last executing test programs: 22m42.828754591s ago: executing program 32 (id=111): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x8, 0x400, 0x0, 0x41c0204, r6}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000c80)={'ip6gre0\x00', &(0x7f0000000c00)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x9, 0x200, 0x54, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x8, 0x4, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x3e, 0x80, 0x3, 0xfffffeff, 0xa, @dev={0xfe, 0x80, '\x00', 0x27}, @empty, 0x7, 0x700, 0x8, 0xa}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000dc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d80)={&(0x7f0000002500)=ANY=[@ANYBLOB="02000024dc9da4f2a92b5e2c75748d4abafbb69490ade64d299b1210caad7d0fb85f46757cc3b9f1323871a1b2f1be2e321f34b741d330d3902d419bd17e0e753f8f4838dc170da7936372b0cc9241761d80992ccca57cc508b8534fcd14060e26e3820f03df4f000000", @ANYRES16=0x0, @ANYRESOCT=r3, @ANYRESOCT=r2, @ANYBLOB="1400020074756e6c30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="300001800800030002000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163736563300000000000000000002c00018008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4400018008000300000000001400020076657468315f6d6163767461700000001400020070696d7265670000000000000000000008000100", @ANYRES16=0x0, @ANYBLOB="08000300010000004c00018008000300010000000800030007000000140002006772657461703000000000000000000008000300010000001400020076657468305f746f5f6261746164760008000100", @ANYRESDEC=r2, @ANYBLOB="4400018014000200626f6e645f736c6176655f310000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007663616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="48000180080003000300000008000100", @ANYRES64=r6, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="0800030002000000140002006e657464657673696d300000000000002000018008000300000000001400020072657468305f6d616376746170000000f925628985698a17ba07276b279418c0f926c050abc78b24253a189795a09a376d2390323e36e1a06458efb87edb2db406cd4bf76b4fd284afd39ef8abb7ea7d138fa1385a811247105c631118249fe0c2ccb7506ed1d144d48137bf9ff17d48ca1cab6eef012897a465ac6713cd3ed3cfae949588"], 0x244}, 0x1, 0x0, 0x0, 0x80814}, 0x4) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f00000003c0)=[0x3ff, 0x7], 0x2) sendmmsg$alg(r2, &(0x7f0000003b80)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}], 0x1, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="00012cbd7000f9dbdf25020000000800040006ffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x4000100}, 0x90) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) r11 = add_key$user(&(0x7f0000000200), &(0x7f0000000580)={'syz', 0x3}, &(0x7f0000000300)="f479c603ed", 0x5, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000040)={r11}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={'poly1305-generic\x00'}}) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x0, 0x1ff, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000540)="0dfbe8d416", 0x5}, {&(0x7f0000000e00)="73d00ef76a09fd893bd1636cca44aa2583cc03bc1ebc8d058a830301ebc18a03cbded7411860718c429821c582137127c173a9b311870aa5904742e3967bd64c0fd71d32fba8676a543a1a5510f960fe027f4a9f929fea4e248cc8bfc082f469abe1ccd1c43fb8860d1dc3bd279b84ef4846d147e9be", 0x76}], 0x2}}], 0x2, 0x20000004) 22m42.649163331s ago: executing program 33 (id=109): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x1, 0x8, 0x400, 0x0, 0x41c0204, r6}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000c80)={'ip6gre0\x00', &(0x7f0000000c00)={'ip6tnl0\x00', 0x0, 0x29, 0x1, 0x9, 0x200, 0x54, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x8, 0x4, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000005c0)={'syztnl1\x00', 0x0, 0x3e, 0x80, 0x3, 0xfffffeff, 0xa, @dev={0xfe, 0x80, '\x00', 0x27}, @empty, 0x7, 0x700, 0x8, 0xa}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000dc0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d80)={&(0x7f0000002500)=ANY=[@ANYBLOB="02000024dc9da4f2a92b5e2c75748d4abafbb69490ade64d299b1210caad7d0fb85f46757cc3b9f1323871a1b2f1be2e321f34b741d330d3902d419bd17e0e753f8f4838dc170da7936372b0cc9241761d80992ccca57cc508b8534fcd14060e26e3820f03df4f000000", @ANYRES16=0x0, @ANYRESOCT=r3, @ANYRESOCT=r2, @ANYBLOB="1400020074756e6c30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="300001800800030002000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163736563300000000000000000002c00018008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="4400018008000300000000001400020076657468315f6d6163767461700000001400020070696d7265670000000000000000000008000100", @ANYRES16=0x0, @ANYBLOB="08000300010000004c00018008000300010000000800030007000000140002006772657461703000000000000000000008000300010000001400020076657468305f746f5f6261746164760008000100", @ANYRESDEC=r2, @ANYBLOB="4400018014000200626f6e645f736c6176655f310000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030000000000140002007663616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="48000180080003000300000008000100", @ANYRES64=r6, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="0800030002000000140002006e657464657673696d300000000000002000018008000300000000001400020072657468305f6d616376746170000000f925628985698a17ba07276b279418c0f926c050abc78b24253a189795a09a376d2390323e36e1a06458efb87edb2db406cd4bf76b4fd284afd39ef8abb7ea7d138fa1385a811247105c631118249fe0c2ccb7506ed1d144d48137bf9ff17d48ca1cab6eef012897a465ac6713cd3ed3cfae949588"], 0x244}, 0x1, 0x0, 0x0, 0x80814}, 0x4) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f00000003c0)=[0x3ff, 0x7], 0x2) sendmmsg$alg(r2, &(0x7f0000003b80)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4010}], 0x1, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="00012cbd7000f9dbdf25020000000800040006ffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x4000100}, 0x90) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r10, &(0x7f0000019680)=""/102392, 0x18ff8) r11 = add_key$user(&(0x7f0000000200), &(0x7f0000000580)={'syz', 0x3}, &(0x7f0000000300)="f479c603ed", 0x5, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000040)={r11}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={'poly1305-generic\x00'}}) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000000)={0xa, 0x0, 0x1ff, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000540)="0dfbe8d416", 0x5}, {&(0x7f0000000e00)="73d00ef76a09fd893bd1636cca44aa2583cc03bc1ebc8d058a830301ebc18a03cbded7411860718c429821c582137127c173a9b311870aa5904742e3967bd64c0fd71d32fba8676a543a1a5510f960fe027f4a9f929fea4e248cc8bfc082f469abe1ccd1c43fb8860d1dc3bd279b84ef4846d147e9be", 0x76}], 0x2}}], 0x2, 0x20000004) 22m42.458634714s ago: executing program 34 (id=113): syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) (async) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1c, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000280)={0x7, 0x3}, 0xc) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x64f, 0x6, 0x6, 0xfffffffffffffffc, 0x4ffff, 0x29]}) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x5b}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x5b}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000001c0)='bbr\x00', 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x3, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00"/12], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000100)=0x20000002, 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000280)=0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1c, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 22m41.16748551s ago: executing program 35 (id=115): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x170, 0x194, 0x194, 0x170, 0x194, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x24}, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00', {}, {}, 0x2f}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xe, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c809800000000800000000000000000000000000d63175876b4c69a600", 0xffffffffffffffff}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000000)={0x2, "fa02c80a3a1e9d4b9aaf000000008d674fe69b5b7638dd031dd7504fe5809639", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r2, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000180)={"0e310000070000edbdccf6000000000000000000000000004000", r2, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000040)={"130f2672af9ee0452321864922cd3bebd7f9cec5064e58445f1268334b4900", r7}) syz_io_uring_setup(0x4169, &(0x7f00000003c0)={0x0, 0xd491, 0x10100, 0x2, 0xc4}, &(0x7f00000001c0), &(0x7f0000000300)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x52, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r11) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r12, 0x0) r13 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r13, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r14 = accept(r11, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r13, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=@newqdisc={0x54, 0x10, 0x1, 0x70bd2d, 0x0, {0x10, 0x0, 0x4c, 0x0, {}, {0xd, 0xe}, {0x10}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0xa, {0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000001480)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001680)) 21m10.111611513s ago: executing program 7 (id=297): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x90, r4, 0x205, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x59, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac=@device_b}, 0x0, @default, 0xc97f, @void, @val, @val={0x3, 0x1, 0x38}, @void, @val={0x6, 0x2, 0x3f16}, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x10, 0x1, 0x6, 0x0, {0x9, 0xc9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x1}, 0xb, 0x79, 0x4}}, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x20}}, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xffffffff}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x2}]}, 0x90}, 0x1, 0x0, 0x0, 0x3b517560ae7f6dc7}, 0x0) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x54, r4, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x6}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x56}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xf8}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x20040010) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_PIT2(r7, 0x8070ae9f, &(0x7f0000000100)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x4, 0xc2, 0x4f, 0x40, 0x2, 0x80, 0x1, 0x3, 0x44, 0x8, 0x0, 0x9}, {0xb, 0xa6f2, 0x6, 0x8, 0x9, 0x8, 0x4, 0x3, 0xa, 0x13, 0x7, 0x6, 0x8661}, {0x1ff, 0x7, 0xd, 0x10, 0x25, 0x9, 0x0, 0xfb, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x9}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10000, 0xfffffffffffffffd, 0x4002004c4, 0x1000, 0x0, 0x0, 0x10, 0x0, 0x3], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 21m7.084716164s ago: executing program 7 (id=300): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r1, 0x2f126000) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x13, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f0000001500)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001580)=ANY=[@ANYBLOB="1400000014000100000000000000000001"], 0x14}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write(r3, &(0x7f0000000140)="24000000010006", 0x7) fcntl$notify(r0, 0x402, 0x8) cachestat(r1, &(0x7f0000000180)={0xff}, &(0x7f0000002280), 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c80), r7) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r11, 0x0, 0x60, &(0x7f0000000c80)={'filter\x00', 0x5, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0xe8, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x4, 0x3}}}, {{@arp={@multicast1, @loopback, 0xffffffff, 0xffffff00, 0x6, 0xf, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x3794, 0x2a1b, 0xc6d3, 0x0, 0x3, 0x2, 'vxcan1\x00', 'vlan0\x00', {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @local, @remote}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7000fcdbdf253700000008000300", @ANYRES32=r10, @ANYBLOB="080026006c0900000008005700004800000000000000000000000000000000004af2c64b8e3a6bd1b8fb034d1fbeac3ce54417559f931fd9a99aaad9bd0ec16f166529dea64ab6a622503b46bf0428ee8429b7c5d4b9e0c093043f62e6cac6fc899f499877faf2803bdb7c31b48b1e251710be15bc5b7c720305"], 0x3c}, 0x1, 0x0, 0x0, 0x8850}, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5cc, @void, @value}, 0x94) r12 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) preadv(r12, &(0x7f0000000040)=[{&(0x7f00000013c0)=""/4100, 0x1004}], 0x1, 0x0, 0x0) 21m4.187964095s ago: executing program 7 (id=305): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e000102", @ANYRES32=0x0, @ANYBLOB="1e"], 0x1c}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r4, &(0x7f0000000000)='\"', 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f0000000400000004000000120000"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r9, r8, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) sendmsg$inet(r7, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) 20m58.876444881s ago: executing program 7 (id=310): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd8168", 0x7}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xb, 0x4000008f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001080)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x400000bce) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) get_mempolicy(&(0x7f0000000140), 0x0, 0x7fff, &(0x7f0000ffb000/0x3000)=nil, 0x4) syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') fcntl$notify(0xffffffffffffffff, 0x402, 0x80000035) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x80045520, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) (fail_nth: 4) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r2, 0x7a9, &(0x7f0000000100)={{@local, 0x1ff}, 0x5, 0x7fff, 0x6, 0x105, 0xfff, 0x8, 0x8, 0x7}) 20m52.64521184s ago: executing program 7 (id=314): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xfffffffffffffffe, 0x101403) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x2, 0x10, 0x1014, 0x0, 0x6, 0x0, 0x3, 0xdd2fcb245114ab72}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0xe83, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff040000000009050a", @ANYRES32=r1], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r3, &(0x7f0000000000)={0x24, @short={0x2, 0x3, 0xffff}}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) recvmmsg(r4, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003700)=[{}], 0x1, 0x140, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 20m48.778467585s ago: executing program 7 (id=316): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0xb1, 0x0, 0xfe, 0xfffff00c}, {0x6, 0x0, 0x1}]}, 0x10) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) (fail_nth: 4) 20m47.392556724s ago: executing program 36 (id=307): syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) pipe2(&(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x109) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="150000000800000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r8}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r9}, 0x8) 20m33.316203205s ago: executing program 37 (id=316): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0xb1, 0x0, 0xfe, 0xfffff00c}, {0x6, 0x0, 0x1}]}, 0x10) sendmmsg(r2, &(0x7f0000000180), 0x4000190, 0x0) (fail_nth: 4) 20m32.888085583s ago: executing program 0 (id=331): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_audit(0x10, 0x3, 0x9) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r0 = syz_io_uring_setup(0x449f, &(0x7f00000000c0)={0x0, 0xebbe, 0x3180, 0x8003, 0x40024e}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r3 = socket(0x200000000000011, 0x2, 0xd) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000040)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}}}}}}}, 0x0) syz_emit_ethernet(0x131, &(0x7f0000001a80)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x123, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10f, 0x0, @opaque="edf1df4edc119cb3d0b8ad66bf21898f56dea225ccb2d8ed7e491f7a300b0b38fe69e2910f6158f4cf4d2bf792d3758d8173e85e1bf7fa7eeba490c2cf30bb231e806bfabcabdc0213d969b0b9434fa01623fc23c249a85e8258d584625788fafd9c12f510d09598f6dd6fabf6ac7a2dfe649fa04122d102e69784c8d78a65b1b9bf29114e5c2d5f1e7ae1e4338cfa45917f69e5ceac119ad400a552d4c840f0d3c4f7e64b2b88abb9c9c351dd84a30149d52caf718c64395eecb782880e012c6aeb368f429df66a611d773911057c7c0f854721c9c6eb45f1dd169791ee6e69c774608cb5b27a72fe02901efeec8f0533af0d040309cc15790df5450f1436129bf90da1eaa17f"}}}}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_READ=@pass_buffer={0x16, 0x8, 0x0, @fd_index=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x30) 20m29.610336716s ago: executing program 0 (id=333): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000002f80)={0x20, 0x3, 0x6, 0x101, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xb6745a3336cc01af}, 0xc0) 20m27.963426747s ago: executing program 0 (id=334): r0 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x335}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x12, 0x0, 0xffffffffffffffff, &(0x7f0000000140)={0x400000, 0x40, 0x29}, &(0x7f0000000100)='./file0\x00', 0x30, 0x0, 0x12345}) io_uring_enter(r0, 0x47ba, 0xda2a, 0x62, 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006380)={0x2020}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) dup3(r4, r3, 0x0) 20m26.588436479s ago: executing program 0 (id=336): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x7}) setresuid(0xee01, 0x0, 0xffffffffffffffff) (async) setresuid(0xee01, 0x0, 0xffffffffffffffff) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40000, 0x120) mkdirat(r1, &(0x7f0000000100)='./file0\x00', 0x20) add_key$fscrypt_provisioning(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$session_to_parent(0x12) (async) keyctl$session_to_parent(0x12) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000640)=""/4112, 0x1010}], 0x1, 0x4000, 0x0) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) (async) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) (async) ioctl$NBD_CLEAR_SOCK(r2, 0xab04) 20m24.680178688s ago: executing program 0 (id=339): userfaultfd(0x80001) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) memfd_secret(0x0) socket$inet_mptcp(0x2, 0x1, 0x106) prctl$PR_GET_THP_DISABLE(0x2a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1f821bc25fa46eaf53917fbae01ac86e06a0af31a9167ac93666cbfce317f4d89438ada20492c7e787769ae367b057e255f9fc7fcd3678acf258357e1e5a90d17a85ed2bb685014e05fe9dd53656818b650ff910557ae37262d12"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073"], 0x7c}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x45, 0x2, 0x2}, {0x60}, {}, {0x6}]}) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000001080)={0x1, 0x0, 0x20, 0x20, 0x0, 0x0}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449, 0xfffffffffffffffd, 0x600}) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x8, {{0xa, 0x0, 0x7, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @mcast1, 0x2}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) 20m18.00609457s ago: executing program 0 (id=342): prctl$PR_MCE_KILL(0x41555856, 0x1, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) unshare(0x6a040000) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5, @bcast, @bpq0, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60"], 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x38, 0x8}, {0x6, 0xfc}]}) write$ppp(r0, &(0x7f0000000180)="03ce", 0x13) 20m2.270254854s ago: executing program 38 (id=342): prctl$PR_MCE_KILL(0x41555856, 0x1, 0x2) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) unshare(0x6a040000) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x5, @bcast, @bpq0, 0x0, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd60"], 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x38, 0x8}, {0x6, 0xfc}]}) write$ppp(r0, &(0x7f0000000180)="03ce", 0x13) 12m10.715313464s ago: executing program 6 (id=1456): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000380)="8f", 0x1}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="140000000000000029000000080000003e010000000000001400000000000000290000003e0000003ec5000000000000200000000000000029000000360000001d00000000000000050205270401000024"], 0x78}}], 0x2, 0x3404c8d4) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16=r0], 0x1000f) 12m10.44954457s ago: executing program 6 (id=1457): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x202, 0x11) sendfile(r0, r0, 0x0, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0xc0) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x1c, 0x3e, 0x107, 0xfffffffc, 0x25dfdbf9, {0x4, 0x7c}, [@nested={0x8, 0xa8, 0x0, 0x1, [@nested={0x4, 0x8}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x80000000, 0x0, 0x34324142}}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x410000, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000140)=0x2) openat(0xffffffffffffff9c, 0x0, 0xc0042, 0x1fe) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = gettid() socket$nl_netfilter(0x10, 0x3, 0xc) process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x13) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018080000", @ANYRES32, @ANYBLOB="00000000000000006600fcff0000000018000000000000000000000000000000950000000000000018010000202073250000000000202020c31af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 12m9.059865804s ago: executing program 6 (id=1460): socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) umount2(&(0x7f0000000040)='.\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) renameat2(r2, &(0x7f00000001c0)='./file0\x00', r2, &(0x7f0000000200)='.\x02\x00', 0x8c) 12m6.727271474s ago: executing program 6 (id=1464): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect(r1, &(0x7f00000001c0)=@ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x28, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRESOCT, @ANYRESHEX]) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) (async) munlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) socket$inet6_sctp(0xa, 0x801, 0x84) (async, rerun: 64) r3 = getpid() (rerun: 64) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async, rerun: 32) r4 = syz_pidfd_open(r3, 0x0) (rerun: 32) prlimit64(0x0, 0xe, 0x0, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) (async) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async) pselect6(0x40, &(0x7f0000000000)={0x3, 0x1000000000000000, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0xfff, 0x0, 0x8, 0x0, 0x0, 0x2, 0x100000000004}, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) (async) sched_setscheduler(0x0, 0x2, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) (async) r9 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=@newqdisc={0x5c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1ff}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x8, 0xfffa, 0x7f, 0x2, 0xdaf, 0x6}}, {0x4}}]}]}, 0x5c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xd, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x8}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) 12m6.279989277s ago: executing program 6 (id=1465): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f0000000200)='m', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x4000000000000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0x78, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0, 0x5c, &(0x7f0000000480), 0x48, 0x10, &(0x7f0000000380), &(0x7f0000000500), 0x8, 0x70, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$usbfs(&(0x7f0000000100), 0x40000c5e, 0x0) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x22d1, 0x0) syz_open_dev$media(0x0, 0x7, 0x1) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48800) shutdown(r5, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000001800)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x1, @local, 0x1}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r6, 0x1) setsockopt(r6, 0x84, 0x83, &(0x7f00000002c0)="1a00000002000000", 0x8) pselect6(0x40, &(0x7f0000000140)={0x0, 0x2, 0xc, 0x4, 0x5, 0x9, 0x7f, 0x5}, 0x0, &(0x7f0000000280)={0xff, 0x9, 0x753, 0x1, 0xfffffffffffffffd, 0x1, 0x0, 0x7}, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) 12m3.689040202s ago: executing program 6 (id=1471): syz_open_dev$sg(0x0, 0x5, 0x20000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r2, 0x560f, &(0x7f0000000000)) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_clone(0x5020000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x4) ptrace(0x10, r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r6, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) read$FUSE(r4, &(0x7f00000046c0)={0x2020}, 0xfee1) 11m48.451678551s ago: executing program 39 (id=1471): syz_open_dev$sg(0x0, 0x5, 0x20000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xe) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_OPENQRY(r2, 0x560f, &(0x7f0000000000)) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_clone(0x5020000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x4) ptrace(0x10, r3) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r6, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) read$FUSE(r4, &(0x7f00000046c0)={0x2020}, 0xfee1) 8m38.955203232s ago: executing program 1 (id=2007): syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe1, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d", 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000a20000/0x2000)=nil) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000040)=ANY=[], 0x68) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r3, 0x40046205, &(0x7f0000000000)=0x1) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000001a80)={0x4, 0x0, &(0x7f0000001900)=[@enter_looper], 0x1, 0x0, &(0x7f0000000040)="a1"}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)) r4 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r4, &(0x7f0000001040)=[{&(0x7f0000000040)='\n', 0x1}], 0x1) mprotect(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000070000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="100001800c0004"], 0x28}}, 0x0) sendto$packet(r5, &(0x7f0000000080), 0x0, 0x800, &(0x7f0000000240)={0x11, 0xf7, r8, 0x1, 0xb, 0x6, @random="b3bc34168fcf"}, 0x14) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x3, '\x00', 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r9}, 0x4) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x29, &(0x7f0000000400)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x2, 0x3}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r9}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x3}, {0x46, 0x8, 0xfff0, 0x76}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 8m33.905297643s ago: executing program 1 (id=2023): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000240)={0x400, 0x30, 0xf0, 0x0, 0x0, 0x1f, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x7, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) (async) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff006}) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async, rerun: 32) eventfd(0xffffffff) (async) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) (async) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000180)=0xffffffffffffffff, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x2, 0xfffc}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x3a}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async) syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0xf99, 0x800}, 0x0, 0x0) (async) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000080)=""/201, 0xc9) 8m31.153991991s ago: executing program 1 (id=2027): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x2, &(0x7f0000000400)={&(0x7f0000000100)=@bridge_delneigh={0x1c, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0) 8m30.116323955s ago: executing program 1 (id=2030): unshare(0x400) r0 = syz_open_dev$usbfs(&(0x7f0000000c00), 0x71, 0x2081) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000340)={0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffe, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x13, 0x1c, &(0x7f0000000680)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0xb533}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @generic={0x4, 0x8, 0x4, 0x0, 0xd6}, @ldst={0x3, 0x1, 0x6, 0x6, 0x2, 0xc3133b81d0cbf9d2, 0x10}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0xfffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x51}]}, &(0x7f0000000240)='GPL\x00', 0x5, 0xde, &(0x7f0000000900)=""/222, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x28, r1, 0x8, &(0x7f0000000280)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0xb, 0xff, 0xf24}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000340)=[r1, r1, r1, r1], &(0x7f0000000780)=[{0x5, 0x1, 0x10, 0x5}, {0x1, 0x5, 0x1}, {0x5, 0x1, 0xc, 0xb}, {0x2, 0x3, 0x6, 0xc}, {0x3, 0x2, 0x6, 0x4}], 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000b80)={@cgroup=r1, 0x1d, 0x1, 0x2, &(0x7f0000000380)=[0x0], 0x1, 0x0, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xfffffffffffffed9, 0x2, [@TCA_HTB_INIT={0xf}]}}]}, 0x48}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000004c0)=ANY=[@ANYRES32=r7, @ANYRES32=r7, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="b7932f5cb75319a16f90942a85bf4e03875102fdc59faefa7951077dc810a0d58c3f19e941b9bd33d137c45f778a6b698373c975736d", @ANYRES64=0x0], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000)={0x0, 0x0}, 0x8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r9, @ANYRES32=r7, @ANYBLOB="2f0000003020000004000000", @ANYRES32=r8, @ANYBLOB="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", @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000bc0)={@ifindex=r6, r2, 0x1d, 0x2020, 0x0, @void, @void, @value=r8, @void, r3}, 0x20) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r10 = timerfd_create(0x1, 0x0) timerfd_settime(r10, 0x3, &(0x7f0000000100)={{0x77359400}, {0x0, 0x3938700}}, 0x0) timerfd_gettime(r10, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x401, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}}, 0x0) removexattr(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080)=@known='system.advise\x00') syz_usb_connect(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa7, 0x2b, 0x7a, 0x10, 0x54c, 0x2e1, 0xe2c8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x71, 0x2, 0x2, 0x16, 0xfa, 0x1f, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) 8m27.449532587s ago: executing program 1 (id=2039): getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) (async) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@generic={&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x10}, 0x18) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x80000000, 0xf, 0xa, 0x4000, 0x1, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5, 0x1, @void, @value, @void, @value}, 0x50) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="010000000300000001000900"/28], 0x50) (async, rerun: 64) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000540), 0x40000, 0x0) (async, rerun: 64) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') preadv(r5, &(0x7f0000000180)=[{&(0x7f0000000b00)=""/152, 0x98}, {&(0x7f0000000340)=""/204, 0xcc}], 0x2, 0x7000000, 0x3) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r5, 0x6, 0x1d, &(0x7f0000000380)={0x51b78582, 0x7, 0x10, 0x6, 0xfffffffb}, 0x14) (async, rerun: 64) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xb3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async, rerun: 64) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (rerun: 64) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r9, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) (async) r10 = signalfd(0xffffffffffffffff, &(0x7f0000000600)={[0xf]}, 0x8) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8}, [@exit]}, &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', r0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x6, 0x7ff, 0x1}, 0x10, 0x6fe0, 0xffffffffffffffff, 0x4, &(0x7f0000000700)=[r1, r2, r3, r4, r5, r6, r8, r10, r11, 0xffffffffffffffff], &(0x7f0000000740)=[{0x5, 0x2}, {0x3, 0x2, 0xa, 0x1}, {0x4, 0x5, 0x0, 0x1}, {0x5, 0x4, 0x1, 0x1}], 0x10, 0xffffffff, @void, @value}, 0x94) r12 = getpgid(0xffffffffffffffff) r13 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r14 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) pwritev2(r14, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x37fffee, 0x4002011, r13, 0x0) (async, rerun: 64) open(&(0x7f0000000100)='./bus\x00', 0x14927e, 0x100) (async, rerun: 64) r15 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_SUBMITURB(r15, 0x8038550a, &(0x7f0000000300)=@urb_type_iso={0x0, {0x1, 0x1}, 0x10000, 0x3, 0x0, 0x0, 0x2, 0x1c0, 0x1, 0x10000, 0x1ff, 0x0, [{0x8, 0x9, 0x4}]}) syz_pidfd_open(r12, 0x0) 8m25.554121112s ago: executing program 1 (id=2043): r0 = socket(0x10, 0x3, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) socket$xdp(0x2c, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4090000}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 8m24.312824519s ago: executing program 40 (id=2043): r0 = socket(0x10, 0x3, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) socket$xdp(0x2c, 0x3, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r0, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4090000}}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 3m41.524044722s ago: executing program 3 (id=2813): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = dup(r0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r0, r1}, 0xc) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = syz_io_uring_setup(0x17af, &(0x7f0000000500)={0x0, 0xbc48, 0x13290, 0x0, 0x1e1}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r2}) io_uring_enter(r2, 0x1, 0x2, 0x1, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x12, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) setsockopt(r1, 0x10004008, 0x40000130, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 3m39.259660208s ago: executing program 3 (id=2820): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = semget$private(0x0, 0x3, 0x401) semop(r4, &(0x7f00000011c0)=[{0x0, 0x7fff, 0x1800}, {0x1, 0x8001, 0x1000}], 0x1f4) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000001580)=[0x5]) r5 = fsmount(0xffffffffffffffff, 0x0, 0x1d) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000400)={@map=r5, 0x4, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) write$smackfs_change_rule(r5, &(0x7f0000000080)={'&-/$!,+\x9b\xb9\xfc\xff\xd4\xee\xd1\x82\xefJ\x8c\xce\x02\x92\xb7\xed\xcfsT\xcbnt\xf6\xb1\xbf\f\xd6\xf5\xc2S\xde\xe2>GF\x19\xed\xff\xfei\xe7\xf4\xbb{\xf5\"\xe9\xa0>\n\xbeF\xc6\xee\x83\xb0\x9c\xbb[!J\x1f\xae}-\x00V\x80\xdc>W\x89\x9f\a\x10\xa2\xfdW\x00\x04\xeb&\xd7\x11\xecT>\x94\x11\xe85\x88\xb8l\xf4\x02\xfe\xd4\xd1\xb9\xcc\xa6\xb8\x97\xb4,\x914\xc1T\xc2\x9bM\xbe\xa0\v\xa0\xd7_\xbcx\xf1\x0e\xf9\n\x0e\xab\xefp\x86\xe3\x1ac\xc4k\xd4c\x97V\xd7\xc0\x86\xec\x85:\xf2\xe6\x8c.\xe1-dF\x89:\xee\xa2\xd7g\xc9\xd6\xacb\x8c\xc7K\x0f\x98\x9d\x19\x1ce,/\xb9\v;\xb3\x11\xaf\x0e|[\xeb^?:\x0fo\x95\xda\xe5P\xcc9{\x99vz\f\xca6y\xdd~\x03\xb8\xab\xb7\x03v\x98\xa3\x06\x13\xf0\x11&J\xdc\t\xf2{\xc0\x87\x9b\xb4\xf0\x84\xeea\xa1\x80d[\xa8%l\x93\\:\x0e\xc0\xc0U\xb2\xf1\xf8\x00', 0x20, ']%*}', 0x20, 'rwxb', 0x20, 'rwxtl'}, 0x111) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r6, 0x29, 0xc8, 0x0, 0xc000000) syz_emit_ethernet(0x6e, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000186dd6002adf700383a00fe880000000000000000f9ffffffffffffff0000000000"], 0x0) 3m38.358058048s ago: executing program 3 (id=2824): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0xc, {0xa, 0x1000, 0xf18, @local}}, 0x24) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000004f81ddb8a670e8edf9c10b780491ceef7c172d65ad27f784e005cc7e3b36419648dd9aa14580b5a6cf3e7cc0ec5397bb5e7ac524f1cb46bc9e6f4cebc819af71347190529cc7245bcedff8a3a4aa9aead2c09ada687f5e6e001ec9c2f17d09331d060141315e514c31a18114454b321efd7dcdae486d41cf4b8ba7460b3d3761"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000140)=ANY=[], 0x10) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="a8"], 0xa8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',posixacl']) io_setup(0x3f, &(0x7f0000000140)=0x0) r7 = timerfd_create(0x0, 0x0) io_submit(r6, 0x1, &(0x7f0000000500)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x0, r7, 0x0, 0x0, 0x10000000000004, 0x0, 0x2}]) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="d4000000020103000000000000000000020000050800170000000000b80001802c00018014000300fe80000000000000000000000000002514000400fe88000000000000000000000000000106000340000300002c00018014000300fe80000000000000000000000000002414000400fe8000000000000000000000000000122c00018014000300fe8000000000000000000000000000bb14000400c800000000000000000000000000003b1400018008000100ffffffff080002000000000006000340000400000c000280"], 0xd4}, 0x1, 0x0, 0x0, 0x24000880}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x20, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 3m35.630355765s ago: executing program 3 (id=2827): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r0 = syz_open_dev$video4linux(0x0, 0xfffffffffffffffe, 0x101403) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x2, 0x10, 0x1014, 0x0, 0x6, 0x0, 0x3, 0xdd2fcb245114ab72}}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0), 0xe83, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r2, &(0x7f0000000000)={0x24, @short={0x2, 0x3, 0xffff}}, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd9"], 0x14}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000001940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003700)=[{}], 0x1, 0x140, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 3m33.25653155s ago: executing program 3 (id=2832): close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000002c0), 0x100000004, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x3, 0x100) setsockopt$sock_int(r1, 0x1, 0x6, 0x0, 0x0) timer_create(0x7, 0x0, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x3c) r2 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r3, &(0x7f0000000940)=[{{&(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000040)="93", 0x1}], 0x1}}], 0x1, 0x46054) close(r3) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c051) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_deladdr={0x18, 0x15, 0x1, 0x70bd25, 0x25dfdbfe, {0xa, 0x78, 0x141}}, 0x18}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'ipvlan1\x00', &(0x7f0000000140)=@ethtool_channels={0x3c, 0x101, 0x6, 0x1f, 0x0, 0x8, 0x1, 0x4a, 0x401}}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3m31.321619656s ago: executing program 3 (id=2836): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000076aa19f6db47000000000000000000", @ANYRES32, @ANYBLOB="d506330080000000ffffffff"], 0x6f4}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d44ebb40ec188832cf690102030109021b00010000000009040000010e010000090581"], 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) 3m16.422380969s ago: executing program 41 (id=2836): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000076aa19f6db47000000000000000000", @ANYRES32, @ANYBLOB="d506330080000000ffffffff"], 0x6f4}}, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d44ebb40ec188832cf690102030109021b00010000000009040000010e010000090581"], 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) 27.623027683s ago: executing program 2 (id=3308): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r1, &(0x7f0000000180)=@in6={0x21, 0x0, 0x2, 0xc, {0xa, 0x1000, 0xf18, @local}}, 0x24) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000004f81ddb8a670e8edf9c10b780491ceef7c172d65ad27f784e005cc7e3b36419648dd9aa14580b5a6cf3e7cc0ec5397bb5e7ac524f1cb46bc9e6f4cebc819af71347190529cc7245bcedff8a3a4aa9aead2c09ada687f5e6e001ec9c2f17d09331d060141315e514c31a18114454b321efd7dcdae486d41cf4b8ba7460b3d3761"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r5 = dup(r4) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000140)=ANY=[], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',posixacl']) io_setup(0x3f, &(0x7f0000000140)=0x0) r7 = timerfd_create(0x0, 0x0) io_submit(r6, 0x1, &(0x7f0000000500)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x7, 0x0, r7, 0x0, 0x0, 0x10000000000004, 0x0, 0x2}]) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="d4000000020103000000000000000000020000050800170000000000b80001802c00018014000300fe80000000000000000000000000002514000400fe88000000000000000000000000000106000340000300002c00018014000300fe80000000000000000000000000002414000400fe8000000000000000000000000000122c00018014000300fe8000000000000000000000000000bb14000400c800000000000000000000000000003b1400018008000100ffffffff080002000000000006000340000400000c000280"], 0xd4}, 0x1, 0x0, 0x0, 0x24000880}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000000)) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x20, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 26.950669291s ago: executing program 2 (id=3311): syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_open_dev$video4linux(&(0x7f0000000100), 0x4000000007, 0x82800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) modify_ldt$read_default(0x2, 0x0, 0x17) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000680)={0xa, @pix={0x5, 0x6, 0x4745504d, 0x1, 0x7, 0x10001, 0x2, 0x0, 0x1, 0x9485f96dc9548d5d, 0x0, 0x1}}) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) epoll_create(0x9) socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00'}, 0x18) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={0xffffffffffffffff, r0}, 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x114) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='mpol=prefer:0']) 25.692481481s ago: executing program 2 (id=3315): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$video4linux(&(0x7f0000000180), 0x11, 0x101000) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f00000001c0)={0x40000000, 0x101, "01735821d56c75ef3be5c9fa05eb17db7946612f8fd17306e22a4b493d5f30f8", 0x7, 0x3, 0x3ff, 0x7, 0x8001, 0x7, 0x1, 0x9, [0x10001, 0x7, 0xa, 0x6]}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a1c000000000a010200000000000000000300000008000240000000013c000000030a030000000000000000000300000009000300731ca4292b95797a31000000000900010073797a3000000000040004800b00070066696c7465720000140000001100010000000000000000"], 0x80}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000fb0000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000300)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0xcc}}, 0xc041) 25.229785842s ago: executing program 2 (id=3319): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x12, r1, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x2000000}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x0, 0x8], 0x0, 0x201}) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 24.953776151s ago: executing program 2 (id=3321): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xcb9}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x87) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCMSET(r7, 0x5418, &(0x7f0000000140)=0xfffffdfb) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_ALLOW_SUSPEND(r8, 0x5522) ioctl$TCSETSF(r7, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0xfffff001, 0x6, 0x18, "5cadf0fa59ebc3cef90ac43c5c135252e5d962"}) 12.794242399s ago: executing program 8 (id=3357): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x15) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000019080)='./file0\x00', 0x0, 0x23010, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)={[&(0x7f0000000080)=' ']}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000040)={0x5, 0x100000, 0x0, 0x0, 0x2}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000680)='-\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\x06\x00\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96Y\x02\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}P\x95v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f\xf9\n+x\xe3\xd1\xbe\xdeHA\x1b\xf5\xfd\xbdA\x05\t\xb4\x03\xd1\x859S\xe3.[4\xdd\xa4{\x83Y\xdc\x93dQ\xab\xca\x864\x8a\xd6n2\xfeG`Rb\x8a\xd5\xce\th\x91e\xb3\xaa^<\xbf\x19\xf3\x81a\x19B\x02\xf6$\x8e \x15\x84\x9d\xd1', 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) 10.485674947s ago: executing program 8 (id=3360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x7, 0x40, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{0x3, 0x0, 0x1, 0x1}, 0x2, 0x3, 0x0, 0x0, "3eb9d3adfb751535"}}, 0x48}, 0x1, 0x0, 0x0, 0x8890}, 0x400c0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0xa2465) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0xc0884123, &(0x7f0000000000)=0x85) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000180)) 9.532595087s ago: executing program 9 (id=3361): r0 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0xe1, &(0x7f0000000000)={0x0, 0x1, 0x8}) mq_timedreceive(r0, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) 9.21697108s ago: executing program 8 (id=3363): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = syz_io_uring_setup(0x1714, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SYMLINKAT={0x26, 0x8, 0x0, r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, {0x0, r5}}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064d1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)}) r6 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002040)=""/4067, 0xfe3}, {&(0x7f00000037c0)=""/4069, 0xfe5}], 0x2}, 0x40000100) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f91c240685", 0x14}], 0x1}, 0x0) recvmsg$kcm(r6, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006) io_uring_enter(r2, 0x27e2, 0x0, 0x0, 0x0, 0x0) r7 = openat$cgroup_pressure(r1, &(0x7f0000001840)='cpu.pressure\x00', 0x2, 0x0) io_setup(0x5, &(0x7f0000000480)=0x0) io_submit(r8, 0x1, &(0x7f0000000780)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f00000004c0)=')', 0x1}]) 8.659311834s ago: executing program 8 (id=3366): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000700, r0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x3e, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 8.491256692s ago: executing program 9 (id=3367): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f800800024000000b8608000340000047510800034000000003080001"], 0xdc}}, 0x0) 7.656161085s ago: executing program 5 (id=3369): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a000000"], 0xb8}}, 0x4004) (fail_nth: 4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) 7.515754113s ago: executing program 9 (id=3370): r0 = socket(0x2, 0x3, 0x100000001) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000190001090000000000000000021800000000fd010014000008000100ac14140008000400", @ANYRES32, @ANYBLOB="100016800c00038000000100", @ANYRES32, @ANYBLOB="0600150004"], 0x4c}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x0, 0xfffffffc}]}, 0x10) syz_emit_ethernet(0xe, &(0x7f0000000040)=ANY=[], 0x0) read(r1, &(0x7f0000000140)=""/140, 0x8c) shutdown(0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000001a40)={0xff, @rand_addr=0x64010101, 0x4e23, 0x2, 'wrr\x00', 0x10, 0x9, 0x74}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) fcntl$lock(r5, 0x25, &(0x7f0000001700)={0x1, 0x4, 0x8}) 6.775366089s ago: executing program 5 (id=3372): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c9042, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x7, 0x40, 0x0, {0x0, 0xea60}, {0x77359400}, {}, 0x1, @can={{0x3, 0x0, 0x1, 0x1}, 0x2, 0x3, 0x0, 0x0, "3eb9d3adfb751535"}}, 0x48}, 0x1, 0x0, 0x0, 0x8890}, 0x400c0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000100)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0xa2465) ioctl$SNDRV_PCM_IOCTL_REWIND(r5, 0xc0884123, &(0x7f0000000000)=0x85) ioctl$SNDCTL_DSP_GETOSPACE(r4, 0x8010500c, &(0x7f0000000180)) 6.476015983s ago: executing program 4 (id=3373): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x3fb, 0x300, 0x70bd26, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x810) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r4 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f00000000c0)={'\x00@\x00', 0x0, 0x5, 0x3, 0x0, 0x0, "f759ca14860e001f00", '\x00', "03000100", "d6f0da63", ["8bada940edff000a00", "c2fed6cb0200004000", '\x00', "00000000000000000100"]}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') read$watch_queue(r5, &(0x7f00000005c0)=""/111, 0x6f) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x50, 0x0, 0x0, 0x3334}, {0x6, 0xfc, 0x0, 0x5}]}, 0x10) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xfdef) 6.130321623s ago: executing program 8 (id=3374): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r4, &(0x7f0000000000)='\"', 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0xd) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r6) socketpair$unix(0x1, 0x1, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r7, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) r8 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.067343915s ago: executing program 9 (id=3375): syz_open_procfs(0x0, 0x0) socket(0x2, 0x80805, 0x0) r0 = syz_open_dev$video(&(0x7f0000000180), 0x3ff, 0x2000) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x4d7, &(0x7f0000000200)={0x0, 0x7a7b, 0x10000, 0x3, 0x8f}, 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000200)=0x1) r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x1) fchdir(r3) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents(r4, 0x0, 0x58) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r5, 0x101, 0x19, &(0x7f0000000080), &(0x7f0000000000)=0x1b) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000c03800000000000000000000000000000000000000000000000000004e23f3448af122d25d863f0f3a49c437d9dd3dcd817f9f287ae1f31e2091f8860879a9477a642ec6d82bf6c8dd4d9dfdae29bee88ecc6ca408455d2770fd08b5148e6c82258423a94c8c58b8a66625e5f43137d049151638c9ce524012554fbafcc79b597e7f48b1ac3c2fc651f6f5ddcb31659731f7027e70131838ec16b03a704c89f27fbc1d020d"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000e7ffff07850000001700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_usb_connect(0x0, 0x24, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$smackfs_netlabel(0xffffffffffffffff, &(0x7f0000000000)=@l1={{0x7, 0x2e, 0x80000001, 0x2e, 0x1fe0000000000, 0x2e, 0x3}}, 0x56) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000140)="480100001a000708ab0925040900070002ab0700a90100001d60369321001d000a800000000000000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc00030026000000140000270400117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201ded815b2ccd243f295ed94", 0xae) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r8) 6.066633389s ago: executing program 5 (id=3376): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x8, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x60}}, 0x0) (fail_nth: 4) 5.973713303s ago: executing program 4 (id=3377): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470"], 0x60}, 0x1, 0x0, 0x0, 0x20}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x11) 4.198516424s ago: executing program 5 (id=3378): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1, 0x4, 0x6, 0x3, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) set_mempolicy(0x3, &(0x7f0000000040)=0xffffffffffffffff, 0xd) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r3, 0x100000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r4, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="82", 0x1}, {&(0x7f0000000140)="84505dd6f9", 0x5}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r4, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0xc, 0xd, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x70}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'sit0\x00', &(0x7f0000000800)={'gretap0\x00', 0x0, 0x8000, 0x7f90, 0x8, 0x5, {{0x25, 0x4, 0x2, 0x3b, 0x94, 0x67, 0x0, 0x3, 0x2f, 0x0, @loopback, @remote, {[@timestamp_addr={0x44, 0x1c, 0xb2, 0x1, 0x9, [{@loopback, 0x4}, {@private=0xa010101, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x14}}]}, @cipso={0x86, 0x10, 0x3, [{0x1, 0xa, "b7a829cdab9431a0"}]}, @timestamp_prespec={0x44, 0xc, 0x8c, 0x3, 0x7, [{@multicast1, 0x4}]}, @ssrr={0x89, 0x7, 0x27, [@remote]}, @rr={0x7, 0x13, 0xbe, [@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @rand_addr=0x64010101]}, @timestamp_prespec={0x44, 0x2c, 0xe3, 0x3, 0x2, [{@local, 0x42}, {@multicast2, 0xd}, {@remote, 0xf}, {@multicast2, 0x401}, {@local, 0x91}]}]}}}}}) sendmmsg$inet6(r1, &(0x7f00000009c0)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0xfffffff4, @local, 0x7}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000180)="7883eb66b3dcef9ec37b60dad61c11", 0xf}, {&(0x7f00000001c0)="a00d7b0c78c978e023f2684668b6e07739db8be4257f5e716db0e630611181c64a70", 0x22}], 0x2, &(0x7f0000000280)=[@hopopts_2292={{0x30, 0x29, 0x36, {0x2e, 0x2, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @enc_lim={0x4, 0x1, 0x2}]}}}, @rthdr={{0x68, 0x29, 0x39, {0x1, 0xa, 0x0, 0x40, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, @ipv4={'\x00', '\xff\xff', @local}, @local, @remote]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x80}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)="bbb6b00ac0762e0530d90dea4d2dbd76e9181b17caf6df2316fb31626378c88dec36f620f5bb586b4557e0ea164f10", 0x2f}, {&(0x7f0000000480)="753e405ff42c9915ba573ebaf4caa6466bce9261d524144fe41985fa420944871b84951746f4e2bf9e651cd328ea5f2705d8bf666ff2af5e54e53451bfa47661f801b7058177b3cacb2fcc22a16d658cb49b619b4863a463aabadf7f00", 0x5d}, {&(0x7f0000000500)="1dcb0615c34f8356c93f2085c4deab9670ee9061390b00ef1500241f68e103c7d1b8d024e90b8ab7faab1d92d37d03d0a924e9f4efdaa12155e160841fe8097144936361d6fe9a415334996488a665793c1da80829cfad48b155348b5f8f2d7124931f6cd13802cf318df1b9c2a29871459f2f17c2bd53131b76c0033bb6a38181d5f0e082f6523f2774edebc74dfbd3a367bc47b022fb31a97e0558f2771ff089802653cb67836ef45c4b03ee91ce2f00c5b68acd81a7ece0c3954cafdf7429c6cf8f9b80ed47cc89235c462896d18cbaca36282ef31df6025d988cba85192b25a9c9d6aa62db9043a931", 0xeb}, {&(0x7f0000000700)="ef3c4bad114ae409f181adb3ede15c9b8eeb663d53d32cfc69612ebf6dcadd2e71a861c1ec41594edae6855978286360decfc32192a2a52b5f288f736b12b41c29017695277a50112888a7ad5e7bf66a8d0f2bd673b73ba3b4205e924b1ef35c2cc67e25918f0657d84804e6d7af41971fe965a3d084f7c79328a88c2b509c298c5012320e2ce59bb0e3f224f53721798210ab202a143c411bc580cc5cf0654d3869ccf13218c628a180ab237851f128fafbeef7cb04e5df235b65cf85993fe8c84f06761616cb0c82d80dc0594f3db5aa787c056573ee023ad33545b4177b6a9624348645bda0b1c655b6d75119bc12afec", 0xf2}], 0x4, &(0x7f00000008c0)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x1c}, r6}}}, @dstopts_2292={{0xb0, 0x29, 0x4, {0x16, 0x12, '\x00', [@pad1, @calipso={0x7, 0x38, {0x0, 0xc, 0x0, 0x0, [0x8001, 0x2000000000000, 0xe, 0x1, 0x2, 0x7]}}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @generic={0x1f, 0x10, "d6e32fe7262ceeac8d7259316470e5cd"}, @calipso={0x7, 0x28, {0x2, 0x8, 0x6, 0x87, [0x7, 0x6, 0x7, 0x83e]}}, @enc_lim={0x4, 0x1, 0x5}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @tclass={{0x14, 0x29, 0x43, 0x9}}], 0xf0}}], 0x2, 0x840) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0x4, 0x3f0, 0x0, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@loopback, @dev, 0x0, 0xffffff00, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz_tun\x00', 'vlan0\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x308}}, {{@uncond, 0xc0, 0x130, 0x0, {0x0, 0x1e03}}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x3, 0x2, 0xc11, 0x1, 0x0, "32f68e7bbbd60ffc3bf42bcc961aab81df672ec5c33d11f11e23f6a0bbb58d1980fbccbabf1f72c6bba844938476adae002ac11672dd886a0e650c3e0347ec17"}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) writev(r8, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x14, &(0x7f0000000b00)=ANY=[@ANYBLOB="18110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000181b0000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b708000061bd580c7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800001e45b93b872b2ca9e400182300007f81681d5de46c40df108dddfe4e99cab2925e453998bde861d0049f992d8573537d6319a19db4c0d730b92b84ca", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r10}, 0x10) 4.183441868s ago: executing program 4 (id=3379): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000280), 0x4100, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @private0}, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d800", @ANYRES16, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000140), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) write$smackfs_load(r2, &(0x7f0000000080)={'', 0x20, 'gre0\x00', 0x20, 'rabl'}, 0xc) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/185, 0xb9}], 0x1, 0x5, 0x5) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 3.579567435s ago: executing program 9 (id=3380): bpf$MAP_CREATE(0x0, &(0x7f0000032800)=ANY=[@ANYBLOB="0100000004000000", @ANYBLOB, @ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000032700)={{0x1, 0x1, 0x18, r0, {r1}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000040000e41300050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) readv(r0, &(0x7f0000032680)=[{&(0x7f00000191c0)=""/237, 0xed}, {&(0x7f00000192c0)=""/204, 0xcc}, {0x0}, {&(0x7f0000000080)=""/67, 0x43}], 0x4) socket$packet(0x11, 0x3, 0x300) setrlimit(0x4, &(0x7f00000193c0)={0xffff, 0x9}) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) write(0xffffffffffffffff, 0x0, 0x97) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f0000044000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 2.695093601s ago: executing program 4 (id=3381): socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0) pread64(r1, 0x0, 0x0, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000340)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x2}, 0x1c) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x32, &(0x7f0000000880)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) syz_emit_ethernet(0x6c, &(0x7f0000000140)={@local, @random="e43f6642531e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5e, 0x0, 0xe000, 0x4, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4a, 0x0, @gue={{0x1, 0x1, 0x1, 0x10, 0x0, @void}, "def48de5c654f72ea99c40db3b71a3690af830459c173cf562a07df94d83ed7e27a6b529d7aae75bde5f28a5be3b953ddeb7a9fd6367b418cc690c474ee8"}}}}}}, 0x0) bind$inet6(r2, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) timer_create(0x0, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r3, 0x0, &(0x7f00000000c0)) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) socket$l2tp(0x2, 0x2, 0x73) sendmsg$NL80211_CMD_DEL_STATION(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x2c, r4, 0x121, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x2c}}, 0x0) 2.617556984s ago: executing program 9 (id=3382): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{0x0, 0x0, 0xfffc, 0x1000}, 'syz1\x00', 0x13}) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0xf) ioctl$UI_SET_LEDBIT(r1, 0x40045569, 0x8) ioctl$UI_DEV_CREATE(r1, 0x5501) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f00000024c0), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xb19}}, {@blksize={'blksize', 0x3d, 0x400}}]}}) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='mounts\x00') read$FUSE(r3, &(0x7f00000061c0)={0x2020}, 0x2020) ptrace$setregs(0x1a, r0, 0xf, &(0x7f0000000000)) 1.768961222s ago: executing program 8 (id=3383): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000700, r0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r4 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x430, @local, 0x9}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x3e, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r5}, 0x10) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a44000000090a050600000000000000000100000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001405000d404600000014000000110001"], 0x6c}}, 0x0) sendmsg$NFT_MSG_GETSET(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.699717026s ago: executing program 2 (id=3328): syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000600)={0xa0000013}) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0x81}], 0x1f, 0x0, 0x0, 0x0) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='xfs\x00', 0x400080, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000340), 0x200, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0x94, 0x0, 0x94a1fff2c26eb953, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xff, 0x36}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1da8e083d849eb2201ceef1a6f6d24ff1c7b22b9bf76cadd"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x94}, 0x1, 0x0, 0x0, 0x44819}, 0x14) connect$pppl2tp(r2, 0x0, 0x0) close(r2) r5 = socket(0x8, 0x1, 0xf6c) connect$pppl2tp(r2, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000005280)) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x4, &(0x7f0000000100)=0x780a, 0x4) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r2) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="571a9a5a7726372967f6c0be26a767aa", @ANYRES16=r7, @ANYBLOB="00022cbd7000ffdbdf25140000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b000600000006001100060000000800150007000000080001007063690011000200303030303a30303a31302e3000000000080003000200000008000b000000000006001100100000000800150000000080"], 0x90}, 0x1, 0x0, 0x0, 0x840}, 0x4008851) socketpair(0x18, 0x0, 0x2, &(0x7f0000004080)) 1.558954711s ago: executing program 4 (id=3384): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140), 0x8) gettid() sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) getsockopt$X25_QBITINCL(0xffffffffffffffff, 0x106, 0x1, 0x0, 0x0) read$FUSE(r1, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8b2a, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f6c0000000c0a01010000000000000000010000000900020073797a3200000000400003803c000080080003400000000230000b802c0001800a0001006c696d69740000001c00f0800c00014000000000000000000c00024000000000000000000900010073797a3000000000140000001000010000000000000000000000000a"], 0xf0}}, 0x0) 1.46293284s ago: executing program 5 (id=3385): socket(0x2, 0x3, 0x100000001) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000190001090000000000000000021800000000fd010014000008000100ac14140008000400", @ANYRES32, @ANYBLOB="100016800c00038000000100", @ANYRES32, @ANYBLOB="0600150004"], 0x4c}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x0, 0xfffffffc}]}, 0x10) syz_emit_ethernet(0xe, &(0x7f0000000040)=ANY=[], 0x0) read(r1, &(0x7f0000000140)=""/140, 0x8c) shutdown(r0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000001a40)={0xff, @rand_addr=0x64010101, 0x4e23, 0x2, 'wrr\x00', 0x10, 0x9, 0x74}, 0x2c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) fcntl$lock(r5, 0x25, &(0x7f0000001700)={0x1, 0x4, 0x8}) 235.696895ms ago: executing program 4 (id=3387): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) futex(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_enc_key_size={{}, {0x7f, 0xc9, 0xb6}}}}, 0xa) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@setneightbl={0x24, 0x43, 0x1, 0x0, 0x0, {0x2}, [@NDTA_NAME={0xe, 0x1, '*-\\%[*!]-\x00'}]}, 0x24}}, 0x0) chdir(0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r6, 0x4b67, &(0x7f0000001ec0)={0x1, &(0x7f0000001e80)=[{0x0, 0x1000}]}) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00'}, 0x18) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x700000d, 0x4000010, r7, 0x6ee98000) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r5, &(0x7f0000000300)="0bb8509e4dec649fa1aba57a682235a2a078ed59e02ddb54a59c3b30855e238aacc3c23a390959b135ff31dfa95027cde81f597c8108"}, 0x20) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000b40)=0x3) ioprio_set$uid(0x3, 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) 0s ago: executing program 5 (id=3388): syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) io_uring_setup(0x52b4, &(0x7f0000000240)={0x0, 0x1332, 0x10000, 0x0, 0x1d}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe1000/0x18000)=nil, 0x0, 0x0, 0x34, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) r3 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000001c0)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x109) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x1, 0x2], 0x0, 0x0, 0x2, 0x1}}, 0x40) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4}}}}) kernel console output (not intermixed with test programs): dit(1749778527.011:249987): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=17199 comm="syz.9.3033" name="529" dev="tmpfs" ino=2844 [ 1396.645342][ T7746] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1396.678651][T16883] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1396.700488][T16883] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1396.830979][T16883] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1397.381417][T17221] netlink: 'syz.9.3035': attribute type 1 has an invalid length. [ 1397.399446][T17221] netlink: 236 bytes leftover after parsing attributes in process `syz.9.3035'. [ 1397.526483][T17224] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3038'. [ 1397.606169][T16883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1397.696026][T16883] 8021q: adding VLAN 0 to HW filter on device team0 [ 1397.741103][ T3461] bridge0: port 1(bridge_slave_0) entered blocking state [ 1397.748358][ T3461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1397.852211][ T6056] bridge0: port 2(bridge_slave_1) entered blocking state [ 1397.859567][ T6056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1398.501337][T17232] netlink: 'syz.5.3042': attribute type 29 has an invalid length. [ 1398.509292][T17232] netlink: 'syz.5.3042': attribute type 3 has an invalid length. [ 1398.517054][T17232] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3042'. [ 1398.780540][T17242] binder: 17238:17242 ioctl c0306201 0 returned -14 [ 1398.793446][T17242] o2cb: This node has not been configured. [ 1398.799893][T17242] o2cb: Cluster check failed. Fix errors before retrying. [ 1398.807039][T17242] (syz.9.3045,17242,0):user_dlm_register:674 ERROR: status = -22 [ 1398.815290][T17242] (syz.9.3045,17242,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1400.381238][T17253] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3048'. [ 1400.585880][T17257] netlink: 'syz.4.3043': attribute type 30 has an invalid length. [ 1401.155844][ T30] kauditd_printk_skb: 6167 callbacks suppressed [ 1401.155901][ T30] audit: type=1400 audit(1749778532.575:253566): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=16594 comm="syz-executor" name="24" dev="tmpfs" ino=136 [ 1401.284887][ T5195] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1401.292731][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1401.299325][ C1] audit: audit_lost=70671 audit_rate_limit=0 audit_backlog_limit=64 [ 1401.307351][ C1] audit: backlog limit exceeded [ 1401.317063][T16883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1401.334355][T17266] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1401.340960][T17266] audit: audit_lost=70672 audit_rate_limit=0 audit_backlog_limit=64 [ 1401.341999][T17267] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1401.363951][ T30] audit: type=1400 audit(1749778532.575:253567): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=7746 comm="syz-executor" name="533" dev="tmpfs" ino=2867 [ 1401.387094][ T5195] audit: audit_lost=70673 audit_rate_limit=0 audit_backlog_limit=64 [ 1401.991020][T17272] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3051'. [ 1403.293907][T17289] binder: 17288:17289 ioctl c0306201 0 returned -14 [ 1403.306193][T17289] o2cb: This node has not been configured. [ 1403.312053][T17289] o2cb: Cluster check failed. Fix errors before retrying. [ 1403.319356][T17289] (syz.9.3056,17289,1):user_dlm_register:674 ERROR: status = -22 [ 1403.327153][T17289] (syz.9.3056,17289,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1403.681497][T17297] netlink: 'syz.9.3058': attribute type 29 has an invalid length. [ 1403.691489][T17297] netlink: 'syz.9.3058': attribute type 3 has an invalid length. [ 1403.701506][T17297] netlink: 76 bytes leftover after parsing attributes in process `syz.9.3058'. [ 1404.779877][ T978] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1405.229729][ T978] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1405.233933][T16883] veth0_vlan: entered promiscuous mode [ 1405.249319][ T978] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1405.279337][T16883] veth1_vlan: entered promiscuous mode [ 1405.287436][ T978] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1405.305804][ T978] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1405.320872][ T978] usb 5-1: Manufacturer: syz [ 1405.457019][ T978] usb 5-1: config 0 descriptor?? [ 1405.697067][T16883] veth0_macvtap: entered promiscuous mode [ 1405.910426][T16883] veth1_macvtap: entered promiscuous mode [ 1405.935780][ T30] kauditd_printk_skb: 6158 callbacks suppressed [ 1405.935903][ T30] audit: type=1400 audit(1749778537.363:257607): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17135 comm="udevd" name="dummy_hcd.4" dev="sysfs" ino=26611 [ 1405.944241][ T7695] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1406.038791][T17314] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1406.097453][T17314] audit: audit_lost=71380 audit_rate_limit=0 audit_backlog_limit=64 [ 1406.172026][T17301] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1406.187515][ T7695] audit: audit_lost=71381 audit_rate_limit=0 audit_backlog_limit=64 [ 1406.190832][T17314] audit: backlog limit exceeded [ 1406.202815][T17301] audit: audit_lost=71382 audit_rate_limit=0 audit_backlog_limit=64 [ 1406.218359][T17314] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1406.233616][T17301] audit: backlog limit exceeded [ 1406.281511][T16883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1406.357397][T16883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1406.415597][T16883] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.422093][ T978] rc_core: IR keymap rc-hauppauge not found [ 1406.439975][ T978] Registered IR keymap rc-empty [ 1406.447604][T16883] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.464915][T16883] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.473284][ T978] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1406.566363][T16883] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.622773][T17322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3063'. [ 1406.627122][T17321] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3065'. [ 1406.794712][ T978] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input60 [ 1407.729063][ T6056] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1407.776291][ T5885] usb 5-1: USB disconnect, device number 28 [ 1407.803601][ T6056] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1407.983759][T17335] binder: 17334:17335 ioctl c0306201 0 returned -14 [ 1407.996141][T17335] o2cb: This node has not been configured. [ 1408.002976][T17335] o2cb: Cluster check failed. Fix errors before retrying. [ 1408.010244][T17335] (syz.9.3067,17335,1):user_dlm_register:674 ERROR: status = -22 [ 1408.018004][T17335] (syz.9.3067,17335,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1408.031813][ T6056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1408.063625][ T6056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1408.101338][T17337] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3068'. [ 1408.129741][ T12] bond0: (slave bond_slave_0): interface is now down [ 1408.158481][ T12] bond0: (slave bond_slave_1): interface is now down [ 1408.185314][ T12] bond0: (slave netdevsim0): interface is now down [ 1408.292984][ T12] bond0: now running without any active interface! [ 1408.746150][T17349] netlink: 'syz.4.3071': attribute type 29 has an invalid length. [ 1408.757590][T17349] netlink: 'syz.4.3071': attribute type 3 has an invalid length. [ 1408.766979][T17349] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3071'. [ 1409.698309][T17354] input: syz1 as /devices/virtual/input/input61 [ 1409.791994][ T5885] IPVS: starting estimator thread 0... [ 1409.896257][T17360] IPVS: using max 23 ests per chain, 55200 per kthread [ 1410.085113][T17368] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3076'. [ 1410.714273][T17135] audit_log_start: 8835 callbacks suppressed [ 1410.714289][T17135] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1410.719373][ T5195] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1410.720459][ T30] audit: type=1400 audit(1749778542.601:263569): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17135 comm="udevd" name="/" dev="sda1" ino=2 [ 1410.727785][ T5195] audit: audit_lost=72341 audit_rate_limit=0 audit_backlog_limit=64 [ 1410.746327][T17374] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1410.771012][T16594] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1410.778421][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1410.785031][ C1] audit: audit_lost=72342 audit_rate_limit=0 audit_backlog_limit=64 [ 1410.793101][ C1] audit: backlog limit exceeded [ 1410.798554][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1411.055424][T17380] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3080'. [ 1411.138509][T17381] overlayfs: missing 'lowerdir' [ 1411.710190][T17152] bond0: (slave bond_slave_0): interface is now down [ 1411.726632][T17152] bond0: (slave bond_slave_1): interface is now down [ 1411.845105][T17152] bond0: now running without any active interface! [ 1412.739544][T17397] netlink: 'syz.8.3085': attribute type 29 has an invalid length. [ 1412.748258][T17397] netlink: 'syz.8.3085': attribute type 3 has an invalid length. [ 1412.756821][T17397] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3085'. [ 1413.747424][T17405] netlink: 'syz.5.3088': attribute type 29 has an invalid length. [ 1413.755454][T17405] netlink: 'syz.5.3088': attribute type 3 has an invalid length. [ 1413.763223][T17405] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3088'. [ 1415.193462][T17414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3091'. [ 1415.443925][T17419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3093'. [ 1415.520698][ T30] kauditd_printk_skb: 4865 callbacks suppressed [ 1415.520749][ T30] audit: type=1400 audit(1749778547.651:266974): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17417 comm="syz.4.3093" name="newroot" dev="tmpfs" ino=2 [ 1415.703868][T17135] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1415.703959][ T7695] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1415.715898][T17135] audit: audit_lost=72831 audit_rate_limit=0 audit_backlog_limit=64 [ 1415.721867][ T7746] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1415.735853][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1415.742538][ C1] audit: audit_lost=72832 audit_rate_limit=0 audit_backlog_limit=64 [ 1415.750713][ C1] audit: backlog limit exceeded [ 1415.756174][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1415.762755][ C1] audit: audit_lost=72833 audit_rate_limit=0 audit_backlog_limit=64 [ 1417.188989][T17428] XFS (nullb0): Invalid superblock magic number [ 1417.252527][T17427] netlink: 88 bytes leftover after parsing attributes in process `syz.9.3095'. [ 1419.684732][ T978] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1419.831335][ T978] usb 6-1: Using ep0 maxpacket: 8 [ 1419.943247][T17463] trusted_key: syz.9.3104 sent an empty control message without MSG_MORE. [ 1420.616382][ T978] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1420.627610][ T30] kauditd_printk_skb: 4697 callbacks suppressed [ 1420.627630][ T30] audit: type=1400 audit(1749778552.270:269164): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17456 comm="syz.9.3104" name="549" dev="tmpfs" ino=2951 [ 1420.777517][T16824] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1420.831698][ T978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1420.871669][ T7746] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1420.889058][T17459] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1420.896618][ T978] usb 6-1: Product: syz [ 1420.912110][T17465] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1420.912207][T17464] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1420.922579][ T7746] audit: audit_lost=73670 audit_rate_limit=0 audit_backlog_limit=64 [ 1420.936255][T17459] audit: audit_lost=73671 audit_rate_limit=0 audit_backlog_limit=64 [ 1420.944669][ T978] usb 6-1: Manufacturer: syz [ 1420.947706][T17464] audit: audit_lost=73672 audit_rate_limit=0 audit_backlog_limit=64 [ 1420.958456][T17464] audit: backlog limit exceeded [ 1420.969510][T17459] audit: backlog limit exceeded [ 1420.974402][ T978] usb 6-1: SerialNumber: syz [ 1421.251168][T16824] usb 3-1: Using ep0 maxpacket: 32 [ 1421.329636][ T978] usb 6-1: config 0 descriptor?? [ 1421.358022][T16824] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1421.374379][T16824] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1421.388077][T17462] netlink: 'syz.8.3106': attribute type 29 has an invalid length. [ 1421.396515][T17462] netlink: 'syz.8.3106': attribute type 3 has an invalid length. [ 1421.404314][T17462] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3106'. [ 1421.429110][T16824] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1421.439641][T16824] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1421.471854][T16824] hub 3-1:4.0: USB hub found [ 1421.484212][T17467] FAULT_INJECTION: forcing a failure. [ 1421.484212][T17467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1421.524640][T17467] CPU: 1 UID: 0 PID: 17467 Comm: syz.9.3107 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1421.524674][T17467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1421.524689][T17467] Call Trace: [ 1421.524698][T17467] [ 1421.524710][T17467] dump_stack_lvl+0x189/0x250 [ 1421.524749][T17467] ? __pfx____ratelimit+0x10/0x10 [ 1421.524784][T17467] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1421.524818][T17467] ? __pfx__printk+0x10/0x10 [ 1421.524842][T17467] ? __might_fault+0xb0/0x130 [ 1421.524882][T17467] should_fail_ex+0x414/0x560 [ 1421.524917][T17467] _copy_from_iter+0x1db/0x16f0 [ 1421.524957][T17467] ? rcu_is_watching+0x15/0xb0 [ 1421.524992][T17467] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1421.525022][T17467] ? __pfx__copy_from_iter+0x10/0x10 [ 1421.525057][T17467] ? __build_skb_around+0x257/0x3e0 [ 1421.525088][T17467] ? netlink_sendmsg+0x642/0xb30 [ 1421.525114][T17467] ? skb_put+0x11b/0x210 [ 1421.525145][T17467] netlink_sendmsg+0x6b2/0xb30 [ 1421.525186][T17467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1421.525224][T17467] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1421.525252][T17467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1421.525279][T17467] __sock_sendmsg+0x219/0x270 [ 1421.525318][T17467] ____sys_sendmsg+0x505/0x830 [ 1421.525354][T17467] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1421.525393][T17467] ? import_iovec+0x74/0xa0 [ 1421.525427][T17467] ___sys_sendmsg+0x21f/0x2a0 [ 1421.525458][T17467] ? __pfx____sys_sendmsg+0x10/0x10 [ 1421.525527][T17467] ? __fget_files+0x2a/0x420 [ 1421.525556][T17467] ? __fget_files+0x3a0/0x420 [ 1421.525597][T17467] __x64_sys_sendmsg+0x19b/0x260 [ 1421.525629][T17467] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1421.525669][T17467] ? __pfx_ksys_write+0x10/0x10 [ 1421.525692][T17467] ? rcu_is_watching+0x15/0xb0 [ 1421.525729][T17467] ? do_syscall_64+0xbe/0x3b0 [ 1421.525754][T17467] do_syscall_64+0xfa/0x3b0 [ 1421.525772][T17467] ? lockdep_hardirqs_on+0x9c/0x150 [ 1421.525805][T17467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1421.525827][T17467] ? clear_bhb_loop+0x60/0xb0 [ 1421.525853][T17467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1421.525874][T17467] RIP: 0033:0x7f2c73b8e929 [ 1421.525893][T17467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1421.525913][T17467] RSP: 002b:00007f2c719f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1421.525937][T17467] RAX: ffffffffffffffda RBX: 00007f2c73db5fa0 RCX: 00007f2c73b8e929 [ 1421.525952][T17467] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: 0000000000000003 [ 1421.525966][T17467] RBP: 00007f2c719f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1421.525980][T17467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1421.525993][T17467] R13: 0000000000000000 R14: 00007f2c73db5fa0 R15: 00007ffcaf129ab8 [ 1421.526024][T17467] [ 1421.857756][T16824] hub 3-1:4.0: config failed, can't read hub descriptor (err -90) [ 1421.949881][ T978] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1421.997867][T17469] FAULT_INJECTION: forcing a failure. [ 1421.997867][T17469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1422.015111][ T978] gspca_sunplus: reg_w_riv err -71 [ 1422.016091][T17469] CPU: 1 UID: 0 PID: 17469 Comm: syz.9.3108 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1422.016126][T17469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1422.016142][T17469] Call Trace: [ 1422.016152][T17469] [ 1422.016163][T17469] dump_stack_lvl+0x189/0x250 [ 1422.016208][T17469] ? __pfx____ratelimit+0x10/0x10 [ 1422.016246][T17469] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1422.016283][T17469] ? __pfx__printk+0x10/0x10 [ 1422.016309][T17469] ? __might_fault+0xb0/0x130 [ 1422.016354][T17469] should_fail_ex+0x414/0x560 [ 1422.016392][T17469] _copy_from_iter+0x1db/0x16f0 [ 1422.016436][T17469] ? rcu_is_watching+0x15/0xb0 [ 1422.016476][T17469] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1422.016509][T17469] ? __pfx__copy_from_iter+0x10/0x10 [ 1422.016550][T17469] ? __build_skb_around+0x257/0x3e0 [ 1422.016585][T17469] ? netlink_sendmsg+0x642/0xb30 [ 1422.016613][T17469] ? skb_put+0x11b/0x210 [ 1422.016656][T17469] netlink_sendmsg+0x6b2/0xb30 [ 1422.016699][T17469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1422.016742][T17469] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1422.016772][T17469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1422.016803][T17469] __sock_sendmsg+0x219/0x270 [ 1422.016847][T17469] ____sys_sendmsg+0x505/0x830 [ 1422.016887][T17469] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1422.016930][T17469] ? import_iovec+0x74/0xa0 [ 1422.016959][T17469] ___sys_sendmsg+0x21f/0x2a0 [ 1422.016994][T17469] ? __pfx____sys_sendmsg+0x10/0x10 [ 1422.017073][T17469] ? __fget_files+0x2a/0x420 [ 1422.017105][T17469] ? __fget_files+0x3a0/0x420 [ 1422.017152][T17469] __x64_sys_sendmsg+0x19b/0x260 [ 1422.017188][T17469] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1422.017233][T17469] ? __pfx_ksys_write+0x10/0x10 [ 1422.017259][T17469] ? rcu_is_watching+0x15/0xb0 [ 1422.017303][T17469] ? do_syscall_64+0xbe/0x3b0 [ 1422.017331][T17469] do_syscall_64+0xfa/0x3b0 [ 1422.017352][T17469] ? lockdep_hardirqs_on+0x9c/0x150 [ 1422.017389][T17469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1422.017413][T17469] ? clear_bhb_loop+0x60/0xb0 [ 1422.017444][T17469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1422.017469][T17469] RIP: 0033:0x7f2c73b8e929 [ 1422.017491][T17469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1422.017514][T17469] RSP: 002b:00007f2c719f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1422.017541][T17469] RAX: ffffffffffffffda RBX: 00007f2c73db5fa0 RCX: 00007f2c73b8e929 [ 1422.017560][T17469] RDX: 00000000200488d4 RSI: 0000200000000880 RDI: 0000000000000004 [ 1422.017577][T17469] RBP: 00007f2c719f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1422.017593][T17469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1422.017609][T17469] R13: 0000000000000000 R14: 00007f2c73db5fa0 R15: 00007ffcaf129ab8 [ 1422.017655][T17469] [ 1422.388395][T17474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3109'. [ 1422.799402][ T978] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1422.811459][ T978] usb 6-1: USB disconnect, device number 3 [ 1423.063745][T17135] udevd[17135]: setting mode of /dev/bus/usb/006/003 to 020664 failed: No such file or directory [ 1423.514508][T17135] udevd[17135]: setting owner of /dev/bus/usb/006/003 to uid=0, gid=0 failed: No such file or directory [ 1423.803970][T17490] FAULT_INJECTION: forcing a failure. [ 1423.803970][T17490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1423.857929][T17490] CPU: 0 UID: 0 PID: 17490 Comm: syz.9.3112 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1423.857960][T17490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1423.857973][T17490] Call Trace: [ 1423.857983][T17490] [ 1423.857992][T17490] dump_stack_lvl+0x189/0x250 [ 1423.858034][T17490] ? __pfx____ratelimit+0x10/0x10 [ 1423.858068][T17490] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1423.858100][T17490] ? __pfx__printk+0x10/0x10 [ 1423.858123][T17490] ? __might_fault+0xb0/0x130 [ 1423.858161][T17490] should_fail_ex+0x414/0x560 [ 1423.858196][T17490] _copy_from_iter+0x1db/0x16f0 [ 1423.858234][T17490] ? rcu_is_watching+0x15/0xb0 [ 1423.858268][T17490] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 1423.858299][T17490] ? __pfx__copy_from_iter+0x10/0x10 [ 1423.858334][T17490] ? __build_skb_around+0x257/0x3e0 [ 1423.858364][T17490] ? netlink_sendmsg+0x642/0xb30 [ 1423.858388][T17490] ? skb_put+0x11b/0x210 [ 1423.858417][T17490] netlink_sendmsg+0x6b2/0xb30 [ 1423.858461][T17490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1423.858496][T17490] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1423.858522][T17490] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1423.858549][T17490] __sock_sendmsg+0x219/0x270 [ 1423.858585][T17490] ____sys_sendmsg+0x505/0x830 [ 1423.858618][T17490] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1423.858657][T17490] ? import_iovec+0x74/0xa0 [ 1423.858682][T17490] ___sys_sendmsg+0x21f/0x2a0 [ 1423.858712][T17490] ? __pfx____sys_sendmsg+0x10/0x10 [ 1423.858772][T17490] ? __fget_files+0x2a/0x420 [ 1423.858792][T17490] ? __fget_files+0x3a0/0x420 [ 1423.858821][T17490] __x64_sys_sendmsg+0x19b/0x260 [ 1423.858843][T17490] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1423.858871][T17490] ? __pfx_ksys_write+0x10/0x10 [ 1423.858886][T17490] ? rcu_is_watching+0x15/0xb0 [ 1423.858913][T17490] ? do_syscall_64+0xbe/0x3b0 [ 1423.858930][T17490] do_syscall_64+0xfa/0x3b0 [ 1423.858943][T17490] ? lockdep_hardirqs_on+0x9c/0x150 [ 1423.858971][T17490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1423.858987][T17490] ? clear_bhb_loop+0x60/0xb0 [ 1423.859005][T17490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1423.859020][T17490] RIP: 0033:0x7f2c73b8e929 [ 1423.859035][T17490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1423.859049][T17490] RSP: 002b:00007f2c719f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1423.859065][T17490] RAX: ffffffffffffffda RBX: 00007f2c73db5fa0 RCX: 00007f2c73b8e929 [ 1423.859077][T17490] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1423.859087][T17490] RBP: 00007f2c719f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1423.859097][T17490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1423.859106][T17490] R13: 0000000000000000 R14: 00007f2c73db5fa0 R15: 00007ffcaf129ab8 [ 1423.859129][T17490] [ 1424.299338][T13187] usb 3-1: USB disconnect, device number 59 [ 1424.375230][T17496] FAULT_INJECTION: forcing a failure. [ 1424.375230][T17496] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1424.389178][T17496] CPU: 0 UID: 0 PID: 17496 Comm: syz.4.3117 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1424.389209][T17496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1424.389223][T17496] Call Trace: [ 1424.389233][T17496] [ 1424.389242][T17496] dump_stack_lvl+0x189/0x250 [ 1424.389281][T17496] ? __pfx____ratelimit+0x10/0x10 [ 1424.389315][T17496] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1424.389347][T17496] ? __pfx__printk+0x10/0x10 [ 1424.389369][T17496] ? __might_fault+0xb0/0x130 [ 1424.389408][T17496] should_fail_ex+0x414/0x560 [ 1424.389443][T17496] _copy_from_iter+0x1db/0x16f0 [ 1424.389482][T17496] ? rcu_is_watching+0x15/0xb0 [ 1424.389516][T17496] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1424.389546][T17496] ? __pfx__copy_from_iter+0x10/0x10 [ 1424.389580][T17496] ? __build_skb_around+0x257/0x3e0 [ 1424.389610][T17496] ? netlink_sendmsg+0x642/0xb30 [ 1424.389634][T17496] ? skb_put+0x11b/0x210 [ 1424.389664][T17496] netlink_sendmsg+0x6b2/0xb30 [ 1424.389701][T17496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1424.389738][T17496] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1424.389763][T17496] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1424.389791][T17496] __sock_sendmsg+0x219/0x270 [ 1424.389829][T17496] ____sys_sendmsg+0x505/0x830 [ 1424.389864][T17496] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1424.389901][T17496] ? import_iovec+0x74/0xa0 [ 1424.389926][T17496] ___sys_sendmsg+0x21f/0x2a0 [ 1424.389957][T17496] ? __pfx____sys_sendmsg+0x10/0x10 [ 1424.390026][T17496] ? __fget_files+0x2a/0x420 [ 1424.390054][T17496] ? __fget_files+0x3a0/0x420 [ 1424.390096][T17496] __x64_sys_sendmsg+0x19b/0x260 [ 1424.390127][T17496] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1424.390174][T17496] ? __pfx_ksys_write+0x10/0x10 [ 1424.390197][T17496] ? rcu_is_watching+0x15/0xb0 [ 1424.390235][T17496] ? do_syscall_64+0xbe/0x3b0 [ 1424.390260][T17496] do_syscall_64+0xfa/0x3b0 [ 1424.390280][T17496] ? lockdep_hardirqs_on+0x9c/0x150 [ 1424.390312][T17496] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1424.390334][T17496] ? clear_bhb_loop+0x60/0xb0 [ 1424.390361][T17496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1424.390383][T17496] RIP: 0033:0x7fe698d8e929 [ 1424.390403][T17496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1424.390422][T17496] RSP: 002b:00007fe699cdd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1424.390446][T17496] RAX: ffffffffffffffda RBX: 00007fe698fb5fa0 RCX: 00007fe698d8e929 [ 1424.390462][T17496] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000006 [ 1424.390477][T17496] RBP: 00007fe699cdd090 R08: 0000000000000000 R09: 0000000000000000 [ 1424.390490][T17496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1424.390503][T17496] R13: 0000000000000000 R14: 00007fe698fb5fa0 R15: 00007ffe55880e58 [ 1424.390539][T17496] [ 1424.685054][T17498] FAULT_INJECTION: forcing a failure. [ 1424.685054][T17498] name failslab, interval 1, probability 0, space 0, times 0 [ 1424.717191][T17498] CPU: 1 UID: 0 PID: 17498 Comm: syz.5.3114 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1424.717224][T17498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1424.717238][T17498] Call Trace: [ 1424.717247][T17498] [ 1424.717258][T17498] dump_stack_lvl+0x189/0x250 [ 1424.717296][T17498] ? __pfx____ratelimit+0x10/0x10 [ 1424.717331][T17498] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1424.717363][T17498] ? __pfx__printk+0x10/0x10 [ 1424.717400][T17498] ? __pfx___might_resched+0x10/0x10 [ 1424.717429][T17498] ? fs_reclaim_acquire+0x7d/0x100 [ 1424.717465][T17498] should_fail_ex+0x414/0x560 [ 1424.717499][T17498] should_failslab+0xa8/0x100 [ 1424.717529][T17498] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1424.717556][T17498] ? rtnl_prop_list_size+0x1ba/0x1e0 [ 1424.717588][T17498] ? __alloc_skb+0x112/0x2d0 [ 1424.717617][T17498] __alloc_skb+0x112/0x2d0 [ 1424.717646][T17498] rtmsg_ifinfo_build_skb+0x84/0x260 [ 1424.717689][T17498] rtnetlink_event+0x1b7/0x270 [ 1424.717718][T17498] notifier_call_chain+0x1b3/0x3e0 [ 1424.717760][T17498] netif_change_tx_queue_len+0x120/0x270 [ 1424.717793][T17498] ? __pfx_netif_change_tx_queue_len+0x10/0x10 [ 1424.717822][T17498] ? netdev_name_node_lookup+0xdf/0x120 [ 1424.717863][T17498] dev_change_tx_queue_len+0x125/0x260 [ 1424.717896][T17498] dev_ioctl+0x7b4/0x1150 [ 1424.717923][T17498] sock_do_ioctl+0x22c/0x300 [ 1424.717959][T17498] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1424.717989][T17498] ? __lock_acquire+0xab9/0xd20 [ 1424.718021][T17498] ? __asan_memset+0x22/0x50 [ 1424.718042][T17498] ? smack_file_ioctl+0x24a/0x340 [ 1424.718076][T17498] sock_ioctl+0x576/0x790 [ 1424.718110][T17498] ? __pfx_sock_ioctl+0x10/0x10 [ 1424.718143][T17498] ? __fget_files+0x2a/0x420 [ 1424.718170][T17498] ? __fget_files+0x3a0/0x420 [ 1424.718198][T17498] ? __fget_files+0x2a/0x420 [ 1424.718231][T17498] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1424.718261][T17498] ? __pfx_sock_ioctl+0x10/0x10 [ 1424.718292][T17498] __se_sys_ioctl+0xfc/0x170 [ 1424.718319][T17498] do_syscall_64+0xfa/0x3b0 [ 1424.718338][T17498] ? lockdep_hardirqs_on+0x9c/0x150 [ 1424.718377][T17498] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1424.718400][T17498] ? clear_bhb_loop+0x60/0xb0 [ 1424.718427][T17498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1424.718449][T17498] RIP: 0033:0x7f9acdd8e929 [ 1424.718470][T17498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1424.718490][T17498] RSP: 002b:00007f9acebc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1424.718513][T17498] RAX: ffffffffffffffda RBX: 00007f9acdfb6160 RCX: 00007f9acdd8e929 [ 1424.718530][T17498] RDX: 0000200000000000 RSI: 0000000000008943 RDI: 0000000000000005 [ 1424.718545][T17498] RBP: 00007f9acebc0090 R08: 0000000000000000 R09: 0000000000000000 [ 1424.718559][T17498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1424.718572][T17498] R13: 0000000000000000 R14: 00007f9acdfb6160 R15: 00007ffc86fb8958 [ 1424.718607][T17498] [ 1425.454246][ T30] kauditd_printk_skb: 7415 callbacks suppressed [ 1425.454288][ T30] audit: type=1400 audit(1749778557.940:272368): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16594 comm="syz-executor" name="36" dev="tmpfs" ino=199 [ 1425.508417][T16594] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1425.527491][T17506] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1425.596159][T16594] audit: audit_lost=75077 audit_rate_limit=0 audit_backlog_limit=64 [ 1425.651740][T17506] audit: audit_lost=75078 audit_rate_limit=0 audit_backlog_limit=64 [ 1425.729439][T16594] audit: backlog limit exceeded [ 1425.755334][T17500] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1425.770190][T17506] audit: backlog limit exceeded [ 1425.797394][T16594] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1425.826313][T17506] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1425.958133][T17507] tipc: Failed to remove unknown binding: 66,1,1/0:4236369673/4236369675 [ 1428.319502][T17525] FAULT_INJECTION: forcing a failure. [ 1428.319502][T17525] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1428.356458][T17525] CPU: 1 UID: 0 PID: 17525 Comm: syz.2.3123 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1428.356491][T17525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1428.356504][T17525] Call Trace: [ 1428.356513][T17525] [ 1428.356523][T17525] dump_stack_lvl+0x189/0x250 [ 1428.356561][T17525] ? __pfx____ratelimit+0x10/0x10 [ 1428.356595][T17525] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1428.356626][T17525] ? __pfx__printk+0x10/0x10 [ 1428.356663][T17525] should_fail_ex+0x414/0x560 [ 1428.356697][T17525] _copy_to_user+0x31/0xb0 [ 1428.356721][T17525] simple_read_from_buffer+0xe1/0x170 [ 1428.356756][T17525] proc_fail_nth_read+0x1df/0x250 [ 1428.356792][T17525] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1428.356826][T17525] ? rw_verify_area+0x258/0x650 [ 1428.356850][T17525] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1428.356883][T17525] vfs_read+0x200/0x980 [ 1428.356914][T17525] ? __pfx___mutex_lock+0x10/0x10 [ 1428.356936][T17525] ? __pfx_vfs_read+0x10/0x10 [ 1428.356962][T17525] ? __fget_files+0x2a/0x420 [ 1428.356997][T17525] ? __fget_files+0x3a0/0x420 [ 1428.357024][T17525] ? __fget_files+0x2a/0x420 [ 1428.357064][T17525] ksys_read+0x145/0x250 [ 1428.357103][T17525] ? __pfx_ksys_read+0x10/0x10 [ 1428.357125][T17525] ? rcu_is_watching+0x15/0xb0 [ 1428.357164][T17525] ? do_syscall_64+0xbe/0x3b0 [ 1428.357189][T17525] do_syscall_64+0xfa/0x3b0 [ 1428.357208][T17525] ? lockdep_hardirqs_on+0x9c/0x150 [ 1428.357239][T17525] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.357262][T17525] ? clear_bhb_loop+0x60/0xb0 [ 1428.357289][T17525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.357311][T17525] RIP: 0033:0x7f69b1f8d33c [ 1428.357330][T17525] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1428.357349][T17525] RSP: 002b:00007f69afdf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1428.357373][T17525] RAX: ffffffffffffffda RBX: 00007f69b21b5fa0 RCX: 00007f69b1f8d33c [ 1428.357389][T17525] RDX: 000000000000000f RSI: 00007f69afdf60a0 RDI: 0000000000000005 [ 1428.357404][T17525] RBP: 00007f69afdf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1428.357418][T17525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1428.357431][T17525] R13: 0000000000000000 R14: 00007f69b21b5fa0 R15: 00007fff96b03388 [ 1428.357466][T17525] [ 1429.281451][T17539] binder: BINDER_SET_CONTEXT_MGR already set [ 1429.287603][T17539] binder: 17532:17539 ioctl 4018620d 200000000040 returned -16 [ 1429.307051][T17539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3128'. [ 1429.316690][T17539] netem: invalid attributes len -6 [ 1429.322398][T17539] netem: change failed [ 1430.226111][ T30] kauditd_printk_skb: 3619 callbacks suppressed [ 1430.226170][ T30] audit: type=1400 audit(1749778563.094:275478): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5195 comm="udevd" name="lib" dev="sda1" ino=264 [ 1430.264206][ T5195] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1430.282529][ T5195] audit: audit_lost=75250 audit_rate_limit=0 audit_backlog_limit=64 [ 1430.327619][T17545] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1430.330107][ T30] audit: type=1400 audit(1749778563.094:275479): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7695 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1430.336705][ T30] audit: type=1400 audit(1749778563.094:275480): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7695 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1430.381172][ T5195] audit: backlog limit exceeded [ 1430.386643][T17544] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1430.394901][T16883] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1430.401433][T16883] audit: audit_lost=75251 audit_rate_limit=0 audit_backlog_limit=64 [ 1430.743030][T17554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3131'. [ 1430.752374][T17554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3131'. [ 1431.890637][T13187] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1432.042775][T13187] usb 5-1: Using ep0 maxpacket: 16 [ 1432.216787][T13187] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 1432.231181][T13187] usb 5-1: config 0 descriptor has 1 excess byte, ignoring [ 1432.239475][T13187] usb 5-1: config 0 has no interface number 0 [ 1432.258143][T13187] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1432.281500][T13187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.319501][T13187] usb 5-1: Product: syz [ 1432.332212][T13187] usb 5-1: Manufacturer: syz [ 1432.350588][T13187] usb 5-1: SerialNumber: syz [ 1432.386916][T13187] usb 5-1: config 0 descriptor?? [ 1432.427584][T13187] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 1432.458984][T13187] usb 5-1: No valid video chain found. [ 1433.122640][ T978] usb 5-1: USB disconnect, device number 29 [ 1433.449068][T17593] FAULT_INJECTION: forcing a failure. [ 1433.449068][T17593] name failslab, interval 1, probability 0, space 0, times 0 [ 1433.462696][T17593] CPU: 1 UID: 0 PID: 17593 Comm: syz.9.3141 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1433.462725][T17593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1433.462739][T17593] Call Trace: [ 1433.462748][T17593] [ 1433.462758][T17593] dump_stack_lvl+0x189/0x250 [ 1433.462796][T17593] ? __pfx____ratelimit+0x10/0x10 [ 1433.462829][T17593] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1433.462862][T17593] ? __pfx__printk+0x10/0x10 [ 1433.462891][T17593] ? __pfx___might_resched+0x10/0x10 [ 1433.462923][T17593] ? fs_reclaim_acquire+0x7d/0x100 [ 1433.462959][T17593] should_fail_ex+0x414/0x560 [ 1433.462993][T17593] should_failslab+0xa8/0x100 [ 1433.463023][T17593] __kmalloc_cache_noprof+0x70/0x3d0 [ 1433.463049][T17593] ? futex_lock_pi+0x94a/0xa90 [ 1433.463078][T17593] futex_lock_pi+0x94a/0xa90 [ 1433.463100][T17593] ? finish_task_switch+0x18b/0x950 [ 1433.463132][T17593] ? __pfx_futex_lock_pi+0x10/0x10 [ 1433.463188][T17593] ? __pfx_futex_wake_mark+0x10/0x10 [ 1433.463221][T17593] ? vfs_write+0x8d8/0xa90 [ 1433.463258][T17593] ? ksys_write+0x1cb/0x250 [ 1433.463286][T17593] do_futex+0x292/0x420 [ 1433.463314][T17593] ? __pfx_do_futex+0x10/0x10 [ 1433.463337][T17593] ? preempt_schedule_irq+0xde/0x150 [ 1433.463373][T17593] __se_sys_futex+0x36f/0x400 [ 1433.463403][T17593] ? __pfx___se_sys_futex+0x10/0x10 [ 1433.463436][T17593] ? __x64_sys_futex+0x21/0xf0 [ 1433.463462][T17593] do_syscall_64+0xfa/0x3b0 [ 1433.463480][T17593] ? lockdep_hardirqs_on+0x9c/0x150 [ 1433.463512][T17593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.463543][T17593] ? clear_bhb_loop+0x60/0xb0 [ 1433.463570][T17593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.463592][T17593] RIP: 0033:0x7f2c73b8e929 [ 1433.463612][T17593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1433.463633][T17593] RSP: 002b:00007f2c719d5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1433.463656][T17593] RAX: ffffffffffffffda RBX: 00007f2c73db6080 RCX: 00007f2c73b8e929 [ 1433.463673][T17593] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 0000200000000180 [ 1433.463688][T17593] RBP: 00007f2c719d5090 R08: 0000000000000000 R09: 00000000fffffffc [ 1433.463703][T17593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1433.463716][T17593] R13: 0000000000000000 R14: 00007f2c73db6080 R15: 00007ffcaf129ab8 [ 1433.463751][T17593] [ 1434.457879][T17598] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3143'. [ 1434.855363][T17599] XFS (nullb0): Invalid superblock magic number [ 1435.356556][ T30] kauditd_printk_skb: 8292 callbacks suppressed [ 1435.356576][ T30] audit: type=1400 audit(1749778568.480:279292): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=17591 comm="syz.4.3142" saddr=10.128.0.169 src=30008 daddr=10.128.0.188 dest=53858 netif=eth0 [ 1435.416142][ T7695] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1435.422715][ T7695] audit: audit_lost=76746 audit_rate_limit=0 audit_backlog_limit=64 [ 1435.424798][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1435.437285][ C1] audit: audit_lost=76747 audit_rate_limit=0 audit_backlog_limit=64 [ 1435.445326][ C1] audit: backlog limit exceeded [ 1435.450430][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1435.456983][ C1] audit: audit_lost=76748 audit_rate_limit=0 audit_backlog_limit=64 [ 1435.465004][ C1] audit: backlog limit exceeded [ 1435.470429][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1436.640666][T17627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3151'. [ 1436.757700][ T5885] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 1437.110966][ T5885] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1437.192910][ T5885] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1437.227245][ T5885] usb 9-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice=cd.0d [ 1437.246016][ T5885] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.286131][ T5885] usb 9-1: Product: syz [ 1437.290365][ T5885] usb 9-1: Manufacturer: syz [ 1437.311724][ T5885] usb 9-1: SerialNumber: syz [ 1437.342998][T17647] overlay: ./file0 is not a directory [ 1437.388289][ T5885] usb 9-1: config 0 descriptor?? [ 1437.834841][T17651] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3149'. [ 1437.851815][T17651] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3149'. [ 1437.949902][ T978] usb 9-1: USB disconnect, device number 62 [ 1438.236538][T17654] FAULT_INJECTION: forcing a failure. [ 1438.236538][T17654] name failslab, interval 1, probability 0, space 0, times 0 [ 1438.250639][T17654] CPU: 0 UID: 0 PID: 17654 Comm: syz.5.3154 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1438.250668][T17654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1438.250683][T17654] Call Trace: [ 1438.250694][T17654] [ 1438.250706][T17654] dump_stack_lvl+0x189/0x250 [ 1438.250744][T17654] ? __pfx____ratelimit+0x10/0x10 [ 1438.250779][T17654] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1438.250813][T17654] ? __pfx__printk+0x10/0x10 [ 1438.250843][T17654] ? __pfx___might_resched+0x10/0x10 [ 1438.250883][T17654] should_fail_ex+0x414/0x560 [ 1438.250926][T17654] should_failslab+0xa8/0x100 [ 1438.250958][T17654] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 1438.250988][T17654] ? smk_parse_smack+0x1b1/0x1f0 [ 1438.251017][T17654] kstrndup+0x80/0x160 [ 1438.251053][T17654] smk_parse_smack+0x1b1/0x1f0 [ 1438.251080][T17654] smk_import_entry+0x20/0x1d0 [ 1438.251106][T17654] smk_fill_rule+0x52/0x630 [ 1438.251136][T17654] smk_parse_long_rule+0xbc3/0xee0 [ 1438.251171][T17654] ? __pfx_smk_parse_long_rule+0x10/0x10 [ 1438.251214][T17654] smk_write_rules_list+0x239/0x370 [ 1438.251244][T17654] ? __pfx_smk_write_load_self2+0x10/0x10 [ 1438.251277][T17654] vfs_write+0x27e/0xa90 [ 1438.251315][T17654] ? __pfx_vfs_write+0x10/0x10 [ 1438.251343][T17654] ? __fget_files+0x2a/0x420 [ 1438.251379][T17654] ? __fget_files+0x3a0/0x420 [ 1438.251408][T17654] ? __fget_files+0x2a/0x420 [ 1438.251449][T17654] ksys_write+0x145/0x250 [ 1438.251479][T17654] ? __pfx_ksys_write+0x10/0x10 [ 1438.251512][T17654] ? do_syscall_64+0xbe/0x3b0 [ 1438.251538][T17654] do_syscall_64+0xfa/0x3b0 [ 1438.251560][T17654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.251582][T17654] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1438.251604][T17654] ? clear_bhb_loop+0x60/0xb0 [ 1438.251631][T17654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.251653][T17654] RIP: 0033:0x7f9acdd8e929 [ 1438.251674][T17654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1438.251693][T17654] RSP: 002b:00007f9acebc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1438.251717][T17654] RAX: ffffffffffffffda RBX: 00007f9acdfb6160 RCX: 00007f9acdd8e929 [ 1438.251734][T17654] RDX: 0000000000000022 RSI: 0000200000000140 RDI: 000000000000000f [ 1438.251749][T17654] RBP: 00007f9acebc0090 R08: 0000000000000000 R09: 0000000000000000 [ 1438.251763][T17654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1438.251777][T17654] R13: 0000000000000000 R14: 00007f9acdfb6160 R15: 00007ffc86fb8958 [ 1438.251813][T17654] [ 1440.121068][ T30] kauditd_printk_skb: 8439 callbacks suppressed [ 1440.121090][ T30] audit: type=1400 audit(1749778573.477:284699): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17674 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1440.134846][T17135] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1440.159843][ T5195] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1440.168613][T17672] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1440.175182][T17672] audit: audit_lost=77760 audit_rate_limit=0 audit_backlog_limit=64 [ 1440.177388][T17670] netlink: 'syz.9.3157': attribute type 83 has an invalid length. [ 1440.192288][T17675] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1440.198887][ T5195] audit: audit_lost=77761 audit_rate_limit=0 audit_backlog_limit=64 [ 1440.198919][ T5195] audit: backlog limit exceeded [ 1440.199050][ T5195] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1440.223172][T17135] audit: audit_lost=77762 audit_rate_limit=0 audit_backlog_limit=64 [ 1440.235474][T17679] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3158'. [ 1440.407015][T17672] loop6: detected capacity change from 0 to 63 [ 1440.687241][T17672] buffer_io_error: 26 callbacks suppressed [ 1440.687264][T17672] Buffer I/O error on dev loop6, logical block 0, async page read [ 1440.747564][T17672] Buffer I/O error on dev loop6, logical block 1, async page read [ 1440.816265][T17672] Buffer I/O error on dev loop6, logical block 2, async page read [ 1440.845872][T17672] Buffer I/O error on dev loop6, logical block 3, async page read [ 1441.374240][T17682] Buffer I/O error on dev loop6, logical block 0, async page read [ 1441.680199][T17682] Buffer I/O error on dev loop6, logical block 1, async page read [ 1441.775559][T17682] Buffer I/O error on dev loop6, logical block 2, async page read [ 1441.882915][T17682] Buffer I/O error on dev loop6, logical block 3, async page read [ 1442.130304][T17133] Buffer I/O error on dev loop6, logical block 0, async page read [ 1442.140913][T17133] Buffer I/O error on dev loop6, logical block 1, async page read [ 1443.497776][T17701] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1444.911741][ T30] kauditd_printk_skb: 5975 callbacks suppressed [ 1444.911763][ T30] audit: type=1400 audit(1749778578.495:288416): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17718 comm="syz.4.3173" name="newroot" dev="tmpfs" ino=2 [ 1444.924842][T17725] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3172'. [ 1445.000330][T17135] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1445.013578][T17728] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1445.040589][T17728] audit: audit_lost=78516 audit_rate_limit=0 audit_backlog_limit=64 [ 1445.067294][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1445.073932][ C1] audit: audit_lost=78517 audit_rate_limit=0 audit_backlog_limit=64 [ 1445.082073][ C1] audit: backlog limit exceeded [ 1445.097590][T17135] audit: audit_lost=78518 audit_rate_limit=0 audit_backlog_limit=64 [ 1445.111887][ T30] audit: type=1400 audit(1749778578.495:288417): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17718 comm="syz.4.3173" name="/" dev="devtmpfs" ino=1 [ 1445.138104][T17135] audit: backlog limit exceeded [ 1448.387713][ T6692] usb 9-1: new full-speed USB device number 63 using dummy_hcd [ 1448.954415][ T6692] usb 9-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1449.016780][ T6692] usb 9-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1449.047864][ T6692] usb 9-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1449.116543][ T6692] usb 9-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1449.159379][ T6692] usb 9-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 1449.167717][ T6692] usb 9-1: Manufacturer: syz [ 1449.212202][ T6692] usb 9-1: SerialNumber: syz [ 1449.317319][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1449.334662][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1449.454871][T17757] netlink: 'syz.8.3180': attribute type 1 has an invalid length. [ 1449.474335][T17757] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3180'. [ 1449.533206][ T6692] yealink 9-1:36.0: invalid payload size 0, expected 16 [ 1449.575303][ T6692] input: Yealink usb-p1k as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:36.0/input/input63 [ 1449.656796][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1449.664014][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1449.671001][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1449.678060][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1449.686356][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1449.693628][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1449.700658][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1449.710307][ C1] yealink 9-1:36.0: urb_ctl_callback - urb status -71 [ 1449.717139][ C1] yealink 9-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 1449.721178][ T30] kauditd_printk_skb: 6058 callbacks suppressed [ 1449.721201][ T30] audit: type=1400 audit(1749778583.556:292513): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17772 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1449.762923][ T5195] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1449.771867][ T5180] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1449.773835][T17774] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1449.778967][ T6692] usb 9-1: USB disconnect, device number 63 [ 1449.781351][T17773] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1449.796732][T17774] audit: audit_lost=79173 audit_rate_limit=0 audit_backlog_limit=64 [ 1449.803615][ T5195] audit: audit_lost=79174 audit_rate_limit=0 audit_backlog_limit=64 [ 1449.815660][ T5180] audit: audit_lost=79175 audit_rate_limit=0 audit_backlog_limit=64 [ 1449.828950][ T30] audit: type=1400 audit(1749778583.556:292514): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=17772 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1449.861917][ T5180] audit: backlog limit exceeded [ 1450.315434][T17782] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3187'. [ 1452.665377][T17327] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 1453.064308][T17792] uprobe: syz.5.3192:17792 failed to unregister, leaking uprobe [ 1453.182295][T17327] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1453.509570][T17327] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1453.522807][T17801] FAULT_INJECTION: forcing a failure. [ 1453.522807][T17801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1453.556886][T17327] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1453.580550][T17801] CPU: 0 UID: 0 PID: 17801 Comm: syz.4.3193 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1453.580584][T17801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1453.580598][T17801] Call Trace: [ 1453.580608][T17801] [ 1453.580618][T17801] dump_stack_lvl+0x189/0x250 [ 1453.580658][T17801] ? __pfx____ratelimit+0x10/0x10 [ 1453.580693][T17801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1453.580726][T17801] ? __pfx__printk+0x10/0x10 [ 1453.580748][T17801] ? __might_fault+0xb0/0x130 [ 1453.580785][T17801] should_fail_ex+0x414/0x560 [ 1453.580820][T17801] _copy_from_user+0x2d/0xb0 [ 1453.580842][T17801] __se_sys_mount+0x18a/0x410 [ 1453.580878][T17801] ? __pfx___se_sys_mount+0x10/0x10 [ 1453.580906][T17801] ? rcu_is_watching+0x15/0xb0 [ 1453.580944][T17801] ? do_syscall_64+0xbe/0x3b0 [ 1453.580963][T17801] ? __x64_sys_mount+0x20/0xc0 [ 1453.580995][T17801] do_syscall_64+0xfa/0x3b0 [ 1453.581016][T17801] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.581037][T17801] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1453.581059][T17801] ? clear_bhb_loop+0x60/0xb0 [ 1453.581085][T17801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.581107][T17801] RIP: 0033:0x7fe698d8e929 [ 1453.581126][T17801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1453.581144][T17801] RSP: 002b:00007fe699cbc038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1453.581166][T17801] RAX: ffffffffffffffda RBX: 00007fe698fb6080 RCX: 00007fe698d8e929 [ 1453.581183][T17801] RDX: 0000200000000080 RSI: 0000200000000340 RDI: 0000000000000000 [ 1453.581197][T17801] RBP: 00007fe699cbc090 R08: 00002000000006c0 R09: 0000000000000000 [ 1453.581211][T17801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1453.581223][T17801] R13: 0000000000000000 R14: 00007fe698fb6080 R15: 00007ffe55880e58 [ 1453.581256][T17801] [ 1454.211816][T17327] usb 3-1: string descriptor 0 read error: -71 [ 1454.219014][T17327] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1454.235034][T17327] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1454.254661][T17804] netlink: 'syz.5.3194': attribute type 10 has an invalid length. [ 1454.282986][T17327] usb 3-1: config 0 descriptor?? [ 1454.310634][T17327] usb 3-1: can't set config #0, error -71 [ 1454.336418][T17804] bond0: (slave wlan1): Enslaving as an active interface with a down link [ 1454.342079][T17327] usb 3-1: USB disconnect, device number 60 [ 1454.507445][ T30] kauditd_printk_skb: 8433 callbacks suppressed [ 1454.507464][ T30] audit: type=1400 audit(1749778588.584:297545): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=17135 comm="udevd" path="/run/udev/data/c189:315" dev="tmpfs" ino=11727 [ 1454.548281][T17135] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1454.579786][T16883] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1454.582542][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1454.586347][T16883] audit: audit_lost=80310 audit_rate_limit=0 audit_backlog_limit=64 [ 1454.592942][ C1] audit: audit_lost=80311 audit_rate_limit=0 audit_backlog_limit=64 [ 1454.592970][ C1] audit: backlog limit exceeded [ 1454.593088][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1454.593105][ C1] audit: audit_lost=80312 audit_rate_limit=0 audit_backlog_limit=64 [ 1454.593124][ C1] audit: backlog limit exceeded [ 1454.893461][T15180] bond0: (slave wlan1): link status definitely up [ 1454.934714][T15180] bond0: active interface up! [ 1455.319254][T17815] FAULT_INJECTION: forcing a failure. [ 1455.319254][T17815] name failslab, interval 1, probability 0, space 0, times 0 [ 1455.362114][T17815] CPU: 1 UID: 0 PID: 17815 Comm: syz.8.3197 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1455.362145][T17815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1455.362159][T17815] Call Trace: [ 1455.362168][T17815] [ 1455.362189][T17815] dump_stack_lvl+0x189/0x250 [ 1455.362226][T17815] ? __pfx____ratelimit+0x10/0x10 [ 1455.362259][T17815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1455.362290][T17815] ? __pfx__printk+0x10/0x10 [ 1455.362308][T17815] ? __mutex_trylock_common+0x153/0x260 [ 1455.362358][T17815] should_fail_ex+0x414/0x560 [ 1455.362392][T17815] should_failslab+0xa8/0x100 [ 1455.362424][T17815] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1455.362452][T17815] ? __alloc_skb+0x112/0x2d0 [ 1455.362475][T17815] ? hci_sock_sendmsg+0x549/0xef0 [ 1455.362507][T17815] __alloc_skb+0x112/0x2d0 [ 1455.362537][T17815] hci_mgmt_cmd+0x1ca/0xef0 [ 1455.362566][T17815] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1455.362610][T17815] hci_sock_sendmsg+0x6ca/0xef0 [ 1455.362645][T17815] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1455.362678][T17815] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1455.362705][T17815] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1455.362734][T17815] __sock_sendmsg+0x219/0x270 [ 1455.362772][T17815] sock_write_iter+0x258/0x330 [ 1455.362808][T17815] ? __pfx_sock_write_iter+0x10/0x10 [ 1455.362853][T17815] ? bpf_lsm_file_permission+0x9/0x20 [ 1455.362882][T17815] ? security_file_permission+0x75/0x290 [ 1455.362923][T17815] vfs_write+0x54b/0xa90 [ 1455.362954][T17815] ? __pfx_sock_write_iter+0x10/0x10 [ 1455.362987][T17815] ? __pfx_vfs_write+0x10/0x10 [ 1455.363024][T17815] ? __fget_files+0x2a/0x420 [ 1455.363065][T17815] ksys_write+0x145/0x250 [ 1455.363094][T17815] ? __pfx_ksys_write+0x10/0x10 [ 1455.363116][T17815] ? rcu_is_watching+0x15/0xb0 [ 1455.363154][T17815] ? do_syscall_64+0xbe/0x3b0 [ 1455.363187][T17815] do_syscall_64+0xfa/0x3b0 [ 1455.363205][T17815] ? lockdep_hardirqs_on+0x9c/0x150 [ 1455.363238][T17815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.363261][T17815] ? clear_bhb_loop+0x60/0xb0 [ 1455.363287][T17815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.363308][T17815] RIP: 0033:0x7f3a5f58e929 [ 1455.363328][T17815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1455.363347][T17815] RSP: 002b:00007f3a60325038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1455.363371][T17815] RAX: ffffffffffffffda RBX: 00007f3a5f7b5fa0 RCX: 00007f3a5f58e929 [ 1455.363387][T17815] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000006 [ 1455.363401][T17815] RBP: 00007f3a60325090 R08: 0000000000000000 R09: 0000000000000000 [ 1455.363415][T17815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1455.363429][T17815] R13: 0000000000000000 R14: 00007f3a5f7b5fa0 R15: 00007ffc8f819428 [ 1455.363465][T17815] [ 1455.812879][T17820] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3200'. [ 1456.074549][T17825] overlay: ./file0 is not a directory [ 1456.804371][T17832] netlink: 'syz.5.3202': attribute type 11 has an invalid length. [ 1457.987126][T17838] uprobe: syz.2.3204:17838 failed to unregister, leaking uprobe [ 1459.140166][ T151] bond0: (slave wlan1): interface is now down [ 1459.268878][ T151] bond0: now running without any active interface! [ 1459.294950][ T30] kauditd_printk_skb: 6411 callbacks suppressed [ 1459.294996][ T30] audit: type=1400 audit(1749778593.592:299560): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7695 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1459.440041][T16594] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1459.517166][T16594] audit: audit_lost=81779 audit_rate_limit=0 audit_backlog_limit=64 [ 1459.524176][ T7746] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1459.533729][ T30] audit: type=1400 audit(1749778593.592:299561): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7695 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1459.594338][ T7746] audit: audit_lost=81780 audit_rate_limit=0 audit_backlog_limit=64 [ 1459.599646][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1459.606362][T16594] audit: backlog limit exceeded [ 1459.609071][ C1] audit: audit_lost=81781 audit_rate_limit=0 audit_backlog_limit=64 [ 1459.609099][ C1] audit: backlog limit exceeded [ 1461.949429][T17873] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3215'. [ 1462.795944][T17881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3217'. [ 1462.800617][T17884] FAULT_INJECTION: forcing a failure. [ 1462.800617][T17884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1462.825002][T17884] CPU: 1 UID: 0 PID: 17884 Comm: syz.4.3218 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1462.825034][T17884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1462.825049][T17884] Call Trace: [ 1462.825058][T17884] [ 1462.825068][T17884] dump_stack_lvl+0x189/0x250 [ 1462.825105][T17884] ? __pfx____ratelimit+0x10/0x10 [ 1462.825138][T17884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1462.825170][T17884] ? __pfx__printk+0x10/0x10 [ 1462.825192][T17884] ? __might_fault+0xb0/0x130 [ 1462.825231][T17884] should_fail_ex+0x414/0x560 [ 1462.825264][T17884] _copy_from_iter+0x1db/0x16f0 [ 1462.825301][T17884] ? rcu_is_watching+0x15/0xb0 [ 1462.825334][T17884] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1462.825361][T17884] ? __pfx__copy_from_iter+0x10/0x10 [ 1462.825394][T17884] ? __build_skb_around+0x257/0x3e0 [ 1462.825422][T17884] ? netlink_sendmsg+0x642/0xb30 [ 1462.825446][T17884] ? skb_put+0x11b/0x210 [ 1462.825475][T17884] netlink_sendmsg+0x6b2/0xb30 [ 1462.825511][T17884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1462.825547][T17884] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1462.825572][T17884] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1462.825598][T17884] __sock_sendmsg+0x219/0x270 [ 1462.825635][T17884] ____sys_sendmsg+0x505/0x830 [ 1462.825668][T17884] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1462.825714][T17884] ? import_iovec+0x74/0xa0 [ 1462.825740][T17884] ___sys_sendmsg+0x21f/0x2a0 [ 1462.825770][T17884] ? __pfx____sys_sendmsg+0x10/0x10 [ 1462.825837][T17884] ? __fget_files+0x2a/0x420 [ 1462.825865][T17884] ? __fget_files+0x3a0/0x420 [ 1462.825905][T17884] __x64_sys_sendmsg+0x19b/0x260 [ 1462.825936][T17884] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1462.825974][T17884] ? __pfx_ksys_write+0x10/0x10 [ 1462.826015][T17884] ? rcu_is_watching+0x15/0xb0 [ 1462.826054][T17884] ? do_syscall_64+0xbe/0x3b0 [ 1462.826078][T17884] do_syscall_64+0xfa/0x3b0 [ 1462.826097][T17884] ? lockdep_hardirqs_on+0x9c/0x150 [ 1462.826129][T17884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.826151][T17884] ? clear_bhb_loop+0x60/0xb0 [ 1462.826179][T17884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.826200][T17884] RIP: 0033:0x7fe698d8e929 [ 1462.826220][T17884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1462.826240][T17884] RSP: 002b:00007fe699cdd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1462.826263][T17884] RAX: ffffffffffffffda RBX: 00007fe698fb5fa0 RCX: 00007fe698d8e929 [ 1462.826279][T17884] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000003 [ 1462.826293][T17884] RBP: 00007fe699cdd090 R08: 0000000000000000 R09: 0000000000000000 [ 1462.826308][T17884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1462.826321][T17884] R13: 0000000000000000 R14: 00007fe698fb5fa0 R15: 00007ffe55880e58 [ 1462.826355][T17884] [ 1462.841309][T17881] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3217'. [ 1463.072892][ C0] vkms_vblank_simulate: vblank timer overrun [ 1463.308894][T17881] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3217'. [ 1463.363507][T17891] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3221'. [ 1463.389308][T17891] netlink: 'syz.5.3221': attribute type 7 has an invalid length. [ 1463.424481][T17881] nbd0: detected capacity change from 0 to 256 [ 1463.448400][T17891] netlink: 'syz.5.3221': attribute type 8 has an invalid length. [ 1463.469400][ T9997] block nbd0: Receive control failed (result -104) [ 1463.476591][T17891] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3221'. [ 1464.114212][ T30] kauditd_printk_skb: 5668 callbacks suppressed [ 1464.114261][ T30] audit: type=1400 audit(1749778598.663:303461): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/1" saddr=10.128.0.169 src=30008 daddr=10.128.0.188 dest=53858 netif=eth0 [ 1464.159119][ T7695] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1464.168527][ T7695] audit: audit_lost=82371 audit_rate_limit=0 audit_backlog_limit=64 [ 1464.171808][T16594] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1464.192370][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1464.194379][T17898] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1464.198935][ C1] audit: audit_lost=82372 audit_rate_limit=0 audit_backlog_limit=64 [ 1464.198977][ C1] audit: backlog limit exceeded [ 1464.206380][T17898] audit: audit_lost=82373 audit_rate_limit=0 audit_backlog_limit=64 [ 1464.213882][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1464.416716][T17893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3223'. [ 1464.901293][T17907] bridge0: port 3(syz_tun) entered blocking state [ 1464.989532][T17907] bridge0: port 3(syz_tun) entered disabled state [ 1465.031406][T17907] syz_tun: entered allmulticast mode [ 1465.076473][T17327] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1465.247165][T17907] syz_tun: entered promiscuous mode [ 1465.247905][T17327] usb 3-1: Using ep0 maxpacket: 8 [ 1465.279467][T17907] bridge0: port 3(syz_tun) entered blocking state [ 1465.286064][T17907] bridge0: port 3(syz_tun) entered forwarding state [ 1465.690841][T17327] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1465.707145][T17327] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1465.719373][T17327] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 1465.763895][T17327] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 1465.783166][T17327] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1465.797800][T17327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.869231][T17327] hub 3-1:1.0: bad descriptor, ignoring hub [ 1465.884749][T17327] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1465.958694][T17327] cdc_wdm 3-1:1.0: skipping garbage [ 1465.987033][T17327] cdc_wdm 3-1:1.0: skipping garbage [ 1466.036475][T17327] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 1466.056217][T17327] cdc_wdm 3-1:1.0: Unknown control protocol [ 1466.087711][T17906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1466.096995][T17906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1466.238845][T17327] usb 3-1: USB disconnect, device number 61 [ 1466.802339][T17922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3231'. [ 1466.811851][T17922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3231'. [ 1466.827751][T17922] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3231'. [ 1466.859115][T17920] x_tables: duplicate underflow at hook 1 [ 1467.467008][T17934] affs: No valid root block on device nullb0 [ 1468.336082][ T7736] libceph: connect (1)[c::]:6789 error -101 [ 1468.645004][ T7736] libceph: mon0 (1)[c::]:6789 connect error [ 1468.721201][ T6692] libceph: connect (1)[c::]:6789 error -101 [ 1468.745780][ T6692] libceph: mon0 (1)[c::]:6789 connect error [ 1468.888601][ T30] kauditd_printk_skb: 6283 callbacks suppressed [ 1468.888621][ T30] audit: type=1400 audit(1749778603.681:307723): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5195 comm="udevd" name="mq" dev="sysfs" ino=15587 [ 1468.922479][T17943] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1468.937606][T17944] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1468.941617][ T5195] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1468.961985][T17943] audit: audit_lost=83048 audit_rate_limit=0 audit_backlog_limit=64 [ 1468.974751][T17944] audit: audit_lost=83049 audit_rate_limit=0 audit_backlog_limit=64 [ 1468.983216][T17943] audit: backlog limit exceeded [ 1468.985056][ T5195] audit: audit_lost=83050 audit_rate_limit=0 audit_backlog_limit=64 [ 1468.990712][T17944] audit: backlog limit exceeded [ 1469.004848][ T6692] libceph: connect (1)[c::]:6789 error -101 [ 1469.006759][ T5195] audit: backlog limit exceeded [ 1469.019511][ T6692] libceph: mon0 (1)[c::]:6789 connect error [ 1469.229864][T17937] ceph: No mds server is up or the cluster is laggy [ 1469.372391][T17950] hub 8-0:1.0: USB hub found [ 1469.378678][T17950] hub 8-0:1.0: 1 port detected [ 1469.533779][ T6692] libceph: connect (1)[c::]:6789 error -101 [ 1470.039835][T13187] usb 3-1: new full-speed USB device number 62 using dummy_hcd [ 1470.048848][ T6692] libceph: mon0 (1)[c::]:6789 connect error [ 1470.421853][T13187] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1470.573657][T13187] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1470.635016][T17954] siw: device registration error -23 [ 1471.297502][T13187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.500144][T13187] usb 3-1: config 0 descriptor?? [ 1471.532832][T17942] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1471.725020][T17964] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3240'. [ 1471.818386][T13187] usbhid 3-1:0.0: can't add hid device: -71 [ 1472.769492][T13187] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1472.823580][T13187] usb 3-1: USB disconnect, device number 62 [ 1472.990556][T17978] binder: 17974:17978 ioctl c0306201 0 returned -14 [ 1473.008876][T17975] o2cb: This node has not been configured. [ 1473.054094][T17975] o2cb: Cluster check failed. Fix errors before retrying. [ 1473.070112][T17975] (syz.4.3244,17975,0):user_dlm_register:674 ERROR: status = -22 [ 1473.079760][T17975] (syz.4.3244,17975,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1473.472517][T17986] 9pnet_fd: Insufficient options for proto=fd [ 1473.488426][T13187] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 1473.658897][ T30] kauditd_printk_skb: 6382 callbacks suppressed [ 1473.658918][ T30] audit: type=1400 audit(1749778608.689:312153): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7695 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1473.679529][ T7695] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1473.697850][T17982] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1473.702224][T17989] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1473.705298][T17982] audit: audit_lost=83702 audit_rate_limit=0 audit_backlog_limit=64 [ 1473.721388][T17989] audit: audit_lost=83703 audit_rate_limit=0 audit_backlog_limit=64 [ 1473.732587][T17990] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1473.740038][ T30] audit: type=1400 audit(1749778608.689:312154): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=7695 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1473.760682][T17982] audit: backlog limit exceeded [ 1473.778170][T17989] audit: backlog limit exceeded [ 1473.806879][T13187] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1473.836418][T13187] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1473.984515][T13187] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1474.162808][T13187] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1474.210173][T13187] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1474.807680][T13187] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1474.878433][T13187] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1474.906982][T13187] usb 10-1: Product: syz [ 1474.911323][T13187] usb 10-1: Manufacturer: syz [ 1474.993854][T13187] cdc_wdm 10-1:1.0: skipping garbage [ 1475.070672][T13187] cdc_wdm 10-1:1.0: skipping garbage [ 1475.118634][T13187] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1475.145059][T13187] cdc_wdm 10-1:1.0: Unknown control protocol [ 1475.763100][T18010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3256'. [ 1475.799767][T18010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3256'. [ 1475.936118][T18017] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3257'. [ 1477.055917][ T5942] usb 10-1: USB disconnect, device number 53 [ 1478.336738][T18041] overlayfs: missing 'workdir' [ 1478.434701][ T30] kauditd_printk_skb: 5729 callbacks suppressed [ 1478.434741][ T30] audit: type=1400 audit(1749778613.539:316037): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18040 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1478.918464][ T5195] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1478.925067][ T5195] audit: audit_lost=84308 audit_rate_limit=0 audit_backlog_limit=64 [ 1478.933429][T18040] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1478.933451][T13660] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1478.943808][T16883] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1478.948409][T13660] audit: audit_lost=84309 audit_rate_limit=0 audit_backlog_limit=64 [ 1478.953950][ C1] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1478.953970][ C1] audit: audit_lost=84310 audit_rate_limit=0 audit_backlog_limit=64 [ 1478.953990][ C1] audit: backlog limit exceeded [ 1480.165312][T18058] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3270'. [ 1480.668905][ T6692] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1481.545818][T13187] usb 9-1: new full-speed USB device number 64 using dummy_hcd [ 1481.846251][ T6692] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1481.901916][ T6692] usb 6-1: config 0 has no interface number 0 [ 1482.096825][ T6692] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1482.138394][ T6692] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.144115][T13187] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1482.152957][ T6692] usb 6-1: Product: syz [ 1482.165518][ T6692] usb 6-1: Manufacturer: syz [ 1482.170263][ T6692] usb 6-1: SerialNumber: syz [ 1482.185757][T13187] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1482.201394][ T6692] usb 6-1: config 0 descriptor?? [ 1482.221167][T13187] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1482.382774][T13187] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1482.407193][T13187] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.451538][T13187] usb 9-1: Product: syz [ 1482.455888][T13187] usb 9-1: Manufacturer: syz [ 1482.461788][T13187] usb 9-1: SerialNumber: syz [ 1482.471692][T13187] usb 9-1: config 0 descriptor?? [ 1482.478245][T18075] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1482.486557][T18075] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1482.501593][ T6692] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1482.510042][T13187] usb 9-1: ucan: probing device on interface #0 [ 1482.795390][ T6692] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1482.985576][T18089] vlan2: entered allmulticast mode [ 1482.990942][T18089] vlan1: entered allmulticast mode [ 1482.996450][T18089] veth0_vlan: entered allmulticast mode [ 1484.223233][T13187] usb 9-1: ucan: failed to retrieve device info [ 1484.229529][T13187] usb 9-1: ucan: probe failed; try to update the device firmware [ 1484.248373][ T30] kauditd_printk_skb: 4524 callbacks suppressed [ 1484.248392][ T30] audit: type=1400 audit(1749778618.295:319354): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18085 comm="syz.2.3278" name="newroot" dev="tmpfs" ino=2 [ 1484.256028][ T6692] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1484.289614][T17099] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1484.296355][ T30] audit: type=1400 audit(1749778618.295:319355): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18085 comm="syz.2.3278" name="/" dev="devtmpfs" ino=1 [ 1484.322297][T13660] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1484.327332][ T6692] usb 6-1: media controller created [ 1484.330194][T17099] audit: audit_lost=84726 audit_rate_limit=0 audit_backlog_limit=64 [ 1484.409944][T16594] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1484.416813][T13660] audit: audit_lost=84727 audit_rate_limit=0 audit_backlog_limit=64 [ 1484.467214][ T7746] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1484.467837][T17099] audit: backlog limit exceeded [ 1484.479704][ T5195] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1484.541755][ T6692] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1484.742157][ T6692] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 1484.769658][T13187] usb 9-1: USB disconnect, device number 64 [ 1485.532554][ T6692] usb 6-1: USB disconnect, device number 4 [ 1485.719143][T17133] udevd[17133]: setting mode of /dev/bus/usb/006/004 to 020664 failed: No such file or directory [ 1485.954276][T17133] udevd[17133]: setting owner of /dev/bus/usb/006/004 to uid=0, gid=0 failed: No such file or directory [ 1487.091373][T18119] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3286'. [ 1488.004812][ T7736] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 1488.044863][T18135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3292'. [ 1488.089564][T18136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3293'. [ 1488.204162][T18138] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1489.042857][ T30] kauditd_printk_skb: 8395 callbacks suppressed [ 1489.042878][ T30] audit: type=1400 audit(1749778623.806:324303): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=18131 comm="syz.8.3294" opid=18131 ocomm="syz.8.3294" [ 1489.071214][ T30] audit: type=1400 audit(1749778623.817:324304): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18131 comm="syz.8.3294" name="newroot" dev="tmpfs" ino=2 [ 1489.072126][T16594] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1489.091806][ T30] audit: type=1400 audit(1749778623.817:324305): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18131 comm="syz.8.3294" name="/" dev="devtmpfs" ino=1 [ 1489.108435][ T5195] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1489.117379][ T30] audit: type=1400 audit(1749778623.817:324306): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=18131 comm="syz.8.3294" name="sequencer" dev="devtmpfs" ino=1280 [ 1489.143306][ C0] vkms_vblank_simulate: vblank timer overrun [ 1489.145048][T18142] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1489.150864][T18141] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1489.157292][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1489.157315][ C1] audit: audit_lost=85878 audit_rate_limit=0 audit_backlog_limit=64 [ 1489.206551][ T7736] usb 10-1: config 0 has no interfaces? [ 1489.230224][ T7736] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1489.285229][ T7736] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.320829][ T7736] usb 10-1: config 0 descriptor?? [ 1489.686563][T18150] binder: 18144:18150 ioctl c0306201 0 returned -14 [ 1489.710620][T18122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1489.720276][T18150] o2cb: This node has not been configured. [ 1489.726110][T18150] o2cb: Cluster check failed. Fix errors before retrying. [ 1489.737417][T18150] (syz.5.3295,18150,0):user_dlm_register:674 ERROR: status = -22 [ 1489.745162][T18150] (syz.5.3295,18150,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1489.757112][T18122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1489.819314][T18152] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3296'. [ 1490.529101][ T9997] Bluetooth: hci3: command 0x0406 tx timeout [ 1490.971570][T18156] netlink: 'syz.9.3290': attribute type 4 has an invalid length. [ 1491.854313][ T6692] usb 10-1: USB disconnect, device number 54 [ 1492.303560][T18162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3298'. [ 1492.612098][T13884] block nbd0: Possible stuck request ffff888025360000: control (read@0,4096B). Runtime 30 seconds [ 1493.656014][T18174] fuse: Bad value for 'fd' [ 1493.662821][T18170] FAULT_INJECTION: forcing a failure. [ 1493.662821][T18170] name failslab, interval 1, probability 0, space 0, times 0 [ 1493.690417][T18170] CPU: 0 UID: 0 PID: 18170 Comm: syz.5.3300 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1493.690451][T18170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1493.690466][T18170] Call Trace: [ 1493.690476][T18170] [ 1493.690486][T18170] dump_stack_lvl+0x189/0x250 [ 1493.690525][T18170] ? __pfx____ratelimit+0x10/0x10 [ 1493.690569][T18170] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1493.690602][T18170] ? __pfx__printk+0x10/0x10 [ 1493.690630][T18170] ? __pfx___might_resched+0x10/0x10 [ 1493.690661][T18170] ? fs_reclaim_acquire+0x7d/0x100 [ 1493.690697][T18170] should_fail_ex+0x414/0x560 [ 1493.690731][T18170] should_failslab+0xa8/0x100 [ 1493.690761][T18170] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1493.690786][T18170] ? getname_flags+0xb8/0x540 [ 1493.690823][T18170] getname_flags+0xb8/0x540 [ 1493.690851][T18170] ? _copy_from_user+0x94/0xb0 [ 1493.690877][T18170] path_setxattrat+0x2ac/0x3a0 [ 1493.690910][T18170] ? __pfx_path_setxattrat+0x10/0x10 [ 1493.690929][T18170] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1493.690993][T18170] ? ksys_write+0x22a/0x250 [ 1493.691021][T18170] ? __pfx_ksys_write+0x10/0x10 [ 1493.691052][T18170] __x64_sys_setxattr+0xbc/0xe0 [ 1493.691088][T18170] do_syscall_64+0xfa/0x3b0 [ 1493.691110][T18170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.691131][T18170] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1493.691151][T18170] ? clear_bhb_loop+0x60/0xb0 [ 1493.691178][T18170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.691200][T18170] RIP: 0033:0x7f9acdd8e929 [ 1493.691220][T18170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1493.691239][T18170] RSP: 002b:00007f9acec02038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 1493.691262][T18170] RAX: ffffffffffffffda RBX: 00007f9acdfb5fa0 RCX: 00007f9acdd8e929 [ 1493.691279][T18170] RDX: 00002000000001c0 RSI: 0000200000000080 RDI: 0000200000000000 [ 1493.691296][T18170] RBP: 00007f9acec02090 R08: 0000000000000002 R09: 0000000000000000 [ 1493.691310][T18170] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001 [ 1493.691324][T18170] R13: 0000000000000000 R14: 00007f9acdfb5fa0 R15: 00007ffc86fb8958 [ 1493.691358][T18170] [ 1493.956794][ T30] kauditd_printk_skb: 5800 callbacks suppressed [ 1493.956815][ T30] audit: type=1400 audit(1749778629.969:327170): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18175 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1493.961640][T16594] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1493.963141][ T30] audit: type=1400 audit(1749778629.969:327171): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18175 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1493.983549][T16594] audit: audit_lost=86859 audit_rate_limit=0 audit_backlog_limit=64 [ 1493.989686][T13660] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1493.989706][T13660] audit: audit_lost=86860 audit_rate_limit=0 audit_backlog_limit=64 [ 1493.989723][T13660] audit: backlog limit exceeded [ 1493.989743][T13660] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1493.989764][T13660] audit: audit_lost=86861 audit_rate_limit=0 audit_backlog_limit=64 [ 1493.989781][T13660] audit: backlog limit exceeded [ 1494.420893][T18189] FAULT_INJECTION: forcing a failure. [ 1494.420893][T18189] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1494.485239][T18189] CPU: 0 UID: 0 PID: 18189 Comm: syz.9.3307 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1494.485271][T18189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1494.485286][T18189] Call Trace: [ 1494.485295][T18189] [ 1494.485305][T18189] dump_stack_lvl+0x189/0x250 [ 1494.485344][T18189] ? __pfx____ratelimit+0x10/0x10 [ 1494.485379][T18189] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1494.485412][T18189] ? __pfx__printk+0x10/0x10 [ 1494.485447][T18189] ? __might_fault+0xb0/0x130 [ 1494.485487][T18189] should_fail_ex+0x414/0x560 [ 1494.485521][T18189] _copy_from_iter+0x1db/0x16f0 [ 1494.485558][T18189] ? rcu_is_watching+0x15/0xb0 [ 1494.485592][T18189] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1494.485621][T18189] ? __pfx__copy_from_iter+0x10/0x10 [ 1494.485656][T18189] ? __build_skb_around+0x257/0x3e0 [ 1494.485686][T18189] ? netlink_sendmsg+0x642/0xb30 [ 1494.485710][T18189] ? skb_put+0x11b/0x210 [ 1494.485740][T18189] netlink_sendmsg+0x6b2/0xb30 [ 1494.485777][T18189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1494.485810][T18189] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1494.485832][T18189] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1494.485854][T18189] __sock_sendmsg+0x219/0x270 [ 1494.485885][T18189] ____sys_sendmsg+0x52d/0x830 [ 1494.485913][T18189] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1494.485944][T18189] ? import_iovec+0x74/0xa0 [ 1494.485969][T18189] ___sys_sendmsg+0x21f/0x2a0 [ 1494.485994][T18189] ? __pfx____sys_sendmsg+0x10/0x10 [ 1494.486048][T18189] ? __fget_files+0x2a/0x420 [ 1494.486072][T18189] ? __fget_files+0x3a0/0x420 [ 1494.486105][T18189] __sys_sendmmsg+0x227/0x430 [ 1494.486136][T18189] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1494.486161][T18189] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1494.486212][T18189] ? ksys_write+0x22a/0x250 [ 1494.486235][T18189] ? __pfx_ksys_write+0x10/0x10 [ 1494.486254][T18189] ? rcu_is_watching+0x15/0xb0 [ 1494.486285][T18189] __x64_sys_sendmmsg+0xa0/0xc0 [ 1494.486310][T18189] do_syscall_64+0xfa/0x3b0 [ 1494.486326][T18189] ? lockdep_hardirqs_on+0x9c/0x150 [ 1494.486352][T18189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.486370][T18189] ? clear_bhb_loop+0x60/0xb0 [ 1494.486392][T18189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.486409][T18189] RIP: 0033:0x7f2c73b8e929 [ 1494.486425][T18189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1494.486447][T18189] RSP: 002b:00007f2c719f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1494.486467][T18189] RAX: ffffffffffffffda RBX: 00007f2c73db5fa0 RCX: 00007f2c73b8e929 [ 1494.486481][T18189] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000004 [ 1494.486494][T18189] RBP: 00007f2c719f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1494.486505][T18189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1494.486516][T18189] R13: 0000000000000000 R14: 00007f2c73db5fa0 R15: 00007ffcaf129ab8 [ 1494.486543][T18189] [ 1494.786153][T18194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3308'. [ 1495.746994][T18199] binder: 18195:18199 ioctl c0306201 0 returned -14 [ 1495.756267][T18199] o2cb: This node has not been configured. [ 1495.762157][T18199] o2cb: Cluster check failed. Fix errors before retrying. [ 1495.769319][T18199] (syz.9.3310,18199,1):user_dlm_register:674 ERROR: status = -22 [ 1495.777080][T18199] (syz.9.3310,18199,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1496.316548][ T6692] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1496.441168][T18213] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3315'. [ 1496.471419][ T6692] usb 6-1: Using ep0 maxpacket: 32 [ 1496.504204][ T6692] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1496.506277][T18216] netlink: 'syz.9.3316': attribute type 1 has an invalid length. [ 1496.563273][ T6692] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1496.598767][ T6692] usb 6-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 1496.629431][ T6692] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.674876][ T6692] usb 6-1: config 0 descriptor?? [ 1496.873060][T18223] FAULT_INJECTION: forcing a failure. [ 1496.873060][T18223] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1496.944298][T18223] CPU: 0 UID: 0 PID: 18223 Comm: syz.9.3320 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1496.944333][T18223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1496.944346][T18223] Call Trace: [ 1496.944355][T18223] [ 1496.944364][T18223] dump_stack_lvl+0x189/0x250 [ 1496.944391][T18223] ? __pfx____ratelimit+0x10/0x10 [ 1496.944422][T18223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1496.944455][T18223] ? __pfx__printk+0x10/0x10 [ 1496.944484][T18223] ? __might_fault+0xb0/0x130 [ 1496.944516][T18223] should_fail_ex+0x414/0x560 [ 1496.944539][T18223] _copy_from_iter+0x1db/0x16f0 [ 1496.944571][T18223] ? rcu_is_watching+0x15/0xb0 [ 1496.944606][T18223] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1496.944635][T18223] ? __pfx__copy_from_iter+0x10/0x10 [ 1496.944671][T18223] ? __build_skb_around+0x257/0x3e0 [ 1496.944701][T18223] ? skb_put+0x11b/0x210 [ 1496.944731][T18223] pfkey_sendmsg+0x230/0x1090 [ 1496.944768][T18223] ? smack_socket_sendmsg+0x1a7/0x520 [ 1496.944802][T18223] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1496.944821][T18223] ? __lock_acquire+0xab9/0xd20 [ 1496.944850][T18223] ? __lock_acquire+0xab9/0xd20 [ 1496.944874][T18223] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1496.944922][T18223] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1496.944947][T18223] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 1496.944968][T18223] __sock_sendmsg+0x219/0x270 [ 1496.944994][T18223] ____sys_sendmsg+0x52d/0x830 [ 1496.945019][T18223] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1496.945059][T18223] ? import_iovec+0x74/0xa0 [ 1496.945084][T18223] ___sys_sendmsg+0x21f/0x2a0 [ 1496.945113][T18223] ? __pfx____sys_sendmsg+0x10/0x10 [ 1496.945164][T18223] ? __fget_files+0x2a/0x420 [ 1496.945194][T18223] ? __fget_files+0x3a0/0x420 [ 1496.945234][T18223] __sys_sendmmsg+0x227/0x430 [ 1496.945265][T18223] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1496.945283][T18223] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1496.945336][T18223] ? ksys_write+0x22a/0x250 [ 1496.945365][T18223] ? __pfx_ksys_write+0x10/0x10 [ 1496.945386][T18223] ? rcu_is_watching+0x15/0xb0 [ 1496.945419][T18223] __x64_sys_sendmmsg+0xa0/0xc0 [ 1496.945441][T18223] do_syscall_64+0xfa/0x3b0 [ 1496.945454][T18223] ? lockdep_hardirqs_on+0x9c/0x150 [ 1496.945492][T18223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1496.945514][T18223] ? clear_bhb_loop+0x60/0xb0 [ 1496.945540][T18223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1496.945560][T18223] RIP: 0033:0x7f2c73b8e929 [ 1496.945574][T18223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1496.945588][T18223] RSP: 002b:00007f2c719f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1496.945604][T18223] RAX: ffffffffffffffda RBX: 00007f2c73db5fa0 RCX: 00007f2c73b8e929 [ 1496.945619][T18223] RDX: 032bc45944b084a6 RSI: 0000200000000180 RDI: 0000000000000003 [ 1496.945635][T18223] RBP: 00007f2c719f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1496.945649][T18223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1496.945662][T18223] R13: 0000000000000000 R14: 00007f2c73db5fa0 R15: 00007ffcaf129ab8 [ 1496.945694][T18223] [ 1497.254084][T18208] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1497.271671][T18208] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1497.322451][ T6692] hkems 0003:2006:0118.0014: item fetching failed at offset 0/2 [ 1497.359043][ T6692] hkems 0003:2006:0118.0014: parse failed [ 1497.371231][ T6692] hkems 0003:2006:0118.0014: probe with driver hkems failed with error -22 [ 1497.693568][T18234] FAULT_INJECTION: forcing a failure. [ 1497.693568][T18234] name failslab, interval 1, probability 0, space 0, times 0 [ 1497.726224][T18234] CPU: 0 UID: 0 PID: 18234 Comm: syz.4.3323 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1497.726257][T18234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1497.726271][T18234] Call Trace: [ 1497.726280][T18234] [ 1497.726291][T18234] dump_stack_lvl+0x189/0x250 [ 1497.726329][T18234] ? __pfx____ratelimit+0x10/0x10 [ 1497.726363][T18234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1497.726396][T18234] ? __pfx__printk+0x10/0x10 [ 1497.726425][T18234] ? __pfx___might_resched+0x10/0x10 [ 1497.726464][T18234] should_fail_ex+0x414/0x560 [ 1497.726499][T18234] should_failslab+0xa8/0x100 [ 1497.726530][T18234] __kmalloc_noprof+0xcb/0x4f0 [ 1497.726557][T18234] ? sk_prot_alloc+0xe7/0x220 [ 1497.726589][T18234] sk_prot_alloc+0xe7/0x220 [ 1497.726613][T18234] ? sk_alloc+0x24/0x370 [ 1497.726642][T18234] sk_alloc+0x3a/0x370 [ 1497.726666][T18234] ? bpf_ctx_init+0x167/0x1d0 [ 1497.726695][T18234] bpf_prog_test_run_skb+0x2ed/0x1560 [ 1497.726719][T18234] ? __fget_files+0x2a/0x420 [ 1497.726765][T18234] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1497.726792][T18234] bpf_prog_test_run+0x2c7/0x340 [ 1497.726828][T18234] __sys_bpf+0x4a4/0x860 [ 1497.726858][T18234] ? __pfx___sys_bpf+0x10/0x10 [ 1497.726901][T18234] ? ksys_write+0x22a/0x250 [ 1497.726934][T18234] ? __pfx_ksys_write+0x10/0x10 [ 1497.726957][T18234] ? rcu_is_watching+0x15/0xb0 [ 1497.726998][T18234] __x64_sys_bpf+0x7c/0x90 [ 1497.727025][T18234] do_syscall_64+0xfa/0x3b0 [ 1497.727043][T18234] ? lockdep_hardirqs_on+0x9c/0x150 [ 1497.727075][T18234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1497.727097][T18234] ? clear_bhb_loop+0x60/0xb0 [ 1497.727124][T18234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1497.727157][T18234] RIP: 0033:0x7fe698d8e929 [ 1497.727176][T18234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1497.727201][T18234] RSP: 002b:00007fe699cdd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1497.727224][T18234] RAX: ffffffffffffffda RBX: 00007fe698fb5fa0 RCX: 00007fe698d8e929 [ 1497.727240][T18234] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1497.727254][T18234] RBP: 00007fe699cdd090 R08: 0000000000000000 R09: 0000000000000000 [ 1497.727268][T18234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1497.727280][T18234] R13: 0000000000000000 R14: 00007fe698fb5fa0 R15: 00007ffe55880e58 [ 1497.727312][T18234] [ 1498.766430][T13187] usb 6-1: USB disconnect, device number 5 [ 1498.774769][ T30] kauditd_printk_skb: 8272 callbacks suppressed [ 1498.774788][ T30] audit: type=1400 audit(1749778635.061:331321): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=5195 comm="udevd" name="/" dev="sda1" ino=2 [ 1498.800883][T17133] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1498.800917][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1498.808242][T17099] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1498.814062][ C1] audit: audit_lost=88236 audit_rate_limit=0 audit_backlog_limit=64 [ 1498.821883][ T5195] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1498.828670][ C1] audit: backlog limit exceeded [ 1498.829242][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1498.829261][ C1] audit: audit_lost=88237 audit_rate_limit=0 audit_backlog_limit=64 [ 1498.829278][ C1] audit: backlog limit exceeded [ 1500.058237][T18252] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3329'. [ 1500.751422][T18256] FAULT_INJECTION: forcing a failure. [ 1500.751422][T18256] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1500.815570][T18256] CPU: 1 UID: 0 PID: 18256 Comm: syz.4.3331 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1500.815603][T18256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1500.815617][T18256] Call Trace: [ 1500.815627][T18256] [ 1500.815637][T18256] dump_stack_lvl+0x189/0x250 [ 1500.815675][T18256] ? __pfx____ratelimit+0x10/0x10 [ 1500.815708][T18256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1500.815741][T18256] ? __pfx__printk+0x10/0x10 [ 1500.815763][T18256] ? __might_fault+0xb0/0x130 [ 1500.815802][T18256] should_fail_ex+0x414/0x560 [ 1500.815836][T18256] _copy_from_iter+0x1db/0x16f0 [ 1500.815879][T18256] ? rcu_is_watching+0x15/0xb0 [ 1500.815913][T18256] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1500.815942][T18256] ? __pfx__copy_from_iter+0x10/0x10 [ 1500.815977][T18256] ? __build_skb_around+0x257/0x3e0 [ 1500.816005][T18256] ? netlink_sendmsg+0x642/0xb30 [ 1500.816029][T18256] ? skb_put+0x11b/0x210 [ 1500.816059][T18256] netlink_sendmsg+0x6b2/0xb30 [ 1500.816103][T18256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1500.816138][T18256] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1500.816165][T18256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1500.816192][T18256] __sock_sendmsg+0x219/0x270 [ 1500.816230][T18256] ____sys_sendmsg+0x505/0x830 [ 1500.816264][T18256] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1500.816303][T18256] ? import_iovec+0x74/0xa0 [ 1500.816329][T18256] ___sys_sendmsg+0x21f/0x2a0 [ 1500.816360][T18256] ? __pfx____sys_sendmsg+0x10/0x10 [ 1500.816429][T18256] ? __fget_files+0x2a/0x420 [ 1500.816457][T18256] ? __fget_files+0x3a0/0x420 [ 1500.816499][T18256] __x64_sys_sendmsg+0x19b/0x260 [ 1500.816530][T18256] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1500.816569][T18256] ? __pfx_ksys_write+0x10/0x10 [ 1500.816592][T18256] ? rcu_is_watching+0x15/0xb0 [ 1500.816629][T18256] ? do_syscall_64+0xbe/0x3b0 [ 1500.816655][T18256] do_syscall_64+0xfa/0x3b0 [ 1500.816673][T18256] ? lockdep_hardirqs_on+0x9c/0x150 [ 1500.816704][T18256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1500.816726][T18256] ? clear_bhb_loop+0x60/0xb0 [ 1500.816753][T18256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1500.816774][T18256] RIP: 0033:0x7fe698d8e929 [ 1500.816793][T18256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1500.816812][T18256] RSP: 002b:00007fe699cdd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1500.816836][T18256] RAX: ffffffffffffffda RBX: 00007fe698fb5fa0 RCX: 00007fe698d8e929 [ 1500.816851][T18256] RDX: 0000000000000000 RSI: 0000200000000f40 RDI: 0000000000000003 [ 1500.816866][T18256] RBP: 00007fe699cdd090 R08: 0000000000000000 R09: 0000000000000000 [ 1500.816879][T18256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1500.816892][T18256] R13: 0000000000000000 R14: 00007fe698fb5fa0 R15: 00007ffe55880e58 [ 1500.816925][T18256] [ 1501.608541][ T9997] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1501.623426][ T9997] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1501.640598][ T9997] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1501.682366][ T9997] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1501.699917][ T9997] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1503.545387][ T30] kauditd_printk_skb: 7808 callbacks suppressed [ 1503.545409][ T30] audit: type=1400 audit(1749778640.047:333511): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18281 comm="syz.9.3338" name="597" dev="tmpfs" ino=3211 [ 1503.549488][T16824] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 1503.563521][ T30] audit: type=1400 audit(1749778640.047:333512): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18281 comm="syz.9.3338" name="597" dev="tmpfs" ino=3211 [ 1503.618328][ T7746] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1503.624569][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1503.631499][ C1] audit: audit_lost=90112 audit_rate_limit=0 audit_backlog_limit=64 [ 1503.635569][T18268] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1503.639551][ C1] audit: backlog limit exceeded [ 1503.640335][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1503.647188][T18268] audit: audit_lost=90113 audit_rate_limit=0 audit_backlog_limit=64 [ 1503.651032][ C1] audit: audit_lost=90114 audit_rate_limit=0 audit_backlog_limit=64 [ 1503.820725][T16824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1503.841447][T16824] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1503.894705][T16824] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1503.954039][T16824] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1503.975142][T16824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.997779][T16824] usb 5-1: Product: syz [ 1504.002034][T16824] usb 5-1: Manufacturer: syz [ 1504.026692][T16824] usb 5-1: SerialNumber: syz [ 1504.048310][T16824] usb 5-1: config 0 descriptor?? [ 1504.070367][T18264] chnl_net:caif_netlink_parms(): no params data found [ 1504.093164][T18268] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1504.100640][T18268] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1504.122231][T16824] usb 5-1: ucan: probing device on interface #0 [ 1504.573746][T18264] bridge0: port 1(bridge_slave_0) entered blocking state [ 1504.581908][T18264] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.587499][ T5942] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 1504.590868][T18264] bridge_slave_0: entered allmulticast mode [ 1504.609010][T18305] XFS (nullb0): Invalid superblock magic number [ 1504.612171][T18264] bridge_slave_0: entered promiscuous mode [ 1504.627780][T18264] bridge0: port 2(bridge_slave_1) entered blocking state [ 1504.636010][T18264] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.642980][T16597] Bluetooth: hci2: command tx timeout [ 1504.643372][T18264] bridge_slave_1: entered allmulticast mode [ 1504.689026][T18264] bridge_slave_1: entered promiscuous mode [ 1504.815892][ T5942] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1504.846452][ T5942] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1504.910134][ T5942] usb 9-1: config 0 descriptor?? [ 1504.932348][T18264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1504.969600][T18264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1505.165205][T18264] team0: Port device team_slave_0 added [ 1505.177892][T18264] team0: Port device team_slave_1 added [ 1505.179516][ T5942] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1505.250184][T18264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1505.264819][T18264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1505.323218][T18264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1505.323422][T16824] usb 5-1: ucan: failed to retrieve device info [ 1505.347244][T16824] usb 5-1: ucan: probe failed; try to update the device firmware [ 1505.420371][T18264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1505.440495][T18264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1505.564077][T18264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1505.598173][T16772] usb 5-1: USB disconnect, device number 30 [ 1505.713801][T18297] macvtap1: entered allmulticast mode [ 1505.719448][T18297] veth0_macvtap: entered allmulticast mode [ 1505.780838][ T5942] [drm:udl_init] *ERROR* Selecting channel failed [ 1506.139020][ T5942] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 1506.215459][ T5942] [drm] Initialized udl on minor 2 [ 1506.466638][ T5942] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1506.545007][ T5942] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1506.568207][T18264] hsr_slave_0: entered promiscuous mode [ 1506.624014][T18264] hsr_slave_1: entered promiscuous mode [ 1506.630864][T16597] Bluetooth: hci2: command tx timeout [ 1506.638168][T16824] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1506.655275][ T5942] usb 9-1: USB disconnect, device number 65 [ 1506.679636][T16824] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 1506.683100][T18264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1506.730934][T18264] Cannot create hsr debugfs directory [ 1507.282932][T16824] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1507.464391][T16824] usb 6-1: Using ep0 maxpacket: 16 [ 1507.480772][T16824] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1507.639080][T16824] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1507.657388][T16824] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1507.752808][T16824] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1507.768879][T16824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.788192][T16824] usb 6-1: Product: syz [ 1507.792427][T16824] usb 6-1: Manufacturer: syz [ 1507.800528][T16824] usb 6-1: SerialNumber: syz [ 1507.841056][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1507.848662][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1507.977076][T18264] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1508.138234][T18264] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1508.252030][T18264] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1508.330863][ T30] kauditd_printk_skb: 9254 callbacks suppressed [ 1508.330889][ T30] audit: type=1400 audit(1749778645.013:340552): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=18332 comm="syz.5.3349" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 1508.522827][ T30] audit: type=1400 audit(1749778645.013:340553): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=18332 comm="syz.5.3349" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 1508.598510][T16597] Bluetooth: hci2: command tx timeout [ 1508.690073][T18348] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1508.697065][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1508.697089][ C1] audit: audit_lost=90853 audit_rate_limit=0 audit_backlog_limit=64 [ 1508.697108][ C1] audit: backlog limit exceeded [ 1508.717418][T18348] audit: audit_lost=90854 audit_rate_limit=0 audit_backlog_limit=64 [ 1508.725571][T18348] audit: backlog limit exceeded [ 1508.730637][T18348] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1508.737174][T18348] audit: audit_lost=90855 audit_rate_limit=0 audit_backlog_limit=64 [ 1509.089032][T18264] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.072620][T16824] usb 6-1: 0:2 : does not exist [ 1510.084388][T16824] usb 6-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1510.121702][ T5942] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 1510.585895][T16597] Bluetooth: hci2: command tx timeout [ 1510.602939][ T5942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1510.991719][ T5942] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1511.010113][T18354] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3355'. [ 1511.056969][T16824] usb 6-1: USB disconnect, device number 6 [ 1511.074444][ T5942] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1511.156116][ T5942] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1511.185853][ T5942] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1511.225366][ T5942] usb 5-1: Product: syz [ 1511.263924][ T5942] usb 5-1: Manufacturer: syz [ 1511.452381][ T5942] usb 5-1: SerialNumber: syz [ 1511.486043][ T5942] usb 5-1: config 0 descriptor?? [ 1511.527281][T18357] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1511.535591][T18357] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1511.545469][ T5942] usb 5-1: ucan: probing device on interface #0 [ 1511.626382][T18369] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3359'. [ 1512.051551][T17133] udevd[17133]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1512.183787][T18264] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1512.304214][T18264] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1512.370602][T18375] netlink: 'syz.8.3360': attribute type 83 has an invalid length. [ 1512.400944][T18264] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1512.463570][T18264] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1512.789508][ T5942] usb 5-1: ucan: failed to retrieve device info [ 1512.799885][T18264] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1512.812000][ T5942] usb 5-1: ucan: probe failed; try to update the device firmware [ 1512.882546][T18264] 8021q: adding VLAN 0 to HW filter on device team0 [ 1512.977733][ T3461] bridge0: port 1(bridge_slave_0) entered blocking state [ 1512.985061][ T3461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1513.016138][ T3461] bridge0: port 2(bridge_slave_1) entered blocking state [ 1513.023481][ T3461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1513.033312][ T5942] usb 5-1: USB disconnect, device number 31 [ 1513.103225][ T30] kauditd_printk_skb: 6205 callbacks suppressed [ 1513.103247][ T30] audit: type=1400 audit(1749778650.052:344944): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13660 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1513.106676][ T5195] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1513.110357][T18390] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1513.136152][T17133] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1513.143238][ T30] audit: type=1400 audit(1749778650.084:344980): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=13660 comm="syz-executor" name="268" dev="tmpfs" ino=1464 [ 1513.160848][T17099] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1513.191026][T16883] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1513.192153][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1513.197580][T16883] audit: audit_lost=91449 audit_rate_limit=0 audit_backlog_limit=64 [ 1513.197599][T16883] audit: backlog limit exceeded [ 1514.126675][T18406] netlink: 88 bytes leftover after parsing attributes in process `syz.9.3367'. [ 1514.418587][T18409] FAULT_INJECTION: forcing a failure. [ 1514.418587][T18409] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1514.470946][T18409] CPU: 1 UID: 0 PID: 18409 Comm: syz.5.3369 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1514.470978][T18409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1514.470993][T18409] Call Trace: [ 1514.471002][T18409] [ 1514.471012][T18409] dump_stack_lvl+0x189/0x250 [ 1514.471049][T18409] ? __pfx____ratelimit+0x10/0x10 [ 1514.471082][T18409] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1514.471114][T18409] ? __pfx__printk+0x10/0x10 [ 1514.471137][T18409] ? __might_fault+0xb0/0x130 [ 1514.471194][T18409] should_fail_ex+0x414/0x560 [ 1514.471228][T18409] _copy_from_iter+0x1db/0x16f0 [ 1514.471267][T18409] ? rcu_is_watching+0x15/0xb0 [ 1514.471301][T18409] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1514.471331][T18409] ? __pfx__copy_from_iter+0x10/0x10 [ 1514.471366][T18409] ? __build_skb_around+0x257/0x3e0 [ 1514.471395][T18409] ? netlink_sendmsg+0x642/0xb30 [ 1514.471420][T18409] ? skb_put+0x11b/0x210 [ 1514.471450][T18409] netlink_sendmsg+0x6b2/0xb30 [ 1514.471488][T18409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1514.471532][T18409] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1514.471559][T18409] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1514.471587][T18409] __sock_sendmsg+0x219/0x270 [ 1514.471625][T18409] ____sys_sendmsg+0x505/0x830 [ 1514.471660][T18409] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1514.471699][T18409] ? import_iovec+0x74/0xa0 [ 1514.471726][T18409] ___sys_sendmsg+0x21f/0x2a0 [ 1514.471757][T18409] ? __pfx____sys_sendmsg+0x10/0x10 [ 1514.471826][T18409] ? __fget_files+0x2a/0x420 [ 1514.471856][T18409] ? __fget_files+0x3a0/0x420 [ 1514.471907][T18409] __x64_sys_sendmsg+0x19b/0x260 [ 1514.471937][T18409] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1514.471976][T18409] ? __pfx_ksys_write+0x10/0x10 [ 1514.471999][T18409] ? rcu_is_watching+0x15/0xb0 [ 1514.472036][T18409] ? do_syscall_64+0xbe/0x3b0 [ 1514.472062][T18409] do_syscall_64+0xfa/0x3b0 [ 1514.472081][T18409] ? lockdep_hardirqs_on+0x9c/0x150 [ 1514.472111][T18409] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1514.472133][T18409] ? clear_bhb_loop+0x60/0xb0 [ 1514.472158][T18409] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1514.472179][T18409] RIP: 0033:0x7f9acdd8e929 [ 1514.472197][T18409] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1514.472215][T18409] RSP: 002b:00007f9acec02038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1514.472238][T18409] RAX: ffffffffffffffda RBX: 00007f9acdfb5fa0 RCX: 00007f9acdd8e929 [ 1514.472253][T18409] RDX: 0000000000004004 RSI: 0000200000000180 RDI: 0000000000000003 [ 1514.472267][T18409] RBP: 00007f9acec02090 R08: 0000000000000000 R09: 0000000000000000 [ 1514.472280][T18409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1514.472292][T18409] R13: 0000000000000000 R14: 00007f9acdfb5fa0 R15: 00007ffc86fb8958 [ 1514.472323][T18409] [ 1514.849008][T18415] FAULT_INJECTION: forcing a failure. [ 1514.849008][T18415] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1514.897614][T18415] CPU: 1 UID: 0 PID: 18415 Comm: syz.4.3371 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1514.897650][T18415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1514.897664][T18415] Call Trace: [ 1514.897674][T18415] [ 1514.897684][T18415] dump_stack_lvl+0x189/0x250 [ 1514.897722][T18415] ? __pfx____ratelimit+0x10/0x10 [ 1514.897756][T18415] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1514.897789][T18415] ? __pfx__printk+0x10/0x10 [ 1514.897814][T18415] ? fs_reclaim_acquire+0x7d/0x100 [ 1514.897857][T18415] should_fail_ex+0x414/0x560 [ 1514.897892][T18415] prepare_alloc_pages+0x213/0x610 [ 1514.897933][T18415] __alloc_frozen_pages_noprof+0x123/0x370 [ 1514.897972][T18415] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1514.898015][T18415] ? policy_nodemask+0x27c/0x720 [ 1514.898049][T18415] alloc_pages_mpol+0x232/0x4a0 [ 1514.898083][T18415] folio_alloc_mpol_noprof+0x39/0x70 [ 1514.898114][T18415] shmem_alloc_and_add_folio+0x447/0xf60 [ 1514.898146][T18415] ? filemap_get_entry+0xad/0x2f0 [ 1514.898170][T18415] ? filemap_get_entry+0xad/0x2f0 [ 1514.898191][T18415] ? filemap_get_entry+0xad/0x2f0 [ 1514.898216][T18415] ? filemap_get_entry+0x28f/0x2f0 [ 1514.898244][T18415] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1514.898278][T18415] ? shmem_allowable_huge_orders+0x1f8/0x420 [ 1514.898309][T18415] shmem_get_folio_gfp+0x59d/0x1660 [ 1514.898356][T18415] shmem_fallocate+0x80f/0xde0 [ 1514.898408][T18415] ? __pfx_shmem_fallocate+0x10/0x10 [ 1514.898443][T18415] ? rcu_read_lock_any_held+0xb3/0x120 [ 1514.898488][T18415] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1514.898539][T18415] vfs_fallocate+0x6a0/0x830 [ 1514.898574][T18415] ? __pfx_vfs_fallocate+0x10/0x10 [ 1514.898613][T18415] file_ioctl+0x611/0x780 [ 1514.898641][T18415] ? __pfx_file_ioctl+0x10/0x10 [ 1514.898668][T18415] ? __pfx____ratelimit+0x10/0x10 [ 1514.898696][T18415] ? auditd_test_task+0x22/0x280 [ 1514.898748][T18415] ? audit_log_lost+0x164/0x1e0 [ 1514.898771][T18415] ? audit_log_start+0x3f1/0x870 [ 1514.898800][T18415] do_vfs_ioctl+0xe80/0x1990 [ 1514.898827][T18415] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1514.898859][T18415] ? kasan_quarantine_put+0xdd/0x220 [ 1514.898883][T18415] ? __pfx_smack_log_callback+0x10/0x10 [ 1514.898907][T18415] ? common_lsm_audit+0xf3/0x2e0 [ 1514.898942][T18415] ? __pfx_common_lsm_audit+0x10/0x10 [ 1514.898976][T18415] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1514.899004][T18415] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 1514.899036][T18415] ? smack_log+0x394/0x3f0 [ 1514.899059][T18415] ? __pfx_smack_log+0x10/0x10 [ 1514.899081][T18415] ? smk_access+0x14c/0x4e0 [ 1514.899111][T18415] ? smk_tskacc+0x2fc/0x370 [ 1514.899138][T18415] ? smack_file_ioctl+0x24a/0x340 [ 1514.899166][T18415] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1514.899204][T18415] ? __fget_files+0x2a/0x420 [ 1514.899232][T18415] ? __fget_files+0x3a0/0x420 [ 1514.899260][T18415] ? __fget_files+0x2a/0x420 [ 1514.899293][T18415] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1514.899327][T18415] __se_sys_ioctl+0x82/0x170 [ 1514.899354][T18415] do_syscall_64+0xfa/0x3b0 [ 1514.899373][T18415] ? lockdep_hardirqs_on+0x9c/0x150 [ 1514.899404][T18415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1514.899426][T18415] ? clear_bhb_loop+0x60/0xb0 [ 1514.899454][T18415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1514.899475][T18415] RIP: 0033:0x7fe698d8e929 [ 1514.899524][T18415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1514.899543][T18415] RSP: 002b:00007fe699cdd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1514.899565][T18415] RAX: ffffffffffffffda RBX: 00007fe698fb5fa0 RCX: 00007fe698d8e929 [ 1514.899582][T18415] RDX: 0000200000000280 RSI: 0000000040305828 RDI: 0000000000000003 [ 1514.899596][T18415] RBP: 00007fe699cdd090 R08: 0000000000000000 R09: 0000000000000000 [ 1514.899610][T18415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1514.899623][T18415] R13: 0000000000000000 R14: 00007fe698fb5fa0 R15: 00007ffe55880e58 [ 1514.899658][T18415] [ 1515.321423][T18417] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3370'. [ 1515.391957][T18419] netlink: 'syz.5.3372': attribute type 83 has an invalid length. [ 1515.634811][T18264] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1515.917918][T18264] veth0_vlan: entered promiscuous mode [ 1515.963749][T18426] FAULT_INJECTION: forcing a failure. [ 1515.963749][T18426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1516.104899][T18426] CPU: 0 UID: 0 PID: 18426 Comm: syz.5.3376 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1516.104934][T18426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1516.104947][T18426] Call Trace: [ 1516.104956][T18426] [ 1516.104966][T18426] dump_stack_lvl+0x189/0x250 [ 1516.105004][T18426] ? __pfx____ratelimit+0x10/0x10 [ 1516.105037][T18426] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1516.105070][T18426] ? __pfx__printk+0x10/0x10 [ 1516.105092][T18426] ? __might_fault+0xb0/0x130 [ 1516.105149][T18426] should_fail_ex+0x414/0x560 [ 1516.105184][T18426] _copy_from_iter+0x1db/0x16f0 [ 1516.105223][T18426] ? rcu_is_watching+0x15/0xb0 [ 1516.105258][T18426] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1516.105287][T18426] ? __pfx__copy_from_iter+0x10/0x10 [ 1516.105323][T18426] ? __build_skb_around+0x257/0x3e0 [ 1516.105352][T18426] ? netlink_sendmsg+0x642/0xb30 [ 1516.105378][T18426] ? skb_put+0x11b/0x210 [ 1516.105408][T18426] netlink_sendmsg+0x6b2/0xb30 [ 1516.105446][T18426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1516.105483][T18426] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1516.105510][T18426] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1516.105538][T18426] __sock_sendmsg+0x219/0x270 [ 1516.105576][T18426] ____sys_sendmsg+0x505/0x830 [ 1516.105611][T18426] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1516.105658][T18426] ? import_iovec+0x74/0xa0 [ 1516.105684][T18426] ___sys_sendmsg+0x21f/0x2a0 [ 1516.105716][T18426] ? __pfx____sys_sendmsg+0x10/0x10 [ 1516.105790][T18426] ? __fget_files+0x2a/0x420 [ 1516.105819][T18426] ? __fget_files+0x3a0/0x420 [ 1516.105861][T18426] __x64_sys_sendmsg+0x19b/0x260 [ 1516.105894][T18426] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1516.105933][T18426] ? __pfx_ksys_write+0x10/0x10 [ 1516.105957][T18426] ? rcu_is_watching+0x15/0xb0 [ 1516.105994][T18426] ? do_syscall_64+0xbe/0x3b0 [ 1516.106020][T18426] do_syscall_64+0xfa/0x3b0 [ 1516.106039][T18426] ? lockdep_hardirqs_on+0x9c/0x150 [ 1516.106071][T18426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.106093][T18426] ? clear_bhb_loop+0x60/0xb0 [ 1516.106121][T18426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.106143][T18426] RIP: 0033:0x7f9acdd8e929 [ 1516.106162][T18426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1516.106183][T18426] RSP: 002b:00007f9acec02038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1516.106206][T18426] RAX: ffffffffffffffda RBX: 00007f9acdfb5fa0 RCX: 00007f9acdd8e929 [ 1516.106223][T18426] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1516.106237][T18426] RBP: 00007f9acec02090 R08: 0000000000000000 R09: 0000000000000000 [ 1516.106251][T18426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1516.106265][T18426] R13: 0000000000000000 R14: 00007f9acdfb5fa0 R15: 00007ffc86fb8958 [ 1516.106299][T18426] [ 1516.411163][T18264] veth1_vlan: entered promiscuous mode [ 1517.632069][T18264] veth0_macvtap: entered promiscuous mode [ 1517.647510][T18264] veth1_macvtap: entered promiscuous mode [ 1517.671134][T18264] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1517.734116][T18264] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1517.760444][ T5984] usb 9-1: new full-speed USB device number 66 using dummy_hcd [ 1517.781560][T18264] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1517.910773][ T30] kauditd_printk_skb: 7864 callbacks suppressed [ 1517.910789][ T30] audit: type=1400 audit(1749778655.144:348783): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=18427 comm="syz.8.3374" path="/dev/raw-gadget" dev="devtmpfs" ino=821 [ 1517.938196][T18264] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1517.947382][T18264] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1517.966097][ T5195] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1517.966144][ T30] audit: type=1400 audit(1749778655.186:348784): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=18438 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1517.993700][T18264] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1518.008811][T18441] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1518.026225][T18441] audit: audit_lost=92806 audit_rate_limit=0 audit_backlog_limit=64 [ 1518.035385][ T5195] audit: audit_lost=92807 audit_rate_limit=0 audit_backlog_limit=64 [ 1518.037633][T18435] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1518.050351][T18435] audit: audit_lost=92808 audit_rate_limit=0 audit_backlog_limit=64 [ 1518.058715][T18435] audit: backlog limit exceeded [ 1518.063865][T18435] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1518.072292][ T5984] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1518.091549][ T5984] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1518.105568][ T5984] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 1518.121543][T18439] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3378'. [ 1518.161662][ T5984] usb 9-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1518.221268][ T5984] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.224595][T18442] 9pnet_fd: Insufficient options for proto=fd [ 1518.299331][ T5984] usb 9-1: Product: syz [ 1518.348509][ T5984] usb 9-1: Manufacturer: syz [ 1518.375063][ T5984] usb 9-1: SerialNumber: syz [ 1518.393964][ T5984] usb 9-1: config 0 descriptor?? [ 1518.426095][T18435] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1518.433992][T18435] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1518.443123][ T5984] usb 9-1: ucan: probing device on interface #0 [ 1518.469779][ T3461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1518.527158][ T3461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1519.227403][ T3461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1519.270598][ T3461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1519.869519][ T5984] usb 9-1: ucan: failed to retrieve device info [ 1520.110929][ T5984] usb 9-1: ucan: probe failed; try to update the device firmware [ 1520.161145][ T5984] usb 9-1: USB disconnect, device number 66 [ 1520.338591][T18454] input: syz1 as /devices/virtual/input/input64 [ 1520.530838][T18462] XFS (nullb0): Invalid superblock magic number [ 1521.286542][T18476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3385'. [ 1521.332621][T17579] block nbd0: Possible stuck request ffff888025360000: control (read@0,4096B). Runtime 60 seconds [ 1522.809915][T16597] Bluetooth: hci4: unexpected event for opcode 0x1408 [ 1522.839181][ T5195] audit_log_start: 5925 callbacks suppressed [ 1522.839201][ T5195] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1522.853016][T18478] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1523.047866][T18486] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1523.055155][T18486] audit: audit_lost=93420 audit_rate_limit=0 audit_backlog_limit=64 [ 1523.063977][T18486] audit: backlog limit exceeded [ 1523.200451][ T31] INFO: task kworker/u8:7:3433 blocked for more than 144 seconds. [ 1523.208325][ T31] Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 [ 1523.261883][ C1] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1523.268506][ C1] audit: audit_lost=93421 audit_rate_limit=0 audit_backlog_limit=64 [ 1523.276551][ C1] audit: backlog limit exceeded SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1523.342916][T18486] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1523.349847][T18486] audit: audit_lost=93422 audit_rate_limit=0 audit_backlog_limit=64 [ 1523.711558][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1523.731021][ T31] task:kworker/u8:7 state:D stack:19560 pid:3433 tgid:3433 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 1523.771106][ T31] Workqueue: ib-unreg-wq ib_unregister_work [ 1523.777235][ T31] Call Trace: [ 1523.793975][ T31] [ 1523.839136][ T31] __schedule+0x16a2/0x4cb0 [ 1523.843749][ T31] ? schedule+0x165/0x360 [ 1523.875669][ T31] ? __pfx___schedule+0x10/0x10 [ 1523.903565][ T31] ? schedule+0x91/0x360 [ 1523.942837][ T31] schedule+0x165/0x360 [ 1523.989967][ T31] schedule_timeout+0x9a/0x270 [ 1524.142499][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1524.148083][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1524.340584][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1524.495321][ T31] ? wait_for_completion+0x267/0x5d0 [ 1524.500675][ T31] wait_for_completion+0x2bf/0x5d0 [ 1524.533512][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1524.539261][ T31] ? up_write+0x1c4/0x420 [ 1524.560896][ T31] ? remove_client_context+0xc0/0x1e0 [ 1524.577245][ T31] disable_device+0x1c6/0x320 [ 1524.595534][ T31] ? __pfx_disable_device+0x10/0x10 [ 1524.602051][ T31] __ib_unregister_device+0x2cb/0x3f0 [ 1524.614109][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1524.628741][ T31] ib_unregister_work+0x19/0x30 [ 1524.633678][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1524.651693][ T31] process_scheduled_works+0xade/0x17b0 [ 1524.666916][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1524.672963][ T31] worker_thread+0x8a0/0xda0 [ 1524.704368][ T31] kthread+0x70e/0x8a0 [ 1524.708576][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1524.736796][ T31] ? __pfx_kthread+0x10/0x10 [ 1524.748646][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1524.762005][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1524.767303][ T31] ? __pfx_kthread+0x10/0x10 [ 1524.774734][ T31] ret_from_fork+0x3fc/0x770 [ 1524.779381][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1524.785541][ T31] ? __switch_to_asm+0x39/0x70 [ 1524.791099][ T31] ? __switch_to_asm+0x33/0x70 [ 1524.796047][ T31] ? __pfx_kthread+0x10/0x10 [ 1524.802171][ T31] ret_from_fork_asm+0x1a/0x30 [ 1524.807093][ T31] [ 1524.811189][T18486] uprobe: syz.5.3388:18486 failed to unregister, leaking uprobe [ 1524.822993][ T31] [ 1524.822993][ T31] Showing all locks held in the system: [ 1524.823018][ T31] 1 lock held by rcu_exp_gp_kthr/18: [ 1524.823043][ T31] 1 lock held by khungtaskd/31: [ 1524.823057][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1524.823167][ T31] 3 locks held by kworker/u8:7/3433: [ 1524.823183][ T31] #0: ffff888022a8b948 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1524.823255][ T31] #1: ffffc9000c08fbc0 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1524.823328][ T31] #2: ffff88807ec5c6d0 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0 [ 1524.823399][ T31] 2 locks held by getty/5586: [ 1524.823413][ T31] #0: ffff8880308370a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1524.823489][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1524.823567][ T31] 4 locks held by kworker/u8:10/5975: [ 1524.823581][ T31] #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1524.823652][ T31] #1: ffffc9000b3bfbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1524.823723][ T31] #2: ffffffff8f4f1150 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 1524.823787][ T31] #3: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1524.823849][ T31] 1 lock held by syz-executor/7746: [ 1524.823864][ T31] #0: ffffffff8f4fdd48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1524.823938][ T31] 2 locks held by kworker/u8:2/11173: [ 1524.823953][ T31] #0: ffff8881466a5148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1525.017736][ T31] #1: ffffc9000bb27bc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1525.031306][ T31] 1 lock held by udevd/17135: [ 1525.036025][ T31] #0: ffff88802529c358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1525.046372][ T31] 1 lock held by syz.5.3388/18480: [ 1525.052778][ T31] #0: ffffffff8e1448b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 1525.064977][ T31] [ 1525.155874][ T31] ============================================= [ 1525.155874][ T31] [ 1525.177706][ T31] NMI backtrace for cpu 0 [ 1525.177726][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1525.177754][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1525.177768][ T31] Call Trace: [ 1525.177777][ T31] [ 1525.177788][ T31] dump_stack_lvl+0x189/0x250 [ 1525.177823][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1525.177851][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1525.177883][ T31] ? __pfx__printk+0x10/0x10 [ 1525.177920][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1525.177953][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1525.177978][ T31] ? _printk+0xcf/0x120 [ 1525.178004][ T31] ? __pfx__printk+0x10/0x10 [ 1525.178029][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1525.178059][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1525.178091][ T31] watchdog+0xfee/0x1030 [ 1525.178122][ T31] ? watchdog+0x1de/0x1030 [ 1525.178158][ T31] kthread+0x70e/0x8a0 [ 1525.178185][ T31] ? __pfx_watchdog+0x10/0x10 [ 1525.178211][ T31] ? __pfx_kthread+0x10/0x10 [ 1525.178237][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1525.178267][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1525.178297][ T31] ? __pfx_kthread+0x10/0x10 [ 1525.178321][ T31] ret_from_fork+0x3fc/0x770 [ 1525.178354][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1525.178391][ T31] ? __switch_to_asm+0x39/0x70 [ 1525.178411][ T31] ? __switch_to_asm+0x33/0x70 [ 1525.178431][ T31] ? __pfx_kthread+0x10/0x10 [ 1525.178455][ T31] ret_from_fork_asm+0x1a/0x30 [ 1525.178494][ T31] [ 1525.178503][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1525.347895][ C1] NMI backtrace for cpu 1 [ 1525.347913][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1525.347934][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1525.347946][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1525.347979][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d a3 55 29 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1525.347995][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 1525.348012][ C1] RAX: 6e9da9efc0dd4600 RBX: ffffffff81974f68 RCX: 6e9da9efc0dd4600 [ 1525.348026][ C1] RDX: 0000000000000001 RSI: ffffffff8d96d7f4 RDI: ffffffff8be1af80 [ 1525.348039][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 1525.348053][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8f9fdef0 [ 1525.348067][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a5db40 [ 1525.348079][ C1] FS: 0000000000000000(0000) GS:ffff888125d86000(0000) knlGS:0000000000000000 [ 1525.348093][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1525.348106][ C1] CR2: 0000200000027000 CR3: 000000000df38000 CR4: 00000000003526f0 [ 1525.348122][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1525.348134][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1525.348146][ C1] Call Trace: [ 1525.348153][ C1] [ 1525.348161][ C1] default_idle+0x13/0x20 [ 1525.348179][ C1] default_idle_call+0x74/0xb0 [ 1525.348199][ C1] do_idle+0x1e8/0x510 [ 1525.348230][ C1] ? __pfx_do_idle+0x10/0x10 [ 1525.348268][ C1] cpu_startup_entry+0x44/0x60 [ 1525.348295][ C1] start_secondary+0x101/0x110 [ 1525.348317][ C1] common_startup_64+0x13e/0x147 [ 1525.348345][ C1] [ 1525.543317][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1525.550266][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1525.562117][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1525.572214][ T31] Call Trace: [ 1525.575544][ T31] [ 1525.578517][ T31] dump_stack_lvl+0x99/0x250 [ 1525.583164][ T31] ? __asan_memcpy+0x40/0x70 [ 1525.587788][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1525.593037][ T31] ? __pfx__printk+0x10/0x10 [ 1525.597692][ T31] panic+0x2db/0x790 [ 1525.601645][ T31] ? __pfx_panic+0x10/0x10 [ 1525.606109][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1525.611968][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1525.617387][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1525.623600][ T31] watchdog+0x102d/0x1030 [ 1525.627973][ T31] ? watchdog+0x1de/0x1030 [ 1525.632443][ T31] kthread+0x70e/0x8a0 [ 1525.636559][ T31] ? __pfx_watchdog+0x10/0x10 [ 1525.641277][ T31] ? __pfx_kthread+0x10/0x10 [ 1525.645908][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1525.651158][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1525.656396][ T31] ? __pfx_kthread+0x10/0x10 [ 1525.661024][ T31] ret_from_fork+0x3fc/0x770 [ 1525.665666][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1525.670832][ T31] ? __switch_to_asm+0x39/0x70 [ 1525.675634][ T31] ? __switch_to_asm+0x33/0x70 [ 1525.680440][ T31] ? __pfx_kthread+0x10/0x10 [ 1525.685077][ T31] ret_from_fork_asm+0x1a/0x30 [ 1525.689889][ T31] [ 1525.693192][ T31] Kernel Offset: disabled [ 1525.697533][ T31] Rebooting in 86400 seconds..