last executing test programs: 20m39.27549706s ago: executing program 32 (id=1563): socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYRESDEC=0x0], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x24000000) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x410000002) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000180), &(0x7f0000000340)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4affeeaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r7, @ANYRES32=r7], 0x44}}, 0x0) connect$ax25(r4, &(0x7f0000000400)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) 14m52.662166704s ago: executing program 33 (id=2514): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, 0x0, 0x20000, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2c, r3, 0x1, 0x0, 0x0, {0x1e}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) sendmmsg$inet(r1, &(0x7f0000000d00)=[{{&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{&(0x7f0000001c00)='{', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{0x0}], 0x1}}, {{&(0x7f0000000400)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000c00)=[{&(0x7f0000000540)="9f18fc86", 0x4}], 0x1}}], 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, 0x0, 0x0) read$msr(r0, &(0x7f0000000280)=""/247, 0xf7) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) 12m52.013749369s ago: executing program 3 (id=2834): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x98) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r4 = add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='X', 0x5d, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4}, &(0x7f0000000180)=""/82, 0x52, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_BUS_LOCK_EXIT(r5, 0x4068aea3, &(0x7f0000000080)={0xc1, 0x0, 0x2}) (async) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) (async) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0xffff, @private=0xa010101}, 0x10, 0x0}, 0x0) 12m51.284433134s ago: executing program 3 (id=2835): socket$phonet_pipe(0x23, 0x5, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$TIOCL_UNBLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @loopback}], 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {}, [{0x2, 0x1}], {0x4, 0x0, 0x8000000}}, 0x2c, 0x0) 12m49.026802788s ago: executing program 3 (id=2840): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket(0x27, 0x5, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000001000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, 0x0}], 0x1, 0x5c, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f322e0f01cf66b9ab0900000f32f2f031b3e759dc2c", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12m48.337985041s ago: executing program 3 (id=2844): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x86) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x4}) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x400000, 0x3, 0x2}) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$USBDEVFS_CONTROL(r3, 0x4004550c, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x60000009, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x3, 0xc, 0xfeff, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfeff}) 12m48.006017319s ago: executing program 3 (id=2846): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bd160f4086801001adbf000000010902120001000000002b04000000a0122400"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x4000010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) chdir(&(0x7f0000000000)='./file0\x00') recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x77359400}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r5, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) recvfrom$inet6(r5, 0x0, 0x1000000, 0x0, 0x0, 0x0) 12m46.567205819s ago: executing program 3 (id=2849): r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x207, 0x161a81) r1 = memfd_create(&(0x7f0000000840)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdc\xc0*rw[\r\x98\xf6\xd3\xbf\xa1\xcf\x8e\xc2\x8c\f\xee}g\xfe\xae\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\x01\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x1f\x88Z0\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdf\x00\x10\x00\x00\x00\x00\x00\x00\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r1, 0x3b87, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r3, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r2, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, 0xffffffffffffffff, 0x0, 0x10000, 0x0, 0x10000, 0x0, 0xbddcb}) close_range(r0, 0xffffffffffffffff, 0xfe) 12m23.019120564s ago: executing program 5 (id=2916): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000030000000003000000030000000000000000000000000000010500002020000000000000000000000300000000020000000200000020"], 0x0, 0x5a, 0x0, 0x0, 0xfffffffe, 0x0, @void, @value}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') preadv(r0, &(0x7f0000000300)=[{0x0}], 0x1, 0x0, 0x0) r1 = getpid() landlock_create_ruleset(&(0x7f00000000c0)={0x210, 0x3, 0x1}, 0x18, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x100, 0xff) sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000002c0)={'geneve0\x00', @local}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$sock_int(r3, 0x1, 0x1d, &(0x7f0000000100)=0x2, 0x4) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$inet(0x2, 0x800, 0xfffffffe) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000900, 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000400)={{{@in=@local, @in=@private=0xa010101, 0x4e21, 0x7, 0x4e20, 0xc, 0xa, 0x40, 0xb0, 0x87, 0x0, 0xee01}, {0x4, 0x4, 0xa00000000, 0x8, 0x5, 0x8000, 0x47, 0x1}, {0x2, 0x6ca, 0x8, 0x20000da}, 0x7fff, 0x6e6bb0, 0x1, 0x0, 0x1, 0x2}, {{@in=@local, 0x4d6, 0xff}, 0x2, @in=@empty, 0x3500, 0x4, 0x1, 0x69, 0x7ffc, 0x1, 0x81}}, 0xe8) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) gettid() 12m17.71588286s ago: executing program 5 (id=2931): openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x147c40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x48, 0x14, 0x1, 0x3000000, 0x0, {0xa, 0x88}, [@INET_DIAG_REQ_BYTECODE={0x31, 0x1, "69d8cef310226f8be0d20c4af369fdd72faa666e4be0d1ba504a7986007e8ac0a88a4987a98a15b98680ec0c97"}]}, 0x48}}, 0x0) r5 = getpgid(0x0) tkill(r5, 0x40) preadv2(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 12m1.162331678s ago: executing program 35 (id=2931): openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x147c40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x48, 0x14, 0x1, 0x3000000, 0x0, {0xa, 0x88}, [@INET_DIAG_REQ_BYTECODE={0x31, 0x1, "69d8cef310226f8be0d20c4af369fdd72faa666e4be0d1ba504a7986007e8ac0a88a4987a98a15b98680ec0c97"}]}, 0x48}}, 0x0) r5 = getpgid(0x0) tkill(r5, 0x40) preadv2(r0, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 5m33.649898258s ago: executing program 7 (id=3927): chdir(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x16d902, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0xa6, &(0x7f0000000480)={0x0, 0x0, 0x1, 0x0, 0x335}, &(0x7f00000000c0)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000280)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd=r1, 0x3, 0x0, 0x0, 0x0, 0x0, {0x3}}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) 5m28.892494775s ago: executing program 7 (id=3936): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2275, &(0x7f00000018c0)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000180)={&(0x7f00000011c0)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x5, &(0x7f0000000880)="d40b409b49"}, {0x0, 0x0, 0x0, 0x0}], 0x3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x1415, 0x101, 0x1, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) fdatasync(0xffffffffffffffff) 5m18.240133793s ago: executing program 1 (id=3957): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0601000000000040120c300000000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100001f00702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x204000, 0x20) 5m18.170085594s ago: executing program 7 (id=3959): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0xfffffffb, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}]}, 0x24}}, 0x0) 5m17.565141558s ago: executing program 7 (id=3961): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) syz_open_dev$char_usb(0xc, 0xb4, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000e, 0x12, r2, 0xffffe000) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) mremap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000, 0x2, &(0x7f0000001000/0x3000)=nil) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ad2000/0x4000)=nil, 0x4000, 0x10) munmap(&(0x7f0000b9f000/0x2000)=nil, 0x2000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) munmap(&(0x7f0000b04000/0x4000)=nil, 0x4000) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f00008a8000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fb1000/0x1000)=nil) 5m16.902602279s ago: executing program 7 (id=3962): syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x442, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) socket$key(0xf, 0x3, 0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000000)={0x4}) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5m16.041948949s ago: executing program 1 (id=3965): mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r0 = socket(0x10, 0x3, 0xfb) getsockopt$sock_int(r0, 0x1, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0, 0x0) getdents(r4, 0x0, 0x22) 5m14.532118609s ago: executing program 1 (id=3967): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, r1, 0x712, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x16}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x8864) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, &(0x7f00000000c0)) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x3, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 5m13.770607819s ago: executing program 1 (id=3969): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2275, &(0x7f00000018c0)) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$I2C(&(0x7f0000000480), 0x0, 0x0) ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000180)={&(0x7f00000011c0)=[{0x0, 0x0, 0x0, 0x0}, {0x0, 0x0, 0x5, &(0x7f0000000880)="d40b409b49"}, {0x0, 0x0, 0x0, 0x0}], 0x3}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x18, 0x1415, 0x101, 0x1, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0) fdatasync(0xffffffffffffffff) 5m12.10998284s ago: executing program 7 (id=3972): pwritev(0xffffffffffffffff, 0x0, 0x0, 0xd34, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0x10000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="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", 0xd41}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0xa9}, {&(0x7f0000003240)="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", 0xa51}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0xf000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000130a03000000000009000000000000000900020073797a310000000008000340000000010900010073797a3000000000"], 0x34}}, 0x0) 5m11.554029603s ago: executing program 1 (id=3974): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r3 = gettid() syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12019a6d86f0430875"], 0x0) openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000001480)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000000, 0x810, r2, 0xfb97a000) socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x60600) pselect6(0x40, &(0x7f0000000100)={0x5e, 0x0, 0x0, 0x0, 0x80000000}, &(0x7f0000000000)={0x23, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, 0x0, 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYRESHEX, @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee01], 0x60, 0x2000050}, 0x0) 5m5.972591316s ago: executing program 1 (id=3984): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$kcm(0x29, 0x5, 0x0) r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={0x0}, 0x1) socket(0x10, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000100)={0x33, 0xe, 0x6, 0x2, 0x1b, "7c3bc7ff19ef024e21ada6608ca4570a0cd4d1"}) 4m55.927425883s ago: executing program 36 (id=3972): pwritev(0xffffffffffffffff, 0x0, 0x0, 0xd34, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0x10000, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="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", 0xd41}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0xa9}, {&(0x7f0000003240)="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", 0xa51}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0xf000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000130a03000000000009000000000000000900020073797a310000000008000340000000010900010073797a3000000000"], 0x34}}, 0x0) 4m49.607917973s ago: executing program 37 (id=3984): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$kcm(0x29, 0x5, 0x0) r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={0x0}, 0x1) socket(0x10, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000100)={0x33, 0xe, 0x6, 0x2, 0x1b, "7c3bc7ff19ef024e21ada6608ca4570a0cd4d1"}) 2m49.456633138s ago: executing program 2 (id=4257): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000e, 0x12, r2, 0xffffe000) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ad2000/0x4000)=nil, 0x4000, 0x10) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mremap(&(0x7f00008a8000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fb1000/0x1000)=nil) 2m46.828794367s ago: executing program 2 (id=4264): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000010, 0xffffffffffffffff, 0xce9e1000) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000180)={[{@subsystem='hugetlb'}, {@cpuset_v2_mode}, {@subsystem='cpuacct'}]}) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@updsa={0x154, 0x1a, 0x1, 0x70bd26, 0x1000000, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@empty}, {@in, 0x0, 0x6c}, @in6=@private1, {0x4000000000000}, {}, {}, 0x0, 0x0, 0x2}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@loopback}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x154}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=@framed={{}, [@printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x10}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m44.359756931s ago: executing program 2 (id=4269): syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = openat$smackfs_change_rule(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r2, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) write$smackfs_change_rule(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="7d207a6c5b01de8a20782072774c61"], 0xf) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSERGETLSR(r4, 0x5459, &(0x7f0000000040)) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x8001) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x2c, r7, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xc}]}, 0x2c}}, 0x20000840) 2m39.469726606s ago: executing program 2 (id=4274): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000e, 0x12, r2, 0xffffe000) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) madvise(&(0x7f0000ad2000/0x4000)=nil, 0x4000, 0x10) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mremap(&(0x7f00008a8000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000fb1000/0x1000)=nil) 2m38.550228086s ago: executing program 2 (id=4278): pipe2$9p(&(0x7f0000000240), 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[], &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000ac0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000400000000000fbb7e1005e78f4c67b972ebf9de74673dd3b5ce9f8e0e8d842d47dd2d3a46fe1e8715302005b46fcf6a822e723657cc7c14a8546bc17af26546cda54de2ec6bf8ffcc3aa7bf0b25bb7ad55a99a82788188f2ddb330fc4e0af7dbf57a1114d91aa41e18a8baff44506839d54e2632a473debb3d93984687e93d28245bc53224a4dbd07c071c923e473a3a2f07f78e3352662f2f67029c87567259055f511ddc58146755ca8d19878d06d0d3a6cba7ff3bed59eed54e3fcd39053aef0072c5c656dee8f55d26", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2f0000001800000004"], 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a80)={'syztnl1\x00', &(0x7f0000000a00)={'ip6gre0\x00', 0x0, 0x4, 0xde, 0x2, 0xb5, 0x1c, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x10, 0x5, 0xd}}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000010, 0xffffffffffffffff, 0xce9e1000) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000180)) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000300)={0xa, @vbi={0xa, 0x3, 0x3, 0x32315258, [0x9, 0x9], [0x10000, 0x8000], 0x1}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000280)={{0x3, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) mount$tmpfs(0x0, &(0x7f0000000840)='./file0\x00', &(0x7f0000000880), 0x8, &(0x7f00000008c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x32, 0x19]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x34, 0x6b]}}, {@usrquota}, {@huge_advise}, {@mpol={'mpol', 0x3d, {'local', '', @void}}}], [{@obj_role={'obj_role', 0x3d, '\x00'}}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}]}) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@updsa={0x154, 0x1a, 0x1, 0x70bd26, 0x0, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@empty}, {@in, 0x0, 0x6c}, @in6=@private1, {0x4000000000000}, {}, {}, 0x0, 0x0, 0x2}, [@encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in6=@loopback}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x154}}, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) 2m36.674540178s ago: executing program 2 (id=4287): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007"], 0x38}}, 0x40840) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) getdents64(r6, 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r8, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0308003c5ca601288763"], 0xffdd) write$cgroup_devices(r0, &(0x7f0000000440)=ANY=[], 0xffdd) 2m19.71650374s ago: executing program 38 (id=4287): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007500000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007"], 0x38}}, 0x40840) r7 = socket(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f0000000000), 0x4000000000001f2, 0x0) getdents64(r6, 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r8, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0308003c5ca601288763"], 0xffdd) write$cgroup_devices(r0, &(0x7f0000000440)=ANY=[], 0xffdd) 13.53249759s ago: executing program 4 (id=4653): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x2, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000005d14e69419632c66c9fe6c5b693e20bd4b8383b59eea0dc79c8eb4"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x120b, 0x200000000000003}) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r3, r2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x110a}) (async) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_emit_ethernet(0xae, &(0x7f0000000480)=ANY=[@ANYBLOB="5b37182347bc130c937beae886dd609d008000783aff20010000000000000000000000000001ff02000000000000000000000000000187009078fe8000000000000000000000000000aa00007ca7010c3a0d0401ef96336d5348e209da1b941e6c8d3c17e894d8903b85b830096ddb1d744e299b2dbc00f8ffff67c2922e6feba81e40c3d5a1661352c6a8b0c8b865a9e9207f7b26dc0a4d4fbc78541deab6d0afeaa47effeb81051915578e8b87451b53ac9980dc08217c03394a3b1bdf1b40c8cf6e99a5313faf433c9141e7e9c3383147273a61ce8d0c6ad86009bfab55ffc8221c273848216a486225cb1ae22f15322b84d16720622346ba03c2bb08073086666ff5834629097c2cede35640e627423838e71158b00dfdc27edaeccae2c684ee00"/300], 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r8 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0x22, &(0x7f0000000100)={{0xa, 0xffff, 0x101, @empty, 0xfffffffc}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x10000, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd]}}, 0x5c) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r4, @ANYRES64], &(0x7f0000000100)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r9}, 0x10) (async) socket$kcm(0x29, 0x5, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000380)='net/vlan/vlan1\x00') (async) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) 13.149569742s ago: executing program 4 (id=4654): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') read$hiddev(r2, &(0x7f0000000100)=""/100, 0x64) mount$9p_fd(0x0, &(0x7f0000000180)='./bus/file0\x00', 0x0, 0x200000, 0x0) renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x1) 11.585718496s ago: executing program 4 (id=4658): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) umount2(&(0x7f00000007c0)='./file0\x00', 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x259, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x2, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x3, 0x3a, {0x9, 0x21, 0x2, 0xfa, 0x1, {0x22, 0xc17}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4, 0x9, 0x15}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0xed, 0x7, 0x2}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x2, 0x4, 0x2, 0x50, 0x2}, 0x19, &(0x7f0000000200)=ANY=[@ANYBLOB="050f190001141004982ddc32ff67f9d16c26224539617f05a2"], 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc0a}}, {0x8a, &(0x7f0000000380)=@string={0x8a, 0x3, "4c71d5e8eb8f9034c0f42a0e124a614d4db073b4f282c2ec043fc245d6687820712fd6e0c4e632cd16cadeab23637f91c814e9bed90f5cb2ea365844a135d12c1315dabe037952eb847dcb21cc8f0c77711a49bec76b8180a7b92cd00d79ec4862d5ae8a4a6ac1f025774ebffc3410b03ccaa913d3db8615b56076b6e3bb456e93b3e76af9f45e06"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x414}}]}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000540), 0x40, 0x0) ioctl$FBIOPUTCMAP(r1, 0x4605, &(0x7f0000000640)={0x8, 0x1, &(0x7f0000000580)=[0x3737], &(0x7f00000005c0), &(0x7f0000000600), 0xffffffffffffffff}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$SNDCTL_TMR_START(r2, 0x5402) write$cgroup_int(r2, &(0x7f0000000180)=0x2, 0x12) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r3) 11.046228288s ago: executing program 9 (id=4662): openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000074c0)={0x0, 0x0, &(0x7f0000007480)={&(0x7f0000000380)=ANY=[], 0x28}}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) msgget$private(0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x1, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) sendto$inet6(r2, &(0x7f0000000340)="136e93ca23e41ba630e21f0fdd537a5d30f9ec2b295a2651", 0x18, 0x20007b44, 0x0, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000240)={0x7, @pix_mp={0x0, 0x4000, 0x31364d4e, 0x0, 0x7, [{0x8000000}, {}, {}, {0x0, 0xffffffff}, {0x0, 0xfffffffe}, {}, {}, {0x0, 0x6}], 0x0, 0x0, 0x7, 0x0, 0x6}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{0x2, 0x4e24, @multicast2}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x12, {0x2, 0x4e22, @rand_addr=0x64010100}, 'ipvlan1\x00'}) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r4, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r4, 0x0, 0xc, &(0x7f0000000180)=0x1, 0x4) 8.737418057s ago: executing program 9 (id=4666): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lremovexattr(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r5 = syz_open_pts(r4, 0x141601) fcntl$setstatus(r5, 0x4, 0x102800) write(r5, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close_range(r3, 0xffffffffffffffff, 0x100000) r6 = socket$inet6(0xa, 0x6, 0x0) r7 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = dup(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, r8, 0x0) getsockname$inet6(r6, 0x0, &(0x7f0000000040)) socket$inet6(0xa, 0x2, 0x4) syz_usb_connect(0x3, 0x71, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000db779a10460a69120a1a0102030109025f0002000000000904c477037517731809050b030002f80211090501"], 0x0) 8.736691307s ago: executing program 6 (id=4667): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, 0x0}, 0x2020) socket$inet_sctp(0x2, 0x1, 0x84) write$FUSE_LK(r3, &(0x7f0000000240)={0x28, 0x8000000000000018, r4, {{0x1, 0x2, 0x4, 0xffffffffffffffff}}}, 0x28) ptrace(0x10, r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0x2d, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, 0x0, 0x200, 0x870bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8f}, @TIPC_NLA_PUBL_UPPER={0x0, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x50, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7, @dev={0xfe, 0x80, '\x00', 0x29}, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010101}}}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xbad4}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000080}, 0x4000000) ptrace(0x420f, r2) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x1a8000, 0xa, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0xfc}, {0x0, 0x0, 0x0, 0x9, 0x3, 0x1, 0x0, 0x0, 0x1}, {0xffff1000, 0x10000, 0x1, 0x9, 0x0, 0xfd}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x40, 0x2, 0x3}, {0x0, 0xeeee8000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0xfe}, {}, {}, 0xddf9ffc3, 0x0, 0x0, 0x140030, 0x80000a, 0x2d00, 0x3000, [0x800000000, 0x0, 0x1a7ff4f4]}) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) ioctl$FS_IOC_GETFLAGS(r7, 0x80086601, 0x0) 7.396412192s ago: executing program 4 (id=4668): openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000580)={0x410201, 0x8e, 0x28}, 0x18) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x11, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000000), &(0x7f0000001440)=""/142}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000010000e1250000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$unix(r5, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r7 = socket$inet(0x2, 0x80001, 0x84) bpf$MAP_CREATE(0x400000000000000, &(0x7f0000000000)=@base={0x1c, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r8, 0x0, 0x7f}, 0x8) 7.395617788s ago: executing program 0 (id=4670): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_HOPLIMIT={0x5, 0x4, 0x1}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r1}]}, 0x3c}, 0xfffd, 0x0, 0x0, 0x4402}, 0x0) 7.231176664s ago: executing program 0 (id=4671): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f00000004c0)='/sys/power/image_size', 0x80000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1b0000000000000000"], 0x48) mknod$loop(0x0, 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='ntfs3\x00', 0x0, &(0x7f0000000340)) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@map=r2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003e00), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000003ec0)={&(0x7f0000003e40)={0x14, r4, 0x401, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40810}, 0x20040050) 6.736128083s ago: executing program 6 (id=4672): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0601000000000040120c3000000000000001090224"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x204000, 0x20) 6.299710719s ago: executing program 4 (id=4673): ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, &(0x7f0000000100)=0x1) write$dsp(0xffffffffffffffff, &(0x7f0000000000)="81", 0x1) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x7c5f8f2f92ff25d2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x7be17000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1f000000", @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/17], 0x48) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, 0x0) socket(0x5, 0x5, 0xfffffffb) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, 0xdd}, 0x0, &(0x7f0000000080)={0x3ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000440)={0x40006, 0x0, 0x8c1d, 0x100000000, 0xfffffd, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x2a, 0x0, 0xe, 0xfffffffffffffffc, 0x1, 0x0, 0x1100000000001, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x80000000000000}) 6.098714499s ago: executing program 0 (id=4674): socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c6ba6bef4a1c4e384d8c033ed7a80ffdfef0f000060000000a2bc5603ca00000f7f8900c00e08000000372471083ec6991778581acb6c01", 0x48}], 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0xa4, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x17c, 0xffffffff, 0xffffffff, 0x17c, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x6, 0x70, 0xa4}, @common=@inet=@SET3={0x34, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x10}, {0xffff, 0x40}, {0xffffffffffffffff, 0x0, 0x6}}}}, {{@ip={@empty, @remote, 0x0, 0xff, 'netpci0\x00', 'dummy0\x00', {}, {}, 0x0, 0x2, 0x3}, 0x0, 0xa8, 0xd8, 0x0, {}, [@common=@unspec=@statistic={{0x38}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x4, 0x2}, {0x1, 0x0, 0x2}, 0x80, 0x4}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x26c) fcntl$lock(r4, 0x25, &(0x7f0000000140)) fcntl$lock(r4, 0x24, &(0x7f00000000c0)={0x2}) keyctl$setperm(0x5, 0x0, 0x0) fremovexattr(0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000620700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f000000a200)='afs_cell\x00', r6}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 6.098165773s ago: executing program 8 (id=4675): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x3, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x28048825) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0xc2800, 0x0) sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x1aa402e46276b2d9) 4.805951709s ago: executing program 9 (id=4676): openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) r1 = socket$l2tp(0x2, 0x2, 0x73) pipe(0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) syz_emit_vhci(&(0x7f0000000100)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x300}, 0x0) 4.684568189s ago: executing program 0 (id=4677): openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmsg$NFT_BATCH(r0, &(0x7f00000074c0)={0x0, 0x0, &(0x7f0000007480)={&(0x7f0000000380)=ANY=[], 0x28}}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) msgget$private(0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x1, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='batadv0\x00', 0x10) sendto$inet6(r2, &(0x7f0000000340)="136e93ca23e41ba630e21f0fdd537a5d30f9ec2b295a2651", 0x18, 0x20007b44, 0x0, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000240)={0x7, @pix_mp={0x0, 0x4000, 0x31364d4e, 0x0, 0x7, [{0x8000000}, {}, {}, {0x0, 0xffffffff}, {0x0, 0xfffffffe}, {}, {}, {0x0, 0x6}], 0x0, 0x0, 0x7, 0x0, 0x6}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{0x2, 0x4e24, @multicast2}, {0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}}, 0x12, {0x2, 0x4e22, @rand_addr=0x64010100}, 'ipvlan1\x00'}) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r4, 0x0, 0xd, &(0x7f0000000040)=0xfffffffc, 0x4) setsockopt$inet_int(r4, 0x0, 0xc, &(0x7f0000000180)=0x1, 0x4) 4.684206351s ago: executing program 8 (id=4678): pipe2$9p(&(0x7f0000000240), 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000006680)=ANY=[], &(0x7f0000000100)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000005580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000ac0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000400000000000fbb7e1005e78f4c67b972ebf9de74673dd3b5ce9f8e0e8d842d47dd2d3a46fe1e8715302005b46fcf6a822e723657cc7c14a8546bc17af26546cda54de2ec6bf8ffcc3aa7bf0b25bb7ad55a99a82788188f2ddb330fc4e0af7dbf57a1114d91aa41e18a8baff44506839d54e2632a473debb3d93984687e93d28245bc53224a4dbd07c071c923e473a3a2f07f78e3352662f2f67029c87567259055f511ddc58146755ca8d19878d06d0d3a6cba7ff3bed59eed54e3fcd39053aef0072c5c656dee8f55d26", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2f0000001800000004"], 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x2, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a80)={'syztnl1\x00', &(0x7f0000000a00)={'ip6gre0\x00', 0x0, 0x4, 0xde, 0x2, 0xb5, 0x1c, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8000, 0x10, 0x5, 0xd}}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4000010, 0xffffffffffffffff, 0xce9e1000) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000180)) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000300)={0xa, @vbi={0xa, 0x3, 0x3, 0x32315258, [0x9, 0x9], [0x10000, 0x8000], 0x1}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r4, 0xc4c85512, &(0x7f0000000280)={{0x3, 0x0, 0x0, 0x0, 'syz1\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) 3.392688347s ago: executing program 6 (id=4679): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x7, 0x7800, 0x101, 0x3, {{0x8, 0x4, 0x2, 0x2, 0x20, 0x64, 0x0, 0xfb, 0x2f, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x1c}, {[@timestamp_addr={0x44, 0xc, 0x2a, 0x1, 0xc, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1ff}]}]}}}}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000030000000200000f"], 0x0, 0x45, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000000)="0200f7ff08801d00", 0x8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x11, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x435}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x4c}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f0000000380)=0x80a0000) ioctl$KVM_RUN(r4, 0xae80, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_open_dev$dri(&(0x7f00000001c0), 0x8, 0x280) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x19, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ldst={0x3, 0x3, 0x3, 0x5, 0x5, 0x18, 0x8}, @map_val={0x18, 0x5, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x80}, @call={0x85, 0x0, 0x0, 0x16}, @exit]}, &(0x7f0000000200)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES32=r11, @ANYBLOB="0500000000000000000000e6", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) 2.923697447s ago: executing program 8 (id=4680): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x290, 0x158, 0x0, 0x148, 0x40000, 0x148, 0x1f8, 0x240, 0x240, 0x1f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'virt_wifi0\x00', {}, {}, 0x11, 0x0, 0x78}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@tos={{0x28}, {0x4, 0x9, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0x0, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) 2.8606803s ago: executing program 9 (id=4681): r0 = inotify_init1(0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='ip_vti0\x00', 0x10) syz_emit_ethernet(0xd2, &(0x7f00000004c0)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaaaa86dd60010100009c1100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) r2 = dup(r0) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x320, 0xffffffff, 0x1d0, 0x0, 0x1d0, 0xffffffff, 0xffffffff, 0x288, 0x288, 0x288, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x4, 0xc, 0x5, 0x6, 0x2], 0x5, 0x3}, {0x0, [0x1, 0x3, 0x5, 0x4, 0x1, 0x5]}}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x6, 0x4, 0x0, 0x6, 0x2], 0x2, 0x4}}}, @common=@ttl={{0x28}, {0x2, 0x81}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ip={@broadcast, @loopback, 0xff000000, 0xffffff00, 'wg2\x00', 'veth0_vlan\x00', {}, {}, 0xc, 0x3, 0x40}, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0xfffffff9, {0x7666}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x380) 2.734944241s ago: executing program 0 (id=4682): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x3c}, 0x1, 0x2}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040055}, 0x0) ioctl$int_out(r2, 0x2, &(0x7f0000000380)) ioctl$KVM_RUN(r3, 0xae80, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r5, &(0x7f00000002c0)=[{&(0x7f00000004c0)="327bd325", 0x4}], 0x1) unshare(0x10900) 2.585731969s ago: executing program 9 (id=4683): getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9533, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x58c}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 2.372411057s ago: executing program 8 (id=4684): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r6, r3, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x64, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "9e188a80c32aa9b86ed6ce56992732d9f7fc6cda762c07530a038941764a92bb", "074336477e9205df5f47f7da965c25c746ba7f8ca07841d3da17308a6df3f54855ecedd6d8664fa125e3972a48e81039", "00d87a5be360cdf553bd6f25601ce33d79a57a3873e0b4e6553e2c44", {"4cf02a016458a5f67aa497153eddc6a1", "9a3f9661ac468177dc130be49bdd8eb5"}}}}}}}, 0x0) close(r0) 2.174391098s ago: executing program 9 (id=4685): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="3f0114008cdc18"], 0xdd12}], 0x1}, 0x20040051) syz_usb_connect(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196144f01020301090224000100000020090400000206d3450009050102100000000009058b02"], 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1"], 0x0) 2.080818817s ago: executing program 8 (id=4686): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) getrandom(&(0x7f0000000240)=""/274, 0x112, 0x1) r1 = socket$inet(0x2, 0x2, 0x0) read(r1, &(0x7f0000000080)=""/116, 0xffffff2a) bind$inet(r1, &(0x7f0000000200)={0x2, 0x1004e20}, 0x10) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f00000003c0)={'#! ', '', [], 0xa, "a62710bb18ab32f6266453c41dfb74ec5c6b5500000000000000000000002295b5a157d1d5c5480e6cb128c7c4f6da0e04c00d25d2aed15ed57d066b194410ddb074e82f264c73ab458434bd40afd5ccffa1ceb47537142a81cbdf95c72455333c9125a1fa6d6d8e7eacb72064a8b75f4fc5c9521ce9cb028027bc843440942cc0b53dd641fda3b1a61605ed566c4c032b3da55b0b506e1c4a27ec0238e169ee6a5e6a3384b8826f11bae0c24240979612bbe5f022d2cc779fc6cceb104bb9b96e2793bfb92e092eebbdc855bb3101e4037603aa7f12fb7a2ca13637a6ad5a4c46ef0682be035d6184d20fb759cba672dce1d7168350bd"}, 0xfb) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50020090780000"], 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xe) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 1.946680037s ago: executing program 6 (id=4687): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000180)=0x3, 0x12) connect$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x40, 0x1, 0x4}}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x2, 0x0}, 0x4e21, 0x3, 'lc\x00', 0x4, 0xb, 0x5}, {@rand_addr=0x64010102, 0x4e2a, 0x6000000, 0xcb, 0x12d5c, 0x12d5c}}, 0x44) 768.364985ms ago: executing program 6 (id=4688): getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$packet(0x11, 0x3, 0x300) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@typedef={0x10, 0x0, 0x0, 0x8, 0x3}, @fwd={0xb}]}, {0x0, [0x5f]}}, &(0x7f0000000380)=""/1, 0x33, 0x1, 0x1, 0x7, 0x10000, @value}, 0x28) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip6_vti0\x00', &(0x7f0000000400)={'ip6_vti0\x00', 0x0, 0x2f, 0x2c, 0x4, 0x8000000, 0x8, @remote, @empty, 0x7800, 0x1, 0x5}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1a, 0x4, 0x3, 0x1, 0x8800, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r0, @void, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f00000015c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x2, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0xce}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x170, 0x10, 0x633, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@broadcast, 0x4e22, 0x4000, 0x0, 0x8004}, {@in=@dev, 0x1, 0x32}, @in=@local, {0x8, 0x0, 0x0, 0x0, 0xfff, 0x0, 0xffffffff}, {0x0, 0xfffffffffffffffc, 0x1, 0x2}, {0x10000}, 0x70bd29, 0x0, 0xa, 0x0, 0x0, 0x5}, [@encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in6=@remote}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x5e21, 0x0, @in6=@private1}}]}, 0x170}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x9533, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x58c}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 763.2782ms ago: executing program 0 (id=4689): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="0601000000000040120c3000000000000001090224"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x204000, 0x20) 706.892575ms ago: executing program 4 (id=4690): socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = fsopen(&(0x7f0000000080)='pstore\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='si\x98d\x96\a\xf7\xceF\xda\x8c\x02\xfd\x8e#3Z:lent\x00', &(0x7f00000000c0)='\x00\x13\xf5\fa\x00\x00\x9c)\xe75\x978\x96\xb9;\x7f_.\xa5S\xeaC\xeb\xe9On\x03\x01\xefIy\x95\xc9W\xc5\xf6\xad\x84\xf4\xf5\x8fHe\xac\'x\xd4', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='silent\x00', 0x0, 0x0) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x14}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x3c, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)=@getsadinfo={0x1198, 0x23, 0x4, 0x70bd26, 0x25dfdbfe, 0x0, [@algo_comp={0x100, 0x3, {{'lzs\x00'}, 0x5c0, "be89a3a495e02fcb27a2d825b9d5969a46c72b4bf578c5f5bcf32e366fabbb76fd08b61ddafe2667498d8f87e2d98858d2ee024c2d745641d20482007feb70fe3d8dd37a6f5a64fc9200b3f836ea3bbee901cadd3be975a7c3eeef313a03c973f9dd9057f046910e47ffcfaefd4472239d87429bb10f6fe1821e22a5671210f80f77d8632f049f4468f937770a5a8c185b55c2171b4496f3826dfc6901b50eaf7a7c8c1a65a3dae2f40a3315c0b07ca15916606e815a1f19"}}, @replay_thresh={0x8, 0xb, 0x7}, @lastused={0xc, 0xf, 0x10001}, @address_filter={0x28, 0x1a, {@in=@broadcast, @in=@dev={0xac, 0x14, 0x14, 0x24}, 0xa, 0x7f, 0x5}}, @algo_auth={0x1048, 0x1, {{'ghash-ce-sync\x00'}, 0x8000, "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"}}]}, 0x1198}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000004) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x49804}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x12) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000003640), 0x40401, 0x0) write$binfmt_script(r5, &(0x7f0000003680)={'#! ', './file0', [], 0xa, "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"}, 0x1001) sched_setaffinity(r3, 0x8, &(0x7f0000000000)=0x410000002) socket$nl_generic(0x10, 0x3, 0x10) clock_settime(0x0, &(0x7f00000003c0)={0x77359400}) openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000280)=0x7) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r6, 0x1, 0x3, &(0x7f0000000040), &(0x7f0000000200)=0x4) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000240)={0x6, [0x1fa, 0x0, 0x7, 0x3, 0x3, 0x84]}, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$IPSET_CMD_GET_BYNAME(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0xe, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r7 = socket(0x23, 0x80805, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0), &(0x7f0000000100)=0x10) 562.296335ms ago: executing program 8 (id=4691): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB="fdff000000000000237d535817dd8b3eeab60800", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x2af) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000240)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000180], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x105) setgroups(0x0, 0x0) fsetxattr$trusted_overlay_redirect(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="06517dc2e6ea"}) 0s ago: executing program 6 (id=4692): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000001040)={0xf000000, 0x9, 0x6, 0xffffffffffffffff, 0x0, &(0x7f0000001000)={0x9a0920, 0x2, '\x00', @value=0x80}}) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r2}, 0x69) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, &(0x7f0000000080)={0x1d, r4}, 0x18) bind$can_j1939(r5, &(0x7f00000001c0)={0x1d, r4, 0x1, {0x0, 0xf0, 0x3}, 0xfe}, 0x18) r6 = socket$kcm(0x10, 0x3, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff3000/0x2000)=nil, 0x2000, 0x1000004, 0x13012, r8, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r10 = syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) getdents64(r10, &(0x7f0000000480)=""/4081, 0x103a) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000980000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xac) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2010}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x7c, 0x0, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x8}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0x34, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x8001}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x984a}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_ZONE={0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001480)={r10, 0x0, 0x0, 0x59, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3}, 0x50) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/544]}, 0x298) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c03000b000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) kernel console output (not intermixed with test programs): 6416 comm="kworker/u8:10" saddr=10.128.0.169 src=30008 daddr=10.128.0.67 dest=37486 netif=eth0 [ 1606.920859][T20620] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1606.930160][T19360] audit: audit_lost=226242 audit_rate_limit=0 audit_backlog_limit=64 [ 1606.948515][T20620] audit: audit_lost=226243 audit_rate_limit=0 audit_backlog_limit=64 [ 1606.975727][T19360] audit: backlog limit exceeded [ 1606.985772][ T29] audit: type=1400 audit(1736277173.247:433560): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20629 comm="syz.9.4107" name="newroot" dev="tmpfs" ino=2 [ 1607.014345][T20620] audit: backlog limit exceeded [ 1607.036945][T19360] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1607.054351][T20620] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1607.441309][T18851] usbhid 3-1:0.0: can't add hid device: -71 [ 1607.448020][T18851] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1607.475041][T18851] usb 3-1: USB disconnect, device number 39 [ 1612.189170][T20663] audit_log_start: 1457 callbacks suppressed [ 1612.189192][T20663] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1612.215733][T20663] audit: audit_lost=226336 audit_rate_limit=0 audit_backlog_limit=64 [ 1612.241292][T20663] audit: backlog limit exceeded [ 1612.257449][ T29] audit: type=1400 audit(1736277178.363:434752): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20660 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1612.381360][ T29] audit: type=1400 audit(1736277178.363:434753): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20660 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1612.433443][ T29] audit: type=1400 audit(1736277178.363:434754): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20660 comm="syz-executor" name="345" dev="tmpfs" ino=1915 [ 1612.539191][T16575] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1612.539712][ T29] audit: type=1400 audit(1736277178.363:434755): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=20660 comm="syz-executor" opid=20660 ocomm="syz-executor" [ 1612.563687][T20247] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1612.565542][T16575] audit: audit_lost=226337 audit_rate_limit=0 audit_backlog_limit=64 [ 1617.513207][ T5824] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1617.545486][ T29] kauditd_printk_skb: 1944 callbacks suppressed [ 1617.545506][ T29] audit: type=1400 audit(1736277183.424:436283): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=20695 comm="syz.9.4120" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1617.940568][ T29] audit: type=1400 audit(1736277183.508:436284): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=20704 comm="syz.8.4124" saddr=10.128.0.169 src=30008 daddr=10.128.0.67 dest=37486 netif=eth0 [ 1618.813693][T20706] syz.8.4124: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1618.832985][T20706] CPU: 1 UID: 0 PID: 20706 Comm: syz.8.4124 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 1618.843789][T20706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1618.853868][T20706] Call Trace: [ 1618.857146][T20706] [ 1618.860078][T20706] dump_stack_lvl+0x241/0x360 [ 1618.864767][T20706] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1618.869969][T20706] ? __pfx__printk+0x10/0x10 [ 1618.874566][T20706] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 1618.880993][T20706] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 1618.887506][T20706] warn_alloc+0x278/0x410 [ 1618.892303][T20706] ? __pfx_warn_alloc+0x10/0x10 [ 1618.897159][T20706] ? translate_table+0x174/0x2330 [ 1618.902180][T20706] ? __get_vm_area_node+0x1c8/0x2d0 [ 1618.907390][T20706] ? __get_vm_area_node+0x25c/0x2d0 [ 1618.912597][T20706] __vmalloc_node_range_noprof+0x62f/0x1380 [ 1618.918497][T20706] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1618.924272][T20706] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1618.930628][T20706] ? rcu_is_watching+0x15/0xb0 [ 1618.934810][ T29] audit: type=1400 audit(1736277183.976:436285): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30008 daddr=10.128.0.67 dest=37486 netif=eth0 [ 1618.935400][T20706] ? trace_kmalloc+0x1f/0xd0 [ 1618.962071][T20706] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 1618.967566][T20706] ? __kvmalloc_node_noprof+0x72/0x190 [ 1618.973053][T20706] __kvmalloc_node_noprof+0x142/0x190 [ 1618.978459][T20706] ? translate_table+0x174/0x2330 [ 1618.983514][T20706] translate_table+0x174/0x2330 [ 1618.988381][T20706] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1618.994724][T20706] ? __pfx_translate_table+0x10/0x10 [ 1619.000019][T20706] ? irqentry_exit+0x63/0x90 [ 1619.004610][T20706] ? lockdep_hardirqs_on+0x99/0x150 [ 1619.009922][T20706] ? rep_movs_alternative+0x4c/0x70 [ 1619.015124][T20706] ? _copy_from_user+0x99/0xc0 [ 1619.019911][T20706] ? copy_from_sockptr_offset+0x6b/0xb0 [ 1619.025466][T20706] do_ip6t_set_ctl+0xe4c/0x1270 [ 1619.030324][T20706] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1619.036260][T20706] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1619.041565][T20706] ? __pfx_lock_release+0x10/0x10 [ 1619.046622][T20706] ? rcu_is_watching+0x15/0xb0 [ 1619.051400][T20706] ? trace_contention_end+0x3c/0x120 [ 1619.056723][T20706] ? __mutex_unlock_slowpath+0x21e/0x790 [ 1619.062364][T20706] ? __pfx___mutex_lock+0x10/0x10 [ 1619.067395][T20706] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1619.073402][T20706] ? irqentry_exit+0x63/0x90 [ 1619.078002][T20706] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1619.083905][T20706] nf_setsockopt+0x295/0x2c0 [ 1619.088502][T20706] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1619.094404][T20706] do_sock_setsockopt+0x3af/0x720 [ 1619.099435][T20706] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1619.104997][T20706] ? __fget_files+0x395/0x410 [ 1619.109677][T20706] ? __fget_files+0x2a/0x410 [ 1619.114275][T20706] __x64_sys_setsockopt+0x1ee/0x280 [ 1619.119486][T20706] do_syscall_64+0xf3/0x230 [ 1619.124004][T20706] ? clear_bhb_loop+0x35/0x90 [ 1619.128703][T20706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1619.134609][T20706] RIP: 0033:0x7eff73185d29 [ 1619.139030][T20706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1619.158740][T20706] RSP: 002b:00007eff70fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1619.167168][T20706] RAX: ffffffffffffffda RBX: 00007eff73376080 RCX: 00007eff73185d29 [ 1619.175147][T20706] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 1619.183122][T20706] RBP: 00007eff73201b08 R08: 00000000000013f8 R09: 0000000000000000 [ 1619.191121][T20706] R10: 0000000020002c00 R11: 0000000000000246 R12: 0000000000000000 [ 1619.199117][T20706] R13: 0000000000000000 R14: 00007eff73376080 R15: 00007fff097026e8 [ 1619.207107][T20706] [ 1619.211668][T20706] Mem-Info: [ 1619.214859][T20706] active_anon:718 inactive_anon:20100 isolated_anon:0 [ 1619.214859][T20706] active_file:26358 inactive_file:40000 isolated_file:0 [ 1619.214859][T20706] unevictable:768 dirty:167 writeback:0 [ 1619.214859][T20706] slab_reclaimable:10774 slab_unreclaimable:121664 [ 1619.214859][T20706] mapped:29754 shmem:18036 pagetables:686 [ 1619.214859][T20706] sec_pagetables:0 bounce:0 [ 1619.214859][T20706] kernel_misc_reclaimable:0 [ 1619.214859][T20706] free:1229609 free_pcp:16810 free_cma:0 [ 1619.261242][T20706] Node 0 active_anon:2872kB inactive_anon:80400kB active_file:105320kB inactive_file:160000kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118976kB dirty:668kB writeback:0kB shmem:70608kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12020kB pagetables:2744kB sec_pagetables:0kB all_unreclaimable? no [ 1619.294023][T20706] Node 1 active_anon:0kB inactive_anon:0kB active_file:112kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:40kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1619.324416][T20706] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1619.351570][T20706] lowmem_reserve[]: 0 2465 2466 0 0 [ 1619.356844][T20706] Node 0 DMA32 free:1002408kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:2868kB inactive_anon:80364kB active_file:104540kB inactive_file:159948kB unevictable:1536kB writepending:668kB present:3129332kB managed:2552776kB mlocked:0kB bounce:0kB free_pcp:64592kB local_pcp:64496kB free_cma:0kB [ 1619.388564][T20706] lowmem_reserve[]: 0 0 0 0 0 [ 1619.393335][T20706] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:4kB inactive_anon:36kB active_file:780kB inactive_file:52kB unevictable:0kB writepending:0kB present:1048580kB managed:880kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1619.420197][T20706] lowmem_reserve[]: 0 0 0 0 0 [ 1619.424924][T20706] Node 1 Normal free:3900668kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:112kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:2640kB local_pcp:2640kB free_cma:0kB [ 1619.454303][T20706] lowmem_reserve[]: 0 0 0 0 0 [ 1619.459090][T20706] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1619.471793][T20706] Node 0 DMA32: 1174*4kB (UM) 629*8kB (UME) 411*16kB (UME) 43*32kB (UME) 26*64kB (UME) 121*128kB (UME) 104*256kB (UM) 56*512kB (UME) 31*1024kB (UM) 12*2048kB (UM) 209*4096kB (UM) = 1002512kB [ 1619.491444][T20706] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1619.503027][T20706] Node 1 Normal: 236*4kB (UME) 44*8kB (UME) 42*16kB (UME) 212*32kB (UME) 106*64kB (UME) 29*128kB (UME) 18*256kB (UME) 12*512kB (UME) 4*1024kB (UM) 4*2048kB (UME) 942*4096kB (M) = 3900720kB [ 1619.521919][T20706] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1619.531499][T20706] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1619.540907][T20706] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1619.550484][T20706] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1619.559827][T20706] 84394 total pagecache pages [ 1619.564509][T20706] 0 pages in swap cache [ 1619.568708][T20706] Free swap = 124140kB [ 1619.572880][T20706] Total swap = 124996kB [ 1619.577085][T20706] 2097051 pages RAM [ 1619.580902][T20706] 0 pages HighMem/MovableOnly [ 1619.586248][T20706] 427005 pages reserved [ 1619.590445][T20706] 0 pages cma reserved [ 1619.872108][T15024] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1619.879170][T15024] audit: audit_lost=226477 audit_rate_limit=0 audit_backlog_limit=64 [ 1619.887382][T15024] audit: backlog limit exceeded [ 1619.892310][T15024] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1619.899168][T15024] audit: audit_lost=226478 audit_rate_limit=0 audit_backlog_limit=64 [ 1619.907299][T15024] audit: backlog limit exceeded [ 1619.912921][T15024] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1620.249316][ T5824] usb 10-1: device descriptor read/all, error -71 [ 1622.957003][ T5824] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 1622.974575][ T29] kauditd_printk_skb: 1307 callbacks suppressed [ 1622.974595][ T29] audit: type=1400 audit(1736277188.494:436661): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=20717 comm="syz.9.4129" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1623.165404][ T29] audit: type=1400 audit(1736277188.587:436662): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=20717 comm="syz.9.4129" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1623.241200][ T5824] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 1623.275417][ T29] audit: type=1400 audit(1736277188.587:436663): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=20717 comm="syz.9.4129" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1623.310685][ T5824] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1623.392620][ T5824] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1623.430634][ T29] audit: type=1400 audit(1736277188.662:436664): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=20717 comm="syz.9.4129" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1623.608283][ T29] audit: type=1400 audit(1736277188.690:436665): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=15024 comm="syz-executor" opid=20708 ocomm="syz.6.4125" [ 1623.608454][ T5824] usb 10-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 1623.648400][ T29] audit: type=1400 audit(1736277188.690:436666): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=15024 comm="syz-executor" opid=20708 ocomm="syz.6.4125" [ 1623.680197][ T5824] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1623.684214][T19360] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1623.690139][ T29] audit: type=1400 audit(1736277188.737:436667): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=20717 comm="syz.9.4129" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1623.726701][ T5824] usb 10-1: Product: syz [ 1623.731053][ T5824] usb 10-1: Manufacturer: syz [ 1623.736086][ T5824] usb 10-1: SerialNumber: syz [ 1623.791639][ T29] audit: type=1400 audit(1736277188.737:436668): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=20717 comm="syz.9.4129" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1623.799431][ T27] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1623.864617][ T5824] usb 10-1: config 0 descriptor?? [ 1623.872429][ T5824] kvaser_usb 10-1:0.0: error -EMSGSIZE: Cannot get software info [ 1623.880889][ T5824] kvaser_usb 10-1:0.0: probe with driver kvaser_usb failed with error -90 [ 1625.816510][T18841] usb 10-1: USB disconnect, device number 6 [ 1626.162241][T20742] FAULT_INJECTION: forcing a failure. [ 1626.162241][T20742] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1626.211653][T20742] CPU: 0 UID: 0 PID: 20742 Comm: syz.9.4133 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 1626.222502][T20742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1626.232606][T20742] Call Trace: [ 1626.235933][T20742] [ 1626.238898][T20742] dump_stack_lvl+0x241/0x360 [ 1626.243631][T20742] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1626.248886][T20742] ? __pfx__printk+0x10/0x10 [ 1626.253519][T20742] ? __pfx_lock_release+0x10/0x10 [ 1626.258575][T20742] ? __lock_acquire+0x1397/0x2100 [ 1626.263649][T20742] should_fail_ex+0x3b0/0x4e0 [ 1626.268372][T20742] _copy_from_user+0x2f/0xc0 [ 1626.273014][T20742] kstrtouint_from_user+0xc6/0x190 [ 1626.278165][T20742] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1626.283926][T20742] ? __pfx_lock_acquire+0x10/0x10 [ 1626.289003][T20742] proc_fail_nth_write+0xaa/0x2d0 [ 1626.294071][T20742] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1626.300014][T20742] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1626.305719][T20742] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1626.311402][T20742] vfs_write+0x2a3/0xd30 [ 1626.315709][T20742] ? __pfx_vfs_write+0x10/0x10 [ 1626.320528][T20742] ? __fget_files+0x2a/0x410 [ 1626.325164][T20742] ? __fget_files+0x395/0x410 [ 1626.329876][T20742] ? __fget_files+0x2a/0x410 [ 1626.334512][T20742] ksys_write+0x18f/0x2b0 [ 1626.338891][T20742] ? __pfx_ksys_write+0x10/0x10 [ 1626.343786][T20742] ? do_syscall_64+0x100/0x230 [ 1626.348602][T20742] ? do_syscall_64+0xb6/0x230 [ 1626.353339][T20742] do_syscall_64+0xf3/0x230 [ 1626.357893][T20742] ? clear_bhb_loop+0x35/0x90 [ 1626.362604][T20742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1626.368548][T20742] RIP: 0033:0x7f40ac5847df [ 1626.372998][T20742] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1626.392661][T20742] RSP: 002b:00007f40ad2ff030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1626.401120][T20742] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f40ac5847df [ 1626.409124][T20742] RDX: 0000000000000001 RSI: 00007f40ad2ff0a0 RDI: 0000000000000005 [ 1626.417131][T20742] RBP: 00007f40ad2ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1626.425132][T20742] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1626.433140][T20742] R13: 0000000000000000 R14: 00007f40ac775fa0 R15: 00007ffdeb277408 [ 1626.441168][T20742] [ 1626.474746][T20746] sctp: [Deprecated]: syz.6.4134 (pid 20746) Use of int in maxseg socket option. [ 1626.474746][T20746] Use struct sctp_assoc_value instead [ 1626.946358][T20746] cgroup: Name too long [ 1627.948836][T20752] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4137'. [ 1628.574410][T16575] audit_log_start: 1248 callbacks suppressed [ 1628.574425][T16575] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1628.587183][T16575] audit: audit_lost=226868 audit_rate_limit=0 audit_backlog_limit=64 [ 1628.600531][ T29] audit: type=1400 audit(1736277193.713:437685): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16575 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1628.621465][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1628.627996][ C0] audit: audit_lost=226869 audit_rate_limit=0 audit_backlog_limit=64 [ 1628.636104][ C0] audit: backlog limit exceeded [ 1628.653012][ T29] audit: type=1400 audit(1736277193.713:437686): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16575 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1628.672760][ T29] audit: type=1400 audit(1736277193.713:437687): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16575 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1628.693019][ T29] audit: type=1400 audit(1736277193.713:437688): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16575 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1628.712526][ T29] audit: type=1400 audit(1736277193.713:437689): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=r pid=16575 comm="syz-executor" name="204" dev="tmpfs" ino=1120 [ 1629.024232][T20760] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4140'. [ 1633.965661][ T29] kauditd_printk_skb: 922 callbacks suppressed [ 1633.965685][ T29] audit: type=1400 audit(1736277198.774:438482): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=16575 comm="syz-executor" opid=20767 ocomm="syz.8.4143" [ 1634.289053][T15024] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1634.295649][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1634.295675][ C0] audit: audit_lost=226913 audit_rate_limit=0 audit_backlog_limit=64 [ 1634.295692][ C0] audit: backlog limit exceeded [ 1634.333187][T16575] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1634.340747][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1634.347274][ C0] audit: audit_lost=226914 audit_rate_limit=0 audit_backlog_limit=64 [ 1634.355423][ C0] audit: backlog limit exceeded [ 1634.360459][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1634.726357][T20788] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4148'. [ 1637.495773][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1637.639119][T20801] netdevsim netdevsim9 netdevsim0: entered promiscuous mode [ 1639.064782][T20817] IPVS: length: 60 != 8 [ 1639.265366][T20815] ip6gretap0: entered promiscuous mode [ 1639.311909][T20815] macsec1: entered promiscuous mode [ 1639.317704][T20815] macsec1: entered allmulticast mode [ 1639.353940][ T29] kauditd_printk_skb: 1647 callbacks suppressed [ 1639.353976][ T29] audit: type=1400 audit(1736277203.806:439857): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19360 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1639.375212][T20815] ip6gretap0: entered allmulticast mode [ 1639.488797][ T29] audit: type=1400 audit(1736277203.806:439858): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19360 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1639.511503][T20815] ip6gretap0: left allmulticast mode [ 1639.515681][T20821] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1639.533011][T20815] ip6gretap0: left promiscuous mode [ 1639.540640][ T29] audit: type=1400 audit(1736277203.806:439859): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19360 comm="syz-executor" name="92" dev="tmpfs" ino=513 [ 1639.543315][T20820] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1639.561277][T20821] audit: audit_lost=227007 audit_rate_limit=0 audit_backlog_limit=64 [ 1639.587919][ T29] audit: type=1400 audit(1736277203.806:439860): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19360 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1639.602293][T20276] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1639.608668][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1639.613942][T20276] audit: audit_lost=227008 audit_rate_limit=0 audit_backlog_limit=64 [ 1640.583341][T12858] wlan1: Trigger new scan to find an IBSS to join [ 1641.138161][T20855] overlay: Unknown parameter '/' [ 1641.867148][T17602] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1642.576759][T17602] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1642.591779][T17602] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1642.601150][T17602] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1642.622756][T17602] usb 3-1: config 0 descriptor?? [ 1644.267909][T17602] usbhid 3-1:0.0: can't add hid device: -71 [ 1644.274480][T17602] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1644.292254][T17602] usb 3-1: USB disconnect, device number 40 [ 1645.015656][T20892] FAULT_INJECTION: forcing a failure. [ 1645.015656][T20892] name failslab, interval 1, probability 0, space 0, times 0 [ 1645.028601][T20892] CPU: 1 UID: 0 PID: 20892 Comm: syz.9.4176 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 1645.039409][T20892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1645.049497][T20892] Call Trace: [ 1645.052806][T20892] [ 1645.055768][T20892] dump_stack_lvl+0x241/0x360 [ 1645.060495][T20892] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1645.065759][T20892] ? __pfx__printk+0x10/0x10 [ 1645.070405][T20892] should_fail_ex+0x3b0/0x4e0 [ 1645.075128][T20892] should_failslab+0xac/0x100 [ 1645.079852][T20892] kmem_cache_alloc_node_noprof+0x77/0x380 [ 1645.085712][T20892] ? __alloc_skb+0x1c3/0x440 [ 1645.090395][T20892] ? rcu_is_watching+0x15/0xb0 [ 1645.095223][T20892] __alloc_skb+0x1c3/0x440 [ 1645.099684][T20892] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1645.105711][T20892] ? __pfx___alloc_skb+0x10/0x10 [ 1645.110692][T20892] ? hci_sock_sendmsg+0x617/0x11c0 [ 1645.115850][T20892] ? __pfx___mutex_lock+0x10/0x10 [ 1645.120930][T20892] hci_mgmt_cmd+0x1c1/0x11d0 [ 1645.125582][T20892] hci_sock_sendmsg+0x7b8/0x11c0 [ 1645.130564][T20892] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 1645.137380][T20892] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1645.142794][T20892] ? get_pid_task+0x23/0x1f0 [ 1645.147431][T20892] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1645.152841][T20892] __sock_sendmsg+0x221/0x270 [ 1645.157569][T20892] sock_write_iter+0x2d7/0x3f0 [ 1645.162380][T20892] ? __pfx_sock_write_iter+0x10/0x10 [ 1645.167726][T20892] ? bpf_lsm_file_permission+0x9/0x10 [ 1645.173140][T20892] ? security_file_permission+0x74/0x280 [ 1645.178822][T20892] vfs_write+0xaeb/0xd30 [ 1645.183112][T20892] ? __pfx_sock_write_iter+0x10/0x10 [ 1645.188446][T20892] ? __pfx_vfs_write+0x10/0x10 [ 1645.193258][T20892] ? __fget_files+0x2a/0x410 [ 1645.197890][T20892] ? __fget_files+0x2a/0x410 [ 1645.202538][T20892] ksys_write+0x18f/0x2b0 [ 1645.206920][T20892] ? __pfx_ksys_write+0x10/0x10 [ 1645.211816][T20892] ? do_syscall_64+0x100/0x230 [ 1645.216638][T20892] ? do_syscall_64+0xb6/0x230 [ 1645.221365][T20892] do_syscall_64+0xf3/0x230 [ 1645.225917][T20892] ? clear_bhb_loop+0x35/0x90 [ 1645.230633][T20892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1645.236573][T20892] RIP: 0033:0x7f40ac585d29 [ 1645.241030][T20892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1645.260673][T20892] RSP: 002b:00007f40aa3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1645.269131][T20892] RAX: ffffffffffffffda RBX: 00007f40ac776160 RCX: 00007f40ac585d29 [ 1645.277138][T20892] RDX: 0000000000000008 RSI: 0000000020000580 RDI: 0000000000000006 [ 1645.285141][T20892] RBP: 00007f40aa3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1645.293142][T20892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1645.301143][T20892] R13: 0000000000000000 R14: 00007f40ac776160 R15: 00007ffdeb277408 [ 1645.309171][T20892] [ 1645.393362][ T29] kauditd_printk_skb: 4997 callbacks suppressed [ 1645.393388][ T29] audit: type=1400 audit(1736277209.110:442265): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20884 comm="syz.9.4176" name="newroot" dev="tmpfs" ino=2 [ 1645.420018][ T29] audit: type=1400 audit(1736277209.110:442266): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20884 comm="syz.9.4176" name="/" dev="proc" ino=1 [ 1645.450970][T12857] wlan1: Trigger new scan to find an IBSS to join [ 1645.474608][T19360] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1645.490105][T19360] audit: audit_lost=227877 audit_rate_limit=0 audit_backlog_limit=64 [ 1645.501029][ T29] audit: type=1400 audit(1736277209.110:442267): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20884 comm="syz.9.4176" name="/" dev="proc" ino=1 [ 1645.541725][ T29] audit: type=1400 audit(1736277209.110:442268): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20884 comm="syz.9.4176" name="84" dev="proc" ino=76540 [ 1645.563707][T19360] audit: backlog limit exceeded [ 1645.623338][T19360] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1645.631614][T20895] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1645.661325][T19360] audit: audit_lost=227878 audit_rate_limit=0 audit_backlog_limit=64 [ 1645.887308][T20902] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1646.191286][T20904] vivid-004: disconnect [ 1646.198460][T20903] vivid-004: reconnect [ 1646.463234][T20908] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 1646.476841][T12857] wlan1: Creating new IBSS network, BSSID ee:ab:f7:dc:b6:a4 [ 1647.137542][T20915] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4184'. [ 1650.708009][T20929] kAFS: unable to lookup cell '' [ 1650.739214][T20247] audit_log_start: 1659 callbacks suppressed [ 1650.739234][T20247] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1650.739580][T20276] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1650.745245][T20247] audit: audit_lost=228106 audit_rate_limit=0 audit_backlog_limit=64 [ 1650.745267][T20247] audit: backlog limit exceeded [ 1650.745337][T20247] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1650.752314][T20276] audit: audit_lost=228107 audit_rate_limit=0 audit_backlog_limit=64 [ 1650.758343][T20247] audit: audit_lost=228108 audit_rate_limit=0 audit_backlog_limit=64 [ 1650.758365][T20247] audit: backlog limit exceeded [ 1650.758385][T20247] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1650.766644][T20276] audit: backlog limit exceeded [ 1651.113595][T20913] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4182'. [ 1652.022544][T20941] misc userio: Begin command sent, but we're already running [ 1653.349441][T20959] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4196'. [ 1653.431266][T20961] tipc: Enabling of bearer rejected, failed to enable media [ 1654.495038][T20966] fuse: Bad value for 'fd' [ 1654.930771][T20970] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4198'. [ 1656.098406][ T29] kauditd_printk_skb: 3646 callbacks suppressed [ 1656.104921][ T29] audit: type=1400 audit(1736277219.483:444860): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20983 comm="syz.9.4204" name="20985-6" dev="debugfs" ino=75747 [ 1656.446440][ T29] audit: type=1400 audit(1736277219.558:444861): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20983 comm="syz.9.4204" name="20985-6" dev="debugfs" ino=75747 [ 1656.466112][ C0] vkms_vblank_simulate: vblank timer overrun [ 1656.481659][T19360] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1656.512187][T19360] audit: audit_lost=228788 audit_rate_limit=0 audit_backlog_limit=64 [ 1656.520972][T20276] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1656.525075][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1656.534122][ C0] audit: audit_lost=228789 audit_rate_limit=0 audit_backlog_limit=64 [ 1656.534475][T20276] audit: audit_lost=228790 audit_rate_limit=0 audit_backlog_limit=64 [ 1656.542229][ C0] audit: backlog limit exceeded [ 1656.542875][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1656.690896][T20992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4205'. [ 1656.906475][T20998] cgroup: Unknown subsys name 'seclabel' [ 1656.926615][T20999] cgroup: Unknown subsys name 'seclabel' [ 1657.016429][T21001] FAULT_INJECTION: forcing a failure. [ 1657.016429][T21001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1657.063592][T21001] CPU: 0 UID: 0 PID: 21001 Comm: syz.9.4209 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 1657.074433][T21001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1657.084527][T21001] Call Trace: [ 1657.087840][T21001] [ 1657.090802][T21001] dump_stack_lvl+0x241/0x360 [ 1657.095531][T21001] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1657.100776][T21001] ? __pfx__printk+0x10/0x10 [ 1657.105412][T21001] ? __pfx_lock_release+0x10/0x10 [ 1657.110479][T21001] should_fail_ex+0x3b0/0x4e0 [ 1657.115196][T21001] fpu__restore_sig+0x1c0/0x1270 [ 1657.120205][T21001] ? __pfx_fpu__restore_sig+0x10/0x10 [ 1657.125663][T21001] ? __might_fault+0xc6/0x120 [ 1657.130399][T21001] restore_sigcontext+0x675/0x7d0 [ 1657.135481][T21001] ? __pfx___might_resched+0x10/0x10 [ 1657.140819][T21001] ? __pfx_restore_sigcontext+0x10/0x10 [ 1657.146441][T21001] ? __task_pid_nr_ns+0x28/0x450 [ 1657.151428][T21001] __do_sys_rt_sigreturn+0x1b9/0x280 [ 1657.156752][T21001] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 1657.162582][T21001] ? do_syscall_64+0x100/0x230 [ 1657.167373][T21001] ? do_syscall_64+0xb6/0x230 [ 1657.172074][T21001] do_syscall_64+0xf3/0x230 [ 1657.176598][T21001] ? clear_bhb_loop+0x35/0x90 [ 1657.181292][T21001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1657.187209][T21001] RIP: 0033:0x7f40ac585d27 [ 1657.191638][T21001] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 1657.211255][T21001] RSP: 002b:00007f40ad2ff038 EFLAGS: 00000246 [ 1657.217336][T21001] RAX: 0000000000000116 RBX: 00007f40ac775fa0 RCX: 00007f40ac585d29 [ 1657.225324][T21001] RDX: 000000000000000f RSI: 00000000200014c0 RDI: 0000000000000003 [ 1657.233306][T21001] RBP: 00007f40ad2ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1657.241307][T21001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1657.249332][T21001] R13: 0000000000000000 R14: 00007f40ac775fa0 R15: 00007ffdeb277408 [ 1657.257339][T21001] [ 1657.260512][ C0] vkms_vblank_simulate: vblank timer overrun [ 1658.495066][T21013] netlink: 'syz.6.4213': attribute type 1 has an invalid length. [ 1658.634654][T21013] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1659.997601][T21038] netlink: 80 bytes leftover after parsing attributes in process `syz.8.4218'. [ 1661.640539][T15024] audit_log_start: 3616 callbacks suppressed [ 1661.640560][T15024] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1661.646838][ T29] audit: type=1400 audit(1736277223.758:447259): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21046 comm="syz.0.4222" name="newroot" dev="tmpfs" ino=2 [ 1661.673451][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1661.680075][ C0] audit: audit_lost=229197 audit_rate_limit=0 audit_backlog_limit=64 [ 1661.688249][ C0] audit: backlog limit exceeded [ 1661.693493][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1661.700083][ C0] audit: audit_lost=229198 audit_rate_limit=0 audit_backlog_limit=64 [ 1661.705114][T15024] audit: audit_lost=229199 audit_rate_limit=0 audit_backlog_limit=64 [ 1661.708209][ C0] audit: backlog limit exceeded [ 1661.708633][T21052] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1667.280757][ T29] kauditd_printk_skb: 2376 callbacks suppressed [ 1667.280780][ T29] audit: type=1400 audit(1736277229.941:448715): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=21088 comm="syz.0.4235" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1667.536085][ T29] audit: type=1400 audit(1736277230.044:448716): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=21090 comm="syz.6.4237" saddr=10.128.0.169 src=30008 daddr=10.128.0.67 dest=37486 netif=eth0 [ 1667.650313][ T29] audit: type=1400 audit(1736277230.138:448717): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21090 comm="syz.6.4237" name="newroot" dev="tmpfs" ino=2 [ 1667.850699][T16575] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1667.857474][T16575] audit: audit_lost=229509 audit_rate_limit=0 audit_backlog_limit=64 [ 1667.882751][T21095] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1667.888077][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1667.889354][T21095] audit: audit_lost=229510 audit_rate_limit=0 audit_backlog_limit=64 [ 1667.895801][ C0] audit: audit_lost=229511 audit_rate_limit=0 audit_backlog_limit=64 [ 1667.903908][T21095] audit: backlog limit exceeded [ 1668.004740][ T5950] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1668.454272][ T5950] usb 1-1: Using ep0 maxpacket: 16 [ 1668.718396][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1668.916213][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1669.104671][ T5950] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 1669.114318][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.202500][ T5950] usb 1-1: config 0 descriptor?? [ 1669.296136][ T5950] usbhid 1-1:0.0: can't add hid device: -71 [ 1669.307070][ T5950] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1669.388753][ T5950] usb 1-1: USB disconnect, device number 72 [ 1672.655058][ T29] kauditd_printk_skb: 1775 callbacks suppressed [ 1672.655082][ T29] audit: type=1400 audit(1736277234.684:449774): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21134 comm="syz-executor" name="31" dev="tmpfs" ino=180 [ 1672.684133][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1672.690842][ C0] audit: audit_lost=229751 audit_rate_limit=0 audit_backlog_limit=64 [ 1672.699009][ C0] audit: backlog limit exceeded [ 1672.719381][T21135] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1672.748558][T21135] audit: audit_lost=229752 audit_rate_limit=0 audit_backlog_limit=64 [ 1672.760452][ T29] audit: type=1400 audit(1736277234.684:449775): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21134 comm="syz-executor" name="31" dev="tmpfs" ino=180 [ 1672.784727][T21136] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1672.794612][T20247] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1672.802556][T21135] audit: backlog limit exceeded [ 1675.264559][T21149] nullb0: AHDI p1 p3 p4 [ 1675.268984][T21149] nullb0: p1 size 2739478287 extends beyond EOD, truncated [ 1675.530956][T21149] nullb0: p4 size 2395519696 extends beyond EOD, truncated [ 1677.672724][T12857] bridge_slave_0: left allmulticast mode [ 1677.678444][T12857] bridge_slave_0: left promiscuous mode [ 1677.684540][T12857] bridge0: port 1(bridge_slave_0) entered disabled state [ 1677.924705][T12857] bridge_slave_1: left allmulticast mode [ 1677.959750][T12857] bridge_slave_1: left promiscuous mode [ 1677.965558][T12857] bridge1: port 1(bridge_slave_1) entered disabled state [ 1678.011053][ T29] kauditd_printk_skb: 1530 callbacks suppressed [ 1678.011075][ T29] audit: type=1400 audit(1736277239.969:450771): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21165 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1678.854654][T12176] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1678.874792][ T29] audit: type=1400 audit(1736277239.969:450772): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21165 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1678.908614][T20247] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1678.925894][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1678.932561][ C0] audit: audit_lost=229932 audit_rate_limit=0 audit_backlog_limit=64 [ 1678.940638][ C0] audit: backlog limit exceeded [ 1678.945912][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1678.952474][ C0] audit: audit_lost=229933 audit_rate_limit=0 audit_backlog_limit=64 [ 1678.960565][ C0] audit: backlog limit exceeded [ 1678.965797][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1680.163922][T12857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1680.195648][T12857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1680.208578][T12857] bond0 (unregistering): (slave team0): Releasing backup interface [ 1680.224755][T12857] bond0 (unregistering): Released all slaves [ 1680.501594][T12857] tipc: Left network mode [ 1680.990187][T21190] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4263'. [ 1681.804340][T21202] ALSA: mixer_oss: invalid OSS volume '0' [ 1681.810517][T21202] ALSA: mixer_oss: invalid OSS volume 'Shared_Clean:' [ 1681.817544][T21202] ALSA: mixer_oss: invalid OSS volume 'Shared_Dirty:' [ 1681.824326][T21202] ALSA: mixer_oss: invalid OSS volume 'Private_Clean:' [ 1681.831370][T21202] ALSA: mixer_oss: invalid OSS volume 'Private_Dirty:' [ 1681.838355][T21202] ALSA: mixer_oss: invalid OSS volume 'Referenced:' [ 1681.845006][T21202] ALSA: mixer_oss: invalid OSS volume 'Anonymous:' [ 1683.371409][ T29] kauditd_printk_skb: 2269 callbacks suppressed [ 1683.371430][ T29] audit: type=1400 audit(1736277244.982:452528): lsm=SMACK fn=smack_file_open action=granted subject="_" object="_" requested=r pid=21215 comm="modprobe" path="/usr/lib/libpcre2-8.so.0.11.0" dev="sda1" ino=1638 [ 1683.448571][ T29] audit: type=1400 audit(1736277244.982:452529): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=21215 comm="modprobe" path="/usr/lib/libpcre2-8.so.0.11.0" dev="sda1" ino=1638 [ 1683.489821][T21218] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1683.506656][T21218] audit: audit_lost=230106 audit_rate_limit=0 audit_backlog_limit=64 [ 1683.528657][ T29] audit: type=1400 audit(1736277245.001:452530): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21215 comm="modprobe" name="/" dev="sda1" ino=2 [ 1683.547860][T21218] audit: backlog limit exceeded [ 1683.559521][T21218] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1683.580810][T21218] audit: audit_lost=230107 audit_rate_limit=0 audit_backlog_limit=64 [ 1683.581850][ T5487] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1683.591849][ T29] audit: type=1400 audit(1736277245.001:452531): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21215 comm="modprobe" name="/" dev="sysfs" ino=1 [ 1683.848158][ T5821] Bluetooth: hci4: command 0x0406 tx timeout [ 1688.330488][T21221] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1688.756115][T20276] audit_log_start: 1833 callbacks suppressed [ 1688.756134][T20276] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1688.769376][T20276] audit: audit_lost=230347 audit_rate_limit=0 audit_backlog_limit=64 [ 1688.778280][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1688.778320][ T29] audit: type=1400 audit(1736277250.024:453648): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20276 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1688.784806][ C0] audit: audit_lost=230348 audit_rate_limit=0 audit_backlog_limit=64 [ 1688.784828][ C0] audit: backlog limit exceeded [ 1688.785427][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1688.804692][T21241] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1688.812298][ C0] audit: audit_lost=230349 audit_rate_limit=0 audit_backlog_limit=64 [ 1688.812317][ C0] audit: backlog limit exceeded [ 1688.983508][ T5821] Bluetooth: hci6: command 0x0406 tx timeout [ 1689.054163][T21247] binder: 21245:21247 unknown command 0 [ 1689.065186][T21247] binder: 21245:21247 ioctl c0306201 20004a40 returned -22 [ 1689.255712][T12857] hsr_slave_0: left promiscuous mode [ 1689.282593][T12857] hsr_slave_1: left promiscuous mode [ 1690.317013][T12857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1690.324632][T12857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1690.350730][T12857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1690.358622][T12857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1690.398657][T12857] veth1_macvtap: left promiscuous mode [ 1690.418342][T12857] veth0_macvtap: left promiscuous mode [ 1690.493244][T12857] veth1_vlan: left promiscuous mode [ 1690.513082][T12857] veth0_vlan: left promiscuous mode [ 1694.664981][ T29] kauditd_printk_skb: 3346 callbacks suppressed [ 1694.665008][ T29] audit: type=1400 audit(1736277255.328:454876): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=21285 comm="syz.8.4288" saddr=10.128.0.169 src=30008 daddr=10.128.0.67 dest=37486 netif=eth0 [ 1695.082245][ T29] audit: type=1400 audit(1736277255.478:454877): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=21291 comm="syz.8.4290" opid=21291 ocomm="syz.8.4290" [ 1695.295451][ T29] audit: type=1400 audit(1736277255.487:454878): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=20276 comm="syz-executor" opid=21269 ocomm="syz.2.4287" [ 1695.336687][T19360] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1695.344259][T19360] audit: audit_lost=231059 audit_rate_limit=0 audit_backlog_limit=64 [ 1695.352684][T19360] audit: backlog limit exceeded [ 1695.357638][T19360] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1695.381795][ T29] audit: type=1400 audit(1736277255.487:454879): lsm=SMACK fn=smack_task_kill action=granted subject="_" object="_" requested=w pid=20276 comm="syz-executor" opid=21269 ocomm="syz.2.4287" [ 1695.383686][T19360] audit: audit_lost=231060 audit_rate_limit=0 audit_backlog_limit=64 [ 1695.400562][ T29] audit: type=1400 audit(1736277255.590:454880): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21291 comm="syz.8.4290" name="newroot" dev="tmpfs" ino=2 [ 1696.110348][T18835] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1696.208431][T12857] team0 (unregistering): Port device team_slave_1 removed [ 1696.277082][T12857] team0 (unregistering): Port device team_slave_0 removed [ 1696.277269][T18835] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1696.309793][T18835] usb 1-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 1696.331871][T18835] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.250783][T21273] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4287'. [ 1697.360046][T18835] usb 1-1: string descriptor 0 read error: -71 [ 1697.426380][T18835] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1697.440579][T18835] usb 1-1: USB disconnect, device number 73 [ 1698.284631][ T9] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 1698.333983][ T9] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1699.571710][T21329] 9pnet_fd: Insufficient options for proto=fd [ 1700.154584][ T29] kauditd_printk_skb: 1784 callbacks suppressed [ 1700.154614][ T29] audit: type=1400 audit(1736277260.669:456259): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21318 comm="syz.9.4299" name="newroot" dev="tmpfs" ino=2 [ 1700.245506][ T29] audit: type=1400 audit(1736277260.669:456260): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21318 comm="syz.9.4299" name="/" dev="proc" ino=1 [ 1700.304432][ T29] audit: type=1400 audit(1736277260.669:456261): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21318 comm="syz.9.4299" name="/" dev="proc" ino=1 [ 1700.346134][ T29] audit: type=1400 audit(1736277260.669:456262): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21318 comm="syz.9.4299" name="161" dev="proc" ino=78428 [ 1700.377287][ T29] audit: type=1400 audit(1736277260.669:456263): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21318 comm="syz.9.4299" name="newroot" dev="tmpfs" ino=2 [ 1700.429102][ T29] audit: type=1400 audit(1736277260.669:456264): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21318 comm="syz.9.4299" name="/" dev="proc" ino=1 [ 1700.456200][T20247] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1700.482804][T20247] audit: audit_lost=231196 audit_rate_limit=0 audit_backlog_limit=64 [ 1700.489152][ T29] audit: type=1400 audit(1736277260.669:456265): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21318 comm="syz.9.4299" name="/" dev="proc" ino=1 [ 1700.493279][T20247] audit: backlog limit exceeded [ 1701.699202][T21340] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4304'. [ 1703.055433][T21345] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4306'. [ 1703.185492][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1704.725356][T21359] FAULT_INJECTION: forcing a failure. [ 1704.725356][T21359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1704.738728][T21359] CPU: 1 UID: 0 PID: 21359 Comm: syz.8.4310 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 1704.749534][T21359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1704.759628][T21359] Call Trace: [ 1704.762948][T21359] [ 1704.765903][T21359] dump_stack_lvl+0x241/0x360 [ 1704.770625][T21359] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1704.775946][T21359] ? __pfx__printk+0x10/0x10 [ 1704.780581][T21359] ? snprintf+0xda/0x120 [ 1704.784858][T21359] should_fail_ex+0x3b0/0x4e0 [ 1704.789571][T21359] _copy_to_user+0x31/0xb0 [ 1704.794036][T21359] simple_read_from_buffer+0xca/0x150 [ 1704.799454][T21359] proc_fail_nth_read+0x1e9/0x250 [ 1704.804523][T21359] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1704.810894][T21359] ? rw_verify_area+0x55e/0x6f0 [ 1704.815776][T21359] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1704.821359][T21359] vfs_read+0x1fc/0xb70 [ 1704.825560][T21359] ? __pfx___mutex_lock+0x10/0x10 [ 1704.830626][T21359] ? __pfx_vfs_read+0x10/0x10 [ 1704.835344][T21359] ? __fget_files+0x2a/0x410 [ 1704.839966][T21359] ? __fget_files+0x395/0x410 [ 1704.844676][T21359] ? __fget_files+0x2a/0x410 [ 1704.849309][T21359] ksys_read+0x18f/0x2b0 [ 1704.853590][T21359] ? __pfx_ksys_read+0x10/0x10 [ 1704.858394][T21359] ? do_syscall_64+0x100/0x230 [ 1704.863209][T21359] ? do_syscall_64+0xb6/0x230 [ 1704.867937][T21359] do_syscall_64+0xf3/0x230 [ 1704.872482][T21359] ? clear_bhb_loop+0x35/0x90 [ 1704.877188][T21359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.883121][T21359] RIP: 0033:0x7eff7318473c [ 1704.887565][T21359] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1704.907204][T21359] RSP: 002b:00007eff70fb4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1704.915655][T21359] RAX: ffffffffffffffda RBX: 00007eff73376160 RCX: 00007eff7318473c [ 1704.923672][T21359] RDX: 000000000000000f RSI: 00007eff70fb40a0 RDI: 0000000000000009 [ 1704.931682][T21359] RBP: 00007eff70fb4090 R08: 0000000000000000 R09: 0000000000000000 [ 1704.939683][T21359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1704.947681][T21359] R13: 0000000000000000 R14: 00007eff73376160 R15: 00007fff097026e8 [ 1704.955707][T21359] [ 1705.693488][T16575] audit_log_start: 1209 callbacks suppressed [ 1705.693509][T16575] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1705.706262][T16575] audit: audit_lost=231224 audit_rate_limit=0 audit_backlog_limit=64 [ 1705.714495][T16575] audit: backlog limit exceeded [ 1705.719554][T16575] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1705.726310][T16575] audit: audit_lost=231225 audit_rate_limit=0 audit_backlog_limit=64 [ 1705.734585][T16575] audit: backlog limit exceeded [ 1705.735655][T15024] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1705.740227][T16575] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1705.747056][T15024] audit: audit_lost=231226 audit_rate_limit=0 audit_backlog_limit=64 [ 1705.753648][T16575] audit: audit_lost=231227 audit_rate_limit=0 audit_backlog_limit=64 [ 1708.846543][T16189] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1708.861989][T16189] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1708.873847][T16189] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1708.932018][T16189] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1708.945500][T16189] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1708.964379][T16189] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1710.471311][T21391] loop7: detected capacity change from 0 to 16384 [ 1710.565977][T21391] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1710.566629][T15025] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 1710.578090][T21391] Buffer I/O error on dev loop7, logical block 0, async page read [ 1710.592405][T21391] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1710.601895][T21391] Buffer I/O error on dev loop7, logical block 0, async page read [ 1710.622117][T21391] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1710.631357][T21391] Buffer I/O error on dev loop7, logical block 0, async page read [ 1710.639411][T21391] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1710.648605][T21391] Buffer I/O error on dev loop7, logical block 0, async page read [ 1710.656684][T21391] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1710.666429][T21391] Buffer I/O error on dev loop7, logical block 0, async page read [ 1710.674685][T21391] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1710.684108][T21391] Buffer I/O error on dev loop7, logical block 0, async page read [ 1710.694246][T21391] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1710.704019][T21391] Buffer I/O error on dev loop7, logical block 0, async page read [ 1710.712077][T21391] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1710.721450][T21391] Buffer I/O error on dev loop7, logical block 0, async page read [ 1710.729528][T21391] ldm_validate_partition_table(): Disk read failed. [ 1710.736523][T21391] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1710.745760][T21391] Buffer I/O error on dev loop7, logical block 0, async page read [ 1710.753741][T21391] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1710.763034][T21391] Buffer I/O error on dev loop7, logical block 0, async page read [ 1710.771870][T21391] Dev loop7: unable to read RDB block 0 [ 1710.779298][T21391] loop7: unable to read partition table [ 1710.785682][T21391] loop_reread_partitions: partition scan of loop7 (K>i) /480# $qZI[u@3bj!5MM]z) failed (rc=-5) [ 1710.930064][T21375] chnl_net:caif_netlink_parms(): no params data found [ 1711.132884][T12857] IPVS: stop unused estimator thread 0... [ 1711.150497][ T29] kauditd_printk_skb: 2464 callbacks suppressed [ 1711.150517][ T29] audit: type=1400 audit(1736277270.968:458569): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=16575 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1711.166746][T16575] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1711.183063][T16575] audit: audit_lost=231657 audit_rate_limit=0 audit_backlog_limit=64 [ 1711.221224][T16575] audit: backlog limit exceeded [ 1711.226194][T16575] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1711.227795][T20247] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1711.239831][T15025] Bluetooth: hci1: command tx timeout [ 1711.247696][T20247] audit: audit_lost=231658 audit_rate_limit=0 audit_backlog_limit=64 [ 1711.255980][T20247] audit: backlog limit exceeded [ 1711.261246][T20247] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1711.267804][T20247] audit: audit_lost=231659 audit_rate_limit=0 audit_backlog_limit=64 [ 1711.980034][T12859] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1712.255117][T21375] bridge0: port 1(bridge_slave_0) entered blocking state [ 1712.262471][T21375] bridge0: port 1(bridge_slave_0) entered disabled state [ 1712.320689][T21375] bridge_slave_0: entered allmulticast mode [ 1712.350779][T21375] bridge_slave_0: entered promiscuous mode [ 1712.588248][T18851] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 1712.916973][T21415] overlayfs: overlapping lowerdir path [ 1713.251552][T18851] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1713.502475][T12859] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1713.515697][T15025] Bluetooth: hci1: command tx timeout [ 1713.581840][ T59] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1713.589753][T21375] bridge0: port 2(bridge_slave_1) entered blocking state [ 1713.596891][T21375] bridge0: port 2(bridge_slave_1) entered disabled state [ 1713.604914][T21375] bridge_slave_1: entered allmulticast mode [ 1713.620970][T21375] bridge_slave_1: entered promiscuous mode [ 1715.412499][T12859] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1715.474295][ T59] usb 10-1: Using ep0 maxpacket: 16 [ 1715.497986][T21375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1715.514934][ T59] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1715.534967][ T59] usb 10-1: New USB device found, idVendor=056a, idProduct=0029, bcdDevice= 0.00 [ 1715.547469][T21375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1715.567078][ T59] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1715.612428][ T59] usb 10-1: config 0 descriptor?? [ 1715.619297][T12859] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1715.663484][T15025] Bluetooth: hci1: command tx timeout [ 1715.794848][T12859] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1715.829898][ T5824] usb 10-1: USB disconnect, device number 7 [ 1715.939396][T21375] team0: Port device team_slave_0 added [ 1716.017013][T21375] team0: Port device team_slave_1 added [ 1716.593666][ T29] kauditd_printk_skb: 1788 callbacks suppressed [ 1716.593715][ T29] audit: type=1400 audit(1736277275.551:459857): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21442 comm="syz-executor" name="55" dev="tmpfs" ino=303 [ 1716.751013][T21375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1716.763969][T21375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1716.817957][ T29] audit: type=1400 audit(1736277275.551:459858): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=21442 comm="syz-executor" opid=21442 ocomm="syz-executor" [ 1716.882279][T21375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1716.897499][T20247] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1716.914214][ T29] audit: type=1400 audit(1736277275.551:459859): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21442 comm="syz-executor" name="55" dev="tmpfs" ino=303 [ 1716.937999][T20247] audit: audit_lost=231827 audit_rate_limit=0 audit_backlog_limit=64 [ 1716.959928][T19360] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1716.966495][T19360] audit: audit_lost=231828 audit_rate_limit=0 audit_backlog_limit=64 [ 1716.976029][T21375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1716.978557][T20247] audit: backlog limit exceeded [ 1716.983526][T19360] audit: backlog limit exceeded [ 1716.992821][T20247] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1716.993420][T21375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1717.052978][T21375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1717.200029][T21375] hsr_slave_0: entered promiscuous mode [ 1717.225622][T21375] hsr_slave_1: entered promiscuous mode [ 1717.247022][T21375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1717.278904][T21375] Cannot create hsr debugfs directory [ 1717.411483][T12859] bridge_slave_1: left allmulticast mode [ 1717.438023][T12859] bridge_slave_1: left promiscuous mode [ 1717.447339][T12859] bridge0: port 2(bridge_slave_1) entered disabled state [ 1717.495569][T12859] bridge_slave_0: left allmulticast mode [ 1717.501447][T12859] bridge_slave_0: left promiscuous mode [ 1717.508157][T12859] bridge0: port 1(bridge_slave_0) entered disabled state [ 1717.818226][T21454] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4337'. [ 1717.899471][T16189] Bluetooth: hci1: command tx timeout [ 1718.084073][T21454] xt_l2tp: v2 tid > 0xffff: 262144 [ 1720.184615][T12859] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1720.204312][T12859] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1720.215207][T12859] bond0 (unregistering): Released all slaves [ 1721.247424][T21487] netlink: 'syz.0.4344': attribute type 25 has an invalid length. [ 1721.396503][ T59] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1721.950149][ T29] kauditd_printk_skb: 2317 callbacks suppressed [ 1721.950195][ T29] audit: type=1400 audit(1736277281.080:461902): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=15024 comm="syz-executor" name="392" dev="tmpfs" ino=2159 [ 1722.426058][T16575] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1722.434234][ T29] audit: type=1400 audit(1736277281.108:461903): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=16 comm="ksoftirqd/0" saddr=10.128.0.169 src=30008 daddr=10.128.0.67 dest=37486 netif=eth0 [ 1722.441264][T15024] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1722.463550][T21485] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1722.470261][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1722.470289][ C0] audit: audit_lost=231921 audit_rate_limit=0 audit_backlog_limit=64 [ 1722.470310][ C0] audit: backlog limit exceeded [ 1722.470524][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1722.470542][ C0] audit: audit_lost=231922 audit_rate_limit=0 audit_backlog_limit=64 [ 1723.124894][T12859] hsr_slave_0: left promiscuous mode [ 1723.135282][T12859] hsr_slave_1: left promiscuous mode [ 1723.187997][T12859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1723.212605][T12859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1723.341043][ T59] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1723.352204][ T59] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1723.361565][ T59] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.378811][T12859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1723.391676][ T59] usb 10-1: config 0 descriptor?? [ 1723.642063][T12859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1723.940402][T21485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1724.095718][T21485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1724.180514][T12859] veth1_macvtap: left promiscuous mode [ 1724.186247][T12859] veth0_macvtap: left promiscuous mode [ 1724.191897][T12859] veth1_vlan: left promiscuous mode [ 1724.197390][T12859] veth0_vlan: left promiscuous mode [ 1725.598320][ T59] usbhid 10-1:0.0: can't add hid device: -71 [ 1725.605413][ T59] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1725.615920][ T59] usb 10-1: USB disconnect, device number 8 [ 1727.350188][ T29] kauditd_printk_skb: 1232 callbacks suppressed [ 1727.350210][ T29] audit: type=1400 audit(1736277286.131:463012): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21537 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1727.373567][T21538] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1727.389074][ T29] audit: type=1400 audit(1736277286.131:463013): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21537 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1727.401718][T21538] audit: audit_lost=231965 audit_rate_limit=0 audit_backlog_limit=64 [ 1727.424380][T21538] audit: backlog limit exceeded [ 1727.433166][T12859] team0 (unregistering): Port device team_slave_1 removed [ 1727.436244][ T29] audit: type=1400 audit(1736277286.131:463014): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21537 comm="syz-executor" name="63" dev="tmpfs" ino=344 [ 1727.462349][ T29] audit: type=1400 audit(1736277286.131:463015): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=21537 comm="syz-executor" opid=21537 ocomm="syz-executor" [ 1727.476647][T21538] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1727.500199][ T29] audit: type=1400 audit(1736277286.131:463016): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21537 comm="syz-executor" name="63" dev="tmpfs" ino=344 [ 1727.506484][T21538] audit: audit_lost=231966 audit_rate_limit=0 audit_backlog_limit=64 [ 1727.578577][T12859] team0 (unregistering): Port device team_slave_0 removed [ 1728.548448][T21539] netlink: 'syz.9.4358': attribute type 1 has an invalid length. [ 1728.591162][T21539] netlink: 224 bytes leftover after parsing attributes in process `syz.9.4358'. [ 1730.054761][T21375] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1730.123819][T21375] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1730.186873][T21375] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1730.250865][T21375] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1730.622386][T21375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1730.695150][T21375] 8021q: adding VLAN 0 to HW filter on device team0 [ 1730.717324][T16774] bridge0: port 1(bridge_slave_0) entered blocking state [ 1730.724662][T16774] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1731.343665][T12176] bridge0: port 2(bridge_slave_1) entered blocking state [ 1731.350899][T12176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1731.616144][T21375] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1731.688441][T21565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4366'. [ 1731.808757][T21375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1732.704159][ T29] kauditd_printk_skb: 2990 callbacks suppressed [ 1732.704178][ T29] audit: type=1400 audit(1736277291.135:465874): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21579 comm="modprobe" name="/" dev="sda1" ino=2 [ 1732.704404][ T59] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1732.716518][ T29] audit: type=1400 audit(1736277291.135:465875): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21579 comm="modprobe" name="lib" dev="sda1" ino=239 [ 1732.818988][T21580] program syz.6.4370 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1732.916717][T21573] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1732.971369][T21573] audit: audit_lost=232011 audit_rate_limit=0 audit_backlog_limit=64 [ 1732.975107][T20247] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1732.986169][T21573] audit: backlog limit exceeded [ 1732.986329][T21573] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1732.986348][T21573] audit: audit_lost=232012 audit_rate_limit=0 audit_backlog_limit=64 [ 1732.986368][T21573] audit: backlog limit exceeded [ 1732.994411][T21375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1733.003430][ T29] audit: type=1400 audit(1736277291.135:465876): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21579 comm="modprobe" name="/" dev="sda1" ino=2 [ 1733.068755][ T59] usb 1-1: Using ep0 maxpacket: 8 [ 1733.100660][ T59] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1733.147847][ T59] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1733.241843][ T59] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1733.288214][ T59] usb 1-1: Product: ⼘ [ 1733.319986][ T59] usb 1-1: Manufacturer: Л [ 1733.348068][ T59] usb 1-1: SerialNumber:   [ 1735.069936][T21375] veth0_vlan: entered promiscuous mode [ 1735.072379][ T59] usb 1-1: USB disconnect, device number 74 [ 1735.105458][T21375] veth1_vlan: entered promiscuous mode [ 1735.283400][T21375] veth0_macvtap: entered promiscuous mode [ 1735.294914][T21375] veth1_macvtap: entered promiscuous mode [ 1735.349673][T21375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1735.360524][T21375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.371012][T21375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1735.381805][T21375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.392266][T21375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1735.403119][T21375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.413759][T21375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1735.425067][T21375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.435152][T21375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1735.445651][T21375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.455623][T21375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1735.466799][T21375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.476777][T21375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1735.487574][T21375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.497516][T21375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1735.508175][T21375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.519847][T21375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1735.531314][T21375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1735.542096][T21375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.552607][T21375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1735.563375][T21375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.574183][T21375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1735.584861][T21375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.595146][T21375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1735.605717][T21375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.615673][T21375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1735.626637][T21375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.636878][T21375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1735.647414][T21375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.657452][T21375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1735.667990][T21375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.677961][T21375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1735.688483][T21375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1735.699712][T21375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1735.710222][T21375] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.719127][T21375] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.727940][T21375] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.737163][T21375] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1735.859656][ T59] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1736.027737][T21616] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4376'. [ 1736.038560][ T59] usb 1-1: device descriptor read/64, error -71 [ 1736.307279][ T59] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1736.456979][ T59] usb 1-1: device descriptor read/64, error -71 [ 1736.601581][ T59] usb usb1-port1: attempt power cycle [ 1736.980580][ T59] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1736.991664][T12176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1736.999749][T12176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1737.064548][ T59] usb 1-1: device descriptor read/8, error -71 [ 1737.526264][ T59] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1737.542184][ T3027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1737.550430][ T3027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1737.569395][ T59] usb 1-1: device descriptor read/8, error -71 [ 1737.686352][ T59] usb usb1-port1: unable to enumerate USB device [ 1738.060269][ T29] kauditd_printk_skb: 3530 callbacks suppressed [ 1738.066708][ T29] audit: type=1400 audit(1736277296.139:467659): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21622 comm="syz.8.4380" name="char" dev="devtmpfs" ino=1318 [ 1738.651476][ T29] audit: type=1400 audit(1736277296.168:467660): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21622 comm="syz.8.4380" name="/" dev="devtmpfs" ino=1 [ 1738.754321][T21628] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1738.761065][T21628] audit: audit_lost=232599 audit_rate_limit=0 audit_backlog_limit=64 [ 1738.769352][T21628] audit: backlog limit exceeded [ 1738.774386][T21628] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1738.780970][T21628] audit: audit_lost=232600 audit_rate_limit=0 audit_backlog_limit=64 [ 1738.789132][T21628] audit: backlog limit exceeded [ 1738.794124][T21628] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1738.801379][T21628] audit: audit_lost=232601 audit_rate_limit=0 audit_backlog_limit=64 [ 1739.907777][T18841] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1740.755017][T21639] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4384'. [ 1743.559256][T20247] audit_log_start: 1514 callbacks suppressed [ 1743.559278][T20247] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1743.576651][T16575] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1743.583222][T16575] audit: audit_lost=232819 audit_rate_limit=0 audit_backlog_limit=64 [ 1743.591464][T20247] audit: audit_lost=232820 audit_rate_limit=0 audit_backlog_limit=64 [ 1743.599658][T20247] audit: backlog limit exceeded [ 1743.604700][T20247] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1743.611531][T16575] audit: backlog limit exceeded [ 1743.617151][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1743.617177][ C0] audit: audit_lost=232821 audit_rate_limit=0 audit_backlog_limit=64 [ 1743.617198][ C0] audit: backlog limit exceeded [ 1746.682020][ T7842] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1746.990399][T21709] netlink: 92 bytes leftover after parsing attributes in process `syz.6.4407'. [ 1747.672361][T21732] dummy0: mtu less than device minimum [ 1747.895418][T18851] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1747.954413][T21739] netlink: 'syz.6.4417': attribute type 1 has an invalid length. [ 1749.012740][T19360] audit_log_start: 5101 callbacks suppressed [ 1749.012794][T19360] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1749.061125][T19360] audit: audit_lost=233585 audit_rate_limit=0 audit_backlog_limit=64 [ 1749.086764][T18851] usb 5-1: Using ep0 maxpacket: 32 [ 1749.122818][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1749.129492][ C0] audit: audit_lost=233586 audit_rate_limit=0 audit_backlog_limit=64 [ 1749.137767][ C0] audit: backlog limit exceeded [ 1749.418701][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1749.425362][ C0] audit: audit_lost=233587 audit_rate_limit=0 audit_backlog_limit=64 [ 1749.433535][ C0] audit: backlog limit exceeded [ 1749.439072][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1749.445648][ C0] audit: audit_lost=233588 audit_rate_limit=0 audit_backlog_limit=64 [ 1749.514765][T18851] usb 5-1: New USB device found, idVendor=06cd, idProduct=0110, bcdDevice=71.71 [ 1749.524248][T18851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1749.533141][T18851] usb 5-1: Product: syz [ 1749.537439][T18851] usb 5-1: Manufacturer: syz [ 1749.542569][T18851] usb 5-1: SerialNumber: syz [ 1749.600868][T18851] usb 5-1: config 0 descriptor?? [ 1749.616136][T18851] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected [ 1749.652451][T18851] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87 [ 1749.688472][T18851] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7 [ 1749.699867][T18851] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81 [ 1749.713804][T18851] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1 [ 1749.721630][T18851] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2 [ 1749.729452][T18851] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85 [ 1749.737415][T18851] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5 [ 1749.866945][T18851] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1749.955796][T21715] ref_ctr increment failed for inode: 0x35 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88805d5e7200 [ 1750.013933][T18851] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83 [ 1750.072252][T18851] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3 [ 1750.120976][T18851] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4 [ 1750.142321][T18851] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86 [ 1750.150506][T18851] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6 [ 1750.422005][T21714] uprobe: syz.4.4408:21714 failed to unregister, leaking uprobe [ 1750.537951][T18851] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1750.642143][T18851] usb 5-1: USB disconnect, device number 45 [ 1750.653295][T18851] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1750.670212][T18851] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1750.683345][T18851] keyspan 5-1:0.0: device disconnected [ 1750.847285][T21600] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1751.051062][T21760] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4423'. [ 1751.156025][T21600] usb 1-1: Using ep0 maxpacket: 8 [ 1751.203717][T21600] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1751.236711][T21770] 9pnet_fd: Insufficient options for proto=fd [ 1751.246403][T21600] usb 1-1: config 1 interface 0 altsetting 6 endpoint 0x2 has an invalid bInterval 255, changing to 11 [ 1751.269147][T21600] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1751.296866][T21600] usb 1-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 1751.315151][T21600] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.339802][T21600] usb 1-1: Product: syz [ 1751.351276][T21600] usb 1-1: Manufacturer: syz [ 1751.364234][T21600] usb 1-1: SerialNumber: syz [ 1751.622754][T21600] usbhid 1-1:1.0: can't add hid device: -71 [ 1751.644516][T21600] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 1751.675729][T21600] usb 1-1: USB disconnect, device number 79 [ 1753.927521][T21804] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4437'. [ 1754.371113][ T29] kauditd_printk_skb: 3683 callbacks suppressed [ 1754.371179][ T29] audit: type=1400 audit(1736277311.396:473310): lsm=SMACK fn=smack_task_setscheduler action=granted subject="_" object="_" requested=w pid=21808 comm="syz.6.4438" opid=21808 ocomm="syz.6.4438" [ 1754.594091][ T29] audit: type=1400 audit(1736277311.424:473311): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21797 comm="syz.9.4435" name="newroot" dev="tmpfs" ino=2 [ 1754.635156][ T29] audit: type=1400 audit(1736277311.424:473312): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21797 comm="syz.9.4435" name="/" dev="devtmpfs" ino=1 [ 1754.679251][T19360] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1754.704223][T19360] audit: audit_lost=234165 audit_rate_limit=0 audit_backlog_limit=64 [ 1754.713625][T21811] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1754.724210][T19360] audit: backlog limit exceeded [ 1754.731096][T21811] audit: audit_lost=234166 audit_rate_limit=0 audit_backlog_limit=64 [ 1754.740064][T16575] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1754.746579][T16575] audit: audit_lost=234167 audit_rate_limit=0 audit_backlog_limit=64 [ 1755.171509][T21811] overlayfs: overlapping lowerdir path [ 1755.945618][ T59] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1756.117377][ T59] usb 1-1: Using ep0 maxpacket: 16 [ 1756.132959][ T59] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 1756.167086][ T59] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1756.196360][ T59] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 1756.208444][ T59] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1756.218820][ T59] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1756.232365][ T59] usb 1-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 1756.255229][ T59] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1756.274792][ T59] usb 1-1: Product: syz [ 1756.285149][ T59] usb 1-1: Manufacturer: syz [ 1756.295956][ T59] usb 1-1: SerialNumber: syz [ 1756.316120][ T59] usb 1-1: config 0 descriptor?? [ 1756.383727][ T59] port100 1-1:0.0: NFC: Could not get supported command types [ 1757.632800][T21853] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4451'. [ 1758.528870][ T59] usb 1-1: USB disconnect, device number 80 [ 1758.776420][T21863] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1759.440160][T21866] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4455'. [ 1759.867993][T19360] audit_log_start: 2828 callbacks suppressed [ 1759.868014][T19360] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1759.869638][T20247] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1759.889093][T21868] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1759.896037][T21868] audit: audit_lost=234466 audit_rate_limit=0 audit_backlog_limit=64 [ 1759.912779][T20247] audit: audit_lost=234467 audit_rate_limit=0 audit_backlog_limit=64 [ 1759.920969][T21868] audit: backlog limit exceeded [ 1759.927374][T21867] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1759.934420][T21867] audit: audit_lost=234468 audit_rate_limit=0 audit_backlog_limit=64 [ 1759.942499][T21867] audit: backlog limit exceeded [ 1759.954394][T20247] audit: backlog limit exceeded [ 1761.322874][T21600] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1761.483399][T21600] usb 1-1: device descriptor read/64, error -71 [ 1762.413243][T21894] Invalid logical block size (201) [ 1762.531008][T21600] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1763.903333][T21600] usb 1-1: device descriptor read/64, error -71 [ 1764.018811][T21600] usb usb1-port1: attempt power cycle [ 1764.209314][T21908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1764.700238][T21908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1764.936225][T21600] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1764.995251][T21600] usb 1-1: device descriptor read/8, error -71 [ 1765.095199][T21924] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1765.302107][ T29] kauditd_printk_skb: 3000 callbacks suppressed [ 1765.302155][ T29] audit: type=1400 audit(1736277321.480:477198): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=21918 comm="syz.9.4474" saddr=10.128.0.169 src=30008 daddr=10.128.0.67 dest=37486 netif=eth0 [ 1765.838366][ T29] audit: type=1400 audit(1736277321.498:477199): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21918 comm="syz.9.4474" name="newroot" dev="tmpfs" ino=2 [ 1765.921929][ T29] audit: type=1400 audit(1736277321.498:477200): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21918 comm="syz.9.4474" name="/" dev="proc" ino=1 [ 1765.922497][T20247] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1765.940576][ T29] audit: type=1400 audit(1736277321.498:477201): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21918 comm="syz.9.4474" name="/" dev="proc" ino=1 [ 1765.940616][ T29] audit: type=1400 audit(1736277321.498:477202): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21918 comm="syz.9.4474" name="286" dev="proc" ino=81197 [ 1765.966881][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1765.966908][ C0] audit: audit_lost=234819 audit_rate_limit=0 audit_backlog_limit=64 [ 1765.966928][ C0] audit: backlog limit exceeded [ 1765.973575][T15024] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1766.058747][T21600] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1766.408662][T21600] usb 1-1: device descriptor read/8, error -71 [ 1767.011374][T21600] usb usb1-port1: unable to enumerate USB device [ 1768.914425][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1769.148319][T18844] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1769.330043][T18844] usb 10-1: Using ep0 maxpacket: 8 [ 1769.342374][T18844] usb 10-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1769.351953][T18844] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1769.360089][T18844] usb 10-1: Product: syz [ 1769.364624][T18844] usb 10-1: Manufacturer: syz [ 1769.369353][T18844] usb 10-1: SerialNumber: syz [ 1769.387153][T18844] usb 10-1: config 0 descriptor?? [ 1769.597503][ T59] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1769.616796][T18844] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1769.759665][T18844] gspca_sunplus: reg_w_riv err -71 [ 1769.768921][ T59] usb 5-1: Using ep0 maxpacket: 16 [ 1769.770972][T18844] sunplus 10-1:0.0: probe with driver sunplus failed with error -71 [ 1769.804257][ T59] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 32 [ 1769.804450][T18844] usb 10-1: USB disconnect, device number 10 [ 1769.842338][ T59] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 1769.882884][ T59] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1769.907171][ T59] usb 5-1: Product: syz [ 1769.922649][ T59] usb 5-1: Manufacturer: syz [ 1769.933550][ T59] usb 5-1: SerialNumber: syz [ 1769.946662][ T59] usb 5-1: config 0 descriptor?? [ 1769.956099][T21957] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1770.017529][ T59] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1770.735999][ T29] kauditd_printk_skb: 2276 callbacks suppressed [ 1770.736020][ T29] audit: type=1400 audit(1736277326.708:478918): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21974 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1771.051688][ T29] audit: type=1400 audit(1736277326.746:478919): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21976 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1771.269197][T20919] usb 5-1: Failed to submit usb control message: -110 [ 1771.309838][ T29] audit: type=1400 audit(1736277326.746:478920): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21976 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1771.449758][T20919] usb 5-1: unable to send the bmi data to the device: -110 [ 1771.462143][T21978] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1771.468851][T21978] audit: audit_lost=235010 audit_rate_limit=0 audit_backlog_limit=64 [ 1771.476997][T21978] audit: backlog limit exceeded [ 1771.482073][T21978] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1771.488610][T21978] audit: audit_lost=235011 audit_rate_limit=0 audit_backlog_limit=64 [ 1771.496827][T21978] audit: backlog limit exceeded [ 1771.501785][T21978] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1771.575554][T20919] usb 5-1: unable to get target info from device [ 1771.596405][T20919] usb 5-1: could not get target info (-110) [ 1771.609910][T20919] usb 5-1: could not probe fw (-110) [ 1773.694994][T21619] usb 5-1: USB disconnect, device number 46 [ 1773.772389][T22000] ALSA: mixer_oss: invalid OSS volume 'u' [ 1774.304479][T22013] netlink: 'syz.0.4495': attribute type 1 has an invalid length. [ 1775.499673][T22013] block device autoloading is deprecated and will be removed. [ 1775.572604][T22013] bio_check_eod: 2 callbacks suppressed [ 1775.572670][T22013] syz.0.4495: attempt to access beyond end of device [ 1775.572670][T22013] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 1776.149474][ T29] kauditd_printk_skb: 1947 callbacks suppressed [ 1776.149495][ T29] audit: type=1400 audit(1736277331.769:480397): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22018 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1776.204578][ T29] audit: type=1400 audit(1736277331.769:480398): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=0 comm="swapper/0" saddr=10.128.0.169 src=30008 daddr=10.128.0.67 dest=37486 netif=eth0 [ 1776.253285][T22019] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1776.260090][T19360] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1776.260500][T15024] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1776.266614][T19360] audit: audit_lost=235170 audit_rate_limit=0 audit_backlog_limit=64 [ 1776.282092][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1776.288663][ C0] audit: audit_lost=235171 audit_rate_limit=0 audit_backlog_limit=64 [ 1776.296935][ C0] audit: backlog limit exceeded [ 1776.310487][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1778.311024][T21600] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1779.165543][T21600] usb 1-1: Using ep0 maxpacket: 8 [ 1779.987519][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1780.053657][T21600] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1780.062869][T21600] usb 1-1: config 1 has an invalid descriptor of length 37, skipping remainder of the config [ 1780.095463][T21600] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1780.120651][T21600] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1780.148131][T21600] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1780.213905][T21600] usb 1-1: Product: ⢻Ṃ岵奒ⲻ鄇੊楕ꆾ⠬ꗮ膏ꙍ韮徢걇 [ 1780.254268][T21600] usb 1-1: Manufacturer: ⠁ [ 1780.299583][T21600] usb 1-1: SerialNumber: 䜕療嬿Փʩ䁫몽ይ䘐鏡ᬀ捹ㅪ坏쏨憃䑳೟厦홵鸞㢁칞莌퐾᫅Һ醑㗍⭨鼔缜↻난嘔᭴࡫傸펵鲈⦛⫷腐ജ꓌㕟ڛꭉ灩潶ᝥ۱觊뽭亏샋ꫮ굅董腮韺 [ 1780.741461][T21600] usb 1-1: 0:2 : does not exist [ 1780.764629][T21600] usb 1-1: USB disconnect, device number 85 [ 1781.164737][T18841] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1781.335857][T18841] usb 5-1: Using ep0 maxpacket: 16 [ 1781.345604][T18841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1781.379074][T18841] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1781.430759][T18841] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1781.526911][T19360] audit_log_start: 3771 callbacks suppressed [ 1781.526928][T19360] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1781.540186][ T29] audit: type=1400 audit(1736277336.801:481764): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19360 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1781.603807][T19360] audit: audit_lost=235980 audit_rate_limit=0 audit_backlog_limit=64 [ 1781.628457][T19360] audit: backlog limit exceeded [ 1781.674117][T19360] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1781.763688][ T29] audit: type=1400 audit(1736277336.801:481765): lsm=SMACK fn=smack_socket_sock_rcv_skb action=granted subject="_" object="_" requested=w pid=19360 comm="syz-executor" saddr=10.128.0.169 src=30008 daddr=10.128.0.67 dest=37486 netif=eth0 [ 1781.793196][ T29] audit: type=1400 audit(1736277336.801:481766): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19360 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1782.353011][T18841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1782.353961][T20247] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1782.374694][ T27] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1782.381278][ T27] audit: audit_lost=235981 audit_rate_limit=0 audit_backlog_limit=64 [ 1782.391037][T18841] usb 5-1: config 0 descriptor?? [ 1783.534310][T21600] kernel write not supported for file /uhid (pid: 21600 comm: kworker/0:0) [ 1783.723281][T18841] usbhid 5-1:0.0: can't add hid device: -71 [ 1783.730355][T18841] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1783.741734][T18841] usb 5-1: USB disconnect, device number 47 [ 1786.845440][T22120] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4526'. [ 1786.937592][ T29] kauditd_printk_skb: 2038 callbacks suppressed [ 1786.937652][ T29] audit: type=1400 audit(1736277341.787:483516): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22121 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1786.963715][ T29] audit: type=1400 audit(1736277341.787:483517): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22121 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1786.982433][T21375] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1786.985565][ T29] audit: type=1400 audit(1736277341.787:483518): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22121 comm="syz-executor" name="106" dev="tmpfs" ino=569 [ 1787.055363][ T29] audit: type=1400 audit(1736277341.787:483519): lsm=SMACK fn=smack_task_setpgid action=granted subject="_" object="_" requested=w pid=22121 comm="syz-executor" opid=22121 ocomm="syz-executor" [ 1787.224308][T21375] audit: audit_lost=236079 audit_rate_limit=0 audit_backlog_limit=64 [ 1787.226267][ T29] audit: type=1400 audit(1736277341.787:483520): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22121 comm="syz-executor" name="106" dev="tmpfs" ino=569 [ 1787.254221][ T29] audit: type=1400 audit(1736277341.787:483521): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22121 comm="syz-executor" name="106" dev="tmpfs" ino=569 [ 1787.274792][ T29] audit: type=1400 audit(1736277341.787:483522): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=22121 comm="syz-executor" name="106" dev="tmpfs" ino=569 [ 1787.274823][T21375] audit: backlog limit exceeded [ 1788.803412][ T59] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1789.086435][ T59] usb 10-1: Using ep0 maxpacket: 32 [ 1789.096581][ T59] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1789.407188][ T59] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1789.416391][ T59] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1789.424626][ T59] usb 10-1: Product: syz [ 1789.429302][ T59] usb 10-1: Manufacturer: syz [ 1789.434036][ T59] usb 10-1: SerialNumber: syz [ 1789.443379][ T59] usb 10-1: config 0 descriptor?? [ 1789.717323][T18841] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1789.895997][T18841] usb 5-1: Using ep0 maxpacket: 32 [ 1791.028089][ T59] gs_usb 10-1:0.0: Couldn't get device config: (err=-110) [ 1791.067783][ T59] gs_usb 10-1:0.0: probe with driver gs_usb failed with error -110 [ 1791.109772][T18841] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1791.118227][T18841] usb 5-1: config 0 has no interface number 0 [ 1791.124469][T18841] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1791.136275][T18841] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1791.146662][T18841] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1791.156601][T18841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1791.169924][T18841] usb 5-1: config 0 descriptor?? [ 1791.936333][ T59] usb 10-1: USB disconnect, device number 11 [ 1792.305767][ T29] kauditd_printk_skb: 1559 callbacks suppressed [ 1792.305823][ T29] audit: type=1400 audit(1736277346.894:484979): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22145 comm="syz.4.4536" name="newroot" dev="tmpfs" ino=2 [ 1792.614329][ T29] audit: type=1400 audit(1736277346.922:484980): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22145 comm="syz.4.4536" name="/" dev="devtmpfs" ino=1 [ 1792.641269][T15024] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1792.648082][T22147] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1792.654771][T22147] audit: audit_lost=236114 audit_rate_limit=0 audit_backlog_limit=64 [ 1792.657337][T22170] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1792.664614][T15024] audit: audit_lost=236115 audit_rate_limit=0 audit_backlog_limit=64 [ 1792.680347][T22147] audit: backlog limit exceeded [ 1792.682222][T22172] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1792.685456][T22147] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1793.058967][T21600] IPVS: starting estimator thread 0... [ 1793.067606][T18841] usbhid 5-1:0.1: can't add hid device: -71 [ 1793.073793][T18841] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 1793.125996][T18841] usb 5-1: USB disconnect, device number 48 [ 1793.245178][T22184] IPVS: using max 21 ests per chain, 50400 per kthread [ 1794.996896][T22206] netlink: 272 bytes leftover after parsing attributes in process `syz.0.4551'. [ 1795.459731][T22214] Cannot find del_set index 0 as target [ 1797.841834][T22232] netlink: 'syz.8.4557': attribute type 1 has an invalid length. [ 1798.160002][T19360] audit_log_start: 2524 callbacks suppressed [ 1798.160036][T19360] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1798.162715][T20247] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1798.179290][T20247] audit: audit_lost=236332 audit_rate_limit=0 audit_backlog_limit=64 [ 1798.184014][T16575] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1798.187496][T20247] audit: backlog limit exceeded [ 1798.193907][T16575] audit: audit_lost=236333 audit_rate_limit=0 audit_backlog_limit=64 [ 1798.199079][T19360] audit: audit_lost=236334 audit_rate_limit=0 audit_backlog_limit=64 [ 1798.325991][T22235] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1798.332654][T22235] audit: audit_lost=236335 audit_rate_limit=0 audit_backlog_limit=64 [ 1798.341126][T22235] audit: backlog limit exceeded [ 1799.023629][T22242] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4559'. [ 1801.769650][T18851] usb 1-1: new full-speed USB device number 86 using dummy_hcd [ 1801.959710][T22250] lo speed is unknown, defaulting to 1000 [ 1801.972854][T18851] usb 1-1: config 1 has an invalid descriptor of length 236, skipping remainder of the config [ 1801.990315][T18851] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1802.016302][T18851] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1802.064188][T18851] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1802.074804][T22252] netlink: 32 bytes leftover after parsing attributes in process `syz.8.4562'. [ 1802.109243][T18851] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1802.117318][T18851] usb 1-1: Product: syz [ 1802.127105][T22250] lo speed is unknown, defaulting to 1000 [ 1802.158925][T18851] usb 1-1: Manufacturer: syz [ 1802.183343][T22250] lo speed is unknown, defaulting to 1000 [ 1802.199713][T18851] usb 1-1: SerialNumber: syz [ 1802.231423][T18851] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 1802.252313][T18851] cdc_ncm 1-1:1.0: bind() failure [ 1802.573027][T22258] netlink: 'syz.4.4563': attribute type 1 has an invalid length. [ 1802.684408][T22250] infiniband syz0: set active [ 1802.695584][T22250] infiniband syz0: added lo [ 1802.700309][T18844] lo speed is unknown, defaulting to 1000 [ 1802.708867][T22250] syz0: rxe_create_cq: returned err = -12 [ 1802.712906][ T5871] usb 1-1: USB disconnect, device number 86 [ 1802.715363][T22250] infiniband syz0: Couldn't create ib_mad CQ [ 1802.727910][T22250] infiniband syz0: Couldn't open port 1 [ 1802.796066][T22250] RDS/IB: syz0: added [ 1802.800907][T22250] smc: adding ib device syz0 with port count 1 [ 1802.812164][T22250] smc: ib device syz0 port 1 has pnetid [ 1802.831313][T18844] lo speed is unknown, defaulting to 1000 [ 1802.860109][T22250] lo speed is unknown, defaulting to 1000 [ 1803.202531][T22250] lo speed is unknown, defaulting to 1000 [ 1803.301093][T22250] lo speed is unknown, defaulting to 1000 [ 1803.375979][T22250] lo speed is unknown, defaulting to 1000 [ 1803.450072][T22250] lo speed is unknown, defaulting to 1000 [ 1803.524191][T22250] lo speed is unknown, defaulting to 1000 [ 1803.597403][T22250] lo speed is unknown, defaulting to 1000 [ 1803.671855][T22250] lo speed is unknown, defaulting to 1000 [ 1803.746752][T22250] lo speed is unknown, defaulting to 1000 [ 1803.820657][T22250] lo speed is unknown, defaulting to 1000 [ 1803.912287][T16575] audit_log_start: 1433 callbacks suppressed [ 1803.912303][T16575] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1803.925143][T16575] audit: audit_lost=236561 audit_rate_limit=0 audit_backlog_limit=64 [ 1803.933758][T16575] audit: backlog limit exceeded [ 1803.938719][T16575] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1803.945239][T16575] audit: audit_lost=236562 audit_rate_limit=0 audit_backlog_limit=64 [ 1803.953388][T16575] audit: backlog limit exceeded [ 1803.958425][T16575] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1803.964933][T16575] audit: audit_lost=236563 audit_rate_limit=0 audit_backlog_limit=64 [ 1803.973092][T16575] audit: backlog limit exceeded [ 1803.978267][T16575] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1805.571745][T21600] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 1805.744990][T21600] usb 1-1: config 0 has an invalid interface number: 138 but max is 0 [ 1805.754095][T21600] usb 1-1: config 0 has no interface number 0 [ 1805.774977][T21600] usb 1-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0xBB, changing to 0x8B [ 1805.821403][T21600] usb 1-1: config 0 interface 138 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1805.854984][T21600] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=c8.66 [ 1805.885738][T21600] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1805.975140][T21600] usb 1-1: config 0 descriptor?? [ 1806.844145][T22273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1807.100129][T22273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1807.169641][T21600] usb 1-1: string descriptor 0 read error: -71 [ 1807.200841][T21600] usbtest 1-1:0.138: couldn't get endpoints, -22 [ 1807.241658][T21600] usbtest 1-1:0.138: probe with driver usbtest failed with error -22 [ 1807.532058][T21600] usb 1-1: USB disconnect, device number 87 [ 1807.559656][T16189] Bluetooth: hci1: link tx timeout [ 1807.565641][T16189] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1807.691781][T15025] Bluetooth: hci1: link tx timeout [ 1807.697353][T15025] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 1808.225864][T22305] netlink: 'syz.0.4580': attribute type 1 has an invalid length. [ 1808.261627][T22305] netlink: 'syz.0.4580': attribute type 2 has an invalid length. [ 1809.249253][T21600] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1809.264355][ T29] kauditd_printk_skb: 2413 callbacks suppressed [ 1809.264378][ T29] audit: type=1400 audit(1736277362.749:489669): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=22314 comm="syz.9.4585" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1809.312107][ T29] audit: type=1400 audit(1736277362.749:489670): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=22314 comm="syz.9.4585" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1809.342453][ T29] audit: type=1400 audit(1736277362.824:489671): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=r pid=22314 comm="syz.9.4585" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1809.829536][T16189] Bluetooth: hci1: command 0x0406 tx timeout [ 1810.146492][T19360] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1810.154640][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1810.161359][ C0] audit: audit_lost=236690 audit_rate_limit=0 audit_backlog_limit=64 [ 1810.164305][T19360] audit: audit_lost=236691 audit_rate_limit=0 audit_backlog_limit=64 [ 1810.169518][ C0] audit: backlog limit exceeded [ 1810.169686][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1810.179891][T15024] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1810.187521][T21600] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 1810.207858][T21600] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 1810.219198][T21600] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 1810.231302][T21600] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1810.244176][T21600] usb 10-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1810.258291][T21600] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1810.266972][T21600] usb 10-1: Product: syz [ 1810.271265][T21600] usb 10-1: Manufacturer: syz [ 1810.276056][T21600] usb 10-1: SerialNumber: syz [ 1810.287478][T21600] usb 10-1: config 0 descriptor?? [ 1810.297831][T21600] iguanair 10-1:0.0: failed to get version [ 1810.308703][T21600] iguanair 10-1:0.0: probe with driver iguanair failed with error -90 [ 1810.814068][T21600] usb 10-1: USB disconnect, device number 12 [ 1811.587270][T22344] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4594'. [ 1812.677897][T22359] netlink: 'syz.9.4599': attribute type 1 has an invalid length. [ 1813.163853][T22363] FAULT_INJECTION: forcing a failure. [ 1813.163853][T22363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1813.251722][T12858] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1813.268603][T22363] CPU: 1 UID: 0 PID: 22363 Comm: syz.0.4600 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 1813.279448][T22363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1813.289550][T22363] Call Trace: [ 1813.292859][T22363] [ 1813.295831][T22363] dump_stack_lvl+0x241/0x360 [ 1813.300534][T22363] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1813.305750][T22363] ? __pfx__printk+0x10/0x10 [ 1813.310355][T22363] ? __pfx_lock_release+0x10/0x10 [ 1813.315487][T22363] should_fail_ex+0x3b0/0x4e0 [ 1813.320200][T22363] _copy_from_user+0x2f/0xc0 [ 1813.324845][T22363] csum_and_copy_from_iter_full+0x4e2/0x2190 [ 1813.330869][T22363] ? rcu_is_watching+0x15/0xb0 [ 1813.335673][T22363] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 1813.342107][T22363] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 1813.348723][T22363] ? __build_skb_around+0x245/0x3d0 [ 1813.353956][T22363] ip_generic_getfrag+0x158/0x310 [ 1813.359013][T22363] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1813.364584][T22363] ? raw6_getfrag+0x104/0x350 [ 1813.369281][T22363] ? skb_put+0x114/0x1f0 [ 1813.373549][T22363] __ip6_append_data+0x3356/0x4460 [ 1813.379136][T22363] ? __pfx_raw6_getfrag+0x10/0x10 [ 1813.384207][T22363] ? __pfx___ip6_append_data+0x10/0x10 [ 1813.389721][T22363] ? ip6_setup_cork+0x9f7/0x1080 [ 1813.394678][T22363] ip6_append_data+0x264/0x3a0 [ 1813.399481][T22363] ? __pfx_raw6_getfrag+0x10/0x10 [ 1813.404573][T22363] rawv6_sendmsg+0x18ec/0x23d0 [ 1813.409400][T22363] ? mark_lock+0x9a/0x360 [ 1813.413813][T22363] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 1813.418994][T22363] ? smack_socket_sendmsg+0x178/0x540 [ 1813.424429][T22363] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1813.430213][T22363] ? tomoyo_socket_sendmsg_permission+0x288/0x420 [ 1813.436701][T22363] ? sock_rps_record_flow+0x1a/0x400 [ 1813.442031][T22363] ? inet_sendmsg+0x330/0x390 [ 1813.446740][T22363] __sock_sendmsg+0x1a6/0x270 [ 1813.451436][T22363] ____sys_sendmsg+0x52a/0x7e0 [ 1813.456224][T22363] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1813.461531][T22363] ? __fget_files+0x2a/0x410 [ 1813.466145][T22363] ? __fget_files+0x2a/0x410 [ 1813.470763][T22363] __sys_sendmmsg+0x36a/0x720 [ 1813.475466][T22363] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1813.480687][T22363] ? __pfx_lock_release+0x10/0x10 [ 1813.485721][T22363] ? kstrtouint_from_user+0x128/0x190 [ 1813.491119][T22363] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1813.497037][T22363] ? ksys_write+0x22a/0x2b0 [ 1813.501550][T22363] ? __pfx_lock_release+0x10/0x10 [ 1813.506590][T22363] ? vfs_write+0x730/0xd30 [ 1813.511021][T22363] ? __mutex_unlock_slowpath+0x21e/0x790 [ 1813.516685][T22363] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1813.522675][T22363] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1813.529010][T22363] ? do_syscall_64+0x100/0x230 [ 1813.533788][T22363] __x64_sys_sendmmsg+0xa0/0xb0 [ 1813.538680][T22363] do_syscall_64+0xf3/0x230 [ 1813.543202][T22363] ? clear_bhb_loop+0x35/0x90 [ 1813.547903][T22363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1813.553809][T22363] RIP: 0033:0x7ff7f3385d29 [ 1813.558233][T22363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1813.577855][T22363] RSP: 002b:00007ff7f4210038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1813.586285][T22363] RAX: ffffffffffffffda RBX: 00007ff7f3576080 RCX: 00007ff7f3385d29 [ 1813.594286][T22363] RDX: 0000000000000001 RSI: 0000000020001ac0 RDI: 0000000000000004 [ 1813.602287][T22363] RBP: 00007ff7f4210090 R08: 0000000000000000 R09: 0000000000000000 [ 1813.610263][T22363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1813.618245][T22363] R13: 0000000000000000 R14: 00007ff7f3576080 R15: 00007ffee1f17dd8 [ 1813.626262][T22363] [ 1814.621311][ T29] kauditd_printk_skb: 2787 callbacks suppressed [ 1814.621332][ T29] audit: type=1400 audit(1736277367.763:492106): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=20247 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1814.657209][T20247] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1814.657251][T21375] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1814.671078][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1814.671104][ C0] audit: audit_lost=236810 audit_rate_limit=0 audit_backlog_limit=64 [ 1814.671122][ C0] audit: backlog limit exceeded [ 1814.677256][T22381] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1814.678540][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1814.686957][T20247] audit: audit_lost=236811 audit_rate_limit=0 audit_backlog_limit=64 [ 1814.691367][ C0] audit: audit_lost=236812 audit_rate_limit=0 audit_backlog_limit=64 [ 1815.855870][ T59] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1816.082711][ T59] usb 10-1: Using ep0 maxpacket: 8 [ 1816.190501][ T59] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1816.262540][ T59] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1816.317170][ T59] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1816.400824][ T59] usb 10-1: config 0 descriptor?? [ 1816.772642][ T59] iowarrior 10-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1816.777241][T22397] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4611'. [ 1817.128623][T18851] usb 10-1: USB disconnect, device number 13 [ 1818.992374][T22408] netlink: 'syz.0.4615': attribute type 1 has an invalid length. [ 1819.715042][T21600] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1819.935850][T21600] usb 10-1: Using ep0 maxpacket: 16 [ 1820.003818][ T29] kauditd_printk_skb: 2955 callbacks suppressed [ 1820.003841][ T29] audit: type=1400 audit(1736277372.758:494048): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=19360 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1820.104582][T22432] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1820.104711][T22433] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1820.111309][T22432] audit: audit_lost=237152 audit_rate_limit=0 audit_backlog_limit=64 [ 1820.126448][T22432] audit: backlog limit exceeded [ 1820.126548][T19360] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1820.131569][T22432] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1820.146551][T22432] audit: audit_lost=237153 audit_rate_limit=0 audit_backlog_limit=64 [ 1820.150454][T22433] audit: audit_lost=237154 audit_rate_limit=0 audit_backlog_limit=64 [ 1820.157070][ T29] audit: type=1400 audit(1736277372.768:494049): lsm=SMACK fn=smack_file_ioctl action=granted subject="_" object="_" requested=w pid=22411 comm="syz.9.4617" path="/dev/raw-gadget" dev="devtmpfs" ino=820 [ 1820.685494][T22439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1820.767222][T22439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1820.880208][T18844] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1820.902232][T18835] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1821.098176][T18844] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1821.136422][T18844] usb 5-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=62.70 [ 1821.170624][T18844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1821.691148][T18844] usb 5-1: Product: syz [ 1821.695832][T18844] usb 5-1: Manufacturer: syz [ 1821.700808][T18844] usb 5-1: SerialNumber: syz [ 1821.737499][T18844] usb 5-1: config 0 descriptor?? [ 1821.966831][ T59] usb 5-1: USB disconnect, device number 49 [ 1822.262317][T21600] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1822.271124][T21600] usb 10-1: unable to read config index 0 descriptor/start: -71 [ 1822.278834][T21600] usb 10-1: can't read configurations, error -71 [ 1822.348058][T22450] xt_cluster: node mask cannot exceed total number of nodes [ 1825.381779][T21375] audit_log_start: 1492 callbacks suppressed [ 1825.381811][T21375] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1825.395160][T21375] audit: audit_lost=237335 audit_rate_limit=0 audit_backlog_limit=64 [ 1825.403721][T21375] audit: backlog limit exceeded [ 1825.408634][T21375] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1825.415276][T21375] audit: audit_lost=237336 audit_rate_limit=0 audit_backlog_limit=64 [ 1825.423399][T21375] audit: backlog limit exceeded [ 1825.428568][T21375] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1825.435207][T21375] audit: audit_lost=237337 audit_rate_limit=0 audit_backlog_limit=64 [ 1825.443326][T21375] audit: backlog limit exceeded [ 1825.448364][T21375] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1825.488874][T22470] netlink: 'syz.4.4629': attribute type 1 has an invalid length. [ 1829.388431][T22502] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4639'. [ 1830.822827][ T29] kauditd_printk_skb: 1801 callbacks suppressed [ 1830.822850][ T29] audit: type=1400 audit(1736277382.907:495879): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=21375 comm="syz-executor" name="newroot" dev="tmpfs" ino=2 [ 1830.874944][T15024] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1830.882633][T22508] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1830.882695][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1830.895798][ C0] audit: audit_lost=237647 audit_rate_limit=0 audit_backlog_limit=64 [ 1830.903946][ C0] audit: backlog limit exceeded [ 1830.904188][T21375] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1830.909288][ C0] audit: audit_backlog=66 > audit_backlog_limit=64 [ 1830.922109][ C0] audit: audit_lost=237648 audit_rate_limit=0 audit_backlog_limit=64 [ 1830.930252][ C0] audit: backlog limit exceeded [ 1831.183664][T22513] netlink: 'syz.4.4642': attribute type 1 has an invalid length. [ 1833.208614][T22528] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1834.661138][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1835.384455][T22552] input: syz1 as /devices/virtual/input/input35 [ 1836.200414][ T29] kauditd_printk_skb: 3500 callbacks suppressed [ 1836.200435][ T29] audit: type=1400 audit(1736277387.949:498167): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22566 comm="syz-executor" name="464" dev="tmpfs" ino=2549 [ 1836.240397][T20247] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1836.247764][T22566] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1836.247850][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1836.255495][T16575] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1836.260870][ C0] audit: audit_lost=238054 audit_rate_limit=0 audit_backlog_limit=64 [ 1836.260893][ C0] audit: backlog limit exceeded [ 1836.278460][T22566] audit: audit_lost=238055 audit_rate_limit=0 audit_backlog_limit=64 [ 1836.280948][ C0] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1836.289092][T20247] audit: audit_lost=238056 audit_rate_limit=0 audit_backlog_limit=64 [ 1836.402877][ T5824] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 1836.857744][ T5824] usb 5-1: config 1 interface 0 altsetting 9 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1836.997057][ T5824] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1837.140215][ T5824] usb 5-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice= 0.40 [ 1837.157574][ T5824] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1837.165986][ T5824] usb 5-1: Product: К [ 1837.170245][ T5824] usb 5-1: Manufacturer: 煌迫㒐ส䨒䵡끍둳苲㼄䗂棖⁸⽱촲쨖ꯞ挣酿ᓈ뻩࿙뉜㛪䑘㖡ⳑᔓ뻚礃綄⇋迌県ᩱ빉毇肁릧퀬礍䣬핢誮橊眥뽎㓼뀐쨼Ꭹᖆ悵뙶믣湅뎓櫧ٞ [ 1837.229852][ T5824] usb 5-1: SerialNumber: Д [ 1837.701666][ T5824] usbhid 5-1:1.0: can't add hid device: -71 [ 1838.525705][ T5824] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 1838.555452][ T5824] usb 5-1: USB disconnect, device number 50 [ 1839.578261][ T59] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1839.749843][ T59] usb 10-1: Using ep0 maxpacket: 16 [ 1839.776442][ T59] usb 10-1: config 0 has an invalid interface number: 196 but max is 1 [ 1839.817481][ T59] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1839.860716][ T59] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1839.920354][ T59] usb 10-1: config 0 has no interface number 0 [ 1839.926635][ T59] usb 10-1: config 0 interface 196 altsetting 119 endpoint 0xB has an invalid bInterval 248, changing to 11 [ 1839.952285][ T59] usb 10-1: config 0 interface 196 altsetting 119 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1839.962458][ T59] usb 10-1: config 0 interface 196 altsetting 119 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1839.976106][ T59] usb 10-1: config 0 interface 196 has no altsetting 0 [ 1840.018528][ T59] usb 10-1: New USB device found, idVendor=0a46, idProduct=1269, bcdDevice=1a.0a [ 1840.040790][ T59] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1840.086229][ T59] usb 10-1: Product: syz [ 1840.090583][ T59] usb 10-1: Manufacturer: syz [ 1840.123031][ T59] usb 10-1: SerialNumber: syz [ 1840.152544][ T59] usb 10-1: config 0 descriptor?? [ 1840.500374][T22611] ntfs3(nullb0): Primary boot signature is not NTFS. [ 1840.508636][T22611] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 1841.628853][ T29] kauditd_printk_skb: 2873 callbacks suppressed [ 1841.628882][ T29] audit: type=1400 audit(1736277393.019:500441): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22617 comm="syz.8.4675" name="newroot" dev="tmpfs" ino=2 [ 1842.483361][ T59] dm9601 10-1:0.196: probe with driver dm9601 failed with error -22 [ 1842.518549][ T29] audit: type=1400 audit(1736277393.019:500442): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=22617 comm="syz.8.4675" name="/" dev="devtmpfs" ino=1 [ 1842.551882][T20247] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1842.556825][T16575] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1842.558425][T20247] audit: audit_lost=238257 audit_rate_limit=0 audit_backlog_limit=64 [ 1842.565795][T19360] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1842.580549][T16575] audit: audit_lost=238258 audit_rate_limit=0 audit_backlog_limit=64 [ 1842.588952][T19360] audit: audit_lost=238259 audit_rate_limit=0 audit_backlog_limit=64 [ 1842.597436][T16575] audit: backlog limit exceeded [ 1842.602350][T16575] audit: audit_backlog=65 > audit_backlog_limit=64 [ 1843.197117][ T59] usb 10-1: USB disconnect, device number 16 [ 1843.967542][T22636] netlink: 'syz.9.4676': attribute type 10 has an invalid length. [ 1844.297208][T22636] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1844.576403][T22639] vlan2: entered promiscuous mode [ 1844.604809][T22639] dummy0: entered promiscuous mode [ 1844.624232][T22639] vlan2: entered allmulticast mode [ 1844.644389][T22639] dummy0: entered allmulticast mode [ 1844.702310][T22639] dummy0: left allmulticast mode [ 1844.747882][T22639] dummy0: left promiscuous mode [ 1844.761147][T22648] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1846.020419][T18835] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1846.283148][T18835] usb 10-1: Using ep0 maxpacket: 16 [ 1846.362341][T18835] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1846.373235][T18835] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1846.383270][T18835] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1846.462930][T18835] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 1846.498122][T18835] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1846.548198][T18835] usb 10-1: Product: syz [ 1846.571227][T18835] usb 10-1: Manufacturer: syz [ 1846.608739][T18835] usb 10-1: SerialNumber: syz [ 1846.642390][T18835] usb 10-1: config 0 descriptor?? [ 1846.686094][T22659] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1846.715005][T18835] mceusb 10-1:0.0: mceusb_dev_probe: device setup failed! [ 1846.763604][T18835] mceusb 10-1:0.0: probe with driver mceusb failed with error -12 [ 1846.796138][T22670] netlink: 'syz.6.4688': attribute type 32 has an invalid length. [ 1846.956025][ T2970] wlan1: Trigger new scan to find an IBSS to join [ 1846.977935][T21600] usb 10-1: USB disconnect, device number 17 [ 1846.994562][ T29] kauditd_printk_skb: 2860 callbacks suppressed [ 1846.994599][ T29] audit: type=1400 audit(1736277398.042:502615): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 1847.041807][ T29] audit: type=1400 audit(1736277398.042:502616): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27 comm="kdevtmpfs" name="bus" dev="devtmpfs" ino=718 [ 1847.060945][ T29] audit: type=1400 audit(1736277398.042:502617): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27 comm="kdevtmpfs" name="usb" dev="devtmpfs" ino=719 [ 1847.080578][ T29] audit: type=1400 audit(1736277398.042:502618): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27 comm="kdevtmpfs" name="010" dev="devtmpfs" ino=752 [ 1847.100056][ T29] audit: type=1400 audit(1736277398.042:502619): lsm=SMACK fn=smack_inode_getattr action=granted subject="_" object="_" requested=r pid=27 comm="kdevtmpfs" path="/bus/usb/010/017" dev="devtmpfs" ino=3305 [ 1847.120303][ T29] audit: type=1400 audit(1736277398.042:502620): lsm=SMACK fn=smack_inode_setattr action=granted subject="_" object="_" requested=w pid=27 comm="kdevtmpfs" name="017" dev="devtmpfs" ino=3305 [ 1847.139163][ T29] audit: type=1400 audit(1736277398.042:502621): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=wx pid=27 comm="kdevtmpfs" name="010" dev="devtmpfs" ino=752 [ 1847.162810][ T29] audit: type=1400 audit(1736277398.042:502622): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=27 comm="kdevtmpfs" name="017" dev="devtmpfs" ino=3305 [ 1847.182355][ T29] audit: type=1400 audit(1736277398.042:502623): lsm=SMACK fn=smack_inode_unlink action=granted subject="_" object="_" requested=w pid=27 comm="kdevtmpfs" name="010" dev="devtmpfs" ino=752 [ 1847.204398][ T29] audit: type=1400 audit(1736277398.042:502624): lsm=SMACK fn=smack_inode_permission action=granted subject="_" object="_" requested=x pid=27 comm="kdevtmpfs" name="/" dev="devtmpfs" ino=1 [ 1847.808577][T22680] veth1_macvtap: left promiscuous mode [ 1847.814328][T22680] macsec0: entered promiscuous mode [ 1848.153768][T22687] netlink: 'syz.6.4692': attribute type 3 has an invalid length. [ 1960.328158][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1960.335182][ C1] rcu: 0-...!: (3 ticks this GP) idle=3b2c/1/0x4000000000000000 softirq=103910/103910 fqs=4 [ 1960.347832][ C1] rcu: (detected by 1, t=10502 jiffies, g=123193, q=253 ncpus=2) [ 1960.355695][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1960.355737][ C0] NMI backtrace for cpu 0 [ 1960.355753][ C0] CPU: 0 UID: 0 PID: 22679 Comm: syz.8.4691 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 1960.355776][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1960.355788][ C0] RIP: 0010:__lock_acquire+0xd6b/0x2100 [ 1960.355818][ C0] Code: 30 0f b6 04 38 84 c0 0f 85 70 0c 00 00 48 8b 04 24 8b 18 48 85 db 74 59 83 fb 31 0f 83 9c 11 00 00 48 8d 04 9b 48 8b 4c 24 08 <48> 8d 5c c1 f8 48 89 d8 48 c1 e8 03 0f b6 04 38 84 c0 0f 85 9d 0d [ 1960.355833][ C0] RSP: 0018:ffffc90000007a50 EFLAGS: 00000083 [ 1960.355851][ C0] RAX: 0000000000000014 RBX: 0000000000000004 RCX: ffff88806272c6e0 [ 1960.355865][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: dffffc0000000000 [ 1960.355878][ C0] RBP: ffff88806272c780 R08: ffffffff9427188f R09: 1ffffffff284e311 [ 1960.355892][ C0] R10: dffffc0000000000 R11: fffffbfff284e312 R12: ffff88806272c6c4 [ 1960.355907][ C0] R13: ffff88806272bc00 R14: dcfc4406bfe332f8 R15: 0000000000000000 [ 1960.355926][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1960.355942][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1960.355955][ C0] CR2: 00007f1a3e6a56c0 CR3: 000000000e736000 CR4: 00000000003526f0 [ 1960.355972][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1960.355984][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1960.355996][ C0] Call Trace: [ 1960.356005][ C0] [ 1960.356015][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1960.356040][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1960.356060][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1960.356089][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1960.356116][ C0] ? nmi_handle+0x14f/0x5a0 [ 1960.356137][ C0] ? nmi_handle+0x2a/0x5a0 [ 1960.356158][ C0] ? __lock_acquire+0xd6b/0x2100 [ 1960.356176][ C0] ? default_do_nmi+0x63/0x160 [ 1960.356197][ C0] ? exc_nmi+0x123/0x1f0 [ 1960.356217][ C0] ? end_repeat_nmi+0xf/0x53 [ 1960.356240][ C0] ? __lock_acquire+0xd6b/0x2100 [ 1960.356259][ C0] ? __lock_acquire+0xd6b/0x2100 [ 1960.356279][ C0] ? __lock_acquire+0xd6b/0x2100 [ 1960.356299][ C0] [ 1960.356305][ C0] [ 1960.356319][ C0] lock_acquire+0x1ed/0x550 [ 1960.356339][ C0] ? __hrtimer_run_queues+0x670/0xd30 [ 1960.356365][ C0] ? advance_sched+0xa02/0xca0 [ 1960.356387][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1960.356409][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1960.356435][ C0] ? taprio_set_budgets+0x32c/0x370 [ 1960.356457][ C0] ? advance_sched+0xa02/0xca0 [ 1960.356477][ C0] ? advance_sched+0xa02/0xca0 [ 1960.356500][ C0] _raw_spin_lock_irq+0xd3/0x120 [ 1960.356522][ C0] ? __hrtimer_run_queues+0x670/0xd30 [ 1960.356546][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 1960.356573][ C0] __hrtimer_run_queues+0x670/0xd30 [ 1960.356605][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1960.356628][ C0] ? sched_clock+0x4a/0x70 [ 1960.356654][ C0] ? read_tsc+0x9/0x20 [ 1960.356679][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 1960.356702][ C0] hrtimer_interrupt+0x403/0xa40 [ 1960.356736][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 1960.356759][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1960.356784][ C0] [ 1960.356790][ C0] [ 1960.356797][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1960.356825][ C0] RIP: 0010:page_table_check_clear+0x7c/0x550 [ 1960.356853][ C0] Code: 00 00 49 89 c5 48 b8 00 00 00 00 00 fc ff df 4c 8d 64 1d 08 4c 89 e5 48 c1 ed 03 80 7c 05 00 00 74 08 4c 89 e7 e8 f4 72 f4 ff <49> 8b 1c 24 48 89 de 48 83 e6 01 31 ff e8 22 9f 90 ff 48 89 d8 48 [ 1960.356868][ C0] RSP: 0018:ffffc9000b4872a0 EFLAGS: 00000246 [ 1960.356885][ C0] RAX: dffffc0000000000 RBX: 000000000195f8c0 RCX: ffff88806272bc00 [ 1960.356898][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1960.356915][ C0] RBP: 1ffffd400032bf19 R08: ffffffff820ed0da R09: 1ffffffff284e310 [ 1960.356929][ C0] R10: dffffc0000000000 R11: fffffbfff284e311 R12: ffffea000195f8c8 [ 1960.356943][ C0] R13: ffff88801e1b76f0 R14: 0000000000000001 R15: ffffea000195f8c0 [ 1960.356959][ C0] ? page_ext_get+0x1ba/0x2a0 [ 1960.356990][ C0] unmap_page_range+0x2c2e/0x4040 [ 1960.357018][ C0] ? __lock_acquire+0x1397/0x2100 [ 1960.357053][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 1960.357084][ C0] ? mas_next_slot+0xdc6/0xea0 [ 1960.357111][ C0] ? uprobe_munmap+0x197/0x460 [ 1960.357132][ C0] ? unmap_single_vma+0x1bd/0x2b0 [ 1960.357162][ C0] unmap_vmas+0x3cc/0x5f0 [ 1960.357192][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 1960.357227][ C0] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 1960.357254][ C0] exit_mmap+0x275/0xc20 [ 1960.357280][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1960.357306][ C0] ? __pfx_exit_aio+0x10/0x10 [ 1960.357333][ C0] ? uprobe_clear_state+0x271/0x290 [ 1960.357351][ C0] ? mm_update_next_owner+0xa2/0x8a0 [ 1960.357371][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1960.357399][ C0] __mmput+0x115/0x3b0 [ 1960.357425][ C0] exit_mm+0x220/0x310 [ 1960.357445][ C0] ? __pfx_exit_mm+0x10/0x10 [ 1960.357463][ C0] ? taskstats_exit+0x326/0xa60 [ 1960.357484][ C0] do_exit+0x9ad/0x28e0 [ 1960.357507][ C0] ? __pfx_do_exit+0x10/0x10 [ 1960.357526][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1960.357554][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1960.357575][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1960.357594][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 1960.357618][ C0] do_group_exit+0x207/0x2c0 [ 1960.357638][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1960.357659][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1960.357685][ C0] get_signal+0x16b2/0x1750 [ 1960.357717][ C0] ? __pfx_get_signal+0x10/0x10 [ 1960.357745][ C0] arch_do_signal_or_restart+0x96/0x860 [ 1960.357773][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1960.357798][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1960.357823][ C0] ? syscall_exit_to_user_mode+0xa3/0x340 [ 1960.357850][ C0] syscall_exit_to_user_mode+0xce/0x340 [ 1960.357877][ C0] do_syscall_64+0x100/0x230 [ 1960.357904][ C0] ? clear_bhb_loop+0x35/0x90 [ 1960.357929][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1960.357955][ C0] RIP: 0033:0x7eff73185d29 [ 1960.357971][ C0] Code: Unable to access opcode bytes at 0x7eff73185cff. [ 1960.357981][ C0] RSP: 002b:00007eff70fd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1960.357999][ C0] RAX: 0000000000010106 RBX: 00007eff73376080 RCX: 00007eff73185d29 [ 1960.358013][ C0] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1960.358025][ C0] RBP: 00007eff73201b08 R08: 0000000000000000 R09: 0000000000000000 [ 1960.358037][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1960.358049][ C0] R13: 0000000000000000 R14: 00007eff73376080 R15: 00007fff097026e8 [ 1960.358068][ C0] [ 1960.358731][ C1] rcu: rcu_preempt kthread starved for 10494 jiffies! g123193 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1961.027646][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1961.037645][ C1] rcu: RCU grace-period kthread stack dump: [ 1961.043556][ C1] task:rcu_preempt state:R running task stack:26264 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1961.055355][ C1] Call Trace: [ 1961.058661][ C1] [ 1961.061625][ C1] __schedule+0x17fb/0x4be0 [ 1961.066195][ C1] ? __pfx___schedule+0x10/0x10 [ 1961.071086][ C1] ? __pfx_lock_release+0x10/0x10 [ 1961.076153][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1961.082517][ C1] ? schedule+0x90/0x320 [ 1961.086795][ C1] schedule+0x14b/0x320 [ 1961.091018][ C1] schedule_timeout+0x15a/0x290 [ 1961.095931][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1961.101354][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1961.106696][ C1] ? prepare_to_swait_event+0x330/0x350 [ 1961.112283][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 1961.117170][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1961.122508][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1961.128695][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1961.134015][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1961.139952][ C1] ? finish_swait+0xd4/0x1e0 [ 1961.144583][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 1961.149214][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1961.154445][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1961.160380][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1961.165440][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1961.170673][ C1] kthread+0x2f0/0x390 [ 1961.174781][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1961.180051][ C1] ? __pfx_kthread+0x10/0x10 [ 1961.184695][ C1] ret_from_fork+0x4b/0x80 [ 1961.189145][ C1] ? __pfx_kthread+0x10/0x10 [ 1961.193773][ C1] ret_from_fork_asm+0x1a/0x30 [ 1961.198598][ C1] [ 1961.201647][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1961.208008][ C1] CPU: 1 UID: 0 PID: 16774 Comm: kworker/u8:0 Not tainted 6.13.0-rc6-syzkaller-00036-gfbfd64d25c7a #0 [ 1961.218992][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1961.229089][ C1] Workqueue: events_unbound toggle_allocation_gate [ 1961.235650][ C1] RIP: 0010:smp_call_function_many_cond+0x19f3/0x2c60 [ 1961.242453][ C1] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 56 e9 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 01 e5 0b 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 e5 e4 [ 1961.262094][ C1] RSP: 0018:ffffc90004a3f6e0 EFLAGS: 00000293 [ 1961.268208][ C1] RAX: ffffffff81938eeb RBX: 1ffff110170c8c65 RCX: ffff88802c8c0000 [ 1961.276208][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1961.284207][ C1] RBP: ffffc90004a3f8e0 R08: ffffffff81938eba R09: 1ffffffff284e310 [ 1961.292211][ C1] R10: dffffc0000000000 R11: fffffbfff284e311 R12: dffffc0000000000 [ 1961.300211][ C1] R13: ffff8880b8646328 R14: ffff8880b873f940 R15: 0000000000000000 [ 1961.308209][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1961.317166][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1961.323777][ C1] CR2: 0000000020034000 CR3: 000000000e736000 CR4: 00000000003526f0 [ 1961.331782][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1961.339782][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1961.347786][ C1] Call Trace: [ 1961.351097][ C1] [ 1961.353967][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 1961.360377][ C1] ? print_other_cpu_stall+0x1481/0x15c0 [ 1961.366061][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 1961.371919][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 1961.378200][ C1] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 1961.383613][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1961.389294][ C1] ? update_process_times+0x242/0x2f0 [ 1961.394700][ C1] ? tick_nohz_handler+0x37c/0x500 [ 1961.399860][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1961.405357][ C1] ? __hrtimer_run_queues+0x551/0xd30 [ 1961.410782][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1961.416553][ C1] ? sched_clock+0x4a/0x70 [ 1961.421013][ C1] ? read_tsc+0x9/0x20 [ 1961.425117][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 1961.431219][ C1] ? hrtimer_interrupt+0x403/0xa40 [ 1961.436391][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 1961.442583][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1961.448430][ C1] [ 1961.451389][ C1] [ 1961.454345][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1961.460565][ C1] ? smp_call_function_many_cond+0x19da/0x2c60 [ 1961.466756][ C1] ? smp_call_function_many_cond+0x1a0b/0x2c60 [ 1961.472955][ C1] ? smp_call_function_many_cond+0x19f3/0x2c60 [ 1961.479160][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1961.484229][ C1] ? __pfx___text_poke+0x10/0x10 [ 1961.489200][ C1] ? process_scheduled_works+0x976/0x1840 [ 1961.495052][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1961.501416][ C1] ? __pfx___might_resched+0x10/0x10 [ 1961.506746][ C1] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1961.512685][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 1961.517745][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 1961.522899][ C1] text_poke_bp_batch+0x352/0xb30 [ 1961.527965][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1961.533988][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 1961.540184][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 1961.545777][ C1] ? arch_jump_label_transform_queue+0x9b/0x100 [ 1961.552067][ C1] ? process_scheduled_works+0x976/0x1840 [ 1961.557832][ C1] text_poke_finish+0x30/0x50 [ 1961.562585][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 1961.568603][ C1] static_key_enable_cpuslocked+0x136/0x260 [ 1961.574538][ C1] static_key_enable+0x1a/0x20 [ 1961.579339][ C1] toggle_allocation_gate+0xbc/0x260 [ 1961.584667][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1961.590600][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1961.596971][ C1] process_scheduled_works+0xa66/0x1840 [ 1961.602585][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1961.608622][ C1] ? assign_work+0x364/0x3d0 [ 1961.613256][ C1] worker_thread+0x870/0xd30 [ 1961.617886][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1961.623826][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1961.628886][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1961.634111][ C1] kthread+0x2f0/0x390 [ 1961.638211][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1961.643349][ C1] ? __pfx_kthread+0x10/0x10 [ 1961.647974][ C1] ret_from_fork+0x4b/0x80 [ 1961.652419][ C1] ? __pfx_kthread+0x10/0x10 [ 1961.657039][ C1] ret_from_fork_asm+0x1a/0x30 [ 1961.661858][ C1]