivid-003: disconnect [ 423.529211][ T31] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 423.529242][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.529263][ T31] usb 1-1: Product: syz [ 423.529279][ T31] usb 1-1: Manufacturer: syz [ 423.529294][ T31] usb 1-1: SerialNumber: syz [ 423.535188][ T31] usb 1-1: config 0 descriptor?? [ 423.616964][ T31] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 423.617010][ T31] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 423.865281][ T6387] vivid-003: reconnect [ 424.158152][ T31] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 424.159711][ T31] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 424.184192][ T992] ================================================================== [ 424.184209][ T992] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 424.184244][ T992] Read of size 8 at addr ffffc9000e0cb008 by task kworker/0:2/992 [ 424.184261][ T992] [ 424.184273][ T992] CPU: 0 UID: 0 PID: 992 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 424.184296][ T992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 424.184311][ T992] Workqueue: usb_hub_wq hub_event [ 424.184337][ T992] Call Trace: [ 424.184354][ T992] [ 424.184364][ T992] dump_stack_lvl+0x189/0x250 [ 424.184400][ T992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.184432][ T992] ? __pfx__printk+0x10/0x10 [ 424.184456][ T992] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 424.184484][ T992] ? __virt_addr_valid+0xdc/0x5c0 [ 424.184507][ T992] ? __virt_addr_valid+0xdc/0x5c0 [ 424.184530][ T992] print_report+0xca/0x240 [ 424.184558][ T992] ? __list_add_valid_or_report+0x4e/0x130 [ 424.184581][ T992] kasan_report+0x118/0x150 [ 424.184614][ T992] ? __list_add_valid_or_report+0x4e/0x130 [ 424.184640][ T992] __list_add_valid_or_report+0x4e/0x130 [ 424.184665][ T992] kcov_remote_stop+0x52d/0x660 [ 424.184700][ T992] hub_event+0x45d2/0x4a20 [ 424.184738][ T992] ? do_raw_spin_lock+0x121/0x290 [ 424.184769][ T992] ? register_lock_class+0x51/0x320 [ 424.184810][ T992] ? __pfx_hub_event+0x10/0x10 [ 424.184834][ T992] ? process_scheduled_works+0x9ef/0x17b0 [ 424.184868][ T992] ? _raw_spin_unlock_irq+0x23/0x50 [ 424.184892][ T992] ? process_scheduled_works+0x9ef/0x17b0 [ 424.184920][ T992] ? process_scheduled_works+0x9ef/0x17b0 [ 424.184949][ T992] process_scheduled_works+0xae1/0x17b0 [ 424.184992][ T992] ? __pfx_process_scheduled_works+0x10/0x10 [ 424.185030][ T992] worker_thread+0x8a0/0xda0 [ 424.185062][ T992] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 424.185091][ T992] ? __kthread_parkme+0x7b/0x200 [ 424.185125][ T992] kthread+0x711/0x8a0 [ 424.185147][ T992] ? __pfx_worker_thread+0x10/0x10 [ 424.185177][ T992] ? __pfx_kthread+0x10/0x10 [ 424.185196][ T992] ? rt_spin_unlock+0x150/0x200 [ 424.185217][ T992] ? rt_spin_unlock+0x161/0x200 [ 424.185235][ T992] ? __pfx_kthread+0x10/0x10 [ 424.185255][ T992] ret_from_fork+0x436/0x7d0 [ 424.185283][ T992] ? __pfx_ret_from_fork+0x10/0x10 [ 424.185313][ T992] ? __switch_to_asm+0x39/0x70 [ 424.185334][ T992] ? __switch_to_asm+0x33/0x70 [ 424.185360][ T992] ? __pfx_kthread+0x10/0x10 [ 424.185381][ T992] ret_from_fork_asm+0x1a/0x30 [ 424.185410][ T992] [ 424.185418][ T992] [ 424.185423][ T992] The buggy address belongs to a vmalloc virtual mapping [ 424.185442][ T992] Memory state around the buggy address: [ 424.185454][ T992] ffffc9000e0caf00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 424.185468][ T992] ffffc9000e0caf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 424.185483][ T992] >ffffc9000e0cb000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 424.185494][ T992] ^ [ 424.185506][ T992] ffffc9000e0cb080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 424.185520][ T992] ffffc9000e0cb100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 424.185531][ T992] ================================================================== [ 424.185563][ T992] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 424.185578][ T992] CPU: 0 UID: 0 PID: 992 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 424.185601][ T992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 424.185614][ T992] Workqueue: usb_hub_wq hub_event [ 424.185638][ T992] Call Trace: [ 424.185646][ T992] [ 424.185654][ T992] dump_stack_lvl+0x99/0x250 [ 424.185687][ T992] ? __asan_memcpy+0x40/0x70 [ 424.185716][ T992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.185747][ T992] ? __pfx__printk+0x10/0x10 [ 424.185781][ T992] vpanic+0x237/0x6d0 [ 424.185801][ T992] ? __pfx_vpanic+0x10/0x10 [ 424.185825][ T992] panic+0xb9/0xc0 [ 424.185843][ T992] ? __pfx_panic+0x10/0x10 [ 424.185861][ T992] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 424.185886][ T992] ? lockdep_hardirqs_on+0x9c/0x150 [ 424.185917][ T992] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 424.185944][ T992] ? __list_add_valid_or_report+0x4e/0x130 [ 424.185967][ T992] check_panic_on_warn+0x89/0xb0 [ 424.185990][ T992] ? __list_add_valid_or_report+0x4e/0x130 [ 424.186013][ T992] end_report+0x78/0x160 [ 424.186043][ T992] kasan_report+0x129/0x150 [ 424.186079][ T992] ? __list_add_valid_or_report+0x4e/0x130 [ 424.186107][ T992] __list_add_valid_or_report+0x4e/0x130 [ 424.186132][ T992] kcov_remote_stop+0x52d/0x660 [ 424.186167][ T992] hub_event+0x45d2/0x4a20 [ 424.186205][ T992] ? do_raw_spin_lock+0x121/0x290 [ 424.186233][ T992] ? register_lock_class+0x51/0x320 [ 424.186276][ T992] ? __pfx_hub_event+0x10/0x10 [ 424.186300][ T992] ? process_scheduled_works+0x9ef/0x17b0 [ 424.186333][ T992] ? _raw_spin_unlock_irq+0x23/0x50 [ 424.186364][ T992] ? process_scheduled_works+0x9ef/0x17b0 [ 424.186393][ T992] ? process_scheduled_works+0x9ef/0x17b0 [ 424.186427][ T992] process_scheduled_works+0xae1/0x17b0 [ 424.186471][ T992] ? __pfx_process_scheduled_works+0x10/0x10 [ 424.186508][ T992] worker_thread+0x8a0/0xda0 [ 424.186547][ T992] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 424.186581][ T992] ? __kthread_parkme+0x7b/0x200 [ 424.186617][ T992] kthread+0x711/0x8a0 [ 424.186639][ T992] ? __pfx_worker_thread+0x10/0x10 [ 424.186669][ T992] ? __pfx_kthread+0x10/0x10 [ 424.186688][ T992] ? rt_spin_unlock+0x150/0x200 [ 424.186709][ T992] ? rt_spin_unlock+0x161/0x200 [ 424.186732][ T992] ? __pfx_kthread+0x10/0x10 [ 424.186753][ T992] ret_from_fork+0x436/0x7d0 [ 424.186783][ T992] ? __pfx_ret_from_fork+0x10/0x10 [ 424.186814][ T992] ? __switch_to_asm+0x39/0x70 [ 424.186834][ T992] ? __switch_to_asm+0x33/0x70 [ 424.186854][ T992] ? __pfx_kthread+0x10/0x10 [ 424.186878][ T992] ret_from_fork_asm+0x1a/0x30 [ 424.186906][ T992] [ 424.187232][ T992] Kernel Offset: disabled