last executing test programs: 12m16.290963408s ago: executing program 32 (id=1166): prlimit64(0x0, 0xc, &(0x7f0000000140)={0xc, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x80000000, 0x0, 0x41414270, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4}}) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x10002, 0x2, 0x2}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000140)=0x2) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x2, 0x4}}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00'}, 0x10) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r6 = socket$nl_route(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x4, 0x8104018, 0x0, 0x0, 0x7, 0x10007, 0x0, 0x0, 0x0, 0x40}}, 0x50) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x6) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000300)={0x28, 0x0, r7, {{0xeabe, 0x4, 0x1, r8}}}, 0x28) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r5, @ANYBLOB="01980000000000001800128008000100677265000c00028008000100", @ANYRES32=r5, @ANYBLOB="712a166cd4a92c80ad119cb1bbbbb31f98e60000a60c7d79bbcf2a9af44c46dbe494fd13f8f99f3dcc93b755fe9483bad1c6957d1f230caf8c899e32a2b8b1ed5e61a5c81b66750fa1352b6cc30d0aacd139efb1a1509702894037c9d46450f944eb90bb67f38d9dae751489c1da2d72dbee4978835aac0f53c2f217a727e778a25f699475315e0d898203107eda2135062a47f9738e13237c781d13f507cfc8955c000000"], 0x38}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}}, 0x0) 10m16.666232921s ago: executing program 2 (id=1484): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x2, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f00000088c0)=[{0x0, 0x0, &(0x7f0000002980)=[{&(0x7f0000000600)="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", 0x1000}, {&(0x7f00000004c0)="198e", 0x2}], 0x2, 0x0, 0x0, 0x80}], 0x1, 0x40804) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}}, 0x40800) r6 = openat$sysfs(0xffffff9c, &(0x7f0000000200)='/sys/kernel/notes', 0x0, 0x0) ioctl$TCSETAF(r6, 0x5408, &(0x7f00000002c0)={0x4, 0x0, 0x6, 0xaf, 0x1a, "76e3ca58ed6acfed"}) preadv(r6, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000340)=""/175, 0xaf}], 0x2, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl2\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x700, 0x8000, 0x3ff, 0x3, {{0x1a, 0x4, 0x0, 0x11, 0x68, 0x65, 0x0, 0xa, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x33}, @multicast1, {[@lsrr={0x83, 0x17, 0x33, [@loopback, @private=0xa010101, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}, @timestamp_addr={0x44, 0xc, 0x66, 0x1, 0x1, [{@broadcast, 0x2}]}, @cipso={0x86, 0x2e, 0x1, [{0x5, 0xd, "81dd5c8b8f862a943fa41c"}, {0x6, 0xb, "1f5bef7bdc95e178fe"}, {0x6, 0x10, "64246337a7ca6ea65df39af1b53b"}]}]}}}}}) r8 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x20000, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x200, '\x00', r7, r8, 0x3, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002a00)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0000002071a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950001000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050505f8e6fb0fd7ddcb12b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7131b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc8136bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f85db47a4a69bf9bc5fa96ee293fbd165a5a68488e40b001000000a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5b787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72323cc924e627f2f4b775dd4e9e3070756f97a6791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdfa2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa802000000872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b9243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00c75367966130b547dbf8b497af002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b0600000000000000564a2b49b745f3bf2cf7908b6d7d748308eea09fb4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c74f20675eb781925441578f93046aaddea8ec4ca37f71c2710a7e58ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e4fe9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eee46eb20c20bb82aa31771cd379ec83554cea5e6539d85b980e358d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f9166965a53beb05142e1b1550a8cb7852f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9d95fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b9617432e251d14b283f7d82761c26e329555f9290af4100000000000000749efd3f63655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b0000000032a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002157a3609b6ff9843ee19ec647249a9375de5858818f3c2432e6ced4380217ac51a84a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3bbdc8c17a23692759ccf5a205111b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c8e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd809269f816fa748b20ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f9289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f05714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc30935455f6de5b64bcdfaf8ac04ce96c421e5dbc85e168d3559ab13df98163e39e4065e65a2f43412535d6f7c09830f3a0865356602363c690d2755768612bb7330a8b285f2584892eaff1889a61ee0c2a6d1831d41805707bb43991d40feb5dd070000000000006ed70faa6f42ab4065dfa5227deb52b2a3730558dcacc145d5bcffe5f90f85b0a27b0439b5e9edf1856b4a09d4cc333e7c4893bd8c434414335e34390c9ad847d8d26c90ce53214d7083f10cf25b5f2381d83e30dc622453251b7189282e6e40557a8645fdf27c2b474b4200ddafa6538cdb45cc93dbebd91d1fbbd6ebb081c6efb001adc641e929750452932cd0f8d7a0c9f8de0d64d7a9751d93b973b9cce1aaed8b00681cac4332bcaf97864627698e395ae0cd2ee505bf472e11b2dbfcbcb793872e261f626818555f6fa3bdb302ba1089ba5ec8e66d0ae72da2bc09ab98a8e711a39d438cf5f59eebe3d71331850cfd587b35e58d5b23f065642ff58a5a71213c9ceeb40f81f24832863e3d26d167290c0c5bb9c8ae9b201ffde31b7d6ad3d27347b38befa07be186b0c7ad6fdec572a3fb2568de245f1bde56391c95d80a5479575fa7c13f1e1589dc3501c88cac9155fd5b62306f5c4aa74c2994055353dac64a2d38671b000000000000"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r10 = open_tree(r6, &(0x7f0000000300)='./file0\x00', 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r10, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000500)={&(0x7f00000007c0)={0x364, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x54, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x314}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x34d}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}, @TIPC_NLA_NODE={0x1bc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x80000000}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "10640449747386a4ebe32a45cc0295fcf2de301a6172a8785a488a65e4783c5f"}}, @TIPC_NLA_NODE_ID={0xef, 0x3, "34f8e1d03a3891770b824bdff905a688f2d8ecee9c3b089c32106143d2d0e972966772672aa7c29ecfa43a227b74ebc44a24ff221c7771b5c1df755f66edd3fe866ad625154b966c4fce87b29c52007ff8c7190a4d2f54020495024e0d99e70e37c58ad8926a165783317b38fbb33e9b095160586d322f0254161dfb858dac81d444db4c988b4ec6ca6c808445d36e7c38f5ff1de5f7b28677d6c59c81f5e7a0416e086391bb4bbe9c9d79cefa2be7cfb7826f4300097c2650c388795d647aacf0e978ce8e6ee4913e3c821a6d8655ddd5b9dadaa541c1dd90846df334dd071044132d99ed6ca0cc4d2cc1"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ID={0x62, 0x3, "fce7dcc677a7ed2166e6ed2933d1278edbfd66d65f4f56694324f1db2bc808b085f04d40dedf517c51c9c9a90d1633c7bb6927b113f8cf8eddd041b163598644b10546ccd82f19114d4c1eb057ba125bec1a09c7364bed3e8701486611a0"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_LINK={0xf8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdd}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x52f}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa6d}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}]}, 0x364}, 0x1, 0x0, 0x0, 0x4054}, 0x44844) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r9, 0xe0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r11}, 0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r11}, 0x4) 10m16.239428336s ago: executing program 2 (id=1486): r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) r3 = socket$pptp(0x18, 0x1, 0x2) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x80, &(0x7f00000003c0)=@ll={0x11, 0x1, 0x0, 0x1, 0x4}, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x2000}) fcntl$lock(r6, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0xfd97}) fcntl$lock(r6, 0x25, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) sendmsg$inet_sctp(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="300000000000000084000000010000008000020004020000050000000700000096c80000ffff000002000000977f61"], 0x30, 0x2000}, 0x4004817) 10m15.123730557s ago: executing program 2 (id=1491): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)={0x44, r2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x44}, 0x8, 0x3000000000002, 0x0, 0x885}, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x40, r2, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @rand_addr=0x64010101}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x800) 10m14.917754979s ago: executing program 2 (id=1494): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYRES32=0x1, @ANYRESHEX=r2, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffff2980}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, &(0x7f0000000740), &(0x7f0000000000)=""/8, 0x2}, 0x20) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'veth0_to_team\x00', @broadcast}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r6, 0x1, 0x22, &(0x7f0000000080)=0xb, 0x4) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80000, 0x0) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="03070000b5"], 0xc8) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000200), 0x40400) close_range(r7, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000100)={0x0, {}, 0x0, {}, 0x80000001, 0x4, 0x20, 0x14, "14d587a4324031641ecd8de9d490468b5d035f898c61115c6a08ca130e685d12431a51ac45993a44365e8c36b37c7712fa63a06266e5b09eeed864cbe2c33c58", "eee50dcd89fac484b91723ae2a73a93176e88ee43d4c643dd3129ebb5fb0daa4", [0x8, 0x7]}) socket$inet(0x2, 0x3, 0x8d) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x108802, 0x0) socket$inet(0x2, 0x2000000080002, 0x0) 10m12.364377734s ago: executing program 2 (id=1501): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000006a40)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0xfffeffff, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1400000000000000290011004300000002000000000000002000"], 0x38}}], 0x1, 0x48000) 10m12.095829696s ago: executing program 2 (id=1503): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000024c0), 0x1, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x80041285, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x256f16877c9c3f29, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x8d}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x39, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4d) write$binfmt_register(r0, &(0x7f0000002500)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x1, 0x3a, '@&', 0x3a, 'flock=strict', 0x3a, './file0', 0x3a, [0x43]}, 0x36) r5 = socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0xfffffffffffffffd, 0x3, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/376]}, 0x1f0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033a0000001f030000ef000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 9m55.112361306s ago: executing program 33 (id=1503): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000024c0), 0x1, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x80041285, 0x0) r4 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000140), 0x256f16877c9c3f29, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x8d}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x39, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4d) write$binfmt_register(r0, &(0x7f0000002500)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x1, 0x3a, '@&', 0x3a, 'flock=strict', 0x3a, './file0', 0x3a, [0x43]}, 0x36) r5 = socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x178, [0x200003c0, 0xfffffffffffffffd, 0x3, 0x200003f0, 0x20000420], 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"/376]}, 0x1f0) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b87033a0000001f030000ef000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 9m47.852694325s ago: executing program 5 (id=1544): fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000380)={0x1, 0x2, 0x0, 0x4, 0xffffffffffffffff}) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[], 0x0) r0 = fsopen(&(0x7f00000003c0)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, 0x0, 0x0, 0xffffffffffffff9c) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x54}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xd) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000040), r5, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r5, 0x0, 0x0, 0x30, 0x0, @in={0x1b, 0xfffc, @local}, @ib={0x1b, 0x7, 0x0, {"00000000000000000000000000ffffff"}, 0x0, 0x0, 0x4}}}, 0x118) socket$key(0xf, 0x3, 0x2) 9m45.227447187s ago: executing program 5 (id=1551): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000002c0)={0x8, 0x1, 0x1, "c8e7747f8c0bea55dddb12200100000800080da200", 0x3447504d}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x18, 0x20000000, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x34, 0x0, 0x2}, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4205, r6, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) syz_open_dev$vim2m(0x0, 0x8000, 0x2) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r10}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x10, &(0x7f0000000a40)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) 9m42.1361629s ago: executing program 5 (id=1556): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) r0 = syz_open_dev$sg(&(0x7f0000000200), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000380)="42e900000080", 0x0, 0x7, 0x0, 0x4000, 0x0}) 9m39.923405859s ago: executing program 5 (id=1559): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8}}, &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 9m39.284198739s ago: executing program 5 (id=1560): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61122800000000006113140000000000bf1000000000000025000200091b00003d030000000000008701000000000000bc26000000000000bf67000000000000340300000ee600f0670200001400000015030000ffffffffbf050000000000000f650000000000006507f4ff02000400070700006b3128fe1f75000000000000bf540000000000000705000003001500ae430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe70305863f970eac3590ac99b798f8125f1c322c2a154a8a8d"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setresuid(0xee01, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="03000000040000", @ANYRES32=0x0, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000100), &(0x7f0000000140)=r4}, 0x20) 9m28.825011228s ago: executing program 5 (id=1570): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{}, [@TCA_NETEM_RATE64={0xc}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000300)={'nat\x00', 0x0, [0x106, 0xb7, 0x9, 0x9, 0xfdffffff]}, &(0x7f0000000500)=0x54) 9m11.960001261s ago: executing program 34 (id=1570): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x34, 0x2, {{}, [@TCA_NETEM_RATE64={0xc}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x5}]}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000300)={'nat\x00', 0x0, [0x106, 0xb7, 0x9, 0x9, 0xfdffffff]}, &(0x7f0000000500)=0x54) 6m22.989034214s ago: executing program 6 (id=1951): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2a0, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1d0, 0x20a, 0x278, 0x1d0, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @empty, [0x0, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6, 0xff}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9, 0x2, "675ea23a0686f71b3e814193f3cada8f4702f12c8d4d425d8a78cd4854eb"}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0xb0, {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x91) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000040)={0x2, 'veth1_virt_wifi\x00', {0x6}, 0x4}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1, 0x0, 0x40000}, 0x18) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) set_mempolicy(0x4005, 0x0, 0xb) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) shmat(0x0, &(0x7f00002e5000/0x4000)=nil, 0x66c8d4fe9b86d43c) 6m21.336407871s ago: executing program 6 (id=1956): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) r4 = io_uring_setup(0x7d5, &(0x7f0000000500)={0x0, 0x40000000}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ef, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0xfbfd, 0x401d, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018"], &(0x7f0000000100)=""/195, 0x26, 0xc3, 0x1, 0x0, 0x0, @void, @value}, 0x28) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000340)={0xe, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @rand_addr=0x64010102}}}, 0x108) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_buf(r6, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011140100000000000000000008004b0028"], 0x20}}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001800)=ANY=[@ANYBLOB="fc00000019000100000000000000000064010102000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32, @ANYBLOB="2343573af91526a3d2c954e00caf73d945677e967c4f4cbc4fadc7703ef5f55757291dac6c43e77275ec01b6e3515c15bedc1f8f0f53b5ebffbe3b2fa129863eb7fc387c9eac0ccf7425167c7d9ce3138ca1b3712b8dd9981f6b7aaa899962de3e639d28c3da7e6c18e6e38559b7b149"], 0xfc}}, 0x0) 6m20.879905487s ago: executing program 6 (id=1963): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x19, 0x0, 0x1, 0x49, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b03f6ffe0ff64000200475400f6a13bb1000000080086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r3}, 0x14) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$unix(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)="4906f4d6", 0x4}], 0x1, 0x0, 0x0, 0x40000}, 0x8000) 6m17.864025504s ago: executing program 6 (id=1970): futex(&(0x7f0000000180), 0x5, 0x0, 0x0, &(0x7f0000000000), 0xaffffffa) (fail_nth: 4) 6m16.317336807s ago: executing program 6 (id=1975): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaabaaaaaaaa00000000000008004500001c0000000000019078ac1e0001ffffffff0d0090780000000b"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) io_setup(0x3, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x5453, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup3(r1, r2, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) r4 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) 6m12.909408951s ago: executing program 6 (id=1987): socket(0x2000000015, 0x80005, 0x0) syz_io_uring_setup(0x754f, &(0x7f0000000680)={0x0, 0x7de6, 0x10, 0x3, 0x3c8}, &(0x7f0000000700), &(0x7f0000000780)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r3, 0x1d, 0x0, 0x9, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000300)=[0x0], 0x0, &(0x7f00000003c0)=[0x0, 0x0]}, 0x40) unshare(0xa000200) semtimedop(0x0, &(0x7f0000000080), 0x0, 0x0) unshare(0x60400) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r4) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)={0x4c, r5, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x35, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x4c}, 0x8, 0x3000000000002, 0x0, 0x885}, 0x10) 5m55.557559074s ago: executing program 35 (id=1987): socket(0x2000000015, 0x80005, 0x0) syz_io_uring_setup(0x754f, &(0x7f0000000680)={0x0, 0x7de6, 0x10, 0x3, 0x3c8}, &(0x7f0000000700), &(0x7f0000000780)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r3 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r3, 0x1d, 0x0, 0x9, &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000300)=[0x0], 0x0, &(0x7f00000003c0)=[0x0, 0x0]}, 0x40) unshare(0xa000200) semtimedop(0x0, &(0x7f0000000080), 0x0, 0x0) unshare(0x60400) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r4) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)={0x4c, r5, 0x201, 0x0, 0x0, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x35, 0x0, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'sit0\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @private=0xa010102}]}, 0x4c}, 0x8, 0x3000000000002, 0x0, 0x885}, 0x10) 5m7.24674956s ago: executing program 4 (id=2105): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000440)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x410000002) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r5 = syz_open_dev$video4linux(&(0x7f0000000200), 0x800000000000004, 0xc0200) ioctl$VIDIOC_TRY_ENCODER_CMD(r5, 0xc0305602, &(0x7f0000000040)={0x1, 0x5, [0x3, 0x0, 0x0, 0x0, 0x7fff]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1042, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r6, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) ioctl$sock_TIOCOUTQ(r7, 0x5411, &(0x7f0000000240)) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="00032d080008000000000008000800040000000600060001000000"], 0x2c}, 0x1, 0x0, 0x0, 0xc004}, 0x8000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8923, &(0x7f0000000000)={'vlan0\x00', @random="0133014010ff"}) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x4) 5m1.996373955s ago: executing program 4 (id=2109): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x700, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 5m1.797423896s ago: executing program 4 (id=2111): openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f00000002c0)={0x1d, 0xffffffffffffffff, 0x1}) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x10) socket(0xa, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sys_enter\x00', r6}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="0ffe0000000000002800128009000100766c616e000000001800028006000100000000000c000300000000000000000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r9], 0x58}, 0x1, 0xba01}, 0x20040000) 5m0.64876417s ago: executing program 4 (id=2115): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000002c0)={0x8, 0x1, 0x1, "c8e7747f8c0bea55dddb12200100000800080da200", 0x3447504d}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x18, 0x20000000, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x34, 0x0, 0x2}, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4205, r6, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) r7 = syz_open_dev$vim2m(0x0, 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r11}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x10, &(0x7f0000000a40)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) 4m57.21923739s ago: executing program 4 (id=2118): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) (async) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) (async) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) r3 = syz_io_uring_setup(0x6908, &(0x7f0000000440)={0x0, 0x0, 0x10100}, &(0x7f0000000340), &(0x7f0000000100)=0x0) (async) syz_io_uring_setup(0x1868, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) (async) io_uring_enter(r3, 0x184c, 0x0, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) (async) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4m56.80268237s ago: executing program 4 (id=2120): r0 = socket$inet(0x2, 0x1, 0x4cebd90) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000100), 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [0xff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000], 'erspan0\x00', 'wlan0\x00', {}, {0xff}, 0x2b, 0x3, 0x3}, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) openat$snapshot(0xffffff9c, &(0x7f0000000a40), 0x81, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="100000000000000000000000070000001c000000000000000000000008000000", @ANYRESDEC], 0x30}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002400)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)="787a921db1f55b43e2e03b9aecf42de7acb15f41c2d4baea30eda9a9b4d756ddf13d1d9fc4f97c8dbc", 0x29}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, 0x0) syz_io_uring_setup(0x58be, &(0x7f0000000280)={0x0, 0x0, 0x13100}, &(0x7f0000000180), &(0x7f00000001c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m37.211545671s ago: executing program 36 (id=2120): r0 = socket$inet(0x2, 0x1, 0x4cebd90) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000100), 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e8, 0x0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x418, 0x3d8, 0x3d8, 0x418, 0x3d8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @local, [0xff, 0xffffffff, 0x0, 0xff000000], [0xffffff00, 0xff000000], 'erspan0\x00', 'wlan0\x00', {}, {0xff}, 0x2b, 0x3, 0x3}, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x548) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(0xffffffffffffffff, 0xc, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) openat$snapshot(0xffffff9c, &(0x7f0000000a40), 0x81, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="100000000000000000000000070000001c000000000000000000000008000000", @ANYRESDEC], 0x30}, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002400)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)="787a921db1f55b43e2e03b9aecf42de7acb15f41c2d4baea30eda9a9b4d756ddf13d1d9fc4f97c8dbc", 0x29}], 0x1}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, 0x0) syz_io_uring_setup(0x58be, &(0x7f0000000280)={0x0, 0x0, 0x13100}, &(0x7f0000000180), &(0x7f00000001c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 4m26.69070172s ago: executing program 9 (id=2148): fchownat(0xffffffffffffffff, 0x0, 0xee01, 0x0, 0x100) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff0000"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, 0x0) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x17, @time={0x65757100, 0x1000000}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) socket$inet6(0xa, 0xa, 0x80000001) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x1, 0x100) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@acquire={0x174, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@remote, {@in=@remote, @in6=@private0}, {{@in6=@private2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x0, 0x0, 0x80ffffff}}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@private2}]}]}, 0x174}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r4, 0x0, 0x1}, 0x18) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x1, 0x84) 4m24.291778318s ago: executing program 9 (id=2174): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0x5, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x8000000, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="449fa00908c01f0894adebc3816a1b4970f0779780c263bb97186b6b1301e73c23aaa78e97ca5fa6ff021a3bf1c3fd08d604e470da872a48fdfc225965a9bb39f7db7fab9000d49a57c0efc3910875213403c32873b8840b315068a0819380ee2a91506a05e07606edc2c1b6bfe9fad30e", 0x71}], 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0xca, &(0x7f0000000500)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017258ba9380d440fe0000000000002900000002000000f8476d1afea847dd05ea3b85c87561536768e51f36c8328016e9e29093f7b91d3700fcf7890865ed575ab37cdbc20159287a171a552db39a6bce0f9b6d080345398348d29ded2f90360da18b0f0ef6113ae979fa2fe75257277701ca4563e609cb1c1779d050f7eebbccf2667739da18aa7a47ec996982e2207bdf754deeeeea9011d73de87ddea0d7d063f3dfff7d49ae0cd3550ad659055a91adf37d8bd500"/220, 0xdc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000140)={0x6, 0x6}, 0x0) recvfrom$rose(0xffffffffffffffff, 0x0, 0x0, 0x20000001, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x1, @null}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0xc0}}, 0x82) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x1a) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@metacopy_on}, {@lowerdir={'lowerdir', 0x3d, './file2'}}, {@verity_off}, {@xino_auto}]}) chdir(&(0x7f00000000c0)='./bus\x00') ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000280)=0x8001) open(&(0x7f0000000080)='./bus\x00', 0x10000, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000600)=ANY=[], 0x0) remap_file_pages(&(0x7f00003e4000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mprotect(&(0x7f0000a2d000/0x2000)=nil, 0x2000, 0x3000000) r2 = semget$private(0x0, 0x6, 0x0) semtimedop(r2, &(0x7f0000000180)=[{0x0, 0xfff}], 0x1, 0x0) semctl$GETZCNT(r2, 0x2, 0xf, 0x0) 4m7.93780735s ago: executing program 37 (id=2174): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x14, 0x5, &(0x7f0000000400)=ANY=[@ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x8000000, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="449fa00908c01f0894adebc3816a1b4970f0779780c263bb97186b6b1301e73c23aaa78e97ca5fa6ff021a3bf1c3fd08d604e470da872a48fdfc225965a9bb39f7db7fab9000d49a57c0efc3910875213403c32873b8840b315068a0819380ee2a91506a05e07606edc2c1b6bfe9fad30e", 0x71}], 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0xca, &(0x7f0000000500)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017258ba9380d440fe0000000000002900000002000000f8476d1afea847dd05ea3b85c87561536768e51f36c8328016e9e29093f7b91d3700fcf7890865ed575ab37cdbc20159287a171a552db39a6bce0f9b6d080345398348d29ded2f90360da18b0f0ef6113ae979fa2fe75257277701ca4563e609cb1c1779d050f7eebbccf2667739da18aa7a47ec996982e2207bdf754deeeeea9011d73de87ddea0d7d063f3dfff7d49ae0cd3550ad659055a91adf37d8bd500"/220, 0xdc) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0x9, &(0x7f0000000140)={0x6, 0x6}, 0x0) recvfrom$rose(0xffffffffffffffff, 0x0, 0x0, 0x20000001, &(0x7f0000000100)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x1, @null}, 0x1c) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0xc0}}, 0x82) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x1a) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000240)={[{@metacopy_on}, {@lowerdir={'lowerdir', 0x3d, './file2'}}, {@verity_off}, {@xino_auto}]}) chdir(&(0x7f00000000c0)='./bus\x00') ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000280)=0x8001) open(&(0x7f0000000080)='./bus\x00', 0x10000, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000600)=ANY=[], 0x0) remap_file_pages(&(0x7f00003e4000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) mprotect(&(0x7f0000a2d000/0x2000)=nil, 0x2000, 0x3000000) r2 = semget$private(0x0, 0x6, 0x0) semtimedop(r2, &(0x7f0000000180)=[{0x0, 0xfff}], 0x1, 0x0) semctl$GETZCNT(r2, 0x2, 0xf, 0x0) 30.359966714s ago: executing program 8 (id=2782): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$unix(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000003c0)="4906f4d6", 0x4}], 0x1, 0x0, 0x0, 0x40000}, 0x808d) 30.036939198s ago: executing program 8 (id=2785): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004042, 0x0) r4 = dup(r3) r5 = syz_io_uring_setup(0x417a, &(0x7f00000000c0)={0x0, 0x0, 0x10711, 0x1, 0xffffffff}, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), r4) syz_io_uring_submit(r6, r7, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x567, 0x20, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffdfa, 0xfa00, {0x3, 0x0, 0x0, 0xa}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x2, 0x7, 0x0, 0x10001, 0xfffffffffffffffc, 0x0, 0x8000000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffb, 0x1}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xfb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r9}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r11, &(0x7f00000bd000), 0x318, 0x0) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f0000000040)={0xb0000004}) epoll_pwait(r12, &(0x7f0000000100)=[{}], 0x1, 0xfffeffff, 0x0, 0x443c000000000000) connect$unix(r10, &(0x7f0000000140)=@abs, 0x6e) r13 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x109042, 0x0) write$P9_RSTATu(r13, &(0x7f00000003c0)=ANY=[@ANYBLOB="330200007d00000005f2000000000000000000000000000000000000000000000000000000000000000000000000000000001b00046e6f6465767b65766f6f7e0539c60005000037d93a8b920000003800704a86cec602007dfa673effeb09b5351f5bde05"], 0x233) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000630000ff000000009500680000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000240)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000185600000100000000000000000000009500001000000000f515cc11718858ff00ba8eb7cddac727abdf818e9b1d3c8ec17aae1bf96b9392bdebdf143b21941e3dba6c609828fcc9c57bf07350889bd9d31432419dbd1a77ac9d8ac564c77f322b921e92d8ec976b6b59264a1e2e4326817ae4"], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 23.714591953s ago: executing program 8 (id=2798): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYRES32=0x1, @ANYRESHEX=r2, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffff2980}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r3, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r3, &(0x7f0000003a00)=[{{&(0x7f0000000440)={0xa, 0x4e22, 0xffffff7f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000600)="11", 0x49}], 0x1}}], 0x1, 0x4c040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x89a1, &(0x7f0000000900)={'veth0_to_team\x00', @broadcast}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r5, 0x1, 0x22, &(0x7f0000000080)=0xb, 0x4) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80000, 0x0) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="03070000b5"], 0xc8) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000200), 0x40400) close_range(r6, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_STATUS(r9, 0x4c02, &(0x7f0000000100)={0x0, {}, 0x0, {}, 0x80000001, 0x4, 0x20, 0x14, "14d587a4324031641ecd8de9d490468b5d035f898c61115c6a08ca130e685d12431a51ac45993a44365e8c36b37c7712fa63a06266e5b09eeed864cbe2c33c58", "eee50dcd89fac484b91723ae2a73a93176e88ee43d4c643dd3129ebb5fb0daa4", [0x8, 0x7]}) socket$inet(0x2, 0x3, 0x8d) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x108802, 0x0) socket$inet(0x2, 0x2000000080002, 0x0) 18.97769663s ago: executing program 8 (id=2804): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = socket$packet(0x11, 0x2, 0x300) sendmmsg$sock(r1, &(0x7f0000000840)=[{{&(0x7f0000000640)=@tipc=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=[@timestamping={{0x14, 0x1, 0x25, 0xc0b}}], 0x18}}], 0x1, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f00000000c0)=0x1) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080), &(0x7f0000000180)=@sha1={0x1, "fe850fc6fc3fa14e8aa19442095195f845f737dd"}, 0x15, 0x1) syz_open_dev$sndctrl(&(0x7f0000001780), 0xb, 0x101001) fstat(r1, &(0x7f0000000340)) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004800}, 0x4000004) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,u', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000340)=ANY=[], 0x28) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x203) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = socket(0x840000000002, 0x3, 0x100) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r6) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r7) 15.683905196s ago: executing program 0 (id=2815): socket(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[], 0x50}, 0x1, 0xba01}, 0x4000049) r4 = syz_open_dev$loop(&(0x7f0000000000), 0x7fdfffffffffffff, 0x8080) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000001000), 0xe09) semget$private(0x0, 0x3, 0x62) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x1000, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x55aaffff, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c559265406c09306003d8002000", [0x0, 0x2]}}) 14.673653288s ago: executing program 0 (id=2818): socket(0x10, 0x3, 0x0) syz_open_procfs$pagemap(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000040), 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x401, 0x0, 0x9000000, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x38, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x20050800) 12.551279772s ago: executing program 8 (id=2820): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000002c0)={0x8, 0x1, 0x1, "c8e7747f8c0bea55dddb12200100000800080da200", 0x3447504d}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x18, 0x20000000, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) io_cancel(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x34, 0x0, 0x2}, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4205, r6, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) r7 = syz_open_dev$vim2m(0x0, 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xe1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r8}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r11}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x10, &(0x7f0000000a40)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) 12.226627907s ago: executing program 1 (id=2822): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xcd, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000e9255bb992464e73a02159d3720df19f7a1dfec30000000003000600000000000200000005000000000000000000000002000100000000fffffffbfc00000000030005"], 0x70}, 0x1, 0x7}, 0x2000) 11.588017708s ago: executing program 0 (id=2823): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020300000a0000000000000000000000030006000000000002000000e0000009004000000000000302000100000000000000050700000000030005000000000002"], 0x50}}, 0x0) 11.237793536s ago: executing program 1 (id=2825): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x40000}, 0x18) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 11.21403489s ago: executing program 7 (id=2826): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x24040080) syz_open_dev$audion(&(0x7f0000000040), 0x5, 0x22a441) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r2) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, 0x0, 0x168) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[], 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e040e75f800250003000f60000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd7000340000000001f0000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) 10.743825715s ago: executing program 0 (id=2828): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x24040080) syz_open_dev$audion(&(0x7f0000000040), 0x5, 0x22a441) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r2) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, 0x0, 0x168) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[], 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$PTP_SYS_OFFSET(0xffffffffffffffff, 0xc0403d11, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000014006b03000000d86e6c1d0010ffff0af32c6e040e75f800250003000f60000017d34460bc24eab556a705251e6182949a369f3d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd7000340000000001f0000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r9, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) 9.402205666s ago: executing program 1 (id=2830): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x101840, 0x0) ioctl$BLKPG(r1, 0x1269, &(0x7f0000000040)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x0, 0x1000, 0x1}}) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, &(0x7f0000000080)='\xcd\xe3/c\x88\xfd?\x94Rh\xf1\xe4T\x906`__\xc9\x9f\xdbB\"\x85\\\xb9\xfc\xfdW\x8d\x0f\xd8\xe1p\xc4\xfb-`:\x95_\xcaJ9\x95\xe2\xa0\x87)\xc3\xa0@O0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$CEC_DQEVENT(r3, 0xc0506107, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) shutdown(r8, 0x0) socket$qrtr(0x2a, 0x2, 0x0) ioctl$CEC_DQEVENT(r3, 0xc0506107, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x40046109, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet(0x2, 0x80001, 0x84) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 6.51375121s ago: executing program 3 (id=2835): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000ffffff00000000000a58000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000002c00048028000180080001006f7366001c00028005000200020000000800034000000001080001"], 0x80}}, 0x0) 6.433560557s ago: executing program 7 (id=2836): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket(0x10, 0x803, 0x0) syz_open_dev$sg(&(0x7f0000000180), 0x1000, 0x30c02) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000500)={0x0, 0x4690, 0x1000, 0x1, 0x151}, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r9, 0x0) accept4$x25(r9, 0x0, 0x0, 0x80800) pwritev2(r5, 0x0, 0x0, 0x8, 0x9, 0x2) r10 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x1, 0x12) r11 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x0, 0x0, r10}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8011}}) io_uring_enter(r11, 0x29ff, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0xfffffffffffffee5}], 0x100000000000001f) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x30, 0x4200}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_FLUSH={0x4}, @IFLA_BRPORT_LEARNING={0x5, 0x8, 0x3}, @IFLA_BRPORT_FLUSH={0x4}, @IFLA_BRPORT_NEIGH_SUPPRESS={0x5, 0x20, 0x1}]}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x4ee33}]}, 0x5c}, 0x1, 0x0, 0x0, 0x9903b85f67fd1c73}, 0x0) 6.083673849s ago: executing program 3 (id=2837): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 5.768541887s ago: executing program 3 (id=2838): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x10, 0x14, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x44}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc3}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 5.40027266s ago: executing program 0 (id=2839): r0 = socket(0xa, 0x803, 0x0) r1 = socket$inet(0x2, 0x5, 0x40000) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000003c0)=@nat={'nat\x00', 0x670, 0x2, 0x328, 0x0, 0x140, 0xfeffffff, 0x0, 0x1e8, 0x290, 0x290, 0xffffffff, 0x290, 0x290, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x6800, {0x0, @multicast2, @rand_addr, @port, @port=0x42}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1, 0x1}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @broadcast}}}}, {{@ip={@multicast2, @multicast2, 0x0, 0x0, 'veth1_virt_wifi\x00', 'veth1_to_hsr\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[], 0x7c}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0x980903, 0xfffffffc}) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) r8 = fsopen(&(0x7f0000000040)='tmpfs\x00', 0x1) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f00000007c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000a00)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="000826bd7000f5dbdf255c000000080003003a1b3a3901ea2d9a8655d37f82e3be4a852e194134c7d50f36dc974fa26a35a34f09c6497272f180bc695e10f16796c9ec13f4d10106a0d1fa36b5eda43d21a95bf8d0a7743d1dd886b47a681da8a81693549e25ee167f8c93e7e5503c4013be785a0bb03d953d840d93197886b0a55d755c", @ANYRES32=r10, @ANYBLOB="08006b003c00000008006b000000000008006b00f000000008006b005a00000008006b001400000008006b0014000000"], 0x4c}}, 0x8000) flistxattr(r8, 0x0, 0xffde) write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b) getresuid(&(0x7f0000000840)=0x0, &(0x7f0000000880), &(0x7f00000008c0)) quotactl$Q_GETQUOTA(0xffffffff80000700, &(0x7f0000000800)=@filename='./file0\x00', 0x0, &(0x7f0000000900)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='mem_disconnect\x00', r3}, 0x18) syz_emit_ethernet(0x7e, &(0x7f00000009c0)=ANY=[@ANYRES8=r2, @ANYRES64=r11, @ANYRES64=r0, @ANYRES64=r1, @ANYRES8=0x0, @ANYRES16=r6], 0x0) 5.307943222s ago: executing program 3 (id=2840): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaabaaaaaaaa00000000000008004500001c000000"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) io_setup(0x3, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000002c0)="e8", 0xfffffffffffffd79, 0x2000c850, 0x0, 0x4d) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000000)=0x40) r5 = socket(0x10, 0x400000000080803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) 2.189320513s ago: executing program 0 (id=2841): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=r0, @ANYRES32=0x1, @ANYRESHEX=r2, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffff2980}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, 0x0, &(0x7f0000000000)=""/8, 0x2}, 0x20) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r4, &(0x7f0000003a00)=[{{&(0x7f0000000440)={0xa, 0x4e22, 0xffffff7f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000600)="11", 0x49}], 0x1}}], 0x1, 0x4c040) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89a1, &(0x7f0000000900)={'veth0_to_team\x00', @broadcast}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r6, 0x1, 0x22, &(0x7f0000000080)=0xb, 0x4) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r6, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r7 = socket$inet6(0xa, 0x80000, 0x0) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="03070000b5"], 0xc8) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000200), 0x40400) close_range(r7, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_STATUS(r10, 0x4c02, &(0x7f0000000100)={0x0, {}, 0x0, {}, 0x80000001, 0x4, 0x20, 0x14, "14d587a4324031641ecd8de9d490468b5d035f898c61115c6a08ca130e685d12431a51ac45993a44365e8c36b37c7712fa63a06266e5b09eeed864cbe2c33c58", "eee50dcd89fac484b91723ae2a73a93176e88ee43d4c643dd3129ebb5fb0daa4", [0x8, 0x7]}) socket$inet(0x2, 0x3, 0x8d) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x108802, 0x0) socket$inet(0x2, 0x2000000080002, 0x0) 2.188746918s ago: executing program 7 (id=2842): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x3, 0x10}, &(0x7f0000000040)=0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) ioprio_get$uid(0x3, 0x0) mount(&(0x7f0000000540)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f00000005c0)='vxfs\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f00000001c0)) connect$l2tp6(r7, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r7, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x18, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x17fd147c801ae9ab, 0x0) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000300)=@gcm_256={{0x303}, "af20ef2647380be9", "ce7ae392b29ccb3f396c20bf277a4f6380326d5de7b5c5c7b8760630a72bc3d5", "d3af1db6", "10e0a087f3e187d8"}, 0x38) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r1, 0x7}, 0x8) openat$fb0(0xffffffffffffff9c, &(0x7f0000006680), 0x4000, 0x0) 2.187728116s ago: executing program 3 (id=2843): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x35, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x2, 'veth1_virt_wifi\x00', {0x6}, 0x4}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0, 0x0, 0x40000}, 0x18) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/43, 0x7ffff000}, {&(0x7f0000000480)=""/165, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x2aa, 0x0) shmat(0x0, &(0x7f00002e5000/0x4000)=nil, 0x66c8d4fe9b86d43c) 688.269047ms ago: executing program 7 (id=2844): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() pselect6(0x40, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000040), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) personality(0x60000a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f00000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00'], 0x48) r2 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20008040) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r1, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='contention_end\x00', r6}, 0x18) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffffff7}]}}}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) r7 = openat$smackfs_ipv6host(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) write$smackfs_ipv6host(r7, &(0x7f0000000180)=@l2={{0x80, 0x3a, 0x4, 0x3a, 0x2, 0x3a, 0x800, 0x3a, 0xd, 0x3a, 0x5, 0x3a, 0xff, 0x3a, 0x3}, 0x2f, 0x5f, 0x20, ','}, 0xaf) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 599.972645ms ago: executing program 1 (id=2845): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000540)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x300, r1, 0x5a34}}, 0x1c}}, 0x0) 334.689476ms ago: executing program 3 (id=2846): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001140)={'batadv0\x00', 0x0}) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0xec52a3a26b323b37, 0x140) faccessat2(r3, &(0x7f0000000180)='./file0\x00', 0x20, 0x0) (async) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) openat$cgroup_ro(r4, &(0x7f0000000040)='memory.events.local\x00', 0x0, 0x0) (async) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000600)=@ll={0x11, 0xf6, r2, 0x1, 0x9, 0x6, @local}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)="4bbf2c4cfd81685544f46c3f08dcfe627696f37c0ff1fc531d237b7ec5604abed03c87cc0f4f4ac4095fcb2d1c269e3f7b1f8afa9bf121784f503e93134968ad7ab3c8eda535069d56529500333c0c55712da2c1797ed133818555bd34ac99bde2ff9e", 0x63}], 0x1, 0x0, 0x0, 0x11000000}, 0x1) 225.976627ms ago: executing program 1 (id=2847): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x77359400}}, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) clock_gettime(0x0, &(0x7f0000000600)={0x0, 0x0}) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{}, {r1, r2+60000000}}, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, &(0x7f0000001080)={0x44, &(0x7f0000000e80)={0x0, 0x0, 0x2e, "b808a52986edcb9fe211e88d3ddb4ae5a62b6ecd6f4bdc906f35c9fc66a66f8ac9a0b0d0f418e74facfc621c4c15"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r3, 0x0, 0x0) 182.127906ms ago: executing program 7 (id=2848): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 0s ago: executing program 7 (id=2849): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, ["", ""]}, 0x14}}, 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'bridge_slave_0\x00'}) socket(0x10, 0x80002, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240), 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000009fef3e700000000000850000006100000085000000710000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="2f020000000000000000000000000000180100002020642500000000002020207b2af8ff00000000bda106000000000007010000f8ffffffb702000008000000b70300000000000085000000050000001801000020696c250000000000202020db1af8ffe1000000bda1f8ff0000000007010000f8ffffffb702000008000000b70300000000000085000000050000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000340)="d2ff03076003008cb89e08f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a0103"], 0x7c}}, 0x4000) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="1800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000080), 0x1003, r6}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r6, &(0x7f0000000400), &(0x7f0000000500)=""/143}, 0x20) bind$netrom(r5, &(0x7f0000000000)={{0x6, @rose}, [@default, @bcast, @netrom, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) sendto(r5, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@ieee802154={0x24, @long}, 0x80) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) getgid() bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setsockopt$bt_hci_HCI_FILTER(r7, 0x0, 0x2, &(0x7f0000000040)={0xfffc, [0x0, 0xffffffff]}, 0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_io_uring_setup(0x4e5b, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x2, 0x1}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000180)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r9, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x114, &(0x7f0000000280), 0x0, 0x4) kernel console output (not intermixed with test programs): 2820] bridge_slave_0: left promiscuous mode [ 893.530746][T12820] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.972504][ T5822] Bluetooth: hci5: command tx timeout [ 894.572133][T14292] loop5: detected capacity change from 0 to 7 [ 894.578593][T14292] buffer_io_error: 4 callbacks suppressed [ 894.578611][T14292] Buffer I/O error on dev loop5, logical block 0, async page read [ 894.592656][T14292] Buffer I/O error on dev loop5, logical block 0, async page read [ 894.601627][T14292] Buffer I/O error on dev loop5, logical block 0, async page read [ 894.609722][T14292] Buffer I/O error on dev loop5, logical block 0, async page read [ 894.617792][T14292] Buffer I/O error on dev loop5, logical block 0, async page read [ 894.625870][T14292] Buffer I/O error on dev loop5, logical block 0, async page read [ 894.633804][T14292] Buffer I/O error on dev loop5, logical block 0, async page read [ 894.641889][T14292] ldm_validate_partition_table(): Disk read failed. [ 894.648750][T14292] Buffer I/O error on dev loop5, logical block 0, async page read [ 894.656862][T14292] Buffer I/O error on dev loop5, logical block 0, async page read [ 894.664761][T14292] Buffer I/O error on dev loop5, logical block 0, async page read [ 894.672984][T14292] Dev loop5: unable to read RDB block 0 [ 894.679035][T14292] loop5: unable to read partition table [ 894.684843][T14292] loop5: partition table beyond EOD, truncated [ 894.691301][T14292] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 894.691301][T14292] ) failed (rc=-5) [ 894.858863][T14293] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 898.740781][T14317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2085'. [ 899.267338][T14321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2087'. [ 899.312189][T12820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 899.326263][T12820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 899.343371][T12820] bond0 (unregistering): Released all slaves [ 899.579326][T12820] bond1 (unregistering): Released all slaves [ 899.649669][T14321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2087'. [ 899.742532][T14112] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 899.813962][T14112] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 899.888922][T14112] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 901.272018][T14112] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 901.968050][T14345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2095'. [ 901.978961][T14345] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2095'. [ 902.034016][ T52] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 902.080886][T14348] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2097'. [ 903.244398][ T52] usb 5-1: Using ep0 maxpacket: 8 [ 903.282142][ T52] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 903.290417][ T52] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 903.485970][T14354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2099'. [ 903.603168][T12820] hsr_slave_0: left promiscuous mode [ 903.627496][T12820] hsr_slave_1: left promiscuous mode [ 903.642440][T12820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 903.663602][T12820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 903.694227][T12820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 903.727822][T12820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 903.814106][T12820] veth1_macvtap: left promiscuous mode [ 903.850894][T12820] veth0_macvtap: left promiscuous mode [ 903.883370][T12820] veth1_vlan: left promiscuous mode [ 903.888754][T12820] veth0_vlan: left promiscuous mode [ 904.308731][ T52] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 904.320811][ T52] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 904.332394][ T52] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 904.354355][ T52] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 904.361828][ T52] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 904.482593][ T52] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 904.712193][ T52] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 904.726790][ T52] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 904.852632][ T52] usb 5-1: unable to read config index 2 descriptor/start: -71 [ 904.863996][ T52] usb 5-1: can't read configurations, error -71 [ 910.740139][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 911.651483][T12820] team0 (unregistering): Port device team_slave_1 removed [ 911.793922][T12820] team0 (unregistering): Port device team_slave_0 removed [ 913.146973][T14381] @: renamed from vlan0 (while UP) [ 915.295102][T14387] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 915.529838][T14112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 915.561971][T14112] 8021q: adding VLAN 0 to HW filter on device team0 [ 915.573432][ T3474] bridge0: port 1(bridge_slave_0) entered blocking state [ 915.580758][ T3474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 916.042256][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 916.049823][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 916.767425][T14401] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2111'. [ 916.868949][T14401] vlan0: entered allmulticast mode [ 917.263455][T14112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 920.812993][T14112] veth0_vlan: entered promiscuous mode [ 920.830665][T14112] veth1_vlan: entered promiscuous mode [ 920.855787][T14112] veth0_macvtap: entered promiscuous mode [ 920.871800][T14112] veth1_macvtap: entered promiscuous mode [ 920.888471][T14112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 920.899813][T14112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.910520][T14112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 920.922379][T14112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.933599][T14112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 920.945291][T14112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.957879][T14112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 920.969591][T14112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.982353][T14112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 920.995696][T14112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 921.007087][T14112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.018108][T14112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 921.029904][T14112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.040945][T14112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 921.051734][T14112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.061600][T14112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 921.072449][T14112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 921.084648][T14112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 921.097325][T14112] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.107195][T14112] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.116397][T14112] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.125120][T14112] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.405697][T14448] xt_CT: You must specify a L4 protocol and not use inversions on it [ 921.532125][T12820] IPVS: stop unused estimator thread 0... [ 921.756522][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 921.793494][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.859201][T12820] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 921.875523][T12820] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.899410][T14455] random: crng reseeded on system resumption [ 922.783099][T14466] loop5: detected capacity change from 0 to 7 [ 922.840265][T14466] buffer_io_error: 4 callbacks suppressed [ 922.840278][T14466] Buffer I/O error on dev loop5, logical block 0, async page read [ 922.966239][T14466] Buffer I/O error on dev loop5, logical block 0, async page read [ 922.991120][T14466] Buffer I/O error on dev loop5, logical block 0, async page read [ 923.043464][T14466] Buffer I/O error on dev loop5, logical block 0, async page read [ 923.084741][T14466] Buffer I/O error on dev loop5, logical block 0, async page read [ 923.124807][T14466] Buffer I/O error on dev loop5, logical block 0, async page read [ 923.295893][T14466] Buffer I/O error on dev loop5, logical block 0, async page read [ 923.320501][T14466] ldm_validate_partition_table(): Disk read failed. [ 923.482545][T14466] Buffer I/O error on dev loop5, logical block 0, async page read [ 924.010321][T14466] Buffer I/O error on dev loop5, logical block 0, async page read [ 924.507612][T14466] Buffer I/O error on dev loop5, logical block 0, async page read [ 924.524509][T14466] Dev loop5: unable to read RDB block 0 [ 925.714039][T14466] loop5: unable to read partition table [ 925.744358][T14466] loop5: partition table beyond EOD, truncated [ 925.766528][T14466] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 925.766528][T14466] ) failed (rc=-5) [ 931.001928][T14502] bond2: entered promiscuous mode [ 931.054226][T14502] bond2: entered allmulticast mode [ 931.100524][T14502] 8021q: adding VLAN 0 to HW filter on device bond2 [ 931.458069][T14508] futex_wake_op: syz.7.2136 tries to shift op by -1; fix this program [ 931.522014][T14508] FAULT_INJECTION: forcing a failure. [ 931.522014][T14508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 931.604042][T14508] CPU: 0 UID: 0 PID: 14508 Comm: syz.7.2136 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 931.614884][T14508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 931.624967][T14508] Call Trace: [ 931.628264][T14508] [ 931.631211][T14508] dump_stack_lvl+0x241/0x360 [ 931.636007][T14508] ? __pfx_dump_stack_lvl+0x10/0x10 [ 931.641231][T14508] ? __pfx__printk+0x10/0x10 [ 931.645842][T14508] ? snprintf+0xda/0x120 [ 931.650108][T14508] should_fail_ex+0x3b0/0x4e0 [ 931.654814][T14508] _copy_to_user+0x31/0xb0 [ 931.659258][T14508] simple_read_from_buffer+0xca/0x150 [ 931.664658][T14508] proc_fail_nth_read+0x1e9/0x250 [ 931.669711][T14508] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 931.675285][T14508] ? rw_verify_area+0x55e/0x6f0 [ 931.680151][T14508] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 931.685718][T14508] vfs_read+0x1fc/0xb70 [ 931.689900][T14508] ? __pfx___mutex_lock+0x10/0x10 [ 931.694947][T14508] ? __pfx_vfs_read+0x10/0x10 [ 931.699645][T14508] ? __fget_files+0x2a/0x410 [ 931.704258][T14508] ? __fget_files+0x395/0x410 [ 931.708944][T14508] ? __fget_files+0x2a/0x410 [ 931.713533][T14508] ksys_read+0x18f/0x2b0 [ 931.717785][T14508] ? __pfx_ksys_read+0x10/0x10 [ 931.722542][T14508] ? do_syscall_64+0x100/0x230 [ 931.727296][T14508] ? do_syscall_64+0xb6/0x230 [ 931.731963][T14508] do_syscall_64+0xf3/0x230 [ 931.736459][T14508] ? clear_bhb_loop+0x35/0x90 [ 931.741140][T14508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.747024][T14508] RIP: 0033:0x7fcd2ed8473c [ 931.751431][T14508] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 931.771025][T14508] RSP: 002b:00007fcd2fb9c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 931.779456][T14508] RAX: ffffffffffffffda RBX: 00007fcd2ef75fa0 RCX: 00007fcd2ed8473c [ 931.787418][T14508] RDX: 000000000000000f RSI: 00007fcd2fb9c0a0 RDI: 0000000000000003 [ 931.795374][T14508] RBP: 00007fcd2fb9c090 R08: 0000000000000000 R09: 00000000affffffa [ 931.803332][T14508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 931.811290][T14508] R13: 0000000000000001 R14: 00007fcd2ef75fa0 R15: 00007ffd19245fd8 [ 931.819270][T14508] [ 933.786195][T14524] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2140'. [ 935.135598][T14530] netlink: 2036 bytes leftover after parsing attributes in process `syz.8.2141'. [ 935.196596][T14530] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2141'. [ 941.230577][ T29] audit: type=1400 audit(1736005892.092:134): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=14550 comm="syz.7.2150" saddr=172.30.0.8 daddr=172.20.20.170 [ 941.462567][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 941.806000][T14559] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2152'. [ 942.444145][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 942.469088][ T9] usb 9-1: config 0 has an invalid interface number: 61 but max is 0 [ 942.479433][T10359] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 942.491108][ T9] usb 9-1: config 0 has no interface number 0 [ 942.513731][ T9] usb 9-1: config 0 interface 61 altsetting 1 bulk endpoint 0xB has invalid maxpacket 8 [ 942.568836][T10359] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 942.581740][T10359] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 942.591600][T10359] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 942.599893][T10359] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 942.609500][T10359] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 942.634694][ T9] usb 9-1: config 0 interface 61 altsetting 1 bulk endpoint 0xF has invalid maxpacket 8 [ 942.645456][ T9] usb 9-1: config 0 interface 61 has no altsetting 0 [ 942.660089][ T9] usb 9-1: New USB device found, idVendor=0a5c, idProduct=368b, bcdDevice=68.32 [ 942.670040][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 942.681068][ T9] usb 9-1: Product: syz [ 942.685277][ T9] usb 9-1: Manufacturer: syz [ 942.693870][ T9] usb 9-1: SerialNumber: syz [ 942.701989][ T9] usb 9-1: config 0 descriptor?? [ 942.710358][T14546] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 942.721029][T14546] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 942.764526][ T5874] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 942.994145][ T9] usb 9-1: USB disconnect, device number 2 [ 943.245864][ T5874] usb 1-1: Using ep0 maxpacket: 32 [ 943.258340][ T5874] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 943.271511][ T5874] usb 1-1: config 0 has no interface number 0 [ 943.330278][ T5874] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 943.546682][T14560] chnl_net:caif_netlink_parms(): no params data found [ 944.159634][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.168165][ T5874] usb 1-1: Product: syz [ 944.172468][ T5874] usb 1-1: Manufacturer: syz [ 944.177538][ T5874] usb 1-1: SerialNumber: syz [ 945.673181][ T5822] Bluetooth: hci4: command tx timeout [ 945.676824][ T5874] usb 1-1: config 0 descriptor?? [ 946.053687][T14560] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.079049][ T5874] usb 1-1: can't set config #0, error -71 [ 946.093487][T14560] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.171408][T14560] bridge_slave_0: entered allmulticast mode [ 946.184531][T14599] vivid-001: disconnect [ 946.185490][ T5874] usb 1-1: USB disconnect, device number 37 [ 946.210079][T14560] bridge_slave_0: entered promiscuous mode [ 946.252295][T14597] vivid-001: reconnect [ 946.265089][T14560] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.325005][T14560] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.354563][T14560] bridge_slave_1: entered allmulticast mode [ 946.383369][T14560] bridge_slave_1: entered promiscuous mode [ 946.900416][T14560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 947.864838][ T5822] Bluetooth: hci4: command tx timeout [ 947.904278][T14560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 947.956716][T14607] netlink: 124 bytes leftover after parsing attributes in process `syz.8.2162'. [ 947.970017][T14607] netlink: 124 bytes leftover after parsing attributes in process `syz.8.2162'. [ 947.999373][T14607] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2162'. [ 948.039694][T14560] team0: Port device team_slave_0 added [ 948.121057][T14560] team0: Port device team_slave_1 added [ 948.248266][T14560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 948.296259][T14560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 948.348586][T14611] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2164'. [ 948.417726][T14560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 948.458441][T14611] vlan2: entered allmulticast mode [ 948.487871][T14560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 948.501945][T14614] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2163'. [ 948.537322][T14560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 948.579418][T14614] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2163'. [ 948.597261][T14614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2163'. [ 948.664429][T14560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 948.697565][ T29] audit: type=1326 audit(1736005899.014:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14613 comm="syz.1.2163" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f17a3b85d29 code=0x0 [ 948.779264][T14619] netlink: 'syz.8.2165': attribute type 1 has an invalid length. [ 948.824314][T14619] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2165'. [ 948.838532][T14560] hsr_slave_0: entered promiscuous mode [ 948.860308][T14560] hsr_slave_1: entered promiscuous mode [ 948.887997][T14560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 948.923312][T14560] Cannot create hsr debugfs directory [ 949.117732][T14622] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2166'. [ 949.208737][T14560] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 949.226214][T14560] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 949.239754][T14560] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 949.258709][T14560] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 949.503119][T14560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 949.568502][T14560] 8021q: adding VLAN 0 to HW filter on device team0 [ 949.602084][T12820] bridge0: port 1(bridge_slave_0) entered blocking state [ 949.609342][T12820] bridge0: port 1(bridge_slave_0) entered forwarding state [ 949.646773][T12820] bridge0: port 2(bridge_slave_1) entered blocking state [ 949.653985][T12820] bridge0: port 2(bridge_slave_1) entered forwarding state [ 950.087986][ T5822] Bluetooth: hci4: command tx timeout [ 950.137761][T14560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 950.302504][ T5824] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 950.426384][T14560] veth0_vlan: entered promiscuous mode [ 950.443104][T14560] veth1_vlan: entered promiscuous mode [ 950.477417][T14560] veth0_macvtap: entered promiscuous mode [ 950.483985][ T5824] usb 9-1: Using ep0 maxpacket: 32 [ 950.493003][ T5824] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 950.519301][T14560] veth1_macvtap: entered promiscuous mode [ 950.531335][ T5824] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 950.556767][T14560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.568589][ T5824] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 950.577622][ T5824] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.591105][T14560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.605648][T14560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.618489][ T5824] usb 9-1: config 0 descriptor?? [ 950.630490][ T5824] hub 9-1:0.0: USB hub found [ 950.640375][T14560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.658117][T14560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.670281][T14560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.684834][T14560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.702498][T14560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.713435][T14560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.729527][T14560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.747880][T14560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 950.774285][T14560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.789016][T14560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.802048][T14560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.817820][T14560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.829924][T14560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.849490][ T5824] hub 9-1:0.0: 1 port detected [ 950.854464][T14560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.879246][T14560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.895312][T14560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.906422][T14560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.922830][T14560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.937950][T14560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 950.963693][T14560] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.980092][T14560] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.999399][T14560] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.010939][T14560] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 951.138720][T12820] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.163107][T12820] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.206754][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.227461][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.533639][ T8] hub 9-1:0.0: activate --> -90 [ 951.554705][T14448] sched: DL replenish lagged too much [ 953.366697][ T5822] Bluetooth: hci4: command tx timeout [ 953.366884][ T8] hub 9-1:0.0: hub_ext_port_status failed (err = -32) [ 954.687843][ T5824] usb 9-1: USB disconnect, device number 3 [ 955.669308][T14664] overlay: ./file0 is not a directory [ 957.106936][T14667] sctp: [Deprecated]: syz.1.2170 (pid 14667) Use of int in max_burst socket option. [ 957.106936][T14667] Use struct sctp_assoc_value instead [ 959.618430][T14681] loop5: detected capacity change from 0 to 7 [ 959.649414][T14681] buffer_io_error: 4 callbacks suppressed [ 959.650968][T14681] Buffer I/O error on dev loop5, logical block 0, async page read [ 959.671660][T14681] Buffer I/O error on dev loop5, logical block 0, async page read [ 959.688051][T14681] Buffer I/O error on dev loop5, logical block 0, async page read [ 959.709245][T14681] Buffer I/O error on dev loop5, logical block 0, async page read [ 959.726334][T14681] Buffer I/O error on dev loop5, logical block 0, async page read [ 959.746390][T14681] Buffer I/O error on dev loop5, logical block 0, async page read [ 959.767804][T14681] Buffer I/O error on dev loop5, logical block 0, async page read [ 959.780431][T14681] ldm_validate_partition_table(): Disk read failed. [ 959.793972][T14681] Buffer I/O error on dev loop5, logical block 0, async page read [ 959.816632][T14681] Buffer I/O error on dev loop5, logical block 0, async page read [ 959.832385][T14681] Buffer I/O error on dev loop5, logical block 0, async page read [ 959.857084][T14681] Dev loop5: unable to read RDB block 0 [ 959.877583][T14681] loop5: unable to read partition table [ 959.896398][T14681] loop5: partition table beyond EOD, truncated [ 959.906157][T14681] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 959.906157][T14681] ) failed (rc=-5) [ 960.041554][T14684] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2180'. [ 961.398968][T14695] input: syz0 as /devices/virtual/input/input15 [ 965.653004][T14569] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 965.832768][T14569] usb 2-1: Using ep0 maxpacket: 16 [ 965.883692][T14569] usb 2-1: config 0 has an invalid interface number: 224 but max is 0 [ 965.979507][T14569] usb 2-1: config 0 has no interface number 0 [ 966.054401][T14569] usb 2-1: config 0 interface 224 altsetting 18 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 966.268280][T14569] usb 2-1: config 0 interface 224 has no altsetting 0 [ 967.994273][ T5824] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 968.495853][T14730] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2194'. [ 968.505068][T14730] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2194'. [ 968.617717][T14733] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2195'. [ 968.634957][T14733] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2195'. [ 968.655724][ T5824] usb 1-1: not running at top speed; connect to a high speed hub [ 968.724887][T14569] usb 2-1: New USB device found, idVendor=06cd, idProduct=0108, bcdDevice=b0.81 [ 968.735143][T14569] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 968.743936][T14569] usb 2-1: Product: syz [ 968.748141][T14569] usb 2-1: Manufacturer: syz [ 968.753992][T14569] usb 2-1: SerialNumber: syz [ 968.764279][ T5824] usb 1-1: config 1 has an invalid interface number: 35 but max is 0 [ 968.805190][ T5824] usb 1-1: config 1 has no interface number 0 [ 968.831873][T14569] usb 2-1: config 0 descriptor?? [ 968.867165][T14569] usb 2-1: can't set config #0, error -71 [ 968.873781][ T5824] usb 1-1: config 1 interface 35 has no altsetting 0 [ 968.876618][T14569] usb 2-1: USB disconnect, device number 37 [ 968.895076][ T5824] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=bf.ea [ 968.937745][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=241 [ 968.949687][T14734] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2195'. [ 968.979760][T14736] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 969.003156][ T5824] usb 1-1: Product: syz [ 969.021220][ T5824] usb 1-1: Manufacturer: syz [ 969.036133][ T5824] usb 1-1: SerialNumber: syz [ 969.317614][T14743] netlink: 'syz.7.2198': attribute type 9 has an invalid length. [ 969.392037][T14725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 969.400831][T14725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 969.459104][ T5824] usb_ehset_test 1-1:1.35: probe with driver usb_ehset_test failed with error -32 [ 969.525879][ T5824] usb 1-1: USB disconnect, device number 38 [ 970.972251][T14569] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 971.561806][T10359] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 971.579480][T10359] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 971.590549][T10359] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 971.772606][T10359] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 971.784259][T10359] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 971.792461][T10359] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 972.275429][T14569] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 972.291986][T14569] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 972.355135][T14569] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 972.398269][T14569] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 972.456531][T14569] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 972.491663][T14569] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.545538][T14569] usb 2-1: config 0 descriptor?? [ 972.653527][T12820] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.772287][ T5822] Bluetooth: hci1: unexpected event for opcode 0x2024 [ 973.035472][T14569] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 973.064102][T14569] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 973.076377][T12820] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.114286][T14569] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 973.137829][T14775] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2206'. [ 973.197242][T14777] netlink: 'syz.7.2207': attribute type 1 has an invalid length. [ 973.225659][T14777] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2207'. [ 973.254075][T12820] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.338730][ T5824] usb 2-1: USB disconnect, device number 38 [ 973.419849][T14780] netlink: 92 bytes leftover after parsing attributes in process `syz.7.2208'. [ 973.562438][T12820] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.647386][T14787] netlink: 'syz.7.2210': attribute type 5 has an invalid length. [ 973.950404][ T5822] Bluetooth: hci6: command tx timeout [ 973.955789][T14767] chnl_net:caif_netlink_parms(): no params data found [ 974.089179][ T29] audit: type=1326 audit(1736005922.811:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14791 comm="syz.0.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc716d85d29 code=0x7ffc0000 [ 975.218122][ T29] audit: type=1326 audit(1736005922.830:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14791 comm="syz.0.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc716d85d29 code=0x7ffc0000 [ 975.269941][ T29] audit: type=1326 audit(1736005922.867:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14791 comm="syz.0.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc716d85d29 code=0x7ffc0000 [ 975.293363][ T29] audit: type=1326 audit(1736005922.867:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14791 comm="syz.0.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc716d85d29 code=0x7ffc0000 [ 975.315750][ T29] audit: type=1326 audit(1736005922.867:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14791 comm="syz.0.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc716d85d29 code=0x7ffc0000 [ 975.337810][ T29] audit: type=1326 audit(1736005922.867:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14791 comm="syz.0.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc716d85d29 code=0x7ffc0000 [ 975.344715][T12820] vlan3: left promiscuous mode [ 975.359858][ T29] audit: type=1326 audit(1736005922.867:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14791 comm="syz.0.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc716d85d29 code=0x7ffc0000 [ 975.359900][ T29] audit: type=1326 audit(1736005922.867:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14791 comm="syz.0.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc716d85d29 code=0x7ffc0000 [ 975.359934][ T29] audit: type=1326 audit(1736005922.867:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14791 comm="syz.0.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc716d85d29 code=0x7ffc0000 [ 975.359966][ T29] audit: type=1326 audit(1736005922.867:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14791 comm="syz.0.2211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7fc716d85d29 code=0x7ffc0000 [ 975.545228][T12820] batadv0: left promiscuous mode [ 975.570026][T14805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2213'. [ 975.598753][T12820] bridge0: port 4(vlan3) entered disabled state [ 975.656904][T12820] erspan0: left allmulticast mode [ 975.691814][T12820] erspan0: left promiscuous mode [ 975.725181][T12820] bridge0: port 3(erspan0) entered disabled state [ 975.828700][T12820] bridge_slave_1: left allmulticast mode [ 975.872238][T12820] bridge_slave_1: left promiscuous mode [ 975.908457][T12820] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.984699][T12820] bridge_slave_0: left allmulticast mode [ 976.030939][T12820] bridge_slave_0: left promiscuous mode [ 976.086779][T12820] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.174442][ T5822] Bluetooth: hci6: command tx timeout [ 976.268073][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 976.275193][ T5907] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 978.420973][ T5907] usb 1-1: Using ep0 maxpacket: 8 [ 978.426580][ T5822] Bluetooth: hci6: command tx timeout [ 978.585180][ T5907] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 978.706156][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 48, changing to 9 [ 978.759831][ T5907] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 978.840619][ T5907] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 978.872602][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.920275][ T5907] usb 1-1: Product: syz [ 978.957419][ T5907] usb 1-1: Manufacturer: syz [ 978.975697][ T5907] usb 1-1: SerialNumber: syz [ 979.006747][ T5907] usb 1-1: config 0 descriptor?? [ 979.272797][ T5907] rc_core: IR keymap rc-streamzap not found [ 979.278761][ T5907] Registered IR keymap rc-empty [ 979.312033][ T5907] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 979.352778][ T5907] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input16 [ 979.411184][ T5907] usb 1-1: USB disconnect, device number 39 [ 980.125978][T12820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 980.151101][T12820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 980.172781][T12820] bond0 (unregistering): Released all slaves [ 980.185206][T12820] bond1 (unregistering): Released all slaves [ 980.393391][T12820] bond2 (unregistering): Released all slaves [ 980.622608][ T5822] Bluetooth: hci6: command tx timeout [ 980.656804][T12820] bond3 (unregistering): Released all slaves [ 980.670680][T12820] bond4 (unregistering): Released all slaves [ 980.685003][T12820] bond5 (unregistering): Released all slaves [ 980.719488][T14805] vlan2: entered allmulticast mode [ 980.725048][T14805] dummy0: entered allmulticast mode [ 980.749922][T14805] bridge0: port 4(vlan2) entered blocking state [ 980.756233][T14805] bridge0: port 4(vlan2) entered disabled state [ 980.765852][T14805] vlan2: entered promiscuous mode [ 980.771845][T14805] dummy0: entered promiscuous mode [ 980.919235][T12820] tipc: Disabling bearer [ 980.928608][T12820] tipc: Left network mode [ 981.213641][T14767] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.254391][T14767] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.587402][T14767] bridge_slave_0: entered allmulticast mode [ 982.594571][T14767] bridge_slave_0: entered promiscuous mode [ 982.642261][T14767] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.649426][T14767] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.683615][T14767] bridge_slave_1: entered allmulticast mode [ 982.690705][T14767] bridge_slave_1: entered promiscuous mode [ 982.949154][T14767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 983.083045][T14767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 983.299292][T14855] 9pnet_fd: Insufficient options for proto=fd [ 983.378383][T14767] team0: Port device team_slave_0 added [ 983.418542][T14767] team0: Port device team_slave_1 added [ 983.568792][T14767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 983.587969][T14767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 983.625056][ T5907] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 983.666590][T14767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 983.721764][T14848] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2226'. [ 983.795621][ T5907] usb 9-1: Using ep0 maxpacket: 16 [ 983.838318][ T5907] usb 9-1: config 0 has an invalid interface number: 44 but max is 0 [ 983.846823][ T5907] usb 9-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 983.891516][ T5907] usb 9-1: config 0 has no interface number 0 [ 984.329823][T14859] loop5: detected capacity change from 0 to 7 [ 984.363648][T14859] buffer_io_error: 4 callbacks suppressed [ 984.365364][T14859] Buffer I/O error on dev loop5, logical block 0, async page read [ 984.386400][T14859] Buffer I/O error on dev loop5, logical block 0, async page read [ 984.404250][T14859] Buffer I/O error on dev loop5, logical block 0, async page read [ 984.416820][T14859] Buffer I/O error on dev loop5, logical block 0, async page read [ 984.436812][T14859] Buffer I/O error on dev loop5, logical block 0, async page read [ 984.456502][T14859] Buffer I/O error on dev loop5, logical block 0, async page read [ 984.462833][ T5907] usb 9-1: config 0 interface 44 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 984.464605][T14859] Buffer I/O error on dev loop5, logical block 0, async page read [ 984.487097][T14859] ldm_validate_partition_table(): Disk read failed. [ 984.495162][T14859] Buffer I/O error on dev loop5, logical block 0, async page read [ 984.503351][T14859] Buffer I/O error on dev loop5, logical block 0, async page read [ 984.511520][T14859] Buffer I/O error on dev loop5, logical block 0, async page read [ 984.519472][T14859] Dev loop5: unable to read RDB block 0 [ 984.525857][T14859] loop5: unable to read partition table [ 984.531658][T14859] loop5: partition table beyond EOD, truncated [ 984.538075][T14859] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 984.538075][T14859] ) failed (rc=-5) [ 984.648451][ T5907] usb 9-1: New USB device found, idVendor=19d2, idProduct=ffc2, bcdDevice=40.a3 [ 984.700933][ T5907] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.753665][ T5907] usb 9-1: Product: syz [ 984.764616][ T5907] usb 9-1: Manufacturer: syz [ 984.856972][ T5907] usb 9-1: SerialNumber: syz [ 984.858508][T14767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 984.879218][T14767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 984.883302][ T5907] usb 9-1: config 0 descriptor?? [ 984.908437][T14767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 985.007455][ T5907] option 9-1:0.44: GSM modem (1-port) converter detected [ 986.382739][T14767] hsr_slave_0: entered promiscuous mode [ 986.431130][T14767] hsr_slave_1: entered promiscuous mode [ 986.465135][T14767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 986.489182][T14767] Cannot create hsr debugfs directory [ 986.771813][ T5907] usb 9-1: USB disconnect, device number 4 [ 986.789514][ T5907] option 9-1:0.44: device disconnected [ 987.065535][T12820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 987.133460][T12820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 987.148046][T12820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 987.156316][T12820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 987.232270][T12820] batadv0: left allmulticast mode [ 987.344523][T12820] hsr_slave_1: left allmulticast mode [ 987.352050][T12820] veth1_macvtap: left promiscuous mode [ 987.366145][T12820] veth0_macvtap: left promiscuous mode [ 987.386038][T12820] veth1_vlan: left promiscuous mode [ 987.409333][T12820] veth0_vlan: left promiscuous mode [ 987.561437][T14888] SET target dimension over the limit! [ 989.433475][T10359] Bluetooth: hci0: command 0x0405 tx timeout [ 990.215898][T14907] netlink: 'syz.7.2238': attribute type 2 has an invalid length. [ 990.741161][T12820] team0 (unregistering): Port device team_slave_1 removed [ 990.859903][T12820] team0 (unregistering): Port device team_slave_0 removed [ 991.698810][T14906] netlink: 1 bytes leftover after parsing attributes in process `syz.7.2238'. [ 993.844571][T14925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2242'. [ 1000.765229][T14974] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2253'. [ 1001.106844][T14974] vlan2: entered allmulticast mode [ 1001.371366][T14974] team0: entered allmulticast mode [ 1001.376546][T14974] team_slave_0: entered allmulticast mode [ 1002.398831][T14974] team_slave_1: entered allmulticast mode [ 1002.416654][T14974] bridge0: port 3(vlan2) entered blocking state [ 1002.425144][T14974] bridge0: port 3(vlan2) entered disabled state [ 1002.433573][T14974] vlan2: entered promiscuous mode [ 1002.439252][T14974] team0: entered promiscuous mode [ 1002.444305][T14974] team_slave_0: entered promiscuous mode [ 1002.450592][T14974] team_slave_1: entered promiscuous mode [ 1002.532795][T14974] bridge0: port 3(vlan2) entered blocking state [ 1002.539218][T14974] bridge0: port 3(vlan2) entered forwarding state [ 1003.210381][T14989] bridge0: port 3(vlan2) entered disabled state [ 1003.216882][T14989] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.224407][T14989] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.240696][T14989] bridge0: entered allmulticast mode [ 1003.506880][T14767] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1003.561388][T14767] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1003.705399][T14767] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1003.770003][T14767] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1005.659016][T12820] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.822578][T15011] batadv0: entered promiscuous mode [ 1005.868995][T15025] JFS: discard option not supported on device [ 1005.881311][T15025] syz.8.2265: attempt to access beyond end of device [ 1005.881311][T15025] loop8: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1005.894827][T15025] syz.8.2265: attempt to access beyond end of device [ 1005.894827][T15025] loop8: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1005.908066][T15025] Mount JFS Failure: -5 [ 1005.912244][T15025] jfs_mount failed w/return code = -5 [ 1005.960878][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 1005.960895][ T29] audit: type=1326 audit(1736005952.631:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15017 comm="syz.8.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3325185d29 code=0x7ffc0000 [ 1005.989267][ T29] audit: type=1326 audit(1736005952.631:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15017 comm="syz.8.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3325185d29 code=0x7ffc0000 [ 1006.011627][ T29] audit: type=1326 audit(1736005952.631:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15017 comm="syz.8.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f3325185d29 code=0x7ffc0000 [ 1006.033972][ T29] audit: type=1326 audit(1736005952.631:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15017 comm="syz.8.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3325185d29 code=0x7ffc0000 [ 1006.056463][ T29] audit: type=1326 audit(1736005952.631:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15017 comm="syz.8.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3325185d29 code=0x7ffc0000 [ 1006.078976][ T29] audit: type=1326 audit(1736005952.631:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15017 comm="syz.8.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f3325185d29 code=0x7ffc0000 [ 1006.101208][ T29] audit: type=1326 audit(1736005952.631:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15017 comm="syz.8.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3325185d29 code=0x7ffc0000 [ 1006.123437][ T29] audit: type=1326 audit(1736005952.631:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15017 comm="syz.8.2265" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3325185d29 code=0x7ffc0000 [ 1006.236207][T15011] macvlan0: entered promiscuous mode [ 1007.439828][T15011] hsr1: entered allmulticast mode [ 1007.517519][T15011] batadv0: entered allmulticast mode [ 1007.526873][T15011] macvlan0: entered allmulticast mode [ 1007.593961][T15027] netlink: 'syz.0.2267': attribute type 2 has an invalid length. [ 1007.613732][T15011] veth1_vlan: entered allmulticast mode [ 1007.648115][T15021] netlink: 'syz.7.2264': attribute type 29 has an invalid length. [ 1008.193160][T12820] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.220063][T15026] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2267'. [ 1008.366304][T12820] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.449642][T15048] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2273'. [ 1008.743340][T12820] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.758128][T15055] usb usb7: usbfs: process 15055 (syz.0.2275) did not claim interface 0 before use [ 1008.825969][T15055] vivid-007: disconnect [ 1008.894849][T14767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1009.339448][T14767] 8021q: adding VLAN 0 to HW filter on device team0 [ 1009.841372][T15054] vivid-007: reconnect [ 1009.848009][T15063] IPVS: persistence engine module ip_vs_pe_ not found [ 1009.951880][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.959305][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1011.622941][ T1136] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.630099][ T1136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1011.721697][T12820] bridge_slave_1: left allmulticast mode [ 1011.734033][T12820] bridge_slave_1: left promiscuous mode [ 1011.739804][T12820] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.303793][T12820] bridge_slave_0: left allmulticast mode [ 1013.309293][ T29] audit: type=1326 audit(1736005959.507:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15079 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a3b85d29 code=0x7ffc0000 [ 1013.309903][T12820] bridge_slave_0: left promiscuous mode [ 1013.347891][T12820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.392493][ T29] audit: type=1326 audit(1736005959.507:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15079 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a3b85d29 code=0x7ffc0000 [ 1013.477326][ T29] audit: type=1326 audit(1736005959.544:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15079 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17a3b85d29 code=0x7ffc0000 [ 1013.555652][ T29] audit: type=1326 audit(1736005959.544:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15079 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a3b85d29 code=0x7ffc0000 [ 1013.612840][ T29] audit: type=1326 audit(1736005959.544:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15079 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a3b85d29 code=0x7ffc0000 [ 1014.597766][ T29] audit: type=1326 audit(1736005959.544:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15079 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17a3b85d29 code=0x7ffc0000 [ 1014.626760][ T29] audit: type=1326 audit(1736005959.544:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15079 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a3b85d29 code=0x7ffc0000 [ 1014.675993][ T29] audit: type=1326 audit(1736005959.544:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15079 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a3b85d29 code=0x7ffc0000 [ 1014.699042][ T29] audit: type=1326 audit(1736005959.544:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15079 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f17a3b85d29 code=0x7ffc0000 [ 1014.735382][ T29] audit: type=1326 audit(1736005959.544:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15079 comm="syz.1.2281" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a3b85d29 code=0x7ffc0000 [ 1017.585499][T12820] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1017.604000][T12820] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1017.615213][T12820] bond0 (unregistering): Released all slaves [ 1017.944681][T15115] netlink: 'syz.7.2289': attribute type 9 has an invalid length. [ 1018.525878][T15130] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1018.553251][T15130] CIFS mount error: No usable UNC path provided in device string! [ 1018.553251][T15130] [ 1018.567091][T15130] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1018.856787][T14767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1019.334371][T14767] veth0_vlan: entered promiscuous mode [ 1019.428557][T12820] hsr_slave_0: left promiscuous mode [ 1019.471132][T15142] Process accounting resumed [ 1019.524375][T12820] hsr_slave_1: left promiscuous mode [ 1019.723191][T12820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1019.771331][T12820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1019.890675][T12820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1020.830081][T12820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1020.982127][ T5822] Bluetooth: hci6: command tx timeout [ 1021.026338][T12820] veth1_macvtap: left promiscuous mode [ 1021.032412][T12820] veth0_macvtap: left promiscuous mode [ 1021.038903][T12820] veth1_vlan: left promiscuous mode [ 1021.045007][T12820] veth0_vlan: left promiscuous mode [ 1024.368288][T12820] team0 (unregistering): Port device team_slave_1 removed [ 1024.443488][T12820] team0 (unregistering): Port device team_slave_0 removed [ 1025.056088][T15150] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1025.106582][T15155] bridge0: entered allmulticast mode [ 1025.130360][T15156] pim6reg: entered allmulticast mode [ 1025.404373][T14767] veth1_vlan: entered promiscuous mode [ 1025.430408][T15162] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1025.526836][T14767] veth0_macvtap: entered promiscuous mode [ 1025.645385][T14767] veth1_macvtap: entered promiscuous mode [ 1025.717936][T15172] bridge0: port 3(erspan0) entered disabled state [ 1025.724788][T15172] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.732081][T15172] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.742564][T15164] netlink: 'syz.8.2300': attribute type 1 has an invalid length. [ 1025.758140][T15164] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2300'. [ 1025.779531][T14767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.790819][T14767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.801143][T14767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.812022][T14767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.822493][T14767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.833302][T14767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.843473][T14767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1025.854892][T14767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.866825][T14767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1025.878691][T14767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.889468][T14767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.899483][T14767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.910104][T14767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.920096][T14767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.930763][T14767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.940867][T14767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1025.951564][T14767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1025.963540][T14767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1026.082211][T14767] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.100960][T14767] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.110228][T14767] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1026.119654][T14767] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.075296][T14122] Bluetooth: hci5: command 0x0406 tx timeout [ 1029.404923][ T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1029.966205][ T3577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1029.974286][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1029.974431][ T3577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1029.996203][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1030.235055][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 1030.374747][ T9] usb 1-1: device descriptor read/all, error -71 [ 1031.459256][T15217] bond3: entered promiscuous mode [ 1031.475394][T15217] bond3: entered allmulticast mode [ 1031.480855][T15217] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1033.101998][T15231] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1033.186872][T15236] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2318'. [ 1033.228630][T15237] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.236114][T15237] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.265010][T15237] bridge0: entered allmulticast mode [ 1034.611021][T15252] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2323'. [ 1034.816405][T15252] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2323'. [ 1036.676503][T15278] netlink: 'syz.3.2330': attribute type 10 has an invalid length. [ 1037.106003][T15275] FAULT_INJECTION: forcing a failure. [ 1037.106003][T15275] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1037.121290][T15275] CPU: 1 UID: 0 PID: 15275 Comm: syz.7.2331 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 1037.132109][T15275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1037.142193][T15275] Call Trace: [ 1037.145494][T15275] [ 1037.148441][T15275] dump_stack_lvl+0x241/0x360 [ 1037.153160][T15275] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1037.158388][T15275] ? __pfx__printk+0x10/0x10 [ 1037.163025][T15275] ? __pfx_lock_release+0x10/0x10 [ 1037.168088][T15275] should_fail_ex+0x3b0/0x4e0 [ 1037.172789][T15275] _copy_from_user+0x2f/0xc0 [ 1037.177406][T15275] copy_msghdr_from_user+0xae/0x680 [ 1037.182643][T15275] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1037.188484][T15275] ? __fget_files+0x2a/0x410 [ 1037.193097][T15275] ? __fget_files+0x2a/0x410 [ 1037.197718][T15275] __sys_sendmsg+0x209/0x350 [ 1037.202332][T15275] ? __pfx_lock_release+0x10/0x10 [ 1037.207381][T15275] ? __pfx___sys_sendmsg+0x10/0x10 [ 1037.212525][T15275] ? __pfx_vfs_write+0x10/0x10 [ 1037.217346][T15275] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1037.223701][T15275] ? do_syscall_64+0x100/0x230 [ 1037.228488][T15275] ? do_syscall_64+0xb6/0x230 [ 1037.233190][T15275] do_syscall_64+0xf3/0x230 [ 1037.237719][T15275] ? clear_bhb_loop+0x35/0x90 [ 1037.242416][T15275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.248336][T15275] RIP: 0033:0x7fcd2ed85d29 [ 1037.252766][T15275] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1037.272410][T15275] RSP: 002b:00007fcd2fb9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1037.280872][T15275] RAX: ffffffffffffffda RBX: 00007fcd2ef75fa0 RCX: 00007fcd2ed85d29 [ 1037.288872][T15275] RDX: 0000000000000000 RSI: 0000000020000600 RDI: 0000000000000003 [ 1037.296867][T15275] RBP: 00007fcd2fb9c090 R08: 0000000000000000 R09: 0000000000000000 [ 1037.304864][T15275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1037.312880][T15275] R13: 0000000000000000 R14: 00007fcd2ef75fa0 R15: 00007ffd19245fd8 [ 1037.320888][T15275] [ 1037.455779][T15278] team0: Port device wlan1 added [ 1037.476808][T15283] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1037.737099][T15289] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 1038.037445][T15301] overlayfs: failed to resolve './file1': -2 [ 1038.141219][T15300] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2337'. [ 1038.155133][T15300] vlan2: entered allmulticast mode [ 1039.087546][T15318] netem: invalid attributes len -4 [ 1039.992836][T15337] overlayfs: failed to resolve './file1': -2 [ 1040.365614][T15349] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1041.441007][T15379] 9pnet: Could not find request transport: fd0xffffffffffffffff0xffffffffffffffff [ 1041.561405][T15392] syz_tun: entered allmulticast mode [ 1041.579165][T15392] syz_tun: left allmulticast mode [ 1041.767150][T15396] overlayfs: failed to resolve './file1': -2 [ 1041.948152][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1042.423187][T15406] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1044.649246][T15439] overlayfs: failed to resolve './file0': -2 [ 1045.052329][T15440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2372'. [ 1045.061462][T15440] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2372'. [ 1049.025939][T15457] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1051.029568][T15495] overlayfs: failed to resolve './file0': -2 [ 1051.209888][T15496] usb usb1: usbfs: process 15496 (syz.8.2389) did not claim interface 0 before use [ 1051.483553][ T29] kauditd_printk_skb: 58 callbacks suppressed [ 1051.483572][ T29] audit: type=1326 audit(1736005995.220:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15497 comm="syz.7.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2ed85d29 code=0x7ffc0000 [ 1051.963003][ T29] audit: type=1326 audit(1736005995.220:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15497 comm="syz.7.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2ed85d29 code=0x7ffc0000 [ 1051.994946][ T29] audit: type=1326 audit(1736005995.651:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15497 comm="syz.7.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd2ed85d29 code=0x7ffc0000 [ 1052.018296][ T29] audit: type=1326 audit(1736005995.651:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15497 comm="syz.7.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2ed85d29 code=0x7ffc0000 [ 1052.041099][ T29] audit: type=1326 audit(1736005995.651:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15497 comm="syz.7.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2ed85d29 code=0x7ffc0000 [ 1052.063320][ T29] audit: type=1326 audit(1736005995.651:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15497 comm="syz.7.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd2ed85d29 code=0x7ffc0000 [ 1052.087290][ T29] audit: type=1326 audit(1736005995.651:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15497 comm="syz.7.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2ed85d29 code=0x7ffc0000 [ 1052.109789][ T29] audit: type=1326 audit(1736005995.651:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15497 comm="syz.7.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2ed85d29 code=0x7ffc0000 [ 1052.134359][ T29] audit: type=1326 audit(1736005995.651:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15497 comm="syz.7.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fcd2ed85d29 code=0x7ffc0000 [ 1052.396706][ T29] audit: type=1326 audit(1736005995.651:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15497 comm="syz.7.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2ed85d29 code=0x7ffc0000 [ 1053.021463][T15517] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1053.648269][T15527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2397'. [ 1053.717385][T15527] vlan2: entered allmulticast mode [ 1053.785237][T15527] veth0: entered allmulticast mode [ 1053.841658][T15527] bridge0: port 3(vlan2) entered blocking state [ 1053.893649][T15527] bridge0: port 3(vlan2) entered disabled state [ 1053.926398][T15527] vlan2: entered promiscuous mode [ 1053.932982][T15527] veth0: entered promiscuous mode [ 1054.601196][T15554] overlayfs: failed to resolve './file0': -2 [ 1056.049698][T15566] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1056.577261][T15578] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1057.154181][T15593] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2418'. [ 1057.184718][T15594] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2418'. [ 1057.238106][T15597] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.2417'. [ 1057.279186][ T29] kauditd_printk_skb: 255 callbacks suppressed [ 1057.279205][ T29] audit: type=1400 audit(1736006000.636:505): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=15600 comm="syz.7.2419" saddr=172.30.0.8 daddr=172.20.20.170 [ 1057.296731][T15593] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2418'. [ 1057.409907][T15594] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2418'. [ 1057.420279][T15590] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.2417'. [ 1058.245052][T15612] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1060.107330][T15616] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2423'. [ 1060.122273][T15616] vlan3: entered allmulticast mode [ 1060.127985][T15616] batadv0: entered allmulticast mode [ 1060.135726][T15616] bridge0: port 4(vlan3) entered blocking state [ 1060.144857][T15616] bridge0: port 4(vlan3) entered disabled state [ 1060.196295][T15616] vlan3: entered promiscuous mode [ 1060.255002][T15616] batadv0: entered promiscuous mode [ 1060.523237][T15624] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1062.325788][T15654] loop5: detected capacity change from 0 to 7 [ 1062.334856][T15654] buffer_io_error: 4 callbacks suppressed [ 1062.334871][T15654] Buffer I/O error on dev loop5, logical block 0, async page read [ 1062.348738][T15654] Buffer I/O error on dev loop5, logical block 0, async page read [ 1062.356879][T15654] Buffer I/O error on dev loop5, logical block 0, async page read [ 1062.364849][T15654] Buffer I/O error on dev loop5, logical block 0, async page read [ 1062.372982][T15654] Buffer I/O error on dev loop5, logical block 0, async page read [ 1062.380919][T15654] Buffer I/O error on dev loop5, logical block 0, async page read [ 1062.389257][T15654] Buffer I/O error on dev loop5, logical block 0, async page read [ 1062.397238][T15654] ldm_validate_partition_table(): Disk read failed. [ 1062.404186][T15654] Buffer I/O error on dev loop5, logical block 0, async page read [ 1062.412095][T15654] Buffer I/O error on dev loop5, logical block 0, async page read [ 1062.421159][T15654] Buffer I/O error on dev loop5, logical block 0, async page read [ 1062.429210][T15654] Dev loop5: unable to read RDB block 0 [ 1062.435247][T15654] loop5: unable to read partition table [ 1062.440984][T15654] loop5: partition table beyond EOD, truncated [ 1062.447437][T15654] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 1062.447437][T15654] ) failed (rc=-5) [ 1066.592412][T15681] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1067.119064][T15687] dccp_invalid_packet: P.CsCov 9 exceeds packet length 28 [ 1069.399257][T15712] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2450'. [ 1070.768484][T15722] netlink: del zone limit has 4 unknown bytes [ 1070.883436][T15722] macvlan0: entered allmulticast mode [ 1070.888883][T15722] veth1_vlan: entered allmulticast mode [ 1071.971754][ T25] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1072.185495][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 1072.947477][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1072.964071][ T25] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1073.542524][ T25] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 1073.621806][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.692227][ T25] usb 4-1: Product: syz [ 1073.735663][ T25] usb 4-1: Manufacturer: syz [ 1073.820940][ T25] usb 4-1: SerialNumber: syz [ 1074.780675][ T25] usb 4-1: config 0 descriptor?? [ 1075.056239][ T25] hub 4-1:0.0: bad descriptor, ignoring hub [ 1075.062398][ T25] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1075.505338][ T25] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1075.525251][T12826] usb 4-1: Failed to submit usb control message: -71 [ 1075.902884][T12826] usb 4-1: unable to send the bmi data to the device: -71 [ 1075.913058][T15762] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2463'. [ 1075.987084][T12826] usb 4-1: unable to get target info from device [ 1075.998098][T12826] usb 4-1: could not get target info (-71) [ 1076.010035][T12826] usb 4-1: could not probe fw (-71) [ 1076.385371][ T9] usb 4-1: USB disconnect, device number 25 [ 1076.449531][T15773] syzkaller1: entered promiscuous mode [ 1076.522499][T15773] syzkaller1: entered allmulticast mode [ 1076.996252][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1077.089181][T15782] bond0 (unregistering): left promiscuous mode [ 1077.099180][T15782] bond_slave_0: left promiscuous mode [ 1077.109477][T15782] bond_slave_1: left promiscuous mode [ 1077.118220][T15782] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 1077.167504][ T9] usb 1-1: device descriptor read/64, error -71 [ 1077.212232][T15782] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1077.228555][T15782] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1077.274879][T15782] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1077.326341][T15782] bond0 (unregistering): Released all slaves [ 1077.451438][ T9] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1077.722940][ T9] usb 1-1: device descriptor read/64, error -71 [ 1077.840787][ T9] usb usb1-port1: attempt power cycle [ 1078.412260][T15800] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2472'. [ 1078.421710][T15800] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2472'. [ 1079.678341][ T9] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1080.128765][ T9] usb 1-1: device descriptor read/8, error -71 [ 1080.578390][T15814] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2478'. [ 1080.644679][T15817] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1080.720369][ T9] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1080.762527][ T9] usb 1-1: device descriptor read/8, error -71 [ 1080.905298][ T9] usb usb1-port1: unable to enumerate USB device [ 1081.192554][T14931] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1081.412630][T14931] usb 2-1: Using ep0 maxpacket: 8 [ 1082.003956][T14931] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1082.172064][T15851] syz.3.2492: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1082.172561][T15851] CPU: 0 UID: 0 PID: 15851 Comm: syz.3.2492 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 1082.172587][T15851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1082.172600][T15851] Call Trace: [ 1082.172608][T15851] [ 1082.172618][T15851] dump_stack_lvl+0x241/0x360 [ 1082.172662][T15851] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1082.172688][T15851] ? __pfx__printk+0x10/0x10 [ 1082.172718][T15851] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 1082.172746][T15851] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 1082.172776][T15851] warn_alloc+0x278/0x410 [ 1082.172802][T15851] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 1082.172827][T15851] ? __pfx_warn_alloc+0x10/0x10 [ 1082.172851][T15851] ? kasan_save_track+0x3f/0x80 [ 1082.172874][T15851] ? __kasan_kmalloc+0x98/0xb0 [ 1082.172899][T15851] ? xsk_setsockopt+0x598/0x950 [ 1082.172921][T15851] ? do_sock_setsockopt+0x3af/0x720 [ 1082.172943][T15851] ? __x64_sys_setsockopt+0x1ee/0x280 [ 1082.172964][T15851] ? do_syscall_64+0xf3/0x230 [ 1082.172988][T15851] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.173027][T15851] __vmalloc_node_range_noprof+0x126/0x1380 [ 1082.173080][T15851] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1082.173108][T15851] ? __kasan_kmalloc+0x98/0xb0 [ 1082.173138][T15851] vmalloc_user_noprof+0x74/0x80 [ 1082.173162][T15851] ? xskq_create+0xb6/0x170 [ 1082.173182][T15851] xskq_create+0xb6/0x170 [ 1082.173206][T15851] xsk_init_queue+0xa1/0x100 [ 1082.173231][T15851] xsk_setsockopt+0x598/0x950 [ 1082.173256][T15851] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1082.173284][T15851] ? __pfx_lock_acquire+0x10/0x10 [ 1082.173306][T15851] ? __fget_files+0x2a/0x410 [ 1082.173326][T15851] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1082.173345][T15851] do_sock_setsockopt+0x3af/0x720 [ 1082.173374][T15851] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1082.173403][T15851] ? __fget_files+0x395/0x410 [ 1082.173422][T15851] ? __fget_files+0x2a/0x410 [ 1082.173451][T15851] __x64_sys_setsockopt+0x1ee/0x280 [ 1082.173483][T15851] do_syscall_64+0xf3/0x230 [ 1082.173509][T15851] ? clear_bhb_loop+0x35/0x90 [ 1082.173531][T15851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1082.173558][T15851] RIP: 0033:0x7f22b8985d29 [ 1082.173578][T15851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1082.173594][T15851] RSP: 002b:00007f22b67f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1082.173617][T15851] RAX: ffffffffffffffda RBX: 00007f22b8b76080 RCX: 00007f22b8985d29 [ 1082.173633][T15851] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 1082.173646][T15851] RBP: 00007f22b8a01b08 R08: 0000000000000020 R09: 0000000000000000 [ 1082.173667][T15851] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 1082.173681][T15851] R13: 0000000000000001 R14: 00007f22b8b76080 R15: 00007ffe8e1ddc18 [ 1082.173713][T15851] [ 1082.180845][T15851] Mem-Info: [ 1082.180873][T15851] active_anon:23296 inactive_anon:6145 isolated_anon:0 [ 1082.180873][T15851] active_file:25930 inactive_file:34209 isolated_file:0 [ 1082.180873][T15851] unevictable:768 dirty:60 writeback:0 [ 1082.180873][T15851] slab_reclaimable:11463 slab_unreclaimable:110539 [ 1082.180873][T15851] mapped:29492 shmem:24418 pagetables:1156 [ 1082.180873][T15851] sec_pagetables:0 bounce:0 [ 1082.180873][T15851] kernel_misc_reclaimable:0 [ 1082.180873][T15851] free:1282921 free_pcp:1042 free_cma:0 [ 1082.180932][T15851] Node 0 active_anon:93184kB inactive_anon:24580kB active_file:103648kB inactive_file:136836kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117968kB dirty:240kB writeback:0kB shmem:96136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11844kB pagetables:4624kB sec_pagetables:0kB all_unreclaimable? no [ 1082.181011][T15851] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1082.181060][T15851] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1082.181123][T15851] lowmem_reserve[]: 0 2465 2466 0 0 [ 1082.181211][T15851] Node 0 DMA32 free:1209756kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:93180kB inactive_anon:24548kB active_file:102856kB inactive_file:136784kB unevictable:1536kB writepending:240kB present:3129332kB managed:2552776kB mlocked:0kB bounce:0kB free_pcp:2120kB local_pcp:952kB free_cma:0kB [ 1082.181270][T15851] lowmem_reserve[]: 0 0 0 0 0 [ 1082.181347][T15851] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:32kB active_file:792kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1082.181402][T15851] lowmem_reserve[]: 0 0 0 0 0 [ 1082.181479][T15851] Node 1 Normal free:3906568kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:2048kB free_cma:0kB [ 1082.181554][T15851] lowmem_reserve[]: 0 0 0 0 0 [ 1082.181640][T15851] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1082.181817][T15851] Node 0 DMA32: 817*4kB (U) 785*8kB (UME) 555*16kB (UME) 254*32kB (UME) 380*64kB (UME) 247*128kB (UME) 149*256kB (UME) 105*512kB (UME) 39*1024kB (UM) 12*2048kB (UM) 237*4096kB (UM) = 1209660kB [ 1082.182109][T15851] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1082.182267][T15851] Node 1 Normal: 232*4kB (UME) 57*8kB (UME) 44*16kB (UME) 201*32kB (UME) 87*64kB (UME) 32*128kB (UME) 13*256kB (UM) 8*512kB (UME) 4*1024kB (UM) 3*2048kB (UM) 945*4096kB (ME) = 3906568kB [ 1082.182536][T15851] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1082.182554][T15851] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1082.182572][T15851] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1082.182590][T15851] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1082.182607][T15851] 84557 total pagecache pages [ 1082.182616][T15851] 0 pages in swap cache [ 1082.182670][T15851] Free swap = 124728kB [ 1082.182680][T15851] Total swap = 124996kB [ 1082.182689][T15851] 2097051 pages RAM [ 1082.182698][T15851] 0 pages HighMem/MovableOnly [ 1082.182706][T15851] 427005 pages reserved [ 1082.182715][T15851] 0 pages cma reserved [ 1085.059320][T15860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.136558][T15860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.255246][T14931] usb 2-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 1085.268883][T14931] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.277333][T14931] usb 2-1: Product: syz [ 1085.282024][T14931] usb 2-1: Manufacturer: syz [ 1085.287458][T14931] usb 2-1: SerialNumber: syz [ 1085.319581][T14931] usb 2-1: config 0 descriptor?? [ 1085.693604][T15865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2495'. [ 1085.972193][ T9] usb 2-1: USB disconnect, device number 39 [ 1086.280003][T15869] usb usb1: usbfs: process 15869 (syz.8.2497) did not claim interface 0 before use [ 1087.457226][T14122] Bluetooth: hci2: sending frame failed (-49) [ 1087.468266][ T5822] Bluetooth: hci2: Opcode 0x1003 failed: -49 [ 1087.752938][T15890] SET target dimension over the limit! [ 1087.836013][ T9] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 1087.878330][T15877] overlay: Unknown parameter 'fsuuid' [ 1088.054548][ T9] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 1088.064167][ T9] usb 2-1: config 0 has no interface number 0 [ 1088.070332][ T9] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1088.115347][ T9] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1088.156718][ T9] usb 2-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1088.200643][ T9] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 1088.221422][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.259598][ T9] usb 2-1: Product: syz [ 1088.278972][ T9] usb 2-1: Manufacturer: syz [ 1088.381471][ T9] usb 2-1: SerialNumber: syz [ 1088.415007][ T9] usb 2-1: config 0 descriptor?? [ 1088.457077][T15879] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1088.478890][ T9] cyberjack 2-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 1088.500253][ T9] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 1088.542714][ T9] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 1088.891231][ T9] usb 2-1: USB disconnect, device number 40 [ 1088.906680][ T9] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 1088.934982][ T9] cyberjack 2-1:0.69: device disconnected [ 1088.964605][T15907] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2506'. [ 1089.736705][T15918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2508'. [ 1090.357832][T15930] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2513'. [ 1090.642862][T15930] hsr_slave_1 (unregistering): left promiscuous mode [ 1092.007503][T15960] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.016755][T15960] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.595696][T15967] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2522'. [ 1092.741401][ T25] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1093.130447][ T29] audit: type=1326 audit(1736006034.114:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15982 comm="syz.1.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a3b85d29 code=0x7ffc0000 [ 1093.130492][ T29] audit: type=1326 audit(1736006034.114:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15982 comm="syz.1.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a3b85d29 code=0x7ffc0000 [ 1093.130526][ T29] audit: type=1326 audit(1736006034.114:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15982 comm="syz.1.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17a3b85d29 code=0x7ffc0000 [ 1093.130557][ T29] audit: type=1326 audit(1736006034.114:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15982 comm="syz.1.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a3b85d29 code=0x7ffc0000 [ 1093.130590][ T29] audit: type=1326 audit(1736006034.114:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15982 comm="syz.1.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a3b85d29 code=0x7ffc0000 [ 1093.130622][ T29] audit: type=1326 audit(1736006034.114:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15982 comm="syz.1.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f17a3b85d29 code=0x7ffc0000 [ 1093.130654][ T29] audit: type=1326 audit(1736006034.114:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15982 comm="syz.1.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a3b85d29 code=0x7ffc0000 [ 1093.130686][ T29] audit: type=1326 audit(1736006034.114:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15982 comm="syz.1.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a3b85d29 code=0x7ffc0000 [ 1093.130719][ T29] audit: type=1326 audit(1736006034.114:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15982 comm="syz.1.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f17a3b85d29 code=0x7ffc0000 [ 1093.130752][ T29] audit: type=1326 audit(1736006034.114:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15982 comm="syz.1.2527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f17a3b85d29 code=0x7ffc0000 [ 1093.613500][ T25] usb 9-1: Using ep0 maxpacket: 8 [ 1093.633675][ T25] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1093.936606][ T25] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1093.937823][ T25] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1094.164721][ T25] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1094.164756][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.164777][ T25] usb 9-1: Product: syz [ 1094.164792][ T25] usb 9-1: Manufacturer: syz [ 1094.164808][ T25] usb 9-1: SerialNumber: syz [ 1095.370734][ T25] usb 9-1: 0:2 : does not exist [ 1095.526080][ T25] usb 9-1: USB disconnect, device number 5 [ 1095.641935][T16010] sg_write: process 1875 (syz.1.2531) changed security contexts after opening file descriptor, this is not allowed. [ 1095.714464][T16010] program syz.1.2531 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1095.792200][T16017] netlink: 'syz.7.2534': attribute type 10 has an invalid length. [ 1095.926805][T16017] wlan1: mtu less than device minimum [ 1104.937228][T16075] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2548'. [ 1105.157150][T16079] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2548'. [ 1105.252290][ T5876] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1105.286717][T16082] netlink: 'syz.8.2550': attribute type 1 has an invalid length. [ 1105.337219][T16085] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2549'. [ 1105.341047][T16082] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2550'. [ 1105.476942][ T5876] usb 4-1: Using ep0 maxpacket: 16 [ 1105.495925][ T5876] usb 4-1: config 1 interface 0 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1105.530491][ T5876] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 1105.553534][ T5876] usb 4-1: config 1 interface 0 altsetting 255 bulk endpoint 0x3 has invalid maxpacket 64 [ 1105.577438][ T5876] usb 4-1: config 1 interface 0 altsetting 255 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1105.603797][ T5876] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1105.666327][ T5876] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1105.692044][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1105.990852][ T5876] usb 4-1: SerialNumber: syz [ 1106.001719][T16067] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1107.622186][T16101] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1107.652772][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1107.676717][ T5876] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -12 [ 1108.908347][ T5876] usb 4-1: USB disconnect, device number 26 [ 1109.309436][T16117] veth0_vlan: left promiscuous mode [ 1109.361456][T16117] veth0_vlan: entered promiscuous mode [ 1109.533906][T16115] input: syz1 as /devices/virtual/input/input17 [ 1110.440618][T16139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2562'. [ 1110.945591][T16144] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1111.027675][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 1111.038468][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 1111.097710][ T5824] libceph: connect (1)[c::]:6789 error -101 [ 1111.141877][ T5824] libceph: mon0 (1)[c::]:6789 connect error [ 1111.181625][T16135] ceph: No mds server is up or the cluster is laggy [ 1111.274688][ T5876] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1111.323316][T16155] 9pnet_fd: Insufficient options for proto=fd [ 1112.285244][ T5876] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1112.380628][ T5876] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1112.431756][ T5876] usb 9-1: Product: syz [ 1112.482089][ T5876] usb 9-1: Manufacturer: syz [ 1112.525854][ T5876] usb 9-1: SerialNumber: syz [ 1112.560951][ T5876] usb 9-1: config 0 descriptor?? [ 1112.821805][T16165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2571'. [ 1112.836602][T16165] vlan3: entered allmulticast mode [ 1112.843200][T16165] batadv0: entered allmulticast mode [ 1112.849720][T16165] bridge0: port 4(vlan3) entered blocking state [ 1112.857901][T16165] bridge0: port 4(vlan3) entered disabled state [ 1112.867070][T16165] vlan3: entered promiscuous mode [ 1112.873743][T16165] batadv0: entered promiscuous mode [ 1113.827025][ T5876] usb 9-1: Firmware version (0.0) predates our first public release. [ 1113.911030][ T5876] usb 9-1: Please update to version 0.2 or newer [ 1114.287158][T16182] FAULT_INJECTION: forcing a failure. [ 1114.287158][T16182] name failslab, interval 1, probability 0, space 0, times 0 [ 1114.317873][T14931] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1114.372732][T16182] CPU: 0 UID: 0 PID: 16182 Comm: syz.3.2575 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 1114.383553][T16182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1114.393623][T16182] Call Trace: [ 1114.396910][T16182] [ 1114.399852][T16182] dump_stack_lvl+0x241/0x360 [ 1114.404551][T16182] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1114.409766][T16182] ? __pfx__printk+0x10/0x10 [ 1114.414372][T16182] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 1114.420365][T16182] ? __pfx___might_resched+0x10/0x10 [ 1114.425687][T16182] should_fail_ex+0x3b0/0x4e0 [ 1114.430392][T16182] should_failslab+0xac/0x100 [ 1114.435095][T16182] kmem_cache_alloc_node_noprof+0x77/0x380 [ 1114.440919][T16182] ? __alloc_skb+0x1c3/0x440 [ 1114.445528][T16182] __alloc_skb+0x1c3/0x440 [ 1114.449963][T16182] ? __pfx___alloc_skb+0x10/0x10 [ 1114.454917][T16182] ? netlink_ack_tlv_len+0x6e/0x200 [ 1114.460133][T16182] netlink_ack+0x145/0xa50 [ 1114.464562][T16182] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1114.469944][T16182] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1114.475419][T16182] ? __pfx___might_resched+0x10/0x10 [ 1114.480731][T16182] netlink_rcv_skb+0x262/0x430 [ 1114.485507][T16182] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1114.490548][T16182] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1114.495857][T16182] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 1114.501344][T16182] genl_rcv+0x28/0x40 [ 1114.505337][T16182] netlink_unicast+0x7f6/0x990 [ 1114.510127][T16182] ? __pfx_netlink_unicast+0x10/0x10 [ 1114.515430][T16182] ? __virt_addr_valid+0x45f/0x530 [ 1114.520559][T16182] ? __phys_addr_symbol+0x2f/0x70 [ 1114.525604][T16182] ? __check_object_size+0x47a/0x730 [ 1114.530914][T16182] netlink_sendmsg+0x8e4/0xcb0 [ 1114.535708][T16182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1114.541030][T16182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1114.546338][T16182] __sock_sendmsg+0x221/0x270 [ 1114.551052][T16182] ____sys_sendmsg+0x52a/0x7e0 [ 1114.555850][T16182] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1114.561162][T16182] ? __fget_files+0x2a/0x410 [ 1114.565781][T16182] ? __fget_files+0x2a/0x410 [ 1114.570405][T16182] __sys_sendmsg+0x269/0x350 [ 1114.575036][T16182] ? __pfx_lock_release+0x10/0x10 [ 1114.580089][T16182] ? __pfx___sys_sendmsg+0x10/0x10 [ 1114.585231][T16182] ? __pfx_vfs_write+0x10/0x10 [ 1114.590069][T16182] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1114.596403][T16182] ? do_syscall_64+0x100/0x230 [ 1114.601197][T16182] ? do_syscall_64+0xb6/0x230 [ 1114.606696][T16182] do_syscall_64+0xf3/0x230 [ 1114.611230][T16182] ? clear_bhb_loop+0x35/0x90 [ 1114.616107][T16182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.622204][T16182] RIP: 0033:0x7f22b8985d29 [ 1114.626650][T16182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1114.646475][T16182] RSP: 002b:00007f22b96e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1114.654932][T16182] RAX: ffffffffffffffda RBX: 00007f22b8b75fa0 RCX: 00007f22b8985d29 [ 1114.662939][T16182] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 1114.670939][T16182] RBP: 00007f22b96e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1114.675439][T16185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2576'. [ 1114.678912][T16182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1114.678933][T16182] R13: 0000000000000000 R14: 00007f22b8b75fa0 R15: 00007ffe8e1ddc18 [ 1114.678963][T16182] [ 1114.758327][ T5876] usb 9-1: USB disconnect, device number 6 [ 1114.816420][T14931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1114.874080][T14931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1114.914648][T14931] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 1114.984329][T14931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1115.031605][T14931] usb 1-1: config 0 descriptor?? [ 1115.541973][T14931] stadia 0003:18D1:9400.000E: unbalanced collection at end of report description [ 1115.659673][T14931] stadia 0003:18D1:9400.000E: parse failed [ 1116.324578][T14931] stadia 0003:18D1:9400.000E: probe with driver stadia failed with error -22 [ 1121.479821][T14931] usb 1-1: USB disconnect, device number 46 [ 1122.663974][T16211] usb usb7: usbfs: process 16211 (syz.3.2586) did not claim interface 0 before use [ 1122.799778][T16211] vivid-007: disconnect [ 1123.458952][T16210] vivid-007: reconnect [ 1125.869768][T16253] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2589'. [ 1129.942673][T16275] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.2601'. [ 1130.028592][T16272] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.2601'. [ 1130.065925][T16278] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2602'. [ 1130.383266][T16284] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1138.014678][T16317] 9pnet_fd: Insufficient options for proto=fd [ 1138.252446][T16328] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1138.368110][T16331] vivid-007: disconnect [ 1139.350389][T16351] overlay: ./file0 is not a directory [ 1139.551894][T16329] vivid-007: reconnect [ 1140.029379][T16356] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2629'. [ 1140.859646][T16361] netlink: 'syz.8.2631': attribute type 10 has an invalid length. [ 1141.161864][T16361] wlan1: mtu less than device minimum [ 1142.257460][T16368] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1142.787387][T16381] bond3: entered promiscuous mode [ 1142.793510][T16381] bond3: entered allmulticast mode [ 1142.807729][T16381] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1142.996250][T16387] overlay: Unknown parameter 'uid>00000000000000016895' [ 1147.340042][T16413] netlink: 'syz.3.2645': attribute type 1 has an invalid length. [ 1147.347865][T16413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2645'. [ 1147.403132][T16409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2643'. [ 1148.525598][T16430] overlayfs: failed to clone upperpath [ 1148.726882][T16439] FAULT_INJECTION: forcing a failure. [ 1148.726882][T16439] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1148.864128][T16439] CPU: 1 UID: 0 PID: 16439 Comm: syz.3.2651 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 1148.874957][T16439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1148.885042][T16439] Call Trace: [ 1148.888352][T16439] [ 1148.891303][T16439] dump_stack_lvl+0x241/0x360 [ 1148.896014][T16439] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1148.901243][T16439] ? __pfx__printk+0x10/0x10 [ 1148.905862][T16439] ? __pfx_lock_release+0x10/0x10 [ 1148.910930][T16439] should_fail_ex+0x3b0/0x4e0 [ 1148.915632][T16439] _copy_from_user+0x2f/0xc0 [ 1148.920334][T16439] sk_getsockopt+0x1d2/0x3890 [ 1148.925041][T16439] ? __pfx_sk_getsockopt+0x10/0x10 [ 1148.930197][T16439] ? __pfx___might_resched+0x10/0x10 [ 1148.935513][T16439] ? __might_fault+0xaa/0x120 [ 1148.940218][T16439] ? __pfx_lock_release+0x10/0x10 [ 1148.945276][T16439] ? __might_fault+0xc6/0x120 [ 1148.949986][T16439] do_sock_getsockopt+0x2d5/0x7e0 [ 1148.955018][T16439] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1148.960570][T16439] ? __fget_files+0x2a/0x410 [ 1148.965160][T16439] ? __fget_files+0x395/0x410 [ 1148.969835][T16439] ? __fget_files+0x2a/0x410 [ 1148.974428][T16439] __x64_sys_getsockopt+0x2a1/0x370 [ 1148.979630][T16439] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 1148.985351][T16439] ? do_syscall_64+0x100/0x230 [ 1148.990118][T16439] ? do_syscall_64+0xb6/0x230 [ 1148.994799][T16439] do_syscall_64+0xf3/0x230 [ 1148.999301][T16439] ? clear_bhb_loop+0x35/0x90 [ 1149.003974][T16439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1149.009872][T16439] RIP: 0033:0x7f22b8985d29 [ 1149.014303][T16439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1149.033912][T16439] RSP: 002b:00007f22b67f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1149.042332][T16439] RAX: ffffffffffffffda RBX: 00007f22b8b76080 RCX: 00007f22b8985d29 [ 1149.050308][T16439] RDX: 000000000000001c RSI: 0000000000000001 RDI: 0000000000000003 [ 1149.058286][T16439] RBP: 00007f22b67f6090 R08: 0000000020000040 R09: 0000000000000000 [ 1149.066341][T16439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1149.074306][T16439] R13: 0000000000000001 R14: 00007f22b8b76080 R15: 00007ffe8e1ddc18 [ 1149.082384][T16439] [ 1149.085795][ C1] vkms_vblank_simulate: vblank timer overrun [ 1154.837139][T16472] netlink: 'syz.8.2664': attribute type 9 has an invalid length. [ 1155.166883][T16475] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2665'. [ 1155.361748][T16480] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2667'. [ 1155.958945][T16489] squashfs: Unknown parameter '/dev/net/tun' [ 1158.329986][T14931] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1158.524734][T14931] usb 4-1: Using ep0 maxpacket: 32 [ 1158.613067][T14931] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1158.669433][T14931] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1158.705330][T14931] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.713389][T14931] usb 4-1: Product: syz [ 1158.749593][T14931] usb 4-1: Manufacturer: syz [ 1158.754253][T14931] usb 4-1: SerialNumber: syz [ 1158.804589][T14931] usb 4-1: config 0 descriptor?? [ 1159.054119][T14931] gs_usb 4-1:0.0: Couldn't send data format (err=-71) [ 1159.071248][T14931] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 1159.159680][T14931] usb 4-1: USB disconnect, device number 27 [ 1162.371708][T16602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2701'. [ 1166.536953][T14122] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1166.572667][T14122] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1166.594410][T14122] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1166.617243][T14122] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1166.627907][T14122] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1166.648832][T14122] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1168.341749][T16607] chnl_net:caif_netlink_parms(): no params data found [ 1169.019468][T14122] Bluetooth: hci2: command tx timeout [ 1169.272913][T16607] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.289797][T16607] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.311738][T16607] bridge_slave_0: entered allmulticast mode [ 1169.331639][T16607] bridge_slave_0: entered promiscuous mode [ 1169.353554][T16607] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.361517][T16607] bridge0: port 2(bridge_slave_1) entered disabled state [ 1169.370754][T16607] bridge_slave_1: entered allmulticast mode [ 1169.385539][T16653] netlink: 'syz.0.2713': attribute type 6 has an invalid length. [ 1169.419287][T16607] bridge_slave_1: entered promiscuous mode [ 1169.686598][T16607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1169.721986][T16607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1169.787348][T16660] delete_channel: no stack [ 1170.101914][T16665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2715'. [ 1170.833474][T16607] team0: Port device team_slave_0 added [ 1170.852817][T16607] team0: Port device team_slave_1 added [ 1171.086725][T16607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1172.073779][T16607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1172.112908][T16607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1172.448781][T14122] Bluetooth: hci2: command tx timeout [ 1172.990893][T16607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1173.037892][T16607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1173.187630][T16607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1173.318903][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1173.472426][T16695] misc userio: The device must be registered before sending interrupts [ 1173.776709][T16701] loop5: detected capacity change from 0 to 7 [ 1173.790226][T16701] buffer_io_error: 4 callbacks suppressed [ 1173.790244][T16701] Buffer I/O error on dev loop5, logical block 0, async page read [ 1173.804207][T16701] Buffer I/O error on dev loop5, logical block 0, async page read [ 1173.813327][T16701] Buffer I/O error on dev loop5, logical block 0, async page read [ 1173.824104][T16701] Buffer I/O error on dev loop5, logical block 0, async page read [ 1173.832535][T16701] Buffer I/O error on dev loop5, logical block 0, async page read [ 1173.840733][T16701] Buffer I/O error on dev loop5, logical block 0, async page read [ 1173.849224][T16701] Buffer I/O error on dev loop5, logical block 0, async page read [ 1173.858996][T16701] ldm_validate_partition_table(): Disk read failed. [ 1173.868348][T16701] Buffer I/O error on dev loop5, logical block 0, async page read [ 1173.880399][T16701] Buffer I/O error on dev loop5, logical block 0, async page read [ 1173.893308][T16701] Buffer I/O error on dev loop5, logical block 0, async page read [ 1173.903008][T16701] Dev loop5: unable to read RDB block 0 [ 1173.931553][T16701] loop5: unable to read partition table [ 1173.969521][T16701] loop5: partition table beyond EOD, truncated [ 1173.988765][T16701] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 1173.988765][T16701] ) failed (rc=-5) [ 1174.270744][T16607] hsr_slave_0: entered promiscuous mode [ 1174.281214][T16607] hsr_slave_1: entered promiscuous mode [ 1174.313716][T16607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1174.393426][T16607] Cannot create hsr debugfs directory [ 1174.719487][T14122] Bluetooth: hci2: command tx timeout [ 1174.834861][T16705] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1175.336830][T16607] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.747910][T16725] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2728'. [ 1175.761450][T16607] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1175.963331][T16607] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.327112][T16607] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1176.692392][T16743] netlink: 'syz.3.2734': attribute type 9 has an invalid length. [ 1176.917772][T16607] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1176.924838][T14122] Bluetooth: hci2: command tx timeout [ 1177.540449][T16607] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1177.569682][T16607] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1177.635253][T16607] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1177.885373][T16607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1177.903726][T16607] 8021q: adding VLAN 0 to HW filter on device team0 [ 1177.939901][T16607] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1177.950644][T16607] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1177.987947][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.995294][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1178.004879][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 1178.012284][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1178.226280][ T5876] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1178.358886][T16607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1178.454136][ T5876] usb 4-1: Using ep0 maxpacket: 16 [ 1178.477656][ T5876] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 1178.497247][ T5876] usb 4-1: config 0 has no interface number 0 [ 1178.517616][ T5876] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1178.542196][T16607] veth0_vlan: entered promiscuous mode [ 1178.565209][ T5876] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1178.596280][T16607] veth1_vlan: entered promiscuous mode [ 1178.604870][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.624878][ T5876] usb 4-1: Product: syz [ 1178.744635][ T5876] usb 4-1: Manufacturer: syz [ 1178.750686][ T5876] usb 4-1: SerialNumber: syz [ 1178.757816][ T5876] usb 4-1: config 0 descriptor?? [ 1178.839150][T16777] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2743'. [ 1178.858635][T16607] veth0_macvtap: entered promiscuous mode [ 1178.907440][T16777] vlan4: entered allmulticast mode [ 1179.212902][T16607] veth1_macvtap: entered promiscuous mode [ 1179.650039][T16607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1179.697054][T16607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.748930][T16607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1179.787067][T16607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.896780][T16607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1179.940810][T16607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1179.980266][T16607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1180.034896][T16607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.060877][T16607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1180.072441][T16607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.084488][T16607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1180.215218][T16607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1180.299430][T16607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.311570][T16607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1180.332217][T16607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.388322][T16607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1180.437205][T16607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.475957][T16792] fuse: Bad value for 'fd' [ 1180.498648][T16607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1180.565054][T16607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.594365][ T5876] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.214/input/input18 [ 1180.615719][T16607] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1180.644214][T16607] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1180.674651][T16607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1180.717794][T16607] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.751473][T16607] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.789972][T16607] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.823980][T16607] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1180.920263][ T5876] usb 4-1: USB disconnect, device number 28 [ 1181.675052][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1181.683613][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1181.722290][T12824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1181.730392][T12824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1182.069845][T16810] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2753'. [ 1182.615515][T16827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2757'. [ 1182.636649][T16827] wlan1: mtu less than device minimum [ 1182.642259][T16827] team0: Device wlan1 failed to change mtu [ 1183.315119][T16821] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2755'. [ 1184.000832][T16844] input: syz1 as /devices/virtual/input/input19 [ 1185.724750][T16884] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2773'. [ 1185.895253][T16886] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2771'. [ 1188.370863][ T5876] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1189.366575][ T5876] usb 1-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.35 [ 1189.377946][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1189.394596][ T5876] usb 1-1: Product: syz [ 1189.402460][ T5876] usb 1-1: Manufacturer: syz [ 1189.543579][ T5876] usb 1-1: SerialNumber: syz [ 1190.493549][T16927] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1190.497096][ T5876] usb 1-1: config 0 descriptor?? [ 1190.534581][ T5876] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 1190.805566][T16936] SET target dimension over the limit! [ 1191.880808][T16944] bridge0: port 3(erspan0) entered blocking state [ 1191.884555][ T5876] sonixb 1-1:0.0: Error writing register 01: -110 [ 1191.894611][T16944] bridge0: port 3(erspan0) entered disabled state [ 1191.894968][ T5876] sonixb 1-1:0.0: probe with driver sonixb failed with error -110 [ 1191.913347][T16944] erspan0: entered allmulticast mode [ 1191.921167][T16944] erspan0: entered promiscuous mode [ 1191.931573][T16944] bridge0: port 3(erspan0) entered blocking state [ 1191.938129][T16944] bridge0: port 3(erspan0) entered forwarding state [ 1194.328944][ T5824] usb 1-1: USB disconnect, device number 48 [ 1197.046226][T16974] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2797'. [ 1197.056516][T16974] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2797'. [ 1197.073914][T16974] IPv6: sit1: Disabled Multicast RS [ 1197.118198][T16975] Bluetooth: MGMT ver 1.23 [ 1199.202744][T16980] kernel profiling enabled (shift: 0) [ 1201.207873][T17008] netlink: 'syz.7.2809': attribute type 9 has an invalid length. [ 1201.732322][T16980] syz.8.2804: vmalloc error: size 738197504, failed to allocated page array size 1441792, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1201.818822][T16980] CPU: 0 UID: 0 PID: 16980 Comm: syz.8.2804 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 1201.829657][T16980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1201.839763][T16980] Call Trace: [ 1201.843069][T16980] [ 1201.846027][T16980] dump_stack_lvl+0x241/0x360 [ 1201.850759][T16980] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1201.855992][T16980] ? __pfx__printk+0x10/0x10 [ 1201.860620][T16980] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 1201.867077][T16980] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 1201.873613][T16980] warn_alloc+0x278/0x410 [ 1201.877991][T16980] ? __pfx_warn_alloc+0x10/0x10 [ 1201.882884][T16980] ? profile_init+0xb1/0x100 [ 1201.887501][T16980] ? __get_vm_area_node+0x1c8/0x2d0 [ 1201.892723][T16980] ? __get_vm_area_node+0x25c/0x2d0 [ 1201.897960][T16980] __vmalloc_node_range_noprof+0x62f/0x1380 [ 1201.903912][T16980] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1201.910269][T16980] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1201.915495][T16980] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1201.920721][T16980] ? profile_init+0xb1/0x100 [ 1201.925339][T16980] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1201.930571][T16980] vzalloc_noprof+0x79/0x90 [ 1201.935107][T16980] ? profile_init+0xb1/0x100 [ 1201.939726][T16980] profile_init+0xb1/0x100 [ 1201.944168][T16980] profiling_store+0x6c/0xf0 [ 1201.948782][T16980] kernfs_fop_write_iter+0x3a0/0x500 [ 1201.954104][T16980] vfs_write+0xaeb/0xd30 [ 1201.958377][T16980] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1201.964206][T16980] ? __pfx_vfs_write+0x10/0x10 [ 1201.968999][T16980] ? __fget_files+0x2a/0x410 [ 1201.973612][T16980] ? __fget_files+0x2a/0x410 [ 1201.978242][T16980] ksys_write+0x18f/0x2b0 [ 1201.982603][T16980] ? __pfx_ksys_write+0x10/0x10 [ 1201.987484][T16980] ? do_syscall_64+0x100/0x230 [ 1201.992279][T16980] ? do_syscall_64+0xb6/0x230 [ 1201.996993][T16980] do_syscall_64+0xf3/0x230 [ 1202.001526][T16980] ? clear_bhb_loop+0x35/0x90 [ 1202.006233][T16980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.012153][T16980] RIP: 0033:0x7f3325185d29 [ 1202.016588][T16980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1202.036222][T16980] RSP: 002b:00007f3325f9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1202.044676][T16980] RAX: ffffffffffffffda RBX: 00007f3325375fa0 RCX: 00007f3325185d29 [ 1202.052712][T16980] RDX: 0000000000000028 RSI: 0000000020000340 RDI: 0000000000000006 [ 1202.060705][T16980] RBP: 00007f3325201b08 R08: 0000000000000000 R09: 0000000000000000 [ 1202.068698][T16980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1202.076691][T16980] R13: 0000000000000000 R14: 00007f3325375fa0 R15: 00007ffccfa50948 [ 1202.084707][T16980] [ 1202.156898][T16980] Mem-Info: [ 1202.160672][T16980] active_anon:40534 inactive_anon:13925 isolated_anon:0 [ 1202.160672][T16980] active_file:25994 inactive_file:34187 isolated_file:0 [ 1202.160672][T16980] unevictable:768 dirty:50 writeback:0 [ 1202.160672][T16980] slab_reclaimable:11504 slab_unreclaimable:113711 [ 1202.160672][T16980] mapped:37637 shmem:47374 pagetables:1309 [ 1202.160672][T16980] sec_pagetables:0 bounce:0 [ 1202.160672][T16980] kernel_misc_reclaimable:0 [ 1202.160672][T16980] free:1229598 free_pcp:2950 free_cma:0 [ 1202.251457][T16980] Node 0 active_anon:162136kB inactive_anon:48184kB active_file:103904kB inactive_file:136748kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:152244kB dirty:224kB writeback:0kB shmem:187960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12244kB pagetables:5148kB sec_pagetables:0kB all_unreclaimable? no [ 1202.325171][T16980] Node 1 active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1202.959522][T17030] loop5: detected capacity change from 0 to 7 [ 1202.966250][T17030] buffer_io_error: 4 callbacks suppressed [ 1202.966266][T17030] Buffer I/O error on dev loop5, logical block 0, async page read [ 1202.968391][T16980] Node 0 [ 1202.972114][T17030] Buffer I/O error on dev loop5, logical block 0, async page read [ 1202.991606][T16980] DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1202.991667][T16980] lowmem_reserve[]: [ 1203.018518][T17030] Buffer I/O error on dev loop5, logical block 0, async page read [ 1203.018592][T17030] Buffer I/O error on dev loop5, logical block 0, async page read [ 1203.039028][T17030] Buffer I/O error on dev loop5, logical block 0, async page read [ 1203.046978][T17030] Buffer I/O error on dev loop5, logical block 0, async page read [ 1203.055381][T17030] Buffer I/O error on dev loop5, logical block 0, async page read [ 1203.063614][T17030] ldm_validate_partition_table(): Disk read failed. [ 1203.071068][T17030] Buffer I/O error on dev loop5, logical block 0, async page read [ 1203.078975][T17030] Buffer I/O error on dev loop5, logical block 0, async page read [ 1203.087487][T17030] Buffer I/O error on dev loop5, logical block 0, async page read [ 1203.095829][T17030] Dev loop5: unable to read RDB block 0 [ 1203.101595][T17030] loop5: unable to read partition table [ 1203.108372][T17030] loop5: partition table beyond EOD, truncated [ 1203.109877][ T5822] Bluetooth: hci6: command 0x0406 tx timeout [ 1203.114806][T17030] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 1203.114806][T17030] ) failed (rc=-5) [ 1203.115985][T16980] 0 2465 2466 0 0 [ 1203.139736][T16980] Node 0 DMA32 free:994724kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:162132kB inactive_anon:52352kB active_file:103112kB inactive_file:136696kB unevictable:1536kB writepending:224kB present:3129332kB managed:2552776kB mlocked:0kB bounce:0kB free_pcp:14808kB local_pcp:14576kB free_cma:0kB [ 1203.316417][T16980] lowmem_reserve[]: 0 0 0 0 0 [ 1203.322062][T16980] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:32kB active_file:792kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1203.429740][T16980] lowmem_reserve[]: 0 0 0 0 0 [ 1203.455311][T16980] Node 1 Normal free:3908368kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:72kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1203.687648][T16980] lowmem_reserve[]: 0 0 0 0 0 [ 1203.748182][T16980] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1203.806735][T16980] Node 0 DMA32: 3*4kB (UME) 4*8kB (ME) 29*16kB (UE) 24*32kB (UME) 9*64kB (UME) 10*128kB (UM) 11*256kB (UME) 8*512kB (UME) 14*1024kB (UM) 12*2048kB (UM) 234*4096kB (M) = 1007420kB [ 1203.838811][T16980] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1203.851977][T16980] Node 1 Normal: 170*4kB (UME) 57*8kB (UME) 44*16kB (UME) 201*32kB (UME) 87*64kB (UME) 32*128kB (UME) 13*256kB (UM) 8*512kB (UME) 4*1024kB (UM) 4*2048kB (UM) 945*4096kB (ME) = 3908368kB [ 1203.872978][T16980] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1203.883871][T16980] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1204.360109][T16980] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1204.422550][T17047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2819'. [ 1204.441945][T17047] wlan1: mtu less than device minimum [ 1204.447390][T17047] team0: Device wlan1 failed to change mtu [ 1204.477765][T16980] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1204.494757][T16980] 107558 total pagecache pages [ 1204.500003][T16980] 0 pages in swap cache [ 1204.504802][T16980] Free swap = 124232kB [ 1204.510040][T16980] Total swap = 124996kB [ 1204.515638][T16980] 2097051 pages RAM [ 1204.520456][T16980] 0 pages HighMem/MovableOnly [ 1204.526740][T16980] 427005 pages reserved [ 1204.531364][T16980] 0 pages cma reserved [ 1211.687907][T17099] netlink: 'syz.8.2834': attribute type 9 has an invalid length. [ 1213.662517][T17127] bridge0: port 5(erspan0) entered blocking state [ 1213.669501][T17127] bridge0: port 5(erspan0) entered disabled state [ 1213.677167][T17127] erspan0: entered allmulticast mode [ 1213.705874][T17127] erspan0: entered promiscuous mode [ 1216.009693][T17122] FAULT_INJECTION: forcing a failure. [ 1216.009693][T17122] name failslab, interval 1, probability 0, space 0, times 0 [ 1216.029274][T17122] CPU: 1 UID: 0 PID: 17122 Comm: syz.1.2832 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 1216.040121][T17122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1216.050197][T17122] Call Trace: [ 1216.053499][T17122] [ 1216.056473][T17122] dump_stack_lvl+0x241/0x360 [ 1216.061182][T17122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1216.066406][T17122] ? __pfx__printk+0x10/0x10 [ 1216.071004][T17122] ? fs_reclaim_acquire+0x93/0x130 [ 1216.076119][T17122] ? __pfx___might_resched+0x10/0x10 [ 1216.081410][T17122] should_fail_ex+0x3b0/0x4e0 [ 1216.086089][T17122] should_failslab+0xac/0x100 [ 1216.090769][T17122] __kmalloc_noprof+0xdd/0x4c0 [ 1216.095532][T17122] ? tomoyo_encode+0x26f/0x540 [ 1216.100297][T17122] tomoyo_encode+0x26f/0x540 [ 1216.104886][T17122] tomoyo_realpath_from_path+0x59e/0x5e0 [ 1216.110531][T17122] tomoyo_path_number_perm+0x236/0x860 [ 1216.116249][T17122] ? __lock_acquire+0x1397/0x2100 [ 1216.121274][T17122] ? tomoyo_path_number_perm+0x206/0x860 [ 1216.126910][T17122] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1216.132917][T17122] ? __fget_files+0x2a/0x410 [ 1216.137505][T17122] ? __fget_files+0x2a/0x410 [ 1216.142094][T17122] security_file_ioctl+0xc6/0x2a0 [ 1216.147120][T17122] __se_sys_ioctl+0x46/0x170 [ 1216.151711][T17122] do_syscall_64+0xf3/0x230 [ 1216.156222][T17122] ? clear_bhb_loop+0x35/0x90 [ 1216.160891][T17122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.166815][T17122] RIP: 0033:0x7f49b0785d29 [ 1216.171229][T17122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1216.190825][T17122] RSP: 002b:00007f49b1657038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1216.199238][T17122] RAX: ffffffffffffffda RBX: 00007f49b0975fa0 RCX: 00007f49b0785d29 [ 1216.207201][T17122] RDX: 0000000020000080 RSI: 00000000400454ca RDI: 0000000000000005 [ 1216.215165][T17122] RBP: 00007f49b1657090 R08: 0000000000000000 R09: 0000000000000000 [ 1216.223131][T17122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1216.231097][T17122] R13: 0000000000000000 R14: 00007f49b0975fa0 R15: 00007fff7cc8b5b8 [ 1216.239088][T17122] [ 1216.375618][T17122] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1216.410087][T17136] sctp: [Deprecated]: syz.7.2842 (pid 17136) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1216.410087][T17136] Use struct sctp_sack_info instead [ 1330.170474][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1330.177477][ C1] rcu: 0-...!: (1 ticks this GP) idle=34a4/1/0x4000000000000000 softirq=76643/76643 fqs=1 [ 1330.189110][ C1] rcu: (detected by 1, t=10503 jiffies, g=64625, q=220 ncpus=2) [ 1330.196859][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1330.196898][ C0] NMI backtrace for cpu 0 [ 1330.196912][ C0] CPU: 0 UID: 0 PID: 14112 Comm: syz-executor Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 1330.196931][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1330.196942][ C0] RIP: 0010:kasan_check_range+0x5/0x290 [ 1330.196970][ C0] Code: 03 86 06 8e e8 6c b2 e3 ff 90 0f 0b 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 55 <41> 57 41 56 41 54 53 b0 01 48 85 f6 0f 84 a0 01 00 00 4c 8d 04 37 [ 1330.196984][ C0] RSP: 0018:ffffc90000007a50 EFLAGS: 00000097 [ 1330.196999][ C0] RAX: 0000000000000004 RBX: dffffc0000000000 RCX: ffffffff817c18e2 [ 1330.197011][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff9a5f9e30 [ 1330.197022][ C0] RBP: ffffc90000007b30 R08: ffffffff94271887 R09: 1ffffffff284e310 [ 1330.197035][ C0] R10: dffffc0000000000 R11: fffffbfff284e311 R12: ffffffff9a5f9e30 [ 1330.197054][ C0] R13: 1ffff92000000f58 R14: ffffc90000007ac0 R15: 1ffffffff34bf3c7 [ 1330.197066][ C0] FS: 0000555569d67500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1330.197081][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1330.197093][ C0] CR2: 0000001b3191eff8 CR3: 00000000320f6000 CR4: 00000000003526f0 [ 1330.197108][ C0] Call Trace: [ 1330.197116][ C0] [ 1330.197126][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1330.197147][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1330.197165][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1330.197182][ C0] ? nmi_handle+0x2a/0x5a0 [ 1330.197207][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1330.197226][ C0] ? nmi_handle+0x14f/0x5a0 [ 1330.197242][ C0] ? nmi_handle+0x2a/0x5a0 [ 1330.197259][ C0] ? kasan_check_range+0x5/0x290 [ 1330.197278][ C0] ? default_do_nmi+0x63/0x160 [ 1330.197295][ C0] ? exc_nmi+0x123/0x1f0 [ 1330.197312][ C0] ? end_repeat_nmi+0xf/0x53 [ 1330.197329][ C0] ? do_raw_spin_lock+0x142/0x370 [ 1330.197350][ C0] ? kasan_check_range+0x5/0x290 [ 1330.197369][ C0] ? kasan_check_range+0x5/0x290 [ 1330.197390][ C0] ? kasan_check_range+0x5/0x290 [ 1330.197409][ C0] [ 1330.197414][ C0] [ 1330.197421][ C0] do_raw_spin_lock+0x142/0x370 [ 1330.197442][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1330.197466][ C0] _raw_spin_lock_irqsave+0xe1/0x120 [ 1330.197484][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1330.197506][ C0] debug_object_activate+0x17f/0x580 [ 1330.197529][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1330.197548][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 1330.197566][ C0] ? advance_sched+0xa02/0xca0 [ 1330.197587][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 1330.197604][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 1330.197623][ C0] enqueue_hrtimer+0x30/0x3c0 [ 1330.197645][ C0] __hrtimer_run_queues+0x6cb/0xd30 [ 1330.197671][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1330.197688][ C0] ? sched_clock+0x4a/0x70 [ 1330.197708][ C0] ? read_tsc+0x9/0x20 [ 1330.197725][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 1330.197745][ C0] hrtimer_interrupt+0x403/0xa40 [ 1330.197774][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 1330.197793][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1330.197813][ C0] [ 1330.197818][ C0] [ 1330.197824][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1330.197846][ C0] RIP: 0010:finish_task_switch+0x1ea/0x870 [ 1330.197866][ C0] Code: c9 50 e8 49 0c 0c 00 48 83 c4 08 4c 89 f7 e8 ed 39 00 00 0f 1f 44 00 00 4c 89 f7 e8 a0 f9 54 0a e8 1b 8c 38 00 fb 48 8b 5d c0 <48> 8d bb f8 15 00 00 48 89 f8 48 c1 e8 03 49 be 00 00 00 00 00 fc [ 1330.197878][ C0] RSP: 0018:ffffc9000445f968 EFLAGS: 00000286 [ 1330.197892][ C0] RAX: 894b19d75f0b3b00 RBX: ffff888026c51e00 RCX: ffffffff9a378903 [ 1330.197904][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0a98e0 RDI: ffffffff8c5edd60 [ 1330.197917][ C0] RBP: ffffc9000445f9b0 R08: ffffffff901856b7 R09: 1ffffffff2030ad6 [ 1330.197929][ C0] R10: dffffc0000000000 R11: fffffbfff2030ad7 R12: 1ffff110170c7eac [ 1330.197940][ C0] R13: dffffc0000000000 R14: ffff8880b863e740 R15: ffff8880b863f560 [ 1330.197961][ C0] ? finish_task_switch+0x1e5/0x870 [ 1330.197981][ C0] __schedule+0x1803/0x4be0 [ 1330.198010][ C0] ? __pfx___schedule+0x10/0x10 [ 1330.198029][ C0] ? __pfx_lock_release+0x10/0x10 [ 1330.198052][ C0] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1330.198071][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1330.198089][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1330.198108][ C0] ? schedule+0x90/0x320 [ 1330.198125][ C0] schedule+0x14b/0x320 [ 1330.198142][ C0] do_nanosleep+0x197/0x600 [ 1330.198161][ C0] ? do_nanosleep+0x80/0x600 [ 1330.198178][ C0] ? __pfx_do_nanosleep+0x10/0x10 [ 1330.198194][ C0] ? __asan_memset+0x23/0x50 [ 1330.198212][ C0] ? __hrtimer_init+0x170/0x250 [ 1330.198232][ C0] hrtimer_nanosleep+0x1ec/0x410 [ 1330.198251][ C0] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 1330.198272][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 1330.198291][ C0] ? __pfx_get_timespec64+0x10/0x10 [ 1330.198307][ C0] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 1330.198334][ C0] __se_sys_clock_nanosleep+0x32b/0x3c0 [ 1330.198354][ C0] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 1330.198372][ C0] ? do_syscall_64+0x100/0x230 [ 1330.198393][ C0] ? do_syscall_64+0xb6/0x230 [ 1330.198413][ C0] do_syscall_64+0xf3/0x230 [ 1330.198431][ C0] ? clear_bhb_loop+0x35/0x90 [ 1330.198447][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1330.198466][ C0] RIP: 0033:0x7f33251b85e5 [ 1330.198482][ C0] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 1330.198495][ C0] RSP: 002b:00007ffccfa50c70 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 1330.198511][ C0] RAX: ffffffffffffffda RBX: 00000000000001fd RCX: 00007f33251b85e5 [ 1330.198522][ C0] RDX: 00007ffccfa50cb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 1330.198533][ C0] RBP: 00007ffccfa50d0c R08: 0000000000000000 R09: 7fffffffffffffff [ 1330.198545][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000009 [ 1330.198555][ C0] R13: 000000000011a2c1 R14: 00007ffccfa50d60 R15: 0000000000000095 [ 1330.198574][ C0] [ 1330.198890][ C1] rcu: rcu_preempt kthread starved for 10501 jiffies! g64625 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1330.810334][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1330.820310][ C1] rcu: RCU grace-period kthread stack dump: [ 1330.826217][ C1] task:rcu_preempt state:R running task stack:25232 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1330.838011][ C1] Call Trace: [ 1330.841306][ C1] [ 1330.844256][ C1] __schedule+0x17fb/0x4be0 [ 1330.848815][ C1] ? __pfx___schedule+0x10/0x10 [ 1330.853684][ C1] ? __pfx_lock_release+0x10/0x10 [ 1330.858728][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1330.865131][ C1] ? schedule+0x90/0x320 [ 1330.869398][ C1] schedule+0x14b/0x320 [ 1330.873581][ C1] schedule_timeout+0x15a/0x290 [ 1330.878475][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1330.883972][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1330.889364][ C1] ? prepare_to_swait_event+0x330/0x350 [ 1330.894955][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 1330.899827][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1330.905062][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 1330.910980][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1330.916282][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1330.922193][ C1] ? finish_swait+0xd4/0x1e0 [ 1330.926797][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 1330.931419][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1330.936628][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1330.942540][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1330.947578][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1330.952785][ C1] kthread+0x2f0/0x390 [ 1330.956868][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1330.962076][ C1] ? __pfx_kthread+0x10/0x10 [ 1330.966677][ C1] ret_from_fork+0x4b/0x80 [ 1330.971102][ C1] ? __pfx_kthread+0x10/0x10 [ 1330.975703][ C1] ret_from_fork_asm+0x1a/0x30 [ 1330.980494][ C1] [ 1330.983527][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1330.989857][ C1] CPU: 1 UID: 0 PID: 1161 Comm: kworker/u8:9 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 1331.000712][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1331.010777][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1331.017300][ C1] RIP: 0010:smp_call_function_many_cond+0x19f3/0x2c60 [ 1331.024075][ C1] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 56 e9 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 01 e5 0b 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 e5 e4 [ 1331.043688][ C1] RSP: 0018:ffffc9000421f6e0 EFLAGS: 00000293 [ 1331.049864][ C1] RAX: ffffffff81938eeb RBX: 1ffff110170c8c65 RCX: ffff88802742bc00 [ 1331.057854][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1331.065837][ C1] RBP: ffffc9000421f8e0 R08: ffffffff81938eba R09: 1ffffffff284e310 [ 1331.073818][ C1] R10: dffffc0000000000 R11: fffffbfff284e311 R12: dffffc0000000000 [ 1331.081798][ C1] R13: ffff8880b8646328 R14: ffff8880b873f940 R15: 0000000000000000 [ 1331.089779][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1331.098715][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1331.105306][ C1] CR2: 0000000020000380 CR3: 000000000e736000 CR4: 00000000003526f0 [ 1331.113313][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1331.121310][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1331.129312][ C1] Call Trace: [ 1331.132612][ C1] [ 1331.135470][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 1331.141913][ C1] ? print_other_cpu_stall+0x1481/0x15c0 [ 1331.147577][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 1331.153405][ C1] ? __pfx___bpf_trace_rcu_utilization+0x10/0x10 [ 1331.159743][ C1] ? __traceiter_rcu_utilization+0x74/0xb0 [ 1331.165563][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 1331.171835][ C1] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 1331.177227][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1331.182883][ C1] ? update_process_times+0x242/0x2f0 [ 1331.188263][ C1] ? tick_nohz_handler+0x37c/0x500 [ 1331.193398][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1331.198868][ C1] ? __hrtimer_run_queues+0x551/0xd30 [ 1331.204292][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1331.210042][ C1] ? sched_clock+0x4a/0x70 [ 1331.214474][ C1] ? read_tsc+0x9/0x20 [ 1331.218553][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 1331.224634][ C1] ? hrtimer_interrupt+0x403/0xa40 [ 1331.229780][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 1331.236729][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1331.242546][ C1] [ 1331.245488][ C1] [ 1331.248426][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1331.254603][ C1] ? smp_call_function_many_cond+0x19da/0x2c60 [ 1331.260766][ C1] ? smp_call_function_many_cond+0x1a0b/0x2c60 [ 1331.266938][ C1] ? smp_call_function_many_cond+0x19f3/0x2c60 [ 1331.273117][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1331.278252][ C1] ? __pfx___text_poke+0x10/0x10 [ 1331.283214][ C1] ? process_scheduled_works+0x976/0x1840 [ 1331.288950][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1331.295295][ C1] ? __pfx___might_resched+0x10/0x10 [ 1331.300594][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1331.306501][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1331.311539][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 1331.316701][ C1] text_poke_bp_batch+0x352/0xb30 [ 1331.321741][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1331.327737][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 1331.333996][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 1331.339563][ C1] ? arch_jump_label_transform_queue+0x9b/0x100 [ 1331.345826][ C1] ? process_scheduled_works+0x976/0x1840 [ 1331.351562][ C1] text_poke_finish+0x30/0x50 [ 1331.356255][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1331.362255][ C1] static_key_enable_cpuslocked+0x136/0x260 [ 1331.368171][ C1] static_key_enable+0x1a/0x20 [ 1331.373123][ C1] toggle_allocation_gate+0xbc/0x260 [ 1331.378434][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1331.384340][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1331.390692][ C1] process_scheduled_works+0xa66/0x1840 [ 1331.396279][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1331.402288][ C1] ? assign_work+0x364/0x3d0 [ 1331.406895][ C1] worker_thread+0x870/0xd30 [ 1331.411500][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1331.417409][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1331.422442][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1331.427557][ C1] kthread+0x2f0/0x390 [ 1331.431632][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1331.436748][ C1] ? __pfx_kthread+0x10/0x10 [ 1331.441348][ C1] ret_from_fork+0x4b/0x80 [ 1331.445772][ C1] ? __pfx_kthread+0x10/0x10 [ 1331.450371][ C1] ret_from_fork_asm+0x1a/0x30 [ 1331.455163][ C1]