last executing test programs: 1m57.728020231s ago: executing program 32 (id=26): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) unshare(0x400) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x300) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x1, 0x0, 0x7, &(0x7f0000000140)={0xc, "b7fc741714bd8325de9540e3cfc840d0b9358338de5fdb7ad189aa80277f6cd2e2"}}) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000240)=0x200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x40000) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_EXPIRATION={0xc}]}]}]}], {0x14, 0x10}}, 0xc4}}, 0x0) setsockopt(r7, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000013000100000000000000000007000000", @ANYRES32=r5], 0x30}, 0x1, 0x0, 0x0, 0x890}, 0x0) 1m52.212293616s ago: executing program 33 (id=45): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$ppp(0xffffffffffffff9c, 0x0, 0x26080, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x101) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r3 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000c40)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002cbd7000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="20003300d0000000080a00000000000000000000505050505050000008000500"], 0x3c}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='3', 0x0) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) semget$private(0x0, 0x5, 0x208) r8 = socket(0x840000000002, 0x3, 0xff) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000b00)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a4, 0x274, 0x350, 0x0, 0x350, 0x350, 0x410, 0x410, 0x410, 0x410, 0x410, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'wg0\x00', 'ip6gre0\x00'}, 0x5e02, 0xd4, 0xf8, 0x0, {0xa803, 0xd003000000000000}, [@common=@unspec=@physdev={{0x64}, {'bond_slave_1\x00', {0xff}, 'nicvf0\x00', {}, 0x11, 0x4}}]}, @common=@unspec=@CONNSECMARK={0x24}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3a}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan1\x00', 'wg1\x00'}, 0x0, 0x94, 0xc4, 0x0, {0x0, 0x6000}, [@inet=@rpfilter={{0x24}, {0x4}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @broadcast}}}, {{@uncond, 0x0, 0x94, 0xb8, 0x0, {}, [@common=@ttl={{0x24}}]}, @ECN={0x24, 'ECN\x00', 0x0, {0x0, 0x0, 0x3}}}, {{@ip={@rand_addr, @loopback, 0x0, 0x0, 'veth0_macvtap\x00', 'bond0\x00', {0xff}, {}, 0x88}, 0x0, 0xb8, 0xdc, 0x0, {}, [@inet=@rpfilter={{0x24}}, @common=@ttl={{0x24}}]}, @ECN={0x24}}, {{@uncond, 0x0, 0x9c, 0xc0, 0x0, {}, [@common=@ah={{0x2c}}]}, @common=@unspec=@NFQUEUE1={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x500) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000040)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000140)=[{0x0, 0x0, 0x1}, {0xffff}], 0x2, 0x0, 0x4, 0x0, 0x1b, 0x5c}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000100)="259374c96ee3", 0x0, 0xad, 0xb12531df61d0214, 0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000980)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000002780)) 1m51.12431884s ago: executing program 34 (id=52): syz_create_resource$binfmt(0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r0, 0x560b, 0x7ffffffffffffffc) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, 0x0, 0x0, 0x0, 0x0) unshare(0x8040080) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'macvtap0\x00'}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7391}, 0x1c) syz_emit_ethernet(0x4e, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) io_setup(0x20, &(0x7f0000001140)) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r3 = gettid() futex(&(0x7f000000cffc)=0x1, 0x80000000000d, 0x0, 0x0, 0x0, 0x0) socketpair(0x2, 0x80000, 0x100, &(0x7f0000000b40)) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) setpriority(0x1, 0x1, 0x3ff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) msgget$private(0x0, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 1m28.403770243s ago: executing program 35 (id=143): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000002080)=0x3a, 0x23b) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x19, 0x0, 0x50000000, 0x0, 0x10900, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1, 0x0, @void, @value, @value}, 0x50) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) syz_emit_ethernet(0x47, &(0x7f0000000d40)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x11, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x11, 0x0, @gue={{0x2}, 'J'}}}}}}}, 0x0) (fail_nth: 2) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1m3.527926516s ago: executing program 36 (id=275): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000012c0)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="0084010000003b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0xc, &(0x7f0000000040)={0x40, 0x31, 0xc8, {0xc8, 0x4, "db0fa9272b55b2939eae9c8c70504242169cc49ee9555d98b6467953a9497da32d0b93829a7ebd54d3126ddf24535e55e07ffb586a22107f07c29d1bfe453a7be42830ebfce6341ce6ba555b655ef707bc46f1b14515336dd90c13977f9b39954666f2b48557d3efde85383dea7b932601e8ca4ad30eed2e9f59f04f8b44d4184c95e84dbc8c7c8731d04e2d463c8afeac674fa4791f11ae5c335e9210b7d021b04970b01c2841c12b2065d8b65c1d2596c8269918b408fe5e2291416a32fe5ddb759830fe98"}}, &(0x7f0000000140)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000003c0)={0x24, &(0x7f00000001c0)={0x0, 0x3, 0x34, "c07c474f9689cfbc3907676982c6602a5566fa64e30bdd1e331576fb181b6c447490be4424a3dc5772d30cea8a330a3052fbc7f0"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000240)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0x4, 0x0, 0x7, 0xa44, 0x0, 0x31, 0xf, 0x1, 0x3ff, 0x1, 0x7, 0x2}}, &(0x7f00000002c0)={0x20, 0x85, 0x4, 0x5}, &(0x7f0000000300)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000340)={0x20, 0x87, 0x2, 0x6}, &(0x7f0000000380)={0x20, 0x89, 0x2}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1m2.010013024s ago: executing program 7 (id=283): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000940)=[{&(0x7f0000000cc0)="13", 0x1}], 0x1, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000400)={0x10}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @dev}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000180)) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x48, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x48}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000200)={'gretap0\x00', 0x0, 0x8000, 0x80, 0x3, 0x4, {{0x22, 0x4, 0x1, 0x1, 0x88, 0x67, 0x0, 0x6, 0x4, 0x0, @multicast2, @remote, {[@generic={0x83, 0xa, "5d71a91f95894b0a"}, @cipso={0x86, 0x69, 0x3, [{0x7, 0xc, "c6248e798ed8bf58d784"}, {0x2, 0xf, "3c7d0724068dbc925d15939a1c"}, {0x6, 0x11, "6c829d84d6d0b70d102416e9c87c34"}, {0x1, 0x10, "5ad4f0634ef0487a8dc8ad2ff86b"}, {0x2, 0x2}, {0x0, 0x5, "d7a560"}, {0x6, 0x8, "136afda8f3a8"}, {0x2, 0xf, "57103da03505cea1579f54cd3e"}, {0x6, 0x9, "9cb9ff16c686aa"}]}, @noop]}}}}}) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x64, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20048001) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) 1m1.642049898s ago: executing program 7 (id=285): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_dccp(0xa, 0x6, 0x0) openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) modify_ldt$write2(0x11, &(0x7f0000000080)={0x2, 0xffffffffffffffff, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$getregset(0x4205, r3, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x8, 0x0, 0x3, 0x0, 0x0, 0xeffffffffffffffd, 0x0, 0xe7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4, 0x1000}) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="043e0d05c9000000562f455c5e71f40000000000000000"], 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) unshare(0x2060000) pwritev2(r4, &(0x7f0000001180)=[{&(0x7f0000000040)='5j', 0x2}, {0x0}], 0x2, 0x7, 0x401, 0x0) 1m1.555339609s ago: executing program 37 (id=285): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_dccp(0xa, 0x6, 0x0) openat$vsock(0xffffff9c, &(0x7f00000001c0), 0x40101, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) modify_ldt$write2(0x11, &(0x7f0000000080)={0x2, 0xffffffffffffffff, 0x1000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$getregset(0x4205, r3, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x8, 0x0, 0x3, 0x0, 0x0, 0xeffffffffffffffd, 0x0, 0xe7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff], 0x4, 0x1000}) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="043e0d05c9000000562f455c5e71f40000000000000000"], 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) unshare(0x2060000) pwritev2(r4, &(0x7f0000001180)=[{&(0x7f0000000040)='5j', 0x2}, {0x0}], 0x2, 0x7, 0x401, 0x0) 58.874404628s ago: executing program 6 (id=292): creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10408}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) dup2(r1, r0) fdatasync(r1) 57.961717828s ago: executing program 6 (id=298): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000009000"/16], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000140)={'virt_wifi0\x00', 0x1}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="0c009900050000006a00000008002600b409000008009f00050000000800a0006e090000"], 0x40}, 0x1, 0x0, 0x0, 0x48004}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) 57.622959357s ago: executing program 6 (id=300): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x14, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYBLOB="1b749f70dd122f58925c1504c0d48c2d3003cc06bfb054af0aa1665e85c30d9de564d51862d4bc84f2e9d204c84ba73dfd30a1c9e7740877e0029113da0747d56d72f6351f0c67def497acbccd539ac958adae60f08b72eb0d83f51fcadbdbe58d92b2e7a39b4240282485078b629de5246596288d057d450340dd3bcccf77fbaf55708dc2e0647d5c497f6f75a96347a8072eb4c6e593e67da27cde253f77ec8fc5ff6b8258e8feb631be52ec2b", @ANYRES16=r0, @ANYRES8=r0, @ANYRESOCT=r0], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x101, 0x400102) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x1, 0x84, 0x1e}, {0x80000006, 0x1, 0x0, 0xf}]}, 0x8) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000000c0)="1b000000", 0x4) ioctl$HIDIOCSREPORT(r1, 0x81044804, 0x0) 57.269142532s ago: executing program 38 (id=300): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x14, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYBLOB="1b749f70dd122f58925c1504c0d48c2d3003cc06bfb054af0aa1665e85c30d9de564d51862d4bc84f2e9d204c84ba73dfd30a1c9e7740877e0029113da0747d56d72f6351f0c67def497acbccd539ac958adae60f08b72eb0d83f51fcadbdbe58d92b2e7a39b4240282485078b629de5246596288d057d450340dd3bcccf77fbaf55708dc2e0647d5c497f6f75a96347a8072eb4c6e593e67da27cde253f77ec8fc5ff6b8258e8feb631be52ec2b", @ANYRES16=r0, @ANYRES8=r0, @ANYRESOCT=r0], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x101, 0x400102) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x1, 0x84, 0x1e}, {0x80000006, 0x1, 0x0, 0xf}]}, 0x8) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000000c0)="1b000000", 0x4) ioctl$HIDIOCSREPORT(r1, 0x81044804, 0x0) 54.323637482s ago: executing program 2 (id=308): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)={0x5, 0x0, [{0x80000000, 0xfffffffe, 0x1, 0x1, 0x8e4d}, {0xa, 0xfea4, 0x80000001, 0x1, 0x3ff}, {0x40000001, 0x3, 0x3, 0x7, 0x2}, {0x80000007, 0x4, 0xb, 0x2, 0x8}, {0x80000008, 0xfff, 0x6, 0x2, 0x7fffffff}]}) 53.798499813s ago: executing program 2 (id=309): r0 = openat$rtc(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x3b00, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4004700c, 0x5) getpid() r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x5, 0x8, 0x7, 0x4}) sendmsg$nl_xfrm(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="38010000170001000000000000000000fe8000000000000000000000000000aa0000000000000000e0000002000000000000000000000000ff020000000000000000000000000001fc0200"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000000000001ac1414bb00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000043c3674bd4d73200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b1d1390960e043570000000000000000000000000000000000000000fbff1e00000000000c001c0000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x138}}, 0x0) openat$userio(0xffffff9c, &(0x7f0000000040), 0x8000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000002c0)="c8", 0x1, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private0}, 0x1c) listen(r2, 0x8001) accept4$inet6(r2, 0x0, 0x0, 0x0) 53.456852525s ago: executing program 2 (id=310): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010ac05418200000000000109022400010000e5000904002a066b4fdb00010300000009210000000122000000008103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x18, &(0x7f0000000200)=ANY=[@ANYRESHEX=r0, @ANYRES8=r1, @ANYRES16=r1, @ANYBLOB="8304624b55fcf6b62078ae40202d0b97f2b71fc1661f9488183ce4a164e85d21d0b2abbb8b09321734bad63561e5db76310a219d6c91222ddfd6a57766652f159f75859e0b5c5a63e0fba4810474e1a5c9cb1db8a6dce94de5c79ea4be9563e5d37fe319b897ba9c06ba16c7ea8403226aa4f3116931b2987be13a672985c674197010e08314aa8d80b1e54ca5b10c75e03d5c8e3957982a19187a361400b0508b74715ba5f76f76058ecfc300000000000000000000f60f000000", @ANYRES8=0x0, @ANYRES32=r0, @ANYRESOCT=0x0, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0xd01c4813, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000000)={0x20, 0xa, 0x5, "8e73c802f7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="000000020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, &(0x7f0000001c00)={0x0, 0x0, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001300)={0x34, &(0x7f0000001080), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 49.650810515s ago: executing program 2 (id=314): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) read$FUSE(r2, &(0x7f000000b4c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r2, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x4, 0x1, 0x3, 0x52b, 0xa, 0xab6, {0x1, 0xafc, 0x8, 0x8000000000000000, 0x9, 0x7a97, 0x3, 0x3, 0xa0000000, 0x2000, 0x7f, 0xee00, r3, 0x4, 0x8}}}, 0x90) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x7ff}}]}}, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f00000020c0)={0x2020}, 0x2020) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4018641b, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil}) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr, 0x1}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="500000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="2088000040020000300012800b000100627269646765000020000280080015090000000005000700050000000a0014000180c2"], 0x50}}, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}}, 0x1c) setsockopt$sock_int(r5, 0x1, 0x2a, &(0x7f0000000000), 0x4) syz_emit_ethernet(0xbe, &(0x7f0000000100)={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x0, "d9587b6f229fd54fd8331e225f5421c23d710eab780bb8916ea853e07d7f64d2", "487fbcc007793601d105c58277df5191d066c4d90598a7606a57df19f7a05acec6fc1ab9a3d19e0464eada8f80ffcaab", "47510ac65297662270e0606a8444e26b8c4c3520ae502a5614aafc44", {"663938a4773cfc3a4b2a56e81d3ef6ab", "a23fc3a2f05e08e7ea8d5c22e5a6aae0"}}}}}}}, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r7 = socket$inet6(0xa, 0x1, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@remote, @in=@private=0xa010100, 0x0, 0x0, 0xfffc, 0x0, 0xa}, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x65a, 0x8002}, {}, 0x0, 0x0, 0x1}, {{@in=@broadcast, 0x20000000, 0x32}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x5, 0x0, 0xe40b}}, 0xe8) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x39}, 0x4}, 0x1c) 48.118582017s ago: executing program 2 (id=316): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)={0x5, 0x0, [{0x80000000, 0xfffffffe, 0x1, 0x1, 0x8e4d}, {0xa, 0xfea4, 0x80000001, 0x1, 0x3ff}, {0x40000001, 0x3, 0x3, 0x7, 0x2}, {0x80000007, 0x4, 0xb, 0x2, 0x8}, {0x80000008, 0xfff, 0x6, 0x2, 0x7fffffff}]}) 47.688413563s ago: executing program 2 (id=317): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000013000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000007c0c001a800800058004"], 0x2c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000001100010000000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001c00", @ANYRES32, @ANYBLOB="f08bba35caa2ae0e85418d2ee0e91d9399b653eb8e4e3c964547a9c2d7556170500c486f3d4eea548d82476ae40dc4fde2d240a8a0983c71f2751abe523579f17fe7cf49ff31080000000000000069f362071727c7b70342f943e42b02996d9d387c57cfa348a9971b8cf57b414c6dbf06228fa78326d1acddc34fe8b6d13aab9fb8246cee5c832b82a33a0dc0e4740a60d537d3f63bcc37df77fa8d982eb84136f2f9f86b7e150c824512100f31d1c133700fbab6c2c4de43fdb4fad704235b5bd5192b689e5d3089945af659fd39e5cc661c61c98aaf1379e855bb37a8634bb73ed2ceccc569d5f0cde62ba68610aefa1041c3d6cb14841658c86750ed9b4b992a37dcf94349100560f4a10adb4a05a77a9343cfd335ecdcf28681ac791180aa85c02e5089cd4f4df3d8728e92774cfc4979ace891710cf07a6523ae93243b857ba23efcb150845396aa3e6a2e7571388ea5d4b97c"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x48842) r4 = openat$ocfs2_control(0xffffff9c, &(0x7f00000012c0), 0x200000, 0x0) syz_open_dev$swradio(&(0x7f0000000100), 0x1, 0x2) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f00000000c0)={0xfd, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2000000000000023, &(0x7f0000001fd8)=ANY=[@ANYRES64=0x0], &(0x7f0000003ff6)='GPL\x00', 0x81, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) 47.556569801s ago: executing program 39 (id=317): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c00000013000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000007c0c001a800800058004"], 0x2c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="280000001100010000000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001c00", @ANYRES32, @ANYBLOB="f08bba35caa2ae0e85418d2ee0e91d9399b653eb8e4e3c964547a9c2d7556170500c486f3d4eea548d82476ae40dc4fde2d240a8a0983c71f2751abe523579f17fe7cf49ff31080000000000000069f362071727c7b70342f943e42b02996d9d387c57cfa348a9971b8cf57b414c6dbf06228fa78326d1acddc34fe8b6d13aab9fb8246cee5c832b82a33a0dc0e4740a60d537d3f63bcc37df77fa8d982eb84136f2f9f86b7e150c824512100f31d1c133700fbab6c2c4de43fdb4fad704235b5bd5192b689e5d3089945af659fd39e5cc661c61c98aaf1379e855bb37a8634bb73ed2ceccc569d5f0cde62ba68610aefa1041c3d6cb14841658c86750ed9b4b992a37dcf94349100560f4a10adb4a05a77a9343cfd335ecdcf28681ac791180aa85c02e5089cd4f4df3d8728e92774cfc4979ace891710cf07a6523ae93243b857ba23efcb150845396aa3e6a2e7571388ea5d4b97c"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x48842) r4 = openat$ocfs2_control(0xffffff9c, &(0x7f00000012c0), 0x200000, 0x0) syz_open_dev$swradio(&(0x7f0000000100), 0x1, 0x2) ioctl$PPPIOCSNPMODE(r4, 0x4008744b, &(0x7f00000000c0)={0xfd, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2000000000000023, &(0x7f0000001fd8)=ANY=[@ANYRES64=0x0], &(0x7f0000003ff6)='GPL\x00', 0x81, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) 46.976071078s ago: executing program 9 (id=320): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000540)=@userptr={0x0, 0xa, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "39b5a1a1"}, 0x0, 0x2, {0x0}}) (async, rerun: 32) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x34, 0x3b, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@typed={0xc, 0xc, 0x0, 0x0, @u64=0x7}]}]}, 0x34}}, 0xc000) (rerun: 32) 46.613488923s ago: executing program 9 (id=321): futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0xfffffffe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) shutdown(0xffffffffffffffff, 0x1) unshare(0x400) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mount_setattr(0xffffffffffffffff, 0x0, 0x900, &(0x7f00000001c0)={0x100005, 0x7a, 0x100000, {r0}}, 0x20) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0x4) futex(&(0x7f000000cffc), 0x5, 0x4, 0x0, &(0x7f0000000000), 0x4000000) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00'], 0x2a, 0x0) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$unlink(0x9, r1, r1) r2 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffc, 0x10941) io_setup(0xb, &(0x7f00000000c0)=0x0) io_getevents(r3, 0x3, 0x3, &(0x7f00000001c0)=[{}, {}, {}], &(0x7f0000000240)={0x77359400}) ioctl$F2FS_IOC_DECOMPRESS_FILE(r2, 0xf517, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000040)={0x1, 0x6576, 0x9}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10010, r2, 0xa4701000) 45.546711869s ago: executing program 9 (id=324): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)={0x5, 0x0, [{0x80000000, 0xfffffffe, 0x1, 0x1, 0x8e4d}, {0xa, 0xfea4, 0x80000001, 0x1, 0x3ff}, {0x40000001, 0x3, 0x3, 0x7, 0x2}, {0x80000007, 0x4, 0xb, 0x2, 0x8}, {0x80000008, 0xfff, 0x6, 0x2, 0x7fffffff}]}) 45.192631084s ago: executing program 9 (id=325): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2d41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x82) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x8000000, 0x60a}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x28, 0x0, 0x2000000000, {{0x7fffffff, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fcntl$lock(r2, 0x5, &(0x7f0000000200)) 41.779610232s ago: executing program 9 (id=330): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x202, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r0, 0x540b, 0x2) r1 = syz_open_dev$vcsa(&(0x7f00000006c0), 0x7, 0x307000) r2 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40002ff, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r3, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) timerfd_settime(r1, 0x3, &(0x7f0000000700)={{0x77359400}, {0x77359400}}, &(0x7f0000000740)) setpriority(0x1, 0x0, 0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r4 = timerfd_create(0x7, 0x800) timerfd_gettime(r4, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000100)=0x1, 0x4) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000300)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) read(r5, &(0x7f0000000380)=""/104, 0x68) getsockopt$MRT6(r1, 0x29, 0xcf, &(0x7f0000000480), &(0x7f00000004c0)=0x4) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)=0x0) r7 = syz_open_dev$sg(&(0x7f00000002c0), 0xebea, 0x125843) ioctl$SG_GET_REQUEST_TABLE(r7, 0x2286, &(0x7f0000000180)) timer_create(0x3, &(0x7f0000000040)={0x0, 0x40, 0x0, @tid=r6}, &(0x7f00000000c0)) timerfd_settime(r1, 0x1, &(0x7f0000000400)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000440)) 41.326467015s ago: executing program 9 (id=332): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) chroot(0x0) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0x6e, 0x80000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={0x0}) close(0x4) getpeername$unix(r0, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000140)={0x20, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000c0010001010040"]) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x7) userfaultfd(0x80000) 40.987520365s ago: executing program 40 (id=332): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) chroot(0x0) r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0x6e, 0x80000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={0x0}) close(0x4) getpeername$unix(r0, &(0x7f0000000200)=@abs, &(0x7f0000000280)=0x6e) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000140)={0x20, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000c0010001010040"]) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x7) userfaultfd(0x80000) 35.53363808s ago: executing program 1 (id=349): r0 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @private2}]}}}]}, 0x48}}, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) 35.35375925s ago: executing program 1 (id=351): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_complete(0x0) ioctl$SNDCTL_SEQ_RESET(r0, 0x5100) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) 34.198554142s ago: executing program 1 (id=352): getrlimit(0x0, &(0x7f0000000040)) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x1b, 0x4) recvmsg$can_raw(r1, &(0x7f0000000280)={0x0, 0xffffffffffffffaf, &(0x7f00000003c0)=[{&(0x7f00000020c0)=""/4071, 0x1000}, {&(0x7f0000000200)=""/9, 0xf000}], 0x2000000000000099}, 0x0) 33.102314512s ago: executing program 1 (id=353): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @mcast1, @mcast1, 0x0, 0x0, 0x0, 0x1006}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000440)={'syztnl0\x00', &(0x7f00000000c0)={'ip6gre0\x00', 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x11, 0x40}}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r1) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000003200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1472, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000031c0)={0x30, 0x30, 0xfffffffffffffe9c}}}], 0x0, 0x0, 0x0}) (fail_nth: 12) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) socket$pptp(0x18, 0x1, 0x2) r8 = socket$inet(0x2, 0x3, 0xff) setsockopt$inet_opts(r8, 0x0, 0x4, 0x0, 0x0) sendto$inet(r8, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x2, 0x0, @broadcast}, 0x10) r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) r10 = syz_io_uring_setup(0x231, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000040)=0x1b) syz_io_uring_submit(r11, r12, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r10, 0x7a98, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000500)={0x50, 0x0, r7, {0x7, 0x1f, 0xffffffff, 0x2301508, 0x0, 0x401, 0x100, 0x8}}, 0x50) syz_fuse_handle_req(r6, &(0x7f00000061c0)="c0f61a5fb77193bea0c6599de09cf570067192ff7d5bf191681878eb121895cd4c4052feb0a5196b61ab6e28d35aec54bb2aee6802a27f50c4e8f36a2b1bb12d93dbcd320ed338fd1a8ed43a2dcb2bf11c773ae982800321c7dcd67fa8930472eee2990090cc2a92f3373d898573a2cd1712c18ea624e82422c96f0d8895bfc4541911ff3662cd28fd55d795d1a5f31c92defbed88d48db688f899fe88997b057ce3e898eaf9eb2e76a59c1d2c10610768b3296595221c2b063ca2aa664fa0a5456c4e2bcddc7f856e2e29ce1b8852997a4d24f918408bfa9969074de495dd4cc9591e48287d78a2b3e0de09b48eb5b6bf78c6afd134b09770c164000d1f300c92877afe8be5d381c38da3b5fb9bd540c2f43c7dd2ec8dcff2af3517ba839c827866d10608964445bdead091df1264f5591e91d2f31b2015dff1b3b7ff0a5dc8b15748278849ddf4389ca7112ec1ca45957e2809b3d763e336f7051ac4e832ec61d1b95b9266565293806933dd8e3b65eaa1b4fe7946056703426674379ccec7abff1c459b91248f3a1d9e8103ae395aa86dd4235a5c16d9bd12dcb1ea9565a7c3d58d247a51db6d9077ecf47152d0733d79a5c449480c40b1cf8e115df4de3404b73ad06ac4c0d03f3b51d1b89b05ded082a5db1f5fbd8d351015b93862b2cc0995fb318609237e404e8d78d8982af761c27ad1fbc8f4693194c5e6b99edcb7a6e9dd261a386d8ed4420a7c12cbdcc86ab19f4e7a6c0c9b80fa3f0549ae57b38a93f669a87584b81e56211b34263db87c2d244e422878aa93e2c24260c71d06f75da33079b48b7072859669c128ba03d1487336a4a04167f2a3fa928d002c8b3cafdedf7a479604aa8f94e6b7ba58395df3d136b783f7be6b0b6b7b4b735c88a53da064a493b16713726b39ce23f08af19a671fe81be1e9772d87ca9cb5dccc35759fe3f7935a3167924d0a7d1586821ffebe0fa57e72a24967f7958875c4bf56d779369074db0077ee58138400c2f646c645e0f453e9e39aaf48da67775f59f8e282db3dec88bbe20ca6e65e2c7e44ab0583840513bfab76d94d1512549ea6db4a5a64cbe6f76b0ecdb2f1f71aa6446bcf4f7249366474cb77ed70ccb2702134b9dc6c2bfaf27ac9a9c85b8d9c48d100ae8c0eaa34701d2125a405b1117307119b754ccbbbcb2c8b71eb76d1157ddc7fbe0c75652a4cfc31d785a489f2344d8b4c47ff1b772104f49658f62d6241ef7f782db0cc071788b3dfa74e69533cd0a02ffadacdfbc8b5a83b9d4b8db068b5a7370f947fc4a99158c6296a442beba2e23ac1ef68c50f19851f3fb68b67fb714a5e7e53bb5a7690286cac12f2b002e854d8595075fbd00622b29bd423c3dbaf600ad6f37c96dcde43de6290b053c76df5620ce17118e2230039304c88a0d207c7cd05dd3854c545cdbebe907cc4d3411a382afed5e080502363cebe68e2c8dc1f800ea4add827a83a9cdf0fe6d54eabfca5a0ba370a06a4af1c49a60cd19141a4d994fbcce888278ade6300bd40685267fcdf1317cdb3b06cae9e7d9edb08d5c98b6d7115c025fcc05058a515adcc23c65ce526aed3b8203f3c54986f65ba9ffe2a9bc26b2813a1fe339ba2a58515cb8375e2d62550bf35dfd4fbdb75a70bb9fdc47d3d0346a65b986b7efd12aab760124b6888480b341b16ef2fea93fe2fbdeb55706690aa2c02bd80b1ccb7b8f23720283df89b515e2020bc5364cc4aea5fdc250f10d46db93c128e2de7477f4c80ec016f7a872efdef50ae1730b3a1deb8085d82f4fd53015a518803cd02646c087d67b0fd7092852dd81ac93ca60346f23fd847cf7c4883cab81af956342da21fb399b69e1988d89f9693b0630fa8cc95714285940d20eda153f8f7b01e6b2b892327b5d1e754a36a3430c5c22c3b841357eb80e526d7792a8ab9c4b1d23d82e31f23ef38580c2b33ca72424fbfbbf237f315cf2e5d134783982cad204be087ef58da96c6bc5da2dc4bc78f293eed56157a10848c0a956de15b83daacede9ae1c54731149f9ce7231cd84e14f128f87361e1fc0cdb2940766f39c93b9ddc74bba0a32548cddb1ae20981576de2ef8a772b04ed90900b2da11ffc70bbdb7091b8b8ed600dc0c9d236277afd9bb97b035f3b8fc95ef3f30c056b67a195c5c9f44c0f2ca4debba0d6d8779903e8e34fdd6b766fbba6b57e722ad9a852dbbeca8eb9acb9929bdcb4d4fa57d54ef1c1a0fdc032a898d3334f5671c7df82361b7d616c1f87e23f7adf043edda83458051f073f2562904ed25ad9a7129f3c14286007c9e4c81ea56c6a7289d8e58782d949a19a2642dc89d107fb465d0a98128250e66eedd93cf063963b7f7a0e1d3b9f1dd212cc9edd662af45852dbbaec84c69a640be115a239b5abd46d990fa007988f6be78a8c1e426091ecb33822529f7fddfb34d9304466ea06bb546a34735021e98674ae4a5f5c0b4f153ad5434b81c6343c42ae79224fe5abfe8b9e6fba38164c3c318500c130323b2f9bbcdf6aceb664e10483e2084defa744cd745e565ac5a8b5c30166330dd95e70f2a072a5cf5462635f7e0a4f455bcb607426aede9fa06d708c7c0daaafe2b84896134ab3b379c6690c9049903156232e5b7ca9529d602968f1e1f7a73214aaf4a9575dd5147e5bef8f05907267580abdb728cf32f6845cdf3bc779451669e4972e0b787afac5a36bacc3c1bcce125e91e4bf9810d91d1f1a3d8316328dd2626040af09892f1241c6645537ebfbeb752afba5e8171f487edba97aa92404973d4e8d09254abd2b70bdadd9b98fa3c33355295a5c474e9b2f017a6636233a382e8ef4e73506880e2a588bf257b6bb11e57cd9e75e45ef609ba583f3a6b1f2f94c7a0443dc0a8906a13e0188b61550cd296e4c63faf45bf7aed852f68ffed377302da3f73d89e4274a64667636bf00e8e4408a8407e098aeeed98e545b9aef40896c8070a76aaa0042162979ec0b7b69b4ee701100d66d3e7d25a48c59989424522889b32e4f18676475782e86d652d2eb836c326b46b8544bb755eeb14727e5ca25875f7b9ae1c113068be55a1521cb4edefef34a7a4cabc3639e456c94f01d78c059c441ce2c468e7b39b56555ad5cd6a14df8e3518e4e1970fbd6f586ce46c51c4d9ad20c3f7f5048c071994e807f19b7176290a82406dd0ad3f0b64350bbce79b223f27ed99f819def43a33696c0739e09030460a5a5d04d251adfbde1af7a485894d3d30c79d49796a9a5e077aeddba1303f3e3a3187298c88da70885e2a9dc966eb69a6439e2d3b1934ae6e8ea328497d87a9dbbddbdbf12b0c582ca4ffe1f25cdcf89a6ccdb31880776ab808b4f050ae02adf70f64c73ab2a3b1c4da69950ab4f7bcf9cc22f81b99694a7783b792facd8197904c12d3776de5184afa143ee23eee82aab2ac79b25503e0692f3463e5c363e0b4b5f31af82898009f7da13d4f249a70de40314c003e7e59dfb233bc44d0316df3e45af806d216ca76a58417ff8abcdf7cfea2da8868c496cdec8f47c451ccdc8908c5e8c1039b6bfa8751637c29fdd9b7dc76279dea5ad7455af4db3394a34cb9be8b9bf1105862108f920c44d029c3372e77c44a25d06cba956da65ee40abe32b8b557e123fddaa87b4ed5ab3485eb11f13c61072720d4adbb937c336f2b60525933b6d49e7c6751f0769377bdcef02abe63639b17a6780a4afccc8067403aeea42726f253ec97994dcf55358e6faa3e622344dfc613f8be96714d5c49633d7b74b9a72883985782ea8691d26da620d905f3583adbd9d527d93f1ce623bcf70d98a0455ff80fb1d472c6fc6bf0390e81b8d755b196e94fb73bcc883f5f310043c5138c95c5d7079c24d5bc5876b422f46a2bb17aee407bf7a55dbbdb253e2865c1b91839737c37142a8fe8bdbc0a7bf89a392da717a5ed87af754052b1d0a1a37313b00cf3b4aad91ce7fa7777b1851121a63e374865b238ddf9a7ebd20641a719c68682b97e3c5126e732800c04cdb627bd415efbb7e5e19917bf4bd53f072b7ec2eaa0128b56e069a32e9f729718fa4a7212ab0fd1e5d3582a5723a704d84a88c235b44812849301ee8155cea471028beea1918cb1f4118728718674cca9dcc58bafcdb9379c57e9333ab348b30a801aa2f5c05c3107e52613cf0f591781ddb5e1e4844633057a26bb3179c31b5664db4bb8c6d762c7b9886317ab6e9e301de67f12085547ad2a20d1d63d361c2bcd66be2e25fe104f8b53b7cf89d90d456f063da31f60078b760ce340f9c9a8e8da113b6c6e3c53e666488d75ab209dbe31ecb531553f17446a29edc465ed22aee2d4c013ee8a4d935c0cd92bcba9e5a56a6c19ac114d12db58bcf5f931a7b282404af34fee464f4c28e16dab834de98dd57b107e45fa66b26c32fd94e848aef6e4a2a65fd4fbead1b1d445d6c343bf50d785e664220371e27566646e284c6a3b07c14c0c5b84b5cd1a01a84d655f8dd72ab8e3d0c48e67596f605cd4a50b5fde9b182792d7ee8ee457eb6666aadea80563b4d176933cc482f75cb98a8dde4a414041187cfb2abe3e5077f23c98bafd0afb8b023e0cb26efc1488dd98a51a19dc93412b5fd91c4e06439b6d2d20a174989f860de6b1be55923a11e5893d30fae74a625f777ef9362e64b529c964b5c0b5817a579a647ded28582c45f965e52e1f76084267c73f8fce8037b22c2496ee6674f56056d9c691eab831c831a27fccd90f961e949a51c90a80b677d11e70d01744f9632cc26b7e6476b8c92a688ec8e1280ea8b795eae7ee61e2735045b9ea516af752b35388a6c3ed98cfbc4e74c8d0717dc31eac87b6a9c06f0d4f412e8e1155ce48cec6d9c106f3013329596a2d43ffe7f942cb7b7449f38620a8a9e5138b5d5d03c8a563446e4dfb1905d841f7a350d6c67d85652297db21b3dd3291b795c90276ccc50eaf513f3ff9480b3d2c0096e92c93cbbea680833cfa630d72c4f5a21ef0f81910b8a5ef77d62175d3abf5b3417cce43e3c53bb84ee1f5e354b2d79c2b46e3bdb2ffb15420e7a28c800c2591cd331d71c645a6b1bc43f06703164c05f61b4abc0fecbaee510def6340c2bbcc32248655e9161c3e6f01520bb0c53be04c3a3ef4a2dc401663f6719ac758aa297f65d1681652e4ad042d754b054df9cede3ffef7ad2f52184ea6d93d6867cc262b0a413da11c02d0c7c49a663319333d8b29d56cbf630e66b6683ff7f3b1ce5c481d37151626eae761adb77642f802bf0f663f3c322ee17cf01a09f058dbf82d04bdd7c48f34f54392d1dd489891ce28373ae980f74897fe3f90db2a9ccdbe56160fd2517adbc953e88c5fa8981456b87ab9f122321816e0df119f6f6c505f0dcab1c8e6a7f4109055dd80001dd90ea984b80f0b0766bd9772d96ed42d95f219b4a8420d7cf04f28475d7f5d8a8a07b0930c40d0dfc2592f8f54e90a80e0a98d3055f4660b1530565c7f2d91d7d96142da19d644aa7c512e24f83e8305970f9d3fc3b9382ad141f63f2d5b265b7cda258119ca4f553fab11f2fd925a7a24c4021045073d867bb089ca7bcb702bcedbc28781e408cf8bd43498f8661a320d28c95c1fc42635c9e4c4de8787afc70bf5c8bf75e0a2937a9ca2b08c15453f24211168c7fb2a24218fc3f04160c2daaa46ef7fb710606a53228e134f20511169034cec55e77037a108060b8fd10ab9ae228d9ee4d5ab1380cfcb8611e6c9d5dc143db2bc856d967b0b9d0187ba8483f7adbd1092562b2b16420baa5ab6c1f7c02ae56f013e752d9f41df4b4f0b008bc25ff58f816e50bdce308e219068bc898a21f1dd26d7fe7760459629f3615bcf7582c87d296f041fb005a72c7ef4013ccd8ca3bea85db90ae6349f101adb9235dd343be423816b37db2661dde2b9db33800da7599e8a9194fcf06755e2659670c62aba1d5a01172a416a0296bade0b32e69b0ee60dd6cd1eecca4335eb0416df6ded75049a14660276df47bb4f224e087235742e90ddf6f57827a0cf26d71b9338f2ff5166bea85a7639de6ac97ec829a7d071fac1f4b27c6c23e952adb5536b45a68e75c1c1a6d44508be6f4b87c5bb880a6baad5faecd1fd6730783d8729c2d89b23a3f2f9b79b78f7fcb70a7812607b25b17ae857e65f205ad5dd87a34e52c6e9611f588236bdc59d816f277aa8cd4a19750461d3e82c8621181b803900d1df439babcf4909168d4125a7c962ceac2f834d79460f17f92f415a85ad7e12da4b76105bceb4641fc87da7797fee092828f6e9e42631fd5c87046ebe5c4044663a31a1b39a6f6a53ee2b7fbc3eede57619535b1011c10d2d5a97c781c44bb6e493287528bc5281496f1aee3c746e09aeef0b2d38bdd33e37446c1f7516767ecbe298b78ef8e03336a08a1a9e62805140573b034459a445240aff04593539aa97056957f3dec9c43e50a1bce1b9c8e860940e03ae39e8f76fb80ae746f7fa4ed0b050c9e08a788e666e9f18bc8e83c64ee3ea04eb9f1c1dd92b3be73d18cc53bca76ba4688b48c13982ae6d25fdd9b5b85612d5b706c9b9d7c6cca91141313356f0d7b859da0de669fb52a829014a0fdde51df658303ce085222a42ad624ee6c659ec94e0d0713b2d3c3becb53c6f76d30530e6129943e20361a7c9f7847f79cb871d866b5277eecc8c1626fe2719c9cf872c0fc78a98e6ca998555721e9abd5bf9e2d1848016e0bd3202c44575c688837136e71e85765d677e0f2b081707a4e7e22bef50b9280a1a5ea549022ef2a9fed989f156198975302608dffd03f8f1186a12585d4670ce868f0c96be37416b9132144f65c9abe8b00894d7a7e6d0a8554e09139ec2a0eb6d4f00c637684602c106257f5abe816e068e0f6f3e94a916ff41e23b6baa4876931209a6b0bce1f6fa8d1965665d3dc42e5c6b011bdb5144fa5fe4879779ac9dffe0843cf49806ecbb615b818e54c6dfe4d12ccae5b12b0ce87909c1e852e8d7587d1ee24c2575af61eb0b667c37b6d15b88121974598ac23cbc66503f95cf01a7a1e217f0712c4cc4e5fc22e83e3aa375eda531a73828eba91223d7de1194af730bbf2c1ed5ec47ecdf465b1794971010ff8c8771c488a1d3f98292b5d2ea9625e52589aaf7212fcdddcc0f1681b785911fcc64a6427358e4307a3d8bc583dd635ba5c41eeae96e0b6bc5236a1f539d291e568d5a0aee25ffbaa73d0cb84bf558cbf6d04b16ef7e97617b42d07100d82fda6f75dcade611e459bdb4773bf2b70e90a8add2bfe6ea6d3a4427940fef6c81931762dbea6678fc63e50c4430227b15cf184dbae4c3b2d8096292c17f701c560ac7cb33efe7d79d0c2a3c0c06e22d4e84e9e959697879f0d27df460046fc20394655cfa19793256cd9074f1c5f8ef530af537164e0e43184f921d56094fa7c7744af35821a5833c9b9d56fcf525a39fc795cf33f14705d0c7087c081bf11ad29e4d6c8f6cbbb3a0d873262b89cfc54d4cec42c3e13a5ba604df942bf8b4eef7cdae1c0e2970edb7ea6437618e6f8312a745ca8bbf0c42df103f42c824ab4e77e8b118e2b9a84568ed3d4aa3800011d02be29c032192719635a1c6c28315b27368f6ffe852bbd661c351cbfbf97b1b36d52371a4ce57e5eb6e4b13cd01b022de1770a5b1cab0fe548092a16e04de76fb8d29d69a1c55f8aa11b34bd6f018d283a9a7c0338b8c1900e21c0054616ade6b56d0fe3379f1a8dec38b85fa8e74e9bb5df4287d037f77bad30de89ea87b03d40c3a1618db1073c07032f6d22f8a264cbf0c1113689308a2fcd7299603a64f884cb03f8c5f0e61e4981d2baac3d50975cb917b815efe2f7eda88f1cef1f34997f0819a92051c1d9eac3ef05de25a2b4d5f65619b4ea377180c541f2afbfa5c8fdae59f8e3a7635d2b30c4c759c32e570b8d9ec03b4aab65503e81e545dd41f593615cfedcf009424ae4854de3a9111115cb254608bc2666b18c85698ac193a9799f1a1f6098288b42dd2684db37e0d3b023ac9b417263b1566acd6d951df147e83db8e909b39bb6a1aa3fcc1c1a20795521b84e0884254b2524ebf0321e5709e7a79f2d62309247b7b24ec71553a9ab9daccacac1a8bd6019b7703c0ed468379640ac6e764ededb2fefaa2f88e15fc97ec6f16007f540cd7a57c7726f4aa9ff6640cc7f5d71a6c12048f98a9071ffd594f17e42e7336ab6d0fd429328df1238e5eb4ebe4f9d8ef01fbcfe8f53eb3f6defd4c7cb40b3772ea2f2130b655d2ad3643977cafa991bbc6aa2aaa2879a3c2d1dace3ec034beb3d06f0a09429b3fd1ac06870dde4ab97b7d5d7ff1394577a6bea7a3a53ca883a16c98d574ddad00de5dfe9f75369be7686a4badf44f4d9b110846b6ffca67f63973186433f6bc3691b580cdc689c159064c55a974fb849f56fd2f9cbe4738e0a1a8a764467dc1d3723278ee1ea573fad98a5318104218d359d89579614592fa6ae7cc4720e6ed71706fdc4c707b03ff77454daf4505700f249aea0abc909763416d44a069a6d605118ac0c20a325577fe1d8af053673fc72e489d24405281f01b4e2e05e4fa14e68a53294e4b5d201c146ff994cfb7a776ad80828732ee647092c20fe46d917142880318136557c47ff7e31d26f35f407c1e6d4254aae442b233b89dd4c0adcfc92b0f821a5a9dce95a24bed9bb5cd17a5b59d3e82086cdd7a3755064e4de22d8f0f973f4235aa58c6214dab89325638d94d3dc25f3ac4d912ff74be6ad8ef49aa2becede5453a409cc8ed8065dacf28a1a7498f6dd07a3478af093574fdd2d0a4f98d12fe898e47cd0550f1fc42810ed2e4cfe5cc4faa67d965f252aab1bd5c536bf2c936706bc71aae98b93494d364faac72a9a60188a23f15ddf1238896e4848da876789b57ca53cd5b1041612a49de9a64a545a39375aa2a516c4af4744daf65a9c28ffb635ba56b96731b763934afa0651fd6fb65e9f71eb0e6fd54bcfd2bf0118b486e97db512290bdb1dcfca76ed974722e13e5acd0569d5f944de70adf728379094981ffaec43848367ec8cdcc227b266649ced47a03b22016ce42be3a33135229670244cc7b3325ee448c95236d0de4bbf641e1cbb0516edb3f8829e60f91d43f0fe45595d8a99e699252930c7b05ba2ba679f8f46c38f789a7750ffa4eaed19c4c1a33aff60c8926ae42497662a130b83b3211e9399e2565d9f082ec30e26e5b02ea91cf43b0a046f9fe596e5bb2a9c800d761008dc7fced2a510af6b02d3f702fc3e1a98c6a87661f0d353b81bc4435c0d4376cfc74c057bf23febb101252c4eb168d4e347e697c8d0c48a687fb2224d58e5dc68c38de930164aba51e7cb19051fe64603c6b602c02c5cc22c6da1c47d906fa1cbf67312658b201b8f89a377d61695daaeee18eb2fb8caf38280fa8b95cca721afdf33d2c3092af57204bca72c46aeae9e9fc46f0ce76b96bbbb59a8517cb72d68f8b189280b6ce1e2686204913bac1d9aecd77623b7f05475352e57f245197894d767e5f17611bbf1bfe2015c9750e9b3f5ad4ad57be1ac4988c30d90829946b05fc5bd709dbd2590da2e3666294f83336e52758bc12c9d02af342a91fdcfc9144021a783643a9845a4898ee03417329ee0e2dd7bd53f3b23f3f9a10ea643b91b3c2df8438efb22fc894bbcdc408a13dbded7002d9cef6e38bf6dfa16f52f0f24087281a3ae95fb4995131938f9ca80c5f466c7367665e5717c823b318f43e7a3e2e8fe9c2e74959ca3d53b79fa45ac778d0a99351a1919b1c9ddfda10d61487fc5a2b8227493b14e2ea9fa41db870deb1700eb46665424fbc3f21c5d7ad61089ad0f99aadcca2a97d46fd091cf21d95674c3cf48f2724a89299b5342ebf8b18770e61c449455f77cacc5b2e0123005cc296acfc28e42e3d3b426469e39def114d6071a3f015f94dd8eab597dc4cf6109f2aeba0639ffe3f66f15ddaa74460a884a5c067e1e6f8d961ff32518e7571d53ae36badcaca50258a15743e67fb35e062e697d44ccd4e416010dbe62a1d13319d3ce88dc7826514d0f84cf7ffd5f1dbdbe3534af35bba26c5f951e18b012234a3e1cd22199358ba66421a326af09d36d45c3497c4725c0e8557395376fa9dcbe4c595aef7f822cb160e72138cd610563c382769b64f5da2ae6f62cbf09d24490565d7b88f6fefc30f050e74327b7efc168f040f18110a61cc6ecf73c43c0e9e73fafcfc6079ee68839a8ed710160fdcfd987394a790e01c42c916169e8c6a7af905c15d51f87e88877386b8f8743efe4fffc2dc8fd73b4e8905b428d4cd87d90e93513f19a981b5037370cd634f23859cb7bd6b5632bd25c6873b7195691e0f76fb07fce6e72d4b2b467e57a325febf4bb842820fe6896b23aa2a3eb37697753a3693ee936692e6cd91eae410bf89192df913f2689adc73b7b35eaf8bf80928c0023b105cbd2be51a08a371be88926636bd590466c218b203fe311d73dd1a8b440133f1ebb8249b4e1f6723b7b18b508dc34acd9da927ea60d2dc361c2d14cd43ad3b0137ac32e8988d11d11de19065d02e8012a2ee24891541989d11da87de4383036b757769222af022e86803b64ccd03e4bfe3a9d3b8a5d6522d7b6ade88aca72bc436382cfcba22a426ecb21366d42588e9a68c0d61722617a4706852ef6e5eb42842d127f88dabcb8cd635d621a9082efe0cbb52fffb017c8cbf80e48ad1d8ac4c927bda50be7bbb6a302081951dd7c05142465ef8188774807ba482c155f7b56b663d24c4ad88140ddba388e4d6abda83048db46ad18328c63006d02844189a769167d94265148e06f3eca08dcd81691df655968de44c5931e62f5dcc4aa16b24ceb6e7a2c8783d9918a9be7c72dcd57fbf39f985ac29069241cbe3298d7651124f03bef8e2adcadb0c0e08efb096f72e5df2d3f8e2ea6f9cd2401533469e5099a6faa98acc2f73028eae115b3a771bc7ddd186ee7a634398e206ce9b1262b1dbb80575eac718eade048bc01ac1d410e21393dada6c1ced94c411fc19ccacdd175996501d66819b491fef65697f736ecc3a4c32f3675d1f90c8e4d44a1ba6048e77fa24d6998ad88da3cf5de223446d53dd72981c19d5915af69b9a7b9bdf35114ac1cee66b9f3f6df4b9a2d2c017d44443a28badca61b1e8db627d967827ebf32c8642b7de41508c15538b6cdf0284f1a94e8d9fcaa086236f11fb1689d57d500423a0c1d362a4fd57e5efa8858c237a0b58210b4df2b6f10fb01ff8b305cb69e65120c716970e1752cae51022a068b9ac2b7775ac415c56d31536c9f1eca654ec89d7ed00855b2d2564a74bf1a0a3b75cbeadad89fd4ce7e0a83a565c6d69077f026dd40ee186fb496d575c5f5d2f4f84e0efd6bca34f070b185903c7fcd6478f467b73687dee0b765477cc474cbe7f067d1f655efe1fac24a6cda9ed82dee343a36f5ce3894587937f31a14dff66e8384bb3c9adebb753f782570a894e09a38c096f523fbdfb7e0c09026fa023c8dc9e5822410d8343afd647a91130744017166a9b195996ee871eb284279fa725f7af7f853eb85bce100cfade5d458c4e166c839e4c1a86", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 32.102622543s ago: executing program 1 (id=358): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\x16\x8f\xfdBQ\x963t\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x92', 0x40, 0x0, 0x0) mq_unlink(&(0x7f0000000340)='eth0\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000380)=ANY=[@ANYBLOB="f7b5ae5138aad2144cf81fce1369fbadb66e27cc7973b84a4d10a69d824955564f7882a20a48b5caec435878fdb66fbc3b003ac3db399edbef5ab3a6bca4918970965711e36f9879adb9f084b5868483067055d5b14bb0dfe31db1821ea587000000000000000120061b945b9328b432e53425ca79a2aeabb2484c7ae5c1697e736fce898d1bc653bf", @ANYRES16=r0, @ANYBLOB="01040000000000000000010000000000000000400000004c00149effffff696200"/98], 0x68}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x9, &(0x7f0000000200)=[{0x2, 0x5, 0x3, 0x7}, {0x8001, 0x7, 0x4, 0xfffffffb}, {0xb73, 0x6, 0x3, 0x93}, {0x5, 0x9, 0x1, 0xb}, {0xffff, 0x8, 0x8}, {0x878b, 0x61, 0x3, 0x1}, {0x80a0, 0xb, 0x1d, 0x92}, {0x202, 0x6, 0x80, 0xff}, {0x800, 0x6, 0x0, 0x2}]}) 31.706663129s ago: executing program 1 (id=360): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x2, 0x4000000, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x70}, 0x1, 0x7}, 0x40000) socket(0x2a, 0x2, 0x0) 31.432566093s ago: executing program 41 (id=360): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x2, 0x4000000, &(0x7f0000000340)={&(0x7f0000000540)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}]}, 0x70}, 0x1, 0x7}, 0x40000) socket(0x2a, 0x2, 0x0) 22.014550682s ago: executing program 3 (id=403): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffdf034}, {0x6}]}, 0x8) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000200)='H', 0x3ec0}], 0x1) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) dup3(r4, r3, 0x0) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000080)={0x3, 0x7, 0x1}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000180)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffdf034}, {0x6}]}, 0x8) (async) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000200)='H', 0x3ec0}], 0x1) (async) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) (async) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000001040), 0x0, 0x0) (async) dup3(r4, r3, 0x0) (async) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000080)={0x3, 0x7, 0x1}) (async) 21.785609042s ago: executing program 3 (id=406): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x4, 0x7ffc1ff9}]}) add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) (fail_nth: 11) 20.762607977s ago: executing program 3 (id=411): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00') preadv(r0, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x73, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x1401, 0x1}, 0x10}}, 0x0) mq_open(&(0x7f0000000100)='!selinuxselinux\x00', 0x2, 0x14, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000080)=0x3, 0x4) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0x0) syz_io_uring_setup(0x3fc1, &(0x7f0000000140)={0x0, 0x2948, 0xe09c6d63642c65ca, 0x3, 0x124, 0x0, r0}, &(0x7f00000000c0), &(0x7f00000001c0)) fcntl$getownex(r3, 0x10, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040), 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000003c0)=0x1, 0xfc9c) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 20.496560438s ago: executing program 3 (id=413): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="1400000035000b63d25a80da8c2594f90724fc60", 0x14}], 0x1}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), r0) socket$inet6_udp(0xa, 0x2, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@allow_other}]}}) r2 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x5) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, 0x0, {0x7, 0x9, 0x0, 0x48001, 0x4, 0x3}}, 0x50) r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r3, 0x65, 0x8, 0x0, &(0x7f0000004440)) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)) add_key$keyring(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, r4) read$FUSE(r1, &(0x7f00000044c0)={0x2020}, 0xfe63) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) 19.418980951s ago: executing program 3 (id=420): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/54, 0x36}, {0x0}], 0x2}, 0x9}], 0x1, 0x0, 0x0) (fail_nth: 1) 19.086662027s ago: executing program 3 (id=422): bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x0, 0xf, 0x0, &(0x7f0000000300)) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffcb8}]}) sched_getaffinity(0x0, 0x8, &(0x7f0000000340)) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/59, 0x3b}, {0x0}], 0x2}, 0x8}], 0x1, 0x40000002, 0x0) r3 = fcntl$getown(r2, 0x9) getpgid(r3) r4 = openat$binder_debug(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 18.696685969s ago: executing program 42 (id=422): bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x0, 0xf, 0x0, &(0x7f0000000300)) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffffcb8}]}) sched_getaffinity(0x0, 0x8, &(0x7f0000000340)) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/59, 0x3b}, {0x0}], 0x2}, 0x8}], 0x1, 0x40000002, 0x0) r3 = fcntl$getown(r2, 0x9) getpgid(r3) r4 = openat$binder_debug(0xffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 17.182381862s ago: executing program 4 (id=431): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$poke(0x5, r0, &(0x7f0000000080), 0x0) 16.89020562s ago: executing program 4 (id=433): bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0xa, 0x8, 0x10001, 0x68a03da3, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="31010000dccd5e08cb06030000e81600000109022400010000640009043401"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000000)=0x4, 0x4) 15.188475979s ago: executing program 4 (id=441): openat$binderfs_ctrl(0xffffff9c, &(0x7f0000000080)='./binderfs/binder-control\x00', 0x802, 0x0) socket$l2tp6(0xa, 0x2, 0x73) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') socket$inet_udp(0x2, 0x2, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x2, 0xe1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0xa, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setfsuid(0xee01) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20012142}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 14.358655723s ago: executing program 4 (id=443): r0 = socket$alg(0x26, 0x5, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chmod(&(0x7f0000000000)='./file0\x00', 0xe0) futimesat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000001900010000000000000000000a000000000020000000000008001e000004000008001700ffffffff"], 0x2c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 13.546820435s ago: executing program 4 (id=446): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) io_setup(0x6, &(0x7f0000000040)=0x0) r2 = eventfd(0x88d) io_cancel(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xbd, r0, &(0x7f0000000080)="82a02f8a2f70c144672004226230892c85a151e316955aaffcc9d59adbddb29546df8d9d1561853c8644a6ae259108d595bc3df10612a9987f6795d9338cfd196a4cfc8c7390cc0363bb1c4a05a166e2321cfa369c00e9d48210e69b21745d465dd69c07e3c9592f2180de485f3e3be08d6c94", 0x73, 0x3, 0x0, 0x6, r2}, &(0x7f0000000140)) r3 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, r3, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 13.07865607s ago: executing program 4 (id=451): openat$vcs(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) r0 = syz_io_uring_setup(0x690e, &(0x7f0000000440)={0x0, 0x1, 0x10100, 0x2001}, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1b67, &(0x7f00000003c0), &(0x7f0000000240)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 12.497801837s ago: executing program 43 (id=451): openat$vcs(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) r0 = syz_io_uring_setup(0x690e, &(0x7f0000000440)={0x0, 0x1, 0x10100, 0x2001}, &(0x7f0000000200), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x1b67, &(0x7f00000003c0), &(0x7f0000000240)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x8}) io_uring_enter(r0, 0x184c, 0x0, 0x0, 0x0, 0x0) (fail_nth: 5) 9.006379415s ago: executing program 5 (id=468): setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in], 0x10) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, r2}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe(&(0x7f0000000080)={0xffffffffffffffff}) unshare(0x22020600) vmsplice(r3, &(0x7f00000001c0)=[{&(0x7f0000000000)="d0ed3ceb9e6545c5987f402cf8445ad3f08a4fe8f07877d0055e7dec", 0x1c}], 0x1, 0xf) r4 = io_uring_setup(0x6284, &(0x7f0000000100)={0x0, 0xf628, 0x400, 0x0, 0x371}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r5 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r5, 0x80047453, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r6, 0x11b, 0x8, 0x0, &(0x7f0000000000)=0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$packet(0x11, 0x3, 0x300) poll(&(0x7f0000000300)=[{r7, 0x3040}], 0x1, 0x85) 8.155462236s ago: executing program 5 (id=474): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c010000020701010000000008000000020000070c00034000000000000000080c00034000000000000000094c000780080001"], 0x12c}}, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc09b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect(0x5, 0x50, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xca, 0x86, 0x30, 0x20, 0x12d1, 0x77b8, 0xba2a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x21, 0x0, 0x4, 0xff, 0x3, 0xa, 0x1, [], [{{0x9, 0x5, 0x0, 0x10}}, {{0x9, 0x5, 0x0, 0x0, 0x3ff}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x8, 0xb, "db285dcef7b9"}]}}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 5.03822554s ago: executing program 5 (id=485): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$netlink(0x10, 0x3, 0xa) getsockopt$netlink(r0, 0x10e, 0x9, 0x0, &(0x7f0000001100)) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x14, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9000070900be0083000000000bf18e3bba88b092"], 0x0}, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x20010, r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r4, 0x10e, 0x9, 0x0, &(0x7f0000001100)) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000040)=""/95) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_PIT(r6, 0x4048aec9, &(0x7f0000000180)={[{0x3, 0xc, 0x0, 0x5, 0x3, 0x2, 0x0, 0x0, 0xff, 0x4, 0x71, 0x0, 0x2}, {0x0, 0x1, 0x10, 0x0, 0x3, 0x2, 0x8, 0x4, 0x0, 0x7f, 0x0, 0x0, 0x4000}, {0x4, 0x2000, 0xa, 0x0, 0xfd, 0x1, 0x0, 0x0, 0x0, 0xff, 0xd8, 0x6}], 0xfffffffe}) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001300)={0xffffffffffffffff, 0xe0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000400)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x0, 0xf, &(0x7f0000000f80)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001140), &(0x7f0000001180), 0x8, 0x98, 0x8, 0x8, &(0x7f00000011c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="000000ee00000000b70200ffff000000850000008600000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000019fa116c08000000b70408"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x8, 0x3, &(0x7f0000000340)=ANY=[@ANYRES16=r9], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r10, 0x2000000, 0xe40, 0x60ff, &(0x7f00000001c0)="5cdd3086ddffff6633c9bbac88a8860203dffd00139fb7a884bdfc14f48788a8", 0x0, 0x74c, 0x2f00, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_usb_control_io$hid(r7, 0x0, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r11, &(0x7f0000000380)=[{{&(0x7f0000000580)=@nl=@proc, 0x80, &(0x7f0000001900)=[{&(0x7f0000000600)="04", 0x1}], 0x1}}, {{&(0x7f0000000200)=@nl=@proc, 0x80, 0x0}}], 0x2, 0x10) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x300, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x2, 0x1, 0x28, 0xc0, 0x4, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "2d571cac"}, {0x5, 0x24, 0x0, 0xfff}, {0xd, 0x24, 0xf, 0x1, 0x40, 0x4, 0x8, 0xf}, {0x6, 0x24, 0x1a, 0x4, 0x8}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0x3, 0xe}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x4, 0x1e, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0x8, 0x23}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x52, 0x6, 0x9, 0x20, 0x9}, 0x27, &(0x7f0000000100)={0x5, 0xf, 0x27, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "23175c32f7796c1f68a9388e59f275e3"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x32, 0x7, 0x3, 0x5d5, 0x9}]}, 0x2, [{0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="e23e089ea906849768ba1ff4a888079b37"]}, {0xec, &(0x7f0000000fc0)=ANY=[@ANYBLOB="ec03405ae18afddf4cd0d64be5dd6d20b85cd02b5d5bf7bfafbdbeb123f01d5a302c1d97519fa4d4a9cc46ee603a68d7d8b2491351361455a17febd3c2775bdfe032466b24cb674e27f75879ee5f2e4b11564d1384a94c2df714797a0355faf5c1ef62dea18555318c03d330f65b58d013dfab88982f0204fe69a52cf163aaa9b64f901b9356f8464f04e7c7fbf6caf63e7fd252e16b20503dae0fee0e1f289ecaac1d451b4a75b93831dae8f9b54772b58b11c94f93ed3c052605764ae331d7257b48a197dbf1ae48e739e1b503541d4a693542568030d75757425ec0b66dda78377fab6f5e023607999c0535759c285ff1a309e3233b7ad8c5b1415f97463b065876bc88e1e92fac922d88a01441647f02ff38ad66a04d10393f250ffcf1564a5d015460de062d09c462193093bf82b6358e92308880be937862838ad24e01"]}]}) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) r15 = dup(r14) ioctl$KVM_SET_MSRS(r15, 0x4008ae89, &(0x7f0000000680)=ANY=[@ANYBLOB="010000000500000007010040"]) 3.81024885s ago: executing program 0 (id=488): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x5c}, 0x6e) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000180)={0x0, &(0x7f0000000080)}, 0x8) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) add_key$fscrypt_provisioning(&(0x7f00000003c0), 0x0, &(0x7f0000000600)={0x1, 0x0, @c}, 0x29, 0xfffffffffffffffd) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(r3, 0x40045108, &(0x7f0000000200)=0x1) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x80000) sendmsg$alg(r5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x4004800) r6 = syz_io_uring_setup(0x1243, &(0x7f0000000240)={0x0, 0x6a9e, 0x4, 0x1, 0x13}, &(0x7f00000002c0), &(0x7f0000000340)) fcntl$getflags(r6, 0x408) sendmsg$nl_route_sched_retired(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000035c0)=@newtaction={0xd0, 0x30, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [{0xbc, 0x1, [@m_ipt={0xb8, 0x3fff, 0x0, 0x0, {{0x8}, {0x4}, {0x8d, 0x6, "9ac34c55892a1672e9b232be5ec242e364388986090f25bff9f8e13baf0b3989050a60ca6c933aa2fb59506085f634207ad44a4aca07b2f129db381ea4a1e51f914a37d6c4758587a17f1a1d2b798cce8d8ec6a4be36d7c4878e5def5737954b8638b7af6434e12f6aec03ce0ac5adc58692a263152a2f8e17447f28b7caaee9de6e6b14860b02063c"}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xd0}}, 0x20000000) recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) sendto$inet(r2, 0x0, 0x32, 0x4cffc, &(0x7f0000000300)={0x2, 0x4e24, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44000) sendto$inet(r2, &(0x7f0000000040)="8c5169e8210c", 0x6, 0x4000000, 0x0, 0x0) 3.782702466s ago: executing program 8 (id=489): r0 = socket(0x11, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r4 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000080)={0xa, @pix_mp}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)={0x5, [0x6, 0x1, 0x7, 0x1ff, 0xfffe]}, &(0x7f0000000140)=0xe) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) futex(0x0, 0xa, 0x1, 0x0, 0x0, 0x0) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev}, 0x14) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000300)="01000000a06b955a2a630b00c145f94cd9ffbf111100000000002b8ad7243ca1", 0x20, 0xffffffffffffffff) close_range(r7, 0xffffffffffffffff, 0x0) 3.578602898s ago: executing program 0 (id=490): socket$inet_smc(0x2b, 0x1, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0xeffd, 0x0, 0x0, 0x0) 3.390662141s ago: executing program 0 (id=491): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)={0x4, 0x0, [{0x80000000, 0xfffffffe, 0x1, 0x1, 0x8e4d}, {0xa, 0xfea4, 0x80000001, 0x1, 0x3ff}, {0x40000001, 0x3, 0x3, 0x7, 0x2}, {0x80000007, 0x4, 0xb, 0x2, 0x8}]}) 3.228344615s ago: executing program 0 (id=492): socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_setup(0x10d, &(0x7f00000001c0)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000740)={0x30}, 0x30) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') fchdir(r6) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file1\x00', 0x14, 0x0, 0x1, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x341240, 0x0) r8 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'tunl0\x00', 0x0}) ioctl$TCGETA(r5, 0x5405, &(0x7f00000003c0)) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7ffb01b3f9004000200012800c0001006d6163766c616e00100002800a000900000000000000000008000500", @ANYRES32=r9], 0x48}}, 0x10) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) socket$inet(0x2, 0x80000, 0x9) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.stat\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r11}, 0x8) 3.048359276s ago: executing program 8 (id=493): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0cc5605, &(0x7f00000000c0)={0x1, @pix={0x0, 0x0, 0x38416761}}) 2.726601005s ago: executing program 0 (id=494): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140), 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x113, 0xb}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r0, &(0x7f0000000080)={0xa, 0x9f, 0xfa00, {r1}}, 0x9) 2.703711279s ago: executing program 8 (id=495): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = dup2(r1, r0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="360a000000000000620a00000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r3, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8020}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffff8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x76}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}]]}, 0x64}, 0x1, 0x0, 0x0, 0x40840}, 0x4000084) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, r3, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x8020}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffff8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x76}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x25}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8f}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3c}]]}, 0x64}, 0x1, 0x0, 0x0, 0x40840}, 0x4000084) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="d09f93c9", 0x4) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="d09f93c9", 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x8000000010, 0x2, 0x0) setsockopt$inet_mreq(r9, 0x0, 0x24, &(0x7f0000000580)={@dev={0xac, 0x14, 0x14, 0xd}, @broadcast}, 0x8) write(r9, &(0x7f00000002c0)="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", 0xfc) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @random="429e82211cf8", @void, {@ipv6={0x86dd, @generic={0xa, 0x6, "7abd6a", 0x0, 0x3c, 0x0, @remote, @local}}}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r9, 0x0, 0x2a, &(0x7f00000004c0)={0x3, {{0x2, 0x4e24, @multicast1}}}, 0x84) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(cipher_null-generic)\x00'}, 0x58) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_IFALIASn={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}, @IFLA_IFALIASn={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000884}, 0x0) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000440)={'nat\x00', 0x0, 0x0, 0x0, [0x8, 0xff, 0x4, 0x2, 0x2, 0x1]}, &(0x7f0000000200)=0x50) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0xbc, r4, 0x5, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x40, 0xe, {{{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @void, @void, @void, @val={0x4, 0x6, {0x0, 0x0, 0x0, 0x4000}}, @void, @void, @val={0x25, 0x3}, @val={0x2a, 0x1, {0x1}}, @void, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_TX_RATES={0x48, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x44, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x5, 0x30, 0x60, 0x6, 0xc, 0x16, 0xc, 0x4c867cfa510d3067, 0x30, 0x9, 0x1b, 0x12, 0x6, 0x6c, 0x30, 0x1, 0x5, 0x3, 0x48, 0x9, 0x9, 0x6c, 0x9, 0xb]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xb356, 0x6, 0x30, 0x80, 0xf, 0x7, 0x5, 0x1]}}]}]}]}, 0xbc}}, 0x0) unshare(0x2040400) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) pipe(&(0x7f0000000300)) (async) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r12, 0x0, 0x800000008ec0, 0xa) unshare(0x10000000) 2.637684736s ago: executing program 0 (id=496): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62}, {@in6=@empty, 0xffffffff, 0x32}, @in6=@dev, {}, {0x0, 0x4}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x40}}]}, 0x138}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}}, 0x0, 0x0, 0x0, 0x0}) openat$tun(0xffffff9c, &(0x7f0000000000), 0x654e00, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x4c, r3, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x30, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @initial, {0xb}}, 0x0, @random=0x3d, 0x0, @void, @void, @void, @void, @void, @void, @val={0x72, 0x6}, @void}}]}, 0x4c}}, 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x9) read$char_usb(r5, &(0x7f0000000740)=""/127, 0x7f) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r8, 0x4008ae9c, &(0x7f0000000080)={0x5, 0x5, 0x9}) mremap(&(0x7f0000041000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00004c3000/0x2000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r11 = dup3(r9, r10, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) close(r11) 2.46219852s ago: executing program 8 (id=497): r0 = openat$vimc0(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0xc0205649, &(0x7f0000000040)={0x2, 0x0, 0x2}) 2.303624331s ago: executing program 8 (id=498): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b040000000000000000020000002800048024000180090001006d6574610000000014000280080002400000001608000140000000000900010073797a30000000000900020073797a32"], 0x7c}}, 0x0) r1 = syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000440)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)='./file0/../file0\x00'}) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x1000000) syz_usb_connect(0x0, 0x2d, &(0x7f00000022c0)={{0x12, 0x1, 0x0, 0x17, 0x36, 0xe7, 0x20, 0x152d, 0x539, 0x41ab, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x0, 0x4c, 0x55, 0xde}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x66, 0x97, 0xc2}}]}}]}}, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f00000022c0)={{0x12, 0x1, 0x0, 0x17, 0x36, 0xe7, 0x20, 0x152d, 0x539, 0x41ab, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x5, 0x0, 0x4c, 0x55, 0xde}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x66, 0x97, 0xc2}}]}}]}}, 0x0) 2.094812139s ago: executing program 7 (id=423): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x24, r3, 0x209, 0x0, 0x0, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x54, 0x10, 0x401, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0xf0ff}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1, 0x200000005c831, 0xffffffffffffffff, 0x731d6000) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r4, 0x0, 0xd0, &(0x7f0000000000)=0x4, 0x4) r5 = openat$zero(0xffffff9c, &(0x7f0000000040), 0x80082, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000080)={'gretap0\x00'}) 1.906187588s ago: executing program 5 (id=499): r0 = socket$inet(0xa, 0x801, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0100000000700900f1cf00000000000042150000", @ANYRES32=0x1, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000400000004000000000000000000000000000000e860810f1b8956d52ec61f0000c2"], 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)}, 0x1c) r4 = syz_open_dev$audion(&(0x7f0000000200), 0x9, 0x101800) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0xa) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000500)={'erspan0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x8000, 0x1, 0x6, 0xd3, {{0x24, 0x4, 0x1, 0x6, 0x90, 0x67, 0x0, 0x6, 0x4, 0x0, @local, @private=0xa010101, {[@ra={0x94, 0x4, 0x1}, @generic={0x7, 0x5, "c6a6c9"}, @cipso={0x86, 0x64, 0x0, [{0x6, 0xc, "cf92563af957f9c96933"}, {0x0, 0x2}, {0x0, 0x12, "5dccef576b1d341009d2bc88619cdee1"}, {0x5, 0x7, "d4845e7bf7"}, {0x7, 0xc, "e42988dcf62eae662350"}, {0x1, 0xf, "175fb81ee219a7d19a4ef6a876"}, {0x2, 0x10, "f6d920f150623246f73ce35f2a5b"}, {0x6, 0xc, "0a74870b2d686b2d9096"}]}, @generic={0x82, 0xa, "2ad41723eda86652"}, @ra={0x94, 0x4}]}}}}}) r6 = openat$full(0xffffff9c, &(0x7f0000000540), 0x4203, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x1c, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x780, 0x0, 0x0, 0x0, 0x1ff}, [@map_val={0x18, 0x3, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xcb4, 0x0, 0x0, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000340)='GPL\x00', 0x101, 0xb1, &(0x7f0000000380)=""/177, 0x41100, 0x0, '\x00', r5, 0x25, r6, 0x8, &(0x7f0000000580)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x3, 0x7, 0xa}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffd) r7 = accept4(r0, 0x0, 0x0, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r8, 0x11, 0x67, &(0x7f0000000180)=0x207f, 0x4) setsockopt$inet6_mtu(r8, 0x29, 0x17, &(0x7f0000000100)=0x5, 0x4) sendmmsg$inet6(r8, &(0x7f0000005c80)=[{{&(0x7f0000000200)={0xa, 0x4e22, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0xb80b) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, r10, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x28040061}, 0xc040) recvmmsg(r7, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f0000000040)={0xfe, 0x9, 0x2, 0xff, 0xa7, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) 1.668531516s ago: executing program 7 (id=500): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)={0x4, 0x0, [{0x80000000, 0xfffffffe, 0x1, 0x1, 0x8e4d}, {0xa, 0xfea4, 0x80000001, 0x1, 0x3ff}, {0x40000001, 0x3, 0x3, 0x7, 0x2}, {0x80000007, 0x4, 0xb, 0x2, 0x8}]}) 1.550734247s ago: executing program 5 (id=501): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) (async) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000740)=0xa0000) (async, rerun: 64) r1 = dup(r0) (rerun: 64) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000040)={@host}) (async, rerun: 32) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) (async) r5 = socket$alg(0x26, 0x5, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x30) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) (async, rerun: 32) accept4(r5, 0x0, 0x0, 0x0) (async, rerun: 32) clock_gettime(0x0, &(0x7f0000000240)) (async) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000702, r6, &(0x7f0000000300)) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE(r7, &(0x7f0000000380)={0xe, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x0}}, 0x120) (async, rerun: 32) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8943, &(0x7f00000001c0)="a6cc04e2d8f1c38a") (rerun: 32) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) (async) capset(&(0x7f0000000340)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x5f22}) (async, rerun: 64) socket$netlink(0x10, 0x3, 0x8000000004) (async, rerun: 64) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff}, 0x0, 0x0) (async, rerun: 64) ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000040)=ANY=[@ANYBLOB="02002302230102090500000004000020", @ANYRESOCT=r2]) (rerun: 64) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000080)={0xc0, r2}, 0x0) (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0xffff7cd7, &(0x7f0000000040)=0x1) lchown(&(0x7f0000000440)='./cgroup/cgroup.procs\x00', 0x0, 0x0) 1.262669007s ago: executing program 7 (id=502): r0 = syz_open_dev$vbi(&(0x7f0000000280), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0cc5640, &(0x7f0000000100)={0x7, @win={{0x3ff, 0x0, 0x0, 0xfffffdfd}, 0x0, 0x0, 0x0, 0x0, 0x0}}) 1.205141267s ago: executing program 7 (id=503): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='(grjup\b\x00d=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/msg\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x4383, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}, {0x0}, {&(0x7f00000001c0)=""/14, 0xe}, {0x0}, {&(0x7f0000000200)=""/16, 0x10}, {&(0x7f0000000300)=""/243, 0xf3}], 0x6, 0x0, 0xfffff088) writev(0xffffffffffffffff, 0x0, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @multicast1}}, 0x24) listen(0xffffffffffffffff, 0x0) listen(0xffffffffffffffff, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) 1.1326798s ago: executing program 5 (id=504): openat$ttynull(0xffffff9c, &(0x7f0000000100), 0x650100, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r4, 0x4038ae7a, &(0x7f00000001c0)={0x2, 0x8a4, &(0x7f0000000040), 0x0}) io_uring_setup(0x35fc, &(0x7f0000000080)) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) 648.02053ms ago: executing program 6 (id=454): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) (fail_nth: 18) setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000100)={0x87}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 426.312552ms ago: executing program 8 (id=505): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000012009167000000100000040000000020", @ANYBLOB="000000000600050004000000060036"], 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a964600140600fc010000000000000000000000000000fe88000000000000000000000000000100004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907e0000549d0000216f8ef8418ad199c5b3c8023b1f643ba03cb46b5e98a59390010000002acca2e1887703df3b39202bf0f7f134f1898f83559700487d28a0af2c659c3094ae89b3e8ef3fa4a824b8425ce82dd2dcec94baff8a1f4000c9ca6fed53f3bda976903fb4323991458d9348dea1ca62483f5258a6a44eaacd6d3c0b75f05b23efb9bb7fceadfb5268177fed9837e973ac33814af93853211aa437fef1e4a1510ce829942240502f6688f748cb5f5d111fba7373984b2bc376aa2fcc9d68e47a0a1207a2c64465ea0ff083794ab9ef2ca3"], 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) recvfrom$packet(0xffffffffffffffff, &(0x7f00000000c0)=""/51, 0x33, 0x40000001, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) ioctl$TCSETA(r4, 0x5406, 0x0) 154.680619ms ago: executing program 6 (id=506): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000380)='\r', 0x1}], 0x1) 0s ago: executing program 6 (id=507): socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000edc0)={0xffffffffffffffff}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) r2 = socket$inet6(0xa, 0x3, 0x83) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x34}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1}, {}, 0x5, 0x0, 0x1}, {{@in=@remote, 0x4d4, 0x6c}, 0x2, @in6=@private2, 0x0, 0x4}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r3 = syz_open_dev$loop(&(0x7f0000000640), 0x8, 0x641) ioctl$IOC_PR_PREEMPT(r3, 0x401870cb, 0x0) sendmmsg$unix(r0, &(0x7f0000012100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f000000f2c0)=[@rights={{0x10, 0x1, 0x1, [0xffffffffffffffff]}}], 0x10, 0x80}}], 0x1, 0x24000000) kernel console output (not intermixed with test programs): 191][ T7230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.642181][ T7230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.683886][ T5151] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 155.697457][ T7320] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.709896][ T5151] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 155.719094][ T5151] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 155.722972][ T7230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.742651][ T5151] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 155.752126][ T5151] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 155.762695][ T5151] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 155.769198][ T7230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.793634][ T7230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.839824][ T7230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.851265][ T7230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.862049][ T7230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.874551][ T7230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.898864][ T79] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.906071][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.916579][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.923861][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.939077][ T7230] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.947971][ T7230] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.957096][ T7395] netlink: ct family unspecified [ 155.957389][ T7230] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.972660][ T7230] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.974573][ T7395] openvswitch: netlink: Actions may not be safe on all matching packets [ 155.998512][ T7395] netlink: ct family unspecified [ 156.003854][ T7395] openvswitch: netlink: Actions may not be safe on all matching packets [ 156.029631][ T7395] netlink: ct family unspecified [ 156.036301][ T7395] openvswitch: netlink: Actions may not be safe on all matching packets [ 156.075030][ T7395] netlink: ct family unspecified [ 156.080780][ T7395] openvswitch: netlink: Actions may not be safe on all matching packets [ 156.090420][ T7395] netlink: ct family unspecified [ 156.095521][ T7395] openvswitch: netlink: Actions may not be safe on all matching packets [ 156.311905][ T6161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.319959][ T6161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.371202][ T7320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.442212][ T7393] chnl_net:caif_netlink_parms(): no params data found [ 156.466717][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.477316][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.513825][ T7320] veth0_vlan: entered promiscuous mode [ 156.624498][ T6161] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.828606][ T6161] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.884056][ T7320] veth1_vlan: entered promiscuous mode [ 156.954936][ T7393] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.969402][ T7393] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.976928][ T7393] bridge_slave_0: entered allmulticast mode [ 157.002466][ T7393] bridge_slave_0: entered promiscuous mode [ 157.042133][ T6161] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.058961][ T8] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 157.077287][ T7393] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.088698][ T7393] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.103933][ T7393] bridge_slave_1: entered allmulticast mode [ 157.117661][ T7393] bridge_slave_1: entered promiscuous mode [ 157.175469][ T6161] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.218581][ T8] usb 9-1: Using ep0 maxpacket: 16 [ 157.238487][ T972] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 157.270324][ T8] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 157.281510][ T7393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.288380][ T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.318357][ T8] usb 9-1: Product: syz [ 157.322843][ T8] usb 9-1: Manufacturer: syz [ 157.327481][ T8] usb 9-1: SerialNumber: syz [ 157.360415][ T8] r8152-cfgselector 9-1: Unknown version 0x0000 [ 157.362333][ T7393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.376347][ T8] r8152-cfgselector 9-1: config 0 descriptor?? [ 157.411242][ T972] usb 5-1: Using ep0 maxpacket: 16 [ 157.423036][ T7320] veth0_macvtap: entered promiscuous mode [ 157.443383][ T972] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 157.464438][ T7320] veth1_macvtap: entered promiscuous mode [ 157.470490][ T972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 157.492304][ T972] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 157.517472][ T972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.537908][ T972] usb 5-1: Product: syz [ 157.562639][ T7393] team0: Port device team_slave_0 added [ 157.578808][ T972] usb 5-1: Manufacturer: syz [ 157.594329][ T7393] team0: Port device team_slave_1 added [ 157.603301][ T972] usb 5-1: SerialNumber: syz [ 157.648704][ T972] usb 5-1: config 0 descriptor?? [ 157.662200][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.677720][ T972] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 157.688201][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.700498][ T972] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 157.707789][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.721699][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.758396][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.778505][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.798374][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.818372][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.831653][ T7320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.863283][ T5151] Bluetooth: hci1: command tx timeout [ 157.953958][ T7393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.961300][ T7393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.987307][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.048860][ T7393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.065041][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.077455][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.087660][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.098552][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.109459][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.138515][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.158385][ T7320] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.178369][ T7320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.200247][ T7320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.232490][ T7393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.254476][ T7393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.278407][ T972] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 158.288126][ T972] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 158.290936][ T7393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.322576][ T7320] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.348366][ T7320] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.357226][ T7320] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.382891][ T7320] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.398367][ T6161] bridge_slave_1: left allmulticast mode [ 158.404161][ T6161] bridge_slave_1: left promiscuous mode [ 158.420020][ T6161] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.432128][ T6161] bridge_slave_0: left allmulticast mode [ 158.437925][ T6161] bridge_slave_0: left promiscuous mode [ 158.459148][ T6161] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.046793][ T6161] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 159.071524][ T6161] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 159.097732][ T6161] bond0 (unregistering): Released all slaves [ 159.103801][ T972] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 159.206276][ T7393] hsr_slave_0: entered promiscuous mode [ 159.238525][ T7393] hsr_slave_1: entered promiscuous mode [ 159.245882][ T7393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.258333][ T7393] Cannot create hsr debugfs directory [ 159.543141][ T6161] hsr_slave_0: left promiscuous mode [ 159.559621][ T6161] hsr_slave_1: left promiscuous mode [ 159.560102][ T8] r8152-cfgselector 9-1: Unknown version 0x0000 [ 159.578690][ T6161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.580657][ T8] r8152-cfgselector 9-1: bad CDC descriptors [ 159.596441][ T6161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.622688][ T8] r8152-cfgselector 9-1: USB disconnect, device number 6 [ 159.635013][ T6161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.654857][ T6161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.705084][ T6161] veth1_macvtap: left promiscuous mode [ 159.716999][ T972] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 159.724095][ T6161] veth0_macvtap: left promiscuous mode [ 159.730014][ T972] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 159.730025][ T6161] veth1_vlan: left promiscuous mode [ 159.743331][ T6161] veth0_vlan: left promiscuous mode [ 159.745709][ T972] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 159.756029][ T972] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 159.778068][ T972] usb 5-1: USB disconnect, device number 3 [ 159.938824][ T5151] Bluetooth: hci1: command tx timeout [ 160.013825][ T8] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 160.188519][ T8] usb 9-1: Using ep0 maxpacket: 32 [ 160.210740][ T8] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 160.227000][ T8] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.235773][ T8] usb 9-1: Product: syz [ 160.245818][ T8] usb 9-1: Manufacturer: syz [ 160.252040][ T8] usb 9-1: SerialNumber: syz [ 160.280196][ T8] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 160.320133][ T6161] team0 (unregistering): Port device team_slave_1 removed [ 160.385945][ T6161] team0 (unregistering): Port device team_slave_0 removed [ 161.034261][ T2986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.059660][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.067558][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.097239][ T2986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.516245][ T7424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.547632][ T7424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.678886][ T5892] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 161.858890][ T5892] usb 5-1: Using ep0 maxpacket: 16 [ 161.875903][ T5892] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 161.910188][ T5892] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 161.930783][ T5892] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 161.943200][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.953080][ T5892] usb 5-1: Product: syz [ 161.957722][ T5892] usb 5-1: Manufacturer: syz [ 161.970791][ T5892] usb 5-1: SerialNumber: syz [ 161.991431][ T5892] usb 5-1: config 0 descriptor?? [ 162.007456][ T5892] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 162.019595][ T5151] Bluetooth: hci1: command tx timeout [ 162.019608][ T5892] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 162.142790][ T2986] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.185513][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 162.197750][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 162.212278][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 162.221239][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 162.237593][ T5846] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 162.245730][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 162.364394][ T2986] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.449372][ T2986] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.469636][ T5892] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 162.500857][ T5892] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 162.531198][ T5892] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 162.554393][ T5892] em28xx 5-1:0.0: No AC97 audio processor [ 162.580612][ T2986] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.665555][ T7393] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 162.766959][ T7393] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 162.799207][ T8] gspca_stk1135: reg_w 0x300 err -71 [ 162.806123][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 162.822284][ T8] gspca_stk1135: Sensor write failed [ 162.829457][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 162.835006][ T7393] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 162.846789][ T8] gspca_stk1135: Sensor write failed [ 162.852857][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 162.863529][ T8] gspca_stk1135: Sensor read failed [ 162.883545][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 162.905189][ T8] gspca_stk1135: Sensor read failed [ 162.916171][ T8] gspca_stk1135: Detected sensor type unknown (0x0) [ 162.924448][ T7393] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 162.938361][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 162.944757][ T8] gspca_stk1135: Sensor read failed [ 162.956113][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 162.966843][ T7445] chnl_net:caif_netlink_parms(): no params data found [ 162.983053][ T8] gspca_stk1135: Sensor read failed [ 162.994925][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 163.004063][ T8] gspca_stk1135: Sensor write failed [ 163.024994][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 163.051248][ T8] gspca_stk1135: Sensor write failed [ 163.056656][ T8] stk1135 9-1:64.0: probe with driver stk1135 failed with error -71 [ 163.087476][ T8] usb 9-1: USB disconnect, device number 7 [ 163.102559][ T7462] syz.1.338: vmalloc error: size 8192, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 163.163587][ T7462] CPU: 0 UID: 0 PID: 7462 Comm: syz.1.338 Not tainted 6.12.0-rc6-syzkaller #0 [ 163.172514][ T7462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 163.182582][ T7462] Call Trace: [ 163.185881][ T7462] [ 163.188828][ T7462] dump_stack_lvl+0x241/0x360 [ 163.193524][ T7462] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.198731][ T7462] ? __pfx__printk+0x10/0x10 [ 163.203353][ T7462] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 163.209826][ T7462] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 163.216391][ T7462] warn_alloc+0x278/0x410 [ 163.220788][ T7462] ? __vmalloc_node_range_noprof+0xecb/0x13f0 [ 163.226925][ T7462] ? __pfx_warn_alloc+0x10/0x10 [ 163.231814][ T7462] ? alloc_pages_mpol_noprof+0x417/0x680 [ 163.237496][ T7462] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 163.243519][ T7462] ? rcu_is_watching+0x15/0xb0 [ 163.248318][ T7462] ? trace_kmalloc+0x1f/0xd0 [ 163.252938][ T7462] ? __vmalloc_node_range_noprof+0x5c3/0x13f0 [ 163.259058][ T7462] ? alloc_pages_noprof+0xef/0x170 [ 163.264237][ T7462] __vmalloc_node_range_noprof+0x10f3/0x13f0 [ 163.270296][ T7462] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 163.276676][ T7462] ? dup_task_struct+0x57/0x8c0 [ 163.281578][ T7462] ? rcu_is_watching+0x15/0xb0 [ 163.286386][ T7462] ? arch_dup_task_struct+0x44/0xa0 [ 163.291639][ T7462] dup_task_struct+0x444/0x8c0 [ 163.296531][ T7462] ? copy_process+0x5d1/0x3d50 [ 163.301369][ T7462] ? _raw_spin_unlock_irq+0x23/0x50 [ 163.306612][ T7462] copy_process+0x5d1/0x3d50 [ 163.311270][ T7462] ? get_pid_task+0x23/0x1f0 [ 163.315912][ T7462] ? __pfx_lock_release+0x10/0x10 [ 163.321011][ T7462] ? kstrtouint_from_user+0x128/0x190 [ 163.326440][ T7462] ? __pfx_copy_process+0x10/0x10 [ 163.331527][ T7462] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 163.337456][ T7462] kernel_clone+0x226/0x8f0 [ 163.342004][ T7462] ? __pfx_kernel_clone+0x10/0x10 [ 163.347090][ T7462] __ia32_compat_sys_ia32_clone+0x255/0x2a0 [ 163.353077][ T7462] ? __pfx___ia32_compat_sys_ia32_clone+0x10/0x10 [ 163.359565][ T7462] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 163.366197][ T7462] ? lockdep_hardirqs_on+0x99/0x150 [ 163.371417][ T7462] __do_fast_syscall_32+0xb4/0x110 [ 163.376543][ T7462] ? exc_page_fault+0x590/0x8c0 [ 163.381407][ T7462] do_fast_syscall_32+0x34/0x80 [ 163.386275][ T7462] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 163.392619][ T7462] RIP: 0023:0xf7fa4579 [ 163.396693][ T7462] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 163.416586][ T7462] RSP: 002b:00000000f570550c EFLAGS: 00000206 ORIG_RAX: 0000000000000078 [ 163.425020][ T7462] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 163.433003][ T7462] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 163.440983][ T7462] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 163.448959][ T7462] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 163.456938][ T7462] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 163.464948][ T7462] [ 163.477908][ T2986] bridge_slave_1: left allmulticast mode [ 163.490575][ T2986] bridge_slave_1: left promiscuous mode [ 163.503426][ T7462] Mem-Info: [ 163.508529][ T2986] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.513875][ T7462] active_anon:6025 inactive_anon:0 isolated_anon:0 [ 163.513875][ T7462] active_file:11165 inactive_file:38232 isolated_file:0 [ 163.513875][ T7462] unevictable:768 dirty:153 writeback:0 [ 163.513875][ T7462] slab_reclaimable:10854 slab_unreclaimable:99235 [ 163.513875][ T7462] mapped:21677 shmem:1472 pagetables:860 [ 163.513875][ T7462] sec_pagetables:0 bounce:0 [ 163.513875][ T7462] kernel_misc_reclaimable:0 [ 163.513875][ T7462] free:1339218 free_pcp:487 free_cma:0 [ 163.554827][ T7468] program syz.8.339 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.562539][ T7462] Node 0 active_anon:24000kB inactive_anon:0kB active_file:44660kB inactive_file:152856kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:86808kB dirty:608kB writeback:0kB shmem:4352kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11772kB pagetables:3440kB sec_pagetables:0kB all_unreclaimable? no [ 163.604093][ T7462] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 163.604843][ T2986] bridge_slave_0: left allmulticast mode [ 163.634268][ C1] vkms_vblank_simulate: vblank timer overrun [ 163.652069][ T7462] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 163.665256][ T2986] bridge_slave_0: left promiscuous mode [ 163.687632][ T7462] lowmem_reserve[]: 0 2463 2464 0 0 [ 163.693084][ T7462] Node 0 DMA32 free:1433216kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:23864kB inactive_anon:0kB active_file:44660kB inactive_file:152296kB unevictable:1536kB writepending:604kB present:3129332kB managed:2550460kB mlocked:0kB bounce:0kB free_pcp:1892kB local_pcp:1532kB free_cma:0kB [ 163.699992][ T2986] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.723447][ C1] vkms_vblank_simulate: vblank timer overrun [ 163.740994][ T7462] lowmem_reserve[]: 0 0 0 0 0 [ 163.745878][ T7462] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:560kB unevictable:0kB writepending:4kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 163.775140][ T7462] lowmem_reserve[]: 0 0 0 0 0 [ 163.786667][ T7462] Node 1 Normal free:3909060kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 163.852411][ T7462] lowmem_reserve[]: 0 0 0 0 0 [ 163.861994][ T7462] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 163.875143][ T7462] Node 0 DMA32: 149*4kB (UM) 514*8kB (UME) 361*16kB (ME) 339*32kB (UME) 323*64kB (UME) 46*128kB (UME) 11*256kB (M) 14*512kB (UM) 11*1024kB (UME) 6*2048kB (UME) 330*4096kB (UM) = 1433108kB [ 163.890500][ T5903] usb 5-1: USB disconnect, device number 4 [ 163.894140][ T7462] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 163.912554][ T5903] em28xx 5-1:0.0: Disconnecting em28xx [ 163.954232][ T5903] em28xx 5-1:0.0: Freeing device [ 163.955829][ T7462] Node 1 Normal: 211*4kB (UME) 45*8kB (UME) 44*16kB (UME) 207*32kB (UME) 96*64kB (UME) 29*128kB (UME) 14*256kB (UME) 4*512kB (UM) 4*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3909076kB [ 163.996574][ T7462] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 164.006888][ T7462] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 164.030153][ T7462] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 164.047856][ T7462] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 164.070360][ T7462] 50824 total pagecache pages [ 164.075251][ T7462] 0 pages in swap cache [ 164.084842][ T7462] Free swap = 124416kB [ 164.089384][ T5898] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 164.100693][ T5151] Bluetooth: hci1: command tx timeout [ 164.110173][ T7462] Total swap = 124996kB [ 164.114479][ T7462] 2097051 pages RAM [ 164.125058][ T7462] 0 pages HighMem/MovableOnly [ 164.132674][ T7462] 427650 pages reserved [ 164.137067][ T7462] 0 pages cma reserved [ 164.282696][ T5898] usb 9-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 164.291981][ T5898] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.302829][ T5898] usb 9-1: config 0 descriptor?? [ 164.317255][ T5898] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 164.351864][ T5151] Bluetooth: hci0: command tx timeout [ 164.383920][ T2986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.401950][ T2986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.413034][ T2986] bond0 (unregistering): Released all slaves [ 164.480382][ T7445] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.488209][ T7445] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.495694][ T7445] bridge_slave_0: entered allmulticast mode [ 164.518757][ T7445] bridge_slave_0: entered promiscuous mode [ 164.613058][ T7445] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.626853][ T7445] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.636233][ T7445] bridge_slave_1: entered allmulticast mode [ 164.651079][ T7445] bridge_slave_1: entered promiscuous mode [ 164.864207][ T7445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.908106][ T7445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.006728][ T7491] netlink: 'syz.4.343': attribute type 9 has an invalid length. [ 165.029836][ T7491] netlink: 134660 bytes leftover after parsing attributes in process `syz.4.343'. [ 165.100797][ T2986] hsr_slave_0: left promiscuous mode [ 165.133284][ T2986] hsr_slave_1: left promiscuous mode [ 165.172702][ T2986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.186869][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.200402][ T2986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.218174][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.269721][ T2986] veth1_macvtap: left promiscuous mode [ 165.275680][ T2986] veth0_macvtap: left promiscuous mode [ 165.288572][ T2986] veth1_vlan: left promiscuous mode [ 165.298970][ T5896] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 165.316947][ T2986] veth0_vlan: left promiscuous mode [ 165.480090][ T5896] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 165.503776][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.521875][ T5896] usb 5-1: Product: syz [ 165.526195][ T5896] usb 5-1: Manufacturer: syz [ 165.535363][ T5896] usb 5-1: SerialNumber: syz [ 165.555432][ T5896] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 165.590095][ T7471] net_ratelimit: 56 callbacks suppressed [ 165.590117][ T7471] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 165.624921][ T5892] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 166.180577][ T8] usb 5-1: USB disconnect, device number 5 [ 166.419058][ T5151] Bluetooth: hci0: command tx timeout [ 166.448646][ T2986] team0 (unregistering): Port device team_slave_1 removed [ 166.544611][ T2986] team0 (unregistering): Port device team_slave_0 removed [ 166.658431][ T5892] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 166.667469][ T5892] ath9k_htc: Failed to initialize the device [ 166.688462][ T8] usb 5-1: ath9k_htc: USB layer deinitialized [ 166.923862][ T7533] netlink: 'syz.4.347': attribute type 2 has an invalid length. [ 167.176026][ T7445] team0: Port device team_slave_0 added [ 167.200456][ T5898] gspca_stv06xx: I2C: Read error writing address: -71 [ 167.208381][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 167.228015][ T5898] usb 9-1: USB disconnect, device number 8 [ 167.326034][ T7445] team0: Port device team_slave_1 added [ 167.389939][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 167.412500][ T25] usb 5-1: New USB device found, idVendor=05d1, idProduct=2002, bcdDevice= 7.00 [ 167.432706][ T25] usb 5-1: New USB device strings: Mfr=51, Product=2, SerialNumber=3 [ 167.446540][ T25] usb 5-1: Product: syz [ 167.468691][ T25] usb 5-1: Manufacturer: syz [ 167.473927][ T7445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.488728][ T25] usb 5-1: SerialNumber: syz [ 167.497522][ T7445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.523694][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.537877][ T25] usb 5-1: config 0 descriptor?? [ 167.550364][ T7445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.563662][ T25] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 167.574827][ T25] usb 5-1: Detected FT2232H [ 167.619446][ T7445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.637522][ T7445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.695585][ T7445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.718369][ T5895] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 167.792531][ T7393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.864452][ T7445] hsr_slave_0: entered promiscuous mode [ 167.889443][ T5895] usb 9-1: Using ep0 maxpacket: 32 [ 167.895374][ T7445] hsr_slave_1: entered promiscuous mode [ 167.908594][ T5895] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 167.917445][ T5895] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 167.945689][ T5895] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 167.970457][ T5895] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 168.004148][ T5895] usb 9-1: config 0 interface 0 has no altsetting 0 [ 168.017488][ T5895] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 168.044704][ T5895] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 168.053294][ T5895] usb 9-1: Product: syz [ 168.057529][ T5895] usb 9-1: Manufacturer: syz [ 168.062505][ T5895] usb 9-1: SerialNumber: syz [ 168.077149][ T5895] usb 9-1: config 0 descriptor?? [ 168.089820][ T5895] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 168.103215][ T5895] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 168.141901][ T7393] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.236572][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.243768][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.292261][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.299512][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.498384][ T5151] Bluetooth: hci0: command tx timeout [ 168.674945][ T7563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.676049][ T7393] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.705002][ T7563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.865724][ T7393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.081295][ T7393] veth0_vlan: entered promiscuous mode [ 169.116298][ T7393] veth1_vlan: entered promiscuous mode [ 169.182639][ T7393] veth0_macvtap: entered promiscuous mode [ 169.190277][ T7445] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 169.207174][ T7393] veth1_macvtap: entered promiscuous mode [ 169.214778][ T7445] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 169.242817][ T7445] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 169.264965][ T7445] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 169.345031][ T7393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.361138][ T7393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.375762][ T7393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.406654][ T7393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.423813][ T7393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.434945][ T7393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.453100][ T7393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.478108][ T7393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.495685][ T7393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.515270][ T7393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.526308][ T7393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.544666][ T7393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.556864][ T7393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.575562][ T7393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.645598][ T7393] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.671520][ T7393] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.698104][ T7393] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.744606][ T7393] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.822851][ T7587] FAULT_INJECTION: forcing a failure. [ 169.822851][ T7587] name failslab, interval 1, probability 0, space 0, times 0 [ 169.868567][ T7587] CPU: 0 UID: 0 PID: 7587 Comm: syz.1.353 Not tainted 6.12.0-rc6-syzkaller #0 [ 169.877211][ T25] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 169.877465][ T7587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 169.894337][ T7587] Call Trace: [ 169.897634][ T7587] [ 169.898332][ T25] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 169.900564][ T7587] dump_stack_lvl+0x241/0x360 [ 169.900604][ T7587] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.917378][ T7587] ? __pfx__printk+0x10/0x10 [ 169.922035][ T7587] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 169.927622][ T7587] ? __pfx___might_resched+0x10/0x10 [ 169.930149][ T25] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 169.932934][ T7587] should_fail_ex+0x3b0/0x4e0 [ 169.945635][ T7587] ? ptlock_alloc+0x20/0x70 [ 169.950176][ T7587] should_failslab+0xac/0x100 [ 169.954907][ T7587] ? ptlock_alloc+0x20/0x70 [ 169.959465][ T7587] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 169.964906][ T7587] ptlock_alloc+0x20/0x70 [ 169.969279][ T7587] pte_alloc_one+0xd3/0x610 [ 169.971410][ T25] usb 5-1: USB disconnect, device number 6 [ 169.973827][ T7587] ? __pfx_pte_alloc_one+0x10/0x10 [ 169.984801][ T7587] ? rcu_is_watching+0x15/0xb0 [ 169.989621][ T7587] ? __alloc_pages_noprof+0x354/0x710 [ 169.990214][ T25] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 169.995020][ T7587] __pte_alloc+0x79/0x3c0 [ 170.008757][ T7587] ? __pfx___pte_alloc+0x10/0x10 [ 170.013741][ T7587] ? walk_to_pmd+0x19b/0x240 [ 170.016468][ T25] ftdi_sio 5-1:0.0: device disconnected [ 170.018364][ T7587] vm_insert_page+0x5fa/0x710 [ 170.018422][ T7587] ? __pfx_vm_insert_page+0x10/0x10 [ 170.018459][ T7587] ? alloc_pages_noprof+0xef/0x170 [ 170.039092][ T7587] binder_alloc_new_buf+0x1d86/0x2920 [ 170.044548][ T7587] binder_transaction+0x255c/0x7590 [ 170.049825][ T7587] ? __lock_acquire+0x1384/0x2050 [ 170.054915][ T7587] ? __pfx_binder_transaction+0x10/0x10 [ 170.060529][ T7587] ? __pfx___might_resched+0x10/0x10 [ 170.065863][ T7587] ? __might_fault+0xaa/0x120 [ 170.070759][ T7587] ? __pfx_lock_release+0x10/0x10 [ 170.075833][ T7587] ? __might_fault+0xc6/0x120 [ 170.080563][ T7587] binder_ioctl_write_read+0x1040/0xb560 [ 170.086271][ T7587] ? is_bpf_text_address+0x26/0x2a0 [ 170.091551][ T7587] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 170.097748][ T7587] ? kernel_text_address+0xa7/0xe0 [ 170.102917][ T7587] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 170.108936][ T7587] ? stack_trace_save+0x118/0x1d0 [ 170.114002][ T7587] ? mark_lock+0x9a/0x360 [ 170.118388][ T7587] ? __lock_acquire+0x1384/0x2050 [ 170.123428][ T7587] ? tomoyo_path_number_perm+0x68d/0x880 [ 170.129233][ T7587] ? binder_get_thread+0x16e/0x6c0 [ 170.134382][ T7587] ? __pfx_lock_release+0x10/0x10 [ 170.139426][ T7587] ? do_raw_spin_unlock+0x13c/0x8b0 [ 170.144643][ T7587] ? _raw_spin_unlock+0x28/0x50 [ 170.149511][ T7587] ? binder_get_thread+0x178/0x6c0 [ 170.154641][ T7587] binder_ioctl+0x436/0x1cc0 [ 170.159249][ T7587] ? tomoyo_path_number_perm+0x71a/0x880 [ 170.164911][ T7587] ? __pfx_binder_ioctl+0x10/0x10 [ 170.169984][ T7587] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 170.176027][ T7587] ? __pfx_lock_acquire+0x10/0x10 [ 170.181118][ T7587] ? __fget_files+0x29/0x470 [ 170.185771][ T7587] ? __fget_files+0x3f3/0x470 [ 170.190482][ T7587] __se_compat_sys_ioctl+0x510/0xc90 [ 170.195892][ T7587] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 170.201729][ T7587] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 170.207732][ T7587] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 170.214083][ T7587] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 170.220715][ T7587] ? lockdep_hardirqs_on+0x99/0x150 [ 170.225936][ T7587] __do_fast_syscall_32+0xb4/0x110 [ 170.231084][ T7587] ? exc_page_fault+0x590/0x8c0 [ 170.235970][ T7587] do_fast_syscall_32+0x34/0x80 [ 170.240834][ T7587] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 170.247182][ T7587] RIP: 0023:0xf7fa4579 [ 170.251256][ T7587] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 170.270870][ T7587] RSP: 002b:00000000f572655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 170.279307][ T7587] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c0306201 [ 170.287316][ T7587] RDX: 00000000200001c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 170.295320][ T7587] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 170.303334][ T7587] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 170.311327][ T7587] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 170.319316][ T7587] [ 170.329343][ T7587] binder_alloc: 7585: binder_install_single_page failed to insert page at offset 0 with -12 [ 170.355136][ T7591] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.362580][ T7591] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.493642][ T7445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.531572][ T7595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.356'. [ 170.553954][ T5892] usb 9-1: USB disconnect, device number 9 [ 170.556896][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.571585][ T5892] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 170.579141][ T5151] Bluetooth: hci0: command tx timeout [ 170.606780][ T7445] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.648684][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.738823][ T7603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.356'. [ 170.773836][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.773933][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.775190][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.775231][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.814840][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.814907][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.170354][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.193102][ T5898] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 171.244703][ T7445] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 171.263238][ T7445] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 171.263925][ T5903] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 171.322508][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.361215][ T5898] usb 5-1: Using ep0 maxpacket: 32 [ 171.385815][ T5898] usb 5-1: config 0 has no interfaces? [ 171.400798][ T5898] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 171.436479][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.450714][ T5903] usb 4-1: Using ep0 maxpacket: 32 [ 171.461581][ T5903] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 171.474381][ T5898] usb 5-1: config 0 descriptor?? [ 171.481792][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.483180][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.505377][ T5903] usb 4-1: Product: syz [ 171.516546][ T5903] usb 4-1: Manufacturer: syz [ 171.535883][ T5903] usb 4-1: SerialNumber: syz [ 171.567429][ T5903] usb 4-1: config 0 descriptor?? [ 171.583642][ T7445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.602482][ T5903] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 171.661703][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.725516][ T7608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.769707][ T7608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.783202][ T25] usb 5-1: USB disconnect, device number 7 [ 171.878934][ T7445] veth0_vlan: entered promiscuous mode [ 171.894500][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 171.904842][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 171.913571][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 171.922104][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 171.933249][ T5846] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 171.941477][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 172.076802][ T5903] gspca_ov534_9: reg_w failed -71 [ 172.090098][ T52] bridge_slave_1: left allmulticast mode [ 172.124144][ T52] bridge_slave_1: left promiscuous mode [ 172.151122][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.173589][ T52] bridge_slave_0: left allmulticast mode [ 172.185868][ T52] bridge_slave_0: left promiscuous mode [ 172.200576][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.228639][ T5898] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 172.388503][ T5903] gspca_ov534_9: Unknown sensor 0000 [ 172.388605][ T5903] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 172.390613][ T5903] usb 4-1: USB disconnect, device number 4 [ 172.402083][ T5898] usb 5-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.00 [ 172.402122][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.404439][ T5898] usb 5-1: config 0 descriptor?? [ 172.628210][ T5898] usbhid 5-1:0.0: can't add hid device: -71 [ 172.634546][ T5898] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 172.728445][ T5903] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 172.755129][ T5898] usb 5-1: USB disconnect, device number 8 [ 172.900640][ T5903] usb 4-1: Using ep0 maxpacket: 32 [ 172.929186][ T5903] usb 4-1: config 1 interface 0 has no altsetting 0 [ 172.941838][ T5903] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.40 [ 172.974636][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.988320][ T5903] usb 4-1: Product: syz [ 172.992640][ T5903] usb 4-1: Manufacturer: syz [ 173.011676][ T5903] usb 4-1: SerialNumber: syz [ 173.249542][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 173.281636][ T7663] input: syz0 as /devices/virtual/input/input12 [ 173.315545][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 173.366260][ T52] bond0 (unregistering): Released all slaves [ 173.396663][ T5903] usbhid 4-1:1.0: can't add hid device: -71 [ 173.410173][ T5903] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 173.455865][ T5903] usb 4-1: USB disconnect, device number 5 [ 173.531598][ T7445] veth1_vlan: entered promiscuous mode [ 173.698574][ T5896] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 173.759143][ T7445] veth0_macvtap: entered promiscuous mode [ 173.772558][ T7445] veth1_macvtap: entered promiscuous mode [ 173.836130][ T7677] FAULT_INJECTION: forcing a failure. [ 173.836130][ T7677] name failslab, interval 1, probability 0, space 0, times 0 [ 173.851238][ T7677] CPU: 0 UID: 0 PID: 7677 Comm: syz.4.368 Not tainted 6.12.0-rc6-syzkaller #0 [ 173.860154][ T7677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 173.870255][ T7677] Call Trace: [ 173.873575][ T7677] [ 173.876553][ T7677] dump_stack_lvl+0x241/0x360 [ 173.881283][ T7677] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.886539][ T7677] ? __pfx__printk+0x10/0x10 [ 173.891171][ T7677] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 173.896763][ T7677] ? __pfx___might_resched+0x10/0x10 [ 173.902119][ T7677] should_fail_ex+0x3b0/0x4e0 [ 173.906839][ T7677] ? mas_alloc_nodes+0x26c/0x840 [ 173.911799][ T7677] should_failslab+0xac/0x100 [ 173.916497][ T7677] ? mas_alloc_nodes+0x26c/0x840 [ 173.921449][ T7677] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 173.926849][ T7677] mas_alloc_nodes+0x26c/0x840 [ 173.931635][ T7677] mas_preallocate+0x554/0x8c0 [ 173.936432][ T7677] ? __pfx_mas_preallocate+0x10/0x10 [ 173.941728][ T7677] ? __mas_set_range+0x133/0x3c0 [ 173.946678][ T7677] __split_vma+0x302/0xc50 [ 173.951106][ T7677] ? __pfx_queue_folios_pte_range+0x10/0x10 [ 173.957018][ T7677] ? __pfx___split_vma+0x10/0x10 [ 173.961971][ T7677] vma_modify+0x141c/0x1a80 [ 173.966497][ T7677] ? __pfx_vma_modify+0x10/0x10 [ 173.971381][ T7677] vma_modify_policy+0x3a2/0x430 [ 173.976436][ T7677] ? __pfx_vma_modify_policy+0x10/0x10 [ 173.981960][ T7677] mbind_range+0x2cf/0x830 [ 173.986392][ T7677] ? mas_find+0x950/0xbb0 [ 173.990739][ T7677] __se_sys_mbind+0xbf8/0x19d0 [ 173.995541][ T7677] ? __pfx___se_sys_mbind+0x10/0x10 [ 174.000753][ T7677] ? __mutex_unlock_slowpath+0x21d/0x750 [ 174.006409][ T7677] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 174.012405][ T7677] ? __fget_files+0x3f3/0x470 [ 174.017125][ T7677] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 174.023723][ T7677] ? __ia32_sys_mbind+0x21/0xf0 [ 174.028588][ T7677] __do_fast_syscall_32+0xb4/0x110 [ 174.033712][ T7677] ? exc_page_fault+0x590/0x8c0 [ 174.038572][ T7677] do_fast_syscall_32+0x34/0x80 [ 174.043434][ T7677] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.049783][ T7677] RIP: 0023:0xf740d579 [ 174.053866][ T7677] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 174.073493][ T7677] RSP: 002b:00000000f56f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000112 [ 174.081920][ T7677] RAX: ffffffffffffffda RBX: 0000000020161000 RCX: 0000000000004000 [ 174.089902][ T7677] RDX: 0000000000000006 RSI: 0000000020000080 RDI: 000000000000000a [ 174.097894][ T7677] RBP: 0000000000000003 R08: 0000000000000000 R09: 0000000000000000 [ 174.105895][ T7677] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 174.113888][ T7677] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 174.121922][ T7677] [ 174.135843][ T5846] Bluetooth: hci3: command tx timeout [ 174.236779][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.331723][ T5896] usb 9-1: config 8 has an invalid interface number: 177 but max is 0 [ 174.340422][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.340576][ T5896] usb 9-1: config 8 has an invalid descriptor of length 10, skipping remainder of the config [ 174.360897][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.394284][ T5896] usb 9-1: config 8 has no interface number 0 [ 174.400736][ T5896] usb 9-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 174.405787][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.411963][ T5896] usb 9-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 174.438809][ T5896] usb 9-1: config 8 interface 177 has no altsetting 0 [ 174.445662][ T5896] usb 9-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 174.454366][ T7687] netlink: 112 bytes leftover after parsing attributes in process `syz.4.370'. [ 174.454893][ T5896] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.469702][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.515461][ T7660] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 174.516830][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.546987][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.560849][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.572995][ T7445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.623766][ T52] hsr_slave_0: left promiscuous mode [ 174.637844][ T52] hsr_slave_1: left promiscuous mode [ 174.665845][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.685849][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.696867][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.716227][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.728469][ T8] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 174.767149][ T7697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.777699][ T7697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.787752][ T5896] usb 9-1: string descriptor 0 read error: -71 [ 174.802527][ T52] veth1_macvtap: left promiscuous mode [ 174.802941][ T5896] ir_toy 9-1:8.177: required endpoints not found [ 174.808079][ T52] veth0_macvtap: left promiscuous mode [ 174.850291][ T5896] usb 9-1: USB disconnect, device number 10 [ 174.861649][ T52] veth1_vlan: left promiscuous mode [ 174.867041][ T52] veth0_vlan: left promiscuous mode [ 174.874094][ T8] usb 5-1: device descriptor read/64, error -71 [ 175.128479][ T8] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 175.288441][ T8] usb 5-1: device descriptor read/64, error -71 [ 175.406351][ T8] usb usb5-port1: attempt power cycle [ 175.768348][ T8] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 175.851384][ T8] usb 5-1: device descriptor read/8, error -71 [ 175.899582][ T7736] sctp: [Deprecated]: syz.8.377 (pid 7736) Use of int in maxseg socket option. [ 175.899582][ T7736] Use struct sctp_assoc_value instead [ 175.966671][ T52] team0 (unregistering): Port device team_slave_1 removed [ 176.015438][ T52] team0 (unregistering): Port device team_slave_0 removed [ 176.100728][ T8] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 176.135330][ T8] usb 5-1: device descriptor read/8, error -71 [ 176.169924][ T5896] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 176.185640][ T5846] Bluetooth: hci3: command tx timeout [ 176.256911][ T8] usb usb5-port1: unable to enumerate USB device [ 176.328469][ T5896] usb 9-1: Using ep0 maxpacket: 32 [ 176.341563][ T5896] usb 9-1: config 0 has an invalid interface number: 37 but max is 1 [ 176.352920][ T5896] usb 9-1: config 0 has no interface number 1 [ 176.364809][ T5896] usb 9-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 176.375018][ T5896] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.383449][ T5896] usb 9-1: Product: syz [ 176.387841][ T5896] usb 9-1: Manufacturer: syz [ 176.394589][ T5896] usb 9-1: SerialNumber: syz [ 176.407114][ T5896] usb 9-1: config 0 descriptor?? [ 176.421945][ T5896] qmi_wwan 9-1:0.37: probe with driver qmi_wwan failed with error -22 [ 176.529921][ T7634] chnl_net:caif_netlink_parms(): no params data found [ 176.545535][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.556269][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.567400][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.578858][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.589146][ T7445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.600149][ T7445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.612745][ T7445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.622412][ T5896] usb 9-1: USB disconnect, device number 11 [ 176.687916][ T7445] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.697314][ T7445] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.706528][ T7445] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.716073][ T7445] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.871437][ T7634] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.892168][ T7634] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.900306][ T7634] bridge_slave_0: entered allmulticast mode [ 176.907807][ T7634] bridge_slave_0: entered promiscuous mode [ 176.922766][ T7634] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.946119][ T7634] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.963831][ T7634] bridge_slave_1: entered allmulticast mode [ 176.974046][ T7634] bridge_slave_1: entered promiscuous mode [ 177.039225][ T7634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.092928][ T7634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.119672][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.148553][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.324723][ T7761] netlink: 28 bytes leftover after parsing attributes in process `syz.3.378'. [ 177.352297][ T7761] netlink: 28 bytes leftover after parsing attributes in process `syz.3.378'. [ 177.362460][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.373595][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.385863][ T7634] team0: Port device team_slave_0 added [ 177.415188][ T7767] warning: `syz.3.378' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 177.677291][ T7634] team0: Port device team_slave_1 added [ 177.860687][ T7634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.871882][ T7634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.926988][ T7788] netlink: 16 bytes leftover after parsing attributes in process `syz.5.384'. [ 177.935802][ T7634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.949744][ T5897] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 177.958839][ T5896] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 177.971781][ T7634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.984668][ T7634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.011684][ T7634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.110020][ T5897] usb 4-1: Using ep0 maxpacket: 16 [ 178.132139][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.148317][ T5896] usb 5-1: Using ep0 maxpacket: 16 [ 178.165499][ T5897] usb 4-1: New USB device found, idVendor=05ac, idProduct=0237, bcdDevice= 0.00 [ 178.177256][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.204015][ T5897] usb 4-1: config 0 descriptor?? [ 178.224921][ T7634] hsr_slave_0: entered promiscuous mode [ 178.233003][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.244305][ T5896] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.254260][ T5896] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 178.267443][ T5896] usb 5-1: New USB device found, idVendor=056a, idProduct=0022, bcdDevice= 0.00 [ 178.276710][ T5896] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.286451][ T5846] Bluetooth: hci3: command tx timeout [ 178.290129][ T5897] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13 [ 178.302509][ T7634] hsr_slave_1: entered promiscuous mode [ 178.314516][ T5896] usb 5-1: config 0 descriptor?? [ 178.321127][ T7634] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.329711][ T7634] Cannot create hsr debugfs directory [ 178.490645][ T25] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 178.701858][ T25] usb 9-1: config 0 has an invalid interface number: 3 but max is 0 [ 178.710294][ T25] usb 9-1: config 0 has no interface number 0 [ 178.716524][ T25] usb 9-1: config 0 interface 3 has no altsetting 0 [ 178.757147][ T25] usb 9-1: New USB device found, idVendor=9e2c, idProduct=2342, bcdDevice=91.b8 [ 178.778310][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.793727][ T5896] hid (null): nested delimiters [ 178.797697][ T25] usb 9-1: Product: syz [ 178.802163][ T5896] wacom 0003:056A:0022.0005: nested delimiters [ 178.804959][ T25] usb 9-1: Manufacturer: syz [ 178.833491][ T25] usb 9-1: SerialNumber: syz [ 178.833596][ T5896] wacom 0003:056A:0022.0005: item 0 1 2 10 parsing failed [ 178.857018][ T25] usb 9-1: config 0 descriptor?? [ 178.876148][ T25] usb-storage 9-1:0.3: USB Mass Storage device detected [ 178.938763][ T5896] wacom 0003:056A:0022.0005: parse failed [ 178.944740][ T5896] wacom 0003:056A:0022.0005: probe with driver wacom failed with error -22 [ 179.012840][ T7819] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.043349][ T7819] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.080415][ T5896] usb 5-1: USB disconnect, device number 13 [ 179.125817][ T7798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.156889][ T7798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.176986][ T7634] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 179.210188][ T8] usb 9-1: USB disconnect, device number 12 [ 179.235433][ T7634] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 179.275911][ T7634] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 179.294697][ T7634] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 179.547139][ T7634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.575294][ T7634] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.595301][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.602611][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.693744][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.701053][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.890804][ T7634] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 179.966554][ T7853] FAULT_INJECTION: forcing a failure. [ 179.966554][ T7853] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.979949][ T7853] CPU: 1 UID: 0 PID: 7853 Comm: syz.4.398 Not tainted 6.12.0-rc6-syzkaller #0 [ 179.988861][ T7853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 179.998949][ T7853] Call Trace: [ 180.002245][ T7853] [ 180.005190][ T7853] dump_stack_lvl+0x241/0x360 [ 180.009901][ T7853] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.015144][ T7853] ? __pfx__printk+0x10/0x10 [ 180.019789][ T7853] ? snprintf+0xda/0x120 [ 180.024056][ T7853] should_fail_ex+0x3b0/0x4e0 [ 180.028751][ T7853] _copy_to_user+0x31/0xb0 [ 180.033190][ T7853] simple_read_from_buffer+0xca/0x150 [ 180.038600][ T7853] proc_fail_nth_read+0x1e9/0x250 [ 180.043666][ T7853] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.049248][ T7853] ? rw_verify_area+0x55e/0x6f0 [ 180.054120][ T7853] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 180.059694][ T7853] vfs_read+0x1fc/0xb70 [ 180.063920][ T7853] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 180.069825][ T7853] ? sock_common_setsockopt+0x37/0xc0 [ 180.075231][ T7853] ? __pfx_vfs_read+0x10/0x10 [ 180.079927][ T7853] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 180.085831][ T7853] ? do_sock_setsockopt+0x3e2/0x720 [ 180.091061][ T7853] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 180.096626][ T7853] ? fdget_pos+0x265/0x320 [ 180.101079][ T7853] ksys_read+0x183/0x2b0 [ 180.105336][ T7853] ? __pfx_ksys_read+0x10/0x10 [ 180.110112][ T7853] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 180.116726][ T7853] ? lockdep_hardirqs_on+0x99/0x150 [ 180.121942][ T7853] __do_fast_syscall_32+0xb4/0x110 [ 180.127074][ T7853] ? exc_page_fault+0x590/0x8c0 [ 180.131942][ T7853] do_fast_syscall_32+0x34/0x80 [ 180.136822][ T7853] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 180.143173][ T7853] RIP: 0023:0xf740d579 [ 180.147253][ T7853] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 180.167078][ T7853] RSP: 002b:00000000f56f6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003 [ 180.175535][ T7853] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f56f6620 [ 180.183605][ T7853] RDX: 000000000000000f RSI: 00000000f73fcff4 RDI: 0000000000000000 [ 180.191584][ T7853] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 180.199575][ T7853] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 180.207556][ T7853] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 180.215556][ T7853] [ 180.218623][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.246010][ T7634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.289024][ T7846] delete_channel: no stack [ 180.317557][ T7634] veth0_vlan: entered promiscuous mode [ 180.336372][ T7634] veth1_vlan: entered promiscuous mode [ 180.349140][ T5846] Bluetooth: hci3: command tx timeout [ 180.370908][ T7634] veth0_macvtap: entered promiscuous mode [ 180.383862][ T7634] veth1_macvtap: entered promiscuous mode [ 180.462472][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.485638][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.495811][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.506798][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.516834][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.527487][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.537879][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.548945][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.563247][ T7634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.573426][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.584172][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.594455][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.605321][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.615566][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.626281][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.636958][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.648177][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.659992][ T7634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.687472][ T7864] mac80211_hwsim hwsim31 : renamed from wlan1 (while UP) [ 180.698908][ T5199] bcm5974 4-1:0.0: could not read from device [ 180.721108][ T5199] bcm5974 4-1:0.0: could not read from device [ 180.787953][ C1] sd 0:0:1:0: [sda] tag#731 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 180.798429][ C1] sd 0:0:1:0: [sda] tag#731 CDB: Read(6) 08 00 00 00 85 f0 [ 180.911961][ T5199] bcm5974 4-1:0.0: could not read from device [ 180.914693][ T5897] usb 4-1: USB disconnect, device number 6 [ 180.953061][ T7634] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.962442][ T7634] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.971656][ T7634] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.982332][ T7634] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.172457][ T7890] FAULT_INJECTION: forcing a failure. [ 181.172457][ T7890] name failslab, interval 1, probability 0, space 0, times 0 [ 181.185529][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 181.185548][ T29] audit: type=1326 audit(1730765356.045:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7889 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 181.248173][ T7896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.284912][ T7890] CPU: 1 UID: 0 PID: 7890 Comm: syz.3.406 Not tainted 6.12.0-rc6-syzkaller #0 [ 181.293931][ T7890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 181.304026][ T7890] Call Trace: [ 181.307344][ T7890] [ 181.310312][ T7890] dump_stack_lvl+0x241/0x360 [ 181.315031][ T7890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.320282][ T7890] ? __pfx__printk+0x10/0x10 [ 181.324925][ T7890] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 181.330517][ T7890] ? __pfx___might_resched+0x10/0x10 [ 181.335850][ T7890] should_fail_ex+0x3b0/0x4e0 [ 181.340561][ T7890] ? key_alloc+0x341/0xff0 [ 181.344996][ T7890] should_failslab+0xac/0x100 [ 181.349693][ T7890] ? key_alloc+0x341/0xff0 [ 181.354128][ T7890] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 181.359524][ T7890] ? key_user_lookup+0x1b2/0x450 [ 181.364482][ T7890] key_alloc+0x341/0xff0 [ 181.368750][ T7890] keyring_alloc+0x44/0xb0 [ 181.373190][ T7890] lookup_user_key+0x4b0/0x1500 [ 181.378062][ T7890] ? __pfx_lookup_user_key+0x10/0x10 [ 181.383390][ T7890] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 181.389564][ T7890] ? __might_fault+0xc6/0x120 [ 181.394260][ T7890] ? _copy_from_user+0x99/0xc0 [ 181.399042][ T7890] ? memdup_user+0x9f/0xc0 [ 181.403486][ T7890] __se_sys_add_key+0x2fa/0x490 [ 181.408350][ T7890] ? __pfx___se_sys_add_key+0x10/0x10 [ 181.413743][ T7890] ? __ia32_sys_add_key+0x20/0xc0 [ 181.418781][ T7890] __do_fast_syscall_32+0xb4/0x110 [ 181.423907][ T7890] ? exc_page_fault+0x590/0x8c0 [ 181.428770][ T7890] do_fast_syscall_32+0x34/0x80 [ 181.433631][ T7890] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 181.439972][ T7890] RIP: 0023:0xf7f5f579 [ 181.444046][ T7890] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 181.463692][ T7890] RSP: 002b:00000000f56e655c EFLAGS: 00000206 ORIG_RAX: 000000000000011e [ 181.472119][ T7890] RAX: ffffffffffffffda RBX: 0000000020000540 RCX: 0000000020000180 [ 181.480116][ T7890] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000ffffffff [ 181.488109][ T7890] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 181.496173][ T7890] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 181.504155][ T7890] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 181.512145][ T7890] [ 181.515406][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.528805][ T7899] FAULT_INJECTION: forcing a failure. [ 181.528805][ T7899] name failslab, interval 1, probability 0, space 0, times 0 [ 181.546716][ T7896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.560008][ T29] audit: type=1326 audit(1730765356.045:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7889 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 181.605204][ T7899] CPU: 0 UID: 0 PID: 7899 Comm: syz.5.408 Not tainted 6.12.0-rc6-syzkaller #0 [ 181.614131][ T7899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 181.624230][ T7899] Call Trace: [ 181.627535][ T7899] [ 181.630489][ T7899] dump_stack_lvl+0x241/0x360 [ 181.635216][ T7899] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.640461][ T7899] ? __pfx__printk+0x10/0x10 [ 181.645100][ T7899] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 181.650607][ T7899] ? __pfx___might_resched+0x10/0x10 [ 181.655948][ T7899] should_fail_ex+0x3b0/0x4e0 [ 181.660666][ T7899] should_failslab+0xac/0x100 [ 181.665472][ T7899] ? media_pipeline_add_pad+0xad/0x710 [ 181.670989][ T7899] __kmalloc_cache_noprof+0x6c/0x2c0 [ 181.676328][ T7899] ? __pfx___might_resched+0x10/0x10 [ 181.681670][ T7899] media_pipeline_add_pad+0xad/0x710 [ 181.687012][ T7899] __media_pipeline_start+0x31a/0x2620 [ 181.692522][ T7899] ? __mutex_lock+0x2ef/0xd70 [ 181.697256][ T7899] ? media_pipeline_start+0x46/0x70 [ 181.702506][ T7899] ? __pfx___mutex_lock+0x10/0x10 [ 181.707579][ T7899] ? __pfx___media_pipeline_start+0x10/0x10 [ 181.713527][ T7899] ? rcu_is_watching+0x15/0xb0 [ 181.718329][ T7899] ? trace_contention_end+0x3c/0x120 [ 181.723681][ T7899] media_pipeline_start+0x51/0x70 [ 181.728756][ T7899] vimc_capture_start_streaming+0x7d/0x440 [ 181.734606][ T7899] ? __video_do_ioctl+0x4ea/0xdd0 [ 181.739668][ T7899] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 181.746123][ T7899] vb2_start_streaming+0x129/0x440 [ 181.751282][ T7899] vb2_core_streamon+0x2b5/0x4c0 [ 181.756263][ T7899] __video_do_ioctl+0xc23/0xdd0 [ 181.761171][ T7899] ? __pfx___video_do_ioctl+0x10/0x10 [ 181.766576][ T7899] ? tomoyo_path_number_perm+0x71a/0x880 [ 181.772249][ T7899] ? __might_fault+0xc6/0x120 [ 181.776976][ T7899] video_usercopy+0x89b/0x1180 [ 181.781795][ T7899] ? __pfx___video_do_ioctl+0x10/0x10 [ 181.787204][ T7899] ? __pfx_video_usercopy+0x10/0x10 [ 181.792456][ T7899] ? __fget_files+0x29/0x470 [ 181.797088][ T7899] v4l2_ioctl+0x189/0x1e0 [ 181.801459][ T7899] v4l2_compat_ioctl32+0x1d7/0x260 [ 181.806626][ T7899] __se_compat_sys_ioctl+0x510/0xc90 [ 181.811967][ T7899] ? __pfx___se_compat_sys_ioctl+0x10/0x10 [ 181.817843][ T7899] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 181.823884][ T7899] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 181.830361][ T7899] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 181.836986][ T7899] ? lockdep_hardirqs_on+0x99/0x150 [ 181.842226][ T7899] __do_fast_syscall_32+0xb4/0x110 [ 181.847378][ T7899] ? exc_page_fault+0x590/0x8c0 [ 181.852271][ T7899] do_fast_syscall_32+0x34/0x80 [ 181.857162][ T7899] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 181.863535][ T7899] RIP: 0023:0xf745d579 [ 181.867632][ T7899] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 181.887282][ T7899] RSP: 002b:00000000f574655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 181.895752][ T7899] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000040045612 [ 181.903777][ T7899] RDX: 0000000020000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 181.911791][ T7899] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 181.919804][ T7899] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 181.927838][ T7899] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 181.936104][ T7899] [ 181.938380][ T29] audit: type=1326 audit(1730765356.055:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7889 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 182.006681][ T7903] sit0: entered promiscuous mode [ 182.046490][ T29] audit: type=1326 audit(1730765356.055:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7889 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 182.068229][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.076989][ T25] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 182.086613][ T7903] netlink: 'syz.8.409': attribute type 1 has an invalid length. [ 182.152209][ T7903] netlink: 1 bytes leftover after parsing attributes in process `syz.8.409'. [ 182.157649][ T29] audit: type=1326 audit(1730765356.055:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7889 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=286 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 182.183604][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.248400][ T25] usb 5-1: device descriptor read/64, error -71 [ 182.270720][ T29] audit: type=1326 audit(1730765356.455:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7889 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 182.319634][ T2986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.327515][ T2986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.367567][ T29] audit: type=1326 audit(1730765356.455:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7889 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 182.398193][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.436102][ T29] audit: type=1326 audit(1730765356.455:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7889 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 182.474628][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.519295][ T25] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 182.547025][ T29] audit: type=1326 audit(1730765356.455:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7889 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 182.568923][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.644991][ T29] audit: type=1326 audit(1730765356.455:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7889 comm="syz.3.406" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f5f579 code=0x7ffc0000 [ 182.666899][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.674236][ T25] usb 5-1: device descriptor read/64, error -71 [ 182.798920][ T25] usb usb5-port1: attempt power cycle [ 183.028375][ T5897] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 183.116000][ T5896] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 183.149027][ T25] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 183.179186][ T25] usb 5-1: device descriptor read/8, error -71 [ 183.191653][ T5897] usb 1-1: Using ep0 maxpacket: 8 [ 183.204597][ T5897] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 183.223317][ T5897] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 183.245733][ T5897] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 183.266428][ T5897] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.287395][ T5897] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 183.287518][ T5896] usb 6-1: config index 0 descriptor too short (expected 797, got 739) [ 183.308315][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.321903][ T5896] usb 6-1: config 0 has an invalid interface number: 16 but max is 0 [ 183.332522][ T5896] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.353200][ T5896] usb 6-1: config 0 has no interface number 0 [ 183.368421][ T5896] usb 6-1: config 0 interface 16 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 183.399302][ T5896] usb 6-1: config 0 interface 16 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 183.429482][ T25] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 183.439620][ T5896] usb 6-1: config 0 interface 16 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 183.473478][ T5896] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice= 2.10 [ 183.488713][ T25] usb 5-1: device descriptor read/8, error -71 [ 183.503292][ T5896] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.534015][ T5896] usb 6-1: config 0 descriptor?? [ 183.566839][ T7928] pim6reg: tun_chr_ioctl cmd 1074025677 [ 183.575126][ T7928] pim6reg: linktype set to 769 [ 183.589310][ T12] tipc: Subscription rejected, illegal request [ 183.601273][ T25] usb usb5-port1: unable to enumerate USB device [ 183.671987][ T5897] usb 1-1: usb_control_msg returned -71 [ 183.692056][ T5897] usbtmc 1-1:16.0: can't read capabilities [ 183.727713][ T5897] usb 1-1: USB disconnect, device number 15 [ 183.744888][ T972] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 183.752321][ T2986] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.920693][ T972] usb 9-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 183.947890][ T972] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.976861][ T2986] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.990831][ T972] usb 9-1: config 0 descriptor?? [ 184.107490][ T5896] (null): keene_cmd_main failed (-110) [ 184.149856][ T5896] video4linux radio48: keene_cmd_main failed (-32) [ 184.156710][ T5896] radio-keene 6-1:0.16: V4L2 device registered as radio48 [ 184.196216][ T2986] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.266096][ T7972] netlink: 24 bytes leftover after parsing attributes in process `syz.0.424'. [ 184.461402][ T2986] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.484828][ T972] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 184.513117][ T972] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 184.543583][ T972] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 184.574044][ T972] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 184.606578][ T972] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 184.654872][ T972] playstation 0003:054C:0DF2.0006: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.8-1/input0 [ 184.912848][ T5897] usb 6-1: USB disconnect, device number 4 [ 184.946295][ T2986] bridge_slave_1: left allmulticast mode [ 184.968127][ T7959] netlink: 'syz.8.421': attribute type 3 has an invalid length. [ 184.983012][ T2986] bridge_slave_1: left promiscuous mode [ 184.991698][ T7959] netlink: 130984 bytes leftover after parsing attributes in process `syz.8.421'. [ 185.001844][ T2986] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.012198][ T5151] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 185.023543][ T5151] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 185.031422][ T5151] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 185.042196][ T5151] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 185.049985][ T5151] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 185.057384][ T5151] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 185.129196][ T2986] bridge_slave_0: left allmulticast mode [ 185.134975][ T2986] bridge_slave_0: left promiscuous mode [ 185.165453][ T2986] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.533586][ T8015] netlink: 104 bytes leftover after parsing attributes in process `syz.4.430'. [ 185.545476][ T8015] netlink: 104 bytes leftover after parsing attributes in process `syz.4.430'. [ 186.249461][ T5896] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 186.303842][ T2986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.325495][ T2986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.347128][ T2986] bond0 (unregistering): Released all slaves [ 186.365051][ T8008] netlink: 'syz.0.428': attribute type 10 has an invalid length. [ 186.377870][ T972] playstation 0003:054C:0DF2.0006: Failed to retrieve feature with reportID 32: -71 [ 186.392079][ T972] playstation 0003:054C:0DF2.0006: Failed to retrieve DualSense firmware info: -71 [ 186.402957][ T8008] team0: Device ipvlan1 failed to register rx_handler [ 186.411933][ T5896] usb 5-1: Using ep0 maxpacket: 8 [ 186.428392][ T972] playstation 0003:054C:0DF2.0006: Failed to get firmware info from DualSense [ 186.451839][ T5896] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 186.461197][ T972] playstation 0003:054C:0DF2.0006: Failed to create dualsense. [ 186.472709][ T5896] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.492062][ T8] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 186.524054][ T5896] usb 5-1: config 0 has no interface number 0 [ 186.532310][ T972] playstation 0003:054C:0DF2.0006: probe with driver playstation failed with error -71 [ 186.556180][ T5896] usb 5-1: config 0 interface 52 has no altsetting 0 [ 186.587454][ T972] usb 9-1: USB disconnect, device number 13 [ 186.594169][ T5896] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 186.612883][ T5896] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 186.633692][ T5896] usb 5-1: Manufacturer: syz [ 186.645417][ T5896] usb 5-1: config 0 descriptor?? [ 186.671612][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 186.690040][ T8] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 186.712907][ T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 186.739828][ T25] IPVS: starting estimator thread 0... [ 186.812737][ T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 186.827290][ T8051] ɶƣ0GCTw: entered promiscuous mode [ 186.838587][ T8048] IPVS: using max 21 ests per chain, 50400 per kthread [ 186.876997][ T8] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 186.894049][ T8] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 186.903556][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.068850][ T5896] usb 5-1: USB disconnect, device number 18 [ 187.138903][ T5846] Bluetooth: hci1: command tx timeout [ 187.227188][ T2986] hsr_slave_0: left promiscuous mode [ 187.237027][ T2986] hsr_slave_1: left promiscuous mode [ 187.256514][ T2986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.278369][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.302346][ T2986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.333273][ T79] tipc: Subscription rejected, illegal request [ 187.345169][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.357682][ T8] usb 6-1: usb_control_msg returned -71 [ 187.363493][ T8] usbtmc 6-1:16.0: can't read capabilities [ 187.398529][ T8] usb 6-1: USB disconnect, device number 5 [ 187.428013][ T2986] veth1_macvtap: left promiscuous mode [ 187.436540][ T2986] veth0_macvtap: left promiscuous mode [ 187.443661][ T2986] veth1_vlan: left promiscuous mode [ 187.449804][ T2986] veth0_vlan: left promiscuous mode [ 187.763446][ T29] audit: type=1326 audit(1730765362.645:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.8.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 187.797225][ T29] audit: type=1326 audit(1730765362.665:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.8.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 187.834612][ T29] audit: type=1326 audit(1730765362.665:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.8.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 187.857012][ T29] audit: type=1326 audit(1730765362.665:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.8.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 187.879885][ T29] audit: type=1326 audit(1730765362.665:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.8.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 187.916507][ T29] audit: type=1326 audit(1730765362.705:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8086 comm="syz.8.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 187.960391][ T29] audit: type=1326 audit(1730765362.705:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.8.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 188.034737][ T29] audit: type=1326 audit(1730765362.705:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.8.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 188.067140][ T29] audit: type=1326 audit(1730765362.715:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8082 comm="syz.8.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=114 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 188.091092][ T29] audit: type=1326 audit(1730765362.865:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8086 comm="syz.8.442" exe="/root/syz-executor" sig=0 arch=40000003 syscall=1 compat=1 ip=0xf7fd3579 code=0x7ffc0000 [ 188.550797][ T8082] ALSA: mixer_oss: invalid OSS volume 'Zj' [ 188.563385][ T2986] team0 (unregistering): Port device team_slave_1 removed [ 188.620976][ T2986] team0 (unregistering): Port device team_slave_0 removed [ 189.044753][ T8067] pim6reg: tun_chr_ioctl cmd 1074025677 [ 189.050673][ T8067] pim6reg: linktype set to 769 [ 189.229397][ T5846] Bluetooth: hci1: command tx timeout [ 189.289070][ T8004] chnl_net:caif_netlink_parms(): no params data found [ 189.322539][ T8104] netlink: 16 bytes leftover after parsing attributes in process `syz.0.444'. [ 189.418316][ T8109] delete_channel: no stack [ 189.430102][ T8106] netlink: 'syz.5.447': attribute type 1 has an invalid length. [ 189.446651][ T8106] netlink: 'syz.5.447': attribute type 2 has an invalid length. [ 189.461880][ T8108] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 189.807340][ T8004] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.827950][ T8004] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.842365][ T8004] bridge_slave_0: entered allmulticast mode [ 189.853704][ T8129] FAULT_INJECTION: forcing a failure. [ 189.853704][ T8129] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.880840][ T8004] bridge_slave_0: entered promiscuous mode [ 189.902065][ T8004] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.928403][ T8004] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.935654][ T8004] bridge_slave_1: entered allmulticast mode [ 189.949806][ T8129] CPU: 1 UID: 0 PID: 8129 Comm: syz.8.450 Not tainted 6.12.0-rc6-syzkaller #0 [ 189.958727][ T8129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 189.968819][ T8129] Call Trace: [ 189.972130][ T8129] [ 189.975086][ T8129] dump_stack_lvl+0x241/0x360 [ 189.979807][ T8129] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.985050][ T8129] ? __pfx__printk+0x10/0x10 [ 189.989682][ T8129] ? __pfx_lock_release+0x10/0x10 [ 189.994793][ T8129] ? __lock_acquire+0x1384/0x2050 [ 189.999865][ T8129] should_fail_ex+0x3b0/0x4e0 [ 190.004588][ T8129] _copy_from_user+0x2f/0xc0 [ 190.009230][ T8129] kstrtouint_from_user+0xc6/0x190 [ 190.014387][ T8129] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 190.020153][ T8129] ? __pfx_lock_acquire+0x10/0x10 [ 190.025245][ T8129] proc_fail_nth_write+0xaa/0x2d0 [ 190.029690][ T8004] bridge_slave_1: entered promiscuous mode [ 190.030295][ T8129] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 190.042013][ T8129] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 190.047689][ T8129] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 190.053357][ T8129] vfs_write+0x2a3/0xd30 [ 190.057628][ T8129] ? fdget_pos+0x24e/0x320 [ 190.062088][ T8129] ? __pfx_vfs_write+0x10/0x10 [ 190.066874][ T8129] ? __fget_files+0x3f3/0x470 [ 190.071573][ T8129] ? fdget_pos+0x24e/0x320 [ 190.076017][ T8129] ksys_write+0x183/0x2b0 [ 190.080366][ T8129] ? __pfx_ksys_write+0x10/0x10 [ 190.085263][ T8129] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 190.091878][ T8129] ? lockdep_hardirqs_on+0x99/0x150 [ 190.097106][ T8129] __do_fast_syscall_32+0xb4/0x110 [ 190.102242][ T8129] ? exc_page_fault+0x590/0x8c0 [ 190.107145][ T8129] do_fast_syscall_32+0x34/0x80 [ 190.112025][ T8129] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 190.118389][ T8129] RIP: 0023:0xf7fd3579 [ 190.122496][ T8129] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 190.128479][ T8] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 190.142131][ T8129] RSP: 002b:00000000f5756590 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 190.142166][ T8129] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5756620 [ 190.142184][ T8129] RDX: 0000000000000001 RSI: 00000000f745cff4 RDI: 0000000000000000 [ 190.142201][ T8129] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 190.142215][ T8129] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 190.142231][ T8129] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 190.142263][ T8129] [ 190.203456][ T972] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 190.362515][ T972] usb 6-1: config 0 has an invalid interface number: 224 but max is 0 [ 190.371102][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 190.381253][ T972] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.415658][ T972] usb 6-1: config 0 has no interface number 0 [ 190.426380][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.468063][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.478792][ T972] usb 6-1: config 0 interface 224 altsetting 0 has an endpoint descriptor with address 0x75, changing to 0x5 [ 190.501032][ T5151] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 190.512259][ T8] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 190.512873][ T5151] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 190.525211][ T972] usb 6-1: config 0 interface 224 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 190.529643][ T5151] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 190.547630][ T5151] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 190.552340][ T8146] netlink: 4 bytes leftover after parsing attributes in process `syz.8.455'. [ 190.555468][ T5151] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 190.570829][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.572909][ T5151] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 190.613987][ T8004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.646051][ T8004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.656017][ T972] usb 6-1: config 0 interface 224 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 190.680565][ T8] usb 1-1: config 0 descriptor?? [ 190.707958][ T972] usb 6-1: config 0 interface 224 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 190.748083][ T972] usb 6-1: config 0 interface 224 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 190.795303][ T972] usb 6-1: New USB device found, idVendor=06cd, idProduct=012a, bcdDevice=69.e2 [ 190.805301][ T972] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.822829][ T972] usb 6-1: Product: syz [ 190.827080][ T972] usb 6-1: Manufacturer: syz [ 190.831892][ T972] usb 6-1: SerialNumber: syz [ 190.847085][ T972] usb 6-1: config 0 descriptor?? [ 190.860888][ T8004] team0: Port device team_slave_0 added [ 190.869904][ T8004] team0: Port device team_slave_1 added [ 190.892049][ T972] keyspan 6-1:0.224: Keyspan 4 port adapter converter detected [ 190.901846][ T972] keyspan 6-1:0.224: found no endpoint descriptor for endpoint 87 [ 190.910764][ T972] keyspan 6-1:0.224: found no endpoint descriptor for endpoint 7 [ 190.940677][ T972] keyspan 6-1:0.224: found no endpoint descriptor for endpoint 81 [ 190.965375][ T972] keyspan 6-1:0.224: unsupported endpoint type 0 [ 190.996861][ T972] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 191.017973][ T972] keyspan 6-1:0.224: found no endpoint descriptor for endpoint 82 [ 191.026815][ T972] keyspan 6-1:0.224: found no endpoint descriptor for endpoint 2 [ 191.047073][ T972] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 191.049793][ T2986] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.065476][ T972] keyspan 6-1:0.224: found no endpoint descriptor for endpoint 83 [ 191.088593][ T972] keyspan 6-1:0.224: found no endpoint descriptor for endpoint 3 [ 191.102307][ T8] corsair 0003:1B1C:1B02.0007: unknown main item tag 0x0 [ 191.128475][ T8] corsair 0003:1B1C:1B02.0007: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 191.140548][ T972] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 191.165035][ T972] keyspan 6-1:0.224: found no endpoint descriptor for endpoint 84 [ 191.205750][ T972] keyspan 6-1:0.224: found no endpoint descriptor for endpoint 4 [ 191.230677][ T8004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.237707][ T8004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.295998][ T972] usb 6-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 191.309481][ T5151] Bluetooth: hci1: command tx timeout [ 191.322975][ T8] corsair 0003:1B1C:1B02.0007: Failed to get K90 initial state (error -71). [ 191.324197][ T8004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.436392][ T8] usb 1-1: USB disconnect, device number 16 [ 191.552161][ T2986] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.596644][ T8004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.617280][ T8004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.684688][ T8004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.754704][ T2986] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.852581][ T8136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.862539][ T8136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.923331][ T8178] netlink: 232 bytes leftover after parsing attributes in process `syz.8.460'. [ 191.981607][ T5903] usb 6-1: USB disconnect, device number 6 [ 192.002179][ T5903] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 192.053111][ T5903] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 192.067645][ T2986] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.113714][ T5903] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 192.151215][ T5903] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 192.170072][ T5903] keyspan 6-1:0.224: device disconnected [ 192.198853][ T8004] hsr_slave_0: entered promiscuous mode [ 192.207534][ T8004] hsr_slave_1: entered promiscuous mode [ 192.227506][ T8004] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.236348][ T8004] Cannot create hsr debugfs directory [ 192.593451][ T8148] chnl_net:caif_netlink_parms(): no params data found [ 192.673692][ T5151] Bluetooth: hci4: command tx timeout [ 192.695299][ T8202] dccp_close: ABORT with 32 bytes unread [ 192.777150][ T2986] bridge_slave_1: left allmulticast mode [ 192.788125][ T2986] bridge_slave_1: left promiscuous mode [ 192.797504][ T2986] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.846774][ T2986] bridge_slave_0: left allmulticast mode [ 192.861083][ T2986] bridge_slave_0: left promiscuous mode [ 192.870013][ T2986] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.378497][ T5151] Bluetooth: hci1: command tx timeout [ 193.575381][ T2986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.602048][ T2986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.623206][ T2986] bond0 (unregistering): Released all slaves [ 193.702745][ T8231] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 193.740381][ T8231] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 194.076450][ T8148] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.109140][ T8148] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.149902][ T8148] bridge_slave_0: entered allmulticast mode [ 194.162100][ T8148] bridge_slave_0: entered promiscuous mode [ 194.295667][ T8148] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.324927][ T8148] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.342223][ T8148] bridge_slave_1: entered allmulticast mode [ 194.355860][ T8148] bridge_slave_1: entered promiscuous mode [ 194.423746][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.430454][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.492973][ T2986] hsr_slave_0: left promiscuous mode [ 194.530788][ T2986] hsr_slave_1: left promiscuous mode [ 194.551735][ T2986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.573647][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.588159][ T2986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.602864][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.630873][ T2986] veth1_macvtap: left promiscuous mode [ 194.636610][ T2986] veth0_macvtap: left promiscuous mode [ 194.643250][ T2986] veth1_vlan: left promiscuous mode [ 194.653470][ T8274] netlink: 180 bytes leftover after parsing attributes in process `syz.5.474'. [ 194.665514][ T8274] netlink: 64 bytes leftover after parsing attributes in process `syz.5.474'. [ 194.671811][ T2986] veth0_vlan: left promiscuous mode [ 194.741322][ T5151] Bluetooth: hci4: command tx timeout [ 194.908621][ T25] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 195.062043][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 195.074163][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.084620][ T25] usb 6-1: New USB device found, idVendor=046d, idProduct=c09b, bcdDevice= 0.00 [ 195.098429][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.126680][ T25] usb 6-1: config 0 descriptor?? [ 195.356416][ T8280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.395244][ T8280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.542344][ T25] logitech-hidpp-device 0003:046D:C09B.0008: unknown main item tag 0x0 [ 195.586067][ T25] logitech-hidpp-device 0003:046D:C09B.0008: unknown main item tag 0x0 [ 195.622656][ T25] logitech-hidpp-device 0003:046D:C09B.0008: unexpected long global item [ 195.631844][ T25] logitech-hidpp-device 0003:046D:C09B.0008: hidpp_probe:parse failed [ 195.635112][ T2986] team0 (unregistering): Port device team_slave_1 removed [ 195.640306][ T25] logitech-hidpp-device 0003:046D:C09B.0008: probe with driver logitech-hidpp-device failed with error -22 [ 195.815219][ T2986] team0 (unregistering): Port device team_slave_0 removed [ 196.347533][ T8291] netlink: 60 bytes leftover after parsing attributes in process `syz.8.478'. [ 196.395900][ T8148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.456867][ T8148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.513224][ T8297] FAULT_INJECTION: forcing a failure. [ 196.513224][ T8297] name failslab, interval 1, probability 0, space 0, times 0 [ 196.534387][ T8297] CPU: 0 UID: 0 PID: 8297 Comm: syz.0.479 Not tainted 6.12.0-rc6-syzkaller #0 [ 196.543316][ T8297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 196.553598][ T8297] Call Trace: [ 196.556910][ T8297] [ 196.559878][ T8297] dump_stack_lvl+0x241/0x360 [ 196.564607][ T8297] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.569851][ T8297] ? __pfx__printk+0x10/0x10 [ 196.574505][ T8297] should_fail_ex+0x3b0/0x4e0 [ 196.579228][ T8297] should_failslab+0xac/0x100 [ 196.583955][ T8297] ? sctp_add_bind_addr+0x89/0x3a0 [ 196.589128][ T8297] __kmalloc_cache_noprof+0x6c/0x2c0 [ 196.594463][ T8297] sctp_add_bind_addr+0x89/0x3a0 [ 196.599453][ T8297] sctp_copy_local_addr_list+0x311/0x500 [ 196.605139][ T8297] ? sctp_copy_local_addr_list+0xab/0x500 [ 196.610896][ T8297] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 196.617093][ T8297] ? sctp_v4_is_any+0x35/0x60 [ 196.621818][ T8297] sctp_bind_addr_copy+0xad/0x3b0 [ 196.626905][ T8297] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 196.633264][ T8297] sctp_connect_new_asoc+0x2f3/0x6c0 [ 196.638577][ T8297] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 196.644412][ T8297] ? sctp_sendmsg+0xbb9/0x3520 [ 196.649194][ T8297] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 196.655010][ T8297] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 196.660913][ T8297] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 196.666562][ T8297] sctp_sendmsg+0x219a/0x3520 [ 196.671272][ T8297] ? aa_sk_perm+0x96d/0xab0 [ 196.675788][ T8297] ? __pfx_sctp_sendmsg+0x10/0x10 [ 196.680817][ T8297] ? cmsghdr_from_user_compat_to_kern+0x7c8/0x950 [ 196.687259][ T8297] ? __pfx_aa_sk_perm+0x10/0x10 [ 196.692141][ T8297] ? inet_sendmsg+0x330/0x390 [ 196.696829][ T8297] __sock_sendmsg+0x1a6/0x270 [ 196.701531][ T8297] ____sys_sendmsg+0x52a/0x7e0 [ 196.706316][ T8297] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.711626][ T8297] __sys_sendmmsg+0x4a8/0x730 [ 196.716323][ T8297] ? __pfx___sys_sendmmsg+0x10/0x10 [ 196.721555][ T8297] ? __pfx_lock_acquire+0x10/0x10 [ 196.726595][ T8297] ? get_pid_task+0x23/0x1f0 [ 196.731191][ T8297] ? __pfx_lock_release+0x10/0x10 [ 196.736222][ T8297] ? kstrtouint_from_user+0x128/0x190 [ 196.741622][ T8297] ? ksys_write+0x229/0x2b0 [ 196.746171][ T8297] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 196.752185][ T8297] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 196.758174][ T8297] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 196.764521][ T8297] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 196.770080][ T8297] __do_fast_syscall_32+0xb4/0x110 [ 196.775206][ T8297] ? exc_page_fault+0x590/0x8c0 [ 196.780078][ T8297] do_fast_syscall_32+0x34/0x80 [ 196.784942][ T8297] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 196.791330][ T8297] RIP: 0023:0xf7fc3579 [ 196.795405][ T8297] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 196.815019][ T8297] RSP: 002b:00000000f574655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 196.823447][ T8297] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020003140 [ 196.831447][ T8297] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000000 [ 196.839432][ T8297] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 196.847445][ T8297] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 196.855440][ T8297] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 196.863435][ T8297] [ 196.878112][ T5151] Bluetooth: hci4: command tx timeout [ 197.080195][ T8309] netlink: 72 bytes leftover after parsing attributes in process `syz.0.482'. [ 197.090149][ T8309] netlink: 72 bytes leftover after parsing attributes in process `syz.0.482'. [ 197.132489][ T8148] team0: Port device team_slave_0 added [ 197.171637][ T8148] team0: Port device team_slave_1 added [ 197.185017][ T8309] netlink: 72 bytes leftover after parsing attributes in process `syz.0.482'. [ 197.201650][ T8309] netlink: 72 bytes leftover after parsing attributes in process `syz.0.482'. [ 197.223111][ T8309] netlink: 72 bytes leftover after parsing attributes in process `syz.0.482'. [ 197.238940][ T5896] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 197.254057][ T8309] netlink: 72 bytes leftover after parsing attributes in process `syz.0.482'. [ 197.315144][ T8309] netlink: 72 bytes leftover after parsing attributes in process `syz.0.482'. [ 197.366393][ T8004] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 197.384819][ T8148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.409909][ T8148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.412764][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.452939][ T5896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.478731][ T8148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.479006][ T5896] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 197.491800][ T8148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.516807][ T8148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.531400][ T5896] usb 1-1: New USB device found, idVendor=044e, idProduct=120b, bcdDevice= 0.00 [ 197.552515][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.555932][ T8148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.573551][ T5896] usb 1-1: config 0 descriptor?? [ 197.587900][ T8004] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 197.612888][ T8326] macsec1: entered promiscuous mode [ 197.628491][ T8326] mac80211_hwsim hwsim21 wlan1: entered promiscuous mode [ 197.688890][ T8004] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 197.696918][ T970] usb 6-1: USB disconnect, device number 7 [ 197.720669][ T8004] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 197.789274][ T8311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.802340][ T8311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.830877][ T8311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.847290][ T8311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.889169][ T8311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.920060][ T8311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.935047][ T8148] hsr_slave_0: entered promiscuous mode [ 197.955194][ T8311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.975485][ T8148] hsr_slave_1: entered promiscuous mode [ 198.004900][ T8311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.020618][ T8311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.038644][ T8148] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.057810][ T8311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.082675][ T5896] hid-alps 0003:044E:120B.0009: hidraw0: USB HID v0.00 Device [HID 044e:120b] on usb-dummy_hcd.0-1/input0 [ 198.102506][ T8148] Cannot create hsr debugfs directory [ 198.109043][ T970] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 198.261410][ T970] usb 6-1: device descriptor read/64, error -71 [ 198.294700][ T7348] usb 1-1: USB disconnect, device number 17 [ 198.497174][ T8004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.538973][ T970] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 198.616256][ T8004] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.666880][ T6161] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.674012][ T6161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.689396][ T970] usb 6-1: device descriptor read/64, error -71 [ 198.701206][ T6161] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.708395][ T6161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.827762][ T970] usb usb6-port1: attempt power cycle [ 198.900441][ T5151] Bluetooth: hci4: command tx timeout [ 199.085775][ T8004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.099765][ T8351] trusted_key: syz.0.488 sent an empty control message without MSG_MORE. [ 199.161822][ T8148] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 199.179104][ T970] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 199.192090][ T8148] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 199.210849][ T970] usb 6-1: device descriptor read/8, error -71 [ 199.230182][ T8148] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 199.251420][ T8148] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 199.279366][ T8004] veth0_vlan: entered promiscuous mode [ 199.348710][ T8004] veth1_vlan: entered promiscuous mode [ 199.468384][ T970] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 199.519671][ T970] usb 6-1: device descriptor read/8, error -71 [ 199.537761][ T8004] veth0_macvtap: entered promiscuous mode [ 199.577687][ T8004] veth1_macvtap: entered promiscuous mode [ 199.613574][ T8148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.643113][ T8148] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.652861][ T970] usb usb6-port1: unable to enumerate USB device [ 199.679069][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.686189][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.708212][ T8004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.729367][ T8004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.748826][ T8004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.769709][ T8004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.799346][ T8004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.811567][ T8004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.828391][ T8371] __nla_validate_parse: 46 callbacks suppressed [ 199.828412][ T8371] netlink: 44 bytes leftover after parsing attributes in process `syz.8.493'. [ 199.856798][ T8004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.881851][ T8371] netlink: 43 bytes leftover after parsing attributes in process `syz.8.493'. [ 199.897238][ T8004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.918575][ T8004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.939211][ T8371] netlink: 'syz.8.493': attribute type 5 has an invalid length. [ 199.949475][ T8004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.979261][ T8371] netlink: 43 bytes leftover after parsing attributes in process `syz.8.493'. [ 200.005034][ T8004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.023886][ T8004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.034959][ T8004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.047152][ T8004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.073002][ T8004] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.108276][ T8004] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.137438][ T8004] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.153735][ T8004] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.180391][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.187572][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.469397][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.477276][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.526010][ T8148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.533750][ T25] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 200.563248][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.576528][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.633789][ T8401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.652597][ T8401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.682011][ T8148] veth0_vlan: entered promiscuous mode [ 200.717610][ T8148] veth1_vlan: entered promiscuous mode [ 200.724264][ T25] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.746006][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 200.786550][ T25] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 200.858750][ T970] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 200.861412][ T8407] batman_adv: batadv0: Adding interface: ip6gretap1 [ 200.870810][ T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 200.888995][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.897082][ T25] usb 1-1: Product: syz [ 200.904798][ T8407] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 200.918322][ T25] usb 1-1: Manufacturer: syz [ 200.939797][ T25] usb 1-1: SerialNumber: syz [ 200.956370][ T8407] batman_adv: batadv0: Interface activated: ip6gretap1 [ 200.967294][ T25] cdc_ncm 1-1:1.0: skipping garbage [ 200.979660][ T8148] veth0_macvtap: entered promiscuous mode [ 200.995839][ T25] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 201.005283][ T8148] veth1_macvtap: entered promiscuous mode [ 201.012435][ T25] cdc_ncm 1-1:1.0: bind() failure [ 201.018396][ T970] usb 9-1: Using ep0 maxpacket: 32 [ 201.028690][ T970] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 201.049833][ T970] usb 9-1: config 0 interface 0 has no altsetting 1 [ 201.069856][ T8148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.090841][ T970] usb 9-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice=41.ab [ 201.108602][ T8148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.119387][ T970] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.127447][ T970] usb 9-1: Product: syz [ 201.152130][ T8148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.170799][ T970] usb 9-1: Manufacturer: syz [ 201.181133][ T970] usb 9-1: SerialNumber: syz [ 201.188640][ T8148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.210975][ T970] usb 9-1: config 0 descriptor?? [ 201.237168][ T970] usb-storage 9-1:0.0: USB Mass Storage device detected [ 201.248494][ T8148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.268519][ T8148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.298615][ T8148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.303404][ T970] usb-storage 9-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 201.319975][ T8148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.355703][ T8148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.424710][ T8148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.450147][ T972] usb 9-1: USB disconnect, device number 14 [ 201.466272][ T8148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.512729][ T8148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.551804][ T8148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.565539][ T8148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.584661][ T8148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.596084][ T8148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 201.614175][ T8148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.655851][ T8148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.689857][ T8439] fuse: Bad value for 'user_id' [ 201.694815][ T8439] fuse: Bad value for 'user_id' [ 201.709849][ T8148] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.718831][ T8148] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.728102][ T8148] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.737059][ T8148] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.866896][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.888741][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.978658][ T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.986549][ T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.088698][ T5895] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 202.271169][ T5895] usb 8-1: config 0 has no interfaces? [ 202.279886][ T8466] FAULT_INJECTION: forcing a failure. [ 202.279886][ T8466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.300037][ T5895] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 202.324580][ T8466] CPU: 1 UID: 0 PID: 8466 Comm: syz.6.454 Not tainted 6.12.0-rc6-syzkaller #0 [ 202.333497][ T8466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 202.343597][ T8466] Call Trace: [ 202.346914][ T8466] [ 202.349882][ T8466] dump_stack_lvl+0x241/0x360 [ 202.354607][ T8466] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.359852][ T8466] ? __pfx__printk+0x10/0x10 [ 202.364490][ T8466] ? __pfx_lock_release+0x10/0x10 [ 202.369573][ T8466] ? sock_recvmsg_nosec+0xa6/0x1d0 [ 202.374829][ T8466] should_fail_ex+0x3b0/0x4e0 [ 202.379557][ T8466] _copy_from_user+0x2f/0xc0 [ 202.384214][ T8466] get_compat_msghdr+0xae/0x730 [ 202.389140][ T8466] ? __pfx_get_compat_msghdr+0x10/0x10 [ 202.394654][ T8466] ? do_recvmmsg+0x59d/0xad0 [ 202.399296][ T8466] ? kfree+0x4e/0x440 [ 202.403503][ T8466] do_recvmmsg+0x514/0xad0 [ 202.407980][ T8466] ? __pfx_do_recvmmsg+0x10/0x10 [ 202.412966][ T8466] ? __pfx_lock_release+0x10/0x10 [ 202.418038][ T8466] ? kstrtouint_from_user+0x128/0x190 [ 202.423495][ T8466] ? vfs_write+0x730/0xd30 [ 202.427953][ T8466] ? __pfx_vfs_write+0x10/0x10 [ 202.432757][ T8466] ? __fget_files+0x3f3/0x470 [ 202.437484][ T8466] __sys_recvmmsg+0x1a8/0x270 [ 202.442205][ T8466] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 202.448224][ T8466] ? __pfx___sys_recvmmsg+0x10/0x10 [ 202.453461][ T8466] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 202.459849][ T8466] __ia32_compat_sys_recvmmsg_time32+0xbf/0xd0 [ 202.466058][ T8466] __do_fast_syscall_32+0xb4/0x110 [ 202.471216][ T8466] ? exc_page_fault+0x590/0x8c0 [ 202.476115][ T8466] do_fast_syscall_32+0x34/0x80 [ 202.481019][ T8466] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 202.487392][ T8466] RIP: 0023:0xf7f63579 [ 202.491497][ T8466] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 202.511146][ T8466] RSP: 002b:00000000f56e655c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 202.519637][ T8466] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000040 [ 202.527644][ T8466] RDX: 0000000000000284 RSI: 0000000000000002 RDI: 0000000000000000 [ 202.535655][ T8466] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 202.543667][ T8466] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 202.551693][ T8466] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 202.559718][ T8466] [ 202.564339][ T5895] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.572867][ T5895] usb 8-1: Product: syz [ 202.577207][ T5895] usb 8-1: Manufacturer: syz [ 202.582124][ T5895] usb 8-1: SerialNumber: syz [ 202.600228][ T5895] usb 8-1: config 0 descriptor?? [ 202.747451][ T8442] BUG: Bad page state in process syz.5.504 pfn:61f45 [ 202.768963][ T8442] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x61f45 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 202.796995][ T8442] flags: 0xfff00000080204(referenced|workingset|mlocked|node=0|zone=1|lastcpupid=0x7ff) [ 202.880261][ T8442] raw: 00fff00000080204 0000000000000000 dead000000000122 0000000000000000 [ 202.938586][ T8442] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 202.977447][ T8442] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 203.025494][ T8442] page_owner tracks the page as allocated [ 203.048024][ T8442] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), pid 8443, tgid 8442 (syz.5.504), ts 201884660643, free_ts 201499827394 [ 203.154821][ T8442] post_alloc_hook+0x1f3/0x230 [ 203.164476][ T8442] get_page_from_freelist+0x303f/0x3190 [ 203.174981][ T8442] __alloc_pages_noprof+0x292/0x710 [ 203.182920][ T8442] alloc_pages_mpol_noprof+0x3e8/0x680 [ 203.195732][ T8442] kvm_coalesced_mmio_init+0x1f/0xf0 [ 203.202294][ T8442] kvm_dev_ioctl+0x12dc/0x2240 [ 203.207130][ T8442] __se_compat_sys_ioctl+0x510/0xc90 [ 203.214067][ T8442] __do_fast_syscall_32+0xb4/0x110 [ 203.222564][ T8442] do_fast_syscall_32+0x34/0x80 [ 203.227478][ T8442] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 203.234447][ T8442] page last free pid 8399 tgid 8399 stack trace: [ 203.241393][ T8442] free_unref_folios+0xf12/0x18d0 [ 203.246483][ T8442] folios_put_refs+0x76c/0x860 [ 203.252033][ T8442] free_pages_and_swap_cache+0x5c8/0x690 [ 203.257733][ T8442] tlb_flush_mmu+0x3a3/0x680 [ 203.268337][ T8442] tlb_finish_mmu+0xd4/0x200 [ 203.272994][ T8442] exit_mmap+0x496/0xc40 [ 203.277278][ T8442] __mmput+0x115/0x390 [ 203.282144][ T8442] exit_mm+0x220/0x310 [ 203.286279][ T8442] do_exit+0x9b2/0x28e0 [ 203.290948][ T8442] do_group_exit+0x207/0x2c0 [ 203.295591][ T8442] __x64_sys_exit_group+0x3f/0x40 [ 203.305766][ T8442] x64_sys_call+0x2634/0x2640 [ 203.313760][ T8442] do_syscall_64+0xf3/0x230 [ 203.318565][ T8442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.324619][ T8442] Modules linked in: [ 203.332982][ T8442] CPU: 0 UID: 0 PID: 8442 Comm: syz.5.504 Not tainted 6.12.0-rc6-syzkaller #0 [ 203.341894][ T8442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 203.351987][ T8442] Call Trace: [ 203.355296][ T8442] [ 203.358259][ T8442] dump_stack_lvl+0x241/0x360 [ 203.362984][ T8442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.368233][ T8442] ? __pfx_print_modules+0x10/0x10 [ 203.373393][ T8442] ? __pfx_lock_release+0x10/0x10 [ 203.378471][ T8442] bad_page+0x176/0x1d0 [ 203.382755][ T8442] free_unref_page+0xed0/0xf20 [ 203.387572][ T8442] kvm_put_kvm+0xc75/0x1350 [ 203.392119][ T8442] kvm_vcpu_release+0x54/0x60 [ 203.396836][ T8442] ? __pfx_kvm_vcpu_release+0x10/0x10 [ 203.402243][ T8442] __fput+0x23f/0x880 [ 203.406275][ T8442] task_work_run+0x24f/0x310 [ 203.410906][ T8442] ? __pfx_task_work_run+0x10/0x10 [ 203.416054][ T8442] ? switch_task_namespaces+0xe4/0x110 [ 203.421579][ T8442] do_exit+0xa2f/0x28e0 [ 203.425776][ T8442] ? preempt_schedule_common+0x84/0xd0 [ 203.431283][ T8442] ? __pfx_do_exit+0x10/0x10 [ 203.435903][ T8442] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 203.441933][ T8442] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 203.448311][ T8442] ? preempt_schedule_thunk+0x1a/0x30 [ 203.453725][ T8442] do_group_exit+0x207/0x2c0 [ 203.458357][ T8442] __ia32_sys_exit_group+0x3f/0x40 [ 203.463510][ T8442] ia32_sys_call+0x2624/0x2630 [ 203.468303][ T8442] __do_fast_syscall_32+0xb4/0x110 [ 203.473455][ T8442] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 203.479641][ T8442] ? lockdep_hardirqs_on+0x99/0x150 [ 203.484856][ T8442] do_fast_syscall_32+0x34/0x80 [ 203.489728][ T8442] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 203.496076][ T8442] RIP: 0023:0xf745d579 [ 203.500157][ T8442] Code: Unable to access opcode bytes at 0xf745d54f. [ 203.506835][ T8442] RSP: 002b:00000000f75afd6c EFLAGS: 00000206 ORIG_RAX: 00000000000000fc [ 203.515261][ T8442] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000000000 [ 203.523241][ T8442] RDX: 0000000000000000 RSI: 00000000ffffff9c RDI: 00000000f744cff4 [ 203.531219][ T8442] RBP: 00000000f717ae61 R08: 0000000000000000 R09: 0000000000000000 [ 203.539200][ T8442] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 203.547177][ T8442] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 203.555170][ T8442] [ 203.589016][ T8442] Disabling lock debugging due to kernel taint [ 204.159949][ T6329] usb 8-1: USB disconnect, device number 25 [ 204.205856][ T79] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.294708][ T79] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.355351][ T79] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.370582][ T6329] usb 1-1: USB disconnect, device number 18 [ 204.434099][ T79] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.526126][ T79] bridge_slave_1: left allmulticast mode [ 204.536122][ T79] bridge_slave_1: left promiscuous mode [ 204.542744][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.555101][ T79] bridge_slave_0: left allmulticast mode [ 204.561395][ T79] bridge_slave_0: left promiscuous mode [ 204.567117][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.580715][ T79] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 204.630458][ T79] batman_adv: batadv0: Removing interface: ip6gretap1 [ 204.742460][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.770260][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.793768][ T79] bond0 (unregistering): Released all slaves [ 205.007005][ T79] hsr_slave_0: left promiscuous mode [ 205.016991][ T79] hsr_slave_1: left promiscuous mode [ 205.023451][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.032271][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.040422][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.047944][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.059864][ T79] veth1_macvtap: left promiscuous mode [ 205.065407][ T79] veth0_macvtap: left promiscuous mode [ 205.071430][ T79] veth1_vlan: left promiscuous mode [ 205.076825][ T79] veth0_vlan: left promiscuous mode [ 205.255182][ T79] team0 (unregistering): Port device team_slave_1 removed [ 205.285111][ T79] team0 (unregistering): Port device team_slave_0 removed [ 205.657224][ T79] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.723975][ T79] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.753454][ T79] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.825237][ T79] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.924432][ T79] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.984719][ T79] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.023521][ T79] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.076775][ T79] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.189744][ T79] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.246165][ T79] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.297890][ T79] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.356421][ T79] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.453272][ T79] bridge_slave_1: left allmulticast mode [ 206.461001][ T79] bridge_slave_1: left promiscuous mode [ 206.468469][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.479578][ T79] bridge_slave_0: left allmulticast mode [ 206.485277][ T79] bridge_slave_0: left promiscuous mode [ 206.491607][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.510033][ T79] bridge_slave_1: left allmulticast mode [ 206.515736][ T79] bridge_slave_1: left promiscuous mode [ 206.522212][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.542989][ T79] bridge_slave_0: left allmulticast mode [ 206.550356][ T79] bridge_slave_0: left promiscuous mode [ 206.556070][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.566910][ T79] bridge_slave_1: left allmulticast mode [ 206.573527][ T79] bridge_slave_1: left promiscuous mode [ 206.579572][ T79] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.587793][ T79] bridge_slave_0: left allmulticast mode [ 206.594392][ T79] bridge_slave_0: left promiscuous mode [ 206.600291][ T79] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.893579][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.903969][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.914028][ T79] bond0 (unregistering): Released all slaves [ 206.926727][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.937087][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.946787][ T79] bond0 (unregistering): Released all slaves [ 206.960322][ T79] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.972171][ T79] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.983669][ T79] bond0 (unregistering): Released all slaves [ 207.064642][ T79] ɶƣ0GCTw: left promiscuous mode [ 207.466725][ T79] hsr_slave_0: left promiscuous mode [ 207.473162][ T79] hsr_slave_1: left promiscuous mode [ 207.480977][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.488508][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.496081][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.503600][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.513696][ T79] hsr_slave_0: left promiscuous mode [ 207.519676][ T79] hsr_slave_1: left promiscuous mode [ 207.525443][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.532925][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.540923][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.552311][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.562241][ T79] hsr_slave_0: left promiscuous mode [ 207.567985][ T79] hsr_slave_1: left promiscuous mode [ 207.574863][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.582401][ T79] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.590790][ T79] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.598606][ T79] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.610637][ T79] veth1_macvtap: left promiscuous mode [ 207.616129][ T79] veth0_macvtap: left promiscuous mode [ 207.621767][ T79] veth1_vlan: left promiscuous mode [ 207.627042][ T79] veth0_vlan: left promiscuous mode [ 207.633124][ T79] veth1_macvtap: left promiscuous mode [ 207.638755][ T79] veth0_macvtap: left promiscuous mode [ 207.644281][ T79] veth1_vlan: left promiscuous mode [ 207.649653][ T79] veth0_vlan: left promiscuous mode [ 207.655533][ T79] veth1_macvtap: left promiscuous mode [ 207.661208][ T79] veth0_macvtap: left promiscuous mode [ 207.666764][ T79] veth1_vlan: left promiscuous mode [ 207.672240][ T79] veth0_vlan: left promiscuous mode [ 207.917092][ T79] team0 (unregistering): Port device team_slave_1 removed [ 207.943193][ T79] team0 (unregistering): Port device team_slave_0 removed [ 208.103654][ T79] team0 (unregistering): Port device team_slave_1 removed [ 208.127665][ T79] team0 (unregistering): Port device team_slave_0 removed [ 208.295979][ T79] team0 (unregistering): Port device team_slave_1 removed [ 208.325035][ T79] team0 (unregistering): Port device team_slave_0 removed [ 209.010759][ T79] IPVS: stop unused estimator thread 0...