last executing test programs: 13.142584306s ago: executing program 0 (id=239): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x3) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r8, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e00)={r9}, 0xc) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r12 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r12, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x144, 0x0, 0x309, 0x0, 0x25dfdbfc, {0x1d}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x4}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x144}, 0x1, 0x0, 0x0, 0xc015}, 0x20040800) timer_settime(0x0, 0x0, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r11, &(0x7f0000000000)="0dc2fc66653cc7"}, 0x20) io_uring_enter(r4, 0x47ba, 0x0, 0x0, 0x0, 0x0) 12.680893379s ago: executing program 1 (id=240): openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) semget(0x1, 0x3, 0x204) io_setup(0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8000000000000001, 0xffffffff7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() socket(0x15, 0x5, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = open(0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000001c0)) syz_clone(0x14027100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x1, 0x8000000}, 0x8000) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r6, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) 12.597487361s ago: executing program 2 (id=241): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) socket$nl_route(0x10, 0x3, 0x0) socket(0x29, 0x6, 0x1) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYRES64], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x800000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffdfffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) openat$tun(0xffffffffffffff9c, 0x0, 0x2080, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1f9959ef9dc00"}) 12.062411433s ago: executing program 0 (id=243): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x1]}, 0x8) setns(r0, 0x10000000) ioctl$KVM_CAP_X86_APIC_BUS_CYCLES_NS(r0, 0x4068aea3, &(0x7f0000000040)={0xed, 0x0, 0x28}) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r0, 0x4068aea3, &(0x7f00000000c0)={0xc1, 0x0, 0x1}) io_uring_enter(r0, 0x482a, 0xc069, 0x29, &(0x7f0000000140)={[0x1c0]}, 0x8) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_IOC_CATATONIC(r1, 0x9362, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000007c0)={&(0x7f00000001c0)=@l2tp={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000240)="3e1c144e35c683d97b11da59bb71efa94690b227235effc062ddf3d096971ec0593933482b68e8b090810cac1bc2d562e29f50c4d06e08e0b2995bb2d63c0f660ec4e323e85110922e8fd844c047b63a94d699d99180cb6b08b3e899e07e29e5fd344b6b3c5fc4b7804c666f67789c6669cfd6935e2e1c877d4c3631701870748c49b3b47f8fad634da4f07fe0b36df4b6c196d9d8342c12", 0x98}, {&(0x7f0000000300)="6529bc2a1b4eeab08781ff31905155bc6f14063dfabe1c9b34ba4a7d8ea0895ba6c7938537228687deb723bb1c78e6f46b69d85ee4951e67b8167f7100dc4c41fb0a93a438038ebd26bc589648841c3228c40bf03a1d32c4f956992647bbac7d8cdef21e238651d69e603368a3b92fec48123c1e3f", 0x75}, {&(0x7f0000000380)="28115e460a00621903ecf55b4ffdc5ce6e00153a4ee83293360c67564393beec9a02fc1f3f5a63adbaa90e44ee34dc10c3164523e58ab5d7a67b0850e41af0a6691ff60b97771b2d41d94a7aa251df4e68709975c601d5", 0x57}, {&(0x7f0000000400)="16251248eded1e570b", 0x9}, {&(0x7f0000000440)="551f1ade158cce5ea3e9be289a80d37a9dde3b1cb2e787273c78225e517ba9d35ebf01606e1ea250032afda933200fb60df94cc4136ae7cc11ebe410db9e690b94c0d3cc760c263e78a289ca96f566b4d8e0d246ce4d51a51f05a54c9d477e47b74ad726ce7f1ea771e96dfcb362928775281dcc797e59d2e253dca353102b2a7a466f74741520958edd04452ebcc6c3740e1b11da788f497ede1ab3509e91bec6982adc2f7bb524d183ac22eda223cd3c39d6b15e42c88252189075aa936df3b4733ca92e8ab4d7e0b662e211d0434227692459189c46cd15ffb64a3fd4e0300468a21afda18f002e3edc2fa3d087a85175e8b2c8f4", 0xf6}, {&(0x7f0000000540)="0671c7", 0x3}, {&(0x7f0000000580)="a3f5a622c328d77f4c7b3618873fbb1aea02023addb3786f6eae68ba2d307a336cd550b5772c18f54b0a6060746fe4aa39aba27f4916a8b379eaddbb7d749e28c39fa6d9caedf8681b187c2844d4921eb67203274b69dd75f6150b00b8e71d72b3ea0950eab642da9a59d38535fa00942238362b8b93c335df3e4bc2a228c6861cfddb52daf694cc44836ad4dbd5e46181e6ea5b75b26ed33d31c2974ec3bd5d501e1bd6ae97129b15d05d953d6f6c1778b33201023a1411d38c89992c94ed7e700f374469569646574079d5e90bf3188a26dd37479a69", 0xd7}, {&(0x7f0000000680)="da0cfc09588bf0bfb34716783c2397a3b35fe9b2e38d101c4d7adf383dba5b5856503a75aed0eac25561de0d17f1860172068701bf420a362bb389196b6a3e38153815a77f157e97bcab4921a2ac4b7e727e00501604e9447ccbbec81033e5f27380567f065bc666ec7bc9c3b9f992c7524d54f23aa0fe4fcab0f0f00041550836d433ce3d8974d58ce13dd8383b19e0d4349a39ba971091262602d2", 0x9c}], 0x8}, 0x400c895) mount_setattr(0xffffffffffffffff, &(0x7f0000000800)='./file0\x00', 0x100, &(0x7f0000000840)={0x0, 0x78, 0x100000, {r0}}, 0x20) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000880)={'bridge_slave_1\x00', {0x2, 0x0, @loopback}}) write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000008c0)={0xe, {0xa, 0xb6, 0x9, 0x36, "c4a0203bb8d01b00fedac5228f0785a175be67b08844a254a8462aaa5bee628bdf04793ddc997c0c239806c021d69a449f92e7b11a6f"}}, 0x42) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000940)=0x7, 0x4) io_uring_enter(r0, 0x7e3f, 0x9816, 0x0, &(0x7f0000000980)={[0x6]}, 0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000009c0), 0x101180, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000dc0)={0x0, 0x2, 0x0, &(0x7f0000000a00)=[{}, {}], 0x3, 0x0, &(0x7f0000000ac0)=[{}, {}, {}], 0xa, 0x0, &(0x7f0000000c40)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000d80)=[{}]}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000e40)={'vxcan1\x00', 0x0}) ioctl$sock_inet_SIOCGARP(r3, 0x8954, &(0x7f0000000e80)={{0x2, 0x4e23, @rand_addr=0x64010101}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x8, {0x2, 0x4e24, @empty}, 'tunl0\x00'}) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000f00)={0x0, 0x9, 0x1, 0x7f, 0xe67, 0x9, 0x29c0, 0xb9d, {0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x7, 0x488, 0x7, 0xc}}, &(0x7f0000000fc0)=0xb0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000001000)={r5, 0x9, 0xb, 0xe79f, 0x6, 0x4}, 0x14) inotify_add_watch(r3, &(0x7f0000001040)='./file0\x00', 0x20000000) semget$private(0x0, 0x4, 0x80) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000010c0), r0) sendmsg$DEVLINK_CMD_RATE_GET(r3, &(0x7f0000001200)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000011c0)={&(0x7f0000001100)={0xb8, r6, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@pci={{0x8}, {0x11}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@pci={{0x8}, {0x11}}]}, 0xb8}}, 0x480a4) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001240)={0x1b, 0x0, 0x0, 0x7, 0x0, r3, 0x7f, '\x00', r4, r3, 0x1, 0x3, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001700)={&(0x7f0000001480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x170, 0x170, 0x5, [@func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x5}, {0x6, 0x3}, {0x0, 0x4}, {0x3}, {0xd, 0x2}, {0x1, 0x5}, {0x0, 0x4}]}, @decl_tag={0x2, 0x0, 0x0, 0x11, 0x1, 0xa}, @func={0x3, 0x0, 0x0, 0xc, 0x4}, @union={0xc, 0x3, 0x0, 0x5, 0x0, 0x400, [{0x10, 0x1, 0x9}, {0x9, 0x5, 0x10000}, {0xc, 0x4, 0x1}]}, @struct={0x6, 0x9, 0x0, 0x4, 0x0, 0x80000001, [{0x1, 0x4, 0x1}, {0x5, 0x1, 0x3}, {0x2, 0x3, 0x3}, {0xf, 0x2, 0x5}, {0x5, 0x5, 0x7bb}, {0x5, 0x1, 0x4}, {0x8, 0x5, 0x9}, {0xa, 0xfffffff0}, {0x3, 0x4, 0x1}]}, @func_proto={0x0, 0x7, 0x0, 0xd, 0x0, [{0x7, 0x5}, {0xe, 0x3}, {0x1, 0x5}, {0x0, 0x4}, {0xf, 0x5}, {0x3}, {0x8, 0x1}]}, @union={0x1, 0x2, 0x0, 0x5, 0x0, 0x3, [{0xf, 0x4, 0xb6cf}, {0xf, 0x1, 0x10000}]}]}, {0x0, [0x77dfda9a52891d1f, 0x61, 0x5f]}}, &(0x7f0000001640)=""/130, 0x18d, 0x82, 0x0, 0x9, 0x10000, @value=r3}, 0x28) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000017c0)={0xffffffffffffffff, 0x10001, 0x18}, 0xc) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000001800)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001880)={0x11, 0x1c, &(0x7f00000012c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1ff}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x800}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000013c0)='GPL\x00', 0xffff, 0x79, &(0x7f0000001400)=""/121, 0x40f00, 0x5, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000001740)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000001780)={0x1, 0x1, 0x7fff, 0x8c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001840)=[r3, r3, r3, r0, r9, r10], 0x0, 0x10, 0x40, @void, @value}, 0x94) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000001980)={0x0, 0x0, 0x5, 0x8001, 0x9}) 11.749956863s ago: executing program 2 (id=244): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a40)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000ac0)={0x0, 0x9, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1a, 0x36, &(0x7f0000000340)=@raw=[@tail_call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @alu={0x7, 0x1, 0x4, 0x5, 0xa, 0xfffffffffffffff0}, @alu={0x4, 0x1, 0x9, 0x4, 0x4, 0x1, 0x10}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}], &(0x7f0000000240)='GPL\x00', 0x8, 0x7a, &(0x7f0000000500)=""/122, 0x41100, 0x40, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000780)={0x5, 0xb, 0x7f, 0xff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000b40)=[r0, r1, 0xffffffffffffffff], &(0x7f0000000b80)=[{0x0, 0x4, 0x8, 0xb}, {0x4, 0x3, 0x4, 0xc}, {0x5, 0x4, 0x4, 0x4}, {0x0, 0x1, 0xb, 0xb}], 0x10, 0x2b3b9601, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464d0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) ptrace$ARCH_SHSTK_UNLOCK(0x1e, 0x0, 0x1, 0x5004) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) mbind(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x1, 0x2, 0x0) mbind(&(0x7f0000be0000/0x2000)=nil, 0x2000, 0x4001, &(0x7f0000000080)=0x1000000000000085, 0x4, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000440)=ANY=[], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000300), 0x8) rt_sigaction(0x16, 0x0, 0x0, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sync_file_range(0xffffffffffffffff, 0x80004004, 0x6, 0x2) 11.301326708s ago: executing program 3 (id=245): r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000840), 0x20042, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x9, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000100), 0x41, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, 0xffffffffffffffff) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, &(0x7f0000000200)={0x8f, 0x0, 0xe}) r3 = syz_open_dev$dmmidi(&(0x7f0000000300), 0x2, 0x80081) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f00000001c0)={0xfe, 0x4, 0x67, 0x1, 0x1ff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYBLOB="0100", @ANYRESHEX=r6]) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = accept4(r4, 0x0, 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x5) sendmmsg$alg(r8, &(0x7f0000005dc0)=[{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001d40)="d8750288189987d0fabb09b2386777", 0xf}], 0x1}], 0x1, 0x0) recvmmsg(r8, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000140)=""/14, 0xe}], 0x1}, 0x101}], 0x1, 0x10000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) 11.167157273s ago: executing program 1 (id=246): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmsg$unix(r1, 0x0, 0x8004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x7, 0x402, 0xffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x1ff, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xe9c}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x12}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 10.797021893s ago: executing program 0 (id=247): socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x2001, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps_rollup\x00') close(r0) waitid(0x2, 0x0, 0x0, 0x80000000, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, &(0x7f00000003c0)={0x5, @sdr={0x51424752, 0x5}}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000004c0)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='system.sockprotoname\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) io_uring_setup(0x25f3, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x3, 0x100257}) 9.041262645s ago: executing program 2 (id=248): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chmod(&(0x7f0000000180)='./file0\x00', 0x1d0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r3, &(0x7f00000018c0)=[{&(0x7f0000000340)="0347445ff208aaca7baffcf27613207359cdef33524b9df55a99134139352ac827cc029c139a4fa0829568c2be85d9c715f49647807e7f6e33cd837a0de72400f15c61b1cd5e6672e85a6c63256d7cce8cdb916621e54081b4e074ecb88d47be18a64dc6e2ddfcb9357d7d4b67b6137af67fbf8ad16fb2ad5d8046a3590255d3cc1d8a6697808f681adfa0629555ed9ca5f860", 0x93}, {&(0x7f0000000400)="327ae0311b443f9b534572b9748c45a46dd2a3469497760424b09a3e0612549638e600b11a88d32e2db6a362ffe1e7d19b3da0b1f5bd3a78f9b2ed2409adfff1959aa953d4fbb5f01d240aa628dc4a888b3f5a28e7efef2dbedeec3b355ec4be983f97f0d822424631bc544ded65d379ef8a75bee836d62e5c164cba93f19ef007cda6981bf701f18dc7cda9db53694b4deace303f9fc83b2bb5012358f60a16d087514d7e9db0e90c194d7b1d09bbf0b9e9210ba7d37369f8f171", 0xbb}, {&(0x7f0000000540)="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", 0xfe}, {&(0x7f0000000080)="c4927b327fe30a49f0fcfb38b62fcb07868e6069be18", 0x16}, {&(0x7f00000013c0)="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", 0x13f}, {&(0x7f0000000740)="8d66aaeb181d6269a49594d02e5b04054e073a1bb5b938a60648b6cba7cebc0e5434f984b51a3bf0ad862f80873b9573ef53b7a377441df6dc7d43ffd8f78a59579fb7c0b49be544382b6b5f8d881785c1b7500f748fdfa962a802447241d6b2e8d3", 0x62}, {&(0x7f0000000140)="69ba67de418028edc480213832d2cf663ef8", 0x12}], 0x7, 0xf, 0x7, 0x5) 8.928618273s ago: executing program 1 (id=249): socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b70300000000000085000000730000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) pipe(0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000340), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f00000000c0)=0x2000) write$binfmt_elf32(r4, 0x0, 0x4cd) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x3f, 0xb, 0x0, 0x0, {0x3}, [@typed={0xc, 0x83, 0x0, 0x0, @u64=0x5}]}, 0x20}}, 0x0) clock_adjtime(0x0, &(0x7f0000000100)={0xf89, 0x6a, 0x55cd, 0xa, 0x48c, 0x4000000004, 0xd, 0x6465, 0x2, 0x1c5, 0x800, 0xfffffffffffffff7, 0x7, 0x2, 0x81, 0x5, 0x0, 0x5, 0x2, 0x8b7, 0x3, 0x6, 0x9, 0x574, 0x5, 0x3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000071121000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) pread64(0xffffffffffffffff, &(0x7f0000033240)=""/102400, 0x19000, 0x0) timer_create(0xb, 0x0, &(0x7f00000000c0)=0x0) timer_settime(r6, 0x1, &(0x7f0000000080)={{0x77359400}, {0x77359400}}, 0x0) timer_gettime(r6, &(0x7f00000000c0)) 8.709089336s ago: executing program 3 (id=250): openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000002000)='`', 0x88020) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000380)={0x0, 0x80000}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) keyctl$setperm(0x5, 0x0, 0x1100100) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_collapse_huge_page_isolate\x00', r4, 0x0, 0x1}, 0x18) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}}, 0x0) 7.724805605s ago: executing program 1 (id=251): openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_setup(0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8000000000000001, 0xffffffff7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() connect$pppl2tp(0xffffffffffffffff, 0x0, 0x5c) sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = open(0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000001c0)) syz_clone(0x14027100, 0x0, 0x0, 0x0, 0x0, 0x0) lseek(r2, 0x8001, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100feffffff000000005c00000008000300", @ANYRES32=r7, @ANYBLOB='\b\x00'], 0x24}, 0x1, 0x8000000}, 0x8000) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4040801) 7.597698722s ago: executing program 4 (id=252): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000001300)="ac", 0x1, 0x0, &(0x7f0000000380)={0xa, 0x0, 0x0, @private1}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1}, 0x80, 0x0}}], 0x1, 0x48094) connect$llc(r1, &(0x7f00000004c0)={0x1a, 0x302, 0x4a, 0xe3, 0xb, 0x24, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x10) socket$inet(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) ppoll(&(0x7f0000000500)=[{r2}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000001200)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c, &(0x7f00000008c0)=[{&(0x7f0000000200)="034d6d607cf8f453854cfac59ac7a99b5b71490e33ad0266344a27f6b7723fda81094e8e6575a3ef89d12dfe724b39cf3b197469242e040aa854fa1c2d12fc38968e376410e8be87bae7a974b6b9b7dea0bc1a261cf1e7a9a72d3bf8ebebe114b5ff8d8d32e3ad78fc973f83558ed92e330d090587dd966a77ada78bbd63782d6ff47b79e228c104eb775e0b9f1d93b4e10df3d55deb36160fef241e606923b776f99f59de67e693bcd7257d2e6a88", 0xaf}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback, 0x4}, 0x1c, &(0x7f00000005c0)=[{&(0x7f00000003c0)="ed0a282036981087191bebb4c8bf65b901b3c70ffdaafcbc8feeb4908fc50b534e1360668fe9a590fa709e34cc25fd5e5c8fa92a9440b424223501250fca224527ebb84dd6d11428e578523f19df8b3a453a1561857b60c360bcad7748afefbbff185abef6caa20a41285e2d8e8445317fc4bd92a714688334ee29190e2c4f4e67f0e1b90ec74f34a62d7b523d9c0ffd0f81116d9005f5b3d866115c64ed04be2678478c6257026854ba1ed913d424b4bc61dee6d249694e51ccc3bd2d8b83492647089271d346011469808f2515810dcd5ed4da7640596d5ec64c2f37ee09c05d4a04b1caa273ae5c48b5", 0xeb}, {&(0x7f0000000040)="3484e74155be83ffad5618678f2cd77e6dd8517b96fe9345f4b133eb46e7cb4d487288926df51383e9aeef9d6caf", 0x2e}, {&(0x7f0000000100)="2275ec41e67903846a64744e91574e6d5dd85470c0dbec8bb746bb9be5669e73d6a074", 0x23}, {&(0x7f00000004c0)="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", 0xfa}, {&(0x7f0000000180)="d52dd6e0a480ccb94f0f7b9e1b779969de38106072339814db17", 0x1a}, {&(0x7f00000002c0)="e1b82765979a78c67a005e157580f2ec84b1a14326cf4cead8c173ae0e1d0bea6b63985e9c96e9d3bfd8433c9e1f875e29e20d565c647a175d933dcc3dcebd5da2c96c2a6ab4585095fc581445cd29b2b1852ce670b1fb58705bb449cbef5d1c25b3a71cd322172b1fe6ae2cbd", 0x6d}, {&(0x7f0000000680)="32892d692f0f3f3d27fea5a6d2daf85e07292a6ee302c553f37014a66cdfdc142da58d7af461adc083372c61b5f7976e41f2fb65263edcf4fc194494672a84fd9f7770c1e9fd1208688809fab47b19445b5593f63884a176add52b626a39d0c0ad631e8887dcb909f67552ba0496067cfbc37c4f4f4c3c09e9e6289900511216122044d8582c8336bde85ce5278de8766df32f68727e0511a51fdefca764d629f674251c781a8326b5176d0e0bc4a4156271f388bc2a54b64f4c0f04055d8b68c3bfd4583a8921a01a7a7328a33c935dff9e283351ef26c38975d4b5cebfc26b5ce6296e92a9153dc2f6a918a17750278be6ae51369ef9ce178eda0d49", 0xfd}, {&(0x7f0000000780)="531dc0556017e77fcf28b8a7b6bd282b615e515130224a9e78cd2ca941ea55d612e4bc0db20ab24959c79c0144e34b272bb190c21589724bc856ba6cd0161d31bb9fcf54da461d9a43fa481a2632dd496d76ff6b98a3f02284f44db7a3c41c528e0f2acd6b57d1e40f00046f2f8256f43bbac77a4095888924fbc75c4cb4b27f31d4876429dbf39b2ea43a7ef9493328a7ed38f78212433f7dfa6f4c7b22c2f501d0b9e0c3e71870bc7864034c", 0xad}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="140000000000000029000000340000000080000000000000480000000000000029000000370000002e05000000000000010400000000c204fffffffc000100071800000003048000800300000000000000000100"/96], 0x60}}, {{&(0x7f0000000900)={0xa, 0x4e23, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}, 0x1c, &(0x7f0000000d40)=[{&(0x7f0000001340)="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", 0x1000}, {&(0x7f0000000940)="4641449ba56d89ef5069fda2a67ce0739ee1ace78f707f069b35faf272ff895a15f3171f0e77a93546d01c4eb2cbd0c6f5cdad1abfc7f56255f8284c59a3fd9a38e2b826bc271e3907be", 0x4a}, {&(0x7f00000009c0)="3bc1bb255e0ad6bd8ca57bcbe9444fa3fabbc3355ebb2ef72097c320155b16a207655640d2703fa8e07c4d5fbe1084b750d42d2db5541cc50785aaf16c275f9b2a428aa7b8261dc0cd06879ba9a40c47788a07cf504105cb2dda3654114ba2864f03cca71f49248fab57ad7c0dd3314f05af07772db566c323120c00b89248c419947c8d9f1a48818702032414183a", 0x8f}, {&(0x7f0000000a80)="a89ce69881e0d69b07d83053b189aff3a8fea99209db3aabf073e891cab934c5663a9f9fae8d150711fc91beb84fb660c2d981a9b5972f59c0109fd2bb0a075f84628d52fc8a5df67da6a45f2e4e72dc38dafd36ead0a7d05231e2f51fe015c408c35bf5607524ff7c157af5bc78b804c885c29abc74047f55bd273dc660ade5cf312482d55635cd297605b3111731c4c0a9f3908957d876920feed68ed92ed4364d2e2b15e584aae2dd8df83f4b685cdd897b69a3dde0e25020691b0375577b0a01643598716f475d7f41df55136595", 0xd0}, {&(0x7f0000002540)="b56e7a8bc163aba99c157e4f00806722d7260c2e403c62df77c54a2fb790e81e3400839a1b3bb46827d15449e32bca4be5b8bd7612d5be739e751183b4266b4da36084100476dd8b9834a36bff1d2945d1ec7acd07ef5667a130f8e18f0566ab8e806f8af533b916a6279256e609fb5a5c48b263107696960cd43576a4d5910578eae806d998554bb9de2031c1a676d0117a0bf72d02830d2b3fec0dd21807238ae2782c84e2cd6139785476024a0ac95e3f2a", 0xb3}, {&(0x7f0000000c40)="bebac9e343412183b1de0c1146d53b695e71f82510a18cdab4c0129f01010ebc622b3d8959aaf5c904fb48eadcdae7ffda06d951e3480395c041a225cbfb19e90f0d36ab3e3713a0680b3af32517eb1347c491834fcf29cba975e1ad8e114fe27906bf3e1de4a54053d7627f07887b9ffa72632e161e5ce4463c3bf90709450ca7dbc7c2fc97d48ae3f068a685c3fead7f627fe5ed9b8b8377ad536e8d5e465887282d1e83a637a63c72696097d17a84fc2999f036a7e807321c1251a38297f6eb4c5f6a4026d374a815a3decfb566", 0xcf}, {&(0x7f0000000e00)="d1e9e2061e40bb2a8658c0830db1c9a9fd428e14dac05008d9edb5b6e8a0ea14d8e574b1730cb8a6d218f8803d80748c1a892fb438dccbb37ff56f83be036f9175d4eba2c5831104da966f3d52e10ebe9f4698ecda67d7ebabe247d2543f9e584b1d9e1eb2b825f95bbd0fdc56fc79d0c2520ae71188575afe172a4a50d6104dd49659240744c5eae19028f3406119fbd5a8b51490d2be3aff398605a45ed15095996df11bf36e7eec4704b16a592d", 0xaf}], 0x7, &(0x7f0000002340)=ANY=[@ANYBLOB="300000000000000029000000360000002c02000000000000000100c910fc01000000000000000000000000000000000028000000000000002900000004000000320900000000000005020001040102000100000000000000180000000000000029000000370000000600000000000000"], 0x70}}, {{0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001000)="d1fc2766645c9ed21120e54a41ee4593d1d9013b94c2078a0ed9ef4363ba1feeb669", 0x22}, {&(0x7f0000001040)="b1455f064495f69a07bc2703d6ab14f3d36872ac6f1d752d1709e2290caff101e1694280e20863744f91bb18daaadf49323bf8c1625b9113c37a752b949fff0b78094fc6a205027dd27f0d6160249e32cc652626d51a4a89af358e28345324538f0a88290f127ff91aa437e1cc186ab01d81136a7f6147e5346e766f828c253441a168a27c7c78af0ceaf6ca99cac439e39f43f685f4d3b48a6649d907cce7bfb584056c6548b269d0338210e2af46aafa9e512a092bd55119e35811d61b6cc214bfec25af0ce99e7def60aec8d453271433b1783c78cc01e8fdcfd1ab08acd42089a006af1cba9dfeb9bc", 0xeb}, {&(0x7f0000001140)="65b9456b5d7257b8d224a8c6303fb320d38fd4615fd52c770df61ce018497478a479e82a1522584e7d07225e16261a00f664c9e4b54743c8427c71dcf4c3ba35a33263fa641729971cf4470dcbbb5161b083a7038b8e5bd04cac0631f8627298516964a5fb01743977fe63", 0x6b}], 0x3}}], 0x4, 0x40801) shutdown(r0, 0x1) timer_create(0x3, 0x0, &(0x7f0000000080)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x16}]}) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080), 0x8) r4 = syz_open_dev$MSR(&(0x7f0000000fc0), 0x2, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) 7.481204074s ago: executing program 2 (id=253): close(0xffffffffffffffff) r0 = socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r1], 0x20}, 0x1, 0x0, 0x0, 0x40801}, 0x4000001) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000061100b000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) (async) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r4, 0x3b82, &(0x7f0000000180)={0x18, r5, 0x1, 0x0, &(0x7f0000000140)=[{0x0, 0x1}]}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r5}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r4, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r5}) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, r7, 0x0, 0x0, 0x7, 0x0, 0x7, {0x20000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffc, 0x0, "d20bddda7de75aec79ff0300d28000000b0000000000001000000900"}}) (async) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, r7, 0x0, 0x0, 0x7, 0x0, 0x7, {0x20000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffc, 0x0, "d20bddda7de75aec79ff0300d28000000b0000000000001000000900"}}) bind$inet6(r4, &(0x7f0000000280)={0xa, 0x4e24, 0x45, @local, 0x6}, 0x1c) openat$sndseq(0xffffff9c, &(0x7f0000000080), 0x0) socket(0x10, 0x2, 0x0) (async) r8 = socket(0x10, 0x2, 0x0) pipe2$9p(&(0x7f0000000040), 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xe66f}, [@call={0x85, 0x0, 0x0, 0x97}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x800000}, {0x85, 0x0, 0x0, 0x7b}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xe66f}, [@call={0x85, 0x0, 0x0, 0x97}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x800000}, {0x85, 0x0, 0x0, 0x7b}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000200051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@RTM_NEWMDB={0x18, 0x1e, 0x1}, 0x18}}, 0x0) setsockopt$llc_int(r8, 0x10c, 0x3, 0x0, 0x0) 5.688690919s ago: executing program 4 (id=254): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) socket$nl_route(0x10, 0x3, 0x0) socket(0x29, 0x6, 0x1) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0xe, &(0x7f0000001b80)=ANY=[@ANYRES64], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x800000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c40)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffdfffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900}) openat$tun(0xffffffffffffff9c, 0x0, 0x2080, 0x0) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1f9959ef9dc00"}) 5.605525096s ago: executing program 2 (id=255): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x8000, 0x8, 0xfffffffe, 0xa199, {{0x5, 0x4, 0x0, 0x3b, 0x14, 0x67, 0x0, 0xd, 0x4, 0x0, @multicast1, @remote}}}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x6) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000280)={{}, 'syz0\x00', 0x11}) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x295) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="371692e7f7ef"}) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000180)='`', 0x500, 0x0, &(0x7f0000000240)={0x2f, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x448}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000080)={@loopback, 0x53, 0x0, 0x0, 0x5, 0x8b, 0xc7e}, 0x20) syz_genetlink_get_family_id$smc(&(0x7f0000000140), r6) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x57}}, {{0x0, 0x0, &(0x7f0000000100)}}], 0x2, 0x804) 5.511743986s ago: executing program 4 (id=256): openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) semget(0x1, 0x3, 0x204) io_setup(0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8000000000000001, 0xffffffff7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() socket(0x15, 0x5, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = open(0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000001c0)) syz_clone(0x14027100, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x8000000}, 0x8000) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r6, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4040801) 5.404235424s ago: executing program 3 (id=257): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r0, 0x3, 0x5004) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRESHEX], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x29) sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2100020, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}]}) io_setup(0x5, &(0x7f0000000e80)=0x0) io_submit(r4, 0x1, &(0x7f0000001580)=[&(0x7f0000000180)={0x0, 0x0, 0x6c, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffc0, 0x4, 0x0, 0x3}]) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r5, &(0x7f0000000000)='./file1\x00', 0xc000, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f00000002c0)='./file1\x00') link(&(0x7f0000000400)='./file0\x00', &(0x7f0000000140)='./bus\x00') chroot(&(0x7f0000000040)='./file1\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 4.466587418s ago: executing program 4 (id=258): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100, 0x400000}, 0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000380)={&(0x7f0000001000)}, 0x1) r5 = socket(0x10, 0x3, 0x0) r6 = syz_open_dev$video(&(0x7f0000000040), 0x1, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f00000002c0)={0x1, @pix={0x0, 0x0, 0x42474752, 0x0, 0x0, 0x0, 0x6, 0xfeedcafe, 0x3, 0x2, 0x2, 0x5}}) syz_io_uring_submit(0x0, r4, &(0x7f00000003c0)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r5, 0x0, 0x0, 0x0, 0x200440c0, 0x1}) io_uring_enter(r3, 0x27e2, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') read$FUSE(r8, &(0x7f0000000200)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) 4.017554523s ago: executing program 1 (id=259): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r3, &(0x7f0000002300)={0x2020, 0x0, 0x0}, 0x206e) write$FUSE_LK(r2, &(0x7f0000000340)={0x28, 0x0, r4, {{0x2, 0x0, 0x1}}}, 0x28) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$FUSE_IOCTL(r5, &(0x7f0000000180)={0x20, 0x0, 0x0, {0x6, 0x0, 0x8e4, 0x3}}, 0x20) 3.817349154s ago: executing program 3 (id=260): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x203}, 0x10) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x9bb0, 0x102, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 3.12725646s ago: executing program 4 (id=261): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0xfeff, 0x2}, 0x10) sendmsg$tipc(r4, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x42}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20004809}, 0x10) 2.107614571s ago: executing program 3 (id=262): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlinkat(r0, &(0x7f0000000000)='./file1\x00', 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x66842, 0x0) 2.057159068s ago: executing program 2 (id=263): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chmod(&(0x7f0000000180)='./file0\x00', 0x1d0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) pwritev2(r3, &(0x7f00000018c0)=[{&(0x7f0000000340)="0347445ff208aaca7baffcf27613207359cdef33524b9df55a99134139352ac827cc029c139a4fa0829568c2be85d9c715f49647807e7f6e33cd837a0de72400f15c61b1cd5e6672e85a6c63256d7cce8cdb916621e54081b4e074ecb88d47be18a64dc6e2ddfcb9357d7d4b67b6137af67fbf8ad16fb2ad5d8046a3590255d3cc1d8a6697808f681adfa0629555ed9ca5f860", 0x93}, {&(0x7f0000000400)="327ae0311b443f9b534572b9748c45a46dd2a3469497760424b09a3e0612549638e600b11a88d32e2db6a362ffe1e7d19b3da0b1f5bd3a78f9b2ed2409adfff1959aa953d4fbb5f01d240aa628dc4a888b3f5a28e7efef2dbedeec3b355ec4be983f97f0d822424631bc544ded65d379ef8a75bee836d62e5c164cba93f19ef007cda6981bf701f18dc7cda9db53694b4deace303f9fc83b2bb5012358f60a16d087514d7e9db0e90c194d7b1d09bbf0b9e9210ba7d37369f8f171", 0xbb}, {&(0x7f0000000540)="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", 0xfe}, {&(0x7f0000000080)="c4927b327fe30a49f0fcfb38b62fcb07868e6069be18", 0x16}, {&(0x7f00000013c0)="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", 0x13f}, {&(0x7f0000000740)="8d66aaeb181d6269a49594d02e5b04054e073a1bb5b938a60648b6cba7cebc0e5434f984b51a3bf0ad862f80873b9573ef53b7a377441df6dc7d43ffd8f78a59579fb7c0b49be544382b6b5f8d881785c1b7500f748fdfa962a802447241d6b2e8d3", 0x62}, {&(0x7f0000000140)="69ba67de418028edc480213832d2cf663ef8", 0x12}], 0x7, 0xf, 0x7, 0x5) 1.325173722s ago: executing program 4 (id=264): r0 = syz_open_dev$audion(&(0x7f00000002c0), 0x40, 0x200000) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f0000000300)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x0, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, &(0x7f0000000340), 0x4) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) timer_create(0x4, &(0x7f0000000240)={0x0, 0x2f, 0x1, @thr={&(0x7f00000000c0)="39272f4df7928a48fb71135a9f0ec84d64846ee0c8d1f1ee7d0bc96d6d7bf5e125ebf26dfee41a8e11b4bed64abe41ce8e0a70beba893377020ba7cc86dcb031a76d51b54276dfcf1af5254133e5a732b69c8c9132470043238389655c6391d693039bc650", &(0x7f0000000140)="763dedf773cd3fbd68ac87c490a8de09861a5f154ba2b0bd166a52ae871ad6f399ab34d3bd058e9740ca8a06488bd9b117ef9579c36dcb95b6a09504682c6df0c02916465d198f74659b6ef20219fe85c14f023c1dc575ba"}}, &(0x7f0000000280)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) socket$inet6(0xa, 0x80000, 0x1ff) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f00000003c0)={0x1f, 0x100, 0x3}, 0x6) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r7) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x11, r6, 0x1000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 1.313905396s ago: executing program 1 (id=265): socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0xfffffffffffffedf) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000140), 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000380)="3be39dbe3ae5e5c66e35ede995e55d0bc6ce526358c67a20b5842557b530f20de60b270190b591a73185e7bc4f0f933703596776952876f0b7866bcbfefeecb476dbbed812acf83fe646f1e6713b59528c07fbc880f2ab0065ed814d47876e23cb26f9c2f06261097b382a8ee12dd01ee66e8500eee93ba0f19a77638c7f5a606807a4d9ca49d0fd09bf1aabd7f5932679ec0635a547fc91599412f071a9d22db4fc206a5bff9c5ffc690433d0cd9ddf5bf5504e9894fe4758d9ad4fcbbad257a6d31c012430bf1fcdcad6b8c53ff76e811dc457ec50aadc123514f9afd908be4fcce8ef986e234e1c6aae5e2210314062bb50b9c7c0ec8171", 0xf9, 0xfffffffffffffffd) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f00000000c0)=0x2000) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x500, 0x0, 0x25, 0x148, 0x0, 0x60, 0x468, 0x2a8, 0x2a8, 0x468, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x320, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x3, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xa214}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x11, 0x20, 0x20]}}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x0, 0x0, {0xfffffffffffffffc}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x560) 342.269253ms ago: executing program 0 (id=266): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) getpid() r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}], {0x14}}, 0x94}}, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x1, 0x7}}, 0xe8) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000008c0), r3) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000900)={0x14, r4, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4048010}, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) 316.902028ms ago: executing program 3 (id=267): openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) write$dsp(0xffffffffffffffff, &(0x7f0000002000)='`', 0x88020) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000380)={0x0, 0x80000}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), 0x0) keyctl$setperm(0x5, 0x0, 0x1100100) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_collapse_huge_page_isolate\x00', r4, 0x0, 0x1}, 0x18) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}}, 0x0) 173.482761ms ago: executing program 0 (id=268): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$alg(0x26, 0x5, 0x0) eventfd2(0x2, 0x80000) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRESHEX=r0], 0x20) 0s ago: executing program 0 (id=269): openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_setup(0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8000000000000001, 0xffffffff7fffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() connect$pppl2tp(0xffffffffffffffff, 0x0, 0x5c) sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = open(0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r4, 0x810c9365, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f00000001c0)) syz_clone(0x14027100, 0x0, 0x0, 0x0, 0x0, 0x0) lseek(r2, 0x8001, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100feffffff000000005c00000008000300", @ANYRES32=r7, @ANYBLOB='\b\x00'], 0x24}, 0x1, 0x8000000}, 0x8000) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4040801) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.131' (ED25519) to the list of known hosts. [ 83.745860][ T5817] cgroup: Unknown subsys name 'net' [ 83.861221][ T5817] cgroup: Unknown subsys name 'cpuset' [ 83.871336][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.499557][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.121868][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.129664][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.138058][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.140289][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.146374][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.152992][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.168050][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.176747][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.183980][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.191389][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.198346][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.199162][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.206597][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.220940][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.228729][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.239370][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.240595][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.247904][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.262602][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.267098][ T5846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.278233][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.278243][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.292568][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.293299][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.307462][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.814382][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 90.906644][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 91.108710][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 91.140016][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 91.156573][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.163902][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.171482][ T5829] bridge_slave_0: entered allmulticast mode [ 91.179894][ T5829] bridge_slave_0: entered promiscuous mode [ 91.241614][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.248952][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.256121][ T5829] bridge_slave_1: entered allmulticast mode [ 91.264718][ T5829] bridge_slave_1: entered promiscuous mode [ 91.366512][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 91.384987][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.392262][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.399640][ T5830] bridge_slave_0: entered allmulticast mode [ 91.406573][ T5830] bridge_slave_0: entered promiscuous mode [ 91.476965][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.485200][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.493039][ T5830] bridge_slave_1: entered allmulticast mode [ 91.500626][ T5830] bridge_slave_1: entered promiscuous mode [ 91.522320][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.550288][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.557629][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.564787][ T5842] bridge_slave_0: entered allmulticast mode [ 91.572148][ T5842] bridge_slave_0: entered promiscuous mode [ 91.595308][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.635454][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.642838][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.650229][ T5842] bridge_slave_1: entered allmulticast mode [ 91.657462][ T5842] bridge_slave_1: entered promiscuous mode [ 91.666954][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.721180][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.736267][ T5829] team0: Port device team_slave_0 added [ 91.742517][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.752925][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.760456][ T5828] bridge_slave_0: entered allmulticast mode [ 91.768295][ T5828] bridge_slave_0: entered promiscuous mode [ 91.822135][ T1213] cfg80211: failed to load regulatory.db [ 91.832663][ T5829] team0: Port device team_slave_1 added [ 91.839647][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.846909][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.854738][ T5828] bridge_slave_1: entered allmulticast mode [ 91.861949][ T5828] bridge_slave_1: entered promiscuous mode [ 91.882979][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.898865][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.911996][ T5830] team0: Port device team_slave_0 added [ 91.922471][ T5830] team0: Port device team_slave_1 added [ 92.019217][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.026196][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.052788][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.078316][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.085483][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.095812][ T5827] bridge_slave_0: entered allmulticast mode [ 92.103087][ T5827] bridge_slave_0: entered promiscuous mode [ 92.114334][ T5842] team0: Port device team_slave_0 added [ 92.133364][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.140791][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.166851][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.180578][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.193485][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.202863][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.210790][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.218157][ T5827] bridge_slave_1: entered allmulticast mode [ 92.225397][ T5827] bridge_slave_1: entered promiscuous mode [ 92.234209][ T5842] team0: Port device team_slave_1 added [ 92.241157][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.248256][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.274252][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.292548][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.300181][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.300346][ T5846] Bluetooth: hci3: command tx timeout [ 92.326186][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.388107][ T5840] Bluetooth: hci2: command tx timeout [ 92.393839][ T5840] Bluetooth: hci1: command tx timeout [ 92.394806][ T5846] Bluetooth: hci4: command tx timeout [ 92.399681][ T5833] Bluetooth: hci0: command tx timeout [ 92.425249][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.433125][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.460256][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.511248][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.524449][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.535526][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.542721][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.568753][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.585869][ T5830] hsr_slave_0: entered promiscuous mode [ 92.593175][ T5830] hsr_slave_1: entered promiscuous mode [ 92.603286][ T5828] team0: Port device team_slave_0 added [ 92.613393][ T5828] team0: Port device team_slave_1 added [ 92.688673][ T5827] team0: Port device team_slave_0 added [ 92.728115][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.735101][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.761513][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.774072][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.781125][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.807726][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.821599][ T5827] team0: Port device team_slave_1 added [ 92.832135][ T5829] hsr_slave_0: entered promiscuous mode [ 92.838857][ T5829] hsr_slave_1: entered promiscuous mode [ 92.844986][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.852804][ T5829] Cannot create hsr debugfs directory [ 92.945394][ T5842] hsr_slave_0: entered promiscuous mode [ 92.953092][ T5842] hsr_slave_1: entered promiscuous mode [ 92.959321][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.966890][ T5842] Cannot create hsr debugfs directory [ 93.035577][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.043401][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.070118][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.123470][ T5828] hsr_slave_0: entered promiscuous mode [ 93.130163][ T5828] hsr_slave_1: entered promiscuous mode [ 93.136334][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.144342][ T5828] Cannot create hsr debugfs directory [ 93.150689][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.157736][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.183851][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.351181][ T5827] hsr_slave_0: entered promiscuous mode [ 93.359013][ T5827] hsr_slave_1: entered promiscuous mode [ 93.365177][ T5827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.372826][ T5827] Cannot create hsr debugfs directory [ 93.672670][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.704963][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.728947][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.751649][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.784550][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.810123][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.823218][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.841191][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.921970][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.936790][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.951683][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.987699][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.064724][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.077623][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.114272][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.128534][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.231891][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.245912][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.274419][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.282717][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.293400][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.377215][ T5833] Bluetooth: hci3: command tx timeout [ 94.384365][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.405255][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.448550][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.455830][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.457877][ T5833] Bluetooth: hci1: command tx timeout [ 94.466284][ T5140] Bluetooth: hci4: command tx timeout [ 94.468608][ T5840] Bluetooth: hci2: command tx timeout [ 94.473803][ T5140] Bluetooth: hci0: command tx timeout [ 94.488589][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.504287][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.511505][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.539128][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.554577][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.561811][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.571765][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.578936][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.710318][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.736878][ T5830] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 94.751734][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.828694][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.835885][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.871362][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.878606][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.959240][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.010921][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.049179][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.056338][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.073687][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.111053][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.148055][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.159086][ T4303] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.166246][ T4303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.242665][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.249886][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.271244][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.278463][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.304009][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.475207][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.502497][ T5829] veth0_vlan: entered promiscuous mode [ 95.544674][ T5830] veth0_vlan: entered promiscuous mode [ 95.581952][ T5829] veth1_vlan: entered promiscuous mode [ 95.612724][ T5830] veth1_vlan: entered promiscuous mode [ 95.704702][ T5842] veth0_vlan: entered promiscuous mode [ 95.713741][ T5829] veth0_macvtap: entered promiscuous mode [ 95.755238][ T5829] veth1_macvtap: entered promiscuous mode [ 95.765405][ T5842] veth1_vlan: entered promiscuous mode [ 95.782023][ T5830] veth0_macvtap: entered promiscuous mode [ 95.794764][ T5830] veth1_macvtap: entered promiscuous mode [ 95.864809][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.884054][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.911307][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.923339][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.935494][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.948682][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.973331][ T5829] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.986457][ T5829] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.996346][ T5829] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.008690][ T5829] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.026204][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.036820][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.051179][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.089138][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.099956][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.111162][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.122431][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.178382][ T5842] veth0_macvtap: entered promiscuous mode [ 96.199997][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.269879][ T5842] veth1_macvtap: entered promiscuous mode [ 96.367537][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.373450][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.375488][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.399663][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.416170][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.427601][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.437968][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.449671][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.460804][ T5140] Bluetooth: hci3: command tx timeout [ 96.468899][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.501999][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.514201][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.525157][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.536099][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.538788][ T5833] Bluetooth: hci4: command tx timeout [ 96.549320][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.551557][ T5846] Bluetooth: hci0: command tx timeout [ 96.559120][ T5140] Bluetooth: hci2: command tx timeout [ 96.569953][ T5840] Bluetooth: hci1: command tx timeout [ 96.581817][ T5842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.594433][ T5842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.603512][ T5842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.612567][ T5842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.668565][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.668597][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.676406][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.685573][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.744754][ T5827] veth0_vlan: entered promiscuous mode [ 96.775194][ T5828] veth0_vlan: entered promiscuous mode [ 96.821646][ T5827] veth1_vlan: entered promiscuous mode [ 96.849842][ T5828] veth1_vlan: entered promiscuous mode [ 96.903978][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.944510][ T4303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.966971][ T4303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.089419][ T3470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.105307][ T5827] veth0_macvtap: entered promiscuous mode [ 97.125720][ T3470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.145089][ T5827] veth1_macvtap: entered promiscuous mode [ 97.204804][ T5828] veth0_macvtap: entered promiscuous mode [ 97.308942][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.319964][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.330550][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.342007][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.356639][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.428195][ T5921] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.529137][ T5922] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.040159][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.076462][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.248435][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.259916][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.351523][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.418214][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.433986][ T5827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.447793][ T5827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.552589][ T5140] Bluetooth: hci3: command tx timeout [ 98.618773][ T5840] Bluetooth: hci4: command tx timeout [ 98.623588][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.624306][ T5840] Bluetooth: hci1: command tx timeout [ 98.637676][ T5140] Bluetooth: hci2: command tx timeout [ 98.643370][ T5140] Bluetooth: hci0: command tx timeout [ 98.819787][ T5828] veth1_macvtap: entered promiscuous mode [ 98.850799][ T5827] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.865666][ T5827] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.880655][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.880705][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 98.906570][ T5827] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.072568][ T5827] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.097757][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.429799][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.524571][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.562180][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.580009][ T5932] qnx6: unable to read the first superblock [ 99.587269][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.598331][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.647589][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.680457][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.698664][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.720066][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.189677][ T5937] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.204318][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.222758][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.242509][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.254097][ T5937] Cannot find set identified by id 0 to match [ 100.261419][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.276684][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.292910][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.337430][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.353039][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.412523][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.452921][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.472531][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.481885][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.491078][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.611813][ T3470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.638663][ T3470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.726869][ T5940] FAULT_INJECTION: forcing a failure. [ 100.726869][ T5940] name failslab, interval 1, probability 0, space 0, times 1 [ 100.739584][ T5940] CPU: 1 UID: 0 PID: 5940 Comm: syz.3.9 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(full) [ 100.739613][ T5940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 100.739633][ T5940] Call Trace: [ 100.739641][ T5940] [ 100.739650][ T5940] dump_stack_lvl+0x241/0x360 [ 100.739694][ T5940] ? __pfx_dump_stack_lvl+0x10/0x10 [ 100.739723][ T5940] ? __pfx__printk+0x10/0x10 [ 100.739754][ T5940] ? __pfx___might_resched+0x10/0x10 [ 100.739783][ T5940] should_fail_ex+0x424/0x570 [ 100.739813][ T5940] should_failslab+0xac/0x100 [ 100.739844][ T5940] kmem_cache_alloc_noprof+0x78/0x390 [ 100.739873][ T5940] ? alloc_empty_file+0x56/0x1d0 [ 100.739908][ T5940] alloc_empty_file+0x56/0x1d0 [ 100.739940][ T5940] path_openat+0x10d/0x35d0 [ 100.739966][ T5940] ? stack_trace_save+0x11a/0x1d0 [ 100.739993][ T5940] ? __pfx_kstrtoull+0x10/0x10 [ 100.740018][ T5940] ? __pfx_stack_trace_save+0x10/0x10 [ 100.740048][ T5940] ? stack_depot_save_flags+0x44/0x940 [ 100.740082][ T5940] ? kasan_save_track+0x51/0x80 [ 100.740109][ T5940] ? kasan_save_track+0x3f/0x80 [ 100.740130][ T5940] ? __kasan_slab_alloc+0x66/0x80 [ 100.740153][ T5940] ? kmem_cache_alloc_noprof+0x1e1/0x390 [ 100.740180][ T5940] ? getname_flags+0xb6/0x530 [ 100.740208][ T5940] ? __pfx_path_openat+0x10/0x10 [ 100.740228][ T5940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.740270][ T5940] do_filp_open+0x284/0x4e0 [ 100.740295][ T5940] ? __pfx_do_filp_open+0x10/0x10 [ 100.740315][ T5940] ? do_raw_spin_lock+0x151/0x370 [ 100.740384][ T5940] do_sys_openat2+0x12b/0x1d0 [ 100.740417][ T5940] ? __pfx_do_sys_openat2+0x10/0x10 [ 100.740444][ T5940] ? __fget_files+0x2a/0x420 [ 100.740478][ T5940] ? __fget_files+0x2a/0x420 [ 100.740515][ T5940] __x64_sys_openat+0x249/0x2a0 [ 100.740548][ T5940] ? __pfx___x64_sys_openat+0x10/0x10 [ 100.740588][ T5940] ? do_syscall_64+0xb6/0x230 [ 100.740616][ T5940] do_syscall_64+0xf3/0x230 [ 100.740640][ T5940] ? clear_bhb_loop+0x45/0xa0 [ 100.740664][ T5940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.740705][ T5940] RIP: 0033:0x7fa59158d169 [ 100.740728][ T5940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.740745][ T5940] RSP: 002b:00007fa58f3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 100.740771][ T5940] RAX: ffffffffffffffda RBX: 00007fa5917a5fa0 RCX: 00007fa59158d169 [ 100.740786][ T5940] RDX: 0000000000129202 RSI: 0000200000000340 RDI: ffffffffffffff9c [ 100.740801][ T5940] RBP: 00007fa58f3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 100.740814][ T5940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.740826][ T5940] R13: 0000000000000000 R14: 00007fa5917a5fa0 R15: 00007ffc82fce3a8 [ 100.740857][ T5940] [ 101.159893][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.199937][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.346493][ T4303] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.354805][ T4303] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.560099][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.592485][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.917601][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.926258][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 101.935625][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 101.947602][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 102.201176][ T5964] Cannot find set identified by id 0 to match [ 102.362440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 103.017637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.197292][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 103.713286][ T5959] bridge_slave_0: left allmulticast mode [ 103.719014][ T5959] bridge_slave_0: left promiscuous mode [ 103.724765][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.761516][ T5959] bridge_slave_1: left allmulticast mode [ 103.767310][ T5959] bridge_slave_1: left promiscuous mode [ 103.773438][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.797979][ T5959] bond0: (slave bond_slave_0): Releasing backup interface [ 103.827679][ T5959] bond0: (slave bond_slave_1): Releasing backup interface [ 103.845828][ T5959] team0: Port device team_slave_0 removed [ 103.855523][ T5959] team0: Port device team_slave_1 removed [ 103.862014][ T5959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.869542][ T5959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.878352][ T5959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.885768][ T5959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.003509][ T5974] warning: `syz.0.17' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.174274][ T5977] trusted_key: encrypted_key: master key parameter 'u_žVÿ‹y—' is invalid [ 104.224155][ T5974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.266835][ T5974] bond0: (slave rose0): Enslaving as an active interface with an up link [ 105.641772][ T5998] syz.0.21 uses obsolete (PF_INET,SOCK_PACKET) [ 109.727032][ T6031] process 'syz.0.25' launched './file2' with NULL argv: empty string added [ 111.876774][ T6038] (syz.0.29,6038,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 111.886429][ T6038] (syz.0.29,6038,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 112.157239][ T6048] input: syz0 as /devices/virtual/input/input6 [ 112.157525][ T6052] syzkaller0: entered allmulticast mode [ 115.667520][ T5884] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.860527][ T6113] FAULT_INJECTION: forcing a failure. [ 115.860527][ T6113] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 115.880375][ T5884] usb 1-1: Using ep0 maxpacket: 32 [ 115.888885][ T6112] 9pnet_fd: Insufficient options for proto=fd [ 115.919265][ T5884] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 115.941250][ T6113] CPU: 0 UID: 0 PID: 6113 Comm: syz.1.41 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(full) [ 115.941280][ T6113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 115.941292][ T6113] Call Trace: [ 115.941300][ T6113] [ 115.941308][ T6113] dump_stack_lvl+0x241/0x360 [ 115.941344][ T6113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.941372][ T6113] ? __pfx__printk+0x10/0x10 [ 115.941412][ T6113] should_fail_ex+0x424/0x570 [ 115.941442][ T6113] _copy_from_iter+0x211/0x1c70 [ 115.941476][ T6113] ? __build_skb_around+0x247/0x3d0 [ 115.941508][ T6113] ? __alloc_skb+0x298/0x480 [ 115.941525][ T6113] ? __pfx__copy_from_iter+0x10/0x10 [ 115.941557][ T6113] ? __pfx___alloc_skb+0x10/0x10 [ 115.941578][ T6113] ? skb_put+0x114/0x1f0 [ 115.941602][ T6113] netlink_sendmsg+0x73c/0xcd0 [ 115.941644][ T6113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.941687][ T6113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.941713][ T6113] __sock_sendmsg+0x221/0x270 [ 115.941744][ T6113] ____sys_sendmsg+0x523/0x860 [ 115.941772][ T6113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.941792][ T6113] ? __fget_files+0x2a/0x420 [ 115.941826][ T6113] ? __fget_files+0x2a/0x420 [ 115.941865][ T6113] __sys_sendmsg+0x271/0x360 [ 115.941893][ T6113] ? __pfx___sys_sendmsg+0x10/0x10 [ 115.941967][ T6113] ? do_syscall_64+0xb6/0x230 [ 115.941993][ T6113] do_syscall_64+0xf3/0x230 [ 115.942015][ T6113] ? clear_bhb_loop+0x45/0xa0 [ 115.942040][ T6113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.942059][ T6113] RIP: 0033:0x7f0fd7f8d169 [ 115.942078][ T6113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.942094][ T6113] RSP: 002b:00007f0fd8e6d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.942116][ T6113] RAX: ffffffffffffffda RBX: 00007f0fd81a6080 RCX: 00007f0fd7f8d169 [ 115.942130][ T6113] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 115.942142][ T6113] RBP: 00007f0fd8e6d090 R08: 0000000000000000 R09: 0000000000000000 [ 115.942154][ T6113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.942165][ T6113] R13: 0000000000000000 R14: 00007f0fd81a6080 R15: 00007ffdef64efc8 [ 115.942196][ T6113] [ 116.186352][ T5884] usb 1-1: config 0 has no interface number 0 [ 116.195243][ T5884] usb 1-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 26624, setting to 1024 [ 116.207899][ T5884] usb 1-1: config 0 interface 67 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 1024 [ 116.260005][ T5884] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.5d [ 116.269247][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.277283][ T5884] usb 1-1: Product: syz [ 116.281444][ T5884] usb 1-1: Manufacturer: syz [ 116.286057][ T5884] usb 1-1: SerialNumber: syz [ 116.322504][ T5884] usb 1-1: config 0 descriptor?? [ 116.331449][ T5884] smsc95xx v2.0.0 [ 116.709287][ T6116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.43'. [ 117.311215][ T5884] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 117.323027][ T5884] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 117.556012][ T5884] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 117.569239][ T5884] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 117.612695][ T5884] usb 1-1: USB disconnect, device number 2 [ 117.901705][ T6132] input: syz0 as /devices/virtual/input/input9 [ 117.948026][ T6132] syzkaller0: entered allmulticast mode [ 118.652887][ T5850] udevd[5850]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 120.812767][ T6161] 9pnet_fd: Insufficient options for proto=fd [ 123.909728][ T6193] input: syz0 as /devices/virtual/input/input10 [ 123.930435][ T5884] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 123.958740][ T6193] syzkaller0: entered allmulticast mode [ 124.102273][ T5884] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.133012][ T5884] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 124.175803][ T5884] usb 1-1: config 1 has no interface number 0 [ 124.217687][ T5884] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 124.267596][ T5884] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.285217][ T5884] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.321266][ T5884] usb 1-1: Product: syz [ 124.340481][ T5884] usb 1-1: Manufacturer: syz [ 124.357710][ T5884] usb 1-1: SerialNumber: syz [ 124.376815][ T5884] usb 1-1: selecting invalid altsetting 1 [ 124.650283][ T6201] 9pnet_fd: Insufficient options for proto=fd [ 125.700869][ T5884] cdc_ncm 1-1:1.1: failed GET_NTB_PARAMETERS [ 125.707277][ T5884] cdc_ncm 1-1:1.1: bind() failure [ 125.777457][ T5884] usb 1-1: USB disconnect, device number 3 [ 126.001538][ T6221] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 126.031114][ T6221] trusted_key: encrypted_key: master key parameter 'u_žVÿ‹y—' is invalid [ 126.103915][ T6223] syzkaller0: entered allmulticast mode [ 126.618995][ T6235] FAULT_INJECTION: forcing a failure. [ 126.618995][ T6235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.752059][ T6235] CPU: 0 UID: 0 PID: 6235 Comm: syz.0.81 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(full) [ 126.752088][ T6235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 126.752100][ T6235] Call Trace: [ 126.752107][ T6235] [ 126.752116][ T6235] dump_stack_lvl+0x241/0x360 [ 126.752152][ T6235] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.752181][ T6235] ? __pfx__printk+0x10/0x10 [ 126.752221][ T6235] should_fail_ex+0x424/0x570 [ 126.752250][ T6235] _copy_from_user+0x2d/0xb0 [ 126.752272][ T6235] do_mq_notify+0x1d7/0xba0 [ 126.752303][ T6235] ? __pfx_do_mq_notify+0x10/0x10 [ 126.752336][ T6235] __x64_sys_mq_notify+0x118/0x170 [ 126.752365][ T6235] ? __pfx___x64_sys_mq_notify+0x10/0x10 [ 126.752392][ T6235] ? ksys_write+0x266/0x2d0 [ 126.752423][ T6235] ? do_syscall_64+0xb6/0x230 [ 126.752443][ T6235] do_syscall_64+0xf3/0x230 [ 126.752459][ T6235] ? clear_bhb_loop+0x45/0xa0 [ 126.752477][ T6235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.752491][ T6235] RIP: 0033:0x7f734558d169 [ 126.752504][ T6235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.752522][ T6235] RSP: 002b:00007f734636c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f4 [ 126.752538][ T6235] RAX: ffffffffffffffda RBX: 00007f73457a5fa0 RCX: 00007f734558d169 [ 126.752549][ T6235] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffffff [ 126.752558][ T6235] RBP: 00007f734636c090 R08: 0000000000000000 R09: 0000000000000000 [ 126.752567][ T6235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.752576][ T6235] R13: 0000000000000000 R14: 00007f73457a5fa0 R15: 00007ffe015b3aa8 [ 126.752598][ T6235] [ 127.139094][ T6246] sp0: Synchronizing with TNC [ 127.181140][ T6248] ======================================================= [ 127.181140][ T6248] WARNING: The mand mount option has been deprecated and [ 127.181140][ T6248] and is ignored by this kernel. Remove the mand [ 127.181140][ T6248] option from the mount to silence this warning. [ 127.181140][ T6248] ======================================================= [ 127.612264][ T6254] Cannot find set identified by id 0 to match [ 130.193141][ T6278] syzkaller0: entered allmulticast mode [ 131.736770][ T5840] Bluetooth: hci4: connection err: -111 [ 132.783734][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.806287][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.144561][ T6329] Cannot find set identified by id 0 to match [ 135.663686][ T6337] netlink: 16 bytes leftover after parsing attributes in process `syz.2.109'. [ 135.673716][ T6337] FAULT_INJECTION: forcing a failure. [ 135.673716][ T6337] name failslab, interval 1, probability 0, space 0, times 0 [ 135.686585][ T6337] CPU: 0 UID: 0 PID: 6337 Comm: syz.2.109 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(full) [ 135.686613][ T6337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 135.686626][ T6337] Call Trace: [ 135.686635][ T6337] [ 135.686644][ T6337] dump_stack_lvl+0x241/0x360 [ 135.686681][ T6337] ? __pfx_dump_stack_lvl+0x10/0x10 [ 135.686708][ T6337] ? __pfx__printk+0x10/0x10 [ 135.686740][ T6337] ? __pfx___might_resched+0x10/0x10 [ 135.686771][ T6337] should_fail_ex+0x424/0x570 [ 135.686800][ T6337] should_failslab+0xac/0x100 [ 135.686831][ T6337] __kvmalloc_node_noprof+0x170/0x5a0 [ 135.686862][ T6337] ? alloc_netdev_mqs+0x92c/0x1210 [ 135.686900][ T6337] alloc_netdev_mqs+0x92c/0x1210 [ 135.686933][ T6337] rtnl_create_link+0x2f9/0xc90 [ 135.686970][ T6337] rtnl_newlink_create+0x2f2/0xcb0 [ 135.687003][ T6337] ? __mutex_lock+0x380/0x10c0 [ 135.687037][ T6337] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 135.687073][ T6337] ? __pfx___mutex_lock+0x10/0x10 [ 135.687106][ T6337] ? ns_capable+0x8a/0xf0 [ 135.687128][ T6337] rtnl_newlink+0x18b0/0x1fe0 [ 135.687160][ T6337] ? stack_depot_save_flags+0x44/0x940 [ 135.687201][ T6337] ? __pfx_rtnl_newlink+0x10/0x10 [ 135.687226][ T6337] ? __netlink_deliver_tap+0x561/0x7f0 [ 135.687253][ T6337] ? netlink_deliver_tap+0x19d/0x1b0 [ 135.687279][ T6337] ? netlink_unicast+0x7c6/0x9a0 [ 135.687301][ T6337] ? netlink_sendmsg+0x8c3/0xcd0 [ 135.687327][ T6337] ? __sock_sendmsg+0x221/0x270 [ 135.687351][ T6337] ? ____sys_sendmsg+0x523/0x860 [ 135.687369][ T6337] ? __sys_sendmsg+0x271/0x360 [ 135.687387][ T6337] ? do_syscall_64+0xf3/0x230 [ 135.687408][ T6337] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.687469][ T6337] ? kasan_quarantine_put+0xdc/0x230 [ 135.687490][ T6337] ? lockdep_hardirqs_on+0x9d/0x150 [ 135.687516][ T6337] ? nlmon_xmit+0xaf/0x100 [ 135.687544][ T6337] ? __local_bh_enable_ip+0x168/0x200 [ 135.687574][ T6337] ? lockdep_hardirqs_on+0x9d/0x150 [ 135.687598][ T6337] ? __local_bh_enable_ip+0x168/0x200 [ 135.687630][ T6337] ? __dev_queue_xmit+0x2f9/0x3f60 [ 135.687653][ T6337] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 135.687694][ T6337] ? __lock_acquire+0xad5/0xd80 [ 135.687737][ T6337] ? __pfx_rtnl_newlink+0x10/0x10 [ 135.687768][ T6337] rtnetlink_rcv_msg+0x80f/0xd70 [ 135.687795][ T6337] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 135.687828][ T6337] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 135.687865][ T6337] ? ref_tracker_free+0x63e/0x7e0 [ 135.687906][ T6337] netlink_rcv_skb+0x208/0x480 [ 135.687935][ T6337] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 135.687966][ T6337] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 135.688014][ T6337] ? netlink_deliver_tap+0x2e/0x1b0 [ 135.688045][ T6337] ? netlink_deliver_tap+0x2e/0x1b0 [ 135.688076][ T6337] netlink_unicast+0x7f8/0x9a0 [ 135.688111][ T6337] ? __pfx_netlink_unicast+0x10/0x10 [ 135.688139][ T6337] ? skb_put+0x114/0x1f0 [ 135.688164][ T6337] netlink_sendmsg+0x8c3/0xcd0 [ 135.688207][ T6337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.688250][ T6337] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.688276][ T6337] __sock_sendmsg+0x221/0x270 [ 135.688307][ T6337] ____sys_sendmsg+0x523/0x860 [ 135.688339][ T6337] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.688359][ T6337] ? __fget_files+0x2a/0x420 [ 135.688393][ T6337] ? __fget_files+0x2a/0x420 [ 135.688433][ T6337] __sys_sendmsg+0x271/0x360 [ 135.688462][ T6337] ? __pfx___sys_sendmsg+0x10/0x10 [ 135.688544][ T6337] ? do_syscall_64+0xb6/0x230 [ 135.688571][ T6337] do_syscall_64+0xf3/0x230 [ 135.688595][ T6337] ? clear_bhb_loop+0x45/0xa0 [ 135.688620][ T6337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.688639][ T6337] RIP: 0033:0x7fb347d8d169 [ 135.688657][ T6337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.688673][ T6337] RSP: 002b:00007fb345bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.688695][ T6337] RAX: ffffffffffffffda RBX: 00007fb347fa5fa0 RCX: 00007fb347d8d169 [ 135.688709][ T6337] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 135.688722][ T6337] RBP: 00007fb345bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 135.688734][ T6337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.688745][ T6337] R13: 0000000000000000 R14: 00007fb347fa5fa0 R15: 00007ffde6ca36b8 [ 135.688777][ T6337] [ 136.268665][ T6332] netem: change failed [ 138.833341][ T6356] FAULT_INJECTION: forcing a failure. [ 138.833341][ T6356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.846571][ T6356] CPU: 1 UID: 0 PID: 6356 Comm: syz.3.113 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(full) [ 138.846600][ T6356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 138.846611][ T6356] Call Trace: [ 138.846616][ T6356] [ 138.846622][ T6356] dump_stack_lvl+0x241/0x360 [ 138.846649][ T6356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.846669][ T6356] ? __pfx__printk+0x10/0x10 [ 138.846708][ T6356] should_fail_ex+0x424/0x570 [ 138.846729][ T6356] _copy_from_user+0x2d/0xb0 [ 138.846743][ T6356] __sys_bpf+0x1c5/0x8b0 [ 138.846759][ T6356] ? __pfx___sys_bpf+0x10/0x10 [ 138.846781][ T6356] ? ksys_write+0x275/0x2d0 [ 138.846807][ T6356] __x64_sys_bpf+0x7c/0x90 [ 138.846828][ T6356] do_syscall_64+0xf3/0x230 [ 138.846846][ T6356] ? clear_bhb_loop+0x45/0xa0 [ 138.846863][ T6356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.846877][ T6356] RIP: 0033:0x7fa59158d169 [ 138.846890][ T6356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.846902][ T6356] RSP: 002b:00007fa58f3d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 138.846918][ T6356] RAX: ffffffffffffffda RBX: 00007fa5917a6080 RCX: 00007fa59158d169 [ 138.846929][ T6356] RDX: 0000000000000020 RSI: 0000200000000100 RDI: 0000000000000004 [ 138.846939][ T6356] RBP: 00007fa58f3d5090 R08: 0000000000000000 R09: 0000000000000000 [ 138.846948][ T6356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.846957][ T6356] R13: 0000000000000000 R14: 00007fa5917a6080 R15: 00007ffc82fce3a8 [ 138.846992][ T6356] [ 139.006730][ C1] vkms_vblank_simulate: vblank timer overrun [ 139.596851][ T5882] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 139.935023][ T6366] SET target dimension over the limit! [ 140.749338][ T5882] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 140.770416][ T5882] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 140.781702][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.799475][ T5882] usb 2-1: Product: syz [ 140.803925][ T5882] usb 2-1: Manufacturer: syz [ 140.905129][ T6374] Cannot find set identified by id 0 to match [ 141.710257][ T5882] usb 2-1: SerialNumber: syz [ 141.725699][ T5882] usb 2-1: config 0 descriptor?? [ 142.178137][ T6384] UHID_CREATE from different security context by process 91 (syz.3.122), this is not allowed. [ 142.240773][ T6384] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 142.326043][ T6384] infiniband s: RDMA CMA: cma_listen_on_dev, error -98 [ 142.882959][ T5882] usb 2-1: USB disconnect, device number 2 [ 143.269602][ T5838] udevd[5838]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.364861][ T6394] cifs: Unknown parameter 'mode' [ 144.046425][ T6391] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 145.891833][ T30] audit: type=1326 audit(1743562304.783:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6404 comm="syz.2.127" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb347d8d169 code=0x0 [ 147.305172][ T6433] FAULT_INJECTION: forcing a failure. [ 147.305172][ T6433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.239029][ T5884] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 148.296255][ T6433] CPU: 1 UID: 0 PID: 6433 Comm: syz.3.132 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(full) [ 148.296285][ T6433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 148.296298][ T6433] Call Trace: [ 148.296306][ T6433] [ 148.296315][ T6433] dump_stack_lvl+0x241/0x360 [ 148.296350][ T6433] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.296378][ T6433] ? __pfx__printk+0x10/0x10 [ 148.296416][ T6433] should_fail_ex+0x424/0x570 [ 148.296444][ T6433] set_fd_set+0x3a/0xa0 [ 148.296467][ T6433] core_sys_select+0x89c/0xab0 [ 148.296501][ T6433] ? __pfx_core_sys_select+0x10/0x10 [ 148.296521][ T6433] ? rcu_read_lock_any_held+0xbb/0x160 [ 148.296551][ T6433] ? vfs_write+0xb29/0xd10 [ 148.296598][ T6433] ? __pfx_set_user_sigmask+0x10/0x10 [ 148.296616][ T6433] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 148.296638][ T6433] ? __fget_files+0x2a/0x420 [ 148.296677][ T6433] __se_sys_pselect6+0x356/0x3e0 [ 148.296702][ T6433] ? fput+0x9b/0xd0 [ 148.296728][ T6433] ? __pfx___se_sys_pselect6+0x10/0x10 [ 148.296760][ T6433] ? __x64_sys_pselect6+0x21/0xf0 [ 148.296786][ T6433] do_syscall_64+0xf3/0x230 [ 148.296808][ T6433] ? clear_bhb_loop+0x45/0xa0 [ 148.296827][ T6433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.296844][ T6433] RIP: 0033:0x7fa59158d169 [ 148.296861][ T6433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.296874][ T6433] RSP: 002b:00007fa58f3b4038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 148.296894][ T6433] RAX: ffffffffffffffda RBX: 00007fa5917a6160 RCX: 00007fa59158d169 [ 148.296908][ T6433] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 148.296920][ T6433] RBP: 00007fa58f3b4090 R08: 0000000000000000 R09: 0000000000000000 [ 148.296932][ T6433] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 148.296944][ T6433] R13: 0000000000000001 R14: 00007fa5917a6160 R15: 00007ffc82fce3a8 [ 148.296973][ T6433] [ 148.297532][ T5884] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 149.765088][ T6448] IPv6: addrconf: prefix option has invalid lifetime [ 151.050048][ T6455] FAULT_INJECTION: forcing a failure. [ 151.050048][ T6455] name failslab, interval 1, probability 0, space 0, times 0 [ 151.073353][ T6455] CPU: 0 UID: 0 PID: 6455 Comm: syz.0.140 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(full) [ 151.073385][ T6455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 151.073397][ T6455] Call Trace: [ 151.073406][ T6455] [ 151.073414][ T6455] dump_stack_lvl+0x241/0x360 [ 151.073451][ T6455] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.073480][ T6455] ? __pfx__printk+0x10/0x10 [ 151.073511][ T6455] ? __pfx___might_resched+0x10/0x10 [ 151.073540][ T6455] should_fail_ex+0x424/0x570 [ 151.073570][ T6455] should_failslab+0xac/0x100 [ 151.073600][ T6455] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 151.073631][ T6455] ? __alloc_skb+0x1c2/0x480 [ 151.073654][ T6455] __alloc_skb+0x1c2/0x480 [ 151.073680][ T6455] ? __pfx___alloc_skb+0x10/0x10 [ 151.073701][ T6455] ? netlink_autobind+0xd6/0x2f0 [ 151.073729][ T6455] ? netlink_autobind+0x2b0/0x2f0 [ 151.073762][ T6455] netlink_sendmsg+0x638/0xcd0 [ 151.073802][ T6455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.073844][ T6455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 151.073870][ T6455] __sock_sendmsg+0x221/0x270 [ 151.073910][ T6455] ____sys_sendmsg+0x523/0x860 [ 151.073942][ T6455] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.073962][ T6455] ? __fget_files+0x2a/0x420 [ 151.073996][ T6455] ? __fget_files+0x2a/0x420 [ 151.074036][ T6455] __sys_sendmsg+0x271/0x360 [ 151.074063][ T6455] ? __pfx___sys_sendmsg+0x10/0x10 [ 151.074142][ T6455] ? do_syscall_64+0xb6/0x230 [ 151.074169][ T6455] do_syscall_64+0xf3/0x230 [ 151.074192][ T6455] ? clear_bhb_loop+0x45/0xa0 [ 151.074216][ T6455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.074236][ T6455] RIP: 0033:0x7f734558d169 [ 151.074254][ T6455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.074270][ T6455] RSP: 002b:00007f734636c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 151.074292][ T6455] RAX: ffffffffffffffda RBX: 00007f73457a5fa0 RCX: 00007f734558d169 [ 151.074307][ T6455] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 151.074319][ T6455] RBP: 00007f734636c090 R08: 0000000000000000 R09: 0000000000000000 [ 151.074332][ T6455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.074343][ T6455] R13: 0000000000000000 R14: 00007f73457a5fa0 R15: 00007ffe015b3aa8 [ 151.074374][ T6455] [ 152.023089][ T6468] Cannot find set identified by id 0 to match [ 152.518256][ T5883] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 152.665276][ T6472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.146'. [ 152.670562][ T6470] FAULT_INJECTION: forcing a failure. [ 152.670562][ T6470] name failslab, interval 1, probability 0, space 0, times 0 [ 152.691633][ T6470] CPU: 0 UID: 0 PID: 6470 Comm: syz.1.147 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(full) [ 152.691658][ T6470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 152.691668][ T6470] Call Trace: [ 152.691676][ T6470] [ 152.691684][ T6470] dump_stack_lvl+0x241/0x360 [ 152.691717][ T6470] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.691740][ T6470] ? __pfx__printk+0x10/0x10 [ 152.691765][ T6470] ? __pfx___might_resched+0x10/0x10 [ 152.691788][ T6470] should_fail_ex+0x424/0x570 [ 152.691811][ T6470] should_failslab+0xac/0x100 [ 152.691837][ T6470] __kmalloc_noprof+0xdf/0x4d0 [ 152.691862][ T6470] ? tomoyo_encode+0x26f/0x540 [ 152.691886][ T6470] tomoyo_encode+0x26f/0x540 [ 152.691910][ T6470] tomoyo_realpath_from_path+0x59e/0x5e0 [ 152.691943][ T6470] tomoyo_path_number_perm+0x245/0x790 [ 152.691975][ T6470] ? tomoyo_path_number_perm+0x215/0x790 [ 152.692005][ T6470] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 152.692036][ T6470] ? ksys_write+0x24e/0x2d0 [ 152.692061][ T6470] ? __lock_acquire+0xad5/0xd80 [ 152.692103][ T6470] ? __fget_files+0x2a/0x420 [ 152.692131][ T6470] ? __fget_files+0x2a/0x420 [ 152.692162][ T6470] ? __fget_files+0x2a/0x420 [ 152.692195][ T6470] security_file_ioctl+0xc6/0x2a0 [ 152.692217][ T6470] __se_sys_ioctl+0x46/0x160 [ 152.692242][ T6470] do_syscall_64+0xf3/0x230 [ 152.692266][ T6470] ? clear_bhb_loop+0x45/0xa0 [ 152.692290][ T6470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.692310][ T6470] RIP: 0033:0x7f0fd7f8d169 [ 152.692329][ T6470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.692345][ T6470] RSP: 002b:00007f0fd8e8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.692366][ T6470] RAX: ffffffffffffffda RBX: 00007f0fd81a5fa0 RCX: 00007f0fd7f8d169 [ 152.692381][ T6470] RDX: 0000200000000040 RSI: 00000000c008561b RDI: 0000000000000003 [ 152.692394][ T6470] RBP: 00007f0fd8e8e090 R08: 0000000000000000 R09: 0000000000000000 [ 152.692406][ T6470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.692418][ T6470] R13: 0000000000000000 R14: 00007f0fd81a5fa0 R15: 00007ffdef64efc8 [ 152.692449][ T6470] [ 152.915440][ T6470] ERROR: Out of memory at tomoyo_realpath_from_path. [ 152.954122][ T5883] usb 4-1: Using ep0 maxpacket: 16 [ 153.060191][ T5883] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 153.070105][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.078807][ T5883] usb 4-1: Product: syz [ 153.083251][ T5883] usb 4-1: Manufacturer: syz [ 153.087968][ T5883] usb 4-1: SerialNumber: syz [ 153.101196][ T5883] r8152-cfgselector 4-1: Unknown version 0x0000 [ 153.107551][ T5883] r8152-cfgselector 4-1: config 0 descriptor?? [ 153.193297][ T6475] i2c i2c-0: Invalid block write size 34 [ 154.203166][ T10] r8152-cfgselector 4-1: USB disconnect, device number 2 [ 157.237174][ T5883] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 157.437379][ T5883] usb 5-1: Using ep0 maxpacket: 16 [ 157.852696][ T5883] usb 5-1: New USB device found, idVendor=0413, idProduct=6026, bcdDevice=18.aa [ 157.870243][ T5883] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.071358][ T5883] usb 5-1: Product: syz [ 158.076065][ T5883] usb 5-1: Manufacturer: syz [ 158.080867][ T5883] usb 5-1: SerialNumber: syz [ 158.089084][ T5883] usb 5-1: config 0 descriptor?? [ 158.111439][ T5883] dvb-usb: found a 'Leadtek - USB2.0 Winfast DTV dongle' in warm state. [ 158.132822][ T5883] dvb-usb: bulk message failed: -22 (3/0) [ 159.000348][ T6526] misc userio: Invalid payload size [ 159.027449][ T6526] misc userio: No port type given on /dev/userio [ 159.035383][ T6526] misc userio: Invalid payload size [ 159.077968][ T5890] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 159.120846][ T5883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 159.305064][ T5883] dvbdev: DVB: registering new adapter (Leadtek - USB2.0 Winfast DTV dongle) [ 159.439285][ T5883] usb 5-1: media controller created [ 159.499439][ T5890] usb 3-1: Using ep0 maxpacket: 8 [ 159.533529][ T5890] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.557764][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 159.575314][ T5890] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 159.605650][ T5890] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.630001][ T5890] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.655451][ T5883] dvb-usb: bulk message failed: -22 (6/0) [ 159.669464][ T5883] dvb-usb: bulk message failed: -22 (6/0) [ 159.675440][ T5890] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 159.689278][ T5883] dvb-usb: no frontend was attached by 'Leadtek - USB2.0 Winfast DTV dongle' [ 159.701048][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.716545][ T5883] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13 [ 159.746106][ T5883] dvb-usb: schedule remote query interval to 150 msecs. [ 159.764723][ T5883] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully initialized and connected. [ 159.818244][ T5883] usb 5-1: USB disconnect, device number 2 [ 160.106202][ T6531] netlink: 'syz.4.164': attribute type 5 has an invalid length. [ 160.170433][ T975] dvb-usb: bulk message failed: -22 (1/0) [ 160.176433][ T975] dvb-usb: error while querying for an remote control event. [ 160.191721][ T5890] usb 3-1: GET_CAPABILITIES returned 0 [ 160.215921][ T5890] usbtmc 3-1:16.0: can't read capabilities [ 160.373609][ T5883] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully deinitialized and disconnected. [ 160.393939][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 160.408144][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 160.417318][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 160.426457][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 160.435576][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 160.501059][ T6541] fuse: Invalid rootmode [ 160.551370][ T6542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.742510][ T6542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.521825][ T6539] ptm ptm9: ldisc open failed (-12), clearing slot 9 [ 161.566159][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 161.575308][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 161.584435][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 161.593555][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 161.636670][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 161.645824][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 161.655102][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 161.664183][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 161.702103][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 161.711255][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 161.720370][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 161.732530][ T5890] usb 3-1: USB disconnect, device number 2 [ 161.743268][ T6551] netlink: 'syz.3.169': attribute type 7 has an invalid length. [ 161.750990][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.169'. [ 162.193417][ T30] audit: type=1326 audit(1743562321.103:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6549 comm="syz.0.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734558d169 code=0x7ffc0000 [ 162.243672][ T30] audit: type=1326 audit(1743562321.133:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6549 comm="syz.0.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f734558d169 code=0x7ffc0000 [ 164.531252][ T6580] FAULT_INJECTION: forcing a failure. [ 164.531252][ T6580] name failslab, interval 1, probability 0, space 0, times 0 [ 164.544853][ T6580] CPU: 0 UID: 0 PID: 6580 Comm: syz.3.176 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(full) [ 164.544882][ T6580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 164.544895][ T6580] Call Trace: [ 164.544903][ T6580] [ 164.544911][ T6580] dump_stack_lvl+0x241/0x360 [ 164.544949][ T6580] ? __pfx_dump_stack_lvl+0x10/0x10 [ 164.544978][ T6580] ? __pfx__printk+0x10/0x10 [ 164.545010][ T6580] ? __pfx___might_resched+0x10/0x10 [ 164.545038][ T6580] should_fail_ex+0x424/0x570 [ 164.545068][ T6580] should_failslab+0xac/0x100 [ 164.545099][ T6580] __kmalloc_noprof+0xdf/0x4d0 [ 164.545127][ T6580] ? tomoyo_realpath_from_path+0xc2/0x5e0 [ 164.545151][ T6580] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 164.545181][ T6580] tomoyo_realpath_from_path+0xcf/0x5e0 [ 164.545219][ T6580] tomoyo_path_number_perm+0x245/0x790 [ 164.545255][ T6580] ? tomoyo_path_number_perm+0x215/0x790 [ 164.545290][ T6580] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 164.545329][ T6580] ? ksys_write+0x24e/0x2d0 [ 164.545361][ T6580] ? __lock_acquire+0xad5/0xd80 [ 164.545410][ T6580] ? __fget_files+0x2a/0x420 [ 164.545439][ T6580] ? __fget_files+0x2a/0x420 [ 164.545472][ T6580] ? __fget_files+0x2a/0x420 [ 164.545509][ T6580] security_file_ioctl+0xc6/0x2a0 [ 164.545531][ T6580] __se_sys_ioctl+0x46/0x160 [ 164.545557][ T6580] do_syscall_64+0xf3/0x230 [ 164.545582][ T6580] ? clear_bhb_loop+0x45/0xa0 [ 164.545608][ T6580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.545628][ T6580] RIP: 0033:0x7fa59158d169 [ 164.545647][ T6580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.545664][ T6580] RSP: 002b:00007fa58f3b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 164.545686][ T6580] RAX: ffffffffffffffda RBX: 00007fa5917a6160 RCX: 00007fa59158d169 [ 164.545701][ T6580] RDX: 0000000000000000 RSI: 0000000000005415 RDI: 0000000000000003 [ 164.545713][ T6580] RBP: 00007fa58f3b4090 R08: 0000000000000000 R09: 0000000000000000 [ 164.545726][ T6580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.545738][ T6580] R13: 0000000000000000 R14: 00007fa5917a6160 R15: 00007ffc82fce3a8 [ 164.545771][ T6580] [ 164.545779][ T6580] ERROR: Out of memory at tomoyo_realpath_from_path. [ 166.923607][ T6595] FAULT_INJECTION: forcing a failure. [ 166.923607][ T6595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.938631][ T6595] CPU: 1 UID: 0 PID: 6595 Comm: syz.1.182 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(full) [ 166.938659][ T6595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 166.938672][ T6595] Call Trace: [ 166.938680][ T6595] [ 166.938688][ T6595] dump_stack_lvl+0x241/0x360 [ 166.938723][ T6595] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.938749][ T6595] ? __pfx__printk+0x10/0x10 [ 166.938785][ T6595] should_fail_ex+0x424/0x570 [ 166.938813][ T6595] strncpy_from_user+0x36/0x280 [ 166.938839][ T6595] path_setxattrat+0x20e/0x4c0 [ 166.938867][ T6595] ? __pfx_path_setxattrat+0x10/0x10 [ 166.938923][ T6595] ? ksys_write+0x275/0x2d0 [ 166.938957][ T6595] __x64_sys_lsetxattr+0xbf/0xe0 [ 166.938992][ T6595] do_syscall_64+0xf3/0x230 [ 166.939028][ T6595] ? clear_bhb_loop+0x45/0xa0 [ 166.939051][ T6595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.939071][ T6595] RIP: 0033:0x7f0fd7f8d169 [ 166.939090][ T6595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.939106][ T6595] RSP: 002b:00007f0fd8e8e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 166.939127][ T6595] RAX: ffffffffffffffda RBX: 00007f0fd81a5fa0 RCX: 00007f0fd7f8d169 [ 166.939142][ T6595] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 0000200000000400 [ 166.939156][ T6595] RBP: 00007f0fd8e8e090 R08: 0000000000000000 R09: 0000000000000000 [ 166.939169][ T6595] R10: 000000000000005c R11: 0000000000000246 R12: 0000000000000001 [ 166.939180][ T6595] R13: 0000000000000001 R14: 00007f0fd81a5fa0 R15: 00007ffdef64efc8 [ 166.939211][ T6595] [ 167.109144][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.587609][ T5945] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 168.779778][ T5945] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 168.789565][ T5945] usb 3-1: config 179 has no interface number 0 [ 168.891280][ T5945] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 168.939575][ T5945] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 168.979433][ T5945] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 169.168433][ T5945] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 169.180817][ T5945] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 169.195236][ T5945] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 169.207361][ T5945] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.222534][ T6606] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 169.268710][ T6606] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 170.223297][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'. [ 170.264844][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.185'. [ 170.429597][ T975] usb 3-1: USB disconnect, device number 3 [ 170.429631][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 170.443916][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 172.054549][ T6638] netlink: 24 bytes leftover after parsing attributes in process `syz.4.193'. [ 173.487768][ T6648] trusted_key: encrypted_key: master key parameter 'u_žVÿ‹y—' is invalid [ 173.528809][ T6647] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 173.607114][ T975] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 173.997930][ T6658] cifs: Unknown parameter 'mode' [ 174.397330][ T6660] netlink: 'syz.1.199': attribute type 5 has an invalid length. [ 174.827063][ T975] usb 3-1: Using ep0 maxpacket: 8 [ 174.837960][ T975] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 174.856424][ T975] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.081730][ T6666] Cannot find set identified by id 0 to match [ 175.791340][ T975] usb 3-1: Product: syz [ 175.795585][ T975] usb 3-1: Manufacturer: syz [ 175.801056][ T975] usb 3-1: SerialNumber: syz [ 175.830442][ T975] usb 3-1: config 0 descriptor?? [ 175.865104][ T975] usb 3-1: can't set config #0, error -71 [ 175.887317][ T975] usb 3-1: USB disconnect, device number 4 [ 176.050798][ T6675] capability: warning: `syz.4.203' uses deprecated v2 capabilities in a way that may be insecure [ 176.119462][ T6675] program syz.4.203 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.040051][ T5882] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 177.261891][ T5840] Bluetooth: hci4: link tx timeout [ 177.268360][ T5840] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 177.282939][ T12] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 177.348477][ T975] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 177.467147][ T5882] usb 5-1: Using ep0 maxpacket: 8 [ 177.498135][ T5882] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 177.546173][ T5882] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 177.607340][ T975] usb 4-1: Using ep0 maxpacket: 16 [ 177.610455][ T5882] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 177.623023][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.628781][ T975] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 177.644963][ T5882] usb 5-1: config 0 descriptor?? [ 177.666044][ T975] usb 4-1: config 0 has no interface number 0 [ 177.703596][ T975] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=ff.7e [ 177.715003][ T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.758925][ T975] usb 4-1: Product: syz [ 177.772214][ T975] usb 4-1: Manufacturer: syz [ 177.792138][ T975] usb 4-1: SerialNumber: syz [ 177.815193][ T6692] siw: device registration error -23 [ 177.825926][ T975] usb 4-1: config 0 descriptor?? [ 177.861084][ T975] usb 4-1: selecting invalid altsetting 2 [ 178.057269][ T975] i2c-cp2615 4-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 178.854307][ T6683] ptrace attach of "./syz-executor exec"[5829] was attempted by " [ 178.991312][ T1213] usb 5-1: USB disconnect, device number 3 [ 179.247139][ T5883] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 179.338715][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 179.465946][ T6705] netlink: 'syz.4.212': attribute type 5 has an invalid length. [ 180.129406][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.211962][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.243712][ T5883] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 180.276354][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.322942][ T5883] usb 3-1: config 0 descriptor?? [ 180.415131][ T5913] usb 4-1: USB disconnect, device number 3 [ 180.589977][ T5883] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 180.637111][ T5883] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 180.675482][ T5883] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 180.772758][ T5883] cp2112 0003:10C4:EA90.0002: error requesting version [ 180.824237][ T5883] cp2112 0003:10C4:EA90.0002: probe with driver cp2112 failed with error -71 [ 180.867268][ T5883] usb 3-1: USB disconnect, device number 5 [ 181.144738][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 181.921793][ T6724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 182.632687][ T6736] cifs: Unknown parameter 'mode' [ 183.367770][ T5883] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 183.599522][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.897102][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 183.917035][ T5883] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 183.957246][ T5883] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.022676][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.080928][ T5883] usb 1-1: config 0 descriptor?? [ 185.657891][ T5883] usbhid 1-1:0.0: can't add hid device: -71 [ 185.670036][ T5883] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 185.722068][ T5883] usb 1-1: USB disconnect, device number 4 [ 186.519550][ T6771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.579363][ T6771] CUSE: DEVNAME unspecified [ 187.357240][ T5890] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 187.540929][ T5890] usb 1-1: Using ep0 maxpacket: 8 [ 187.568127][ T5890] usb 1-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 187.607159][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.641319][ T5890] usb 1-1: config 0 descriptor?? [ 187.720523][ T5890] pwc: Logitech QuickCam Zoom USB webcam detected. [ 187.755845][ T5890] pwc: Warning: more than 1 configuration available. [ 187.920650][ T5890] pwc: Failed to set LED on/off time (-71) [ 187.929706][ T5890] pwc: send_video_command error -71 [ 187.941548][ T5890] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 187.961027][ T5890] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 187.999250][ T5890] usb 1-1: USB disconnect, device number 5 [ 189.248868][ T6795] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input14 [ 193.996104][ T6831] bridge_slave_0: left allmulticast mode [ 194.106546][ T975] IPVS: starting estimator thread 0... [ 194.207214][ T6838] IPVS: using max 24 ests per chain, 57600 per kthread [ 194.253517][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.266888][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.275437][ T6831] bridge_slave_0: left promiscuous mode [ 195.225937][ T6831] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.413025][ T30] audit: type=1326 audit(1743562808.316:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6844 comm="syz.4.252" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f453d78d169 code=0x0 [ 196.545809][ T6831] bridge_slave_1: left allmulticast mode [ 197.061568][ T6831] bridge_slave_1: left promiscuous mode [ 197.083588][ T6831] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.290185][ T6831] bond0: (slave bond_slave_0): Releasing backup interface [ 197.333055][ T6831] bond0: (slave bond_slave_1): Releasing backup interface [ 197.351610][ T6864] input: syz0 as /devices/virtual/input/input15 [ 197.608480][ T6831] team0: Port device team_slave_0 removed [ 198.374286][ T6831] team0: Port device team_slave_1 removed [ 198.381578][ T6831] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.389100][ T6831] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.452462][ T6831] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.462714][ T6831] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.072984][ T6877] cifs: Unknown parameter 'mode' [ 201.551869][ T6890] overlayfs: metacopy with no lower data found - abort lookup (/bus) [ 202.677057][ T5890] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 202.849353][ T5890] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 202.850812][ T6041] ================================================================== [ 202.868463][ T6041] BUG: KASAN: slab-out-of-bounds in iov_iter_revert+0x1c1/0x5a0 [ 202.876158][ T6041] Read of size 4 at addr ffff88802179c5f8 by task kworker/u8:9/6041 [ 202.884341][ T6041] [ 202.886690][ T6041] CPU: 1 UID: 0 PID: 6041 Comm: kworker/u8:9 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(full) [ 202.886716][ T6041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 202.886739][ T6041] Workqueue: events_unbound netfs_write_collection_worker [ 202.886775][ T6041] Call Trace: [ 202.886783][ T6041] [ 202.886791][ T6041] dump_stack_lvl+0x241/0x360 [ 202.886822][ T6041] ? __pfx_dump_stack_lvl+0x10/0x10 [ 202.886848][ T6041] ? rcu_is_watching+0x15/0xb0 [ 202.886871][ T6041] ? __virt_addr_valid+0x183/0x530 [ 202.886896][ T6041] ? lock_release+0x4e/0x3e0 [ 202.886925][ T6041] ? __virt_addr_valid+0x183/0x530 [ 202.886949][ T6041] ? __virt_addr_valid+0x183/0x530 [ 202.886974][ T6041] print_report+0x16e/0x5b0 [ 202.887000][ T6041] ? __virt_addr_valid+0x183/0x530 [ 202.887023][ T6041] ? __virt_addr_valid+0x183/0x530 [ 202.887046][ T6041] ? __virt_addr_valid+0x45f/0x530 [ 202.887070][ T6041] ? __phys_addr+0xba/0x170 [ 202.887095][ T6041] ? iov_iter_revert+0x1c1/0x5a0 [ 202.887124][ T6041] kasan_report+0x143/0x180 [ 202.887150][ T6041] ? iov_iter_revert+0x1c1/0x5a0 [ 202.887183][ T6041] iov_iter_revert+0x1c1/0x5a0 [ 202.887216][ T6041] netfs_retry_writes+0x17f2/0x19d0 [ 202.887248][ T6041] ? do_raw_spin_unlock+0x13c/0x8b0 [ 202.887282][ T6041] ? do_raw_spin_lock+0x151/0x370 [ 202.887309][ T6041] ? __pfx_netfs_retry_writes+0x10/0x10 [ 202.887344][ T6041] ? do_raw_spin_lock+0x151/0x370 [ 202.887377][ T6041] netfs_write_collection_worker+0x2fc0/0x3bf0 [ 202.887439][ T6041] ? process_scheduled_works+0x9cb/0x18e0 [ 202.887460][ T6041] process_scheduled_works+0xac3/0x18e0 [ 202.887497][ T6041] ? __pfx_process_scheduled_works+0x10/0x10 [ 202.887523][ T6041] ? assign_work+0x367/0x3d0 [ 202.887546][ T6041] worker_thread+0x870/0xd50 [ 202.887575][ T6041] ? __kthread_parkme+0x1a8/0x200 [ 202.887600][ T6041] ? __pfx_worker_thread+0x10/0x10 [ 202.887622][ T6041] kthread+0x7b7/0x940 [ 202.887648][ T6041] ? __pfx_worker_thread+0x10/0x10 [ 202.887670][ T6041] ? __pfx_kthread+0x10/0x10 [ 202.887694][ T6041] ? __pfx_kthread+0x10/0x10 [ 202.887719][ T6041] ? __pfx_kthread+0x10/0x10 [ 202.887744][ T6041] ? __pfx_kthread+0x10/0x10 [ 202.887768][ T6041] ? _raw_spin_unlock_irq+0x23/0x50 [ 202.887787][ T6041] ? lockdep_hardirqs_on+0x9d/0x150 [ 202.887807][ T6041] ? __pfx_kthread+0x10/0x10 [ 202.887833][ T6041] ret_from_fork+0x4b/0x80 [ 202.887851][ T6041] ? __pfx_kthread+0x10/0x10 [ 202.887877][ T6041] ret_from_fork_asm+0x1a/0x30 [ 202.887923][ T6041] [ 202.887930][ T6041] [ 202.891898][ T5890] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 28719, setting to 1024 [ 202.899728][ T6041] Allocated by task 6655: [ 202.899744][ T6041] kasan_save_track+0x3f/0x80 [ 202.899768][ T6041] __kasan_kmalloc+0x9d/0xb0 [ 202.899790][ T6041] __kmalloc_node_noprof+0x29a/0x4d0 [ 202.899816][ T6041] alloc_slab_obj_exts+0x3a/0xa0 [ 202.899840][ T6041] __memcg_slab_post_alloc_hook+0x31c/0x7e0 [ 203.172048][ T6041] __kmalloc_node_track_caller_noprof+0x30e/0x4d0 [ 203.178485][ T6041] kmalloc_reserve+0x111/0x2a0 [ 203.183250][ T6041] __alloc_skb+0x1f2/0x480 [ 203.187671][ T6041] alloc_skb_with_frags+0xc3/0x830 [ 203.192869][ T6041] sock_alloc_send_pskb+0x91c/0xa70 [ 203.198075][ T6041] unix_dgram_sendmsg+0x6d4/0x1ea0 [ 203.203193][ T6041] __sock_sendmsg+0x221/0x270 [ 203.207873][ T6041] ____sys_sendmsg+0x523/0x860 [ 203.212639][ T6041] __sys_sendmmsg+0x3a0/0x7b0 [ 203.217314][ T6041] __x64_sys_sendmmsg+0xa0/0xb0 [ 203.222164][ T6041] do_syscall_64+0xf3/0x230 [ 203.226672][ T6041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.232571][ T6041] [ 203.234895][ T6041] The buggy address belongs to the object at ffff88802179c500 [ 203.234895][ T6041] which belongs to the cache kmalloc-128 of size 128 [ 203.248970][ T6041] The buggy address is located 120 bytes to the right of [ 203.248970][ T6041] allocated 128-byte region [ffff88802179c500, ffff88802179c580) [ 203.263648][ T6041] [ 203.265975][ T6041] The buggy address belongs to the physical page: [ 203.272479][ T6041] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802179cc00 pfn:0x2179c [ 203.282546][ T6041] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 203.290632][ T6041] page_type: f5(slab) [ 203.294620][ T6041] raw: 00fff00000000200 ffff88801b041a00 ffffea00008ceed0 ffffea0000c45b10 [ 203.303210][ T6041] raw: ffff88802179cc00 000000000010000d 00000000f5000000 0000000000000000 [ 203.311793][ T6041] page dumped because: kasan: bad access detected [ 203.318209][ T6041] page_owner tracks the page as allocated [ 203.323923][ T6041] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6036, tgid 6033 (syz.1.28), ts 111472634085, free_ts 111253665119 [ 203.343033][ T6041] post_alloc_hook+0x1f4/0x240 [ 203.347820][ T6041] get_page_from_freelist+0x3ab2/0x3c50 [ 203.353370][ T6041] __alloc_frozen_pages_noprof+0x266/0x580 [ 203.359266][ T6041] alloc_pages_mpol+0x339/0x690 [ 203.364120][ T6041] allocate_slab+0x8f/0x3a0 [ 203.368624][ T6041] ___slab_alloc+0xc3b/0x1500 [ 203.373299][ T6041] __slab_alloc+0x58/0xa0 [ 203.377640][ T6041] __kmalloc_cache_noprof+0x26a/0x370 [ 203.383038][ T6041] tipc_nametbl_insert_publ+0x64/0x1510 [ 203.388604][ T6041] tipc_nametbl_publish+0xc7/0x1e0 [ 203.393727][ T6041] tipc_sk_publish+0x200/0x4b0 [ 203.398506][ T6041] tipc_sk_join+0x42f/0x8a0 [ 203.403020][ T6041] tipc_setsockopt+0x914/0xc40 [ 203.407787][ T6041] do_sock_setsockopt+0x3b1/0x710 [ 203.412811][ T6041] __x64_sys_setsockopt+0x1ee/0x280 [ 203.418010][ T6041] do_syscall_64+0xf3/0x230 [ 203.422531][ T6041] page last free pid 6036 tgid 6033 stack trace: [ 203.428860][ T6041] __free_frozen_pages+0xd7c/0x1020 [ 203.434110][ T6041] vfree+0x1c3/0x360 [ 203.438028][ T6041] bpf_prog_calc_tag+0x67f/0x8e0 [ 203.442977][ T6041] resolve_pseudo_ldimm64+0xd3/0xd30 [ 203.448276][ T6041] bpf_check+0x1d0b/0x1d1c0 [ 203.452799][ T6041] bpf_prog_load+0x17ee/0x2250 [ 203.457558][ T6041] __sys_bpf+0x5dd/0x8b0 [ 203.461798][ T6041] __x64_sys_bpf+0x7c/0x90 [ 203.466220][ T6041] do_syscall_64+0xf3/0x230 [ 203.470737][ T6041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.476637][ T6041] [ 203.478959][ T6041] Memory state around the buggy address: [ 203.484590][ T6041] ffff88802179c480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 203.492648][ T6041] ffff88802179c500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 203.500708][ T6041] >ffff88802179c580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 203.508806][ T6041] ^ [ 203.516794][ T6041] ffff88802179c600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc [ 203.524865][ T6041] ffff88802179c680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 203.532952][ T6041] ================================================================== [ 203.550858][ T5890] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 203.561350][ T5890] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 203.570862][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.597374][ T6896] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 203.678350][ T6041] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 203.685605][ T6041] CPU: 1 UID: 0 PID: 6041 Comm: kworker/u8:9 Not tainted 6.14.0-syzkaller-11270-g08733088b566 #0 PREEMPT(full) [ 203.697440][ T6041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 203.707518][ T6041] Workqueue: events_unbound netfs_write_collection_worker [ 203.714674][ T6041] Call Trace: [ 203.717981][ T6041] [ 203.720939][ T6041] dump_stack_lvl+0x241/0x360 [ 203.725656][ T6041] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.730889][ T6041] ? __pfx__printk+0x10/0x10 [ 203.735514][ T6041] ? vscnprintf+0x5d/0x90 [ 203.739884][ T6041] panic+0x349/0x880 [ 203.743814][ T6041] ? check_panic_on_warn+0x21/0xb0 [ 203.748960][ T6041] ? __pfx_panic+0x10/0x10 [ 203.753405][ T6041] ? _raw_spin_unlock_irqrestore+0x134/0x140 [ 203.759411][ T6041] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 203.765782][ T6041] ? print_report+0x519/0x5b0 [ 203.770488][ T6041] check_panic_on_warn+0x86/0xb0 [ 203.775452][ T6041] ? iov_iter_revert+0x1c1/0x5a0 [ 203.780600][ T6041] end_report+0x77/0x160 [ 203.784874][ T6041] kasan_report+0x154/0x180 [ 203.789420][ T6041] ? iov_iter_revert+0x1c1/0x5a0 [ 203.794409][ T6041] iov_iter_revert+0x1c1/0x5a0 [ 203.799219][ T6041] netfs_retry_writes+0x17f2/0x19d0 [ 203.804546][ T6041] ? do_raw_spin_unlock+0x13c/0x8b0 [ 203.809789][ T6041] ? do_raw_spin_lock+0x151/0x370 [ 203.814845][ T6041] ? __pfx_netfs_retry_writes+0x10/0x10 [ 203.820430][ T6041] ? do_raw_spin_lock+0x151/0x370 [ 203.825500][ T6041] netfs_write_collection_worker+0x2fc0/0x3bf0 [ 203.831725][ T6041] ? process_scheduled_works+0x9cb/0x18e0 [ 203.837475][ T6041] process_scheduled_works+0xac3/0x18e0 [ 203.843067][ T6041] ? __pfx_process_scheduled_works+0x10/0x10 [ 203.849082][ T6041] ? assign_work+0x367/0x3d0 [ 203.853700][ T6041] worker_thread+0x870/0xd50 [ 203.858331][ T6041] ? __kthread_parkme+0x1a8/0x200 [ 203.863387][ T6041] ? __pfx_worker_thread+0x10/0x10 [ 203.868531][ T6041] kthread+0x7b7/0x940 [ 203.872640][ T6041] ? __pfx_worker_thread+0x10/0x10 [ 203.877783][ T6041] ? __pfx_kthread+0x10/0x10 [ 203.882405][ T6041] ? __pfx_kthread+0x10/0x10 [ 203.887027][ T6041] ? __pfx_kthread+0x10/0x10 [ 203.891653][ T6041] ? __pfx_kthread+0x10/0x10 [ 203.896276][ T6041] ? _raw_spin_unlock_irq+0x23/0x50 [ 203.901499][ T6041] ? lockdep_hardirqs_on+0x9d/0x150 [ 203.906730][ T6041] ? __pfx_kthread+0x10/0x10 [ 203.911359][ T6041] ret_from_fork+0x4b/0x80 [ 203.915804][ T6041] ? __pfx_kthread+0x10/0x10 [ 203.920431][ T6041] ret_from_fork_asm+0x1a/0x30 [ 203.925241][ T6041] [ 203.928587][ T6041] Kernel Offset: disabled [ 203.932923][ T6041] Rebooting in 86400 seconds..