last executing test programs: 18m55.691954745s ago: executing program 32 (id=222): openat$binfmt_register(0xffffff9c, &(0x7f0000000100), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x10, &(0x7f0000000540)="17000000020001000003d68c5ee17688a20032080100000000000000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59180ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf931ff7f0000ac2dff060115003901deffffffffff9a5aab1756b96409b05f9de7e9000f01000000000002ffff02dfccebf6ba2308400200000000e90544062a80e683f1ba2112ce68bf17a6e0", 0xb8) r3 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c00028005000100000000000800084000009503040010"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x0, 0x800, 0x4000000, 0x3a6}, 0x0, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r7], 0x20) 15m46.6327374s ago: executing program 33 (id=720): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x40}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7528e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) (fail_nth: 3) 12m27.248829064s ago: executing program 34 (id=1268): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x3, 0x0, 0x7, 0x20010, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x15f, 0x7, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x80, 0xfffffffe, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000800), 0x101000, 0x0) ioctl$FBIOPUTCMAP(r3, 0x4605, &(0x7f0000004440)={0xd, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(0xffffffffffffffff, 0x25, 0x0) r4 = getpid() r5 = socket$alg(0x26, 0x5, 0x0) socket$igmp6(0xa, 0x3, 0x3a) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(r4, 0xe, &(0x7f0000000140)={0x8001, 0xd7b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_ALM_SET(r9, 0x40247007, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r10 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$unix(r10, &(0x7f0000005400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x5, 0x0, 0xb) socket(0x25, 0x5, 0x0) 8m56.510089786s ago: executing program 6 (id=1755): r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000180)={0x3}) creat(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000100)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7cb, &(0x7f0000000140)={&(0x7f0000000840)={{@hyper}, {@my=0x1}, 0x400, "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"}, 0x418, 0x20000000}) 8m56.315488291s ago: executing program 6 (id=1759): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r2) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)={0x24, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}]}, 0x24}}, 0x800) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0xa2c00, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) 8m49.017096952s ago: executing program 6 (id=1776): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) gettid() sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000437000/0x1000)=nil, 0x1000, &(0x7f0000000000)='=-\x00') futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x7000000) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x20}) 8m47.095992044s ago: executing program 6 (id=1778): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1a, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x96dca55c25fb4027, &(0x7f0000000180)=0x40000000010001) r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha1-ssse3\x00'}}) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0x7) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000040)={@id={0x2, 0x0, @b}, 0x10, 0x0, '\x00', @d}) 8m46.72007716s ago: executing program 6 (id=1782): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setscheduler(r1, 0x1, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94) bpf$LINK_DETACH(0x22, &(0x7f0000000240), 0x4) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, 0x0, 0x0) 8m44.882547817s ago: executing program 6 (id=1787): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r2) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)={0x24, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}]}, 0x24}}, 0x800) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0xa2c00, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) 8m29.484637628s ago: executing program 35 (id=1787): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), r2) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)={0x24, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}]}, 0x24}}, 0x800) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0xa2c00, 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) 7m28.371609003s ago: executing program 0 (id=1972): r0 = socket$inet(0x2, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x4, 0xffffffffffffffff, &(0x7f0000000080)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000feffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @empty}, 0x10) 7m27.249868219s ago: executing program 0 (id=1975): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r2, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x1, 0x10, 0x6, r1}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x4}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) socket(0x10, 0x3, 0x0) 7m25.947085173s ago: executing program 0 (id=1979): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fanotify_init(0x0, 0x0) setrlimit(0xc, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f00000002c0)={0x1, &(0x7f0000000000)=[{0x4, 0x8}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8b05, &(0x7f00000004c0)={'wlan1\x00'}) 7m24.501108102s ago: executing program 0 (id=1981): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000300), 0x1000a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000580), 0xc2000, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000005c0)=0x3) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x15) syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @extended_inquiry_info={{0x2f, 0x1}}}, 0x4) 7m21.449037367s ago: executing program 0 (id=1991): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x36) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) r3 = socket$packet(0x11, 0x1, 0x300) socket$rds(0x15, 0x5, 0x0) bind$packet(r3, &(0x7f0000000180)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) fcntl$setsig(r4, 0xa, 0x21) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) creat(&(0x7f0000000040)='./file1\x00', 0x804000000000118) write$tcp_congestion(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r5}, 0x10) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x8000003d) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r1, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000140)=ANY=[@ANYBLOB='-', @ANYRESOCT, @ANYRESDEC=r7], 0x44) setresuid(0x0, 0xee00, 0x0) unshare(0x2a020480) socket$nl_generic(0x10, 0x3, 0x10) close_range(r0, r1, 0x0) 7m19.802937791s ago: executing program 0 (id=1996): syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) syz_pidfd_open(r0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x5c3300, 0x0) write$rfkill(r2, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x8}, 0x8) r3 = io_uring_setup(0x1fe6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3c1}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2204c3b, &(0x7f0000001040)=ANY=[@ANYRESHEX=0x0, @ANYBLOB=',uid=']) inotify_init() close_range(r3, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) landlock_create_ruleset(&(0x7f0000000000)={0x1f2, 0x0, 0x3}, 0x18, 0x0) sigaltstack(&(0x7f00000000c0)={&(0x7f0000000000)=""/36, 0x7d942d7564006939, 0x24}, &(0x7f0000000140)={&(0x7f0000000100)=""/10, 0x0, 0xa}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newspdinfo={0x24, 0x24, 0x1, 0x0, 0x25dfdbfb, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0xff}}]}, 0x24}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x400000) 7m3.974516036s ago: executing program 36 (id=1996): syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) syz_pidfd_open(r0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x5c3300, 0x0) write$rfkill(r2, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x8}, 0x8) r3 = io_uring_setup(0x1fe6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x3c1}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) stat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, 0x0, r4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x2204c3b, &(0x7f0000001040)=ANY=[@ANYRESHEX=0x0, @ANYBLOB=',uid=']) inotify_init() close_range(r3, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) landlock_create_ruleset(&(0x7f0000000000)={0x1f2, 0x0, 0x3}, 0x18, 0x0) sigaltstack(&(0x7f00000000c0)={&(0x7f0000000000)=""/36, 0x7d942d7564006939, 0x24}, &(0x7f0000000140)={&(0x7f0000000100)=""/10, 0x0, 0xa}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newspdinfo={0x24, 0x24, 0x1, 0x0, 0x25dfdbfb, 0x0, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6, 0x4, {0xff}}]}, 0x24}}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x400000) 4m40.060971459s ago: executing program 7 (id=2349): socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r1 = syz_open_dev$media(&(0x7f00000005c0), 0x6, 0x80000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000080)={0x8, {"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", 0x1000}}, 0x1006) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x118, 0x0, &(0x7f0000000cc0), 0x0, 0x0, 0x0, 0x42, 0x0, 0x0}) close(r0) socket$netlink(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @local}) read$msr(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) readv(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000000000)=""/107, 0x6b}], 0x1) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f0000001840)=""/4090, 0xffa) 4m39.003563628s ago: executing program 7 (id=2354): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xab3, 0x2d0142) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000240)=0xffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500"], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) kcmp(0x0, 0x0, 0x4, 0xffffffffffffffff, r0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000340)='./file0\x00', &(0x7f00000004c0), 0x700, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') chown(&(0x7f0000000280)='./file0\x00', 0x0, 0xffffffffffffffff) symlink(&(0x7f0000000380)='./file1\x00', &(0x7f0000000780)='./bus\x00') sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x1f4, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 4m37.2586152s ago: executing program 7 (id=2359): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x8000003d) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x36) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r3}, 0x10) r4 = open(0x0, 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) close_range(r0, r1, 0x0) 4m36.034115254s ago: executing program 7 (id=2362): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_open_dev$media(&(0x7f0000000000), 0x0, 0x4) ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x800448d2, &(0x7f0000000100)) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000001000)={'team0\x00', 0x0}) recvfrom(r0, &(0x7f0000000000)=""/4096, 0x1000, 0x10, &(0x7f0000001080)=@ll={0x11, 0x16, r3, 0x1, 0xd}, 0xcd) 4m34.250378561s ago: executing program 7 (id=2369): bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r2, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x1, 0x10, 0x6, r1}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2, 0x4}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) socket(0x10, 0x3, 0x0) 4m28.653029709s ago: executing program 7 (id=2382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x59af2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r2 = socket$netlink(0x10, 0x3, 0xf) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$drirender128(0xffffff9c, 0x0, 0x2001, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) 4m12.848875714s ago: executing program 37 (id=2382): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x59af2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r2 = socket$netlink(0x10, 0x3, 0xf) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x14, 0x1, 0x8, 0x101, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) syz_open_dev$I2C(0x0, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$drirender128(0xffffff9c, 0x0, 0x2001, 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) 2m56.720702901s ago: executing program 9 (id=2566): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @remote}, 0x0, 0x4, 0x2, 0x3}}, 0x9) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd70000400000005000000080009020200000008000c00a80a0000060001000400000008000b0004000000"], 0x3c}}, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x8, 0x7, 0x3, 0x7, 0x5, 0x4, 0x4, 0x2}, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000080)=0xe) read$dsp(r6, &(0x7f0000000200)=""/115, 0x73) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r8}, 0x18) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000180)) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0xf) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f00"], 0x15) 2m55.490448025s ago: executing program 9 (id=2569): r0 = io_uring_setup(0x669, &(0x7f0000007940)) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x9, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="850000002e000000270000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = socket$phonet(0x23, 0x2, 0x1) ioctl$SIOCPNDELRESOURCE(r6, 0x541b, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@private1, 0x4, 0x0, 0x2, 0x0, 0xb830, 0xfff9}, &(0x7f0000000240)=0x20) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, 0x0, 0x0, 0x2, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41}) close_range(r0, 0xffffffffffffffff, 0x0) 2m53.157845351s ago: executing program 3 (id=2571): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x36) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) r2 = socket$packet(0x11, 0x1, 0x300) socket$rds(0x15, 0x5, 0x0) bind$packet(r2, &(0x7f0000000180)={0x11, 0x16, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) fcntl$setsig(r3, 0xa, 0x21) openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) creat(&(0x7f0000000040)='./file1\x00', 0x804000000000118) io_uring_enter(0xffffffffffffffff, 0x2def, 0x0, 0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r4}, 0x10) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r5, 0x402, 0x8000003d) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[@ANYBLOB='-', @ANYRESOCT, @ANYRESDEC=r6], 0x44) setresuid(0x0, 0xee00, 0x0) unshare(0x2a020480) socket$nl_generic(0x10, 0x3, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 2m53.053453377s ago: executing program 9 (id=2572): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$packet(0x11, 0x2, 0x300) fsopen(&(0x7f0000000140)='mqueue\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r2]) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f0000000080)) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "0000c87718fdffff", "2607080d7f4fcf00fd4ef2de8e6c7c58", "355c1abc", "1e8900"}, 0x28) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x9a, &(0x7f00000004c0)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x64, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x4, "4f4c8102aa69f64ccc7fec9cd976c0901414f3055dace09a01a81f40059984b7", "13cd081b042d2dea66378b64af0aca5f", {"14d37f32a657d521fd13448f25527ee1", "578eda67466ce36131ffeffe7551d579"}}}}}}}}, 0x0) sendto$inet6(r5, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 2m52.546243754s ago: executing program 3 (id=2576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000fd00000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000180)) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) (async) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000006be951eb9440d6d6a3bae", @ANYBLOB, @ANYRES32], 0x48) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) (async) sendto$inet6(r5, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000040)='v', 0x1}], 0x1}}], 0x1, 0x400c404) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, &(0x7f0000000580)={0x40, 0x1, 0xf5, {0xf5, 0x1, "c371c614ca4812d8fef36b99cb16cb58d9a0fda8336ea794889be92aad2cec972f0a9b68daa9ebf196d42f3eccf266c61e2df46b88fbf5be3860bfe021e0984d7454e20c3a9be2a4ebbf0d23e24c039a4553c4a9c807c9d323882c2b05668413d55d943d0f7a06744d1818a18948b79df1b372486a6ce7ff924bb4afaa0ae6bea7dc05ea7ed0deab417f6b523aeeb0fbc8fcb385a2380da25990bc126401648a76679a680c1ca92c6a6dfd5a74c1400591cc54e06aa47030442ab498150a9d0cd019aa7130c8c0c59df5b502e904111b8c21796cb18df93dac6e79c6af16f2009fc1eef9d7675676ef3ca066af681a0d1408d4"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c17}}, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@global=@item_4={0x3, 0x1, 0x6, "30bb56b5"}, @main=@item_4={0x3, 0x0, 0xc, "7e439389"}, @global=@item_4={0x3, 0x1, 0x9, "f9c1fa6b"}]}}, &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7ff, 0x9, 0x1, {0x22, 0xdaf}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000680)={0x0, 0xf, 0xcd, "694d1a2c10b5d177f5004cfe23c978d527e263125e319519266bbb464c15ad5d274dd6eb5ec31e6a2c14932ef313a11cd842cacbb31531cd3524d9b8e5afb7e8466965a868af751ac7a3f1b60046939be682a56af57498b0436b74f2df773c38e2e0170490f4b4c988135d24c3c79dc57f8cc09fcb467842cf86bc265ec8cf42b41457d50d8fff87a227b6954cbb830a1cd4bd4ee02bb0d746bd758b58bd206925acc59382ac6780ec36f863ef6c3f0845648a11a0b64a1d5513578f7327554bb0a24a7c01c1e596e52dcca97d"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000780)={0x20, 0x1, 0x99, "fb623cbad6bc7ff44360520b8ad435d330127a3bd2c36a4642dcc460bd1329279d89bf26c80991230489fcf03e223844a56ef2bbc177f3344cac376795e8bc14164736a177c8927c2e292a8a6fba2413eeb4f4aa35f8107884174a5b4d74c77c6ed7df0438f1088097bd1adc50fb2a8f62b4da6ef0480649868800fdea6fa9b02c52e3eb7e5af3a687b6f80edd0307143df9a94a60c00e0b1d"}, &(0x7f0000000400)={0x20, 0x3, 0x1, 0x2}}) 2m49.795649593s ago: executing program 3 (id=2579): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902"], 0x0) syz_open_dev$sndctrl(0x0, 0xdc3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x9}) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_DEL_MFC(r1, 0x0, 0xcd, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r3}, &(0x7f0000000180), &(0x7f00000001c0)) io_uring_enter(r4, 0x2dee, 0x7b19, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0xffffffffffff8000, 0x0) shutdown(r0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg$unix(r7, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f0000000c00)="dc", 0x1}, {&(0x7f0000000100)="e6c5b9efc82b0b7370699783fe4ec1f7a7", 0x11}, {&(0x7f0000000200)="21e6c0951ae44d0c8f2ee673d901720c1e91a8985ca237d4707ed72b250cbc3e05758996deaa86d6d133acdd0febabd91101adca969566994a390463c732c22ade04e23901afe117764626a50d359406f256a2f261257337960c278b0809c55bfa71fa231ea2cd09123958c626cffe4d449ca4f7ba51e073f0f265cddfdaf9612937654ad1d3541a41393523164e0da71cb4bf88a658273bf8e565db7d5db8e58699633e778db6d141f2f278e63cc11265b31156ff4d8045b07295c8a7c4d763afe62a9c5629493623e0236c888190325223cee4f0ad7846dbb849ec7d07149a3c91795b86c9f6b0adeb39bf3b", 0xed}], 0x5, 0x0, 0x0, 0x4040040}}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$netlink(0x10, 0x3, 0x15) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}}, 0x0) 2m49.584214208s ago: executing program 9 (id=2581): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x9c}, [@call={0x25}], {0x95, 0x0, 0xd00}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x8000000, 0x10, 0x0, 0xffffffffffffff6c, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='i2c_write\x00', r4}, 0x10) 2m45.910257879s ago: executing program 9 (id=2588): sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000040)=0xf0) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r5, @ANYRES8, @ANYRESHEX=r2, @ANYBLOB="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", @ANYRES16=r2, @ANYRES16], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) r9 = dup(r8) syz_emit_ethernet(0x8e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa", @ANYRESDEC], 0x0) write$UHID_INPUT(r9, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat2(r10, &(0x7f00000006c0)='./cgroup\x00', r10, &(0x7f00000003c0)='./mnt\x00', 0x0) 2m44.110345029s ago: executing program 9 (id=2590): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8001}, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$setperm(0x5, 0x0, 0x21081c22) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bca) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$rds(0x15, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) recvmsg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0x0, 0x720d, 0x148, 0x0, 0x148, 0x1b0, 0x240, 0x240, 0x1b0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x4, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x0, 'veth1_macvtap\x00', 'pim6reg1\x00', {}, {}, 0x1d, 0x2, 0x49}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x3, 0x3, 0x1, 0x3, 0x4], 0x2}, {0x2, [0x1, 0xb2cc575b459b5b33, 0x5, 0x2, 0x4]}}}}, {{@ip={@broadcast, @broadcast, 0xffffff00, 0x0, 'wlan0\x00', 'sit0\x00', {}, {}, 0x0, 0x3, 0x78}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 'pim6reg0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) fcntl$setstatus(r2, 0x4, 0x0) mbind(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f00007ee000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000f64000/0x4000)=nil) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) pipe2(&(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000001140)={{0x0, 0x2, 0x0, 0xf000000000000000, 0x7fffffff, 0x4, 0x8f, 0xffff, 0x8, 0x90870000, 0x3, 0x5, 0x4, 0x5, 0xf3}}) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000002140)={{r6, 0xe3db, 0x0, 0xf, 0x0, 0x45, 0xb8, 0x345a, 0x0, 0x3ff, 0x9, 0x0, 0xc708, 0x2, 0x5}}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 2m44.097941871s ago: executing program 3 (id=2591): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0x5, 0x0, &(0x7f0000000040)="5aee41dea4", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x14, &(0x7f00000001c0)="0bbb268dd6", 0x5) socket$nl_sock_diag(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf050000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc83df03395287fd51a700ea6553f304000000815dcf00c3eebc52267b042d196bde7c382d21ff79a8583a7482c5994747e19325b1ee980cbd800d845dacbcf5ad8cdbc7abf9"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) close(0xffffffffffffffff) read$msr(0xffffffffffffffff, &(0x7f0000000340)=""/226, 0xe2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0) 2m43.003723661s ago: executing program 3 (id=2593): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@private1, 0x800, 0x0, 0x103, 0x1}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vmci(0xffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) syz_open_dev$sndpcmc(0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1a000000040000000000000001000000000000001004670f9b8c7c8e473c5eee3b3f350b286b575337881355dfc9387337d255f926129dc178c033d6236c0a720984bc03365f7e50ccd975b0321bd9495eac98ef54607ca168b6bef89848a1c75f5b392d25f3ae5a88", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="00000000000000009a80000000000000"], 0x48) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r6 = syz_io_uring_setup(0x320e, &(0x7f0000000800)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000540)=0x0) syz_io_uring_submit(0x0, r7, &(0x7f00000001c0)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x10, 0x6000, @fd=r1, 0x9, 0x0, 0x0, 0x3, 0x1, {0x1}}) io_uring_enter(r6, 0x3332, 0x0, 0x0, 0x0, 0x0) r8 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r8, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(r9, 0x1, 0x2, &(0x7f0000000000)=""/166, &(0x7f00000000c0)=0xa6) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 2m41.942551312s ago: executing program 3 (id=2595): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8001}, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$setperm(0x5, 0x0, 0x21081c22) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bca) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$rds(0x15, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) recvmsg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0x0, 0x720d, 0x148, 0x0, 0x148, 0x1b0, 0x240, 0x240, 0x1b0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x4, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x0, 'veth1_macvtap\x00', 'pim6reg1\x00', {}, {}, 0x1d, 0x2, 0x49}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x3, 0x3, 0x1, 0x3, 0x4], 0x2}, {0x2, [0x1, 0xb2cc575b459b5b33, 0x5, 0x2, 0x4]}}}}, {{@ip={@broadcast, @broadcast, 0xffffff00, 0x0, 'wlan0\x00', 'sit0\x00', {}, {}, 0x0, 0x3, 0x78}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 'pim6reg0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f00007ee000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000f64000/0x4000)=nil) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7ae69, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) pipe2(&(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000001140)={{0x0, 0x2, 0x0, 0xf000000000000000, 0x7fffffff, 0x4, 0x8f, 0xffff, 0x8, 0x90870000, 0x3, 0x5, 0x4, 0x5, 0xf3}}) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000002140)={{r5, 0xe3db, 0x0, 0xf, 0x0, 0x45, 0xb8, 0x345a, 0x0, 0x3ff, 0x9, 0x0, 0xc708, 0x2, 0x5}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 2m28.833882403s ago: executing program 38 (id=2590): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8001}, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$setperm(0x5, 0x0, 0x21081c22) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bca) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$rds(0x15, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) recvmsg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0x0, 0x720d, 0x148, 0x0, 0x148, 0x1b0, 0x240, 0x240, 0x1b0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x4, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x0, 'veth1_macvtap\x00', 'pim6reg1\x00', {}, {}, 0x1d, 0x2, 0x49}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x3, 0x3, 0x1, 0x3, 0x4], 0x2}, {0x2, [0x1, 0xb2cc575b459b5b33, 0x5, 0x2, 0x4]}}}}, {{@ip={@broadcast, @broadcast, 0xffffff00, 0x0, 'wlan0\x00', 'sit0\x00', {}, {}, 0x0, 0x3, 0x78}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 'pim6reg0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) fcntl$setstatus(r2, 0x4, 0x0) mbind(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x0) mremap(&(0x7f00007ee000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000f64000/0x4000)=nil) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) pipe2(&(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000001140)={{0x0, 0x2, 0x0, 0xf000000000000000, 0x7fffffff, 0x4, 0x8f, 0xffff, 0x8, 0x90870000, 0x3, 0x5, 0x4, 0x5, 0xf3}}) ioctl$BTRFS_IOC_TREE_SEARCH(r5, 0xd0009411, &(0x7f0000002140)={{r6, 0xe3db, 0x0, 0xf, 0x0, 0x45, 0xb8, 0x345a, 0x0, 0x3ff, 0x9, 0x0, 0xc708, 0x2, 0x5}}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 2m26.800416581s ago: executing program 39 (id=2595): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8001}, 0x0) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ff5000/0x3000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) keyctl$setperm(0x5, 0x0, 0x21081c22) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bca) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$rds(0x15, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) recvmsg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0x0, 0x720d, 0x148, 0x0, 0x148, 0x1b0, 0x240, 0x240, 0x1b0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x4, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0x0, 'veth1_macvtap\x00', 'pim6reg1\x00', {}, {}, 0x1d, 0x2, 0x49}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x3, 0x3, 0x1, 0x3, 0x4], 0x2}, {0x2, [0x1, 0xb2cc575b459b5b33, 0x5, 0x2, 0x4]}}}}, {{@ip={@broadcast, @broadcast, 0xffffff00, 0x0, 'wlan0\x00', 'sit0\x00', {}, {}, 0x0, 0x3, 0x78}, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 'pim6reg0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f00007ee000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000f64000/0x4000)=nil) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7ae69, 0x0, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xfe}}, 0x1c}}, 0x0) pipe2(&(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0xd0009411, &(0x7f0000001140)={{0x0, 0x2, 0x0, 0xf000000000000000, 0x7fffffff, 0x4, 0x8f, 0xffff, 0x8, 0x90870000, 0x3, 0x5, 0x4, 0x5, 0xf3}}) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000002140)={{r5, 0xe3db, 0x0, 0xf, 0x0, 0x45, 0xb8, 0x345a, 0x0, 0x3ff, 0x9, 0x0, 0xc708, 0x2, 0x5}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) 12.588696528s ago: executing program 2 (id=2972): sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80) r4 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000040)=0xf0) close_range(r3, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r5) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x5, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0x3}}]}, 0x54}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000700)={[0x80, 0x1, 0x7fffffffffffffff, 0x6, 0x2, 0x0, 0x5, 0x100, 0x4, 0x2, 0x7, 0x6, 0x8000, 0x77c, 0x0, 0x6], 0x4000, 0x200500}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = syz_open_dev$tty1(0xc, 0x4, 0x4) r9 = dup(r8) syz_emit_ethernet(0x8e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa", @ANYRESDEC], 0x0) write$UHID_INPUT(r9, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000280)={@remote}, &(0x7f0000000400)=0x14) renameat2(0xffffffffffffffff, &(0x7f00000006c0)='./cgroup\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./mnt\x00', 0x0) 11.758404247s ago: executing program 8 (id=2976): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x4e20, 0xff000000, @empty, 0xfffffffd}}}, 0x88) 11.518514444s ago: executing program 4 (id=2977): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x900, &(0x7f0000000140)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x3c}}, 0x0) 11.495070626s ago: executing program 2 (id=2978): syz_open_procfs(0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f00000000c0)={0x2}, 0x65) 11.438899074s ago: executing program 8 (id=2979): open(0x0, 0x400141042, 0x1d2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x7bda, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) pipe(&(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r8, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) sendfile(r6, r5, 0x0, 0x20000023893) 11.178310215s ago: executing program 2 (id=2980): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) keyctl$clear(0x7, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0xc0, &(0x7f0000000180)=0xffdffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x80045505, &(0x7f0000000000)=0x1) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) rt_tgsigqueueinfo(0x0, 0x0, 0x33, &(0x7f0000000080)={0x4, 0x0, 0x3}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x60, 0x10, 0x403, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x6, 0xf}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 11.107292591s ago: executing program 4 (id=2981): sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80) r4 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000040)=0xf0) close_range(r3, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r5) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x5, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0x3}}]}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000700)={[0x80, 0x1, 0x7fffffffffffffff, 0x6, 0x2, 0x0, 0x5, 0x100, 0x4, 0x2, 0x7, 0x6, 0x8000, 0x77c, 0x0, 0x6], 0x4000, 0x200500}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) r8 = dup(r7) syz_emit_ethernet(0x8e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa", @ANYRESDEC], 0x0) write$UHID_INPUT(r8, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000280)={@remote}, &(0x7f0000000400)=0x14) renameat2(0xffffffffffffffff, &(0x7f00000006c0)='./cgroup\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./mnt\x00', 0x0) 9.43903071s ago: executing program 2 (id=2983): socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, 0x0, 0x0) 9.272139504s ago: executing program 1 (id=2984): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x1b) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_G_STD(0xffffffffffffffff, 0x80085617, &(0x7f00000001c0)) syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRESDEC, @ANYRESDEC=r1], 0xcc}}, 0x0) r5 = socket(0x2, 0x3, 0xff) sendmmsg$inet(r5, &(0x7f0000004640)=[{{0x0, 0x0, &(0x7f0000000e00)=[{}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000540), 0xffffffffffffff1b}}], 0x2, 0x800) syz_emit_ethernet(0x46, &(0x7f0000000800)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_ra={0x89}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r6, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000780)={0x10, 0x1409, 0x105, 0x70bd29, 0x25dfdbfc}, 0x10}, 0x1, 0x0, 0x0, 0x2}, 0x810) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, 0xffffffffffffffff, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) 7.78700252s ago: executing program 1 (id=2985): sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80) r2 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000040)=0xf0) close_range(r1, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r3) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x5, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0x3}}]}, 0x54}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYRESOCT=r4, @ANYRES8=r2, @ANYRESHEX, @ANYBLOB="5f0334db09829a0561b81b922c83f53e5f4441d43156de3e672015b37dc79ecb809435d9b6a8d8a9a59eb2749929fe75b1464b4eee2c338b3c8a0aca47cbb8ab9db2f20a7d8a975f77ae1e66f4d0be9a16f660a845cd4b8781d92d3270b136fbb9a5d17a376aa4c7247c6d705f909153e0619a02153846bbd87211fabdb49a23301f8226593b3f762ae14c8f1ced7c39b0ca9aee40a2af1aa5b1792f77a8faabdd3a57eb1c95f83274741554682a50593919908c7730390840c5a7a8ab883a64ce1f31e89b8314a73656b6f4d541c2b745b53c543a206f5969d87b96bc26f0220704388a5bcf980a6193a53ad995be678f6a146b8c0e99c6b6d95f3f", @ANYRES16, @ANYRES16=r2], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000700)={[0x80, 0x1, 0x7fffffffffffffff, 0x6, 0x2, 0x0, 0x5, 0x100, 0x4, 0x2, 0x7, 0x6, 0x8000, 0x77c, 0x0, 0x6], 0x4000, 0x200500}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) r8 = dup(r7) syz_emit_ethernet(0x8e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa", @ANYRESDEC], 0x0) write$UHID_INPUT(r8, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000280)={@remote}, &(0x7f0000000400)=0x14) renameat2(0xffffffffffffffff, &(0x7f00000006c0)='./cgroup\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./mnt\x00', 0x0) 7.653198012s ago: executing program 4 (id=2986): openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) dup(r0) syz_open_dev$evdev(&(0x7f00000000c0), 0x3f, 0x822f01) socket$inet6(0xa, 0x2, 0x0) unshare(0x60480) r1 = memfd_secret(0x0) epoll_create(0x4) syz_open_dev$media(&(0x7f0000000080), 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) connect$qrtr(r1, 0xfffffffffffffffe, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f00000007c0)={0x0, 0x0, 0x3}, &(0x7f0000000800)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4}, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) 7.622465682s ago: executing program 5 (id=2987): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) keyctl$clear(0x7, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0xc0, &(0x7f0000000180)=0xffdffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x80045505, &(0x7f0000000000)=0x1) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@newlink={0x60, 0x10, 0x403, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x6, 0xf}}, @IFLA_VLAN_ID={0x6, 0x1, 0xffe}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 7.21254971s ago: executing program 1 (id=2988): prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x80, 0x7fff0000}]}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000340)='f2fs_unlink_enter\x00'}, 0x4c) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xc000, 0x1) gettid() r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000300)={'wlan1\x00', &(0x7f00000000c0)=@ethtool_stats={0x1d, 0x6, [0xfffffffffffffff7, 0xfa, 0x7f, 0x100000001, 0x9, 0x1]}}) ioctl$VIDIOC_S_CROP(r3, 0x4014563c, &(0x7f000001f9c0)={0xa, {0x8000, 0x300}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0}, 0x10) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800000011ff03000001"], 0x1c) r6 = socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r5, &(0x7f0000000100), 0xfef0) splice(r4, 0x0, r6, 0x0, 0x80000001, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007292bd404020305582a80000000109021b0001000000000904000001df7fa9000905", @ANYBLOB="86"], 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000155882, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 6.338256086s ago: executing program 4 (id=2989): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000840)={0x0, 0x14, 0x59, "a6e3efe7ea433ccaee1b576860fead19e3be396ff08fea5ea43563a08814b0b58faa44022e705343046664b3c747a3c4a0868ed3c28866e4d1ae5d34be5b13a7764f4a6ce25c57575cd57d36ecc1a32d0283ad7f96959ab7dc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0x0, 0x1, '\"'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$vbi(&(0x7f0000000100), 0x3, 0x2) (async, rerun: 64) socket(0x10, 0x80002, 0x0) (rerun: 64) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) (async, rerun: 64) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0xfffffffffffffeed, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffe6a, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000340)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x24, r6, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x24}}, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r3, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, &(0x7f0000000780)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xe5, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) unshare(0x22020600) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x0, 0x4}, 0xc) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) io_setup(0xa4, &(0x7f0000000300)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB='}'], 0x48}}, 0x0) 6.144492185s ago: executing program 5 (id=2990): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xbd}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_open_dev$sndctrl(0x0, 0x2, 0x40) unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000003c0)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000340)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x101, @private2}, {0xa, 0x4e1e, 0xe, @mcast1}, r1, 0xfffffffe}}, 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000d0a0000000000000001000004000000000300000000000000000000000000de46191613f72aa8c2ee68a17e0eed7cc5ae1f2bab3d35fbce75d3bd574882075bc26bb554e87b00a9c6202212d444c03d8a470d73f9a522c49b75afe7867bbaa16f2c5fa7c77198ef49f25957235f7b136a00fb1ebfe11776eeaccc3254f5ad07dd953cf592471931f408000000d94b934c5034fc173037b8c8b8ff67ffdad6bb47"], &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0x1, 0x0, 0x0, @void, @value}, 0x28) pidfd_getfd(r3, 0xffffffffffffffff, 0x0) 5.435706244s ago: executing program 4 (id=2991): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000280)={0xff, 0x59565955, 0x3, @stepwise={0xffff, 0xf, 0x5bfe, 0x0, 0x0, 0x2}}) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000a00)=[{{&(0x7f0000000380)=@alg, 0x80, &(0x7f0000000940)=[{&(0x7f0000000680)=""/31, 0x1f}, {&(0x7f0000000700)=""/7, 0x7}, {&(0x7f0000000740)=""/244, 0xf4}, {&(0x7f0000000840)=""/200, 0xc8}], 0x4, &(0x7f0000000980)=""/125, 0x7d}, 0x1}], 0x1, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$IOMMU_IOAS_IOVA_RANGES(0xffffffffffffffff, 0x3b84, &(0x7f00000002c0)={0x20, 0x0, 0x9, 0x0, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) syz_open_procfs$userns(r1, &(0x7f0000000340)) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) lsetxattr$security_capability(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf500090584"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) chdir(&(0x7f0000000140)='./bus\x00') lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a00000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000300000000000000000000000000000000003775c751eda5e27d99fa353e18f1c15e519f34cad71930e15dd198c8243add99704e5434c254914562e48ea1f14e752c6a1b708f7e63c5d4e3d9051498c0abd718dd93e31b7354e2559d1a74e2ce0523e430ef6e2fa7641a4f987f0f7a12fe4cb6e65cc8b9d1ab283f93343cb8bdaa5616f641a27208608aee557bac0035672ce3c9d84536484171ddda6624f933e9"], 0x50) 5.088853911s ago: executing program 8 (id=2992): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mknod(&(0x7f0000000540)='./file1\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8915, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x80001, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000200)={0x3, 'geneve1\x00', {0xd}, 0x40}) read$FUSE(r3, &(0x7f0000000700)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$9p_fd(0x0, &(0x7f00000006c0)='./file1\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [{@permit_directio}, {@uid_eq}, {@dont_hash}, {@subj_type={'subj_type', 0x3d, ':(!{$*^^/^$'}}, {@uid_gt={'uid>', r5}}, {@context={'context', 0x3d, 'user_u'}}, {@appraise_type}, {@obj_role}, {@fsuuid={'fsuuid', 0x3d, {[0x33, 0x61, 0x65, 0x36, 0x42, 0x30, 0x34, 0x66], 0x2d, [0x32, 0x35, 0x31, 0x65], 0x2d, [0x38, 0x31, 0x33, 0x36], 0x2d, [0x65, 0x38, 0x33, 0x38], 0x2d, [0x0, 0x30, 0x37, 0x34, 0x66, 0x30, 0x35, 0x64]}}}]}}) 5.043812545s ago: executing program 2 (id=2993): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x22c100, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES8=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000080)=0x53) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) mkdir(&(0x7f0000000540)='./bus\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbfc, {0x10}}, 0x14}}, 0x0) 4.666784088s ago: executing program 5 (id=2994): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x6], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x7) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0xfffffffffffffe9f, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c}}]}, 0x8c}}, 0x20008090) 4.095397216s ago: executing program 1 (id=2995): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)={0x24, 0x0, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0xf2, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x4, 0x3, 0x0, 0x0}]}]}]}]}, 0x24}}, 0x0) 3.942643103s ago: executing program 1 (id=2996): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0xffff, 0x0, 'sed\x00', 0x21, 0x4ba12, 0x4d}, 0x2c) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='load default trusted:'], 0x34, 0xfffffffffffffffa) r1 = add_key$keyring(&(0x7f0000000b80), &(0x7f0000000bc0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key(&(0x7f0000000b00)='user\x00', &(0x7f0000000a80)={'syz', 0x3}, &(0x7f0000000c00)="6267d1ff76fa0075bda50d2763ffd39dfd4077904bc16072c4749fed28d692e16f66d89969b24a10900d1ebdcbe3cd21d4dee238d362c7541d676fdf8d5e24dd4a64a25b5c3eba66f5d2190dd3cc9979302a899b5e664151e731e81ff2d7ed7c69da71e2d6f320c35742a3827931fa5ffca37f82d9e14391aea79948ad21a1c2029a4aba1c5aa46cab68265f3bf3784ae3fcb49ae1f870a0de3fdf85a2568b5691a5268faae2d7cc07f5a05b0a0ec56c63728e77e840cdeb3542aaf143de431464d27c110227c8b918a01366417361463b1a0eff9d1327fc93332968ab20469ce8", 0xe1, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY_LEVEL(r3, 0x0, 0x2, 0x0, &(0x7f00000000c0)) syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x54}}, 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io$printer(r4, &(0x7f0000000300)={0x14, &(0x7f0000000140)={0x40, 0x11, 0xe3, {0xe3, 0x22, "81a9e1d36316901d4623322748c0dbaf6efd615327243c475d956491188c863a748d4cb1c6b68a7f471fa4efd37a5f6cf10610d36c72e8a10c57d645d95abf50a5cf31b35bc1a18596f8291f5a5008374d6402a8bba676900b275b5ed680db79c6054d7fc07b7a77d1e2265e8b763731c984b5ca42f60ff6701ae20a1f5e19ae6b2f68244a3a39407007eb6e929211cc1c299625a1c330d70e049ef94280f4b85a3500b99bb7f94c65f269262ea68002489a7fb4d7aef19e63d37387f58b5bf4e51c3f5b5bc493207ef4fc46115f52371be63aa979792cac57c454e7958550197d"}}, &(0x7f0000000240)={0x0, 0x3, 0x7f, @string={0x7f, 0x3, "47d6b0cb9b692d62176b9367d98b4409c190027eeb772d7b058150c69d699b15fb7564370529129256e424b02af9185bdb60f00d2b1369c1f03c92bffcb0c8e93c419b6522538478a3b14cae3c83432f5d7fff47afb67aa9c2f671dafcd8cc3e8732116cbc05f6849134ec9275e4b97d6492cca11426b63e743a6f5aba"}}}, &(0x7f0000000600)={0x34, &(0x7f0000000340)={0x20, 0x3, 0xa1, "968349b9f3f8f1338af97ea9fe810e24768bdeb56a90405b2477651f20cc4f5d5624fd12eca2205a20da1cd9feb7a45eb7ed620bad823c6b6212e6f80c2d22648ca919151c2af1b8b9ad2bd9b4c5c39a5074af17c3e2cce16133d7e3fec924d14307117dc437913218816633d7cf25c20e7c562eba473a422655936481bf16eabd6515a5b641a8e485d8286e061b660a97ce7b47cfcf515afa94f3297e3d2d1173"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x29}, &(0x7f00000004c0)={0x20, 0x0, 0x81, {0x7f, "e7a3c1bf27912d7eda00e6fc612aed526816c86c724a8bb01d6a7e7d075376e3ec638e5fc73a64106e1d277f6cbf51d1fefeebd82389e2e67e2413dece66d9fb499aabb6ffc85ce691eee337d1ade233255416a519c58bbe5e0b2129e3340f6f7e7738522ee852235ded002b865f4b2853314cb3fabc3f7adf1cf42c88d758"}}, &(0x7f0000000580)={0x20, 0x1, 0x1, 0x8}, &(0x7f00000005c0)={0x20, 0x0, 0x1, 0x1}}) syz_usb_control_io$uac1(0xffffffffffffffff, &(0x7f0000000700)={0x14, &(0x7f0000000640)={0x20, 0xd, 0x54, {0x54, 0xd, "f74218778f00ac2b5cb8fd78023903eff9c5e99c42eca4a1f7f1ea1f4946c44ed5e47678711fbe1fb05daf8e0ed6eeff5715871daea4168352f6c06db52e6d1ce9b5da31132eb2ec4044ba068eb8d3a44ff4"}}, &(0x7f00000006c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44d}}}, &(0x7f0000000a00)={0x44, &(0x7f0000000740)={0x20, 0x1, 0xc1, "d0e052dbb0993ec79308db78eec888fee556929880a47c650c4b3e68df16f06eee1cd65a67cc746323dd4c9b743c6249c408c87e35d7aa8bb9e212321dd7ce81a3338276cb7067ef7cc86c4a04610f57d06666773eccfd777f01e463fce5545fda275f2b8aaf8542b86f00b3c30c140987a26d90d63720f4576770b0b59e415f4c7dc87e2a6b34c77d05f0498e26833d6db2931cd282ca2bbb19880a385f106d19febba9834e2efdb460645fc39175ceb3fdbe18fed95798dd56ddeeb06947542f"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000008c0)={0x20, 0x81, 0x3, "041a39"}, &(0x7f0000000900)=ANY=[@ANYBLOB="208201ffffe66747"], &(0x7f0000000940)={0x20, 0x83, 0x1, "1c"}, &(0x7f0000000980)={0x20, 0x84, 0x3, 'S-G'}, &(0x7f00000009c0)={0x20, 0x85, 0x3, "e80550"}}) 3.758264189s ago: executing program 8 (id=2997): sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80) r4 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000040)=0xf0) close_range(r3, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r5) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r6, 0x5, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0x3}}]}, 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000700)={[0x80, 0x1, 0x7fffffffffffffff, 0x6, 0x2, 0x0, 0x5, 0x100, 0x4, 0x2, 0x7, 0x6, 0x8000, 0x77c, 0x0, 0x6], 0x4000, 0x200500}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) r8 = dup(r7) syz_emit_ethernet(0x8e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa", @ANYRESDEC], 0x0) write$UHID_INPUT(r8, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5e060987f70e06d038e7ff7fc6e5539b0d650e8b089b3f3b3b68090890e0878f0e1ac6e7049b3b46959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07440936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x104d}}, 0x1006) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000280)={@remote}, &(0x7f0000000400)=0x14) renameat2(0xffffffffffffffff, &(0x7f00000006c0)='./cgroup\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./mnt\x00', 0x0) 3.56915294s ago: executing program 5 (id=2998): sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80) r2 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x82a80) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000040)=0xf0) close_range(r1, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r3) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r4, 0x5, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc}, {0x3}}]}, 0x54}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESHEX, @ANYRESOCT=r4, @ANYRES8=r2, @ANYRESHEX, @ANYBLOB="5f0334db09829a0561b81b922c83f53e5f4441d43156de3e672015b37dc79ecb809435d9b6a8d8a9a59eb2749929fe75b1464b4eee2c338b3c8a0aca47cbb8ab9db2f20a7d8a975f77ae1e66f4d0be9a16f660a845cd4b8781d92d3270b136fbb9a5d17a376aa4c7247c6d705f909153e0619a02153846bbd87211fabdb49a23301f8226593b3f762ae14c8f1ced7c39b0ca9aee40a2af1aa5b1792f77a8faabdd3a57eb1c95f83274741554682a50593919908c7730390840c5a7a8ab883a64ce1f31e89b8314a73656b6f4d541c2b745b53c543a206f5969d87b96bc26f0220704388a5bcf980a6193a53ad995be678f6a146b8c0e99c6b6d95f3f", @ANYRES16, @ANYRES16=r2], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000700)={[0x80, 0x1, 0x7fffffffffffffff, 0x6, 0x2, 0x0, 0x5, 0x100, 0x4, 0x2, 0x7, 0x6, 0x8000, 0x77c, 0x0, 0x6], 0x4000, 0x200500}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) r8 = dup(r7) syz_emit_ethernet(0x8e, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa", @ANYRESDEC], 0x0) write$UHID_INPUT(r8, &(0x7f0000002080)={0xf, {"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", 0x104d}}, 0x1006) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000280)={@remote}, &(0x7f0000000400)=0x14) renameat2(0xffffffffffffffff, &(0x7f00000006c0)='./cgroup\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./mnt\x00', 0x0) 2.355147939s ago: executing program 5 (id=2999): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x0, 0xfffff020}, {0x6}]}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000d3ec66ecc053c543da2e5f"], 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bind$rds(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) pipe2$9p(0x0, 0x82000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x20000) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000380)={"1b00", 0x0, 0x5, 0x2, 0x800, 0x0, "f759e10000001000000000fc6300", '\x00\x00\f\x00', "030100", "e859ad13", ["8bada940edff000a00", "f460734b0000008000", "000000ff0000000000000020", "0000000000000000000100"]}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x20081, 0x0) ioctl$SIOCX25SDTEFACILITIES(r2, 0x5411, &(0x7f0000000000)={0x9, 0xfff7, 0x4, 0x6d, 0x5, 0x15, 0x12, "507cfaca6b64f4a1613d72c0648e34e96210236d", "4771fb807a2ecbe6978c6bfcd6ac9d67dd5f0831"}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0x0) r9 = add_key$user(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000300)="b0", 0x1, r7) keyctl$unlink(0x9, r9, r7) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00000000000001027866726d0000000022000280080002000400"/36], 0x3c}}, 0x0) 2.202397217s ago: executing program 4 (id=3000): syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x0, 0x24, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x6c, 0x43, 0xa6, 0x8, 0x5d1, 0x9003, 0x200, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x42, 0xcc, 0x98}}]}}]}}, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x48141, 0x0) fcntl$setlease(r3, 0x400, 0x0) fcntl$getflags(r3, 0x401) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e47f000001000000000000", @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x29004080}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x28, 0x4, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) gettid() rt_sigaction(0x16, &(0x7f0000000080)={0x0, 0x73f90401a4ce04d2, 0x0}, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) 1.478685106s ago: executing program 8 (id=3001): r0 = socket$inet6(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan0\x00'}) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000010c0)=0x8, 0x4) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000080)=0x2e9aa845) r3 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000000010100c0"]) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x10, 0x3, 0x290, 0x0, 0x160, 0x160, 0x160, 0x0, 0x280, 0x280, 0x280, 0x280, 0x280, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth0_to_hsr\x00', 'veth1_to_hsr\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) mmap(&(0x7f00001ad000/0x1000)=nil, 0x1000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) syz_usb_connect(0x4, 0x2d, &(0x7f00000008c0)=ANY=[@ANYBLOB="4e3233208d9970ab5b23d2ba245405acb17081e708fb302833a9fe79ebca1f2567ca3b4fd81f89ae1ff3797b91e8774db06fed6b9d07bc4c2e86978ab19b384ee4ef9748247167275a901216210ac24618431a40bf9eca84b5b661429fe069d7fd811b8b5f6f86c911ec457a19b98699e880d80427183030c6dce4e4407e0885f01f3de2b3870a304d8dcc009ab8b7709928732994c2a79bc6dce87e5118bfd456093210b65fca0d0f9f02caa9dbb7310216ed371a4279fd36be752aaaab2ad6515f679fba73fb0dfe0cc723af9e928d0196"], 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r7, 0x5606, 0x80) ioctl$KVM_SET_CLOCK(0xffffffffffffffff, 0x4030ae7b, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, &(0x7f0000000300)={0x1, 0x1, 0x1000, 0x5d, &(0x7f00000000c0)="cc4cb0ba6b6e4dfe98f39574e5f6f275bea597f83c40b5ba14de94676da8bcd982441b4433279deee192f47033ad59c26c1a528f97a760cb472b46c569f8adb7ab6c017fa3ec61a229e074d846476cd41f8168f51807c170a2cd1d078f", 0x0, 0x0, 0x0}) sigaltstack(&(0x7f0000001040)={0x0, 0x80000001}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000002f9b0000017963de1369dde300000f004083c5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_setup(0x1267, &(0x7f00000006c0), &(0x7f0000000740), &(0x7f0000000780)) r9 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="0007000042009103"], 0xd046) recvmsg(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000002540)=""/4094, 0xffe}, {&(0x7f0000000fc0)=""/4096, 0x1000}], 0x2}, 0x0) 1.240569762s ago: executing program 2 (id=3002): open(0x0, 0x400141042, 0x1d2) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x7bda, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) pipe(&(0x7f0000000000)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r8, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) sendfile(r6, r5, 0x0, 0x20000023893) 532.454867ms ago: executing program 5 (id=3003): socket$netlink(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, 0x0, 0x0) 483.562968ms ago: executing program 1 (id=3004): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000140)={0x7, @sliced={0x1, [0x1, 0x4, 0x7, 0x9, 0x1252, 0xfff, 0x5d2, 0x0, 0x4, 0x7318, 0x6, 0x7, 0x4, 0xc, 0x0, 0x2, 0xd1, 0x6, 0x5, 0x7f, 0x3ff, 0x800, 0x7fff, 0x8, 0x0, 0x3ff, 0x43c, 0x1000, 0xb, 0x7, 0xfff8, 0x3, 0x1, 0x200, 0x0, 0x0, 0x8, 0xff85, 0x9, 0x7f, 0xb6b, 0x907b, 0x85, 0x4, 0x8, 0x2, 0x0, 0x7], 0x56}}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_open_procfs(r3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x0) r6 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCXONC(r6, 0x540a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = epoll_create1(0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000900)="580000001400192340834b80040d8c560a066e0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200060c10000000010000000000", 0x58}], 0x1) close_range(r7, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x1061054, &(0x7f00000000c0)='\x9d\xc0\xe6\xf0\tc\xd6\x12\xf0c\xbc\x99\x16\xf0E\x9a\xe2\x11\xa0d\'\x92\x8a\xfc\xfa\x93\x81\x89\xff\x8eP\xcbW\xeb\xb0{\x06\xc0\xd4e\x0e\xdb\xf5\xef\xddM\x14\xd32\xb3\xbd\f\xbcx\xad\xf8\x90\xddyp\xd0T\xa9\xa2\x1d\x1b\x84\x93=o\x97*\xe31 \xc7\xffW\xb5') connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 8 (id=3005): syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') bpf$ENABLE_STATS(0x20, 0x0, 0x0) kernel console output (not intermixed with test programs): d=0 ses=4294967295 subj=_ pid=15535 comm="syz.1.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f38be77e819 code=0x7ffc0000 [ 1099.854361][ T30] audit: type=1326 audit(1732635522.008:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15535 comm="syz.1.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38be77e819 code=0x7ffc0000 [ 1099.864702][T15542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2502'. [ 1099.876498][ T30] audit: type=1326 audit(1732635522.008:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15535 comm="syz.1.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38be77e819 code=0x7ffc0000 [ 1099.907342][ T30] audit: type=1326 audit(1732635522.018:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15535 comm="syz.1.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f38be77e819 code=0x7ffc0000 [ 1099.930705][ T30] audit: type=1326 audit(1732635522.018:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15535 comm="syz.1.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38be77e819 code=0x7ffc0000 [ 1099.952959][ T30] audit: type=1326 audit(1732635522.038:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15535 comm="syz.1.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38be77e819 code=0x7ffc0000 [ 1099.974995][ T30] audit: type=1326 audit(1732635522.058:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15535 comm="syz.1.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f38be77e819 code=0x7ffc0000 [ 1099.997082][ T30] audit: type=1326 audit(1732635522.058:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15535 comm="syz.1.2502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38be77e819 code=0x7ffc0000 [ 1101.017664][T15557] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1101.044862][T15557] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2504'. [ 1101.836625][T15558] Cannot find del_set index 2 as target [ 1105.422593][T15584] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1105.439604][T15574] netlink: 'syz.9.2509': attribute type 29 has an invalid length. [ 1105.453423][T15582] netlink: 'syz.9.2509': attribute type 29 has an invalid length. [ 1105.483563][T15585] netlink: 'syz.9.2509': attribute type 29 has an invalid length. [ 1105.512441][T15574] netlink: 'syz.9.2509': attribute type 29 has an invalid length. [ 1105.523129][T15574] netlink: 'syz.9.2509': attribute type 2 has an invalid length. [ 1105.753893][T15589] Cannot find del_set index 2 as target [ 1106.675083][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 1106.675108][ T30] audit: type=1326 audit(1732635529.498:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15593 comm="syz.1.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38be77e819 code=0x7ffc0000 [ 1106.722311][ T30] audit: type=1326 audit(1732635529.498:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15593 comm="syz.1.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38be77e819 code=0x7ffc0000 [ 1106.774853][ T30] audit: type=1326 audit(1732635529.508:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15593 comm="syz.1.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f38be77e819 code=0x7ffc0000 [ 1106.893990][T15594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2515'. [ 1106.980891][ T30] audit: type=1326 audit(1732635529.508:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15593 comm="syz.1.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38be77e819 code=0x7ffc0000 [ 1107.004706][ T30] audit: type=1326 audit(1732635529.508:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15593 comm="syz.1.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f38be77e819 code=0x7ffc0000 [ 1107.042407][ T30] audit: type=1326 audit(1732635529.508:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15593 comm="syz.1.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38be77e819 code=0x7ffc0000 [ 1107.087703][ T30] audit: type=1326 audit(1732635529.508:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15593 comm="syz.1.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f38be77e819 code=0x7ffc0000 [ 1107.261662][ T30] audit: type=1326 audit(1732635529.508:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15593 comm="syz.1.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38be77e819 code=0x7ffc0000 [ 1107.306532][ T30] audit: type=1326 audit(1732635529.508:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15593 comm="syz.1.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38be77e819 code=0x7ffc0000 [ 1107.321778][T15604] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2516'. [ 1107.340908][ T30] audit: type=1326 audit(1732635529.508:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15593 comm="syz.1.2515" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f38be77e819 code=0x7ffc0000 [ 1109.395138][T15618] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2522'. [ 1109.477681][T15627] netlink: 'syz.1.2524': attribute type 29 has an invalid length. [ 1109.502547][T15627] netlink: 'syz.1.2524': attribute type 29 has an invalid length. [ 1109.693536][T15627] netlink: 'syz.1.2524': attribute type 29 has an invalid length. [ 1109.702537][T15627] netlink: 'syz.1.2524': attribute type 29 has an invalid length. [ 1109.840748][T15627] netlink: 'syz.1.2524': attribute type 2 has an invalid length. [ 1109.980485][T15631] Cannot find del_set index 2 as target [ 1111.211899][T15639] FAULT_INJECTION: forcing a failure. [ 1111.211899][T15639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1111.225561][T15639] CPU: 0 UID: 0 PID: 15639 Comm: syz.9.2527 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 1111.236016][T15639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1111.246103][T15639] Call Trace: [ 1111.249409][T15639] [ 1111.252367][T15639] dump_stack_lvl+0x241/0x360 [ 1111.257087][T15639] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1111.262334][T15639] ? __pfx__printk+0x10/0x10 [ 1111.266960][T15639] ? _raw_write_unlock_irqrestore+0xdd/0x140 [ 1111.272976][T15639] ? __pfx_lock_release+0x10/0x10 [ 1111.278041][T15639] should_fail_ex+0x3b0/0x4e0 [ 1111.282760][T15639] _copy_from_user+0x2f/0xc0 [ 1111.287381][T15639] sg_new_write+0x563/0x7f0 [ 1111.291920][T15639] ? __pfx_sg_new_write+0x10/0x10 [ 1111.297027][T15639] sg_ioctl+0x17b7/0x2e80 [ 1111.301398][T15639] ? __pfx_sg_ioctl+0x10/0x10 [ 1111.306108][T15639] ? __fget_files+0x2a/0x410 [ 1111.310749][T15639] ? __fget_files+0x2a/0x410 [ 1111.315377][T15639] ? __pfx_sg_ioctl+0x10/0x10 [ 1111.320088][T15639] __se_sys_ioctl+0xf5/0x170 [ 1111.324722][T15639] do_syscall_64+0xf3/0x230 [ 1111.329262][T15639] ? clear_bhb_loop+0x35/0x90 [ 1111.333971][T15639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.339904][T15639] RIP: 0033:0x7fa94017e819 [ 1111.344354][T15639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1111.363990][T15639] RSP: 002b:00007fa940fb2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1111.372441][T15639] RAX: ffffffffffffffda RBX: 00007fa940336080 RCX: 00007fa94017e819 [ 1111.380446][T15639] RDX: 0000000020000140 RSI: 0000000000002285 RDI: 0000000000000005 [ 1111.388471][T15639] RBP: 00007fa940fb2090 R08: 0000000000000000 R09: 0000000000000000 [ 1111.396467][T15639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1111.404460][T15639] R13: 0000000000000000 R14: 00007fa940336080 R15: 00007ffe300873d8 [ 1111.412475][T15639] [ 1112.187384][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 1112.187405][ T30] audit: type=1326 audit(1732635534.818:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15641 comm="syz.9.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94017e819 code=0x7ffc0000 [ 1112.276367][T15650] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2528'. [ 1113.244084][T15643] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2529'. [ 1113.287758][ T30] audit: type=1326 audit(1732635534.818:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15641 comm="syz.9.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94017e819 code=0x7ffc0000 [ 1113.368674][ T30] audit: type=1326 audit(1732635534.818:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15641 comm="syz.9.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fa94017e819 code=0x7ffc0000 [ 1113.460902][ T30] audit: type=1326 audit(1732635534.818:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15641 comm="syz.9.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94017e819 code=0x7ffc0000 [ 1113.575765][ T30] audit: type=1326 audit(1732635534.818:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15641 comm="syz.9.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94017e819 code=0x7ffc0000 [ 1113.706107][ T30] audit: type=1326 audit(1732635534.818:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15641 comm="syz.9.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fa94017e819 code=0x7ffc0000 [ 1113.805771][ T30] audit: type=1326 audit(1732635534.818:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15641 comm="syz.9.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94017e819 code=0x7ffc0000 [ 1113.906256][ T30] audit: type=1326 audit(1732635534.828:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15641 comm="syz.9.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa94017e819 code=0x7ffc0000 [ 1114.004941][ T30] audit: type=1326 audit(1732635534.828:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15641 comm="syz.9.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa94017e819 code=0x7ffc0000 [ 1114.064626][ T30] audit: type=1326 audit(1732635534.828:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15641 comm="syz.9.2529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa94017e819 code=0x7ffc0000 [ 1114.486634][T15666] netlink: 'syz.1.2536': attribute type 29 has an invalid length. [ 1114.538124][T15666] netlink: 'syz.1.2536': attribute type 29 has an invalid length. [ 1114.582279][T15666] netlink: 'syz.1.2536': attribute type 29 has an invalid length. [ 1114.633655][T15667] netlink: 'syz.1.2536': attribute type 2 has an invalid length. [ 1115.335791][T10371] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1115.729332][T10371] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1115.785772][T10371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1115.829214][T10371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1115.878362][T10371] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1115.964188][T10371] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1116.004972][T10371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.025389][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.033328][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.144239][T10371] usb 2-1: config 0 descriptor?? [ 1116.673721][T10371] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1116.681516][T10371] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 1116.694687][T10371] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 1116.702358][T15682] netlink: 209836 bytes leftover after parsing attributes in process `syz.9.2539'. [ 1116.843577][T10371] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1117.036728][T15684] Invalid logical block size (1) [ 1117.043543][T10371] usb 2-1: USB disconnect, device number 6 [ 1117.483059][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 1117.483074][ T30] audit: type=1326 audit(1732635540.338:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15691 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aeff7e819 code=0x7ffc0000 [ 1117.575130][ T30] audit: type=1326 audit(1732635540.378:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15691 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f8aeff7e819 code=0x7ffc0000 [ 1117.658782][T15699] Cannot find del_set index 2 as target [ 1117.770299][ T30] audit: type=1326 audit(1732635540.378:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15691 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aeff7e819 code=0x7ffc0000 [ 1117.839362][ T30] audit: type=1326 audit(1732635540.378:609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15691 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f8aeff7e819 code=0x7ffc0000 [ 1117.867940][T15693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2542'. [ 1118.809940][T13414] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1118.967817][T13414] usb 9-1: device descriptor read/64, error -71 [ 1119.225722][T13414] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1119.235699][ T30] audit: type=1326 audit(1732635540.378:610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15691 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aeff7e819 code=0x7ffc0000 [ 1119.258587][ T30] audit: type=1326 audit(1732635540.378:611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15691 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8aeff7e819 code=0x7ffc0000 [ 1119.280565][ T30] audit: type=1326 audit(1732635540.378:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15691 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aeff7e819 code=0x7ffc0000 [ 1119.302435][ T30] audit: type=1326 audit(1732635540.378:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15691 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8aeff7e819 code=0x7ffc0000 [ 1119.331275][ T30] audit: type=1326 audit(1732635540.378:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15691 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aeff7e819 code=0x7ffc0000 [ 1119.353479][ T30] audit: type=1326 audit(1732635540.378:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15691 comm="syz.3.2542" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8aeff7e819 code=0x7ffc0000 [ 1119.404016][T15710] netlink: 'syz.3.2547': attribute type 29 has an invalid length. [ 1119.420608][T15710] netlink: 'syz.3.2547': attribute type 29 has an invalid length. [ 1119.452891][T15714] FAULT_INJECTION: forcing a failure. [ 1119.452891][T15714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1119.467037][T15714] CPU: 1 UID: 0 PID: 15714 Comm: syz.5.2549 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 1119.467081][T15710] netlink: 'syz.3.2547': attribute type 29 has an invalid length. [ 1119.477497][T15714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1119.477519][T15714] Call Trace: [ 1119.477529][T15714] [ 1119.477541][T15714] dump_stack_lvl+0x241/0x360 [ 1119.477582][T15714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1119.477615][T15714] ? __pfx__printk+0x10/0x10 [ 1119.477652][T15714] ? snprintf+0xda/0x120 [ 1119.477678][T15714] should_fail_ex+0x3b0/0x4e0 [ 1119.477719][T15714] _copy_to_user+0x31/0xb0 [ 1119.477752][T15714] simple_read_from_buffer+0xca/0x150 [ 1119.534884][T15714] proc_fail_nth_read+0x1e9/0x250 [ 1119.539942][T15714] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1119.545548][T15714] ? rw_verify_area+0x568/0x6f0 [ 1119.545805][T15710] netlink: 'syz.3.2547': attribute type 2 has an invalid length. [ 1119.550415][T15714] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1119.550447][T15714] vfs_read+0x1fc/0xb70 [ 1119.567867][T15714] ? __pfx___mutex_lock+0x10/0x10 [ 1119.572899][T15714] ? __pfx_vfs_read+0x10/0x10 [ 1119.577585][T15714] ? __fget_files+0x2a/0x410 [ 1119.582195][T15714] ? __fget_files+0x395/0x410 [ 1119.586896][T15714] ? __fget_files+0x2a/0x410 [ 1119.591518][T15714] ksys_read+0x18f/0x2b0 [ 1119.595774][T15714] ? __pfx_ksys_read+0x10/0x10 [ 1119.600548][T15714] ? do_syscall_64+0x100/0x230 [ 1119.605343][T15714] ? do_syscall_64+0xb6/0x230 [ 1119.610031][T15714] do_syscall_64+0xf3/0x230 [ 1119.614551][T15714] ? clear_bhb_loop+0x35/0x90 [ 1119.619246][T15714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.625153][T15714] RIP: 0033:0x7f1791f7d25c [ 1119.629574][T15714] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1119.649202][T15714] RSP: 002b:00007f1792e2d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1119.657640][T15714] RAX: ffffffffffffffda RBX: 00007f1792135fa0 RCX: 00007f1791f7d25c [ 1119.665643][T15714] RDX: 000000000000000f RSI: 00007f1792e2d0a0 RDI: 0000000000000003 [ 1119.673636][T15714] RBP: 00007f1792e2d090 R08: 0000000000000000 R09: 0000000000000000 [ 1119.681608][T15714] R10: 000000000000100c R11: 0000000000000246 R12: 0000000000000001 [ 1119.689595][T15714] R13: 0000000000000000 R14: 00007f1792135fa0 R15: 00007fff77d61288 [ 1119.697593][T15714] [ 1119.726053][T13414] usb 9-1: device descriptor read/64, error -71 [ 1119.806176][T15716] tipc: Started in network mode [ 1119.811231][T15716] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 1119.824679][T15716] tipc: Enabled bearer , priority 27 [ 1119.863309][T13414] usb usb9-port1: attempt power cycle [ 1119.882555][T15715] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1120.340782][T15728] FAULT_INJECTION: forcing a failure. [ 1120.340782][T15728] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1120.359961][T13414] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1120.399807][T15728] CPU: 0 UID: 0 PID: 15728 Comm: syz.9.2552 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 1120.410285][T15728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1120.420381][T15728] Call Trace: [ 1120.423700][T15728] [ 1120.426667][T15728] dump_stack_lvl+0x241/0x360 [ 1120.431451][T15728] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1120.436726][T15728] ? __pfx__printk+0x10/0x10 [ 1120.441364][T15728] ? __pfx_lock_release+0x10/0x10 [ 1120.446435][T15728] should_fail_ex+0x3b0/0x4e0 [ 1120.447149][T13414] usb 9-1: device descriptor read/8, error -71 [ 1120.451154][T15728] _copy_from_iter+0x21f/0x1e70 [ 1120.451189][T15728] ? __virt_addr_valid+0x183/0x530 [ 1120.451217][T15728] ? __pfx_lock_release+0x10/0x10 [ 1120.472441][T15728] ? __alloc_skb+0x28f/0x440 [ 1120.477091][T15728] ? __pfx__copy_from_iter+0x10/0x10 [ 1120.482421][T15728] ? __virt_addr_valid+0x183/0x530 [ 1120.487585][T15728] ? __virt_addr_valid+0x183/0x530 [ 1120.492736][T15728] ? __virt_addr_valid+0x45f/0x530 [ 1120.497890][T15728] ? __check_object_size+0x48e/0x900 [ 1120.503214][T15728] netlink_sendmsg+0x73d/0xcb0 [ 1120.508009][T15728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1120.513321][T15728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1120.518628][T15728] __sock_sendmsg+0x221/0x270 [ 1120.523321][T15728] ____sys_sendmsg+0x52a/0x7e0 [ 1120.528113][T15728] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1120.533422][T15728] ? __fget_files+0x2a/0x410 [ 1120.538038][T15728] ? __fget_files+0x2a/0x410 [ 1120.542648][T15728] __sys_sendmsg+0x269/0x350 [ 1120.547252][T15728] ? __pfx_lock_release+0x10/0x10 [ 1120.552290][T15728] ? __pfx___sys_sendmsg+0x10/0x10 [ 1120.557419][T15728] ? __pfx_vfs_write+0x10/0x10 [ 1120.562216][T15728] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1120.568548][T15728] ? do_syscall_64+0x100/0x230 [ 1120.573326][T15728] ? do_syscall_64+0xb6/0x230 [ 1120.578138][T15728] do_syscall_64+0xf3/0x230 [ 1120.582670][T15728] ? clear_bhb_loop+0x35/0x90 [ 1120.587362][T15728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.593269][T15728] RIP: 0033:0x7fa94017e819 [ 1120.597692][T15728] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1120.617310][T15728] RSP: 002b:00007fa940fd3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1120.625752][T15728] RAX: ffffffffffffffda RBX: 00007fa940335fa0 RCX: 00007fa94017e819 [ 1120.633733][T15728] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000003 [ 1120.641727][T15728] RBP: 00007fa940fd3090 R08: 0000000000000000 R09: 0000000000000000 [ 1120.649715][T15728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1120.657696][T15728] R13: 0000000000000000 R14: 00007fa940335fa0 R15: 00007ffe300873d8 [ 1120.665702][T15728] [ 1120.673075][T15730] FAULT_INJECTION: forcing a failure. [ 1120.673075][T15730] name failslab, interval 1, probability 0, space 0, times 0 [ 1120.686989][T15730] CPU: 1 UID: 0 PID: 15730 Comm: syz.1.2553 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 1120.697461][T15730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1120.707567][T15730] Call Trace: [ 1120.710877][T15730] [ 1120.713856][T15730] dump_stack_lvl+0x241/0x360 [ 1120.718585][T15730] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1120.723825][T15730] ? __pfx__printk+0x10/0x10 [ 1120.728476][T15730] ? __kmalloc_cache_noprof+0x48/0x390 [ 1120.733972][T15730] ? __pfx___might_resched+0x10/0x10 [ 1120.739313][T15730] should_fail_ex+0x3b0/0x4e0 [ 1120.744046][T15730] should_failslab+0xac/0x100 [ 1120.748764][T15730] __kmalloc_cache_noprof+0x70/0x390 [ 1120.754085][T15730] ? sctp_auth_asoc_copy_shkeys+0x13b/0x580 [ 1120.760027][T15730] sctp_auth_asoc_copy_shkeys+0x13b/0x580 [ 1120.765807][T15730] sctp_association_new+0x15aa/0x2400 [ 1120.771245][T15730] sctp_connect_new_asoc+0x2d8/0x6c0 [ 1120.776584][T15730] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1120.782435][T15730] ? sctp_sendmsg+0xbb9/0x3520 [ 1120.787279][T15730] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 1120.793135][T15730] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 1120.799068][T15730] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1120.804660][T15730] sctp_sendmsg+0x219a/0x3520 [ 1120.809406][T15730] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1120.814476][T15730] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 1120.821287][T15730] ? inet_sendmsg+0x330/0x390 [ 1120.826009][T15730] __sock_sendmsg+0x1a6/0x270 [ 1120.830730][T15730] __sys_sendto+0x363/0x4c0 [ 1120.835282][T15730] ? __pfx___sys_sendto+0x10/0x10 [ 1120.840350][T15730] ? __mutex_unlock_slowpath+0x21e/0x790 [ 1120.846045][T15730] ? __fget_files+0x2a/0x410 [ 1120.850706][T15730] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1120.856723][T15730] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1120.863092][T15730] __x64_sys_sendto+0xde/0x100 [ 1120.867912][T15730] do_syscall_64+0xf3/0x230 [ 1120.872488][T15730] ? clear_bhb_loop+0x35/0x90 [ 1120.877195][T15730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1120.883146][T15730] RIP: 0033:0x7f38be77e819 [ 1120.887608][T15730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1120.907258][T15730] RSP: 002b:00007f38bf553038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1120.915714][T15730] RAX: ffffffffffffffda RBX: 00007f38be936160 RCX: 00007f38be77e819 [ 1120.923712][T15730] RDX: 000000000000fee4 RSI: 0000000020847fff RDI: 0000000000000007 [ 1120.931718][T15730] RBP: 00007f38bf553090 R08: 000000002005ffe4 R09: 000000000000001c [ 1120.939813][T15730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1120.947814][T15730] R13: 0000000000000000 R14: 00007f38be936160 R15: 00007ffce7c13d58 [ 1120.955917][T15730] [ 1121.086149][T10371] tipc: Node number set to 8432298 [ 1121.215780][T13414] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1121.264387][T13414] usb 9-1: device descriptor read/8, error -71 [ 1121.436114][T13414] usb usb9-port1: unable to enumerate USB device [ 1123.100751][T15740] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1123.923283][T15756] FAULT_INJECTION: forcing a failure. [ 1123.923283][T15756] name failslab, interval 1, probability 0, space 0, times 0 [ 1123.936349][T15756] CPU: 0 UID: 0 PID: 15756 Comm: syz.1.2560 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 1123.946798][T15756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1123.956885][T15756] Call Trace: [ 1123.960195][T15756] [ 1123.963178][T15756] dump_stack_lvl+0x241/0x360 [ 1123.967928][T15756] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1123.973162][T15756] ? __pfx__printk+0x10/0x10 [ 1123.977794][T15756] ? __kmalloc_cache_noprof+0x48/0x390 [ 1123.983290][T15756] ? __pfx___might_resched+0x10/0x10 [ 1123.988617][T15756] should_fail_ex+0x3b0/0x4e0 [ 1123.993352][T15756] should_failslab+0xac/0x100 [ 1123.998067][T15756] __kmalloc_cache_noprof+0x70/0x390 [ 1124.003381][T15756] ? sctp_association_new+0x8a/0x2400 [ 1124.008791][T15756] ? __asan_memcpy+0x40/0x70 [ 1124.013422][T15756] sctp_association_new+0x8a/0x2400 [ 1124.018732][T15756] ? sctp_do_bind+0x679/0x950 [ 1124.023476][T15756] ? __ipv6_addr_type+0x23c/0x2f0 [ 1124.028563][T15756] sctp_connect_new_asoc+0x2d8/0x6c0 [ 1124.033895][T15756] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1124.039744][T15756] ? sctp_sendmsg+0xbb9/0x3520 [ 1124.044579][T15756] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 1124.050440][T15756] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 1124.056038][T15756] sctp_sendmsg+0x219a/0x3520 [ 1124.060789][T15756] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1124.065858][T15756] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 1124.072671][T15756] ? inet_sendmsg+0x330/0x390 [ 1124.077399][T15756] __sock_sendmsg+0x1a6/0x270 [ 1124.082119][T15756] __sys_sendto+0x363/0x4c0 [ 1124.086669][T15756] ? __pfx___sys_sendto+0x10/0x10 [ 1124.091723][T15756] ? __mutex_unlock_slowpath+0x21e/0x790 [ 1124.097416][T15756] ? __fget_files+0x2a/0x410 [ 1124.102056][T15756] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1124.108070][T15756] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1124.114436][T15756] __x64_sys_sendto+0xde/0x100 [ 1124.119243][T15756] do_syscall_64+0xf3/0x230 [ 1124.123784][T15756] ? clear_bhb_loop+0x35/0x90 [ 1124.128496][T15756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.134423][T15756] RIP: 0033:0x7f38be77e819 [ 1124.138868][T15756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1124.158507][T15756] RSP: 002b:00007f38bf553038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1124.166966][T15756] RAX: ffffffffffffffda RBX: 00007f38be936160 RCX: 00007f38be77e819 [ 1124.174966][T15756] RDX: 000000000000fee4 RSI: 0000000020847fff RDI: 0000000000000006 [ 1124.182963][T15756] RBP: 00007f38bf553090 R08: 000000002005ffe4 R09: 000000000000001c [ 1124.190973][T15756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1124.199007][T15756] R13: 0000000000000000 R14: 00007f38be936160 R15: 00007ffce7c13d58 [ 1124.207044][T15756] [ 1124.532565][T15753] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 1124.539149][T15753] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1124.625736][T15753] vhci_hcd vhci_hcd.0: Device attached [ 1124.649230][T15762] cgroup: Name too long [ 1124.661943][T15762] netlink: 'syz.1.2563': attribute type 2 has an invalid length. [ 1124.682825][T15762] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2563'. [ 1124.865689][ T5893] usb 49-1: new low-speed USB device number 2 using vhci_hcd [ 1125.170418][T15770] Cannot find del_set index 0 as target [ 1126.527405][T15774] binder: 15772:15774 ioctl 4018620d 0 returned -22 [ 1127.073021][T15777] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2566'. [ 1127.096324][T15778] binder: 15772:15778 ioctl c0306201 0 returned -14 [ 1127.267796][T15754] vhci_hcd: connection reset by peer [ 1127.278438][ T3467] vhci_hcd: stop threads [ 1127.283429][ T3467] vhci_hcd: release socket [ 1127.295779][ T3467] vhci_hcd: disconnect device [ 1127.441467][T15778] Cannot find del_set index 0 as target [ 1130.006228][ T5893] vhci_hcd: vhci_device speed not set [ 1130.066185][T15796] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1130.087863][T15796] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1130.130744][T15796] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1130.148163][T15796] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1131.092010][T15805] lo speed is unknown, defaulting to 1000 [ 1132.726954][T15822] 9pnet_fd: Insufficient options for proto=fd [ 1132.939754][T13918] Bluetooth: hci3: command 0x0405 tx timeout [ 1132.946452][T12300] Bluetooth: hci2: command 0x0419 tx timeout [ 1132.952679][ T54] Bluetooth: hci1: command 0x0405 tx timeout [ 1132.963520][ T5851] Bluetooth: hci5: command 0x0419 tx timeout [ 1133.749237][T10371] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1134.138252][T10371] usb 4-1: config 0 has no interfaces? [ 1134.147206][T10371] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 1134.156763][T10371] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.164796][T10371] usb 4-1: Product: syz [ 1134.169460][T10371] usb 4-1: Manufacturer: syz [ 1134.174104][T10371] usb 4-1: SerialNumber: syz [ 1134.186773][T10371] usb 4-1: config 0 descriptor?? [ 1135.244761][T15826] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2579'. [ 1135.255098][T15842] Cannot find del_set index 2 as target [ 1135.692312][T15848] netlink: 'syz.8.2585': attribute type 3 has an invalid length. [ 1135.773303][T15848] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2585'. [ 1135.801821][T15848] netlink: 'syz.8.2585': attribute type 3 has an invalid length. [ 1135.811825][T15848] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2585'. [ 1136.781354][T14188] usb 4-1: USB disconnect, device number 43 [ 1138.794394][T15865] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2589'. [ 1140.294656][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 1140.950620][T15879] Cannot find del_set index 2 as target [ 1140.977876][ T30] audit: type=1326 audit(1732635563.148:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15875 comm="syz.3.2593" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8aeff7e819 code=0x0 [ 1141.285917][T15886] tipc: Started in network mode [ 1141.290972][T15886] tipc: Node identity ac1414aa, cluster identity 4711 [ 1141.298210][T15886] tipc: Enabled bearer , priority 10 [ 1141.362771][T14188] IPVS: starting estimator thread 0... [ 1141.456423][T15887] IPVS: using max 28 ests per chain, 67200 per kthread [ 1141.595699][ T5893] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1141.607975][T15893] Cannot find del_set index 2 as target [ 1141.755851][ T5893] usb 9-1: device descriptor read/64, error -71 [ 1141.995869][ T5893] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1142.891640][ T9] tipc: Node number set to 2886997162 [ 1142.966159][ T5893] usb 9-1: device descriptor read/64, error -71 [ 1143.101815][ T5893] usb usb9-port1: attempt power cycle [ 1144.374317][ T5893] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1144.396046][ T5893] usb 9-1: device descriptor read/8, error -71 [ 1144.635650][ T5893] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1145.126467][ T5893] usb 9-1: device descriptor read/8, error -71 [ 1145.236772][ T5893] usb usb9-port1: unable to enumerate USB device [ 1145.768925][T15917] fuse: Unknown parameter '00000000000000000000' [ 1146.670497][T15919] fuse: Bad value for 'user_id' [ 1146.675424][T15919] fuse: Bad value for 'user_id' [ 1146.915804][T15923] FAULT_INJECTION: forcing a failure. [ 1146.915804][T15923] name failslab, interval 1, probability 0, space 0, times 0 [ 1147.724902][T15923] CPU: 0 UID: 0 PID: 15923 Comm: syz.8.2606 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 1147.735390][T15923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1147.745458][T15923] Call Trace: [ 1147.748749][T15923] [ 1147.751688][T15923] dump_stack_lvl+0x241/0x360 [ 1147.756394][T15923] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1147.761621][T15923] ? __pfx__printk+0x10/0x10 [ 1147.766237][T15923] ? __kmalloc_node_noprof+0xb9/0x4d0 [ 1147.771620][T15923] ? __pfx___might_resched+0x10/0x10 [ 1147.777026][T15923] should_fail_ex+0x3b0/0x4e0 [ 1147.781730][T15923] should_failslab+0xac/0x100 [ 1147.786420][T15923] __kmalloc_node_noprof+0xe1/0x4d0 [ 1147.791630][T15923] ? __kvmalloc_node_noprof+0x72/0x190 [ 1147.797133][T15923] __kvmalloc_node_noprof+0x72/0x190 [ 1147.802459][T15923] bpf_test_run_xdp_live+0x21d/0x21f0 [ 1147.808045][T15923] ? bpf_dispatcher_change_prog+0xd96/0xf20 [ 1147.813969][T15923] ? __pfx_lock_release+0x10/0x10 [ 1147.819040][T15923] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1147.824391][T15923] ? __pfx___might_resched+0x10/0x10 [ 1147.829712][T15923] ? __mutex_unlock_slowpath+0x21e/0x790 [ 1147.835381][T15923] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1147.841486][T15923] ? __mutex_unlock_slowpath+0x21e/0x790 [ 1147.847159][T15923] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1147.852995][T15923] ? synchronize_rcu+0x11b/0x360 [ 1147.857962][T15923] ? __pfx_synchronize_rcu+0x10/0x10 [ 1147.863285][T15923] ? __pfx_bpf_dispatcher_change_prog+0x10/0x10 [ 1147.869552][T15923] ? 0xffffffffa0000954 [ 1147.873715][T15923] ? 0xffffffffa0001f88 [ 1147.877882][T15923] ? 0xffffffffa0001fcc [ 1147.882043][T15923] ? 0xffffffffa0002014 [ 1147.886213][T15923] ? 0xffffffffa0002054 [ 1147.890393][T15923] ? 0xffffffffa0002390 [ 1147.894555][T15923] ? 0xffffffffa00023d8 [ 1147.898720][T15923] ? 0xffffffffa0002410 [ 1147.902911][T15923] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1147.908837][T15923] ? _copy_from_user+0x99/0xc0 [ 1147.913614][T15923] ? bpf_test_init+0x15a/0x180 [ 1147.918398][T15923] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1147.923891][T15923] bpf_prog_test_run_xdp+0x805/0x11e0 [ 1147.929292][T15923] ? __pfx_lock_release+0x10/0x10 [ 1147.934346][T15923] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1147.940170][T15923] ? __fget_files+0x2a/0x410 [ 1147.944772][T15923] ? __fget_files+0x2a/0x410 [ 1147.949377][T15923] ? fput+0x21b/0x290 [ 1147.953371][T15923] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1147.959196][T15923] bpf_prog_test_run+0x2e4/0x360 [ 1147.964148][T15923] __sys_bpf+0x48d/0x810 [ 1147.968400][T15923] ? __pfx___sys_bpf+0x10/0x10 [ 1147.973184][T15923] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1147.979191][T15923] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1147.985556][T15923] ? do_syscall_64+0x100/0x230 [ 1147.990360][T15923] __x64_sys_bpf+0x7c/0x90 [ 1147.994793][T15923] do_syscall_64+0xf3/0x230 [ 1147.999316][T15923] ? clear_bhb_loop+0x35/0x90 [ 1148.004002][T15923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1148.009911][T15923] RIP: 0033:0x7fbaa3f7e819 [ 1148.014356][T15923] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1148.033992][T15923] RSP: 002b:00007fbaa4cf2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1148.042437][T15923] RAX: ffffffffffffffda RBX: 00007fbaa4135fa0 RCX: 00007fbaa3f7e819 [ 1148.050443][T15923] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 1148.058436][T15923] RBP: 00007fbaa4cf2090 R08: 0000000000000000 R09: 0000000000000000 [ 1148.066429][T15923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1148.074426][T15923] R13: 0000000000000000 R14: 00007fbaa4135fa0 R15: 00007ffce22e0bd8 [ 1148.082440][T15923] [ 1149.524992][T15939] Cannot find del_set index 2 as target [ 1152.104588][T15947] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2611'. [ 1153.639855][T15962] FAULT_INJECTION: forcing a failure. [ 1153.639855][T15962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1153.670014][T15962] CPU: 0 UID: 0 PID: 15962 Comm: syz.8.2618 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 1153.680561][T15962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1153.690631][T15962] Call Trace: [ 1153.693937][T15962] [ 1153.696892][T15962] dump_stack_lvl+0x241/0x360 [ 1153.701610][T15962] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1153.706833][T15962] ? __pfx__printk+0x10/0x10 [ 1153.711476][T15962] ? snprintf+0xda/0x120 [ 1153.715805][T15962] should_fail_ex+0x3b0/0x4e0 [ 1153.720592][T15962] _copy_to_user+0x31/0xb0 [ 1153.725016][T15962] simple_read_from_buffer+0xca/0x150 [ 1153.730407][T15962] proc_fail_nth_read+0x1e9/0x250 [ 1153.735438][T15962] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1153.740992][T15962] ? rw_verify_area+0x55e/0x6f0 [ 1153.745849][T15962] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1153.751396][T15962] vfs_read+0x1fc/0xb70 [ 1153.755574][T15962] ? __pfx___mutex_lock+0x10/0x10 [ 1153.760649][T15962] ? __pfx_vfs_read+0x10/0x10 [ 1153.765337][T15962] ? rcu_read_lock_sched_held+0x8d/0x130 [ 1153.770988][T15962] ? __fget_files+0x2a/0x410 [ 1153.775608][T15962] ? __fget_files+0x395/0x410 [ 1153.780290][T15962] ? __fget_files+0x2a/0x410 [ 1153.784893][T15962] ksys_read+0x18f/0x2b0 [ 1153.789171][T15962] ? __pfx_ksys_read+0x10/0x10 [ 1153.793959][T15962] ? do_syscall_64+0x100/0x230 [ 1153.798734][T15962] ? do_syscall_64+0xb6/0x230 [ 1153.803438][T15962] do_syscall_64+0xf3/0x230 [ 1153.807950][T15962] ? clear_bhb_loop+0x35/0x90 [ 1153.812638][T15962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.818544][T15962] RIP: 0033:0x7fbaa3f7d25c [ 1153.822965][T15962] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 1153.842583][T15962] RSP: 002b:00007fbaa4cf2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1153.851010][T15962] RAX: ffffffffffffffda RBX: 00007fbaa4135fa0 RCX: 00007fbaa3f7d25c [ 1153.859000][T15962] RDX: 000000000000000f RSI: 00007fbaa4cf20a0 RDI: 0000000000000007 [ 1153.866986][T15962] RBP: 00007fbaa4cf2090 R08: 0000000000000000 R09: 0000000000000000 [ 1153.874976][T15962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1153.882964][T15962] R13: 0000000000000000 R14: 00007fbaa4135fa0 R15: 00007ffce22e0bd8 [ 1153.890970][T15962] [ 1154.066440][ T30] audit: type=1326 audit(1732635576.838:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15963 comm="syz.5.2617" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1791f7e819 code=0x0 [ 1154.381719][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1154.394213][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1154.402727][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1154.466567][T13918] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1154.476113][T13918] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1154.485103][T13918] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1154.581398][T15970] lo speed is unknown, defaulting to 1000 [ 1155.822142][T15978] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2621'. [ 1155.892616][T15980] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2621'. [ 1156.050297][T15970] chnl_net:caif_netlink_parms(): no params data found [ 1156.417787][T15989] FAULT_INJECTION: forcing a failure. [ 1156.417787][T15989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1156.575898][ T54] Bluetooth: hci4: command tx timeout [ 1156.641045][T15997] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2625'. [ 1156.679929][T15989] CPU: 0 UID: 0 PID: 15989 Comm: syz.5.2623 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 1156.690391][T15989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1156.700458][T15989] Call Trace: [ 1156.703828][T15989] [ 1156.706771][T15989] dump_stack_lvl+0x241/0x360 [ 1156.711645][T15989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1156.716872][T15989] ? __pfx__printk+0x10/0x10 [ 1156.721470][T15989] ? __pfx_lock_release+0x10/0x10 [ 1156.726508][T15989] should_fail_ex+0x3b0/0x4e0 [ 1156.731212][T15989] _copy_from_iter+0x21f/0x1e70 [ 1156.736074][T15989] ? __virt_addr_valid+0x183/0x530 [ 1156.741191][T15989] ? __pfx_lock_release+0x10/0x10 [ 1156.746226][T15989] ? __alloc_skb+0x28f/0x440 [ 1156.750824][T15989] ? __pfx__copy_from_iter+0x10/0x10 [ 1156.756118][T15989] ? __virt_addr_valid+0x183/0x530 [ 1156.761236][T15989] ? __virt_addr_valid+0x183/0x530 [ 1156.766353][T15989] ? __virt_addr_valid+0x45f/0x530 [ 1156.771487][T15989] ? __check_object_size+0x48e/0x900 [ 1156.776781][T15989] netlink_sendmsg+0x73d/0xcb0 [ 1156.781562][T15989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1156.786888][T15989] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1156.792198][T15989] __sock_sendmsg+0x221/0x270 [ 1156.796894][T15989] ____sys_sendmsg+0x52a/0x7e0 [ 1156.801664][T15989] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1156.806958][T15989] ? __fget_files+0x2a/0x410 [ 1156.811574][T15989] ? __fget_files+0x2a/0x410 [ 1156.816185][T15989] __sys_sendmsg+0x269/0x350 [ 1156.820812][T15989] ? __pfx_lock_release+0x10/0x10 [ 1156.825847][T15989] ? __pfx___sys_sendmsg+0x10/0x10 [ 1156.830975][T15989] ? __pfx_vfs_write+0x10/0x10 [ 1156.835769][T15989] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1156.842098][T15989] ? do_syscall_64+0x100/0x230 [ 1156.846875][T15989] ? do_syscall_64+0xb6/0x230 [ 1156.851562][T15989] do_syscall_64+0xf3/0x230 [ 1156.856076][T15989] ? clear_bhb_loop+0x35/0x90 [ 1156.860758][T15989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1156.866667][T15989] RIP: 0033:0x7f1791f7e819 [ 1156.871082][T15989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1156.890781][T15989] RSP: 002b:00007f1792e2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1156.899205][T15989] RAX: ffffffffffffffda RBX: 00007f1792135fa0 RCX: 00007f1791f7e819 [ 1156.907199][T15989] RDX: 0000000000002000 RSI: 0000000020000280 RDI: 0000000000000004 [ 1156.915172][T15989] RBP: 00007f1792e2d090 R08: 0000000000000000 R09: 0000000000000000 [ 1156.923153][T15989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1156.931131][T15989] R13: 0000000000000000 R14: 00007f1792135fa0 R15: 00007fff77d61288 [ 1156.939144][T15989] [ 1156.992886][T15970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.021404][T15970] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.090011][T15970] bridge_slave_0: entered allmulticast mode [ 1157.097539][T15970] bridge_slave_0: entered promiscuous mode [ 1157.105873][T15970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.113033][T15970] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.120354][T15970] bridge_slave_1: entered allmulticast mode [ 1157.127618][T15970] bridge_slave_1: entered promiscuous mode [ 1157.172474][T13918] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1157.192079][T13918] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1157.203656][T13918] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1157.213257][T13918] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1157.222269][T13918] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1157.231082][T13918] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1157.359767][T15970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1157.720480][T16002] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1157.748022][T15998] lo speed is unknown, defaulting to 1000 [ 1157.767399][T15970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1157.877315][T15970] team0: Port device team_slave_0 added [ 1157.889436][T15970] team0: Port device team_slave_1 added [ 1158.163561][T15970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1158.163584][T15970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1158.163614][T15970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1158.186391][T15970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1158.186415][T15970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1158.186446][T15970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1158.512788][T15970] hsr_slave_0: entered promiscuous mode [ 1158.536208][T15970] hsr_slave_1: entered promiscuous mode [ 1158.567973][T15970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1158.568116][T15970] Cannot create hsr debugfs directory [ 1159.335832][T16016] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1159.374927][T13918] Bluetooth: hci4: command tx timeout [ 1159.375057][T13918] Bluetooth: hci6: command tx timeout [ 1159.524894][T16020] sg_write: data in/out 172/120 bytes for SCSI command 0x0-- guessing data in; [ 1159.524894][T16020] program syz.8.2632 not setting count and/or reply_len properly [ 1159.908804][T16025] Cannot find del_set index 2 as target [ 1161.346409][T16035] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1161.358709][T16035] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1161.402664][T16035] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1161.450140][T16035] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1161.466089][ T54] Bluetooth: hci6: command tx timeout [ 1161.466100][T13918] Bluetooth: hci4: command tx timeout [ 1161.476169][T16035] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1161.483495][T16035] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1161.605130][T16035] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1161.939830][T16035] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1161.987361][T16035] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1162.076062][T16035] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 1162.101684][T15998] chnl_net:caif_netlink_parms(): no params data found [ 1162.534306][T16046] netlink: 209836 bytes leftover after parsing attributes in process `syz.8.2639'. [ 1162.592190][ T6289] tipc: Subscription rejected, illegal request [ 1162.646409][T16034] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1162.652609][T16034] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1162.686199][T16034] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1162.692312][T16034] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1162.722257][T16034] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1163.878699][T15998] bridge0: port 1(bridge_slave_0) entered blocking state [ 1163.982934][T16059] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2641'. [ 1164.074972][T15998] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.427882][T15998] bridge_slave_0: entered allmulticast mode [ 1164.435487][T15998] bridge_slave_0: entered promiscuous mode [ 1164.455106][T16055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1164.471820][T15998] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.491227][T15998] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.515392][T15998] bridge_slave_1: entered allmulticast mode [ 1164.531913][T15998] bridge_slave_1: entered promiscuous mode [ 1164.775819][ T54] Bluetooth: hci5: command 0x0419 tx timeout [ 1164.782060][ T54] Bluetooth: hci6: command 0x0419 tx timeout [ 1164.788205][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 1164.796383][ T54] Bluetooth: hci1: command 0x0405 tx timeout [ 1164.802455][ T54] Bluetooth: hci3: command 0x0405 tx timeout [ 1165.203044][T16067] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2645'. [ 1165.690978][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.912608][T15998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1166.003255][T15998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1166.183670][T16074] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1166.189987][T16079] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2649'. [ 1166.240350][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.697337][T16081] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2646'. [ 1166.708087][ T81] tipc: Subscription rejected, illegal request [ 1166.715262][T15970] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1166.749754][T15970] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1166.774588][T15970] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1166.820990][ T5851] Bluetooth: hci4: command 0x0c1a tx timeout [ 1166.825774][ T54] Bluetooth: hci6: command 0x0419 tx timeout [ 1166.890692][T15970] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1167.075948][T16084] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1167.082075][T16084] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1167.105794][T16084] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1167.112200][T16084] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1167.120996][T16084] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1167.133623][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.245097][T15998] team0: Port device team_slave_0 added [ 1167.312948][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.345454][T15998] team0: Port device team_slave_1 added [ 1167.458717][T15998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1167.467196][T15998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1167.512650][T15998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1167.542554][T15970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1167.563463][T15998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1167.571709][T15998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1167.600945][T15998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1167.708639][T15970] 8021q: adding VLAN 0 to HW filter on device team0 [ 1167.761604][T15998] hsr_slave_0: entered promiscuous mode [ 1167.771890][T15998] hsr_slave_1: entered promiscuous mode [ 1167.780300][T15998] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1167.789902][T15998] Cannot create hsr debugfs directory [ 1167.820837][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1167.828094][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1167.848154][ T12] bridge_slave_1: left allmulticast mode [ 1167.853852][ T12] bridge_slave_1: left promiscuous mode [ 1167.871760][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.888787][ T12] bridge_slave_0: left allmulticast mode [ 1167.894501][ T12] bridge_slave_0: left promiscuous mode [ 1167.900486][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.091539][T16103] FAULT_INJECTION: forcing a failure. [ 1168.091539][T16103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1168.119228][T16103] CPU: 1 UID: 0 PID: 16103 Comm: syz.8.2656 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 1168.129724][T16103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1168.139826][T16103] Call Trace: [ 1168.143156][T16103] [ 1168.146122][T16103] dump_stack_lvl+0x241/0x360 [ 1168.150869][T16103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1168.156220][T16103] ? __pfx__printk+0x10/0x10 [ 1168.160870][T16103] ? __pfx_lock_release+0x10/0x10 [ 1168.165943][T16103] should_fail_ex+0x3b0/0x4e0 [ 1168.170680][T16103] _copy_from_user+0x2f/0xc0 [ 1168.175323][T16103] do_sock_getsockopt+0x1d1/0x7e0 [ 1168.180415][T16103] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1168.186018][T16103] ? __fget_files+0x2a/0x410 [ 1168.190664][T16103] ? __fget_files+0x395/0x410 [ 1168.195391][T16103] ? __fget_files+0x2a/0x410 [ 1168.200043][T16103] __x64_sys_getsockopt+0x2a1/0x370 [ 1168.205305][T16103] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 1168.211083][T16103] ? do_syscall_64+0x100/0x230 [ 1168.215908][T16103] ? do_syscall_64+0xb6/0x230 [ 1168.220640][T16103] do_syscall_64+0xf3/0x230 [ 1168.225202][T16103] ? clear_bhb_loop+0x35/0x90 [ 1168.229921][T16103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.235854][T16103] RIP: 0033:0x7fbaa3f7e819 [ 1168.240317][T16103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1168.259944][T16103] RSP: 002b:00007fbaa4cf2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1168.268379][T16103] RAX: ffffffffffffffda RBX: 00007fbaa4135fa0 RCX: 00007fbaa3f7e819 [ 1168.276362][T16103] RDX: 0400000000000009 RSI: 0000000000000000 RDI: 0000000000000003 [ 1168.284344][T16103] RBP: 00007fbaa4cf2090 R08: 0000000020000080 R09: 0000000000000000 [ 1168.292324][T16103] R10: 0000000020937fed R11: 0000000000000246 R12: 0000000000000001 [ 1168.300308][T16103] R13: 0000000000000000 R14: 00007fbaa4135fa0 R15: 00007ffce22e0bd8 [ 1168.308325][T16103] [ 1168.370896][T16109] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.2658'. [ 1168.434890][ T55] tipc: Subscription rejected, illegal request [ 1169.136005][ T5851] Bluetooth: hci3: command 0x0405 tx timeout [ 1169.136786][ T54] Bluetooth: hci5: command 0x0419 tx timeout [ 1169.142262][T13918] Bluetooth: hci6: command 0x0419 tx timeout [ 1169.148538][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 1169.154416][T12300] Bluetooth: hci1: command 0x0405 tx timeout [ 1169.325766][ T12]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1169.338781][ T12]  (unregistering): Released all slaves [ 1169.391776][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.399225][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1169.869768][T16130] netlink: 'syz.1.2661': attribute type 10 has an invalid length. [ 1169.964078][T16131] Cannot find del_set index 2 as target [ 1170.598019][T16130] bond0: (slave bond_slave_0): Releasing backup interface [ 1171.096974][ T12] hsr_slave_0: left promiscuous mode [ 1171.114527][ T12] hsr_slave_1: left promiscuous mode [ 1171.134827][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1171.144735][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1171.187087][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1171.194713][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1171.216011][T12300] Bluetooth: hci6: command 0x0419 tx timeout [ 1171.253929][ T12] veth1_macvtap: left promiscuous mode [ 1171.262186][ T12] veth0_macvtap: left promiscuous mode [ 1171.269326][ T12] veth1_vlan: left promiscuous mode [ 1171.274764][ T12] veth0_vlan: left promiscuous mode [ 1172.519784][ T12] team0 (unregistering): Port device virt_wifi0 removed [ 1172.841726][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1172.915214][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1173.299558][ T5851] Bluetooth: hci6: command 0x0419 tx timeout [ 1173.559112][T16153] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2668'. [ 1173.960329][T15970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1173.981395][T16162] netlink: 209836 bytes leftover after parsing attributes in process `syz.8.2672'. [ 1174.014117][T16160] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1174.067049][ T6289] tipc: Subscription rejected, illegal request [ 1174.075123][T16160] kvm: pic: non byte read [ 1174.087945][T16160] kvm: pic: level sensitive irq not supported [ 1174.088203][T16160] kvm: pic: non byte read [ 1175.616264][T16181] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2675'. [ 1175.935762][T14188] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1176.605743][T14188] usb 2-1: Using ep0 maxpacket: 16 [ 1176.624365][T14188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1176.636773][T14188] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1176.781134][T14188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.790185][T14188] usb 2-1: Product: syz [ 1176.794409][T14188] usb 2-1: Manufacturer: syz [ 1176.853173][T14188] usb 2-1: SerialNumber: syz [ 1176.916572][T14188] usb 2-1: config 0 descriptor?? [ 1176.918337][T15970] veth0_vlan: entered promiscuous mode [ 1176.944542][ T12] IPVS: stop unused estimator thread 0... [ 1176.958839][T14188] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1176.965452][T15970] veth1_vlan: entered promiscuous mode [ 1176.988231][T14188] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 1177.148954][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.201226][T15998] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1177.259751][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.283533][T15998] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1177.297463][T15998] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1177.313455][T15998] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1177.356070][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.372551][T15970] veth0_macvtap: entered promiscuous mode [ 1177.384312][T15970] veth1_macvtap: entered promiscuous mode [ 1177.457104][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.476359][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.482737][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.505069][T15970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1177.516585][T15970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.527406][T15970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1177.538392][T15970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.549433][T15970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1177.560830][T14188] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1177.561902][T15970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.578379][T15970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1177.589468][T15970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.600393][T15970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1177.612335][T15970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.623960][T15970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1177.635276][T15970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.647275][T15970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1177.684120][T15970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1177.696426][T15970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.711347][T15970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1177.723347][T15970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.733723][T15970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1177.744746][T15970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.755018][T15970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1177.766032][T15970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.776960][T15970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1177.790003][T15970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.801087][T15970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1177.812759][T15970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.825102][T15970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1177.836284][T15970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1177.848081][T15970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1177.895382][T15970] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.919735][T15970] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.941090][T15970] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.960290][T15970] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1177.991794][T16177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1178.010376][T16177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1178.089065][T16177] Process accounting resumed [ 1178.117716][T14188] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1178.145123][T16193] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2679'. [ 1178.162897][T14188] em28xx 2-1:0.0: board has no eeprom [ 1178.192587][ T12] bridge_slave_1: left allmulticast mode [ 1178.205685][ T12] bridge_slave_1: left promiscuous mode [ 1178.216269][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1178.235763][T14188] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1178.243724][T14188] em28xx 2-1:0.0: dvb set to bulk mode. [ 1178.253684][ T12] bridge_slave_0: left allmulticast mode [ 1178.260487][ T12] bridge_slave_0: left promiscuous mode [ 1178.266424][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1178.276349][ T9] em28xx 2-1:0.0: Binding DVB extension [ 1178.365017][ T9] em28xx 2-1:0.0: Registering input extension [ 1178.371817][T14188] usb 2-1: USB disconnect, device number 7 [ 1178.386665][T14188] em28xx 2-1:0.0: Disconnecting em28xx [ 1178.392863][T14188] em28xx 2-1:0.0: Closing input extension [ 1178.453920][T14188] em28xx 2-1:0.0: Freeing device [ 1179.157597][T16203] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2681'. [ 1179.688090][T16207] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2682'. [ 1180.399947][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1180.410673][ T12] bond0 (unregistering): Released all slaves [ 1180.554995][T15998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1180.682644][T15998] 8021q: adding VLAN 0 to HW filter on device team0 [ 1181.755792][T16217] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2685'. [ 1182.649364][ T6289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1182.690158][ T6289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1182.767787][ T7960] bridge0: port 1(bridge_slave_0) entered blocking state [ 1182.774967][ T7960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1183.045820][ T1296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1183.055432][ T6289] bridge0: port 2(bridge_slave_1) entered blocking state [ 1183.062622][ T6289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1183.071494][ T1296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1183.382837][T16228] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2688'. [ 1185.593363][T15998] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1185.638455][T15998] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1185.815362][T16243] program syz.8.2692 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1185.942157][T16234] batadv_slave_1: entered promiscuous mode [ 1186.055910][ T12] hsr_slave_0: left promiscuous mode [ 1186.062769][ T12] hsr_slave_1: left promiscuous mode [ 1186.070334][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1186.140818][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1186.175160][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1186.203980][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1186.247301][T16244] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2691'. [ 1186.274268][ T12] veth1_macvtap: left promiscuous mode [ 1186.281551][ T12] veth0_macvtap: left promiscuous mode [ 1186.287831][ T12] veth1_vlan: left promiscuous mode [ 1186.294830][ T12] veth0_vlan: left promiscuous mode [ 1186.405658][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1186.561453][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1186.579737][ T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1186.590109][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1186.625625][ T9] usb 2-1: Product: syz [ 1186.631381][ T9] usb 2-1: Manufacturer: syz [ 1186.645261][ T9] usb 2-1: SerialNumber: syz [ 1186.655310][ T9] usb 2-1: config 0 descriptor?? [ 1186.674253][ T9] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1187.153413][T16252] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1187.726756][T16257] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2696'. [ 1188.511726][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1188.599324][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1189.157033][T16238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1189.239268][T16238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1189.462544][T14188] usb 2-1: USB disconnect, device number 8 [ 1189.819646][T15998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1190.279239][T16278] FAULT_INJECTION: forcing a failure. [ 1190.279239][T16278] name failslab, interval 1, probability 0, space 0, times 0 [ 1190.292008][T16278] CPU: 1 UID: 0 PID: 16278 Comm: syz.1.2701 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 1190.302458][T16278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1190.312548][T16278] Call Trace: [ 1190.315854][T16278] [ 1190.318810][T16278] dump_stack_lvl+0x241/0x360 [ 1190.323534][T16278] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1190.328770][T16278] ? __pfx__printk+0x10/0x10 [ 1190.333397][T16278] ? fs_reclaim_acquire+0x93/0x130 [ 1190.338552][T16278] ? __pfx___might_resched+0x10/0x10 [ 1190.343883][T16278] should_fail_ex+0x3b0/0x4e0 [ 1190.348605][T16278] should_failslab+0xac/0x100 [ 1190.353313][T16278] __kmalloc_noprof+0xdd/0x4c0 [ 1190.358113][T16278] ? tomoyo_encode+0x26f/0x540 [ 1190.362912][T16278] tomoyo_encode+0x26f/0x540 [ 1190.367539][T16278] tomoyo_realpath_from_path+0x59e/0x5e0 [ 1190.373229][T16278] tomoyo_check_open_permission+0x258/0x4f0 [ 1190.379170][T16278] ? tomoyo_check_open_permission+0x207/0x4f0 [ 1190.385300][T16278] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1190.391778][T16278] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1190.397826][T16278] security_file_open+0xac/0x250 [ 1190.402798][T16278] do_dentry_open+0x328/0x1b70 [ 1190.407629][T16278] vfs_open+0x3e/0x330 [ 1190.411736][T16278] path_openat+0x2c84/0x3590 [ 1190.416407][T16278] ? __pfx_path_openat+0x10/0x10 [ 1190.421410][T16278] do_filp_open+0x27f/0x4e0 [ 1190.425959][T16278] ? __pfx_do_filp_open+0x10/0x10 [ 1190.431020][T16278] ? do_raw_spin_lock+0x14f/0x370 [ 1190.436129][T16278] do_sys_openat2+0x13e/0x1d0 [ 1190.440856][T16278] ? __pfx_do_sys_openat2+0x10/0x10 [ 1190.446109][T16278] __x64_sys_openat+0x247/0x2a0 [ 1190.451010][T16278] ? __pfx___x64_sys_openat+0x10/0x10 [ 1190.456419][T16278] ? exc_page_fault+0x590/0x8c0 [ 1190.461315][T16278] ? do_syscall_64+0xb6/0x230 [ 1190.466054][T16278] do_syscall_64+0xf3/0x230 [ 1190.470598][T16278] ? clear_bhb_loop+0x35/0x90 [ 1190.475313][T16278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1190.481257][T16278] RIP: 0033:0x7f38be77d1b0 [ 1190.485706][T16278] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 1190.505353][T16278] RSP: 002b:00007f38bf552b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1190.513808][T16278] RAX: ffffffffffffffda RBX: 0000000000004041 RCX: 00007f38be77d1b0 [ 1190.521812][T16278] RDX: 0000000000004041 RSI: 00007f38bf552c10 RDI: 00000000ffffff9c [ 1190.529831][T16278] RBP: 00007f38bf552c10 R08: 0000000000000000 R09: 002364626e2f7665 [ 1190.537833][T16278] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1190.545833][T16278] R13: 0000000000000000 R14: 00007f38be936160 R15: 00007ffce7c13d58 [ 1190.553853][T16278] [ 1190.558354][T16278] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1190.609550][ T47] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1190.680850][T15998] veth0_vlan: entered promiscuous mode [ 1190.720305][T15998] veth1_vlan: entered promiscuous mode [ 1190.875167][T16280] Cannot find del_set index 2 as target [ 1190.988859][T15998] veth0_macvtap: entered promiscuous mode [ 1191.013412][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1191.114010][T15998] veth1_macvtap: entered promiscuous mode [ 1191.290630][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1191.295885][T15998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1191.301069][ T47] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1191.310970][T15998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.310991][T15998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1191.311011][T15998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.311038][T15998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1191.311075][T15998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.311095][T15998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1191.311112][T15998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.311133][T15998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1191.311150][T15998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.311169][T15998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1191.311186][T15998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.312474][T15998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1191.324543][ T47] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1191.338361][T15998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1191.345343][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1191.355613][T15998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.669871][T15998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1191.681030][T15998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.703742][T15998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1191.719212][T15998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.736896][ T47] usb 5-1: config 0 descriptor?? [ 1191.747064][T15998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1191.763055][T15998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.773118][T15998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1191.784068][T15998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.793997][T15998] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1191.804559][T15998] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1191.816203][T15998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1191.826636][T15998] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.835419][T15998] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.844457][T15998] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1191.853820][T15998] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.052538][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.053011][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1192.060865][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1192.145852][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1192.742401][ T47] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 1192.750629][ T47] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 1192.758395][ T47] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 1192.765976][ T47] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 1192.774985][ T47] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 1192.782589][ T47] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 1192.790817][ T47] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 1194.156207][ T47] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1194.967288][T16282] usb 5-1: USB disconnect, device number 19 [ 1195.138224][T16299] FAULT_INJECTION: forcing a failure. [ 1195.138224][T16299] name failslab, interval 1, probability 0, space 0, times 0 [ 1195.164662][T16298] hsr0: entered promiscuous mode [ 1195.197204][T16299] CPU: 1 UID: 0 PID: 16299 Comm: syz.1.2706 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 1195.207694][T16299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1195.217795][T16299] Call Trace: [ 1195.221121][T16299] [ 1195.224087][T16299] dump_stack_lvl+0x241/0x360 [ 1195.228824][T16299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1195.234071][T16299] ? __pfx__printk+0x10/0x10 [ 1195.238716][T16299] ? kmem_cache_alloc_noprof+0x48/0x380 [ 1195.244335][T16299] ? __pfx___might_resched+0x10/0x10 [ 1195.249671][T16299] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1195.255703][T16299] should_fail_ex+0x3b0/0x4e0 [ 1195.260438][T16299] should_failslab+0xac/0x100 [ 1195.265162][T16299] ? skb_clone+0x20c/0x390 [ 1195.269621][T16299] kmem_cache_alloc_noprof+0x70/0x380 [ 1195.275028][T16299] skb_clone+0x20c/0x390 [ 1195.279291][T16299] nfnetlink_rcv+0x575/0x2ab0 [ 1195.283989][T16299] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1195.289747][T16299] ? __dev_queue_xmit+0x1775/0x3f50 [ 1195.294966][T16299] ? kasan_save_track+0x51/0x80 [ 1195.299854][T16299] ? ____sys_sendmsg+0x52a/0x7e0 [ 1195.304810][T16299] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1195.309955][T16299] ? ref_tracker_free+0x643/0x7e0 [ 1195.314999][T16299] ? __asan_memcpy+0x40/0x70 [ 1195.319604][T16299] ? __pfx_ref_tracker_free+0x10/0x10 [ 1195.325005][T16299] ? netlink_deliver_tap+0x2e/0x1b0 [ 1195.330230][T16299] ? skb_clone+0x240/0x390 [ 1195.334695][T16299] ? __pfx_lock_release+0x10/0x10 [ 1195.339737][T16299] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 1195.345243][T16299] ? netlink_deliver_tap+0x2e/0x1b0 [ 1195.350815][T16299] netlink_unicast+0x7f6/0x990 [ 1195.355606][T16299] ? __pfx_netlink_unicast+0x10/0x10 [ 1195.360909][T16299] ? __virt_addr_valid+0x183/0x530 [ 1195.366036][T16299] ? __check_object_size+0x48e/0x900 [ 1195.371348][T16299] netlink_sendmsg+0x8e4/0xcb0 [ 1195.376143][T16299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1195.381459][T16299] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1195.386779][T16299] __sock_sendmsg+0x221/0x270 [ 1195.391480][T16299] ____sys_sendmsg+0x52a/0x7e0 [ 1195.396265][T16299] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1195.401560][T16299] ? __fget_files+0x2a/0x410 [ 1195.406176][T16299] ? __fget_files+0x2a/0x410 [ 1195.410815][T16299] __sys_sendmsg+0x269/0x350 [ 1195.415416][T16299] ? __pfx_lock_release+0x10/0x10 [ 1195.420457][T16299] ? __pfx___sys_sendmsg+0x10/0x10 [ 1195.425592][T16299] ? __pfx_vfs_write+0x10/0x10 [ 1195.430393][T16299] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1195.436741][T16299] ? do_syscall_64+0x100/0x230 [ 1195.441529][T16299] ? do_syscall_64+0xb6/0x230 [ 1195.446225][T16299] do_syscall_64+0xf3/0x230 [ 1195.450749][T16299] ? clear_bhb_loop+0x35/0x90 [ 1195.455436][T16299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.461355][T16299] RIP: 0033:0x7f38be77e819 [ 1195.465783][T16299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1195.485404][T16299] RSP: 002b:00007f38bf595038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1195.493840][T16299] RAX: ffffffffffffffda RBX: 00007f38be935fa0 RCX: 00007f38be77e819 [ 1195.501829][T16299] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1195.509813][T16299] RBP: 00007f38bf595090 R08: 0000000000000000 R09: 0000000000000000 [ 1195.517795][T16299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1195.525776][T16299] R13: 0000000000000000 R14: 00007f38be935fa0 R15: 00007ffce7c13d58 [ 1195.533768][T16299] [ 1195.536888][ C1] vkms_vblank_simulate: vblank timer overrun [ 1195.721836][T16298] hsr_slave_0: left promiscuous mode [ 1195.728337][T16298] hsr_slave_1: left promiscuous mode [ 1195.815034][T16307] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2708'. [ 1196.375709][T16303] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1196.388428][T16303] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1196.466152][T16303] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1196.473533][T16303] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1196.480772][T16303] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1196.799440][T16319] FAULT_INJECTION: forcing a failure. [ 1196.799440][T16319] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1196.813182][T16319] CPU: 1 UID: 0 PID: 16319 Comm: syz.2.2714 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 1196.823658][T16319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1196.833825][T16319] Call Trace: [ 1196.837147][T16319] [ 1196.840120][T16319] dump_stack_lvl+0x241/0x360 [ 1196.844860][T16319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1196.850112][T16319] ? __pfx__printk+0x10/0x10 [ 1196.854753][T16319] ? __pfx_lock_release+0x10/0x10 [ 1196.859840][T16319] should_fail_ex+0x3b0/0x4e0 [ 1196.864572][T16319] _copy_from_user+0x2f/0xc0 [ 1196.869213][T16319] restore_sigcontext+0xd8/0x7d0 [ 1196.874201][T16319] ? __pfx___might_resched+0x10/0x10 [ 1196.879543][T16319] ? __might_fault+0xaa/0x120 [ 1196.884270][T16319] ? __pfx_restore_sigcontext+0x10/0x10 [ 1196.889902][T16319] ? __task_pid_nr_ns+0x28/0x450 [ 1196.894888][T16319] __do_sys_rt_sigreturn+0x1b9/0x280 [ 1196.900226][T16319] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 1196.906085][T16319] ? do_syscall_64+0x100/0x230 [ 1196.910896][T16319] ? do_syscall_64+0xb6/0x230 [ 1196.915618][T16319] do_syscall_64+0xf3/0x230 [ 1196.920170][T16319] ? clear_bhb_loop+0x35/0x90 [ 1196.924885][T16319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.930829][T16319] RIP: 0033:0x7f153911a1a9 [ 1196.935277][T16319] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 1196.954917][T16319] RSP: 002b:00007f1539f6ba80 EFLAGS: 00000202 ORIG_RAX: 000000000000000f [ 1196.963383][T16319] RAX: ffffffffffffffda RBX: 00007f1539335fa0 RCX: 00007f153911a1a9 [ 1196.971417][T16319] RDX: 00007f1539f6ba80 RSI: 00007f1539f6bbb0 RDI: 0000000000000021 [ 1196.979433][T16319] RBP: 00007f1539f6c090 R08: 0000000000000000 R09: 0000000000000000 [ 1196.987448][T16319] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 1196.995458][T16319] R13: 0000000000000000 R14: 00007f1539335fa0 R15: 00007ffd85663298 [ 1197.003490][T16319] [ 1197.006634][ C1] vkms_vblank_simulate: vblank timer overrun [ 1197.028036][T16314] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2712'. [ 1197.929787][T16325] delete_channel: no stack [ 1198.421162][T12300] Bluetooth: hci3: command 0x0405 tx timeout [ 1198.427597][ T5851] Bluetooth: hci5: command 0x0419 tx timeout [ 1198.501690][T12300] Bluetooth: hci6: command 0x0419 tx timeout [ 1198.514691][ T5851] Bluetooth: hci4: command 0x0c1a tx timeout [ 1198.522754][ T5851] Bluetooth: hci1: command 0x0405 tx timeout [ 1202.166160][T16355] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1202.173007][T16355] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1202.192062][T16355] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1202.203653][T16355] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1202.210537][T16355] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1202.683897][T16368] overlayfs: overlapping lowerdir path [ 1204.178343][T13918] Bluetooth: hci5: command 0x0419 tx timeout [ 1204.431520][T13918] Bluetooth: hci6: command 0x0419 tx timeout [ 1204.441222][T13918] Bluetooth: hci4: command 0x0c1a tx timeout [ 1204.455861][T13918] Bluetooth: hci1: command 0x0405 tx timeout [ 1204.462025][T13918] Bluetooth: hci3: command 0x0405 tx timeout [ 1205.028244][T16383] overlayfs: missing 'workdir' [ 1205.075610][ T8] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1205.311088][ T30] audit: type=1326 audit(1732635628.168:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16384 comm="syz.1.2735" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f38be77e819 code=0x0 [ 1205.385997][ T47] usb 9-1: new low-speed USB device number 20 using dummy_hcd [ 1205.696775][ T47] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1205.821433][ T47] usb 9-1: config 0 has no interface number 0 [ 1205.925969][ T47] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1205.995790][ T47] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1206.046233][ T47] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1206.077208][ T47] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1206.121530][ T47] usb 9-1: config 0 descriptor?? [ 1206.135606][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 1206.146753][T16387] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1206.147753][ T8] usb 3-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 1206.167207][ T47] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1206.207527][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1D, changing to 0xD [ 1206.229273][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 255, changing to 11 [ 1206.257065][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 59391, setting to 1024 [ 1206.275625][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1206.485977][T16383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1206.542341][T16383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1206.550972][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1206.560575][ T8] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1206.568834][ T8] usb 3-1: Manufacturer: syz [ 1206.579925][ C1] iowarrior 9-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 1206.588229][ T8] usb 3-1: config 0 descriptor?? [ 1206.959162][T16402] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2737'. [ 1207.539377][ T5929] usb 9-1: USB disconnect, device number 20 [ 1207.556117][T16380] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1207.565412][ T5929] iowarrior 9-1:0.1: I/O-Warror #0 now disconnected [ 1207.599104][ T8] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1207.776121][T13414] usb 3-1: USB disconnect, device number 20 [ 1208.305911][T13414] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1208.484229][T13414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1208.505442][T13414] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1208.641360][T13414] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 1208.873946][T13414] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.915154][T13414] usb 3-1: config 0 descriptor?? [ 1210.065130][T13414] uclogic 0003:5543:0004.0011: No inputs registered, leaving [ 1210.104231][T13414] uclogic 0003:5543:0004.0011: hidraw0: USB HID v0.00 Device [HID 5543:0004] on usb-dummy_hcd.2-1/input0 [ 1210.183268][ T30] audit: type=1326 audit(1732635632.918:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16426 comm="syz.4.2746" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e37d7e819 code=0x0 [ 1211.335631][T16453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2750'. [ 1212.220274][ T9] usb 3-1: USB disconnect, device number 21 [ 1213.794665][T16465] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2754'. [ 1215.566466][T16473] FAULT_INJECTION: forcing a failure. [ 1215.566466][T16473] name failslab, interval 1, probability 0, space 0, times 0 [ 1215.620260][T16473] CPU: 0 UID: 0 PID: 16473 Comm: syz.2.2755 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 1215.631020][T16473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1215.641469][T16473] Call Trace: [ 1215.644779][T16473] [ 1215.647742][T16473] dump_stack_lvl+0x241/0x360 [ 1215.652508][T16473] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1215.657782][T16473] ? __pfx__printk+0x10/0x10 [ 1215.662450][T16473] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 1215.668487][T16473] ? __pfx___might_resched+0x10/0x10 [ 1215.673843][T16473] should_fail_ex+0x3b0/0x4e0 [ 1215.678597][T16473] should_failslab+0xac/0x100 [ 1215.683322][T16473] kmem_cache_alloc_node_noprof+0x77/0x380 [ 1215.689182][T16473] ? __alloc_skb+0x1c3/0x440 [ 1215.693838][T16473] __alloc_skb+0x1c3/0x440 [ 1215.698313][T16473] ? __pfx___alloc_skb+0x10/0x10 [ 1215.703312][T16473] ? netlink_ack_tlv_len+0x6e/0x200 [ 1215.708664][T16473] netlink_ack+0x13f/0xa30 [ 1215.713142][T16473] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1215.718674][T16473] netlink_rcv_skb+0x262/0x430 [ 1215.723496][T16473] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1215.729010][T16473] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1215.734382][T16473] ? netlink_deliver_tap+0x2e/0x1b0 [ 1215.739640][T16473] netlink_unicast+0x7f6/0x990 [ 1215.744469][T16473] ? __pfx_netlink_unicast+0x10/0x10 [ 1215.749815][T16473] ? __virt_addr_valid+0x183/0x530 [ 1215.755002][T16473] ? __check_object_size+0x48e/0x900 [ 1215.760353][T16473] netlink_sendmsg+0x8e4/0xcb0 [ 1215.765199][T16473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1215.770565][T16473] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1215.775905][T16473] __sock_sendmsg+0x221/0x270 [ 1215.780640][T16473] ____sys_sendmsg+0x52a/0x7e0 [ 1215.785469][T16473] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1215.790797][T16473] ? __fget_files+0x2a/0x410 [ 1215.795438][T16473] ? __fget_files+0x2a/0x410 [ 1215.800092][T16473] __sys_sendmmsg+0x36a/0x720 [ 1215.804832][T16473] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1215.810141][T16473] ? __pfx_lock_release+0x10/0x10 [ 1215.815213][T16473] ? kstrtouint_from_user+0x128/0x190 [ 1215.820661][T16473] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1215.826617][T16473] ? ksys_write+0x22a/0x2b0 [ 1215.831176][T16473] ? __pfx_lock_release+0x10/0x10 [ 1215.836242][T16473] ? vfs_write+0x730/0xd30 [ 1215.840683][T16473] ? __mutex_unlock_slowpath+0x21e/0x790 [ 1215.846349][T16473] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1215.852346][T16473] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1215.858681][T16473] ? do_syscall_64+0x100/0x230 [ 1215.863465][T16473] __x64_sys_sendmmsg+0xa0/0xb0 [ 1215.868472][T16473] do_syscall_64+0xf3/0x230 [ 1215.873010][T16473] ? clear_bhb_loop+0x35/0x90 [ 1215.877720][T16473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1215.883697][T16473] RIP: 0033:0x7f153917e819 [ 1215.888125][T16473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1215.907750][T16473] RSP: 002b:00007f1539f6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1215.916192][T16473] RAX: ffffffffffffffda RBX: 00007f1539335fa0 RCX: 00007f153917e819 [ 1215.924183][T16473] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 1215.932174][T16473] RBP: 00007f1539f6c090 R08: 0000000000000000 R09: 0000000000000000 [ 1215.940159][T16473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1215.948238][T16473] R13: 0000000000000000 R14: 00007f1539335fa0 R15: 00007ffd85663298 [ 1215.956275][T16473] [ 1216.465824][ T30] audit: type=1326 audit(1732635639.008:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16471 comm="syz.8.2758" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbaa3f7e819 code=0x0 [ 1216.714084][ T30] audit: type=1326 audit(1732635639.568:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16488 comm="syz.1.2763" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38be77e819 code=0x0 [ 1217.853992][T16502] ceph: No mds server is up or the cluster is laggy [ 1217.870404][T13414] libceph: connect (1)[c::]:6789 error -101 [ 1217.878215][T13414] libceph: mon0 (1)[c::]:6789 connect error [ 1218.275984][T16512] Cannot find set identified by id 0 to match [ 1218.326195][T16512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2767'. [ 1221.848990][ T30] audit: type=1326 audit(1732635643.868:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16522 comm="syz.2.2771" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f153917e819 code=0x0 [ 1223.744341][T16553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2778'. [ 1223.991217][T16555] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 1227.803187][T16600] FAULT_INJECTION: forcing a failure. [ 1227.803187][T16600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1228.886100][T16600] CPU: 0 UID: 0 PID: 16600 Comm: syz.8.2791 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 1228.896584][T16600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1228.906669][T16600] Call Trace: [ 1228.909976][T16600] [ 1228.912956][T16600] dump_stack_lvl+0x241/0x360 [ 1228.917700][T16600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1228.922975][T16600] ? __pfx__printk+0x10/0x10 [ 1228.927610][T16600] ? __pfx_lock_release+0x10/0x10 [ 1228.932682][T16600] ? __lock_acquire+0x1397/0x2100 [ 1228.937745][T16600] should_fail_ex+0x3b0/0x4e0 [ 1228.942473][T16600] _copy_from_user+0x2f/0xc0 [ 1228.947102][T16600] kstrtouint_from_user+0xc6/0x190 [ 1228.952246][T16600] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1228.957995][T16600] ? __pfx_lock_acquire+0x10/0x10 [ 1228.963057][T16600] proc_fail_nth_write+0xaa/0x2d0 [ 1228.968117][T16600] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1228.974047][T16600] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1228.979718][T16600] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1228.985389][T16600] vfs_write+0x2a3/0xd30 [ 1228.989704][T16600] ? do_sys_openat2+0x17a/0x1d0 [ 1228.994596][T16600] ? __pfx_vfs_write+0x10/0x10 [ 1228.999393][T16600] ? do_sys_openat2+0x17a/0x1d0 [ 1229.004314][T16600] ? __pfx_do_sys_openat2+0x10/0x10 [ 1229.009571][T16600] ? put_files_struct+0x23d/0x310 [ 1229.014666][T16600] ksys_write+0x18f/0x2b0 [ 1229.019050][T16600] ? __pfx_ksys_write+0x10/0x10 [ 1229.023953][T16600] ? do_syscall_64+0x100/0x230 [ 1229.028778][T16600] ? do_syscall_64+0xb6/0x230 [ 1229.033513][T16600] do_syscall_64+0xf3/0x230 [ 1229.038069][T16600] ? clear_bhb_loop+0x35/0x90 [ 1229.042869][T16600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.048816][T16600] RIP: 0033:0x7fbaa3f7d2ff [ 1229.053260][T16600] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 1229.072908][T16600] RSP: 002b:00007fbaa4cf2030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1229.081375][T16600] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbaa3f7d2ff [ 1229.089383][T16600] RDX: 0000000000000001 RSI: 00007fbaa4cf20a0 RDI: 0000000000000004 [ 1229.097393][T16600] RBP: 00007fbaa4cf2090 R08: 0000000000000000 R09: 0000000000000000 [ 1229.105404][T16600] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1229.113409][T16600] R13: 0000000000000000 R14: 00007fbaa4135fa0 R15: 00007ffce22e0bd8 [ 1229.121518][T16600] [ 1229.175739][T16603] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2790'. [ 1229.808112][T16612] overlayfs: failed to resolve './file0': -2 [ 1230.291412][ T30] audit: type=1326 audit(1732635653.088:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16606 comm="syz.4.2793" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3e37d7e819 code=0x0 [ 1230.944750][T16617] fuse: Bad value for 'fd' [ 1233.252233][T16648] netlink: 209836 bytes leftover after parsing attributes in process `syz.8.2805'. [ 1233.913358][T16655] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1233.962595][T16655] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2806'. [ 1235.538522][T16675] Cannot find del_set index 2 as target [ 1237.500076][T16696] vlan1: entered promiscuous mode [ 1237.742488][T16696] netlink: 'syz.2.2820': attribute type 4 has an invalid length. [ 1237.755046][T16696] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2820'. [ 1238.047303][T16695] vlan1: left promiscuous mode [ 1238.383525][T16710] fuse: Bad value for 'group_id' [ 1238.395560][T16710] fuse: Bad value for 'group_id' [ 1238.898527][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.908359][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1241.001991][T16743] netlink: 'syz.8.2829': attribute type 11 has an invalid length. [ 1241.010011][T16743] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2829'. [ 1241.955937][ T5893] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1242.234111][ T5893] usb 2-1: Using ep0 maxpacket: 8 [ 1243.005387][ T5893] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1243.014014][ T5893] usb 2-1: config 179 has no interface number 0 [ 1243.020724][ T5893] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1243.032075][ T5893] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1243.056882][ T5893] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1243.085800][ T5893] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1243.111976][ T5893] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1243.158359][ T5893] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1243.175328][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.198069][T16739] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1243.488407][ T5893] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input38 [ 1244.151219][T16759] netlink: 'syz.8.2838': attribute type 4 has an invalid length. [ 1244.201756][T16760] netlink: 'syz.8.2838': attribute type 4 has an invalid length. [ 1246.226782][ T5893] usb 2-1: USB disconnect, device number 9 [ 1246.226851][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1246.226902][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1247.127863][ T5893] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 1247.303594][T16783] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2844'. [ 1249.039973][ T30] audit: type=1326 audit(1732635671.818:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16794 comm="syz.2.2847" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f153917e819 code=0x0 [ 1250.020603][T16811] FAULT_INJECTION: forcing a failure. [ 1250.020603][T16811] name failslab, interval 1, probability 0, space 0, times 0 [ 1250.045261][T16809] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2852'. [ 1250.178029][T16811] CPU: 0 UID: 0 PID: 16811 Comm: syz.8.2851 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 1250.188515][T16811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1250.198610][T16811] Call Trace: [ 1250.201928][T16811] [ 1250.204895][T16811] dump_stack_lvl+0x241/0x360 [ 1250.209636][T16811] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1250.214885][T16811] ? __pfx__printk+0x10/0x10 [ 1250.219623][T16811] ? __kmalloc_cache_noprof+0x48/0x390 [ 1250.225139][T16811] ? __pfx___might_resched+0x10/0x10 [ 1250.230487][T16811] should_fail_ex+0x3b0/0x4e0 [ 1250.235220][T16811] should_failslab+0xac/0x100 [ 1250.239946][T16811] __kmalloc_cache_noprof+0x70/0x390 [ 1250.245275][T16811] ? alloc_netdev_mqs+0xbc6/0x1080 [ 1250.250429][T16811] ? __xdp_rxq_info_reg+0x142/0x290 [ 1250.255676][T16811] alloc_netdev_mqs+0xbc6/0x1080 [ 1250.260661][T16811] vti6_locate+0x580/0x780 [ 1250.265122][T16811] ? __might_fault+0xaa/0x120 [ 1250.269882][T16811] ? __pfx_vti6_locate+0x10/0x10 [ 1250.274869][T16811] ? __might_fault+0xc6/0x120 [ 1250.279593][T16811] ? vti6_siocdevprivate+0x908/0x1300 [ 1250.285015][T16811] vti6_siocdevprivate+0x92e/0x1300 [ 1250.290267][T16811] ? __pfx_vti6_siocdevprivate+0x10/0x10 [ 1250.295928][T16811] ? trace_contention_end+0x3c/0x120 [ 1250.301239][T16811] ? full_name_hash+0xb1/0xe0 [ 1250.305946][T16811] dev_ifsioc+0xaec/0xe70 [ 1250.310294][T16811] ? __pfx_dev_ifsioc+0x10/0x10 [ 1250.315161][T16811] ? dev_load+0x21/0x1f0 [ 1250.319423][T16811] dev_ioctl+0x881/0x1340 [ 1250.323770][T16811] sock_ioctl+0x7ef/0x8e0 [ 1250.328119][T16811] ? __pfx_sock_ioctl+0x10/0x10 [ 1250.332998][T16811] ? __pfx_sock_ioctl+0x10/0x10 [ 1250.337867][T16811] __se_sys_ioctl+0xf5/0x170 [ 1250.342491][T16811] do_syscall_64+0xf3/0x230 [ 1250.347021][T16811] ? clear_bhb_loop+0x35/0x90 [ 1250.351710][T16811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.357623][T16811] RIP: 0033:0x7fbaa3f7e819 [ 1250.362046][T16811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1250.381665][T16811] RSP: 002b:00007fbaa4cf2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1250.390098][T16811] RAX: ffffffffffffffda RBX: 00007fbaa4135fa0 RCX: 00007fbaa3f7e819 [ 1250.398092][T16811] RDX: 0000000020000300 RSI: 00000000000089f1 RDI: 0000000000000003 [ 1250.406107][T16811] RBP: 00007fbaa4cf2090 R08: 0000000000000000 R09: 0000000000000000 [ 1250.414090][T16811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1250.422070][T16811] R13: 0000000000000000 R14: 00007fbaa4135fa0 R15: 00007ffce22e0bd8 [ 1250.430070][T16811] [ 1250.446683][T16809] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2852'. [ 1250.456103][T16809] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 1250.705860][T16822] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1252.498868][T16835] overlay: Unknown parameter 'uid' [ 1252.835922][T16830] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1252.853058][T16830] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1252.873228][T16830] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1252.893421][T16830] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1252.923984][T16830] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1253.188588][T10371] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1253.365860][T10371] usb 2-1: Using ep0 maxpacket: 32 [ 1253.383807][T10371] usb 2-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 1253.404641][T10371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.435946][T10371] usb 2-1: config 0 descriptor?? [ 1253.460000][T10371] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 1253.536052][T14188] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1253.751259][T16851] x_tables: duplicate underflow at hook 1 [ 1253.791351][T14188] usb 9-1: Using ep0 maxpacket: 32 [ 1253.818801][T14188] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1253.828594][T14188] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.846824][T14188] usb 9-1: Product: syz [ 1253.853961][T14188] usb 9-1: Manufacturer: syz [ 1253.863160][T14188] usb 9-1: SerialNumber: syz [ 1253.890191][T14188] usb 9-1: config 0 descriptor?? [ 1253.935757][T14188] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1254.197977][T13918] Bluetooth: hci5: command 0x0419 tx timeout [ 1254.265729][T16282] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1254.283536][T10371] gspca_sunplus: reg_w_riv err -110 [ 1254.293054][T10371] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 1254.426217][T16282] usb 5-1: device descriptor read/64, error -71 [ 1254.650856][ T47] usb 9-1: USB disconnect, device number 21 [ 1254.665808][T10808] usb 9-1: Failed to submit usb control message: -71 [ 1254.673501][T10808] usb 9-1: unable to send the bmi data to the device: -71 [ 1254.681617][T16282] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1254.691534][T10808] usb 9-1: unable to get target info from device [ 1254.891872][T10808] usb 9-1: could not get target info (-71) [ 1254.898775][T10808] usb 9-1: could not probe fw (-71) [ 1254.907604][T13918] Bluetooth: hci4: command 0x0c1a tx timeout [ 1254.908686][ T5851] Bluetooth: hci1: command 0x0405 tx timeout [ 1254.914156][ T5846] Bluetooth: hci3: command 0x0405 tx timeout [ 1254.935577][T16282] usb 5-1: device descriptor read/64, error -71 [ 1254.975708][T13918] Bluetooth: hci6: command 0x0419 tx timeout [ 1255.055981][T16282] usb usb5-port1: attempt power cycle [ 1255.396161][T16879] binder: BINDER_SET_CONTEXT_MGR already set [ 1255.402866][T16879] binder: 16876:16879 ioctl 4018620d 20000380 returned -16 [ 1255.605889][T16282] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1255.638906][T16282] usb 5-1: device descriptor read/8, error -71 [ 1255.915905][T16282] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1256.068012][T16282] usb 5-1: device descriptor read/8, error -71 [ 1256.159495][ T47] usb 2-1: USB disconnect, device number 10 [ 1256.245369][T16282] usb usb5-port1: unable to enumerate USB device [ 1256.608923][T16887] Cannot find del_set index 2 as target [ 1257.145875][T12300] Bluetooth: hci6: command 0x0419 tx timeout [ 1258.028343][T16905] tmpfs: Bad value for 'mpol' [ 1258.125047][T16905] nvme_fabrics: missing parameter 'transport=%s' [ 1258.142069][T16905] nvme_fabrics: missing parameter 'nqn=%s' [ 1258.186308][T16911] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2880'. [ 1258.512984][T16918] FAULT_INJECTION: forcing a failure. [ 1258.512984][T16918] name failslab, interval 1, probability 0, space 0, times 0 [ 1258.532203][T16918] CPU: 0 UID: 0 PID: 16918 Comm: syz.5.2882 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 1258.542678][T16918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1258.552768][T16918] Call Trace: [ 1258.556072][T16918] [ 1258.559031][T16918] dump_stack_lvl+0x241/0x360 [ 1258.563760][T16918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1258.569012][T16918] ? __pfx__printk+0x10/0x10 [ 1258.573653][T16918] ? __kmalloc_noprof+0xb5/0x4c0 [ 1258.578639][T16918] ? __pfx___might_resched+0x10/0x10 [ 1258.583975][T16918] should_fail_ex+0x3b0/0x4e0 [ 1258.588700][T16918] should_failslab+0xac/0x100 [ 1258.593501][T16918] __kmalloc_noprof+0xdd/0x4c0 [ 1258.598300][T16918] ? kernfs_fop_write_iter+0x15a/0x500 [ 1258.603889][T16918] kernfs_fop_write_iter+0x15a/0x500 [ 1258.609221][T16918] vfs_write+0xaeb/0xd30 [ 1258.613516][T16918] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1258.619367][T16918] ? __pfx_vfs_write+0x10/0x10 [ 1258.624178][T16918] ? __fget_files+0x2a/0x410 [ 1258.628814][T16918] ? __fget_files+0x2a/0x410 [ 1258.633450][T16918] ksys_write+0x18f/0x2b0 [ 1258.637845][T16918] ? __pfx_ksys_write+0x10/0x10 [ 1258.642740][T16918] ? do_syscall_64+0x100/0x230 [ 1258.647551][T16918] ? do_syscall_64+0xb6/0x230 [ 1258.652279][T16918] do_syscall_64+0xf3/0x230 [ 1258.656824][T16918] ? clear_bhb_loop+0x35/0x90 [ 1258.661533][T16918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.667468][T16918] RIP: 0033:0x7f1791f7e819 [ 1258.671915][T16918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1258.691565][T16918] RSP: 002b:00007f1792e2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1258.700037][T16918] RAX: ffffffffffffffda RBX: 00007f1792135fa0 RCX: 00007f1791f7e819 [ 1258.708045][T16918] RDX: 0000000000000012 RSI: 00000000200005c0 RDI: 0000000000000006 [ 1258.716052][T16918] RBP: 00007f1792e2d090 R08: 0000000000000000 R09: 0000000000000000 [ 1258.724060][T16918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1258.732178][T16918] R13: 0000000000000000 R14: 00007f1792135fa0 R15: 00007fff77d61288 [ 1258.740211][T16918] [ 1260.374996][T16920] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1261.361446][T16943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2886'. [ 1262.689291][T16939] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1262.731084][T16939] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1262.776610][T16939] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1262.814376][T16939] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1262.860104][T16939] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1263.782896][T16964] fuse: Bad value for 'user_id' [ 1263.794311][T16964] fuse: Bad value for 'user_id' [ 1263.810269][T16964] IPVS: Error connecting to the multicast addr [ 1264.515773][T12300] Bluetooth: hci5: command 0x0419 tx timeout [ 1264.551493][ T30] audit: type=1326 audit(1732635687.408:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16980 comm="syz.2.2898" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f153917e819 code=0x0 [ 1264.735672][T12300] Bluetooth: hci3: command 0x0405 tx timeout [ 1264.815592][T12300] Bluetooth: hci4: command 0x0c1a tx timeout [ 1264.822627][T12300] Bluetooth: hci1: command 0x0405 tx timeout [ 1264.916858][T12300] Bluetooth: hci6: command 0x0419 tx timeout [ 1265.245761][T16993] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1265.252290][T16993] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1265.282631][T16993] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1265.303467][T16993] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1265.313323][T16993] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1265.422273][T17008] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2903'. [ 1267.301005][ T5846] Bluetooth: hci1: command 0x0405 tx timeout [ 1267.307415][ T5846] Bluetooth: hci3: command 0x0405 tx timeout [ 1267.314844][ T5846] Bluetooth: hci5: command 0x0419 tx timeout [ 1267.383046][ T5846] Bluetooth: hci6: command 0x0419 tx timeout [ 1267.389430][T13918] Bluetooth: hci4: command 0x0c1a tx timeout [ 1267.873621][T17014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2905'. [ 1270.377249][T17022] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2907'. [ 1270.720822][T17040] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2911'. [ 1271.924260][ T30] audit: type=1326 audit(1732635694.768:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17050 comm="syz.5.2915" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1791f7e819 code=0x0 [ 1272.150968][T17055] batman_adv: batadv0: Adding interface: gretap1 [ 1272.161612][T17055] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1272.187959][T17055] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1272.435358][T17067] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 1272.444631][T10371] IPVS: starting estimator thread 0... [ 1273.164999][T17072] IPVS: using max 21 ests per chain, 50400 per kthread [ 1273.197234][T17076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2920'. [ 1273.257628][T17075] Process accounting resumed [ 1273.264358][T17075] kernel write not supported for file /178/clear_refs (pid: 17075 comm: syz.4.2922) [ 1273.582966][T17086] FAULT_INJECTION: forcing a failure. [ 1273.582966][T17086] name failslab, interval 1, probability 0, space 0, times 0 [ 1273.595925][T17086] CPU: 0 UID: 0 PID: 17086 Comm: syz.2.2926 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 1273.606394][T17086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1273.616517][T17086] Call Trace: [ 1273.619833][T17086] [ 1273.622772][T17086] dump_stack_lvl+0x241/0x360 [ 1273.627483][T17086] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1273.632715][T17086] ? __pfx__printk+0x10/0x10 [ 1273.637323][T17086] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 1273.643325][T17086] ? __pfx___might_resched+0x10/0x10 [ 1273.648630][T17086] ? stack_depot_save_flags+0x29/0x830 [ 1273.654111][T17086] should_fail_ex+0x3b0/0x4e0 [ 1273.658847][T17086] should_failslab+0xac/0x100 [ 1273.663586][T17086] kmem_cache_alloc_node_noprof+0x77/0x380 [ 1273.669408][T17086] ? __alloc_skb+0x1c3/0x440 [ 1273.674029][T17086] __alloc_skb+0x1c3/0x440 [ 1273.678474][T17086] ? __pfx___alloc_skb+0x10/0x10 [ 1273.683434][T17086] cfg80211_del_sta_sinfo+0x1a5/0x510 [ 1273.688830][T17086] ? __pfx_cfg80211_del_sta_sinfo+0x10/0x10 [ 1273.694810][T17086] __sta_info_destroy_part2+0x34e/0x450 [ 1273.700374][T17086] __sta_info_flush+0x5d0/0x700 [ 1273.705246][T17086] ? __pfx___sta_info_flush+0x10/0x10 [ 1273.710634][T17086] ? __pfx_netdev_run_todo+0x10/0x10 [ 1273.715933][T17086] ieee80211_del_station+0x82/0xb0 [ 1273.721064][T17086] nl80211_del_station+0x5fb/0x900 [ 1273.726196][T17086] ? __pfx_nl80211_del_station+0x10/0x10 [ 1273.731862][T17086] genl_rcv_msg+0xb14/0xec0 [ 1273.736394][T17086] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1273.741450][T17086] ? __pfx_lock_acquire+0x10/0x10 [ 1273.746480][T17086] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1273.751871][T17086] ? __pfx_nl80211_del_station+0x10/0x10 [ 1273.757528][T17086] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1273.763007][T17086] ? __pfx___might_resched+0x10/0x10 [ 1273.768344][T17086] netlink_rcv_skb+0x1e3/0x430 [ 1273.773143][T17086] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1273.778208][T17086] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1273.783534][T17086] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 1273.789035][T17086] genl_rcv+0x28/0x40 [ 1273.793037][T17086] netlink_unicast+0x7f6/0x990 [ 1273.797838][T17086] ? __pfx_netlink_unicast+0x10/0x10 [ 1273.803147][T17086] ? __virt_addr_valid+0x183/0x530 [ 1273.808281][T17086] ? __check_object_size+0x48e/0x900 [ 1273.813583][T17086] netlink_sendmsg+0x8e4/0xcb0 [ 1273.818416][T17086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1273.823728][T17086] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1273.829069][T17086] __sock_sendmsg+0x221/0x270 [ 1273.833777][T17086] ____sys_sendmsg+0x52a/0x7e0 [ 1273.838565][T17086] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1273.843868][T17086] ? __fget_files+0x2a/0x410 [ 1273.848518][T17086] ? __fget_files+0x2a/0x410 [ 1273.853157][T17086] __sys_sendmsg+0x269/0x350 [ 1273.857774][T17086] ? __pfx_lock_release+0x10/0x10 [ 1273.862826][T17086] ? __pfx___sys_sendmsg+0x10/0x10 [ 1273.867955][T17086] ? __pfx_vfs_write+0x10/0x10 [ 1273.872763][T17086] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1273.879122][T17086] ? do_syscall_64+0x100/0x230 [ 1273.884014][T17086] ? do_syscall_64+0xb6/0x230 [ 1273.888718][T17086] do_syscall_64+0xf3/0x230 [ 1273.893256][T17086] ? clear_bhb_loop+0x35/0x90 [ 1273.897948][T17086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.903875][T17086] RIP: 0033:0x7f153917e819 [ 1273.908335][T17086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1273.928043][T17086] RSP: 002b:00007f1539f6c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1273.936498][T17086] RAX: ffffffffffffffda RBX: 00007f1539335fa0 RCX: 00007f153917e819 [ 1273.944479][T17086] RDX: 0000000000000000 RSI: 0000000020002240 RDI: 0000000000000004 [ 1273.952457][T17086] RBP: 00007f1539f6c090 R08: 0000000000000000 R09: 0000000000000000 [ 1273.960443][T17086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1273.968426][T17086] R13: 0000000000000000 R14: 00007f1539335fa0 R15: 00007ffd85663298 [ 1273.976424][T17086] [ 1276.732806][T17115] netlink: 88 bytes leftover after parsing attributes in process `syz.5.2933'. [ 1276.844988][T17121] netlink: 'syz.8.2935': attribute type 46 has an invalid length. [ 1276.900132][ T30] audit: type=1326 audit(1732635699.738:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17118 comm="syz.1.2934" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38be77e819 code=0x0 [ 1277.284357][T17128] No control pipe specified [ 1277.385578][ T5893] usb 9-1: new low-speed USB device number 22 using dummy_hcd [ 1277.654504][ T5893] usb 9-1: device descriptor read/64, error -71 [ 1279.245662][ T5893] usb 9-1: new low-speed USB device number 23 using dummy_hcd [ 1279.625629][ T5893] usb 9-1: device descriptor read/64, error -71 [ 1279.735968][ T5893] usb usb9-port1: attempt power cycle [ 1280.233587][T17149] sp0: Synchronizing with TNC [ 1280.772925][T17162] nfs: Unknown parameter '/dev/fuse' [ 1281.587679][T17169] fuse: Unknown parameter '' [ 1281.594340][ T30] audit: type=1326 audit(1732635704.438:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17168 comm="syz.8.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa3f7e819 code=0x7ffc0000 [ 1281.657020][T17169] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2948'. [ 1281.776790][ T30] audit: type=1326 audit(1732635704.438:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17168 comm="syz.8.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa3f7e819 code=0x7ffc0000 [ 1281.776838][ T30] audit: type=1326 audit(1732635704.438:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17168 comm="syz.8.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fbaa3f7e819 code=0x7ffc0000 [ 1281.776875][ T30] audit: type=1326 audit(1732635704.438:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17168 comm="syz.8.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa3f7e819 code=0x7ffc0000 [ 1281.776912][ T30] audit: type=1326 audit(1732635704.438:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17168 comm="syz.8.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa3f7e819 code=0x7ffc0000 [ 1281.776947][ T30] audit: type=1326 audit(1732635704.448:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17168 comm="syz.8.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fbaa3f7e819 code=0x7ffc0000 [ 1281.776984][ T30] audit: type=1326 audit(1732635704.448:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17168 comm="syz.8.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa3f7e819 code=0x7ffc0000 [ 1281.777020][ T30] audit: type=1326 audit(1732635704.448:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17168 comm="syz.8.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbaa3f7e819 code=0x7ffc0000 [ 1281.777056][ T30] audit: type=1326 audit(1732635704.448:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17168 comm="syz.8.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbaa3f7e819 code=0x7ffc0000 [ 1281.777091][ T30] audit: type=1326 audit(1732635704.448:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17168 comm="syz.8.2948" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fbaa3f7e819 code=0x7ffc0000 [ 1282.981546][T17166] tty tty24: ldisc open failed (-12), clearing slot 23 [ 1284.380859][T17200] Cannot find del_set index 2 as target [ 1284.997846][T17209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2958'. [ 1286.450687][T17210] fuse: Bad value for 'group_id' [ 1286.465794][T17210] fuse: Bad value for 'group_id' [ 1286.546719][T17210] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2960'. [ 1287.692259][T17221] netlink: 'syz.8.2964': attribute type 1 has an invalid length. [ 1287.729104][T17221] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2964'. [ 1288.312856][T10371] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1288.976115][ T30] kauditd_printk_skb: 99 callbacks suppressed [ 1288.976137][ T30] audit: type=1326 audit(1732635711.178:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17229 comm="syz.2.2967" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f153917e819 code=0x0 [ 1289.109536][ T5846] Bluetooth: hci4: hardware error 0x20 [ 1289.347066][T10371] usb 2-1: config 0 has no interfaces? [ 1289.352640][T10371] usb 2-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 1289.362874][T10371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.452125][T17248] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2968'. [ 1290.234528][T10371] usb 2-1: config 0 descriptor?? [ 1290.865657][T17252] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2972'. [ 1290.876609][T17254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2971'. [ 1290.990751][ T47] usb 2-1: USB disconnect, device number 11 [ 1291.135854][ T5846] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1291.465835][T17268] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2977'. [ 1291.661013][T17268] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1291.721783][T17272] macsec2: entered promiscuous mode [ 1291.737782][T17272] bond1: entered promiscuous mode [ 1291.753233][T17272] macsec2: entered allmulticast mode [ 1291.769117][T17272] bond1: entered allmulticast mode [ 1292.542914][T17285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2981'. [ 1292.574624][T17282] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.2980' sets config #1 [ 1295.583691][T17299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2985'. [ 1296.093988][T17305] usb usb1: usbfs: interface 0 claimed by hub while 'syz.5.2987' sets config #1 [ 1296.805762][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1296.905652][ T5893] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1296.992952][T17318] lo speed is unknown, defaulting to 1000 [ 1297.000949][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1297.028891][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1297.058817][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.085577][ T5893] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1297.106033][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.117154][ T9] usb 2-1: config 0 descriptor?? [ 1297.136622][ T9] smsusb:smsusb_probe: board id=8, interface number 0 [ 1297.147285][ T5893] usb 5-1: config 0 descriptor?? [ 1297.157502][ T9] smsusb:smsusb_probe: Device initialized with return code -19 [ 1297.166679][ T5893] cp210x 5-1:0.0: cp210x converter detected [ 1297.496255][ T5893] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 1297.511517][ T5893] cp210x 5-1:0.0: querying part number failed [ 1297.541574][ T5893] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1297.593011][ T5893] usb 5-1: USB disconnect, device number 24 [ 1297.646131][ T5893] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1297.671304][ T5893] cp210x 5-1:0.0: device disconnected [ 1298.105715][ T5893] usb 5-1: new low-speed USB device number 25 using dummy_hcd [ 1298.259587][ T5893] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 1298.282603][ T5893] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 1298.301343][ T5893] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1298.329344][ T5893] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1298.353656][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1298.374486][ T5893] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1298.402447][ T5893] usb 5-1: string descriptor 0 read error: -22 [ 1298.417797][ T5893] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1298.441259][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.472271][ T5893] usb 5-1: config 0 descriptor?? [ 1298.489020][ T5893] hub 5-1:0.0: bad descriptor, ignoring hub [ 1298.504477][ T5893] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1298.811369][T10371] usb 2-1: USB disconnect, device number 12 [ 1299.210804][ T47] IPVS: starting estimator thread 0... [ 1299.426481][T17343] IPVS: using max 18 ests per chain, 43200 per kthread [ 1299.573850][T17349] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2997'. [ 1300.182166][ T5893] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1300.448484][T17348] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2998'. [ 1300.506370][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.513077][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.635618][ T5893] usb 2-1: device descriptor read/64, error -71 [ 1300.795997][ T8] usb 5-1: USB disconnect, device number 25 [ 1300.875731][ T5893] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1301.015830][ T5893] usb 2-1: device descriptor read/64, error -71 [ 1301.615299][ T5893] usb usb2-port1: attempt power cycle [ 1301.829256][T17354] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2999'. [ 1301.976792][ T5929] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1302.156418][ T5929] usb 5-1: Using ep0 maxpacket: 8 [ 1302.190196][ T5929] usb 5-1: New USB device found, idVendor=05d1, idProduct=9003, bcdDevice= 2.00 [ 1302.203673][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1302.326610][ T5929] usb 5-1: Product: syz [ 1302.331869][ T5929] usb 5-1: Manufacturer: syz [ 1302.362864][ T5929] usb 5-1: SerialNumber: syz [ 1302.426612][ T5929] usb 5-1: config 0 descriptor?? [ 1302.450457][ T5929] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 1302.467884][ T5929] usb 5-1: Detected FT232A [ 1302.489144][ T5929] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1407.945447][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1407.952470][ C1] rcu: 0-...!: (5 ticks this GP) idle=b90c/1/0x4000000000000000 softirq=71940/71942 fqs=5 [ 1407.964316][ C1] rcu: (detected by 1, t=10505 jiffies, g=69165, q=235 ncpus=2) [ 1407.972082][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1407.972129][ C0] NMI backtrace for cpu 0 [ 1407.972146][ C0] CPU: 0 UID: 0 PID: 17367 Comm: syz.1.3004 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 1407.972168][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1407.972181][ C0] RIP: 0010:mark_lock+0x14d/0x360 [ 1407.972209][ C0] Code: 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 da 09 8c 00 41 bc 01 00 00 00 44 85 33 74 16 44 89 e0 48 83 c4 10 5b 41 5c 41 5d <41> 5e 41 5f 5d c3 cc cc cc cc e8 c4 34 ff ff 85 c0 0f 84 3d 01 00 [ 1407.972225][ C0] RSP: 0018:ffffc900000078d0 EFLAGS: 00000086 [ 1407.972243][ C0] RAX: 0000000000000001 RBX: 1ffff11005fc0165 RCX: ffffffff81718f6a [ 1407.972256][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff942e9880 [ 1407.972270][ C0] RBP: 0000000000000000 R08: ffffffff942e9887 R09: 1ffffffff285d310 [ 1407.972283][ C0] R10: dffffc0000000000 R11: fffffbfff285d311 R12: ffff88802fe00ac4 [ 1407.972297][ C0] R13: ffff88802fe00000 R14: 0000000000000001 R15: ffff88802fe00b08 [ 1407.972311][ C0] FS: 00007f38bf5746c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1407.972328][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1407.972341][ C0] CR2: 000000110c381632 CR3: 00000000283d2000 CR4: 00000000003526f0 [ 1407.972357][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1407.972369][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1407.972381][ C0] Call Trace: [ 1407.972390][ C0] [ 1407.972399][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1407.972421][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1407.972442][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1407.972468][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1407.972495][ C0] ? nmi_handle+0x14f/0x5a0 [ 1407.972516][ C0] ? nmi_handle+0x2a/0x5a0 [ 1407.972536][ C0] ? mark_lock+0x14d/0x360 [ 1407.972556][ C0] ? default_do_nmi+0x63/0x160 [ 1407.972575][ C0] ? exc_nmi+0x123/0x1f0 [ 1407.972593][ C0] ? end_repeat_nmi+0xf/0x53 [ 1407.972613][ C0] ? mark_lock+0x9a/0x360 [ 1407.972635][ C0] ? mark_lock+0x14d/0x360 [ 1407.972655][ C0] ? mark_lock+0x14d/0x360 [ 1407.972677][ C0] ? mark_lock+0x14d/0x360 [ 1407.972698][ C0] [ 1407.972704][ C0] [ 1407.972711][ C0] __lock_acquire+0xbc3/0x2100 [ 1407.972738][ C0] lock_acquire+0x1ed/0x550 [ 1407.972756][ C0] ? debug_object_activate+0x17f/0x580 [ 1407.972786][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1407.972804][ C0] ? __lock_acquire+0x1397/0x2100 [ 1407.972832][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 1407.972855][ C0] ? debug_object_activate+0x17f/0x580 [ 1407.972879][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1407.972907][ C0] debug_object_activate+0x17f/0x580 [ 1407.972933][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1407.972959][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 1407.972983][ C0] ? advance_sched+0xa02/0xca0 [ 1407.973004][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 1407.973033][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 1407.973057][ C0] enqueue_hrtimer+0x30/0x3c0 [ 1407.973083][ C0] __hrtimer_run_queues+0x6cb/0xd50 [ 1407.973115][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1407.973138][ C0] ? sched_clock+0x4a/0x70 [ 1407.973163][ C0] ? read_tsc+0x9/0x20 [ 1407.973186][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 1407.973209][ C0] hrtimer_interrupt+0x403/0xa40 [ 1407.973243][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 1407.973266][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1407.973290][ C0] [ 1407.973297][ C0] [ 1407.973304][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1407.973333][ C0] RIP: 0010:lock_is_held_type+0x13b/0x190 [ 1407.973358][ C0] Code: 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 42 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f [ 1407.973372][ C0] RSP: 0018:ffffc9000c1674f8 EFLAGS: 00000206 [ 1407.973389][ C0] RAX: 0e9cdc3846695300 RBX: 0000000000000000 RCX: ffff88802fe00000 [ 1407.973402][ C0] RDX: 0000000000000000 RSI: ffffffff8c0aea80 RDI: ffffffff8c6076a0 [ 1407.973415][ C0] RBP: ffffc9000c167648 R08: ffffffff82182f14 R09: 1ffffffff203a186 [ 1407.973430][ C0] R10: dffffc0000000000 R11: fffffbfff203a187 R12: 0000000000000246 [ 1407.973443][ C0] R13: ffff88802fe00000 R14: 00000000ffffffff R15: ffffffff8e93c580 [ 1407.973472][ C0] ? touch_atime+0x514/0x690 [ 1407.973501][ C0] __might_resched+0xa5/0x780 [ 1407.973529][ C0] ? rcu_read_lock_any_held+0xb7/0x160 [ 1407.973553][ C0] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1407.973577][ C0] ? rcu_is_watching+0x15/0xb0 [ 1407.973599][ C0] ? __pfx___might_resched+0x10/0x10 [ 1407.973624][ C0] ? __mark_inode_dirty+0x3db/0xe90 [ 1407.973647][ C0] ? pick_link+0x42c/0xd50 [ 1407.973667][ C0] ? touch_atime+0x521/0x690 [ 1407.973692][ C0] pick_link+0x43f/0xd50 [ 1407.973715][ C0] step_into+0xca9/0x1080 [ 1407.973739][ C0] ? __d_lookup+0x706/0x7b0 [ 1407.973764][ C0] ? __pfx_step_into+0x10/0x10 [ 1407.973786][ C0] ? lookup_fast+0xb5/0x4a0 [ 1407.973805][ C0] ? bpf_lsm_inode_permission+0x9/0x10 [ 1407.973828][ C0] ? security_inode_permission+0xbc/0x320 [ 1407.973855][ C0] link_path_walk+0x7b7/0xea0 [ 1407.973882][ C0] path_openat+0x266/0x3590 [ 1407.973910][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1407.973944][ C0] ? __pfx_path_openat+0x10/0x10 [ 1407.973976][ C0] do_filp_open+0x27f/0x4e0 [ 1407.974001][ C0] ? __pfx_do_filp_open+0x10/0x10 [ 1407.974029][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 1407.974070][ C0] do_sys_openat2+0x13e/0x1d0 [ 1407.974091][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 1407.974117][ C0] __x64_sys_openat+0x247/0x2a0 [ 1407.974139][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 1407.974161][ C0] ? do_syscall_64+0x100/0x230 [ 1407.974186][ C0] ? do_syscall_64+0xb6/0x230 [ 1407.974211][ C0] do_syscall_64+0xf3/0x230 [ 1407.974234][ C0] ? clear_bhb_loop+0x35/0x90 [ 1407.974251][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.974277][ C0] RIP: 0033:0x7f38be77d1b0 [ 1407.974293][ C0] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 1407.974308][ C0] RSP: 002b:00007f38bf573f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1407.974326][ C0] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f38be77d1b0 [ 1407.974339][ C0] RDX: 0000000000000002 RSI: 00007f38bf573fa0 RDI: 00000000ffffff9c [ 1407.974351][ C0] RBP: 00007f38bf573fa0 R08: 0000000000000000 R09: 00007f38bf573cd5 [ 1407.974364][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1407.974375][ C0] R13: 0000000000000000 R14: 00007f38be936080 R15: 00007ffce7c13d58 [ 1407.974395][ C0] [ 1407.975118][ C1] rcu: rcu_preempt kthread starved for 10480 jiffies! g69165 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1408.639032][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1408.649019][ C1] rcu: RCU grace-period kthread stack dump: [ 1408.654919][ C1] task:rcu_preempt state:R running task stack:25976 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1408.666699][ C1] Call Trace: [ 1408.670000][ C1] [ 1408.672962][ C1] __schedule+0x17fb/0x4be0 [ 1408.677535][ C1] ? __pfx___schedule+0x10/0x10 [ 1408.682419][ C1] ? __pfx_lock_release+0x10/0x10 [ 1408.687478][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1408.693831][ C1] ? schedule+0x90/0x320 [ 1408.698101][ C1] schedule+0x14b/0x320 [ 1408.702291][ C1] schedule_timeout+0x15a/0x290 [ 1408.707171][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1408.712593][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1408.717919][ C1] ? prepare_to_swait_event+0x330/0x350 [ 1408.723493][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 1408.728370][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1408.733604][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1408.739788][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1408.745100][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1408.751041][ C1] ? finish_swait+0xd4/0x1e0 [ 1408.755657][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 1408.760276][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1408.765501][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1408.771428][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1408.776479][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1408.781705][ C1] kthread+0x2f0/0x390 [ 1408.785796][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1408.791038][ C1] ? __pfx_kthread+0x10/0x10 [ 1408.795662][ C1] ret_from_fork+0x4b/0x80 [ 1408.800094][ C1] ? __pfx_kthread+0x10/0x10 [ 1408.804721][ C1] ret_from_fork_asm+0x1a/0x30 [ 1408.809526][ C1] [ 1408.812562][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1408.818900][ C1] CPU: 1 UID: 0 PID: 17370 Comm: syz.8.3005 Not tainted 6.12.0-syzkaller-09435-g2c22dc1ee3a1 #0 [ 1408.829331][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1408.839409][ C1] RIP: 0010:smp_call_function_many_cond+0x1a04/0x2ca0 [ 1408.846208][ C1] Code: 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 e1 e5 0b 00 eb 38 f3 90 42 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 <74> 1e e8 c5 e5 0b 00 eb e4 44 89 e9 80 e1 07 80 c1 03 38 c1 7c e2 [ 1408.865857][ C1] RSP: 0018:ffffc9000c297960 EFLAGS: 00000202 [ 1408.871965][ C1] RAX: 0000000000000000 RBX: 1ffff110170c8c65 RCX: 0000000000080000 [ 1408.880108][ C1] RDX: ffffc9000de89000 RSI: 000000000007ffff RDI: 0000000000080000 [ 1408.888112][ C1] RBP: ffffc9000c297b60 R08: ffffffff8189f6da R09: 1ffffffff285d310 [ 1408.896112][ C1] R10: dffffc0000000000 R11: fffffbfff285d311 R12: dffffc0000000000 [ 1408.904109][ C1] R13: ffff8880b8646328 R14: ffff8880b873f940 R15: 0000000000000000 [ 1408.912101][ C1] FS: 00007fbaa4cf26c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1408.921078][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1408.927682][ C1] CR2: 0000001b3031fffc CR3: 0000000033554000 CR4: 00000000003526f0 [ 1408.935678][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1408.943671][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1408.951664][ C1] Call Trace: [ 1408.954967][ C1] [ 1408.957838][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 1408.964210][ C1] ? print_other_cpu_stall+0x1481/0x15c0 [ 1408.969891][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 1408.975727][ C1] ? cgroup_rstat_updated+0x13b/0xc60 [ 1408.981161][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 1408.987475][ C1] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 1408.992917][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1408.998599][ C1] ? update_process_times+0x242/0x2f0 [ 1409.004062][ C1] ? tick_nohz_handler+0x37c/0x500 [ 1409.009227][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1409.014734][ C1] ? __hrtimer_run_queues+0x551/0xd50 [ 1409.020163][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1409.025913][ C1] ? sched_clock+0x4a/0x70 [ 1409.030369][ C1] ? read_tsc+0x9/0x20 [ 1409.034468][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 1409.040569][ C1] ? hrtimer_interrupt+0x403/0xa40 [ 1409.045742][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 1409.051927][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1409.057759][ C1] [ 1409.060709][ C1] [ 1409.063660][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1409.069859][ C1] ? smp_call_function_many_cond+0x19da/0x2ca0 [ 1409.076048][ C1] ? smp_call_function_many_cond+0x1a04/0x2ca0 [ 1409.082242][ C1] ? kcm_parse_func_strparser+0x5a/0x170 [ 1409.087900][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1409.092965][ C1] ? __pfx___text_poke+0x10/0x10 [ 1409.097936][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1409.104292][ C1] ? __pfx___might_resched+0x10/0x10 [ 1409.109629][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1409.115557][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1409.120611][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 1409.125757][ C1] text_poke_bp_batch+0x352/0xb30 [ 1409.130817][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1409.136836][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 1409.143026][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 1409.148611][ C1] ? arch_jump_label_transform_queue+0x9b/0x100 [ 1409.154901][ C1] text_poke_finish+0x30/0x50 [ 1409.159608][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1409.165618][ C1] static_key_slow_inc_cpuslocked+0x80/0xf0 [ 1409.171541][ C1] static_key_slow_inc+0x1a/0x30 [ 1409.176508][ C1] bpf_enable_stats+0xfe/0x140 [ 1409.181297][ C1] __sys_bpf+0x75b/0x810 [ 1409.185563][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 1409.190362][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1409.196377][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1409.202738][ C1] ? do_syscall_64+0x100/0x230 [ 1409.207541][ C1] __x64_sys_bpf+0x7c/0x90 [ 1409.211991][ C1] do_syscall_64+0xf3/0x230 [ 1409.216526][ C1] ? clear_bhb_loop+0x35/0x90 [ 1409.221234][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1409.227157][ C1] RIP: 0033:0x7fbaa3f7e819 [ 1409.231598][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1409.251232][ C1] RSP: 002b:00007fbaa4cf2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1409.259673][ C1] RAX: ffffffffffffffda RBX: 00007fbaa4135fa0 RCX: 00007fbaa3f7e819 [ 1409.267662][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000020 [ 1409.275664][ C1] RBP: 00007fbaa3ff175e R08: 0000000000000000 R09: 0000000000000000 [ 1409.283649][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1409.291641][ C1] R13: 0000000000000000 R14: 00007fbaa4135fa0 R15: 00007ffce22e0bd8 [ 1409.299671][ C1]