last executing test programs: 28m37.982188036s ago: executing program 32 (id=82): r0 = syz_open_procfs(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x18, 0x6ae11f7d9fe0e45f, 0x70bd28, 0x80, {0x2, 0x0, 0x750be4f588f5a042}, [@RTA_ENCAP_TYPE={0x6, 0x12, 0x9}]}, 0x24}}, 0x10) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$dri(0x0, 0x0, 0x32d400) pipe2$9p(0x0, 0x80880) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRESDEC=r2], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r5 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000001500), 0x588, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe(0x0) openat$cgroup_ro(r0, &(0x7f00000002c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) 28m37.207300134s ago: executing program 33 (id=83): r0 = syz_open_procfs(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x18, 0x6ae11f7d9fe0e45f, 0x70bd28, 0x80, {0x2, 0x0, 0x750be4f588f5a042}, [@RTA_ENCAP_TYPE={0x6, 0x12, 0x9}]}, 0x24}}, 0x10) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$dri(0x0, 0x0, 0x32d400) pipe2$9p(0x0, 0x80880) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRESDEC=r2], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r5 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) accept4(r5, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8000f28, 0x0) openat$cgroup_ro(r0, &(0x7f00000002c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 26m22.341524873s ago: executing program 2 (id=332): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000280)={0x18, 0x0, 0x0, {0x6}}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, @mcast1, @empty, 0x20, 0x0, 0x0, 0xa}}) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x6000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 26m19.67042353s ago: executing program 2 (id=336): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000000)={0x6, 0xd, 0x8201, 0x6, 0x8, 0xfffffffd, 0x3, 0x3f1}, &(0x7f0000000040)=0x20) 26m16.49722381s ago: executing program 2 (id=344): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e00000095010000a24700000700000001220300", @ANYRES32, @ANYBLOB="0500"/20, @ANYBLOB, @ANYRES32, @ANYBLOB="a0aa701738cbb37d4fecd8db1de46c949cde27e102af61c29702dce0bcfd5841d48b94a813a01a1f1ec8adf6f20632634ed8b1fb98c315468547989d559d05c25a09e46615691e7a40045bbdf7901ae50623f9a23b9093607ffe0929d8ed86432657bdfe4a53c14cc8ec78038d98339be31e64d474ee51d35c7d1eddf8c736ce36a6c03b86e553ae2998a16f73c69d6753462bfd7170c6c0e387be3745fabe8ba5"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f000068c000/0x3000)=nil) mlockall(0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x27, 0xfffffffffffffea7, 0x0, 0x0, 0x0, 0x3, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) r5 = shmat(r4, &(0x7f0000ff9000/0x4000)=nil, 0x1000) shmdt(r5) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="3f000000010000", 0x7) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="1c00000007ffff0e"], 0x52) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) 26m14.57157047s ago: executing program 2 (id=346): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x1) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xe0ffffff00000000}}, 0x1c) shutdown(r8, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000000000)={0x6, 0xd, 0x8201, 0x6, 0x8, 0xfffffffd, 0x3, 0x3f1}, &(0x7f0000000040)=0x20) 26m10.059287106s ago: executing program 2 (id=353): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r3, 0xc01c64a3, &(0x7f0000000040)={0x3, r5, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) 26m6.142566713s ago: executing program 2 (id=359): syz_open_procfs(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$dri(0x0, 0x0, 0x32d400) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRESDEC=r1], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r4, 0x3) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001500), 0x588, 0x0) 25m50.700527849s ago: executing program 34 (id=359): syz_open_procfs(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7f, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$dri(0x0, 0x0, 0x32d400) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32=r1, @ANYRESDEC=r1], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r4 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r4, 0x3) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) r6 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001500), 0x588, 0x0) 12m11.861713701s ago: executing program 5 (id=1831): inotify_init1(0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04221001000000000000000d04c0728d060003"], 0x13) lsm_get_self_attr(0x1, 0x0, &(0x7f0000001bc0), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2c8, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x328) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x7fff) fsopen(&(0x7f0000000100)='hfsplus\x00', 0x0) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x20, 0x0, 0x8, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x32}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x8010) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x4}], {0x95, 0x0, 0x700}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) 12m10.898580177s ago: executing program 5 (id=1833): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x12, 0xffffffffffffffff, 0x29354000) r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x3ffffffffffffffd, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x80002, 0x1, 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsetxattr$trusted_overlay_redirect(r5, 0x0, 0x0, 0x0, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 12m9.22389368s ago: executing program 5 (id=1835): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="17043a73dbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010102, 0x10000}, {@loopback}, {@local}, {@remote}, {@private}, {@remote}, {@private}]}]}}}}}}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000000004f000010000000000022fee139c0a1228e167ac3bc3400049535cde5698ee28cf49e417163aaccb4f928", @ANYRES32=r1, @ANYRES32=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0xfffffffffffffe1e, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r2, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 11m57.522480271s ago: executing program 5 (id=1853): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x2) ioctl$SNDCTL_SEQ_NRMIDIS(0xffffffffffffffff, 0x8004510b, &(0x7f0000000340)) socket(0x11, 0x800000003, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa03, 0x0) 11m51.739209211s ago: executing program 5 (id=1859): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x3) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0xbc) r3 = socket(0x5, 0x2, 0x0) prlimit64(r0, 0x0, &(0x7f0000000000)={0x6, 0xada}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x18}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x200000000000025d, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r6, @ANYRES8=r3, @ANYRES64, @ANYRES32=r2, @ANYRES8=0x0], &(0x7f0000001dc0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write(r3, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r3, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_SELECTION(r7, 0xc040565e, &(0x7f0000000100)={0x9, 0x103, 0x0, {0x0, 0x62f}}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r8 = syz_open_procfs(0x0, 0x0) getsockopt$inet6_int(r8, 0x29, 0x43, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 11m49.788115421s ago: executing program 5 (id=1862): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) socket(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp6\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) io_setup(0x8, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f00000002c0)}, {&(0x7f0000000340)="853fb58bbfe8dd0cc89d43d5d23b1300ed7e35f003657088996f21190dcb6b3f58c4056eeda3ad7e97ab52e04a101c55ad140ed006cb1a657170168fef29b9d66a7d877d1c71536b486b0ef40e14b84a970df872", 0x54}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000900)="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", 0x121}], 0x1}}], 0x2, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f00000000c0), 0x3, r3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, 0x0) 11m34.657069917s ago: executing program 35 (id=1862): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) socket(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/snmp6\x00') sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) io_setup(0x8, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendmmsg$inet(r1, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f00000002c0)}, {&(0x7f0000000340)="853fb58bbfe8dd0cc89d43d5d23b1300ed7e35f003657088996f21190dcb6b3f58c4056eeda3ad7e97ab52e04a101c55ad140ed006cb1a657170168fef29b9d66a7d877d1c71536b486b0ef40e14b84a970df872", 0x54}, {0x0}, {0x0}], 0x5}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000900)="9b76f00d7896f57313214b00958aef52901a18ff216310ac27dfc6ab72d9613160c3fe223de4ef6e9dcd5966d72ac2fc4a746fc1e58398e50f7b08bba2b56220a751e01156a10aa2d92861404dfce53be69bfbf0faf3f853d5564407f0eff9eac60e1876ff775bdd17d67ca7b0826783e51e632396fa918cfe55adfeb1c5de1f5db782645a54057c205ce92ac4452f95ea214c24046862a0c7d172664efe5359850941e99a984a02579e6e76ed6a2d2d3e14457ef8fd37a65bd54fa0af9a14822a0b17efd93089f033a33419a6b1551cff524261ab14ce3981e0155aeae9f3d41b98d22267970f8db7710b53546995dcd1d0302bd1c3d09d35c93425adfe9cfb250edea1e4df50d9c0744615708cf0ebf24396a3fe9af2675629938555c8a13b9d", 0x121}], 0x1}}], 0x2, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f00000000c0), 0x3, r3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, 0x0) 10m29.677613564s ago: executing program 6 (id=1999): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x15, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$key(0xffffffffffffffff, 0x0, 0x20004010) r0 = getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000b9e6f4bd5bcfd5b710000000000000000001dd28ea3200000000020000000000956b0368182d659de16ab340d1ddbc2a03759a713d8b05daba8f7fd8ab627ba7cee46560b65951ba1e38f888ede2829e3a2a16ed"], 0x0, 0x1a, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) 10m24.943032663s ago: executing program 6 (id=2004): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e00000095010000a24700000700000001220300", @ANYRES32, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000010000000300"/24, @ANYRES32, @ANYBLOB="a0aa701738cbb37d4fecd8db1de46c949cde27e102af61c29702dce0bcfd5841d48b94a813a01a1f1ec8adf6f20632634ed8b1fb98c315468547989d559d05c25a09e46615691e7a40045bbdf7901ae50623f9a23b9093607ffe0929d8ed86432657bdfe4a53c14cc8ec78038d98339be31e64d474ee51d35c7d1eddf8c736ce36a6c03b86e553ae2998a16f73c69d6753462bfd7170c6c0e387be3745fabe8ba5"], 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM(0x23, 0x3, &(0x7f000068c000/0x3000)=nil) mlockall(0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) r4 = shmat(r3, &(0x7f0000ff9000/0x4000)=nil, 0x1000) shmdt(r4) shmctl$SHM_UNLOCK(0x0, 0xc) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="3f000000010000", 0x7) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="1c00000007ffff0e"], 0x52) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) 10m23.469573098s ago: executing program 6 (id=2009): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = accept(r4, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r6, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x8001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) 10m21.802653178s ago: executing program 6 (id=2012): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff29}, &(0x7f0000000000)=0x40) 10m21.569375628s ago: executing program 6 (id=2013): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000280)={0x18, 0x0, 0x0, {0x6}}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6ea1893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508011132153c528f7bca92980a3223c5b9cdddedb0a14adddf9a6e70a26b5c0ee0879c349814bee9d96d8bd23db4e801d49201ae84090455682794098afa42b34196b1d849020eeeb1ef48d003d71524683d7cdfa841bca708414fb8ff49742420d1ab7fa678aa4806d5247616e8bc0b02887f8efe9310ccf9bec1c9b7f6671c9d59ac6b09b4436cafdd1887c8e884c930d21ace088ccc99a94d4b33da2fc1b1310bb607a9ad65844655de1ac9fd36d12e07a821fb951368a970c58fb4f3f403fdaf68902874"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, @mcast1, @empty, 0x20, 0x0, 0x0, 0xa}}) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 10m18.702900484s ago: executing program 6 (id=2016): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) kexec_load(0x101, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d12, &(0x7f0000000340)) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000680)) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x3}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)="56fd1725fc3e1415d275696232728f0c33a087d3469784aaa6ed1b985764e2b203329fd42043c8fd9e2e2a5e1b70c11a18c57f2d48b278e671315354d7df7bb56a503c78ac583e92aa41ca674f58a5bc827013e558d634299868cd171c6b038460ced80d0f10cd3c1c39e5389012f04bd4da577d8b8bbb310eb0af3431b471c1c092ebe0d573715599e2f986a62e91c7a8384558babd28bfc4", 0x99}, {&(0x7f00000004c0)="c4d3b0aaba1a609b075e90a3d9d6fff8bb3ffbd0cdd35495a519d7fb9d38770cf42edaf387ceae3490cec15625e423028feef1a8b7c6f019c29dc425c7e48e6eac9236236b280f9bbfbd6f4953b47669f5e5841352c73c27d29a2f151bb3d45a065d6dd3af0eb0133697a156554456b51f38f744bcf398be7b7e16581de32a4e55f2addbbd436a058274105be8fcc127d949f71012b0f98088fade56f2e4d96cbaeb7b6ee2c86cdcc2464a6042d7381cb67170c5f68e3f01d81a939466a7fc4ab0ca9d7c8a1d3893eaf5f0dd50c6f722a7d199ee3e3196", 0xd7}], 0x2, 0x0, 0x0, 0x2804c810}, 0x48000) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='3', 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a34010000020a030000000000000000000700000a0c0004400000000000000004080002400000000108000240000000010900010073797a300000000008000240000000030800024000000001d3000600d2227515d943ea970330498a30780ef7bd4fb3e1bc2d5fc9c4cc3d8e9617bf33e161dc0b47a6f8b98486650afb5902950a219e0d46375b9f2c2cf4ae29a0806547306420279fcaef211dc4d89c815037ce6e50e19063eabe5694835761df5267d1c284e7f72a9c6d3e88a33a3acedaac17b446e209bac8df8855ee5cfd5862ccb18aae35c3e391ce493fddb79fa56fd348d934997a72cb138d70ff7c8aef16ea43a8a6a654e43bbb931c2f92cc807b6cefdb3232fc409cbfd9eecece8df37a171208ad22fd55d99ae97bb08c876f6a000900010073797a2d0000000008000240000000013c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021740000000c0a00060000000000000000070000000900020073797a31000000000900010073797a30000000004800038044000080080003400000000238000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800a0001006c696d697400000004000280140000001000010000000000000000000084000a"], 0x20c}}, 0x0) 10m3.380688468s ago: executing program 36 (id=2016): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) kexec_load(0x101, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d12, &(0x7f0000000340)) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, 0x0) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000680)) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000240)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x0, {0x4e24, 0x3}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000180)="56fd1725fc3e1415d275696232728f0c33a087d3469784aaa6ed1b985764e2b203329fd42043c8fd9e2e2a5e1b70c11a18c57f2d48b278e671315354d7df7bb56a503c78ac583e92aa41ca674f58a5bc827013e558d634299868cd171c6b038460ced80d0f10cd3c1c39e5389012f04bd4da577d8b8bbb310eb0af3431b471c1c092ebe0d573715599e2f986a62e91c7a8384558babd28bfc4", 0x99}, {&(0x7f00000004c0)="c4d3b0aaba1a609b075e90a3d9d6fff8bb3ffbd0cdd35495a519d7fb9d38770cf42edaf387ceae3490cec15625e423028feef1a8b7c6f019c29dc425c7e48e6eac9236236b280f9bbfbd6f4953b47669f5e5841352c73c27d29a2f151bb3d45a065d6dd3af0eb0133697a156554456b51f38f744bcf398be7b7e16581de32a4e55f2addbbd436a058274105be8fcc127d949f71012b0f98088fade56f2e4d96cbaeb7b6ee2c86cdcc2464a6042d7381cb67170c5f68e3f01d81a939466a7fc4ab0ca9d7c8a1d3893eaf5f0dd50c6f722a7d199ee3e3196", 0xd7}], 0x2, 0x0, 0x0, 0x2804c810}, 0x48000) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='3', 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x20c}}, 0x0) 3m12.457404367s ago: executing program 4 (id=2804): keyctl$clear(0x3, 0xfffffffffffffffc) r0 = signalfd(0xffffffffffffffff, &(0x7f0000010b80)={[0x1]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(r0, &(0x7f00000002c0)=""/199, 0xc7) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000000c0)='w', 0x0) 3m10.668109411s ago: executing program 4 (id=2810): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x8000802) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) mkdir(0x0, 0x0) chdir(0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x700, 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 3m9.17591006s ago: executing program 4 (id=2815): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000200)='.\x00', 0x810004b4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 3m8.902479344s ago: executing program 4 (id=2818): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) close(0x5) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) close(r2) close(0x4) (fail_nth: 1) 3m8.538282685s ago: executing program 4 (id=2821): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x28) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x0, 0x0) chroot(&(0x7f0000000180)='./file0\x00') pivot_root(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') r0 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r1, 0x0) stat(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@remote, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e20, 0x380000, @local}, 0x1c) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000003280), 0x72ab7a8c4d9c27ff, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(r6, r6, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r3], 0x3c}}, 0xc000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r9, 0x1, 0x10000, 0xfffffffc, {0x52}}, 0x34}}, 0x4041) r10 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r11 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r11, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x2, 0x83}], 0x1, 0x200, 0x37, 0x0, 0x42, 0x5c}) r12 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000032c0), 0x2, 0x0) r13 = socket$phonet_pipe(0x23, 0x5, 0x2) r14 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r15 = accept4$ax25(0xffffffffffffffff, &(0x7f0000003300)={{}, [@remote, @default, @remote, @null, @rose, @rose, @netrom]}, &(0x7f0000003380)=0x48, 0x80000) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003480)=[{{&(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000240)="f337070f14d3e616f1f7fa3707964957b0309f6bb255375c9776ec119c4be128a632", 0x22}, {&(0x7f0000000280)="a7497d746c2a2cfd2e526430cfaed00a126e41e27fad84b6", 0x18}, {&(0x7f00000002c0)="73bb47134f87fbf11164962e5256b8657fb426b55f1abccaa8b1c5aa02a5051f34374e51ed72f74d87a88ce89ad318b141ec74b8fdb63bee3fba9660c1584b1fe616daadadea3674cdb28e99a25890e7cd93ae821ac93667f64d71f08df1c2d21a387f4e6ded7d1e853248bdae96d65b165f9c63bb3904d750e58f8327f1731dcf228c81535f390212996a547edb7f2360e87174d087a40ef3093b047bd8e96c688fa87949c0512220bbe268f5c05b63d67cf523b97ca4b865b2911332484c2f28019484eafccae702e26d5c8a2348", 0xcf}, {&(0x7f00000003c0)="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", 0x1000}], 0x4, &(0x7f0000001500)=ANY=[@ANYBLOB="1c0000f938917f29", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32], 0x48, 0x814}}, {{&(0x7f0000001580)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000027c0)=[{&(0x7f0000001600)="dfb6e3666c6193a62ad24761374c2ad0b9cab13a4cd8354ed5d0c636a44ca71493d7015fae16634c861b40b21eb8b16aff2ba6ccb800c330a500c16c1df3447899ae3c1a1ea8cd37e537a1dcadd095d04b368595ac9237", 0x57}, {&(0x7f0000001680)="f9de411af5eec512aa28", 0xa}, {&(0x7f00000016c0)="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", 0x1000}, {&(0x7f0000001400)="39b6a5a40600fffaabe6afb10b31fb95ea01018b1c828d7fed3b2a79007674b308b197d95a503ae9c1205a71523c0f63202ad2d236505e9d29ef488c5d2e53fadbe7b35f70461e4b3b925ac44781e111d574a290d4518cd8727f757541df14efe0029b71a74db1806d3f0c5d75a2d47007a119781b8641d68f6bf02b74a5699b6a18c1688489c6bc0f85bc7e9fcad9e1b88f00"/160, 0xa0}, {&(0x7f0000002740)="eaf4a5758215ddf64105901a81d29f5dfe0d245a465150a2a0abdeff89a9fffaf8c22613150e11ecb48ff0f1faa9f5dbdcca7d04b71af43d47356bca92314be7bce7a0e20bb3d6acd29bdac42234c2beea9e30361f92582122f6bea854a84ef2d4e354628458f748060e40aaa78804d527f55f06f8d03ee3a804f77900", 0x7d}], 0x5, &(0x7f0000002bc0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r0, r1, r2}}}], 0x68, 0x8080}}, {{&(0x7f0000002c40)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003200)=[{&(0x7f0000002cc0)="9f", 0x1}, {&(0x7f0000002d00)="ef9cde3905fd79e98d56d333acaf567ac62f6a3faee6ca83ad053e5e2d7393ab0aa3853e98cac31f4eab2c823f3c1457482a21e1080012244913045b75df646e935e89c78ec87ba738d4eaa01ed825b23cc597e74cc5a327d991113e1779c0ac2ca537d3d2e3e62e4854974777068e1f714df9099d9b6ab150459c8d956ce03556ad73c52ff78ff862c0445d22d52691b43d2c808ef424dd5d2e1d9d31205f04a914b65ac63878e5", 0xa8}, {&(0x7f0000002dc0)="ea0185f83b8a6bba7b4ec32721dd02a62150e8d41cbe57fceaa2ab32e3709a8337029bc6332649deef78019c940029b7b951c8db18d224f781c79ae46d47fedf219f0f620156b59c803465efedd1087ecfcc8220f5c3b29cab4ed6f6d797fb00ae6a20c7b11426a81a17e7d33e71a5f5dd347ebd41c6a5a913505fcf71185d38ae510c5c107aa7e4954c92ac35a4a2aeae3c6bbd5457eca1a9faad58d1e62c759917cd2b67748f4520bcd43a0d18331e85ffdd5c10ec2debc386938b8594c51651d30fefc1635258f3b0f0a0ee20aa3b7a8968ad576bacd0106f649f6c1a28cb428d297a4c58fa84ef35929c868ba802b9", 0xf1}, {&(0x7f0000002ec0)="bc0adb07ddfb64da5b148f554c6c1795352dc374dd8276c66d1a73f4d2edf627dfefc373fe235f724df02211472bd4ab8eb315fc648b0cb857d3b7953a4cb49502bee10493c94ebd063b476ba195f69ea8f37080930285066cd7b23df1c9ce52c5d47b33382ae656cb02c3d998a257f4b71e8fbbf1f0b6cd02b88b88", 0x7c}, {&(0x7f0000002f40)="5535a802ef8c7263ed456b6fdb0a27844c5f348090bfb8a0ca741aef1173193bce59de8ea96743ff8af08d3db7237752b0ee8f0b71543333253fc1382d15d0a5751b0452c84b1e36bdc763ec66ca345658233f576d99a95116398ad32344c467bbf965e891f1be7410ef9a4c2d7bb69ec0f5828d8dd9118289e97f1f844022f1980eabe2c213b8b13ad45a764821910545b881a1c253a39e8bb3ed25ce6dc52dc3c2db649746c169a50fc1b2bb6bd97c16982de8cc119a8e10c3938dafa6b40b09013b27da2b5b1a041b171714b80f72454a40eb629387ed2b1b3458e59dc2f4fa48bdaaca46cb7b6b1de8c89c3e76c20adc308ff681fb5207", 0xf9}, {&(0x7f0000003040)="e529807673b30e1a795d9c23993e9d3cc38bb9402d7c7e86f1678e0ef7ed6f22282cd2029d1e842c01585a9c0e1272f911b1837b3c250e7b0fddcd33ec5cf90c0c83a5974874a12bb7c02a290abc3bc1e6983597578942ac6ce032f1752f6d58c99b49f2971fc8e86abdf979c22f96c3817451207835a14a7edd836aa9b49148fa6ae674f318e2233688866a546f15f5b99c0e4e590c9df1027fe8f3be520778fb48feee1531e66d", 0xa8}, {&(0x7f0000003100)="2e2320780476a17db5ef2614345848376257c5bafd2c45d486d38145fdf93c763afa2bec5ed03cd02f5862fcc01710bef7a090c319d1f44b8b2f4f2547c85df7624840ab89a552b4572a280c31874dbd92e88691dc9b8a349da1f9a0a48e19e16ea0f756dff010fe2c0527c80b7f0469557a6cf532760f3f4e42ec5d831abab54c143235dac4be2371ab908e04bf04dd6008e5c4b0eadb7fd54111a041b43ac424ffee20d2a4aeda9a4f66035c1da876f72cc247c4df5f928bcd008b3139de432037e09f4863f01f9552cc9f59a8225ec3eddd1ea8369baf1f7a56c44ab2c2dd0e5b37f1486c72", 0xe7}], 0x7, &(0x7f00000033c0)=[@rights={{0x1c, 0x1, 0x1, [r3, r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, r6, 0xee01}}}, @rights={{0x1c, 0x1, 0x1, [r7, r8, r10]}}, @rights={{0x1c, 0x1, 0x1, [r11, r12, r13]}}, @rights={{0x18, 0x1, 0x1, [r14, r15]}}], 0x98, 0x90}}], 0x3, 0x0) 3m7.862710464s ago: executing program 4 (id=2824): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2m52.532279167s ago: executing program 37 (id=2824): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2m51.065718139s ago: executing program 8 (id=2870): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002000)=@newtaction={0x2a8, 0x30, 0x2, 0x70bd2d, 0x25dfdbff, {}, [{0x294, 0x1, [@m_skbedit={0xec, 0x18, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x7}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0xb}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x5}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfffffff8}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xc, 0xffe0}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x69d}]}, {0x85, 0x6, "de616dd9ce3b892bb6fafca061bed3e644dcf9151f4527045657b89def02bb9cad6c62f8293cff1e7df3eb0803889f2fd92b151ed17ab9f17c47463bf4e7afe47ab1d24292b0103cbbc15977a51c0ae02a168eca666c86a6321ae76cba859e771aa7894ab8f8d473fc2af5fc18fb9399fdbb44bce22ac4c64feea69890f61ef4f4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ct={0xc8, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x9d, 0x6, "7aadf1ed7fc959bbde930d34bcb2a6f4c38c35df6edf364fc9b40d7033b2c48e005ed0b13236b265dba5cb90755884baaf4271498ba55f551c309d6ff6142ffba91b3c29b1ff763ebebc9d1a4dac98a01966a43b746b12062f036354534a775ef38de0214454d0c055d5f9a9ad14d9100b5f2d5dd1e259b407a5fc55920c31a192e0fb0576fe36024315cb9ccb4c897030acc11b70a808ceac"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x4}}}}, @m_sample={0x30, 0xf, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ctinfo={0xac, 0x13, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x5}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8}, @TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x0, 0x20000000, 0x5, 0xa0}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x9}]}, {0x4e, 0x6, "d85d43b7ea4d845296355f3471752799af01297afd6813bd04b7bb5071ef36fddfcc5033243031cd5319c20f6766f3d2d6051219b06ff3d56189745c3370e1a4b4879e3b2dc212a69a32"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x2a8}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 2m50.231186502s ago: executing program 8 (id=2871): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000500020100020800038005000000", 0x24) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x33, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x1a) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000cc0)=@newqdisc={0x58, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x10, 0x3, 0x1, 0x3, 0x400, 0x8}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x0, 0x3}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, 0xffffffffffffffff, 0xd, '\x00', r2, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00') fchdir(r5) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x5d4, 0x1, 0xee0, 0x850, r4, 0x0, '\x00', r2, r5, 0x3, 0x4, 0x2, 0x6, @void, @value, @void, @value}, 0x50) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000040)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) 2m48.521467982s ago: executing program 8 (id=2874): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0x180, 0x0, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x88}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x341) 2m47.449378943s ago: executing program 8 (id=2876): syz_emit_ethernet(0x76, &(0x7f00000003c0)=ANY=[@ANYBLOB="ffffffffffff000000000000080045000068000000001fdc5f3c726fdd1e7400019078ac1e0001ac14da85dc765ae01cba14bb0500907800000000430000000000000000110000ac141400ac1414aa832b00e000000164010100ac1414aa00000000ac1e000164010101ac1414f90f000048659effff00000000890b000000b1bd8eacbb82e70faf46de3a45206bfb6270fb12fe7470404ec803cdc5a4ff150951560cdb4b784abb8135ae652e899e251e8d90f2ce9cb7c07c2a6fd02b71f44247c1d7ec39925277fba2f4358a6a28f4f8ceb118b34e0e1b91dd"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r2, 0x0, 0x0, 0x4890, &(0x7f0000000040)={0xa, 0x0, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x13}}, 0x20) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b40a000040000900000000000000000002000000040060809c0a01"], 0xab4}}, 0x0) unshare(0x2000400) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pread64(r3, &(0x7f0000000480)=""/61, 0x3d, 0x7fffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xa}, {0xffff, 0x8}, {0xffff, 0xffff}}}, 0x24}}, 0x44000) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffe0, 0xa}, {0x2, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmmsg$inet(r4, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000002c0)}}], 0x4000000000000db, 0x20004094) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x199100a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x901091, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x9) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r9, 0x84, 0xcb, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d00090582", @ANYRES32], 0x0) 2m44.682174139s ago: executing program 8 (id=2881): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001440), 0x8a441, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_pts(r0, 0x42) dup3(r1, r0, 0x0) dup(r1) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000100)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x2001) ioctl$SG_IO(r2, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffc, 0x101, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000dc0)="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", 0x0, 0xfffffffc, 0x0, 0x0, 0x0}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000080)={0x17, 0x2, 0x0, "b43d70dde5dbbb000000002a32b172b60000c67f00edffffff00"}) 2m43.411347379s ago: executing program 8 (id=2883): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000010301010000000026000000fc0000000d0ab80892bf40ecc236e8ac3ebed9c369a1c99689f5c0bf"], 0x20}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\x00\x04\x00\x00\x00\x00\x00\x00nh#\xcf)\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[], 0xe0}}, 0x810) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x410000002) openat$audio(0xffffffffffffff9c, 0x0, 0x800, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000340)="41000000010001", 0x7) close(r6) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) 2m43.193441226s ago: executing program 38 (id=2883): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x1c1401, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000010301010000000026000000fc0000000d0ab80892bf40ecc236e8ac3ebed9c369a1c99689f5c0bf"], 0x20}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\x00\x04\x00\x00\x00\x00\x00\x00nh#\xcf)\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x1) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[], 0xe0}}, 0x810) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x410000002) openat$audio(0xffffffffffffff9c, 0x0, 0x800, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000340)="41000000010001", 0x7) close(r6) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe) 27.567354578s ago: executing program 7 (id=3218): syz_open_dev$sndctrl(0x0, 0x20000000000000, 0x80c00) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYRES64=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000580)='./cgroup\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x2, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$dri(0x0, 0x2d1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2d1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) r5 = openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f00000001c0)={0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f00000003c0)={0x0, 0x0, 0x5, 0x8, 0x2, [0x0], [0x0, 0x0, 0x6], [0xc4c, 0x6, 0x10], [0x8, 0x0, 0x0, 0x1]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000800)={0x0, 0x80, 0xa, 0x34325241, 0x2, [r6], [0x401], [], [0x3ffffffffffffff]}) socket$inet6_sctp(0xa, 0x1, 0x84) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1, 0x1, 0x1, 0x3f, 0x0, @remote}, 0x10) 26.55447321s ago: executing program 7 (id=3220): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x1fe6}, &(0x7f0000000200)=[{&(0x7f0000001880)=""/4082, 0xff2}, {&(0x7f0000002880)=""/4084, 0xff4}], 0x2, 0x21}}], 0x48}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r5, 0x0, 0x40000}, 0x18) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r5}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0xa, "fd"}, @global=@item_4={0x3, 0x1, 0x2, "6af9fd02"}]}}, 0x0}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000700)={0x14, &(0x7f0000000500)={0x40, 0xa, 0xfd, {0xfd, 0x30, "a4bcb53228304cf3ea364ea3dcc99db1171827f59387aec4ca95f23554632f55998c1db810c4902ffb1b1612ce95e0f066322fed88cf9d725048429a657b12791d83d2319c2ddad8fdf7c624acb48848415f71b4064b6b03d0514d35ef1cc66a15812372860a8fbf9fc10bfa10d3f996d2ca7ca157796efba9c3c7837335c229f9698d5be54edf039f485ac4508d9565351c3fe959ec202ac13307375319bab9eec53bfecf84420e121a6f5db0b62bf4dfed40cd4b1960f52f760e1dc7056d9dccba3ce702353e47a0111d7d6a25d59c26791b69882793f172f6915a4f307caee96b69de60d5a14ed64c154342b5d19f017439c6174a93943a9bb9"}}, &(0x7f0000000640)={0x0, 0x3, 0x88, @string={0x88, 0x3, "f21d8da807b0f3c8ea8266f18fbc28ede903c41b706eef675c54c46123e961dbff511b0c766536bdde9267f265a0cedc97ead1373a0e5f6d5c78a662a2aa6007881329e4b6f0f61731f7bfdcb1b79c25c415add3119d3ca2e81f874ed3a018c85c1a86596c20946136152dde50c2fafc8008e294917b9b0f813e82bd892ae3970fdac2f71e0d"}}}, &(0x7f00000009c0)={0x34, &(0x7f0000000740)={0x0, 0x16, 0x22, "04a8377d8e75449e9dbd46423eed7b1d25519fb08f51c35edce41878fd7bc4687d5d"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x80}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000800)={0x20, 0x0, 0x101, {0xff, "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"}}, &(0x7f0000000940)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000980)={0x20, 0x0, 0x1, 0x1}}) 21.657464588s ago: executing program 7 (id=3229): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xfc}}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r1, 0x0, 0x0, 0x4890, &(0x7f0000000040)={0xa, 0x0, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x13}}, 0x20) 19.643303205s ago: executing program 7 (id=3234): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) unlink(&(0x7f0000000100)='./file0\x00') write$USERIO_CMD_REGISTER(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x7fff) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r5, &(0x7f0000000340)={0x230, 0x7d, 0x40, {{0x500, 0xef, 0x0, 0xb000000, {0x0, 0x2, 0x7}, 0x0, 0x0, 0x0, 0x5, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1h\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\b\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x230) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30"], 0x58}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r6, 0x5404) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000200be040205fe056402040c5c0009003f0020030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a3200040216000800", 0x64, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100feff000037153e370248018080351700d1bd", 0x33fe0}], 0x1}, 0x0) 18.004990849s ago: executing program 7 (id=3237): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x8800, &(0x7f0000000180)={0x0, 0x100076, 0x100000}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x0, 0x1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = syz_open_procfs$userns(0x0, &(0x7f0000000040)) setns(r3, 0x8000000) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f917240685", 0x14}], 0x1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000003d0007010000000000000000047c000008000880040008000c00018006000600800a0000100002800c000c"], 0x38}}, 0xc000) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="b8ef5f68", @ANYRES16=r5, @ANYBLOB="3103000000000000000005000000"], 0x14}}, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) 12.674405105s ago: executing program 7 (id=3246): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.log\x00', 0x10000, 0x40) mknodat$loop(r0, &(0x7f0000000140)='./file0\x00', 0x40, 0x1) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x4010, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',privport,access=', @ANYRESDEC=r4]) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) 11.231930521s ago: executing program 9 (id=3249): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008fe087bd00000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f000000a380)="be4d71cffc88e11a367d930acb0d717b76b8c522e61ef58d9d2af6fe2150ef21a1432de9208f6cd1f22ab7b351c60b49dcbb5c8192d3233f5e3dcfad2d39e99a18ea2369e9e93ca531cdb094179febd32eb062de97986c1a668e7f69e7053150874f6b6a03858a51b9436b91cfe416f2c44661257b3000db4c844bfe08c8da0d45c960d16f7cb869ec58de41b87ada4bbfe39210801918b79203e1e989dcf5940b5cfbd2c4dcdb1bb9b63ebdfa612f7382a0f5279095433cc222765a677e8c1b351fcafb37de0cf7916d3d95d15616bf3b747f36f4c596c0ba0cb4d1429763d0b8a94c0d3827723c5609bc673149e88fa1661c17a6946fb190919ee51f6625372eef93a3f648950c632f1321f9d65da26bcb8e01ee90a295a4396201f819e3ff748c815f38b62d8a681831e883b2634bf8003992fd364e06b7250b3d5ebdd00d36ee184e34810d74952a91b158615a09936b2dbfcdbd357ba23163c13dcccd846d7a3c204428413e705bede36c480bf88233450643f42a24f1721989fb5306b5a69ec66af8eeaceaf24213f2a477c8361c7eb2d32526364e0353a5bc70d1caf5713965f43b578c80e9495a79d00654643b6e43e15b0b281830354e7f747c87c9ed2a0cdbd6b575f87c69323ac09f061797c48c693810da61ecf7ced544ece795c8df5612826b5226bcfca1a415ec5f4888a87dbd5803299ae0009080ebce3dae7f26cf631044e0d7fbc7a2a90e2a3ad77ae0c052ee1c83aa4f5dd9a01d7c418592689e52a613ad70f346e3f14fde4fc77ed1566c3075e10d6f242ed8f0b82ecf6c61141650c16e5613322e567988c696f7c9a19c798c16e0368b63691ead7d1857043a2a48afd76cf8363b2fcfae48443d329d223f3ab5de69675a0f345b6aad3baf1c6696afc51c4fa8256b4f079ce3700220583e1b2d0b27c2f0412b8d11e12140e79bbd61cc681bb3e7bc5b5ca5f8a5d317fc8da871f20e69b2417e0156dbb3a6d94667e55de25b9cc71e638b6f4b104e50880bd691c17cc7683a029bad4be1f796fce5f179c7b9ca39864f1f38a7795aefd72b9b23e42a9de62a810b816aa5837b419a331ee2501ebd8ae21b41c04f754d60f95481a2fa722209289b4670f745dcf830fa1314188df2abf6333c7df9119e92173dd4687da7182689b2ae0871cbdf8e93a3b237162c8b5f21d848cf358978baaabf72ffe7b1174ebd9ec0f5858b6c97e40f99790f4aad5d407c50e8e3e60529baea447ca55b373349b2aebdd1be91d6d86cc51df79b4fddc198a662ad75421a9ce4b67d415ae583282014d3d2895155da4b90c235b97348a28697a44c4effb558f2dc6f997e75248929e11272e1f35c24cee6e24efc4d1e8a89fad90ff8ad1c3b910a4f547425c2716a4115ead6b94876b8c1830390b90db2cbd1caca94cbbb231b3f7c1a5f87aa581914a9e0de4e2a2eb71c0c2d8416b631d56fbcd9e865d64dc34b4f189f9e320769e52fea5b5023166e4cfd0c2cade2a92eb3dd3583ae14080b5bff0ce6623797dec9055c4f2421fd6a6390641e4b2d12e8fb36b1ee883792bd3d9238a6ac772e5f87c8f605ed89ff8a966ec68a5b2678f7753ad546dd5ab367bae9d7e9eacada8201e2518239ac3c685b38c3894d871199792c8f272ac24bb979344225734096f06813c3c18b92db0b3acaaf70b15e0befb70c9c7425cbe2f02bc64e992292f61f9fefa987794865305ed5a6d4ae44d3d16e1e4510033296daac4f49a80b817af43636892c5e44cc00ae59f87adf74c90e4eb1170b2ff764a4c3e946f3d1e59ac3acf30ab22f881df0845a30011ce206fe12b97cf8dbdcd3a0aa2a76e0c594b887b12363b22fcdbcaba5a6ebdfbd01bd76b5f67e3ae35cfaa72fc8c47466b07d577a95d5cb80930581d215ca456db156d085435f4b2750bd204e8e2e4b49cd399453a0ba2c30236ab19f8eb1f5318f926f1fd73d4365e6dd802d90e1e89483c1be686c80b13e0e55c77cd276c994e0fe17fffaf4f01451ea10d0d8dfdbafd73ac0a1eaf76eb6be65fdf19060ce849519dfc09e9c3c7c36514e0a227cc6bf6efccbe43c97090b09da7c6a3b10fbf6630e460883d6afb03333aaad0431de08f7f7818f3fdcd7e6dc9e5bf7a3ea9986cd192156e4abcb46fb28837ef0b3ddfd0795dde2203b69610a42f467f8a2b93c746c3268f9420a67887bfa5f1dd9a525a60ce711859b6f54ffaaba83f827c3ff501eb361c01b11cf6b5ec6fafa1b11a22e6cfe8ba0cc37835a14bb2b33597e81197b4f214529a086a3af44fdec7551efc6cb6b796522ae765608d92d7c1244027aa3a8512c891f037de6b601b72d4f2838f8789e0a328e677b54297e39bd8ecb3db2749c9df02ec64619b1c788b9d8002cbec81c5b4a181212bb4ea135f72b09c2bf35f753d980a5497ba39029360d45b2f5a1a8b6a38ac57cc0e8bdd1add7ec38667206ba837563bf7194654124fac6d1e50f2859050f5cec9b8ee2708d7f651a9171ae1e670799319518903ac95eda1cbe82341aa6365e2206634d2d61653c09f74cea7e94603443fb6ebbb591c44c32930b221280bb52ccb8d9d006f287eaf9787a0556959fa1ead95709cda03345794455e9eaec7a559b6c0d1ff375fa856c3dbab0a3acfc2ee7fed8a571262a641cdc27432cf75828a493339e2eed9134f6c4dd25f55dfd8a4af6b204a45dd8d9ba0154cbb4deb9edbf298c5ced97ea51e5afae6e1c4516ea612384f243ae243e49952d0a716870c2cbc7ebc791ce268a57fc430b7ca77169cf330adccf8040f8425613d5b28009a310fa1b31411f689cd8221578e5fa0971a3fdee799eb9415baef6cfdf876cc184b987ee67dc0bb9dbc5e8e40a1d4a1a6147fd6b67c14b3c56a0da335ca68c1ec5ff2f87a8f0084ef4f3fc7e20d157236caf701186caf320d439d5db898288a06a0fbf65a9ccb188285a799c8ef8c230ef857765de02e4fa7fe27b07bae22e7b7b4046d1faf46626005f9a9b3995b633767e1feafdd3d173021b4a1fdbeb0d0d0670db65d1472b639ed04f452186365ee0a39ff35177d4133840ddd562c064b1fd35047aaa2b685c28f76e6215e7c6ad244b85248677fe3a19bee43a4f3b53c870ff1d4eb74bc1303db999b7723311ef147210c5d83ce2bded56c375a92d2a1ec871a86187ee1382ba9beba73f5ed2838789c6fcd35f9147a19550c11faa736185c5cc7b28362c857e0e23936dd0b532079d6a4e7720b50ce69a8d054054355c2c1c959ea15eec54fe16d5d2863526316741a3bfb1dffe4d00e994a434c45b1d9f2d982ee233a1e0583aacdc950cf7ec60dca425a7cec778590d6aa2f693081f1d8b1459d66b814a151053292521e9c8ad1159d60bc4534043bfe1ceb6dfcc14557de26d175f380d7df968349e6f4c425101de971b620c779632dc7158a141882b997d70fa43ffbe0cb0bbe32cf760069cd78c0e474b5eadd56d4d574d02621c499059a517fb7284a6567894defb3782af6fd7c2c0de75264c1ae1dce3698b3a94a8a5aef3c5ce16b3b233e86a072ab568be23ac05e4c6ed3dbcf0b75c1e17bf42b01522e96a49e32d5044bede64c15ec3a94abebed65a6bce143b2d04d64078fdcf8931df45473f63e2de9881e8c69f2b6027716d219fe5965529aa84063fca41625cd501d1479a2623ff0d8a2ecdccc09c1c11cc9c74fd8e4f098b6402ce7ba5e7ca0b01b288a23d42f274bf40ad69661bf67c1b21a8d7eaef43afd0b13fafc8dc9801c7141247343f3d01a00e0339c4c58e68370a7f0d4753d5f2b62610b65111678863cdeb34d10fcf6b6a1ad2310ea3ff5c72de3e7ea188b775c55a73db47e2a88602ae715f0d700986ed0335d89a687a5778e86f759ff0755380eb093ef28ad5a809eb4114f79c6002621ac86cde349bf726c7d90657918896a9cfb827ea6c39ced86d40efe5ab1f059f22cc3c0ac7d59c9ae7a462a2118b93fa322c325de0f702098006982568cbae6016c655ea0d94616ec2033496275887c5ac068e10d4c1ae6081a45a8182fc69095689c654085e2f349319e83076e41eb8fd9053928c184448f921f30bb1e2775b1a34d5191035412bb6be6e3ccb4732c9f59dda86fcba98db0776a7eec0c2cae4f6e3a7f06b9c4ae1c5621231c9e472c5fc2ca2665cf3719cd9ead847f32f6bfead127092f5360e572a4644413cb1c5ff723af0bc22fcd5c7f329538ff4b1dc97ae2320eca0b9b44b56eeb51eee3fc066b9178a567cd691b6b1f6ec6e072413c3cc2d5b40d121f10b1563d847d40eb8a4a4a3f4065ca4953a2586e6b61375b48e09d655fe767a8019371b165c32036c08013f15cc646cec980d6b4bb91ba6698f32b4dca135a3b8e07fa753b20644af18ec515afd90bc88273cd9b7e7c90fc38ef0616e4d3481c692276fe116713958872115cc77692b489a7d7746387435c383795c53fcdd4bd71ba364f00747dee74d9c9231a4a242158773f622501a63c81b9094c83aad6d28b97aed0cfc176b46d023c125094d409e1c2860883630d66ea193c8ec3f836ec00d10d67928517f946dcc29b7575c0038c0e0cc838733b07006addca00bb39e17f770cb1443d2a3818ed65debfd85a280c95d9e23f55cf0dfce69f2dc50e4e50d9c36be3d3f44f9da39d4837f6ca75a85bef64a35e7173f78d376d6b19706b8167479a4276e6e893a0f01e41d38a7fd7d2e8b96288766b9f0703ddad97e46bbe5d507820b3b2e6f27559970a76777deada422949eef1209a7c9e1592f8f9987e24f004331496f60b89347184cdb86035934d316548d3677d87b545d20944c06c52f3fe01958c4082ff5b0abb934f4df5557223b8a58d3f53ffd13f17c3f3904b0d78ba88c49a9a22975211ea59dfb5bcea95dd46e8ff981749c5aea152d687d7431351191fe1b4f8e6c31e75b7957c7b6b92f04e12a0bc8daaea1a243c78d9e2cef7f4e094fce667a65a387629cc54b791f6d17b9d4059d8878727d4e5699d083462b70cfecd9ceb5dbfa0c5938445681e6870f06316faff8884b441575a3b5b2af043b8b7199dc3eeb0d6692d494db800a9ecc331b204a20e93221d1bef15c48d31d40b517c6261faa88c7305654d87196cbf4f1135f4232f483f4b0788968eac307fadc73fecaad4c6cd55f8c332ec108d6e7fa44be23eec2699c16c355071c904fea738691a37fdaba6a298401399fd39b8a9934ff2d9761a98c4defd7acbfd4ff76ed909d820e2b4f6eef0cfbc12bedb1428f56596c3019d7906cda1ec2eef5183febe0c8510995b126627f58b017f2a97c4a0534ded308c884e339c42ee3591e1f0b2808f2157740d347e509a226a0e6a29f23b297810afa6cc2100aed04f40d7a14d13f4b6eac3997879c9738ecaca7b3a600c3476f49a4e74bdca7046391bd003757b0031cc5b2039c7275dc76927c88c2bf220ae2ebc8ad724672abd3f0d5b20f06bfa2d9f7471d1e57607225a57141361107a5f5899c6417153b6275a7550933350c3a7c0777036157d20e27e10d3ce2f3b2769e24231e6d65444aa33badfd5568cef933efa787d4bec1d236a8277871d93f8213bcb494e8703fe60fa755a6c6c8a3278331d251f3c4cd8450e2699d66009a454bef847ffd8894de112c30e28bfeb612ff7732236bf3dd78f7c10b6dcc2158a0cd5df3d2baaf851edf57d3c3d50e0e63d383b481b9d8181a860595a878de1e48f02869bd1281eaba7ab14873eb48c6dc0ca3289f09be6bd89762c87b090d52b4e8c8964fc5ef190c6a22bd38b1c15052b3a1300060a3a45ebe93959e2b42208bb1be68f5cb2a11a2ccf6e085d891269c7085732a4a3791eccb40088f8715a3471a4b759674b827e4b85015412d0fe0bd81f095f59d5b6cbd49fcb65b3aa2e505c3c74c8c78050d84bd2c1c99ad7cd0f162ab8bb6f20141c5544107e01976b2eee266117845c61a0aa654e8dd8f37ff5f2c9b84e5eb3d49b17dda9b47b9250ad61b072582c97d2db84758dc451164cb4892b8c4e40b30b656e7e7132a274a22a5d4681448e7c1fafa0947ab7ef35dc4d77b88c71c56bbe825f27be26df8d53ca6c57d1002719085d8ef857c823916612c733f9658ca0e4315a72cf4d8ca44b4f6f6e333957a28805aceb0a1b35cd15f5b4a99eff8ce1e9f31fe139e083ee59f235a7c26143925d287b8ddb3a1c734353503f291afdbd5cd3743b29880a98b29a8a66af1353b552596e0d8bb1c60c76011f354e3fc320bf113905f03bc41f057500625d7e1d24460d04f06fdeeb2eba502cb75cbe8ffeee1831739b4df59cf86b3dc2a59fdfc65ad14b529f417e7d8188ce62a8430cfa63840b018951eef97ddf4e9c9ff9cfb27a0be59d2e4ce7dc66086de920a87da9c8b54995494bf39c3db696cb5d6324a507a5a9194e56992f54355947bf0e907a89431a231bf1d5733dfd794301db08d96a2f8cc4821a8359cfcbfd798ce04c73f14d6ba5823e283d45cad1cf8be94e05eed5442d80e80d68157b46e28079f8857a1781bd91d6dd5b4722db83d6baaa7543d7f88d2d674164c4973a60ffddfec5140598d4d862b80e67c255e6cafa431c58f48e98b2684c86f67354bcf0afbf3a62dbcf9a954c429b27b48da8aa4a8eb4c175b364e98b57d92420bf13725388576a31e63e4a42830d37757c0336b96131090ae79f7be8c717f6bf7394f55a4348e527855bdb87c2c8a2033d75bc0f8e8f78af190c659c22ecf545ee57fbf9cf768e4e9bb0f2d1f7162cb234e2a1f828ce7214880b6ee423b0ab43d14f76cc9338c15cf9c9875fedf45e426bba5f435af22b23a858b0e4f5457930c73191509eed6471fd2678fdace407218c7fd1a9881f4f75c2e969e34464e1cee65e0ddcac497b4d43c560336caf8262b1d8371ef608351aabfc75810cb998cedb5805ac26690792ffa6a3fcf4952f30ff1b7116f6f72292fde09d0bf42e212ef65f5c579b274db3674de64f0c97d655d197e6484247401fb6c9a5db096880dc5e2c98372c78b7d166ed456d69b1db59d87184b5f5e57fe5bfb16866c5c66087a4952e3466be048d461127768189a2712622b8590f95925335111da19438d9b1487ba57f304d90b1b5194829bb386205b83bc6191e1573833efb8fee00a176597991a131e706e6b388235954712c2bd91676ef4682fe0a1cbf991b05cd6f8d1ca5040d5c4dce76263531aaafee6314c7dd572b511308e95a0f2b7360da02ec751abd185f5350c4890b1c255d8f821b789a43c13271a3ff2456921c0952b0e4ebaa70d6c7897f5b4f4dc7fe4b044aa71211dd330e758088845771c12756b4612caa7c0bbd8ae8448e48802ec53949e8f2ee82489a5d89fc81e0f835e3a712032d486211eeddcc5ec1cd58908326409b5c6024e732bc7040b06e845486c23e5905bac85f738b09eb08ca882420752d88b67e7f8f7140cfa28315f879640d77fd073e16d26793727161edca5d603cbbed5769f2b63433f1c354169e949002df6911192a9f4e60884769b1893e02fb3826e25ca04b0262f011de53041c207c67eb9f6e1bd1229f78159f789b20ddce7f72ba9261138bebb66d8f229acddd8ce3a8f31fc940fad7a157750b020d6a76f6c52167bca5312dd5655c9469f0591e2ac5ecc81100646b4300e8edede1fa0db10340a609b431b9a4a30397febce3907d8b6e43a33dc1fbea0285bad07f6e0b5de5ed9c8c2583ccca5e1767b263732a1b08df50fc5ee4e3c8d74047412b92933974b4f57f7107e702d6face42e9ad4ccf0f66b465d10d9bc40330671281492bf16f48212bef467abdacd8f96784184e965c8f15dac72a988e8319c0fc4785fbe3dddeaf246f14aee382383b93a556c8cd884b83f229e2acfbc32a415bfbfe41de2941929de08523e06df72b19f003c95bcfdb878ae4b1c0677d57ef8a8a9daa2ee901c21664d0b831db4aa0863cb5069830bb3647d053d98c6812987ab48915fee9513ee5e25f105b2486608ae00e1bed503eb308ee9c381498fd7fedce617539f3dc63a7679352755fb071f8e3bf698addb854a36601f03fdad835429e9b56a54558c57f0450dad53411a12e314960f7d2f09ab4db88d4915369239d0ff2f54593a313123ed098d2fd2dd2635a8e4378252f35cc370a87424224c2bc9dedf7e3d12143f774569e24586ab22849d80d8d2e19c42ce96a3ecf3be559282ccd6227894b015e6514b49510640206efeea7ff011630b1033ce0fdb55f80cc26dba75429e8606b34e652fdbc31be95e2ce3c9ae3e419f2116b9f1ef9388f4f3a652152024e4b16fc357162fa935068ee880597262728947df8432993c914fde67960f3ff9aadfc8c14459cd07ea13d0ab7587f10028bde2452e757b4d61fae9deb4632dfbcef0e0b518c59e2fbf18c1e3ad950d961e834ca071b7804c85b92d6b22edc356019783f41b85dcf0d72f3102b7effa855220679dbf2225a3f13ae98a84036193aad4fe6095e49edf7c313e62e1dcb325bc423869a2399cbdb1bc45d583f56c8cb28ea0df0af3a45ea137f902e5b735224c481b96030a0aa134b21965535e36acaa5f9a0a6349cd6a397cc9b56d86af6da47604358ed8be567b53d9973282cb3f695a1c8fa3fc7f873926a79639ab6caee5e4178d0ba663e23443fef0ecfabe3051ff9488c194be7e2901367890b8dd11819023194c4048ccb9f97eeea6be375c54b87a92cebd551df5cca54bf36f93f738cd7df391018c711daad3b5c9581c0a2a06c635833555eeff00fb26737160e5737c3bfcbb909a1c2768c29b869c2529b785d157238e6c2a54e8847dd5a5f877bb7f9cc08de20706778277c261a6850e73b04658a2716a8caca03bca4959064dc339bec2e1df7376de581856b5811a7a6032bc6e91f735a4dd40f83b6d31d0f1d7e8eebfe208a127b2ca20ae6d3a0cc27a3c8d2844574b24b317c6b074d08d4057f8172853787f5fa40a7bf809c7c1e19fc7640dc3bdab9c7cb0fbbecfb4d4be9c2ccac403c81ecbb20205861577bd81ed5c29816f502c0e04b8e17ec9bedb5b731f953775b5521411abcd0c9a084d8e2768e26e639d4789ec27f8686d97d09a6864eb49a2a9124e29b83960c1360d1afeec1be3226cc4a85b7cd7b67f77975daa4b1d7f2672c8dde3f3a74d3b93964496e33f9313eb39cf23b55043f5f8fe97b2ff65568abdcafe7a334f1b8d149ea2568340e11a5be9f219472eed4a52a6aecb56f575ce1ebfcc87957ef02d7654d43da4eed7877f0e338f9f3cc5ebc21738feacd22d251143ba5e0bac1a283187d1895add0a45bef87856e3cdd89e67bf5fe2e1d94d4a6afb3d5f9da24ab3d66437145558ad0cf258fb90e36c5dd5bdec7d23d83106475f7b5c59c2867fb33b41874d3c0cd5b7a726bf02ac05eb3d4b9909c909f32d8b7af160c01e1d34ddff6a85ba0e2af880421f8c90da613a934a76f1052b9d714621f4c2ddc5bf2aea39d639f584f48f4521304c75d14e720b2de4f2fe167a2689854ef8ec5a6dc3b03da8e95c3ed4df13e5f1f1df1a6b370619a517d5bafd8bd35cb7f3c8a1a3f7012c5552502d923313e0dac0ca207e438a200cd76fd476d1e2a7cc079decfdf846665dd0b4928c79aa240dbfcc82bbf2618e5cc75179a1aa67219c359b513bc36211eccfbecf04f6bb923c98a3e38981c020a94350261b6aec4cc46ffbcea62e7e24763310293a7cbfb5f6a8de9a67eba3b9232871d218398c80683654a83922deef374cb0df46c2fe7d04599d51fdf4b0832d18703cfceede58ced88a235b72254a0d144656323785d79ea57886ce92056a40c17dd2367e71ffa1c4970bd36a02552c16b96939612ff1be7173d8838edfbff77366bf49f75763ede34e7a5864e9c8afd24f2897ea76b69353b1cdd936818c991b08f175499566f9029dac26064053a7cd80b82860291ae6a41ac00a118ed1c7beb73b7634dc252e047803803f79983a0bc48bb7993ea64f288474a37c6fddc4071cd211b3eb7202f0b273d0f785f7d3f2ab900cb595a1f1bfebec9431bc60a99ece23258eb48590b7cbf3fe16965fc3ffc6910735c6d63fdeb729bcf08124d3428a069e099b7e817e3d5d8a9562f78e61cd5fa99fb99ab4f7d6916e24e5f52835f9830d6cd341386264496c26263855b6724e4641add6d025bc57fbfadae5aaf0f520a37da28114fe421ad081686aa25517d67f4370c9fb32a70468a827eed34fefea7080c1ab4e1733fa5737ca204744af7295009f7e22f090546595af83d278db4255236468165371cf02b636ec12542a33eaf68cb4f389ddfee7ba51b745acf81e2a6f821eddc36adaebf44a650abc43abcabb560d71a4d5c7768b6d5e8b38213eb1401e8c9f3b83f13754ba18c62045f0b12598dd64e10a1eabd7102b0fa9aca81ce0124d94ba618fe4965e12b3f9cb6057386e8e455bd749368836a33633d33d63e9dc92dedccbb4210257dff587d4177f482da83d4e01f94fec24bfbfdfda6e0911c155d04f491154d036d1c4e604fd7ac8fe10d9db45edca2c47cf7ba6dc8db9338e7246ccf462867a1f5018ba19309c62329929f298aa06733b8c9213282f0f0bc4d9004fdbe02647975f3b832f35ac6efdc504eb6831ee07bbf738b781ac6073596d56ad14ebc68ae0bd9719ce0e7adbfa030d8fda3f61082076ae902660b15cf62e798a95b069e90f7dcefe16317f5961418f519bed68cab442d8717c8ca2221e44f0c01e2d2b60541c31da60b82828f6b2df51095c28b9e05334cf12bb3a468b92e0028d3124eb2ab7f98f61d50946fbf8f1ae7a6ba1736725d06a354195335e9d93bd5e5788b02070aefbbe8ad6a1902cbb62506e3191df1ce6115ae6ca6bbb2f98f0c2d1f0d5e4f7b16a70e7249eb2b215bb3cde421031df6f930a2a8c2e4d8fc7a5cf4303618b0acf4137e4c37f09cd50fef5b053089ff293a3c0b83938e1b417664f2340696bc9ee5f72d2cfc8a578d0d6e14a050c3dbf9435073ca280b036276935d457153f10aeab06c7ed0e4a2a93130410e6a1708bad8d39728b1c5c0e0150aaaac1ca72c2cbc566a5a42226f161208efe5991d7e2cdbde887b24005b058c34cf32532eafb8788e3118d42a04134801484c3dbe327940d1cb6db8d900d0651200b125ea5f2a75e02fdb2c6fb7e1bbd0174ec75a36f64f1ad8b458b64d8bc5c896660ebd872e1141600fdeb40cf416985d5e3f50faba9cf3970caf42e30683e5387c3ebaaa63c2c020c0b63482010a30e6da80001f3a05e128dc736ec466c764b2074a122e4d93bf46162fabc93ea9fee05cc3904c23da27e9acda012e7a91cb317b2abe7947a67ba400166e01f02185f9f0f64282aa9c9ce7be3901e76c71ae8351b3bdd01a699328105a1918a126d5600019ee4bbb68b39bffb7c8090f687768b8a05f28945c7bdd6d5beb585019afab11efc5704d6f3f575b068fb26413c00b545f1f01366fcf395f5b005099cc1f43afbe02a23b208344485e6b0f7ee496cdb0fa4987b40631b9691d6909e9ce090821333d55483cdbfb459a8f47409b16e6b5dfcf2716d7b232de5a7ccf42a574af130142eb0e35ea0b9221c", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r3, &(0x7f00000007c0)=[{&(0x7f0000000440)='e', 0x1}], 0x1) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="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", 0x2000, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x18, 0x0, 0x0, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={&(0x7f00000002c0)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x29, 0x2000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$netlink(0x10, 0x3, 0x14) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd090032000300300000006000000001002f0081e949b93897bc3b0000000000007d01ff020000000000000000000000000001120022ebc26e993953"], 0xfdef) 9.369899139s ago: executing program 9 (id=3259): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040), 0x8802, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x20}, 0x38) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x1f, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x66700075, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0xb, 0x2, 0x6, 0x100, 0xfffffffffffffff0}, @tail_call, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000ec0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000006380)={0x2020}, 0x2020) 7.847003744s ago: executing program 0 (id=3260): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) unlink(&(0x7f0000000100)='./file0\x00') write$USERIO_CMD_REGISTER(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) process_vm_writev(0x0, 0x0, 0x0, &(0x7f0000121000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x7fff) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f0000000340)={0x230, 0x7d, 0x40, {{0x500, 0xef, 0x0, 0xb000000, {0x0, 0x2, 0x7}, 0x0, 0x0, 0x0, 0x5, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x14, '\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e<]\xb4Z', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1h\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\b\x80\xe8\xe2\x89\xdad\x9a7\x00'}, 0x12c, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x230) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a30"], 0x58}}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="7800000018002507b9409b14ffff00000200be040205fe056402040c5c0009003f0020030a0000000d0085a168d0bf46d32345653600648d27000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a3200040216000800", 0x64, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100feff000037153e370248018080351700d1bd", 0x33fe0}], 0x1}, 0x0) 7.381760517s ago: executing program 9 (id=3263): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000400)=0xa0000) r1 = dup(r0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000040)={@my=0x0}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(r2, 0x8, &(0x7f00000000c0)) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad7, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000240)=0x6) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0x0, 0x720d, 0x148, 0x0, 0x148, 0x1b0, 0x240, 0x240, 0x1b0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x4, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x0, 'veth1_macvtap\x00', 'pim6reg1\x00', {}, {0xff}, 0x1d, 0x3, 0x49}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x5, 0x1, 0x3], 0x2}, {0xffffffffffffffff, [0x1, 0xb2cc575b459b5b33, 0x7, 0x2, 0x2]}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010900, 'pim6reg0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-ce\x00'}, 0x58) accept4(r10, 0x0, 0x0, 0x80000) fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000380), &(0x7f00000003c0)=@v1={0x1000000, [{0x4}]}, 0xc, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x960f9e99050d99f, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f5, 0x0, 0x0, 0x0, 0x0) 7.310858849s ago: executing program 0 (id=3264): r0 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, r3, 0x0, 0x4}, 0x18) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r3, 0xffffffffffffffff, 0x32, 0x0, @val=@tcx={@void, @value}}, 0x1c) sched_setscheduler(0x0, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r5 = accept$alg(r4, 0x0, 0x0) r6 = dup(r5) r7 = open(&(0x7f0000000000)='./file1\x00', 0x10f0c2, 0x0) ftruncate(r7, 0x200004) sendfile(r6, r7, 0x0, 0x80001d00c0d1) ioctl$RTC_AIE_OFF(r0, 0x7002) 5.917013182s ago: executing program 3 (id=3266): semop(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(r0, 0x0, &(0x7f0000000300)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)=0x0) timer_settime(r2, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x8000f28, 0x0) splice(r6, 0x0, r4, 0x0, 0x7f, 0x0) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"77ebe7b6fc013d894c2a9e66465a622287588df4f531d872071ea17682bf18f6", r6}) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) 5.784413009s ago: executing program 1 (id=3267): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xfc}}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r1, 0x0, 0x0, 0x4890, &(0x7f0000000040)={0xa, 0x0, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x13}}, 0x20) 5.154726043s ago: executing program 1 (id=3268): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000007c0)={r1, r3, 0x3, 0x0, @val=@perf_event={0x1}}, 0x18) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000600)='nv\x00', 0x3) socket(0x2000000015, 0x80005, 0x0) syz_io_uring_setup(0x754f, &(0x7f0000000680)={0x0, 0x7de6, 0x10, 0x3, 0x3c8}, &(0x7f0000000700), &(0x7f0000000780)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r7 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r7, 0x1d, 0x0, 0x9, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000300)=[0x0], 0x0, &(0x7f00000003c0)=[0x0, 0x0]}, 0x40) unshare(0xa000200) semtimedop(0x0, &(0x7f0000000080), 0x0, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 4.808024098s ago: executing program 3 (id=3269): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000647000/0x1000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004100)=[{0x0, 0x14}], 0x1}, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000060000000000000000000000850000004100000a85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendto$inet6(r0, &(0x7f0000000700)="bb3a", 0x2, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "0daf7461cfccf6ce"}, 0x28) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), 0x13}, 0x0) 4.026986069s ago: executing program 1 (id=3270): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0xbd}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, 0x0, 0x500, 0x0) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000600)={0xe0, 0x10, 0x50b, 0x0, 0x200, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xbd, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff5f5f2829882fbd9423debbb86f9dba4a2dba4dbe076c02262600c43443efd6f5091dfbd56183a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9e4606d2e4cc898739222c5d3a83c00341c5ae846a60cf93ab48d68e8e9467d1ccadc42"}]}, 0xe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.917836422s ago: executing program 0 (id=3271): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) kexec_load(0x101, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(0xffffffffffffffff, 0x80044d12, &(0x7f0000000340)) getsockname(0xffffffffffffffff, 0x0, &(0x7f0000000680)) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x81, 0x801ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 2.925115962s ago: executing program 3 (id=3272): io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280"], 0xec}}, 0x0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x3a, 0x0, 0x6, 0x4, 0x0, @void, @value}, 0x28) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) ioctl$sock_SIOCINQ(r3, 0x8905, &(0x7f00000000c0)) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000002280)={0x0, 0x0, {0x4, 0x0, 0x2001, 0x0, 0x0, 0xda563bad98e044d6}}) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000940)={0x0, 0x9}, 0xfc6d) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f1ff0000000071103300000000001d300500000000004704000001ed00000f030000000000001d44000000000000620a00fe040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a8641aa05a1336b3b4c4becea710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343cccc953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c9102", @ANYRESDEC=r2, @ANYRES16=r2, @ANYRES8=r5, @ANYRESHEX=r2], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x800000c, 0x0, 0x400000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket(0x1, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r6, 0x1, 0x2f, &(0x7f0000000000), 0x20000000) 2.924641065s ago: executing program 1 (id=3273): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x20}, 0x38) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x1f, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x66700075, 0x0, 0x0, 0x0, 0x2}, {}, {}, [@jmp={0x5, 0x1, 0xb, 0x2, 0x6, 0x100, 0xfffffffffffffff0}, @tail_call, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000ec0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000006380)={0x2020}, 0x2020) 2.201319456s ago: executing program 9 (id=3274): syz_open_dev$sndctrl(0x0, 0x20000000000000, 0x80c00) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f0000000280)=ANY=[@ANYRES64=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) lsetxattr$security_evm(&(0x7f0000000580)='./cgroup\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="fa"], 0x2, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$dri(0x0, 0x2d1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x2d1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) r5 = openat$binderfs(0xffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f00000001c0)={0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f00000003c0)={0x0, 0x0, 0x5, 0x8, 0x2, [0x0], [0x0, 0x0, 0x6], [0xc4c, 0x6, 0x10], [0x8, 0x0, 0x0, 0x1]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000800)={0x0, 0x80, 0xa, 0x34325241, 0x2, [r6], [0x401], [], [0x3ffffffffffffff]}) socket$inet6_sctp(0xa, 0x1, 0x84) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1, 0x1, 0x1, 0x3f, 0x0, @remote}, 0x10) 2.193589994s ago: executing program 1 (id=3275): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000007c0)={r1, r3, 0x3, 0x0, @val=@perf_event={0x1}}, 0x18) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000600)='nv\x00', 0x3) socket(0x2000000015, 0x80005, 0x0) syz_io_uring_setup(0x754f, &(0x7f0000000680)={0x0, 0x7de6, 0x10, 0x3, 0x3c8}, &(0x7f0000000700), &(0x7f0000000780)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r7 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, 0x0) unshare(0xa000200) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 1.980964147s ago: executing program 3 (id=3276): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&\x00'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 1.347428058s ago: executing program 9 (id=3277): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r0, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x335, @tick=0x8, 0x0, {}, 0x8}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000140)={{0x0, 0x7f}, 'port0\x00', 0x0, 0x0, 0x8, 0x0, 0xffffffff}) 1.27235475s ago: executing program 1 (id=3278): socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x31ce, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x1e0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000008000000000000008459097489ce80b13d00803460aedb634074e6d5e100000000000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r5}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r6, r3, 0x25, 0x0, @val=@tcx={@void, @value}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, 0x0, 0x200008d0) syz_emit_ethernet(0x3a, &(0x7f00000001c0)={@local, @link_local, @val={@void, {0x8100, 0x5, 0x0, 0x3}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 1.183313727s ago: executing program 3 (id=3279): r0 = syz_io_uring_setup(0x7ea9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x30120}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0xdce, 0x2) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000200)=0x101) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='pids.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='/'], 0x118) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r5}, 0x10) sysinfo(&(0x7f00000004c0)=""/131) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x108, &(0x7f0000000100)=0xffffffff, 0x0, 0x4) r6 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2}, 0x18, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) landlock_restrict_self(r6, 0x0) r8 = open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) fcntl$notify(r8, 0x402, 0x8000003d) landlock_restrict_self(r7, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, r4, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000400)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) r10 = accept$netrom(r4, &(0x7f00000002c0)={{0x3, @default}, [@bcast, @bcast, @bcast, @default, @rose, @default, @null, @null]}, &(0x7f0000000340)=0x48) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r10, 0x84009422, &(0x7f0000002400)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001000)={{}, r9, 0x6, @inherit={0x48, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000000000000000000800000000000190000800000000000001800000000000000000000000000000005000000feffffff02000000000000000100000000000000"]}, @devid=r11}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r3, 0xc400941d, &(0x7f0000000500)={0x0, 0x4, 0x6}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000900)={{r0}, r9, 0x18, @unused=[0x4e, 0xfffffffffffff001, 0xc2, 0x1], @devid=r12}) io_uring_enter(r0, 0x1fd0, 0xffffffff, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1.04919727s ago: executing program 3 (id=3280): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x30d4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x1fe6}, &(0x7f0000000200)=[{&(0x7f0000001880)=""/4082, 0xff2}, {&(0x7f0000002880)=""/4084, 0xff4}], 0x2, 0x21}}], 0x48}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r5, 0x0, 0x40000}, 0x18) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) r7 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x40, 0x4, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x2, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x6, 0xff, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x1, 0x6, 0xca}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x5, 0xe1, 0xe, 0x20, 0x8}, 0x5e, &(0x7f0000000140)={0x5, 0xf, 0x5e, 0x6, [@wireless={0xb, 0x10, 0x1, 0x8, 0x12, 0x2, 0x1, 0xfffd, 0x3}, @ptm_cap={0x3}, @ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0x7, 0x16700, 0x5, [0x3f18, 0x0, 0xff3fcf]}, @wireless={0xb, 0x10, 0x1, 0x2, 0x12, 0x0, 0x5, 0x0, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x24, "5729a35ae85d7f7cf150745ddb70dd83"}, @ssp_cap={0x14, 0x10, 0xa, 0x8, 0x2, 0x834, 0xf00f, 0x1, [0xff0030, 0xff3fc0]}]}, 0x6, [{0x17, &(0x7f00000001c0)=@string={0x17, 0x3, "7e57728f528cb6e86f056504be0be22633c54818a5"}}, {0x9e, &(0x7f0000000200)=@string={0x9e, 0x3, "e2c830b43457cce894cfd04233c785155f9bef984619f02b6624a74d6ec7b9cd66da29df242fb902165d55c555664e2b7e2b68c40321093ba9540488952dce4d7821c587e9cff4a3844f5a9c92b9ddfcf6382aa6625a2507db45753bf2b6657d40704fadec331aaf67f46fb91d1e9219c0ee9212f8acad862e131f78df98ea2505ae5353bcbe4b0dbd3667f86479827cffbf16ee16824e467699a17c"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x437}}, {0x9d, &(0x7f0000000300)=@string={0x9d, 0x3, "dffae173e8b266ba5e07663e46bf1b68698d13800d973e4e3903e580d1ae0e1ac8d1ff304c6aad4251451a81fe9bdd2d7c8b4c8fdbca2697acf6b5c867267abfa7769a175221124af72a00e0010ec810218f87aff4634013d827e8b71948f53245db911bd2dd3515f260701ef49080c19ec1b28e19109e7907f87a7cb54defa10060f2f51ba8297cbdbe774d522eae71a55542f8f5b5a9884500e6"}}, {0x3e, &(0x7f00000003c0)=@string={0x3e, 0x3, "26022ad4adc55e42c2d5a3425e0b6a693f127c0329549e02f68bf8de7e6362aad7580c111adc8ba2d38d7e73b5237b19a1c1393040a0dfb6f0bedbc0"}}, {0x67, &(0x7f0000000400)=@string={0x67, 0x3, "fefcaac5b63059976db157627d86294b7bb92c66d0584d3462d155e0354fcd1be816ecc0f762da04d669c1c4ee99b4de02ce033066e2085b8850c73800de794ae4d3211d5c350ad37eb95a274efb1a8dca35847e6aa69cfab74a188b7da524196b8b4d8fcd"}}]}) syz_usb_control_io$printer(r7, &(0x7f0000000700)={0x14, &(0x7f0000000500)={0x40, 0xa, 0xfd, {0xfd, 0x30, "a4bcb53228304cf3ea364ea3dcc99db1171827f59387aec4ca95f23554632f55998c1db810c4902ffb1b1612ce95e0f066322fed88cf9d725048429a657b12791d83d2319c2ddad8fdf7c624acb48848415f71b4064b6b03d0514d35ef1cc66a15812372860a8fbf9fc10bfa10d3f996d2ca7ca157796efba9c3c7837335c229f9698d5be54edf039f485ac4508d9565351c3fe959ec202ac13307375319bab9eec53bfecf84420e121a6f5db0b62bf4dfed40cd4b1960f52f760e1dc7056d9dccba3ce702353e47a0111d7d6a25d59c26791b69882793f172f6915a4f307caee96b69de60d5a14ed64c154342b5d19f017439c6174a93943a9bb9"}}, &(0x7f0000000640)={0x0, 0x3, 0x88, @string={0x88, 0x3, "f21d8da807b0f3c8ea8266f18fbc28ede903c41b706eef675c54c46123e961dbff511b0c766536bdde9267f265a0cedc97ead1373a0e5f6d5c78a662a2aa6007881329e4b6f0f61731f7bfdcb1b79c25c415add3119d3ca2e81f874ed3a018c85c1a86596c20946136152dde50c2fafc8008e294917b9b0f813e82bd892ae3970fdac2f71e0d"}}}, &(0x7f00000009c0)={0x34, &(0x7f0000000740)={0x0, 0x16, 0x22, "04a8377d8e75449e9dbd46423eed7b1d25519fb08f51c35edce41878fd7bc4687d5d"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x80}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000800)={0x20, 0x0, 0x101, {0xff, "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"}}, &(0x7f0000000940)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000980)={0x20, 0x0, 0x1, 0x1}}) 1.018184206s ago: executing program 0 (id=3281): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000647000/0x1000)=nil) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004100)=[{0x0, 0x14}], 0x1}, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000060000000000000000000000850000004100000a85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendto$inet6(r0, &(0x7f0000000700)="bb3a", 0x2, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "0daf7461cfccf6ce"}, 0x28) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0), 0x13}, 0x0) 878.101183ms ago: executing program 0 (id=3282): io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280"], 0xec}}, 0x0) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0, 0x3a, 0x0, 0x6, 0x4, 0x0, @void, @value}, 0x28) capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x401, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) ioctl$sock_SIOCINQ(r3, 0x8905, &(0x7f00000000c0)) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000002280)={0x0, 0x0, {0x4, 0x0, 0x2001, 0x0, 0x0, 0xda563bad98e044d6}}) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000940)={0x0, 0x9}, 0xfc6d) r6 = socket(0x1, 0x803, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x6, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4002) getsockopt$SO_BINDTODEVICE(r6, 0x1, 0x2f, &(0x7f0000000000), 0x20000000) 75.765621ms ago: executing program 9 (id=3283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r3, 0x10c, 0x4, &(0x7f0000000000)=0xfffffffc, 0x4) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x15) openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000000)=0xf) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000002c000100000000000000000004000080080018800aac0f00f1977610950c44756a457c5a349291e2282b8342fc659f1f5a0346867d758021230ce2b4e50266cf3e3b60e5138ffd11bcfd9b64f1807fcfe2cd2aabe13806aba2ae8693"], 0x1c}], 0x1, 0x0, 0x0, 0x14080}, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff00000000000088a8260081000100000c03000080000100006fbbbb585c5141e1"], &(0x7f0000000080)={0x0, 0x4, [0x72f, 0xd63, 0xe80, 0xa7f]}) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 0s ago: executing program 0 (id=3284): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r3, 0x10c, 0x4, &(0x7f0000000000)=0xfffffffc, 0x4) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x4000, 0x15) openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(0xffffffffffffffff, 0x40089413, &(0x7f0000000000)=0xf) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000002c000100000000000000000004000080080018800aac0f00f1977610950c44756a457c5a349291e2282b8342fc659f1f5a0346867d758021230ce2b4e50266cf3e3b60e5138ffd11bcfd9b64f1807fcfe2cd2aabe13806aba2ae8693"], 0x1c}], 0x1, 0x0, 0x0, 0x14080}, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff00000000000088a8260081000100000c03000080000100006fbbbb585c5141e1"], &(0x7f0000000080)={0x0, 0x4, [0x72f, 0xd63, 0xe80, 0xa7f]}) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) kernel console output (not intermixed with test programs): [ 1681.423531][T20133] [ 1681.426495][T20133] dump_stack_lvl+0x241/0x360 [ 1681.431219][T20133] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1681.436468][T20133] ? __pfx__printk+0x10/0x10 [ 1681.441102][T20133] ? __kmalloc_cache_noprof+0x48/0x390 [ 1681.446602][T20133] ? __pfx___might_resched+0x10/0x10 [ 1681.451939][T20133] should_fail_ex+0x3b0/0x4e0 [ 1681.456662][T20133] should_failslab+0xac/0x100 [ 1681.461388][T20133] __kmalloc_cache_noprof+0x70/0x390 [ 1681.466716][T20133] ? snd_pcm_oss_change_params_locked+0x13f/0x3d60 [ 1681.473245][T20133] ? __mutex_trylock_common+0x183/0x2e0 [ 1681.478804][T20133] snd_pcm_oss_change_params_locked+0x13f/0x3d60 [ 1681.485135][T20133] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1681.491039][T20133] ? rcu_is_watching+0x15/0xb0 [ 1681.495813][T20133] ? trace_contention_end+0x3c/0x120 [ 1681.501103][T20133] ? __mutex_lock+0x37f/0xee0 [ 1681.505816][T20133] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1681.512584][T20133] ? __pfx_lock_acquire+0x10/0x10 [ 1681.517618][T20133] ? get_pid_task+0x23/0x1f0 [ 1681.522211][T20133] ? mark_lock+0x9a/0x360 [ 1681.526542][T20133] snd_pcm_oss_write+0x2cf/0x11f0 [ 1681.531567][T20133] ? __lock_acquire+0x1397/0x2100 [ 1681.536601][T20133] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 1681.542412][T20133] ? bpf_lsm_file_permission+0x9/0x10 [ 1681.547790][T20133] ? security_file_permission+0x74/0x280 [ 1681.553429][T20133] ? rw_verify_area+0x1c3/0x6f0 [ 1681.558281][T20133] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 1681.563743][T20133] vfs_write+0x2a3/0xd30 [ 1681.567989][T20133] ? __pfx_vfs_write+0x10/0x10 [ 1681.572760][T20133] ? __fget_files+0x2a/0x410 [ 1681.577365][T20133] ? __fget_files+0x395/0x410 [ 1681.582040][T20133] ? __fget_files+0x2a/0x410 [ 1681.586631][T20133] ksys_write+0x18f/0x2b0 [ 1681.590967][T20133] ? __pfx_ksys_write+0x10/0x10 [ 1681.595905][T20133] ? do_syscall_64+0x100/0x230 [ 1681.600672][T20133] ? do_syscall_64+0xb6/0x230 [ 1681.605352][T20133] do_syscall_64+0xf3/0x230 [ 1681.609860][T20133] ? clear_bhb_loop+0x35/0x90 [ 1681.614539][T20133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1681.620440][T20133] RIP: 0033:0x7f241cf85d29 [ 1681.624943][T20133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1681.644553][T20133] RSP: 002b:00007f241dd78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1681.652971][T20133] RAX: ffffffffffffffda RBX: 00007f241d175fa0 RCX: 00007f241cf85d29 [ 1681.660942][T20133] RDX: 0000000000000001 RSI: 0000000020000140 RDI: 0000000000000003 [ 1681.668910][T20133] RBP: 00007f241dd78090 R08: 0000000000000000 R09: 0000000000000000 [ 1681.676883][T20133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1681.684852][T20133] R13: 0000000000000000 R14: 00007f241d175fa0 R15: 00007ffd55ffe048 [ 1681.692838][T20133] [ 1681.695988][ C0] vkms_vblank_simulate: vblank timer overrun [ 1682.059274][T20146] binder: 20143:20146 ioctl 400c620e 200001c0 returned -22 [ 1683.122564][T20150] block device autoloading is deprecated and will be removed. [ 1683.741456][T20158] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2860'. [ 1683.818199][T20158] nullb0: AHDI p1 p3 p4 [ 1683.831905][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.969581][T20158] nullb0: p1 size 2739478287 extends beyond EOD, truncated [ 1684.004236][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1684.015057][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1684.025211][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1684.035332][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1684.043483][ T5823] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1684.050963][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1684.244172][T20158] nullb0: p4 size 2395519696 extends beyond EOD, truncated [ 1684.665866][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.780159][T20169] delete_channel: no stack [ 1685.328095][T20168] delete_channel: no stack [ 1685.633583][ T5818] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1685.724107][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1685.750507][T20159] chnl_net:caif_netlink_parms(): no params data found [ 1685.783547][ T5818] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1685.800638][ T5818] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1685.820377][ T5818] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1685.828868][ T5818] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1685.854764][ T5818] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1685.938510][T20034] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1686.129406][T20034] usb 10-1: config 0 has an invalid interface number: 98 but max is 0 [ 1686.257187][ T5818] Bluetooth: hci4: command tx timeout [ 1686.330808][T20034] usb 10-1: config 0 has no interface number 0 [ 1686.458501][T20034] usb 10-1: config 0 interface 98 has no altsetting 0 [ 1686.489655][T20034] usb 10-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 1686.509845][T20034] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1686.560459][T20034] usb 10-1: Product: syz [ 1686.564822][T20034] usb 10-1: Manufacturer: syz [ 1686.607215][T20034] usb 10-1: SerialNumber: syz [ 1686.656273][T20034] usb 10-1: config 0 descriptor?? [ 1686.664485][ T12] bond0: (slave netdevsim0): Releasing backup interface [ 1686.721597][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1686.865019][T20192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1686.887546][T20192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1686.932857][T20192] FAULT_INJECTION: forcing a failure. [ 1686.932857][T20192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1686.980153][T20192] CPU: 1 UID: 0 PID: 20192 Comm: syz.9.2867 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 1686.990982][T20192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1687.001069][T20192] Call Trace: [ 1687.004377][T20192] [ 1687.007337][T20192] dump_stack_lvl+0x241/0x360 [ 1687.012056][T20192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1687.017292][T20192] ? __pfx__printk+0x10/0x10 [ 1687.021922][T20192] ? __pfx_lock_release+0x10/0x10 [ 1687.026994][T20192] should_fail_ex+0x3b0/0x4e0 [ 1687.031712][T20192] _copy_from_user+0x2f/0xc0 [ 1687.036358][T20192] do_arpt_set_ctl+0x759/0x1650 [ 1687.041268][T20192] ? __pfx_do_arpt_set_ctl+0x10/0x10 [ 1687.046601][T20192] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1687.052539][T20192] ? nf_setsockopt+0x240/0x2c0 [ 1687.057342][T20192] ? __pfx_lock_release+0x10/0x10 [ 1687.062397][T20192] ? rcu_is_watching+0x15/0xb0 [ 1687.067214][T20192] ? __mutex_unlock_slowpath+0x21e/0x790 [ 1687.072889][T20192] ? __pfx___mutex_lock+0x10/0x10 [ 1687.077951][T20192] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1687.083985][T20192] nf_setsockopt+0x295/0x2c0 [ 1687.088619][T20192] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1687.094557][T20192] do_sock_setsockopt+0x3af/0x720 [ 1687.099640][T20192] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1687.105252][T20192] ? __fget_files+0x395/0x410 [ 1687.109968][T20192] ? __fget_files+0x2a/0x410 [ 1687.114595][T20192] __x64_sys_setsockopt+0x1ee/0x280 [ 1687.119837][T20192] do_syscall_64+0xf3/0x230 [ 1687.124385][T20192] ? clear_bhb_loop+0x35/0x90 [ 1687.129097][T20192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1687.135033][T20192] RIP: 0033:0x7f5765f85d29 [ 1687.139487][T20192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1687.159127][T20192] RSP: 002b:00007f5766d8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1687.167577][T20192] RAX: ffffffffffffffda RBX: 00007f5766175fa0 RCX: 00007f5765f85d29 [ 1687.175579][T20192] RDX: 0000000000000060 RSI: 0a02000000000000 RDI: 0000000000000005 [ 1687.183583][T20192] RBP: 00007f5766d8b090 R08: 0000000000000440 R09: 0000000000000000 [ 1687.191591][T20192] R10: 0000000020000d80 R11: 0000000000000246 R12: 0000000000000001 [ 1687.199593][T20192] R13: 0000000000000000 R14: 00007f5766175fa0 R15: 00007ffe7d5c9718 [ 1687.207612][T20192] [ 1687.242304][T20034] usb 10-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 1687.288539][T20159] bridge0: port 1(bridge_slave_0) entered blocking state [ 1687.295683][T20159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1687.360963][T20159] bridge_slave_0: entered allmulticast mode [ 1687.404324][T20159] bridge_slave_0: entered promiscuous mode [ 1687.498103][T20159] bridge0: port 2(bridge_slave_1) entered blocking state [ 1687.542620][T20159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1687.601801][T20159] bridge_slave_1: entered allmulticast mode [ 1687.633771][T20159] bridge_slave_1: entered promiscuous mode [ 1688.019074][ T5818] Bluetooth: hci5: command tx timeout [ 1688.337577][ T5818] Bluetooth: hci4: command tx timeout [ 1688.898978][T20159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1688.980649][T20034] usb 10-1: [ueagle-atm] pre-firmware device, uploading firmware [ 1688.989627][T20034] usb 10-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 1689.001098][T17272] usb 10-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 1689.010638][T17272] usb 10-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 1689.269396][ T12] bridge_slave_1: left allmulticast mode [ 1689.275107][ T12] bridge_slave_1: left promiscuous mode [ 1689.356711][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1689.373209][T20034] usb 10-1: USB disconnect, device number 4 [ 1689.656726][ T12] bridge_slave_0: left allmulticast mode [ 1689.662688][ T12] bridge_slave_0: left promiscuous mode [ 1689.676923][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1690.095497][T20261] FAULT_INJECTION: forcing a failure. [ 1690.095497][T20261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1690.109075][T20261] CPU: 0 UID: 0 PID: 20261 Comm: syz.9.2875 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 1690.119886][T20261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1690.127271][ T5818] Bluetooth: hci5: command tx timeout [ 1690.129945][T20261] Call Trace: [ 1690.129956][T20261] [ 1690.141563][T20261] dump_stack_lvl+0x241/0x360 [ 1690.146283][T20261] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1690.151528][T20261] ? __pfx__printk+0x10/0x10 [ 1690.156155][T20261] ? __pfx_lock_release+0x10/0x10 [ 1690.161227][T20261] should_fail_ex+0x3b0/0x4e0 [ 1690.165962][T20261] _copy_from_user+0x2f/0xc0 [ 1690.170593][T20261] get_timespec64+0x97/0x280 [ 1690.175212][T20261] ? __pfx_vfs_write+0x10/0x10 [ 1690.180011][T20261] ? __pfx_get_timespec64+0x10/0x10 [ 1690.185257][T20261] ? __pfx_do_sys_openat2+0x10/0x10 [ 1690.190514][T20261] __se_sys_pselect6+0x12e/0x3f0 [ 1690.195503][T20261] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1690.200998][T20261] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1690.207360][T20261] ? do_syscall_64+0x100/0x230 [ 1690.212161][T20261] ? __x64_sys_pselect6+0x21/0xf0 [ 1690.217223][T20261] do_syscall_64+0xf3/0x230 [ 1690.221772][T20261] ? clear_bhb_loop+0x35/0x90 [ 1690.226470][T20261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1690.232404][T20261] RIP: 0033:0x7f5765f85d29 [ 1690.236846][T20261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1690.256482][T20261] RSP: 002b:00007f5766d6a038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1690.264929][T20261] RAX: ffffffffffffffda RBX: 00007f5766176080 RCX: 00007f5765f85d29 [ 1690.272928][T20261] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000040 [ 1690.280933][T20261] RBP: 00007f5766d6a090 R08: 0000000020000280 R09: 0000000000000000 [ 1690.288932][T20261] R10: 0000000020000240 R11: 0000000000000246 R12: 0000000000000001 [ 1690.296929][T20261] R13: 0000000000000000 R14: 00007f5766176080 R15: 00007ffe7d5c9718 [ 1690.304941][T20261] [ 1690.307995][ C0] vkms_vblank_simulate: vblank timer overrun [ 1690.417383][ T5818] Bluetooth: hci4: command tx timeout [ 1690.466023][T20263] netlink: zone id is out of range [ 1690.494776][T20263] netlink: zone id is out of range [ 1690.519371][T20263] netlink: zone id is out of range [ 1690.544206][T20263] netlink: zone id is out of range [ 1690.553572][T20263] netlink: zone id is out of range [ 1690.560372][T20263] netlink: zone id is out of range [ 1690.565870][T20263] netlink: zone id is out of range [ 1690.575107][T20263] netlink: zone id is out of range [ 1690.613321][T20263] netlink: zone id is out of range [ 1690.639878][T20265] ======================================================= [ 1690.639878][T20265] WARNING: The mand mount option has been deprecated and [ 1690.639878][T20265] and is ignored by this kernel. Remove the mand [ 1690.639878][T20265] option from the mount to silence this warning. [ 1690.639878][T20265] ======================================================= [ 1690.725878][T20263] netlink: zone id is out of range [ 1691.157792][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1691.185113][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1691.211725][ T12] bond0 (unregistering): Released all slaves [ 1691.237766][T20159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1691.247590][T20034] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1692.007202][T20034] usb 9-1: Using ep0 maxpacket: 8 [ 1692.014265][T20034] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 11 [ 1692.026418][T20034] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 1692.050672][T20034] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1692.059944][T20034] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1692.075273][T20034] usb 9-1: config 0 descriptor?? [ 1692.082614][T20263] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1692.202639][ T5818] Bluetooth: hci5: command tx timeout [ 1692.224764][T20159] team0: Port device team_slave_0 added [ 1692.236389][T20159] team0: Port device team_slave_1 added [ 1692.318983][T20034] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1692.386023][ T5898] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1692.558118][ T5818] Bluetooth: hci4: command tx timeout [ 1692.577309][ T5898] usb 10-1: Using ep0 maxpacket: 8 [ 1692.656685][ T5898] usb 10-1: config 0 has an invalid interface number: 97 but max is 0 [ 1692.730333][ T5898] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1692.877578][ T5898] usb 10-1: config 0 has no interface number 0 [ 1693.020692][ T5898] usb 10-1: config 0 interface 97 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1693.086062][ T5898] usb 10-1: config 0 interface 97 has no altsetting 0 [ 1693.110312][T20034] usb 9-1: USB disconnect, device number 6 [ 1693.138646][ T5898] usb 10-1: New USB device found, idVendor=0f0d, idProduct=ff22, bcdDevice=11.f4 [ 1693.150901][ T5898] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1693.166835][ T5898] usb 10-1: Product: syz [ 1693.179300][T20159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1693.186297][T20159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1693.257873][T20159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1693.403590][ T5898] usb 10-1: Manufacturer: syz [ 1693.408927][ T5898] usb 10-1: SerialNumber: syz [ 1693.416368][ T5898] usb 10-1: config 0 descriptor?? [ 1693.851078][T20159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1693.991424][T20159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1694.042461][T20159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1694.189341][ T5898] usb 10-1: USB disconnect, device number 5 [ 1694.257207][ T5818] Bluetooth: hci5: command tx timeout [ 1694.284921][T20193] chnl_net:caif_netlink_parms(): no params data found [ 1694.359322][T20159] hsr_slave_0: entered promiscuous mode [ 1694.406963][T20159] hsr_slave_1: entered promiscuous mode [ 1694.416910][T20159] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1694.447156][T20159] Cannot create hsr debugfs directory [ 1694.568489][ T12] hsr_slave_0: left promiscuous mode [ 1694.585811][ T12] hsr_slave_1: left promiscuous mode [ 1694.598081][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1694.612415][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1694.628041][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1694.637579][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1694.682037][ T12] veth1_macvtap: left promiscuous mode [ 1694.707822][ T12] veth0_macvtap: left promiscuous mode [ 1694.713663][ T12] veth1_vlan: left promiscuous mode [ 1694.727215][ T12] veth0_vlan: left promiscuous mode [ 1695.005470][ T12] pim6reg (unregistering): left allmulticast mode [ 1695.183223][ T5823] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1695.194126][ T5823] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1695.217931][ T5823] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1695.228992][ T5823] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1695.249801][ T5823] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1695.259115][ T5823] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1695.826143][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1695.895192][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1697.561202][ T5823] Bluetooth: hci1: command tx timeout [ 1698.403997][T20193] bridge0: port 1(bridge_slave_0) entered blocking state [ 1698.415141][T20193] bridge0: port 1(bridge_slave_0) entered disabled state [ 1698.424735][T20193] bridge_slave_0: entered allmulticast mode [ 1698.432197][T20193] bridge_slave_0: entered promiscuous mode [ 1698.440718][T20193] bridge0: port 2(bridge_slave_1) entered blocking state [ 1698.448521][T20193] bridge0: port 2(bridge_slave_1) entered disabled state [ 1698.457495][T20193] bridge_slave_1: entered allmulticast mode [ 1698.464617][T20193] bridge_slave_1: entered promiscuous mode [ 1698.624507][T20362] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2892'. [ 1698.648718][T20193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1698.660711][T20193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1698.721672][T20193] team0: Port device team_slave_0 added [ 1698.728179][T20034] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1698.734196][T20193] team0: Port device team_slave_1 added [ 1698.801782][T20193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1698.808900][T20193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1698.835538][T20193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1698.875344][T20193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1698.898638][T20193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1698.917340][T20034] usb 10-1: Using ep0 maxpacket: 32 [ 1698.925905][T20193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1698.956702][T20034] usb 10-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1698.977562][T20034] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.985817][T20034] usb 10-1: Product: syz [ 1699.017138][T20034] usb 10-1: Manufacturer: syz [ 1699.023165][T20034] usb 10-1: SerialNumber: syz [ 1699.046853][T20034] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1699.109271][T20193] hsr_slave_0: entered promiscuous mode [ 1699.118790][T20193] hsr_slave_1: entered promiscuous mode [ 1699.125646][T20193] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1699.142658][T20193] Cannot create hsr debugfs directory [ 1699.311515][T20323] chnl_net:caif_netlink_parms(): no params data found [ 1699.408562][T20159] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1699.420937][T20159] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1699.473878][T20159] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1699.570401][T20159] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1699.635321][ T5818] Bluetooth: hci1: command tx timeout [ 1699.676198][T20323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1699.683761][T20323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1699.691318][T20323] bridge_slave_0: entered allmulticast mode [ 1699.699539][T20323] bridge_slave_0: entered promiscuous mode [ 1699.714022][T20323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1699.722396][T20323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1699.729904][T20323] bridge_slave_1: entered allmulticast mode [ 1699.737615][T20323] bridge_slave_1: entered promiscuous mode [ 1699.785134][T20323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1700.009588][T20323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1700.142794][T20323] team0: Port device team_slave_0 added [ 1700.176866][T20323] team0: Port device team_slave_1 added [ 1700.374674][T20323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1700.391467][T20323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1700.424182][T20323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1700.443776][T20323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1700.463246][T20323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1700.502515][T20323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1700.769213][T20323] hsr_slave_0: entered promiscuous mode [ 1700.776918][T20323] hsr_slave_1: entered promiscuous mode [ 1700.783980][T20323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1700.791803][T20323] Cannot create hsr debugfs directory [ 1700.854728][ T12] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1700.938465][T20159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1701.001758][ T12] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.080953][ T12] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.186439][ T12] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1701.355034][T20159] 8021q: adding VLAN 0 to HW filter on device team0 [ 1701.377432][T20034] gspca_stk1135: reg_w 0x2ff err -71 [ 1701.383825][T20034] gspca_stk1135: serial bus timeout: status=0x00 [ 1701.391317][T20193] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1701.407538][T20034] gspca_stk1135: Sensor write failed [ 1701.412934][T20034] gspca_stk1135: serial bus timeout: status=0x00 [ 1701.427178][T20034] gspca_stk1135: Sensor write failed [ 1701.432547][T20034] gspca_stk1135: serial bus timeout: status=0x00 [ 1701.452091][T20034] gspca_stk1135: Sensor read failed [ 1701.458282][T20034] gspca_stk1135: serial bus timeout: status=0x00 [ 1701.464713][T20034] gspca_stk1135: Sensor read failed [ 1701.470789][T20034] gspca_stk1135: Detected sensor type unknown (0x0) [ 1701.477777][T20034] gspca_stk1135: serial bus timeout: status=0x00 [ 1701.484218][T20034] gspca_stk1135: Sensor read failed [ 1701.489883][T20034] gspca_stk1135: serial bus timeout: status=0x00 [ 1701.496360][T20034] gspca_stk1135: Sensor read failed [ 1701.511265][T20034] gspca_stk1135: serial bus timeout: status=0x00 [ 1701.522139][T20034] gspca_stk1135: Sensor write failed [ 1701.531180][T20034] gspca_stk1135: serial bus timeout: status=0x00 [ 1701.546707][T20034] gspca_stk1135: Sensor write failed [ 1701.557953][T20034] stk1135 10-1:64.0: probe with driver stk1135 failed with error -71 [ 1701.593276][T20034] usb 10-1: USB disconnect, device number 6 [ 1701.649455][T20193] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1701.678516][T20193] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1701.708841][T20193] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1701.717556][ T5818] Bluetooth: hci1: command tx timeout [ 1701.774743][T20026] bridge0: port 1(bridge_slave_0) entered blocking state [ 1701.781936][T20026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1701.849813][ T748] bridge0: port 2(bridge_slave_1) entered blocking state [ 1701.856963][ T748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1701.968819][T20159] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1701.991317][T20159] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1703.057465][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.436100][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.766829][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.777384][ T5818] Bluetooth: hci1: command tx timeout [ 1703.823210][T20193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1703.869791][T20193] 8021q: adding VLAN 0 to HW filter on device team0 [ 1703.889700][T16972] bridge0: port 1(bridge_slave_0) entered blocking state [ 1703.896845][T16972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1703.943721][T16972] bridge0: port 2(bridge_slave_1) entered blocking state [ 1703.950951][T16972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1704.016017][ T12] bond0: (slave netdevsim0): Releasing backup interface [ 1704.055177][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1704.266554][T20159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1704.627343][ T12] bridge_slave_1: left allmulticast mode [ 1704.633032][ T12] bridge_slave_1: left promiscuous mode [ 1704.670796][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1704.695734][ T12] bridge_slave_0: left allmulticast mode [ 1704.706455][ T12] bridge_slave_0: left promiscuous mode [ 1704.746073][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1704.840528][ T12] bridge_slave_1: left allmulticast mode [ 1704.846222][ T12] bridge_slave_1: left promiscuous mode [ 1704.891275][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1704.940064][T20470] syz.9.2898 uses obsolete (PF_INET,SOCK_PACKET) [ 1704.950218][ T12] bridge_slave_0: left allmulticast mode [ 1704.982706][ T12] bridge_slave_0: left promiscuous mode [ 1705.007411][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1706.971851][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1706.988871][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1707.000565][ T12] bond0 (unregistering): Released all slaves [ 1707.306196][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1707.326272][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1707.336972][ T12] infiniband syz1: set down [ 1707.343741][ T12] bond0 (unregistering): Released all slaves [ 1708.743571][T20159] veth0_vlan: entered promiscuous mode [ 1708.943055][T20193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1709.066138][T20512] netlink: 1264 bytes leftover after parsing attributes in process `syz.7.2902'. [ 1709.882338][T20159] veth1_vlan: entered promiscuous mode [ 1710.058750][T20193] veth0_vlan: entered promiscuous mode [ 1710.289470][T20193] veth1_vlan: entered promiscuous mode [ 1711.230957][T20323] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1711.370618][T20323] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1711.389161][T20159] veth0_macvtap: entered promiscuous mode [ 1711.413610][T20159] veth1_macvtap: entered promiscuous mode [ 1711.428866][T20159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1711.439658][T20159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1711.449640][T20159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1711.460907][T20159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1711.471609][T20159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1711.482300][T20159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1711.492184][T20159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1711.502778][T20159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1711.513846][T20159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1711.532905][T20541] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2907'. [ 1711.553049][ T12] hsr_slave_0: left promiscuous mode [ 1711.563632][ T12] hsr_slave_1: left promiscuous mode [ 1711.574402][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1711.582463][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1711.595132][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1711.604199][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1711.625727][ T12] hsr_slave_0: left promiscuous mode [ 1711.633543][ T12] hsr_slave_1: left promiscuous mode [ 1711.642082][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1711.650082][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1711.658618][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1711.666295][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1711.719114][ T12] veth1_macvtap: left promiscuous mode [ 1711.724704][ T12] veth0_macvtap: left promiscuous mode [ 1711.731643][ T12] veth1_vlan: left promiscuous mode [ 1711.736942][ T12] veth0_vlan: left promiscuous mode [ 1711.743457][ T12] veth1_macvtap: left promiscuous mode [ 1711.749086][ T12] veth0_macvtap: left promiscuous mode [ 1711.754791][ T12] veth1_vlan: left promiscuous mode [ 1711.760933][ T12] veth0_vlan: left promiscuous mode [ 1712.409313][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1712.457615][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1713.874458][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1713.962464][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1714.049088][ T8364] smc: removing ib device syz1 [ 1714.833296][T20323] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1714.845328][T20323] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1714.879551][T20541] netdevsim netdevsim9 netdevsim0: entered allmulticast mode [ 1714.907982][T20159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1714.924729][T20159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1714.934727][T20159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1714.946612][T20159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1714.957706][T20159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1715.051183][T20193] veth0_macvtap: entered promiscuous mode [ 1715.145211][T20193] veth1_macvtap: entered promiscuous mode [ 1715.154782][T20159] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1715.170119][T20159] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1715.181257][T20159] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1715.217957][T20159] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1715.296841][T20323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1715.408196][T20193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1715.463296][T20193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.487302][T20193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1715.546545][T20193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.593551][T20568] FAULT_INJECTION: forcing a failure. [ 1715.593551][T20568] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1715.606821][T20193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1715.635966][T20568] CPU: 1 UID: 0 PID: 20568 Comm: syz.9.2911 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 1715.646785][T20568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1715.656857][T20568] Call Trace: [ 1715.660128][T20568] [ 1715.663049][T20568] dump_stack_lvl+0x241/0x360 [ 1715.667733][T20568] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1715.672923][T20568] ? __pfx__printk+0x10/0x10 [ 1715.677509][T20568] ? __pfx_lock_release+0x10/0x10 [ 1715.682560][T20568] should_fail_ex+0x3b0/0x4e0 [ 1715.687242][T20568] _copy_from_user+0x2f/0xc0 [ 1715.691848][T20568] copy_msghdr_from_user+0xae/0x680 [ 1715.697055][T20568] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1715.702871][T20568] ? __fget_files+0x2a/0x410 [ 1715.707453][T20568] ? __fget_files+0x2a/0x410 [ 1715.712034][T20568] __sys_sendmsg+0x209/0x350 [ 1715.716619][T20568] ? __pfx_lock_release+0x10/0x10 [ 1715.721636][T20568] ? __pfx___sys_sendmsg+0x10/0x10 [ 1715.726741][T20568] ? __pfx_vfs_write+0x10/0x10 [ 1715.731523][T20568] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1715.737841][T20568] ? do_syscall_64+0x100/0x230 [ 1715.742602][T20568] ? do_syscall_64+0xb6/0x230 [ 1715.747289][T20568] do_syscall_64+0xf3/0x230 [ 1715.751785][T20568] ? clear_bhb_loop+0x35/0x90 [ 1715.756446][T20568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.762339][T20568] RIP: 0033:0x7f5765f85d29 [ 1715.766745][T20568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1715.786348][T20568] RSP: 002b:00007f5766d8b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1715.794757][T20568] RAX: ffffffffffffffda RBX: 00007f5766175fa0 RCX: 00007f5765f85d29 [ 1715.802723][T20568] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1715.810688][T20568] RBP: 00007f5766d8b090 R08: 0000000000000000 R09: 0000000000000000 [ 1715.818654][T20568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1715.826622][T20568] R13: 0000000000000000 R14: 00007f5766175fa0 R15: 00007ffe7d5c9718 [ 1715.834609][T20568] [ 1715.838287][T20193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1715.860148][T20193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1716.164541][T20193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1716.204852][T20193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.272503][T20193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1716.303134][T20193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.496584][T20193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1716.522107][T20193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1716.537732][T20193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1716.548918][T20323] 8021q: adding VLAN 0 to HW filter on device team0 [ 1716.644338][ T5913] bridge0: port 1(bridge_slave_0) entered blocking state [ 1716.651502][ T5913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1716.661237][ T5913] bridge0: port 2(bridge_slave_1) entered blocking state [ 1716.668425][ T5913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1716.699273][T20193] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.751691][T20193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.762315][T20193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.787309][T20193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1716.815557][T20583] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2913'. [ 1716.878762][T13385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1716.886644][T13385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1717.244207][T20587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1717.437197][T20587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1717.612576][T16972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1717.672400][T16972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1717.862550][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1717.907508][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1717.997396][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1718.061851][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1718.148673][T20323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1718.185160][T20323] veth0_vlan: entered promiscuous mode [ 1718.196173][T20323] veth1_vlan: entered promiscuous mode [ 1718.218767][T20323] veth0_macvtap: entered promiscuous mode [ 1718.228127][T20323] veth1_macvtap: entered promiscuous mode [ 1718.243489][T20323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1718.254053][T20323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1718.264019][T20323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1718.274676][T20323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1718.284601][T20323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1718.295097][T20323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1718.305065][T20323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1718.315898][T20323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1718.327359][T20323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1718.337227][T20323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1718.347756][T20323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1718.357694][T20323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1718.368184][T20323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1718.378071][T20323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1718.388624][T20323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1718.398507][T20323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1718.408991][T20323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1718.421450][T20323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1718.432505][T20323] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.441348][T20323] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.450165][T20323] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.458936][T20323] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1719.459952][T20626] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1719.468980][T20626] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1720.256296][ T3667] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1720.268030][ T3667] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1720.850783][T13385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1720.886760][T13385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1721.138691][ T25] IPVS: starting estimator thread 0... [ 1721.527169][T20642] IPVS: using max 23 ests per chain, 55200 per kthread [ 1721.697919][T20684] FAULT_INJECTION: forcing a failure. [ 1721.697919][T20684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1721.789738][T20684] CPU: 1 UID: 0 PID: 20684 Comm: syz.1.2922 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 1721.800555][T20684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1721.810606][T20684] Call Trace: [ 1721.813874][T20684] [ 1721.816802][T20684] dump_stack_lvl+0x241/0x360 [ 1721.821486][T20684] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1721.826698][T20684] ? __pfx__printk+0x10/0x10 [ 1721.831283][T20684] ? __pfx_lock_release+0x10/0x10 [ 1721.836303][T20684] should_fail_ex+0x3b0/0x4e0 [ 1721.840974][T20684] _copy_from_user+0x2f/0xc0 [ 1721.845559][T20684] copy_msghdr_from_user+0xae/0x680 [ 1721.850773][T20684] ? __lock_acquire+0x1397/0x2100 [ 1721.855806][T20684] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1721.861616][T20684] ? __fget_files+0x2a/0x410 [ 1721.866208][T20684] ? __fget_files+0x2a/0x410 [ 1721.870792][T20684] do_recvmmsg+0x3bd/0xab0 [ 1721.875211][T20684] ? __pfx_do_recvmmsg+0x10/0x10 [ 1721.880147][T20684] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1721.886034][T20684] ? ksys_write+0x22a/0x2b0 [ 1721.890581][T20684] ? __pfx_lock_release+0x10/0x10 [ 1721.895605][T20684] ? vfs_write+0x730/0xd30 [ 1721.900020][T20684] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1721.905994][T20684] ? __fget_files+0x2a/0x410 [ 1721.910600][T20684] __x64_sys_recvmmsg+0x199/0x250 [ 1721.915631][T20684] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1721.921193][T20684] ? do_syscall_64+0x100/0x230 [ 1721.925985][T20684] ? do_syscall_64+0xb6/0x230 [ 1721.930657][T20684] do_syscall_64+0xf3/0x230 [ 1721.935153][T20684] ? clear_bhb_loop+0x35/0x90 [ 1721.939828][T20684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1721.945717][T20684] RIP: 0033:0x7f1f3b585d29 [ 1721.950122][T20684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1721.969728][T20684] RSP: 002b:00007f1f3c442038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1721.978153][T20684] RAX: ffffffffffffffda RBX: 00007f1f3b775fa0 RCX: 00007f1f3b585d29 [ 1721.986115][T20684] RDX: 0000000000000002 RSI: 0000000020002b00 RDI: 0000000000000003 [ 1721.994087][T20684] RBP: 00007f1f3c442090 R08: 0000000000000000 R09: 0000000000000000 [ 1722.002091][T20684] R10: 0000000000002022 R11: 0000000000000246 R12: 0000000000000001 [ 1722.010067][T20684] R13: 0000000000000000 R14: 00007f1f3b775fa0 R15: 00007ffec792b9e8 [ 1722.018057][T20684] [ 1724.407139][T19944] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1724.560095][T19944] usb 10-1: Using ep0 maxpacket: 8 [ 1724.575747][T19944] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1724.595938][T19944] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1724.647276][T19944] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1724.657757][T19944] usb 10-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1724.672297][T19944] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1724.688998][T19944] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1724.737396][T19944] usbtmc 10-1:16.0: bulk endpoints not found [ 1725.430069][T20034] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1725.457883][ T5826] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1725.589061][T20034] usb 4-1: Using ep0 maxpacket: 8 [ 1725.611245][T20034] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1725.636007][ T5826] usb 2-1: Using ep0 maxpacket: 8 [ 1725.641700][T20034] usb 4-1: config 179 has no interface number 0 [ 1725.655004][T20034] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1725.675373][ T5826] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1725.693574][ T5826] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1725.704973][T20034] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1725.725861][ T5826] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1725.735718][T20750] FAULT_INJECTION: forcing a failure. [ 1725.735718][T20750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1725.735750][T20750] CPU: 1 UID: 0 PID: 20750 Comm: syz.7.2936 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 1725.735769][T20750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1725.735781][T20750] Call Trace: [ 1725.735789][T20750] [ 1725.735798][T20750] dump_stack_lvl+0x241/0x360 [ 1725.735830][T20750] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1725.735852][T20750] ? __pfx__printk+0x10/0x10 [ 1725.735873][T20750] ? __pfx_lock_release+0x10/0x10 [ 1725.735898][T20750] should_fail_ex+0x3b0/0x4e0 [ 1725.735920][T20750] _copy_from_user+0x2f/0xc0 [ 1725.735944][T20750] do_sock_getsockopt+0x1d1/0x7e0 [ 1725.735972][T20750] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1725.735990][T20750] ? __fget_files+0x2a/0x410 [ 1725.736009][T20750] ? __fget_files+0x395/0x410 [ 1725.736023][T20750] ? __fget_files+0x2a/0x410 [ 1725.736047][T20750] __x64_sys_getsockopt+0x2a1/0x370 [ 1725.736073][T20750] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 1725.756674][T20034] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1725.759819][T20750] ? do_syscall_64+0x100/0x230 [ 1725.759857][T20750] ? do_syscall_64+0xb6/0x230 [ 1725.759880][T20750] do_syscall_64+0xf3/0x230 [ 1725.759903][T20750] ? clear_bhb_loop+0x35/0x90 [ 1725.759921][T20750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1725.759944][T20750] RIP: 0033:0x7f0f3cf85d29 [ 1725.759963][T20750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1725.776451][ T5826] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1725.780896][T20750] RSP: 002b:00007f0f3de96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1725.780925][T20750] RAX: ffffffffffffffda RBX: 00007f0f3d175fa0 RCX: 00007f0f3cf85d29 [ 1725.780940][T20750] RDX: 0000000000000486 RSI: 0000000000000000 RDI: 0000000000000003 [ 1725.780953][T20750] RBP: 00007f0f3de96090 R08: 0000000020000080 R09: 0000000000000000 [ 1725.780964][T20750] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000001 [ 1725.780974][T20750] R13: 0000000000000000 R14: 00007f0f3d175fa0 R15: 00007ffda2aa1908 [ 1725.781000][T20750] [ 1725.971294][T20034] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1725.982953][T20034] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1725.997474][T20034] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1726.006761][T20034] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1726.027313][T20736] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1726.133662][ T5826] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1726.148333][ T5826] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1726.186761][ T5826] usbtmc 2-1:16.0: bulk endpoints not found [ 1726.317722][ T5826] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input21 [ 1726.932396][T20736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1726.969001][T20736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1727.274515][ T5826] usb 10-1: USB disconnect, device number 7 [ 1727.287881][T20766] FAULT_INJECTION: forcing a failure. [ 1727.287881][T20766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1727.337944][T20766] CPU: 0 UID: 0 PID: 20766 Comm: syz.1.2929 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 1727.348772][T20766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1727.358865][T20766] Call Trace: [ 1727.362172][T20766] [ 1727.365132][T20766] dump_stack_lvl+0x241/0x360 [ 1727.369860][T20766] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1727.375101][T20766] ? __pfx__printk+0x10/0x10 [ 1727.379736][T20766] ? snprintf+0xda/0x120 [ 1727.384011][T20766] should_fail_ex+0x3b0/0x4e0 [ 1727.388722][T20766] _copy_to_user+0x31/0xb0 [ 1727.393180][T20766] simple_read_from_buffer+0xca/0x150 [ 1727.398607][T20766] proc_fail_nth_read+0x1e9/0x250 [ 1727.403679][T20766] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1727.409268][T20766] ? rw_verify_area+0x55e/0x6f0 [ 1727.414166][T20766] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1727.419765][T20766] vfs_read+0x1fc/0xb70 [ 1727.423970][T20766] ? __pfx___mutex_lock+0x10/0x10 [ 1727.429023][T20766] ? __pfx_vfs_read+0x10/0x10 [ 1727.433726][T20766] ? __fget_files+0x2a/0x410 [ 1727.438332][T20766] ? __fget_files+0x395/0x410 [ 1727.443016][T20766] ? __fget_files+0x2a/0x410 [ 1727.447619][T20766] ksys_read+0x18f/0x2b0 [ 1727.451868][T20766] ? __pfx_ksys_read+0x10/0x10 [ 1727.456645][T20766] ? do_syscall_64+0x100/0x230 [ 1727.461417][T20766] ? do_syscall_64+0xb6/0x230 [ 1727.466130][T20766] do_syscall_64+0xf3/0x230 [ 1727.470643][T20766] ? clear_bhb_loop+0x35/0x90 [ 1727.475323][T20766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1727.481236][T20766] RIP: 0033:0x7f1f3b58473c [ 1727.485659][T20766] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1727.505277][T20766] RSP: 002b:00007f1f3c421030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1727.513699][T20766] RAX: ffffffffffffffda RBX: 00007f1f3b776080 RCX: 00007f1f3b58473c [ 1727.521673][T20766] RDX: 000000000000000f RSI: 00007f1f3c4210a0 RDI: 0000000000000005 [ 1727.529652][T20766] RBP: 00007f1f3c421090 R08: 0000000000000000 R09: 0000000000000000 [ 1727.537729][T20766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1727.545706][T20766] R13: 0000000000000000 R14: 00007f1f3b776080 R15: 00007ffec792b9e8 [ 1727.553692][T20766] [ 1727.917580][T20769] netlink: 'syz.3.2933': attribute type 10 has an invalid length. [ 1728.215634][ T5818] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1728.224733][ T5818] Bluetooth: hci4: Injecting HCI hardware error event [ 1728.236525][ T5818] Bluetooth: hci4: hardware error 0x00 [ 1728.255815][T19944] usb 2-1: USB disconnect, device number 2 [ 1728.337223][T20769] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2933'. [ 1728.348217][T20769] team0: entered promiscuous mode [ 1728.353387][T20769] team_slave_0: entered promiscuous mode [ 1728.385820][T20769] team_slave_1: entered promiscuous mode [ 1728.405254][T20769] team0: entered allmulticast mode [ 1728.412534][T20769] team_slave_0: entered allmulticast mode [ 1728.439993][T20769] team_slave_1: entered allmulticast mode [ 1728.574408][T20769] bridge0: port 3(team0) entered blocking state [ 1729.673978][T20769] bridge0: port 3(team0) entered disabled state [ 1729.705062][T20769] bridge0: port 3(team0) entered blocking state [ 1729.712010][T20769] bridge0: port 3(team0) entered forwarding state [ 1730.383354][T20785] veth1_macvtap: left promiscuous mode [ 1730.390329][T20785] macsec0: entered promiscuous mode [ 1730.399611][T19944] usb 4-1: USB disconnect, device number 37 [ 1730.399726][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1730.415037][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 1730.415655][T19944] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1730.531156][ T5818] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1730.587265][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.593629][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.723455][T20824] netlink: 'syz.3.2948': attribute type 10 has an invalid length. [ 1730.752678][T20785] binder: Unknown parameter 'ma8' [ 1730.806002][T20824] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1730.977634][T16514] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1731.049849][T20835] net_ratelimit: 4 callbacks suppressed [ 1731.049868][T20835] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1731.317164][T16514] usb 10-1: Using ep0 maxpacket: 16 [ 1731.324667][T16514] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1731.333085][T16514] usb 10-1: config 0 has no interface number 0 [ 1731.357070][T16514] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1731.857325][T16514] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1731.865843][T16514] usb 10-1: Product: syz [ 1731.872546][T16514] usb 10-1: Manufacturer: syz [ 1731.877796][T16514] usb 10-1: SerialNumber: syz [ 1732.222556][T16514] usb 10-1: config 0 descriptor?? [ 1732.251149][T16514] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1732.347180][T19944] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1732.513829][T19944] usb 4-1: Using ep0 maxpacket: 8 [ 1732.525929][T19944] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 1732.551184][T19944] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1732.566833][T19944] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1732.581000][T19944] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1732.607307][T19944] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1732.646925][T19944] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1732.669874][T19944] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.721612][ T5867] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1732.878629][ T5867] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 1732.905672][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1732.914572][T19944] usb 4-1: GET_CAPABILITIES returned 0 [ 1732.927758][ T5867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 59391, setting to 1024 [ 1732.935002][T19944] usbtmc 4-1:16.0: can't read capabilities [ 1732.961991][ T5867] usb 2-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 1732.987130][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1733.015829][ T5867] usb 2-1: config 0 descriptor?? [ 1733.035594][T20864] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1733.046601][ T5867] gspca_main: spca561-2.14.0 probing abcd:cdee [ 1733.126659][T19944] usb 4-1: USB disconnect, device number 38 [ 1733.251639][T20864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1733.264557][T20864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1733.308102][T20864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2958'. [ 1733.558353][ T5867] spca561 2-1:0.0: probe with driver spca561 failed with error -22 [ 1733.579747][ T5867] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1733.586961][ T5867] usb 2-1: MIDIStreaming interface descriptor not found [ 1733.779437][T16514] gspca_spca1528: reg_w err -71 [ 1733.784405][T16514] spca1528 10-1:0.1: probe with driver spca1528 failed with error -71 [ 1733.830437][T16514] usb 10-1: USB disconnect, device number 8 [ 1736.634043][T16514] usb 2-1: USB disconnect, device number 3 [ 1736.980488][T20923] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2963'. [ 1737.130412][T20922] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2966'. [ 1738.568638][T20943] FAULT_INJECTION: forcing a failure. [ 1738.568638][T20943] name failslab, interval 1, probability 0, space 0, times 0 [ 1738.607783][T20943] CPU: 0 UID: 0 PID: 20943 Comm: syz.7.2970 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 1738.618613][T20943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1738.628699][T20943] Call Trace: [ 1738.632007][T20943] [ 1738.634962][T20943] dump_stack_lvl+0x241/0x360 [ 1738.639677][T20943] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1738.644920][T20943] ? __pfx__printk+0x10/0x10 [ 1738.649548][T20943] ? fs_reclaim_acquire+0x93/0x130 [ 1738.654697][T20943] ? __pfx___might_resched+0x10/0x10 [ 1738.660028][T20943] should_fail_ex+0x3b0/0x4e0 [ 1738.664749][T20943] should_failslab+0xac/0x100 [ 1738.669469][T20943] __kmalloc_noprof+0xdd/0x4c0 [ 1738.674261][T20943] ? kstrtouint_from_user+0x128/0x190 [ 1738.679662][T20943] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1738.685421][T20943] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1738.691017][T20943] tomoyo_path_number_perm+0x236/0x860 [ 1738.696516][T20943] ? __lock_acquire+0x1397/0x2100 [ 1738.701579][T20943] ? tomoyo_path_number_perm+0x206/0x860 [ 1738.707264][T20943] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1738.713325][T20943] ? __fget_files+0x2a/0x410 [ 1738.717950][T20943] ? __fget_files+0x2a/0x410 [ 1738.722566][T20943] security_file_ioctl+0xc6/0x2a0 [ 1738.727608][T20943] __se_sys_ioctl+0x46/0x170 [ 1738.732232][T20943] do_syscall_64+0xf3/0x230 [ 1738.736761][T20943] ? clear_bhb_loop+0x35/0x90 [ 1738.741436][T20943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1738.747327][T20943] RIP: 0033:0x7f0f3cf85d29 [ 1738.751734][T20943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1738.771350][T20943] RSP: 002b:00007f0f3de96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1738.779771][T20943] RAX: ffffffffffffffda RBX: 00007f0f3d175fa0 RCX: 00007f0f3cf85d29 [ 1738.787739][T20943] RDX: 0000000000000000 RSI: 0000000000009362 RDI: 0000000000000003 [ 1738.795713][T20943] RBP: 00007f0f3de96090 R08: 0000000000000000 R09: 0000000000000000 [ 1738.803701][T20943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1738.811691][T20943] R13: 0000000000000000 R14: 00007f0f3d175fa0 R15: 00007ffda2aa1908 [ 1738.819678][T20943] [ 1738.861053][T20943] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1740.277233][T20034] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1740.408132][T21005] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1740.440341][T20034] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1740.462851][T20034] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 14385, setting to 1024 [ 1740.481001][T20034] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 1740.494243][T20034] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1740.510418][T20034] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1740.525321][T20989] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1740.552162][T20034] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1741.900231][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 1741.900249][ T29] audit: type=1326 audit(1736262384.714:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21015 comm="syz.7.2985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3cf85d29 code=0x7fc00000 [ 1741.979997][T20152] usb 4-1: USB disconnect, device number 39 [ 1742.025730][ T29] audit: type=1326 audit(1736262384.824:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21015 comm="syz.7.2985" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f3cf85d29 code=0x7fc00000 [ 1742.047230][ C1] vkms_vblank_simulate: vblank timer overrun [ 1742.326239][T21039] kernel profiling enabled (shift: 0) [ 1742.951171][T21059] FAULT_INJECTION: forcing a failure. [ 1742.951171][T21059] name failslab, interval 1, probability 0, space 0, times 0 [ 1743.065535][T21059] CPU: 0 UID: 0 PID: 21059 Comm: syz.9.2995 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 1743.076386][T21059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1743.086477][T21059] Call Trace: [ 1743.089776][T21059] [ 1743.092732][T21059] dump_stack_lvl+0x241/0x360 [ 1743.097445][T21059] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1743.102667][T21059] ? __pfx__printk+0x10/0x10 [ 1743.107280][T21059] ? fs_reclaim_acquire+0x93/0x130 [ 1743.112412][T21059] ? __pfx___might_resched+0x10/0x10 [ 1743.117750][T21059] should_fail_ex+0x3b0/0x4e0 [ 1743.122450][T21059] should_failslab+0xac/0x100 [ 1743.127160][T21059] ? create_new_namespaces+0x34/0x7b0 [ 1743.132552][T21059] kmem_cache_alloc_noprof+0x70/0x380 [ 1743.137960][T21059] create_new_namespaces+0x34/0x7b0 [ 1743.143188][T21059] ? cap_capable+0x1b4/0x250 [ 1743.147809][T21059] ? safesetid_security_capable+0xb2/0x1d0 [ 1743.153638][T21059] ? bpf_lsm_capable+0x9/0x10 [ 1743.158329][T21059] ? security_capable+0x7e/0x2d0 [ 1743.163296][T21059] unshare_nsproxy_namespaces+0x124/0x180 [ 1743.169045][T21059] ksys_unshare+0x57d/0xa70 [ 1743.173587][T21059] ? __pfx_ksys_unshare+0x10/0x10 [ 1743.178639][T21059] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1743.184987][T21059] ? do_syscall_64+0x100/0x230 [ 1743.189782][T21059] __x64_sys_unshare+0x38/0x40 [ 1743.194568][T21059] do_syscall_64+0xf3/0x230 [ 1743.199108][T21059] ? clear_bhb_loop+0x35/0x90 [ 1743.203807][T21059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1743.209901][T21059] RIP: 0033:0x7f5765f85d29 [ 1743.214333][T21059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1743.234052][T21059] RSP: 002b:00007f5766d8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1743.242540][T21059] RAX: ffffffffffffffda RBX: 00007f5766175fa0 RCX: 00007f5765f85d29 [ 1743.250543][T21059] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1743.258537][T21059] RBP: 00007f5766d8b090 R08: 0000000000000000 R09: 0000000000000000 [ 1743.266530][T21059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1743.274527][T21059] R13: 0000000000000000 R14: 00007f5766175fa0 R15: 00007ffe7d5c9718 [ 1743.282537][T21059] [ 1743.545987][T21067] Process accounting resumed [ 1744.008038][T20152] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1744.257764][T20152] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1744.442784][T20152] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1744.795022][T20152] usb 10-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1744.804343][T20152] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.817352][T20152] usb 10-1: config 0 descriptor?? [ 1744.861960][T21039] syz.1.2990: vmalloc error: size 738197504, failed to allocated page array size 1441792, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1744.880200][ C1] vkms_vblank_simulate: vblank timer overrun [ 1744.882205][T21083] FAULT_INJECTION: forcing a failure. [ 1744.882205][T21083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1744.887154][T21039] CPU: 1 UID: 0 PID: 21039 Comm: syz.1.2990 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 1744.910697][T21039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1744.920792][T21039] Call Trace: [ 1744.924102][T21039] [ 1744.927057][T21039] dump_stack_lvl+0x241/0x360 [ 1744.931765][T21039] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1744.936983][T21039] ? __pfx__printk+0x10/0x10 [ 1744.941589][T21039] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 1744.948012][T21039] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 1744.954536][T21039] warn_alloc+0x278/0x410 [ 1744.958877][T21039] ? __pfx_warn_alloc+0x10/0x10 [ 1744.963760][T21039] ? profile_init+0xb1/0x100 [ 1744.968352][T21039] ? __get_vm_area_node+0x1c8/0x2d0 [ 1744.973553][T21039] ? __get_vm_area_node+0x25c/0x2d0 [ 1744.978756][T21039] __vmalloc_node_range_noprof+0x62f/0x1380 [ 1744.984680][T21039] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1744.991011][T21039] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1744.996212][T21039] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1745.001441][T21039] ? profile_init+0xb1/0x100 [ 1745.006052][T21039] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1745.011268][T21039] vzalloc_noprof+0x79/0x90 [ 1745.015812][T21039] ? profile_init+0xb1/0x100 [ 1745.020420][T21039] profile_init+0xb1/0x100 [ 1745.024841][T21039] profiling_store+0x6c/0xf0 [ 1745.029436][T21039] kernfs_fop_write_iter+0x3a0/0x500 [ 1745.034729][T21039] vfs_write+0xaeb/0xd30 [ 1745.038985][T21039] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1745.044801][T21039] ? __pfx_vfs_write+0x10/0x10 [ 1745.049574][T21039] ? __fget_files+0x2a/0x410 [ 1745.054171][T21039] ? __fget_files+0x2a/0x410 [ 1745.058771][T21039] ksys_write+0x18f/0x2b0 [ 1745.063195][T21039] ? __pfx_ksys_write+0x10/0x10 [ 1745.068083][T21039] ? do_syscall_64+0x100/0x230 [ 1745.072887][T21039] ? do_syscall_64+0xb6/0x230 [ 1745.077579][T21039] do_syscall_64+0xf3/0x230 [ 1745.082093][T21039] ? clear_bhb_loop+0x35/0x90 [ 1745.086770][T21039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1745.092687][T21039] RIP: 0033:0x7f1f3b585d29 [ 1745.097103][T21039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1745.116711][T21039] RSP: 002b:00007f1f3c442038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1745.125128][T21039] RAX: ffffffffffffffda RBX: 00007f1f3b775fa0 RCX: 00007f1f3b585d29 [ 1745.133101][T21039] RDX: 0000000000000012 RSI: 0000000020000100 RDI: 0000000000000004 [ 1745.141165][T21039] RBP: 00007f1f3b601b08 R08: 0000000000000000 R09: 0000000000000000 [ 1745.149140][T21039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1745.157113][T21039] R13: 0000000000000000 R14: 00007f1f3b775fa0 R15: 00007ffec792b9e8 [ 1745.165097][T21039] [ 1745.168130][ C1] vkms_vblank_simulate: vblank timer overrun [ 1745.194876][T21039] Mem-Info: [ 1745.202487][T21039] active_anon:496 inactive_anon:9046 isolated_anon:0 [ 1745.202487][T21039] active_file:26033 inactive_file:34541 isolated_file:0 [ 1745.202487][T21039] unevictable:771 dirty:325 writeback:0 [ 1745.202487][T21039] slab_reclaimable:14024 slab_unreclaimable:120240 [ 1745.202487][T21039] mapped:30011 shmem:1641 pagetables:1186 [ 1745.202487][T21039] sec_pagetables:0 bounce:0 [ 1745.202487][T21039] kernel_misc_reclaimable:0 [ 1745.202487][T21039] free:1244199 free_pcp:8320 free_cma:0 [ 1745.215230][T21083] CPU: 1 UID: 0 PID: 21083 Comm: syz.7.3000 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 1745.249594][T21039] Node 0 active_anon:1984kB inactive_anon:36096kB active_file:104056kB inactive_file:138164kB unevictable:1548kB isolated(anon):0kB isolated(file):0kB mapped:119992kB dirty:1296kB writeback:0kB shmem:4948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:12908kB pagetables:4660kB sec_pagetables:0kB all_unreclaimable? no [ 1745.258694][T21083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1745.258710][T21083] Call Trace: [ 1745.258718][T21083] [ 1745.258727][T21083] dump_stack_lvl+0x241/0x360 [ 1745.258756][T21083] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1745.258778][T21083] ? __pfx__printk+0x10/0x10 [ 1745.258798][T21083] ? __pfx_lock_release+0x10/0x10 [ 1745.258822][T21083] should_fail_ex+0x3b0/0x4e0 [ 1745.258844][T21083] _copy_from_user+0x2f/0xc0 [ 1745.258869][T21083] do_tcp_setsockopt+0x318/0x2540 [ 1745.258899][T21083] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 1745.347243][T21083] ? __pfx___mutex_lock+0x10/0x10 [ 1745.352309][T21083] ? tcp_setsockopt+0x3e/0xf0 [ 1745.357006][T21083] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1745.362920][T21083] smc_setsockopt+0x275/0xe50 [ 1745.367624][T21083] ? __pfx_smc_setsockopt+0x10/0x10 [ 1745.372848][T21083] ? __fget_files+0x2a/0x410 [ 1745.377460][T21083] ? __pfx_smc_setsockopt+0x10/0x10 [ 1745.382686][T21083] do_sock_setsockopt+0x3af/0x720 [ 1745.387737][T21083] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1745.393309][T21083] ? __fget_files+0x395/0x410 [ 1745.398009][T21083] ? __fget_files+0x2a/0x410 [ 1745.402639][T21083] __x64_sys_setsockopt+0x1ee/0x280 [ 1745.407870][T21083] do_syscall_64+0xf3/0x230 [ 1745.412400][T21083] ? clear_bhb_loop+0x35/0x90 [ 1745.417095][T21083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1745.423010][T21083] RIP: 0033:0x7f0f3cf85d29 [ 1745.427441][T21083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1745.447072][T21083] RSP: 002b:00007f0f3de96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1745.455523][T21083] RAX: ffffffffffffffda RBX: 00007f0f3d175fa0 RCX: 00007f0f3cf85d29 [ 1745.463525][T21083] RDX: 0000000000000021 RSI: 0000000000000006 RDI: 0000000000000003 [ 1745.471522][T21083] RBP: 00007f0f3de96090 R08: 0000000000000010 R09: 0000000000000000 [ 1745.479562][T21083] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 1745.487550][T21083] R13: 0000000000000000 R14: 00007f0f3d175fa0 R15: 00007ffda2aa1908 [ 1745.495557][T21083] [ 1745.498745][ C1] vkms_vblank_simulate: vblank timer overrun [ 1745.778119][T21039] Node 1 active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1745.808336][ C1] vkms_vblank_simulate: vblank timer overrun [ 1745.930480][T21039] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1746.012419][T21039] lowmem_reserve[]: 0 2465 2466 0 0 [ 1746.068274][T21039] Node 0 DMA32 free:1146540kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:1980kB inactive_anon:47460kB active_file:103288kB inactive_file:138112kB unevictable:1548kB writepending:1296kB present:3129332kB managed:2552776kB mlocked:0kB bounce:0kB free_pcp:22544kB local_pcp:17124kB free_cma:0kB [ 1746.099338][ C1] vkms_vblank_simulate: vblank timer overrun [ 1746.106325][T21039] lowmem_reserve[]: 0 0 0 0 0 [ 1746.111283][T21039] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:36kB active_file:768kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1746.138240][ C1] vkms_vblank_simulate: vblank timer overrun [ 1746.144725][T21039] lowmem_reserve[]: 0 0 0 0 0 [ 1746.149748][T21039] Node 1 Normal free:3796220kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:76kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:18280kB local_pcp:2736kB free_cma:0kB [ 1746.181853][ C1] vkms_vblank_simulate: vblank timer overrun [ 1746.188966][T21039] lowmem_reserve[]: 0 0 0 0 0 [ 1746.193892][T21039] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1746.208320][T21039] Node 0 DMA32: 961*4kB (UME) 444*8kB (UE) 99*16kB (UE) 417*32kB (UME) 255*64kB (UME) 124*128kB (UME) 97*256kB (UM) 52*512kB (UM) 41*1024kB (UM) 14*2048kB (UME) 238*4096kB (UM) = 1151476kB [ 1746.227566][T21039] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1746.344299][T21093] rdma_op ffff8880623ff9f0 conn xmit_rdma 0000000000000000 [ 1746.527921][T21039] Node 1 Normal: 2*4kB (M) 3*8kB (ME) 5*16kB (ME) 9*32kB (ME) 9*64kB (UME) 2*128kB (UM) 4*256kB (UME) 4*512kB (ME) 3*1024kB (ME) 2*2048kB (M) 924*4096kB (M) = 3796176kB [ 1746.995999][T21039] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1747.015732][T20152] arvo 0003:1E7D:30D4.0005: unbalanced delimiter at end of report description [ 1747.077747][T20152] arvo 0003:1E7D:30D4.0005: parse failed [ 1747.090001][T20152] arvo 0003:1E7D:30D4.0005: probe with driver arvo failed with error -22 [ 1747.174843][T21090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1747.183593][T21090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1747.214103][T21039] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 1747.230278][T21039] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1747.240336][T21039] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1747.250231][T21039] 62198 total pagecache pages [ 1747.255219][T21039] 0 pages in swap cache [ 1747.259494][T21039] Free swap = 124200kB [ 1747.263750][T21039] Total swap = 124996kB [ 1747.268000][T21039] 2097051 pages RAM [ 1747.271834][T21039] 0 pages HighMem/MovableOnly [ 1747.276538][T21039] 427005 pages reserved [ 1747.281156][T21039] 0 pages cma reserved [ 1747.717465][ T5867] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1747.880720][ T5867] usb 4-1: config 0 has an invalid interface number: 104 but max is 0 [ 1747.902035][ T5867] usb 4-1: config 0 has no interface number 0 [ 1747.930586][ T5867] usb 4-1: config 0 interface 104 has no altsetting 0 [ 1747.973180][ T5867] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9 [ 1748.027173][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1748.070363][ T5867] usb 4-1: Product: syz [ 1748.099604][ T5867] usb 4-1: Manufacturer: syz [ 1748.125428][ T5867] usb 4-1: SerialNumber: syz [ 1748.168007][ T5867] usb 4-1: config 0 descriptor?? [ 1748.232021][ T5867] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1748.283035][T19356] usb 10-1: USB disconnect, device number 9 [ 1748.307778][ T5818] Bluetooth: hci5: command 0x0406 tx timeout [ 1748.605408][T21099] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1748.646527][T21130] FAULT_INJECTION: forcing a failure. [ 1748.646527][T21130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1748.763497][T21133] FAULT_INJECTION: forcing a failure. [ 1748.763497][T21133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1748.782942][T21133] CPU: 1 UID: 0 PID: 21133 Comm: syz.7.3008 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 1748.793767][T21133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1748.803858][T21133] Call Trace: [ 1748.807163][T21133] [ 1748.810116][T21133] dump_stack_lvl+0x241/0x360 [ 1748.814827][T21133] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1748.820042][T21133] ? __pfx__printk+0x10/0x10 [ 1748.824677][T21133] ? snprintf+0xda/0x120 [ 1748.828958][T21133] should_fail_ex+0x3b0/0x4e0 [ 1748.833653][T21133] _copy_to_user+0x31/0xb0 [ 1748.838101][T21133] simple_read_from_buffer+0xca/0x150 [ 1748.843549][T21133] proc_fail_nth_read+0x1e9/0x250 [ 1748.848598][T21133] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1748.854195][T21133] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1748.859764][T21133] ? vfs_read+0x161/0xb70 [ 1748.864101][T21133] ? vfs_read+0x1e4/0xb70 [ 1748.868534][T21133] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1748.874100][T21133] vfs_read+0x1fc/0xb70 [ 1748.878292][T21133] ? __pfx___mutex_lock+0x10/0x10 [ 1748.883333][T21133] ? __pfx_vfs_read+0x10/0x10 [ 1748.888022][T21133] ? __fget_files+0x2a/0x410 [ 1748.892640][T21133] ? __fget_files+0x395/0x410 [ 1748.897345][T21133] ? __fget_files+0x2a/0x410 [ 1748.901981][T21133] ksys_read+0x18f/0x2b0 [ 1748.906252][T21133] ? __pfx_ksys_read+0x10/0x10 [ 1748.911032][T21133] ? do_syscall_64+0x100/0x230 [ 1748.915818][T21133] ? do_syscall_64+0xb6/0x230 [ 1748.920531][T21133] do_syscall_64+0xf3/0x230 [ 1748.925049][T21133] ? clear_bhb_loop+0x35/0x90 [ 1748.929751][T21133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1748.935666][T21133] RIP: 0033:0x7f0f3cf8473c [ 1748.940098][T21133] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1748.959735][T21133] RSP: 002b:00007f0f3de75030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1748.968177][T21133] RAX: ffffffffffffffda RBX: 00007f0f3d176080 RCX: 00007f0f3cf8473c [ 1748.976182][T21133] RDX: 000000000000000f RSI: 00007f0f3de750a0 RDI: 0000000000000003 [ 1748.984249][T21133] RBP: 00007f0f3de75090 R08: 0000000000000000 R09: 0000000000000000 [ 1748.992228][T21133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1749.000209][T21133] R13: 0000000000000000 R14: 00007f0f3d176080 R15: 00007ffda2aa1908 [ 1749.008214][T21133] [ 1749.011335][ C1] vkms_vblank_simulate: vblank timer overrun [ 1749.049772][T21130] CPU: 1 UID: 0 PID: 21130 Comm: syz.9.3010 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 1749.060597][T21130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1749.070654][T21130] Call Trace: [ 1749.073943][T21130] [ 1749.076875][T21130] dump_stack_lvl+0x241/0x360 [ 1749.081556][T21130] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1749.086759][T21130] ? __pfx__printk+0x10/0x10 [ 1749.091347][T21130] ? __pfx_lock_release+0x10/0x10 [ 1749.096368][T21130] ? vfs_write+0x730/0xd30 [ 1749.100783][T21130] should_fail_ex+0x3b0/0x4e0 [ 1749.105456][T21130] _copy_from_user+0x2f/0xc0 [ 1749.110051][T21130] get_timespec64+0x97/0x280 [ 1749.114636][T21130] ? __pfx_get_timespec64+0x10/0x10 [ 1749.119830][T21130] ? __fget_files+0x2a/0x410 [ 1749.124416][T21130] __se_sys_io_getevents+0xb4/0x220 [ 1749.129616][T21130] ? __pfx___se_sys_io_getevents+0x10/0x10 [ 1749.135439][T21130] ? do_syscall_64+0x100/0x230 [ 1749.140248][T21130] ? __x64_sys_io_getevents+0x20/0xc0 [ 1749.145623][T21130] do_syscall_64+0xf3/0x230 [ 1749.150129][T21130] ? clear_bhb_loop+0x35/0x90 [ 1749.154804][T21130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1749.160705][T21130] RIP: 0033:0x7f5765f85d29 [ 1749.165309][T21130] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1749.184940][T21130] RSP: 002b:00007f5766d8b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d0 [ 1749.193378][T21130] RAX: ffffffffffffffda RBX: 00007f5766175fa0 RCX: 00007f5765f85d29 [ 1749.201351][T21130] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000000000 [ 1749.209321][T21130] RBP: 00007f5766d8b090 R08: 00000000200001c0 R09: 0000000000000000 [ 1749.217297][T21130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1749.225281][T21130] R13: 0000000000000000 R14: 00007f5766175fa0 R15: 00007ffe7d5c9718 [ 1749.233262][T21130] [ 1749.236350][ C1] vkms_vblank_simulate: vblank timer overrun [ 1749.246297][ T5867] gspca_vc032x: reg_r err -110 [ 1749.251333][ T5867] gspca_vc032x: I2c Bus Busy Wait 00 [ 1749.256791][ T5867] gspca_vc032x: I2c Bus Busy Wait 00 [ 1749.263998][ T5867] gspca_vc032x: I2c Bus Busy Wait 00 [ 1749.269960][ T5867] gspca_vc032x: I2c Bus Busy Wait 00 [ 1749.277085][ T5867] gspca_vc032x: I2c Bus Busy Wait 00 [ 1749.285809][ T5867] gspca_vc032x: I2c Bus Busy Wait 00 [ 1749.297880][ T5867] gspca_vc032x: I2c Bus Busy Wait 00 [ 1749.303551][ T5867] gspca_vc032x: I2c Bus Busy Wait 00 [ 1749.313030][ T5867] gspca_vc032x: I2c Bus Busy Wait 00 [ 1749.322497][ T5867] gspca_vc032x: I2c Bus Busy Wait 00 [ 1749.331793][ T5867] gspca_vc032x: I2c Bus Busy Wait 00 [ 1749.354702][ T5867] gspca_vc032x: I2c Bus Busy Wait 00 [ 1749.367562][ T5867] gspca_vc032x: I2c Bus Busy Wait 00 [ 1749.377181][ T5867] gspca_vc032x: I2c Bus Busy Wait 00 [ 1749.388350][ T5867] gspca_vc032x: I2c Bus Busy Wait 00 [ 1749.388737][ T5867] gspca_vc032x: I2c Bus Busy Wait 00 [ 1749.394242][ T5867] gspca_vc032x: I2c Bus Busy Wait 00 [ 1749.395330][ T5867] gspca_vc032x: I2c Bus Busy Wait 00 [ 1749.423912][ T5867] gspca_vc032x: Unknown sensor... [ 1749.434192][ T5867] vc032x 4-1:0.104: probe with driver vc032x failed with error -22 [ 1749.467931][ T5867] usb 4-1: USB disconnect, device number 40 [ 1750.246593][T21151] netlink: 1264 bytes leftover after parsing attributes in process `syz.7.3012'. [ 1750.256632][T20034] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1751.701493][T21152] netlink: 1264 bytes leftover after parsing attributes in process `syz.0.3013'. [ 1751.798942][T17272] usb 10-1: [UEAGLE-ATM] firmware is not available [ 1752.048143][T21156] ubi: mtd0 is already attached to ubi0 [ 1752.148712][T20034] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1752.163125][T20034] usb 2-1: config 6 has an invalid interface number: 200 but max is 0 [ 1752.222178][T20034] usb 2-1: config 6 has no interface number 0 [ 1752.248601][T20034] usb 2-1: config 6 interface 200 has no altsetting 0 [ 1752.513435][T20034] usb 2-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 1752.584751][T20034] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1752.630917][T20034] usb 2-1: Product: syz [ 1752.686022][T20034] usb 2-1: Manufacturer: syz [ 1752.725160][T20034] usb 2-1: SerialNumber: syz [ 1752.781696][T20034] usb 2-1: can't set config #6, error -71 [ 1752.858079][T20034] usb 2-1: USB disconnect, device number 4 [ 1754.329131][T21201] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3026'. [ 1757.188106][T21234] FAULT_INJECTION: forcing a failure. [ 1757.188106][T21234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1757.201296][T21234] CPU: 1 UID: 0 PID: 21234 Comm: syz.9.3032 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 1757.212082][T21234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1757.222160][T21234] Call Trace: [ 1757.225473][T21234] [ 1757.228445][T21234] dump_stack_lvl+0x241/0x360 [ 1757.233192][T21234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1757.238440][T21234] ? __pfx__printk+0x10/0x10 [ 1757.243067][T21234] ? __pfx_lock_release+0x10/0x10 [ 1757.248122][T21234] should_fail_ex+0x3b0/0x4e0 [ 1757.252828][T21234] _copy_from_user+0x2f/0xc0 [ 1757.257442][T21234] ucma_write+0x17d/0x420 [ 1757.261790][T21234] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 1757.268755][T21234] ? __pfx_ucma_write+0x10/0x10 [ 1757.273639][T21234] ? bpf_lsm_file_permission+0x9/0x10 [ 1757.279034][T21234] ? security_file_permission+0x74/0x280 [ 1757.284683][T21234] ? rw_verify_area+0x1c3/0x6f0 [ 1757.289556][T21234] ? __pfx_ucma_write+0x10/0x10 [ 1757.294427][T21234] vfs_write+0x2a3/0xd30 [ 1757.298699][T21234] ? __pfx_vfs_write+0x10/0x10 [ 1757.303482][T21234] ? __rcu_read_unlock+0xa1/0x110 [ 1757.308519][T21234] ? __fget_files+0x2a/0x410 [ 1757.313123][T21234] ? __fget_files+0x395/0x410 [ 1757.317818][T21234] ? __fget_files+0x2a/0x410 [ 1757.322431][T21234] ksys_write+0x18f/0x2b0 [ 1757.326786][T21234] ? __pfx_ksys_write+0x10/0x10 [ 1757.331659][T21234] ? do_syscall_64+0x100/0x230 [ 1757.336447][T21234] ? do_syscall_64+0xb6/0x230 [ 1757.341150][T21234] do_syscall_64+0xf3/0x230 [ 1757.345674][T21234] ? clear_bhb_loop+0x35/0x90 [ 1757.350459][T21234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1757.356375][T21234] RIP: 0033:0x7f5765f85d29 [ 1757.360807][T21234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1757.380437][T21234] RSP: 002b:00007f5766d49038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1757.388876][T21234] RAX: ffffffffffffffda RBX: 00007f5766176160 RCX: 00007f5765f85d29 [ 1757.396863][T21234] RDX: 0000000000000020 RSI: 0000000020000240 RDI: 0000000000000005 [ 1757.404852][T21234] RBP: 00007f5766d49090 R08: 0000000000000000 R09: 0000000000000000 [ 1757.413030][T21234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1757.421281][T21234] R13: 0000000000000000 R14: 00007f5766176160 R15: 00007ffe7d5c9718 [ 1757.429294][T21234] [ 1757.432421][ C1] vkms_vblank_simulate: vblank timer overrun [ 1758.501535][T21251] netlink: 20 bytes leftover after parsing attributes in process `syz.9.3036'. [ 1758.636592][T21254] netlink: 'syz.3.3034': attribute type 3 has an invalid length. [ 1758.817679][T21242] process 'syz.3.3034' launched './file0' with NULL argv: empty string added [ 1760.727529][T21264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3040'. [ 1761.854478][T21300] FAULT_INJECTION: forcing a failure. [ 1761.854478][T21300] name failslab, interval 1, probability 0, space 0, times 0 [ 1761.867271][T21300] CPU: 1 UID: 0 PID: 21300 Comm: syz.7.3046 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 1761.878056][T21300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1761.888301][T21300] Call Trace: [ 1761.891593][T21300] [ 1761.894533][T21300] dump_stack_lvl+0x241/0x360 [ 1761.899243][T21300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1761.904460][T21300] ? __pfx__printk+0x10/0x10 [ 1761.909066][T21300] ? kmem_cache_alloc_noprof+0x48/0x380 [ 1761.914635][T21300] ? __pfx___might_resched+0x10/0x10 [ 1761.919945][T21300] should_fail_ex+0x3b0/0x4e0 [ 1761.924646][T21300] should_failslab+0xac/0x100 [ 1761.929345][T21300] ? getname_flags+0xb7/0x540 [ 1761.934041][T21300] kmem_cache_alloc_noprof+0x70/0x380 [ 1761.939447][T21300] getname_flags+0xb7/0x540 [ 1761.944143][T21300] do_sys_openat2+0xd2/0x1d0 [ 1761.948756][T21300] ? __pfx_do_sys_openat2+0x10/0x10 [ 1761.953981][T21300] __x64_sys_openat+0x247/0x2a0 [ 1761.959373][T21300] ? __pfx___x64_sys_openat+0x10/0x10 [ 1761.964768][T21300] ? do_syscall_64+0x100/0x230 [ 1761.969566][T21300] ? do_syscall_64+0xb6/0x230 [ 1761.974263][T21300] do_syscall_64+0xf3/0x230 [ 1761.978787][T21300] ? clear_bhb_loop+0x35/0x90 [ 1761.983484][T21300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1761.989574][T21300] RIP: 0033:0x7f0f3cf85d29 [ 1761.994007][T21300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1762.013633][T21300] RSP: 002b:00007f0f3de54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1762.022075][T21300] RAX: ffffffffffffffda RBX: 00007f0f3d176160 RCX: 00007f0f3cf85d29 [ 1762.030081][T21300] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: ffffffffffffff9c [ 1762.038094][T21300] RBP: 00007f0f3de54090 R08: 0000000000000000 R09: 0000000000000000 [ 1762.046113][T21300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1762.054109][T21300] R13: 0000000000000000 R14: 00007f0f3d176160 R15: 00007ffda2aa1908 [ 1762.062118][T21300] [ 1762.065245][ C1] vkms_vblank_simulate: vblank timer overrun [ 1765.006724][T21339] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1765.754104][T21355] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3054'. [ 1766.069299][T21356] xt_ecn: cannot match TCP bits for non-tcp packets [ 1767.273585][T21372] FAULT_INJECTION: forcing a failure. [ 1767.273585][T21372] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1767.287162][T21372] CPU: 0 UID: 0 PID: 21372 Comm: syz.7.3060 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 1767.297974][T21372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1767.308062][T21372] Call Trace: [ 1767.311351][T21372] [ 1767.314288][T21372] dump_stack_lvl+0x241/0x360 [ 1767.318988][T21372] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1767.324192][T21372] ? __pfx__printk+0x10/0x10 [ 1767.328785][T21372] ? vfs_write+0x730/0xd30 [ 1767.333205][T21372] should_fail_ex+0x3b0/0x4e0 [ 1767.337884][T21372] _copy_from_user+0x2f/0xc0 [ 1767.342565][T21372] move_addr_to_kernel+0x82/0x150 [ 1767.347595][T21372] __sys_bind+0x124/0x290 [ 1767.351922][T21372] ? __pfx___sys_bind+0x10/0x10 [ 1767.356780][T21372] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1767.363111][T21372] ? do_syscall_64+0x100/0x230 [ 1767.367885][T21372] __x64_sys_bind+0x7a/0x90 [ 1767.372389][T21372] do_syscall_64+0xf3/0x230 [ 1767.376894][T21372] ? clear_bhb_loop+0x35/0x90 [ 1767.381579][T21372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1767.387501][T21372] RIP: 0033:0x7f0f3cf85d29 [ 1767.391916][T21372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1767.411529][T21372] RSP: 002b:00007f0f3de96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1767.419951][T21372] RAX: ffffffffffffffda RBX: 00007f0f3d175fa0 RCX: 00007f0f3cf85d29 [ 1767.427930][T21372] RDX: 000000000000000c RSI: 00000000200000c0 RDI: 0000000000000003 [ 1767.435905][T21372] RBP: 00007f0f3de96090 R08: 0000000000000000 R09: 0000000000000000 [ 1767.443878][T21372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1767.451852][T21372] R13: 0000000000000000 R14: 00007f0f3d175fa0 R15: 00007ffda2aa1908 [ 1767.459835][T21372] [ 1768.850490][T21428] can0: slcan on ttyS3. [ 1770.690564][T21428] can0 (unregistered): slcan off ttyS3. [ 1770.937543][ T6254] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1771.287345][ T5867] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1771.390327][ T29] audit: type=1400 audit(1736262414.134:32): lsm=SMACK fn=smack_key_permission action=denied subject="y" object="_" requested=w pid=21449 comm="syz.0.3068" key_serial=565534559 key_desc=73797A22 [ 1771.457734][ T5867] usb 10-1: Using ep0 maxpacket: 8 [ 1771.598547][ T5867] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1771.730354][ T6254] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1771.732511][ T5867] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1771.753958][ T5867] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1771.758633][ T6254] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1771.765162][ T5867] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1771.789765][ T5867] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1771.791111][ T29] audit: type=1400 audit(1736262414.604:33): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=21449 comm="syz.0.3068" name="29" dev="tmpfs" ino=168 [ 1771.799349][ T5867] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1771.819543][ T6254] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1771.835410][ T6254] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1771.848675][ T6254] usb 4-1: config 0 descriptor?? [ 1772.079913][ T5867] usb 10-1: usb_control_msg returned -32 [ 1772.102996][ T5867] usbtmc 10-1:16.0: can't read capabilities [ 1772.227222][T17272] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1772.800641][T21466] FAULT_INJECTION: forcing a failure. [ 1772.800641][T21466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1772.886239][T21466] CPU: 1 UID: 0 PID: 21466 Comm: syz.9.3069 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 1772.897084][T21466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1772.907170][T21466] Call Trace: [ 1772.910465][T21466] [ 1772.913412][T21466] dump_stack_lvl+0x241/0x360 [ 1772.918118][T21466] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1772.923337][T21466] ? __pfx__printk+0x10/0x10 [ 1772.927957][T21466] ? snprintf+0xda/0x120 [ 1772.932229][T21466] should_fail_ex+0x3b0/0x4e0 [ 1772.936927][T21466] _copy_to_user+0x31/0xb0 [ 1772.941369][T21466] simple_read_from_buffer+0xca/0x150 [ 1772.946770][T21466] proc_fail_nth_read+0x1e9/0x250 [ 1772.951828][T21466] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1772.957405][T21466] ? rw_verify_area+0x55e/0x6f0 [ 1772.962280][T21466] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1772.967872][T21466] vfs_read+0x1fc/0xb70 [ 1772.972082][T21466] ? __pfx___mutex_lock+0x10/0x10 [ 1772.977141][T21466] ? __pfx_vfs_read+0x10/0x10 [ 1772.981851][T21466] ? __fget_files+0x2a/0x410 [ 1772.986471][T21466] ? __fget_files+0x395/0x410 [ 1772.991168][T21466] ? __fget_files+0x2a/0x410 [ 1772.995796][T21466] ksys_read+0x18f/0x2b0 [ 1773.000073][T21466] ? __pfx_ksys_read+0x10/0x10 [ 1773.004862][T21466] ? do_syscall_64+0x100/0x230 [ 1773.009670][T21466] ? do_syscall_64+0xb6/0x230 [ 1773.014380][T21466] do_syscall_64+0xf3/0x230 [ 1773.018948][T21466] ? clear_bhb_loop+0x35/0x90 [ 1773.023643][T21466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1773.029569][T21466] RIP: 0033:0x7f5765f8473c [ 1773.034034][T21466] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1773.053684][T21466] RSP: 002b:00007f5766d49030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1773.057620][T17272] usb 2-1: Using ep0 maxpacket: 8 [ 1773.062114][T21466] RAX: ffffffffffffffda RBX: 00007f5766176160 RCX: 00007f5765f8473c [ 1773.075137][T21466] RDX: 000000000000000f RSI: 00007f5766d490a0 RDI: 0000000000000005 [ 1773.082960][T17272] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1773.083112][T21466] RBP: 00007f5766d49090 R08: 0000000000000000 R09: 0000000000000000 [ 1773.100821][T21466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1773.103926][T17272] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1773.108799][T21466] R13: 0000000000000001 R14: 00007f5766176160 R15: 00007ffe7d5c9718 [ 1773.108832][T21466] [ 1773.108957][ C1] vkms_vblank_simulate: vblank timer overrun [ 1773.135653][ C1] vkms_vblank_simulate: vblank timer overrun [ 1773.748185][T17272] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1773.758257][T17272] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1773.771423][T17272] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1773.780689][T17272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1773.817167][ T5867] usb 10-1: USB disconnect, device number 10 [ 1774.002970][T17272] usb 2-1: usb_control_msg returned -32 [ 1774.008765][T17272] usbtmc 2-1:16.0: can't read capabilities [ 1774.788781][ T6254] usbhid 4-1:0.0: can't add hid device: -71 [ 1774.795625][ T6254] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1774.992912][ T6254] usb 4-1: USB disconnect, device number 41 [ 1775.857499][T21472] netlink: 'syz.7.3074': attribute type 4 has an invalid length. [ 1775.877111][T21472] netlink: 17 bytes leftover after parsing attributes in process `syz.7.3074'. [ 1776.297134][T20152] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1776.308084][T17272] usb 2-1: USB disconnect, device number 5 [ 1776.378212][T21497] input: syz1 as /devices/virtual/input/input22 [ 1776.537594][T20152] usb 4-1: Using ep0 maxpacket: 8 [ 1776.871013][T20152] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1777.005570][T20152] usb 4-1: config 179 has no interface number 0 [ 1777.012849][T20152] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1777.024179][T20152] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1777.035966][T20152] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1777.047265][T20152] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1777.058723][T20152] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1777.072074][T20152] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1777.081271][T20152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1777.125483][T21493] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1777.322923][T21505] fuse: Bad value for 'fd' [ 1777.362002][T20152] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input23 [ 1777.567407][T21493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1777.594984][T21493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1778.482652][ T5867] usb 4-1: USB disconnect, device number 42 [ 1778.482724][ C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1778.497474][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 1778.499553][ T5867] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1779.867557][T21530] FAULT_INJECTION: forcing a failure. [ 1779.867557][T21530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1779.962427][T21530] CPU: 1 UID: 0 PID: 21530 Comm: syz.9.3090 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 1779.973281][T21530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1779.983365][T21530] Call Trace: [ 1779.986662][T21530] [ 1779.989610][T21530] dump_stack_lvl+0x241/0x360 [ 1779.994318][T21530] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1779.999542][T21530] ? __pfx__printk+0x10/0x10 [ 1780.004158][T21530] ? __pfx_lock_release+0x10/0x10 [ 1780.009230][T21530] should_fail_ex+0x3b0/0x4e0 [ 1780.013953][T21530] _copy_from_user+0x2f/0xc0 [ 1780.018582][T21530] __sys_bpf+0x1a4/0x810 [ 1780.022853][T21530] ? __pfx___sys_bpf+0x10/0x10 [ 1780.027656][T21530] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1780.033670][T21530] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1780.040021][T21530] ? do_syscall_64+0x100/0x230 [ 1780.044816][T21530] __x64_sys_bpf+0x7c/0x90 [ 1780.049274][T21530] do_syscall_64+0xf3/0x230 [ 1780.053808][T21530] ? clear_bhb_loop+0x35/0x90 [ 1780.058506][T21530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1780.064431][T21530] RIP: 0033:0x7f5765f85d29 [ 1780.068884][T21530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1780.088608][T21530] RSP: 002b:00007f5766d8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1780.097049][T21530] RAX: ffffffffffffffda RBX: 00007f5766175fa0 RCX: 00007f5765f85d29 [ 1780.105043][T21530] RDX: 0000000000000050 RSI: 0000000020000680 RDI: 0000000000000000 [ 1780.113034][T21530] RBP: 00007f5766d8b090 R08: 0000000000000000 R09: 0000000000000000 [ 1780.121111][T21530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1780.129102][T21530] R13: 0000000000000001 R14: 00007f5766175fa0 R15: 00007ffe7d5c9718 [ 1780.137113][T21530] [ 1780.140349][ C1] vkms_vblank_simulate: vblank timer overrun [ 1780.422282][T21540] fuse: Bad value for 'fd' [ 1780.747119][ T25] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1781.047374][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 1781.056976][ T25] usb 4-1: config 0 has no interfaces? [ 1781.068597][ T25] usb 4-1: config 0 has no interfaces? [ 1781.074900][ T25] usb 4-1: config 0 has no interfaces? [ 1781.144029][ T25] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1781.144234][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1781.144303][ T25] usb 4-1: Product: syz [ 1781.144365][ T25] usb 4-1: Manufacturer: syz [ 1781.144428][ T25] usb 4-1: SerialNumber: syz [ 1781.270196][ T25] usb 4-1: config 0 descriptor?? [ 1781.667743][T20152] usb 4-1: USB disconnect, device number 43 [ 1781.900951][T21560] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3098'. [ 1782.997164][T19944] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1783.177536][T19944] usb 2-1: Using ep0 maxpacket: 16 [ 1783.187088][T19944] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1783.195731][T19944] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1783.196209][T19944] usb 2-1: can't read configurations, error -61 [ 1783.337636][T19944] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1783.507328][T19944] usb 2-1: Using ep0 maxpacket: 16 [ 1783.517096][T19944] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1783.529327][T19944] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1783.529433][T19944] usb 2-1: can't read configurations, error -61 [ 1783.530227][T19944] usb usb2-port1: attempt power cycle [ 1784.088179][T19944] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1784.119111][T19944] usb 2-1: Using ep0 maxpacket: 16 [ 1784.120821][T19944] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1784.122222][T19944] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1784.122251][T19944] usb 2-1: can't read configurations, error -61 [ 1784.247938][T19944] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1784.976010][T19944] usb 2-1: Using ep0 maxpacket: 16 [ 1785.027327][T19944] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1785.031775][T19944] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1785.031813][T19944] usb 2-1: can't read configurations, error -61 [ 1785.032061][T19944] usb usb2-port1: unable to enumerate USB device [ 1786.369918][T21622] ip6gretap0: entered promiscuous mode [ 1786.379432][T21622] vlan2: entered promiscuous mode [ 1786.413174][T21622] ip6gretap0: left promiscuous mode [ 1787.397271][T21618] netlink: 16 bytes leftover after parsing attributes in process `syz.9.3110'. [ 1787.969817][T21655] netlink: 'syz.9.3116': attribute type 27 has an invalid length. [ 1788.243158][T21666] tipc: Started in network mode [ 1788.282866][T21666] tipc: Node identity 7, cluster identity 4711 [ 1788.323096][T21666] tipc: Node number set to 7 [ 1788.452366][T21674] tipc: Started in network mode [ 1788.465879][T21674] tipc: Node identity 7, cluster identity 4711 [ 1788.501348][T21675] FAULT_INJECTION: forcing a failure. [ 1788.501348][T21675] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1788.533036][T21675] CPU: 0 UID: 0 PID: 21675 Comm: syz.7.3119 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 1788.543081][T21674] tipc: Node number set to 7 [ 1788.543826][T21675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1788.558503][T21675] Call Trace: [ 1788.561814][T21675] [ 1788.564782][T21675] dump_stack_lvl+0x241/0x360 [ 1788.569496][T21675] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1788.574745][T21675] ? __pfx__printk+0x10/0x10 [ 1788.579378][T21675] ? __pfx_lock_release+0x10/0x10 [ 1788.584452][T21675] should_fail_ex+0x3b0/0x4e0 [ 1788.589169][T21675] _copy_from_user+0x2f/0xc0 [ 1788.593802][T21675] copy_msghdr_from_user+0xae/0x680 [ 1788.599047][T21675] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1788.604887][T21675] ? __fget_files+0x2a/0x410 [ 1788.609506][T21675] ? __fget_files+0x2a/0x410 [ 1788.614128][T21675] __sys_sendmsg+0x209/0x350 [ 1788.618777][T21675] ? __pfx_lock_release+0x10/0x10 [ 1788.623839][T21675] ? __pfx___sys_sendmsg+0x10/0x10 [ 1788.628997][T21675] ? __pfx_vfs_write+0x10/0x10 [ 1788.633825][T21675] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1788.640192][T21675] ? do_syscall_64+0x100/0x230 [ 1788.645011][T21675] ? do_syscall_64+0xb6/0x230 [ 1788.649764][T21675] do_syscall_64+0xf3/0x230 [ 1788.654305][T21675] ? clear_bhb_loop+0x35/0x90 [ 1788.659015][T21675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.664948][T21675] RIP: 0033:0x7f0f3cf85d29 [ 1788.669398][T21675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1788.689037][T21675] RSP: 002b:00007f0f3de75038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1788.697585][T21675] RAX: ffffffffffffffda RBX: 00007f0f3d176080 RCX: 00007f0f3cf85d29 [ 1788.705596][T21675] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1788.713608][T21675] RBP: 00007f0f3de75090 R08: 0000000000000000 R09: 0000000000000000 [ 1788.721618][T21675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1788.729624][T21675] R13: 0000000000000000 R14: 00007f0f3d176080 R15: 00007ffda2aa1908 [ 1788.737707][T21675] [ 1789.468045][T20034] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 1789.552364][T20034] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1789.949852][T21697] loop7: detected capacity change from 0 to 16384 [ 1792.238282][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.244887][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.262255][T21731] can0: slcan on ttyS3. [ 1793.663759][T21744] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3128'. [ 1793.699663][T21731] can0 (unregistered): slcan off ttyS3. [ 1796.161810][T21773] FAULT_INJECTION: forcing a failure. [ 1796.161810][T21773] name failslab, interval 1, probability 0, space 0, times 0 [ 1796.267286][T21773] CPU: 0 UID: 0 PID: 21773 Comm: syz.1.3137 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 1796.278107][T21773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1796.288167][T21773] Call Trace: [ 1796.291449][T21773] [ 1796.294384][T21773] dump_stack_lvl+0x241/0x360 [ 1796.299071][T21773] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1796.304270][T21773] ? __pfx__printk+0x10/0x10 [ 1796.308858][T21773] ? fs_reclaim_acquire+0x93/0x130 [ 1796.313968][T21773] ? __pfx___might_resched+0x10/0x10 [ 1796.319256][T21773] should_fail_ex+0x3b0/0x4e0 [ 1796.323931][T21773] should_failslab+0xac/0x100 [ 1796.328633][T21773] __kmalloc_noprof+0xdd/0x4c0 [ 1796.333420][T21773] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 1796.339180][T21773] tomoyo_realpath_from_path+0xcf/0x5e0 [ 1796.344823][T21773] tomoyo_path_number_perm+0x236/0x860 [ 1796.350404][T21773] ? __lock_acquire+0x1397/0x2100 [ 1796.355462][T21773] ? tomoyo_path_number_perm+0x206/0x860 [ 1796.361130][T21773] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1796.367187][T21773] ? __fget_files+0x2a/0x410 [ 1796.371820][T21773] ? __fget_files+0x2a/0x410 [ 1796.376442][T21773] security_file_ioctl+0xc6/0x2a0 [ 1796.381503][T21773] __se_sys_ioctl+0x46/0x170 [ 1796.386125][T21773] do_syscall_64+0xf3/0x230 [ 1796.390663][T21773] ? clear_bhb_loop+0x35/0x90 [ 1796.395368][T21773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1796.401299][T21773] RIP: 0033:0x7f1f3b585d29 [ 1796.405739][T21773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1796.425380][T21773] RSP: 002b:00007f1f3c400038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1796.433835][T21773] RAX: ffffffffffffffda RBX: 00007f1f3b776160 RCX: 00007f1f3b585d29 [ 1796.441843][T21773] RDX: 0000000020000140 RSI: 00000000c0a85352 RDI: 0000000000000003 [ 1796.449835][T21773] RBP: 00007f1f3c400090 R08: 0000000000000000 R09: 0000000000000000 [ 1796.457805][T21773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1796.465773][T21773] R13: 0000000000000001 R14: 00007f1f3b776160 R15: 00007ffec792b9e8 [ 1796.473851][T21773] [ 1796.482483][T21773] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1798.372693][T21802] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3143'. [ 1799.690090][ T29] audit: type=1400 audit(1736266537.508:34): lsm=SMACK fn=smack_key_permission action=denied subject="y" object="_" requested=w pid=21830 comm="syz.1.3151" key_serial=454919731 key_desc="syz&" [ 1799.829104][ T29] audit: type=1400 audit(1736266537.538:35): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=21830 comm="syz.1.3151" name="48" dev="tmpfs" ino=265 [ 1800.279150][T21849] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1800.313584][T21847] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1801.159929][T21837] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3150'. [ 1801.591797][T21859] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 1801.599341][T21859] netdevsim netdevsim9 netdevsim0: left allmulticast mode [ 1801.608427][T21859] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1805.576704][T21900] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1805.845380][T21910] tipc: Enabling not permitted [ 1805.894400][T21910] tipc: Enabling of bearer rejected, failed to enable media [ 1805.988414][T21915] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3170'. [ 1807.518813][T16514] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1807.997657][T16514] usb 2-1: Using ep0 maxpacket: 8 [ 1808.019380][T16514] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1808.075882][T16514] usb 2-1: config 179 has no interface number 0 [ 1808.125984][T16514] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1808.257773][T16514] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1808.333335][T16514] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1808.399086][T16514] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1808.432305][T16514] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1808.476264][T16514] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1808.496604][T16514] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1808.534152][T21928] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1809.467523][ T5823] Bluetooth: hci5: command 0x0406 tx timeout [ 1809.981455][T20152] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input24 [ 1810.049490][T21963] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1810.073518][T21920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1810.122520][T21920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1811.548189][T21985] can0: slcan on ttyS3. [ 1812.376800][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1812.376807][T17272] usb 2-1: USB disconnect, device number 10 [ 1812.392356][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1812.394126][T21989] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3182'. [ 1812.577198][T21980] can0 (unregistered): slcan off ttyS3. [ 1812.768580][T17272] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1813.067993][T21990] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3183'. [ 1814.005907][T22009] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3188'. [ 1816.021950][T20034] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1816.031695][T22007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3187'. [ 1816.040957][T22007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3187'. [ 1816.073016][T22007] bridge0: entered promiscuous mode [ 1816.152260][T22007] batadv_slave_1: entered promiscuous mode [ 1816.230788][T20034] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1816.358100][T20034] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1816.370391][T20034] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1816.389952][T20034] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1816.408018][T20034] usb 2-1: config 0 descriptor?? [ 1816.736361][T22035] can0: slcan on ttyS3. [ 1817.850767][T22040] rdma_op ffff88807c85b1f0 conn xmit_rdma 0000000000000000 [ 1819.295901][T22039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1819.499815][T22039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1819.552229][T20034] arvo 0003:1E7D:30D4.0007: unbalanced delimiter at end of report description [ 1819.659806][T20034] arvo 0003:1E7D:30D4.0007: parse failed [ 1819.690067][T22031] can0 (unregistered): slcan off ttyS3. [ 1819.817818][T20034] arvo 0003:1E7D:30D4.0007: probe with driver arvo failed with error -22 [ 1819.838462][T20034] usb 2-1: USB disconnect, device number 11 [ 1820.206557][T22060] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1820.578384][ T5818] Bluetooth: hci1: command 0x0406 tx timeout [ 1820.884866][T22063] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3198'. [ 1821.571452][T22075] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1822.276244][T22077] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3202'. [ 1823.430027][T22084] input: syz1 as /devices/virtual/input/input25 [ 1823.590610][T22095] binder: 22093:22095 ioctl 400c620e 200001c0 returned -22 [ 1823.883082][T22096] fuse: Bad value for 'group_id' [ 1824.358283][T22096] fuse: Bad value for 'group_id' [ 1826.017841][T22119] can0: slcan on ttyS3. [ 1826.958457][T22115] can0 (unregistered): slcan off ttyS3. [ 1829.687976][T22142] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1830.016881][T22148] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3215'. [ 1830.680249][T22162] binder: 22159:22162 ioctl 400c620e 200001c0 returned -22 [ 1833.783850][T22192] loop6: detected capacity change from 0 to 524287999 [ 1833.807957][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1833.817468][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1833.840379][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1833.849613][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1833.874922][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1833.884148][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1833.900238][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1833.909505][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1833.930831][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1833.940077][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1833.953523][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1833.962796][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1833.973808][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1833.983107][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1834.184160][T22194] Invalid logical block size (3) [ 1834.222406][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1834.231683][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1835.047296][T22192] ldm_validate_partition_table(): Disk read failed. [ 1835.152609][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1835.161943][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1835.170365][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1835.179570][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1835.194142][T22192] Dev loop6: unable to read RDB block 0 [ 1835.693769][T22192] loop6: unable to read partition table [ 1835.699814][T22192] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 1836.401263][T22221] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1837.253374][T22226] netlink: 68 bytes leftover after parsing attributes in process `syz.7.3229'. [ 1837.398081][T22227] binder: 22225:22227 ioctl 400c620e 200001c0 returned -22 [ 1841.615798][T22275] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3239'. [ 1841.616882][T22269] overlayfs: overlapping lowerdir path [ 1841.886895][T22276] overlayfs: missing 'lowerdir' [ 1841.937506][T20152] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1842.177759][T20152] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1842.307104][T20152] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1842.410466][T22283] xt_connbytes: Forcing CT accounting to be enabled [ 1842.417887][T22283] Cannot find add_set index 0 as target [ 1843.063323][T20152] usb 10-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1843.087342][T20152] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1843.128112][T20152] usb 10-1: config 0 descriptor?? [ 1844.354919][T22301] rdma_op ffff888011ebd9f0 conn xmit_rdma 0000000000000000 [ 1844.809174][T22301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1844.819139][T22301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1845.146340][T22303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3245'. [ 1846.084581][T22316] binder: 22314:22316 ioctl 400c620e 200001c0 returned -22 [ 1846.276057][T20152] usbhid 10-1:0.0: can't add hid device: -71 [ 1846.439010][T20152] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1846.587696][T20152] usb 10-1: USB disconnect, device number 11 [ 1846.664605][T22307] 9pnet_fd: Insufficient options for proto=fd [ 1848.443882][T22354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3258'. [ 1849.143575][T22358] netlink: 1264 bytes leftover after parsing attributes in process `syz.0.3257'. [ 1850.262430][ T5823] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1850.277340][ T5823] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1850.291636][ T5823] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1850.306088][ T5823] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1850.317652][ T5823] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1850.325391][ T5823] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1850.504373][T22374] binder: 22367:22374 ioctl 400c620e 200001c0 returned -22 [ 1852.419951][ T5818] Bluetooth: hci3: command tx timeout [ 1852.710567][T22368] chnl_net:caif_netlink_parms(): no params data found [ 1853.468232][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.481930][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.924251][T22368] bridge0: port 1(bridge_slave_0) entered blocking state [ 1853.948635][T22368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1853.976617][T22368] bridge_slave_0: entered allmulticast mode [ 1854.002437][T22368] bridge_slave_0: entered promiscuous mode [ 1854.059202][T22368] bridge0: port 2(bridge_slave_1) entered blocking state [ 1854.087199][T22368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1854.132842][T22368] bridge_slave_1: entered allmulticast mode [ 1854.140744][T22368] bridge_slave_1: entered promiscuous mode [ 1854.510463][ T5818] Bluetooth: hci3: command tx timeout [ 1854.804086][T22368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1854.869822][T22368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1855.048827][T22368] team0: Port device team_slave_0 added [ 1855.137193][T22444] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3272'. [ 1855.393728][T22368] team0: Port device team_slave_1 added [ 1855.713081][T22368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1855.730338][T22368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1855.850838][T22368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1856.361732][T22451] binder: 22449:22451 ioctl 400c620e 200001c0 returned -22 [ 1856.417244][T22368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1856.424330][T22368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1856.479267][T22368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1856.577249][ T5818] Bluetooth: hci3: command tx timeout [ 1856.720605][T22368] hsr_slave_0: entered promiscuous mode [ 1856.758708][T22368] hsr_slave_1: entered promiscuous mode [ 1856.877459][T16514] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1856.960062][ T25] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1857.067398][T16514] usb 2-1: Using ep0 maxpacket: 32 [ 1857.076433][T22481] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3282'. [ 1857.111453][T16514] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1857.185378][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1857.225680][T16514] usb 2-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 1857.308515][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1857.348028][T16514] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.392900][ T25] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 1857.444518][T16514] usb 2-1: config 0 descriptor?? [ 1857.451427][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.619705][ T25] usb 4-1: config 0 descriptor?? [ 1857.640167][T22368] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1858.252135][T16514] ryos 0003:1E7D:31CE.0008: unknown main item tag 0x0 [ 1858.261966][T22368] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1858.280739][T16514] ryos 0003:1E7D:31CE.0008: unknown main item tag 0x0 [ 1858.287990][T16514] ryos 0003:1E7D:31CE.0008: unknown main item tag 0x0 [ 1858.354972][T22498] rdma_op ffff88805d2089f0 conn xmit_rdma 0000000000000000 [ 1858.698616][T22499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1858.708498][T22499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1858.740346][ T5818] Bluetooth: hci3: command tx timeout [ 1858.959970][T16514] ryos 0003:1E7D:31CE.0008: unknown main item tag 0x0 [ 1858.970098][T16514] ryos 0003:1E7D:31CE.0008: unknown main item tag 0x0 [ 1858.986030][T16514] ryos 0003:1E7D:31CE.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.1-1/input0 [ 1859.218408][ T30] INFO: task kworker/u8:13:8364 blocked for more than 143 seconds. [ 1859.727462][T22503] ieee80211 phy98: Selected rate control algorithm 'minstrel_ht' [ 1859.781026][ T30] Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 1859.862539][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1859.880817][ T30] task:kworker/u8:13 state:D stack:21008 pid:8364 tgid:8364 ppid:2 flags:0x00004000 [ 1859.891218][ T30] Workqueue: ib-unreg-wq ib_unregister_work [ 1859.897228][ T30] Call Trace: [ 1859.900575][ T30] [ 1859.903574][ T30] __schedule+0x17fb/0x4be0 [ 1859.908280][ T30] ? __pfx___schedule+0x10/0x10 [ 1859.913209][ T30] ? __pfx_lock_release+0x10/0x10 [ 1859.935471][ T30] ? kthread_data+0x52/0xd0 [ 1859.942795][ T30] ? wq_worker_sleeping+0x66/0x240 [ 1859.955069][ T30] ? schedule+0x90/0x320 [ 1859.966781][ T30] schedule+0x14b/0x320 [ 1859.987320][ T30] schedule_timeout+0xb0/0x290 [ 1859.992193][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1860.007080][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1860.013221][ T30] ? wait_for_completion+0x2fe/0x620 [ 1860.045624][ T30] ? wait_for_completion+0x2fe/0x620 [ 1860.065173][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1860.082491][ T25] usbhid 4-1:0.0: can't add hid device: -71 [ 1860.095864][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1860.114509][ T25] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1860.125609][ T30] ? wait_for_completion+0x2fe/0x620 [ 1860.152719][ T30] wait_for_completion+0x355/0x620 [ 1860.161078][ T25] usb 4-1: USB disconnect, device number 44 [ 1860.172069][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 1860.183356][ T30] ? remove_client_context+0xc0/0x1e0 [ 1860.190101][ T30] disable_device+0x1c7/0x360 [ 1860.194862][ T30] ? __pfx_disable_device+0x10/0x10 [ 1860.212478][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1860.227220][ T30] __ib_unregister_device+0x2ac/0x3d0 [ 1860.237443][ T30] ? process_scheduled_works+0x976/0x1840 [ 1860.247890][ T30] ib_unregister_work+0x19/0x30 [ 1860.259535][ T30] process_scheduled_works+0xa66/0x1840 [ 1860.272121][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1860.287180][ T30] ? assign_work+0x364/0x3d0 [ 1860.294239][ T30] worker_thread+0x870/0xd30 [ 1860.308292][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1860.320798][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1860.336625][ T30] kthread+0x2f0/0x390 [ 1860.342221][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1860.353697][ T30] ? __pfx_kthread+0x10/0x10 [ 1860.367178][ T30] ret_from_fork+0x4b/0x80 [ 1860.374129][ T30] ? __pfx_kthread+0x10/0x10 [ 1860.383430][ T30] ret_from_fork_asm+0x1a/0x30 [ 1860.401055][ T30] [ 1860.410491][ T30] [ 1860.410491][ T30] Showing all locks held in the system: [ 1860.436847][ T30] 4 locks held by kworker/u8:1/12: [ 1860.475447][ T30] #0: ffff88801baeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 1860.498013][ T30] #1: ffffc90000117d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 1860.520531][ T30] #2: ffffffff8fc94550 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x16a/0xd50 [ 1860.540564][ T30] #3: ffffffff8e93cec0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1860.566657][ T30] 1 lock held by khungtaskd/30: [ 1860.572434][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 1860.583011][ T30] 1 lock held by dhcpcd/5486: [ 1860.588220][ T30] #0: ffffffff8fca0a08 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_deladdr+0x1a1/0x7b0 [ 1860.598105][ T30] 2 locks held by getty/5573: [ 1860.602888][ T30] #0: ffff88803159b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1860.636377][ T30] #1: ffffc9000330b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 1860.650989][ T30] 3 locks held by kworker/u8:13/8364: [ 1860.656880][ T30] #0: ffff88802229d148 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 1860.669380][ T30] #1: ffffc9000593fd00 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 1860.702852][ T30] #2: ffff888057ae46b8 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x264/0x3d0 [ 1860.717319][ T30] 3 locks held by kworker/0:6/20034: [ 1860.723319][ T30] 8 locks held by syz-executor/22368: [ 1860.729429][ T30] #0: ffff8880357f6420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x225/0xd30 [ 1860.739844][ T30] #1: ffff888061e9e088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 1860.750779][ T30] #2: ffff888143bfc4b8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 1860.764903][ T30] #3: ffffffff8f54c4e8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfc/0x480 [ 1860.776243][ T30] #4: ffff8880653ec0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xce/0x7c0 [ 1860.787790][ T30] #5: ffff8880589b1250 (&devlink->lock_key#8){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1860.835219][ T30] #6: ffffffff8fca0a08 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x71/0x5c0 [ 1860.877325][ T30] #7: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x830 [ 1860.912503][ T30] 1 lock held by syz.1.3278/22464: [ 1860.935463][ T30] #0: ffffffff8e93cec0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1860.957205][ T30] 1 lock held by syz.0.3284/22494: [ 1860.962462][ T30] 3 locks held by syz.0.3284/22512: [ 1860.987108][ T30] #0: ffffffff8fd03450 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1860.995387][ T30] #1: ffffffff8fd03308 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x121/0xec0 [ 1861.027105][ T30] #2: ffffffff8fca0a08 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_register_hw+0x2c4e/0x3e10 [ 1861.056415][ T30] 2 locks held by dhcpcd/22513: [ 1861.061647][ T30] #0: ffff88807b728208 (&sb->s_type->i_mutex_key#9){+.+.}-{4:4}, at: sock_close+0x90/0x240 [ 1861.086736][ T30] #1: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 1861.097969][ T30] [ 1861.103626][ T30] ============================================= [ 1861.103626][ T30] [ 1861.117251][ T30] NMI backtrace for cpu 0 [ 1861.121647][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 1861.132173][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1861.142258][ T30] Call Trace: [ 1861.145548][ T30] [ 1861.148492][ T30] dump_stack_lvl+0x241/0x360 [ 1861.153295][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1861.158537][ T30] ? __pfx__printk+0x10/0x10 [ 1861.163175][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1861.168145][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1861.173625][ T30] ? _printk+0xd5/0x120 [ 1861.177808][ T30] ? __pfx__printk+0x10/0x10 [ 1861.182427][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1861.187308][ T30] ? __pfx__printk+0x10/0x10 [ 1861.191921][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1861.196969][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1861.202974][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1861.208990][ T30] watchdog+0xff6/0x1040 [ 1861.213266][ T30] ? watchdog+0x1ea/0x1040 [ 1861.217709][ T30] ? __pfx_watchdog+0x10/0x10 [ 1861.222410][ T30] kthread+0x2f0/0x390 [ 1861.226497][ T30] ? __pfx_watchdog+0x10/0x10 [ 1861.231233][ T30] ? __pfx_kthread+0x10/0x10 [ 1861.235859][ T30] ret_from_fork+0x4b/0x80 [ 1861.240298][ T30] ? __pfx_kthread+0x10/0x10 [ 1861.244910][ T30] ret_from_fork_asm+0x1a/0x30 [ 1861.249711][ T30] [ 1861.253641][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1861.259097][ C1] NMI backtrace for cpu 1 [ 1861.259112][ C1] CPU: 1 UID: 0 PID: 20670 Comm: kworker/u8:33 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 1861.259132][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1861.259143][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1861.259170][ C1] RIP: 0010:kasan_check_range+0x9/0x290 [ 1861.259193][ C1] Code: e8 6c b6 e3 ff 90 0f 0b 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 41 57 41 56 <41> 54 53 b0 01 48 85 f6 0f 84 a0 01 00 00 4c 8d 04 37 49 39 f8 0f [ 1861.259206][ C1] RSP: 0018:ffffc900032c7570 EFLAGS: 00000046 [ 1861.259220][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817aba87 [ 1861.259231][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff94271880 [ 1861.259242][ C1] RBP: 0000000000000002 R08: ffffffff94271887 R09: 1ffffffff284e310 [ 1861.259254][ C1] R10: dffffc0000000000 R11: fffffbfff284e311 R12: ffff888027808ac4 [ 1861.259267][ C1] R13: 0000000000000014 R14: 1ffff11004f01174 R15: ffff888027808ba0 [ 1861.259286][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1861.259300][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1861.259312][ C1] CR2: 0000555559a465c8 CR3: 000000000e736000 CR4: 00000000003526f0 [ 1861.259327][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1861.259337][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1861.259348][ C1] Call Trace: [ 1861.259354][ C1] [ 1861.259361][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1861.259380][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1861.259398][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1861.259422][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1861.259442][ C1] ? nmi_handle+0x14f/0x5a0 [ 1861.259459][ C1] ? nmi_handle+0x2a/0x5a0 [ 1861.259476][ C1] ? kasan_check_range+0x9/0x290 [ 1861.259494][ C1] ? default_do_nmi+0x63/0x160 [ 1861.259511][ C1] ? exc_nmi+0x123/0x1f0 [ 1861.259526][ C1] ? end_repeat_nmi+0xf/0x53 [ 1861.259544][ C1] ? __lock_acquire+0x5b7/0x2100 [ 1861.259561][ C1] ? kasan_check_range+0x9/0x290 [ 1861.259580][ C1] ? kasan_check_range+0x9/0x290 [ 1861.259599][ C1] ? kasan_check_range+0x9/0x290 [ 1861.259618][ C1] [ 1861.259624][ C1] [ 1861.259630][ C1] __lock_acquire+0x5b7/0x2100 [ 1861.259652][ C1] lock_acquire+0x1ed/0x550 [ 1861.259668][ C1] ? debug_check_no_obj_freed+0x234/0x580 [ 1861.259692][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1861.259708][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1861.259725][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1861.259741][ C1] ? ret_from_fork+0x4b/0x80 [ 1861.259760][ C1] _raw_spin_lock_irqsave+0xd5/0x120 [ 1861.259778][ C1] ? debug_check_no_obj_freed+0x234/0x580 [ 1861.259797][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1861.259817][ C1] ? skb_release_data+0x6a0/0x8a0 [ 1861.259835][ C1] debug_check_no_obj_freed+0x234/0x580 [ 1861.259860][ C1] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1861.259881][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1861.259898][ C1] ? skb_release_data+0x6a0/0x8a0 [ 1861.259915][ C1] ? skb_release_data+0x6a0/0x8a0 [ 1861.259931][ C1] kfree+0x115/0x430 [ 1861.259951][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 1861.259972][ C1] skb_release_data+0x6a0/0x8a0 [ 1861.259993][ C1] consume_skb+0x9f/0xf0 [ 1861.260009][ C1] nsim_dev_trap_report_work+0x7cc/0xb50 [ 1861.260034][ C1] ? process_scheduled_works+0x976/0x1840 [ 1861.260055][ C1] process_scheduled_works+0xa66/0x1840 [ 1861.260083][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1861.260110][ C1] ? assign_work+0x364/0x3d0 [ 1861.260130][ C1] worker_thread+0x870/0xd30 [ 1861.260150][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1861.260167][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1861.260181][ C1] kthread+0x2f0/0x390 [ 1861.260197][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1861.260211][ C1] ? __pfx_kthread+0x10/0x10 [ 1861.260228][ C1] ret_from_fork+0x4b/0x80 [ 1861.260242][ C1] ? __pfx_kthread+0x10/0x10 [ 1861.260257][ C1] ret_from_fork_asm+0x1a/0x30 [ 1861.260286][ C1] [ 1861.261557][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1861.668848][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 1861.679353][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1861.689411][ T30] Call Trace: [ 1861.692710][ T30] [ 1861.695649][ T30] dump_stack_lvl+0x241/0x360 [ 1861.700345][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1861.705556][ T30] ? __pfx__printk+0x10/0x10 [ 1861.710152][ T30] ? vscnprintf+0x5d/0x90 [ 1861.714480][ T30] panic+0x349/0x880 [ 1861.718378][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1861.724535][ T30] ? __pfx_panic+0x10/0x10 [ 1861.728952][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1861.734324][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1861.740479][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1861.746633][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1861.752787][ T30] watchdog+0x1035/0x1040 [ 1861.757116][ T30] ? watchdog+0x1ea/0x1040 [ 1861.761536][ T30] ? __pfx_watchdog+0x10/0x10 [ 1861.766210][ T30] kthread+0x2f0/0x390 [ 1861.770283][ T30] ? __pfx_watchdog+0x10/0x10 [ 1861.774961][ T30] ? __pfx_kthread+0x10/0x10 [ 1861.779559][ T30] ret_from_fork+0x4b/0x80 [ 1861.783975][ T30] ? __pfx_kthread+0x10/0x10 [ 1861.788567][ T30] ret_from_fork_asm+0x1a/0x30 [ 1861.793340][ T30] [ 1861.796646][ T30] Kernel Offset: disabled [ 1861.800986][ T30] Rebooting in 86400 seconds..