last executing test programs: 15m27.555829795s ago: executing program 0 (id=1123): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRES8=r2, @ANYRESDEC=0x0]) (async) read$FUSE(r2, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) (async) write$FUSE_INIT(r2, &(0x7f0000002300)={0x50, 0x0, r3, {0x7, 0x9, 0x0, 0x1030002}}, 0x50) (async) read$FUSE(r2, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r4}, 0x10) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r5, r2, 0x0) (async) copy_file_range(0xffffffffffffffff, 0x0, r1, 0x0, 0x2, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105442, 0x1ff) fallocate(r6, 0x10, 0x2, 0x7fff) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002380)=ANY=[@ANYBLOB="3400000077bfbe211a7af3e77eaccc44e8b7f0dff87e61c83464961ef7124d35c82b6d79b6a8fa239bebe8270b8e08eca81c157fffc41d5b4cd5b216c2477a450abdcf34e4f2315b52a220e7601541ec5edddd937d496f3463e7608b7f8b3feea7ee7e5f9a1942abf35181a45ada51b953c41c273d6a51ab8f2055f6c56459020681567b28f199a5b97048d0cc4cfba63f7d41fb6569dfcfe0ff22d0deffd036c8c121991c27d9f8", @ANYRES16=r7, @ANYBLOB="b70b00000000000000000f0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x10) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2c0000001a000100000000000000000002000000000000000000000005001b0006000000080019"], 0x2c}}, 0x0) (async) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r8, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r8) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002480)={0x50, r11, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'tunl0\x00'}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x50}}, 0x0) 15m27.428165876s ago: executing program 0 (id=1126): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="12009ce3882aa8ff424d7c0d00000800180004000000b47c000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000300000200"/28], 0x48) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240)=0x2, 0x4) 15m27.139871916s ago: executing program 0 (id=1131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x18, 0x0, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0x4, @random="45f9b32e6550", 'sit0\x00'}}, 0x1e) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000080)={0x18, 0x0, {0xc, @broadcast, 'veth1_to_team\x00'}}, 0x1e) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a40, 0x0) r6 = socket(0xa, 0x80805, 0x2) setsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000240)={0x5, 0x0, 0x6}, 0x8) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000200)=0x1) ioctl$PPPIOCBRIDGECHAN(r5, 0x40047435, &(0x7f0000000000)=0x4b9) timer_create(0x0, 0x0, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) rt_sigaction(0x16, &(0x7f0000000080)={&(0x7f0000000440)="c4a23d0643b9f0430fc079fff3460f1ec9f081035c000000f30faed446a900000000660f7ed238c461915492db8876efa1efa12eb22d233333f30fa7d0", 0x90000000, 0x0}, 0x0, 0x8, &(0x7f0000000200)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="15000000196f40d5c483bde6e006ea7956410cad7c81a9346ef8d2c743c906956573e76f85b3b78dd9b5061c867adcb662d5b810c6c3be8a14aa418cc42b92c130390e39fc4ca30ac423c63be0d015896454806ee951f6a401e630f13848146712532d9bc2c39429dbbf1f117960f3e02df3e48ef395d919fb4f26173befecc3f076fa3a9634394b2e629dc28c974ec461d8bc87b492eb97dd56e397fc546696d5c212c6fda6c20f8a6672096136", @ANYRES16=r7, @ANYBLOB="010000f50000000000000055000000080003e51b7d0144721185907fd929a20b84e53495e6c49b41e38e3918c14910ceb6", @ANYRES32=r8], 0x28}, 0x1, 0x0, 0x0, 0x4000055}, 0x40) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYRES8=r1, @ANYRESOCT=r9, @ANYRES32=r9], 0x64}, 0x1, 0x0, 0x0, 0x85}, 0x48001) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r10, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r11, 0xffffffffffffffff, 0x0) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) r13 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581", @ANYRES8], 0x0) r14 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r13) syz_usb_connect$printer(0x4, 0x2d, &(0x7f0000000280)=ANY=[@ANYRES64=r13, @ANYRESHEX, @ANYRESDEC=r14, @ANYRES64=0x0, @ANYRES8], 0x0) setsockopt$inet_tcp_int(r12, 0x6, 0x3, &(0x7f0000000340), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 15m23.965650577s ago: executing program 0 (id=1147): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0xfb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa0160a5afe99115, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xd, 0x0, &(0x7f00000006c0)="216a6abd2093c0cc38bd471ed2", 0x0, 0x400, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) socketpair(0x11, 0x3, 0x300, &(0x7f0000000000)) sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) 15m23.486788517s ago: executing program 0 (id=1151): mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0\x00', 0xd00, 0x1) 15m22.645593697s ago: executing program 0 (id=1155): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket(0x1000000010, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x20040000) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x70bd2b, 0x1, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "52087def75c736f85cc7d27338360e8cb966058f66908611a2da3e15d87ea4bbea3d646bddcbf88d74a8f9e560e73cc92e50a1e1eb696bc28149a6f97bca767db6d5a2e4a0ce4e1f337f52af8d065ab3903bf929f30662e91d6466b050411964902e6bfd3d89271fd28b48677d5cf2caefd8a40abbe65daabf39f028156294855a66954d2349461e5b3fdf380433eb7182203d89bd1637c99109d611ac6ddd1f8bd70df15be1196d73cf82360c81beb73bd89d4e22511b72fa9373f5ff75156b83de4ba43f4325cb81ad4e1ebabd12279a1c2cb16d9b64ac46472168b729780d5697663cde109a2ea16079fdfb016066bd7f663500"}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x3, 0x37, 0xa, 0x80000001, 0xb, 0x6, 0xffffffff, 0x2, 0x0, 0x14, 0x9, 0x8, 0x3, 0x8b9, 0x6}}]}}]}, 0x170}}, 0x0) 15m7.593606648s ago: executing program 32 (id=1155): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket(0x1000000010, 0x80002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x20040000) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x70bd2b, 0x1, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "52087def75c736f85cc7d27338360e8cb966058f66908611a2da3e15d87ea4bbea3d646bddcbf88d74a8f9e560e73cc92e50a1e1eb696bc28149a6f97bca767db6d5a2e4a0ce4e1f337f52af8d065ab3903bf929f30662e91d6466b050411964902e6bfd3d89271fd28b48677d5cf2caefd8a40abbe65daabf39f028156294855a66954d2349461e5b3fdf380433eb7182203d89bd1637c99109d611ac6ddd1f8bd70df15be1196d73cf82360c81beb73bd89d4e22511b72fa9373f5ff75156b83de4ba43f4325cb81ad4e1ebabd12279a1c2cb16d9b64ac46472168b729780d5697663cde109a2ea16079fdfb016066bd7f663500"}, @TCA_GRED_PARMS={0x38, 0x1, {0x1, 0x3, 0x37, 0xa, 0x80000001, 0xb, 0x6, 0xffffffff, 0x2, 0x0, 0x14, 0x9, 0x8, 0x3, 0x8b9, 0x6}}]}}]}, 0x170}}, 0x0) 14m3.367952602s ago: executing program 1 (id=1416): io_uring_setup(0xdac, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$key(0xf, 0x3, 0x2) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$binfmt_misc(r0, &(0x7f0000000400)="d0d2e4eba60b695dc69f6b732401629dd4744862bf0d0ebc26aa05d693b3575e79b2af53fbc88513743ce744e5020f4ed9630114a77b6c8be424cd588b4b02fcffffffffffffff08f2069d17324c7947e38f01cf03f0ba2198360eae3edc22fc050000ed83a3c7a7c600000000001884b04d40170ff9f94d012661389a4c792dc5505978ae7f0c0bfebf3efc596546e7108f5736cd3e36838b6a3beb8bcbf2f0653cfcec70edc01e2dcb18b82ed75fdf229834defbdc56f3a640db50f10207c419754d750253cae2d37ace8b7b0176e9389041ba0ee5f86963353104bda6a414fd23", 0xe2) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c76657273696f6e3d39703230300000752c636163680f69e0d63d47504c002c6d61736b3d4d49595f415050454e442c6d613d4d41595f455845432c0000"]) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r4 = fsopen(&(0x7f00000003c0)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) 14m2.144370223s ago: executing program 1 (id=1420): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x4e, &(0x7f00000010c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @private0, @mcast2, {[], {{0x4e24, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@eol]}}}}}}}}, 0x0) (fail_nth: 2) 14m0.475988438s ago: executing program 1 (id=1425): r0 = io_uring_setup(0x1e0b, &(0x7f00000002c0)={0x0, 0xfffffffc, 0x2, 0xffffffff, 0x10027d}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) sendmmsg$inet(r3, &(0x7f0000007fc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=' ', 0x1}], 0x1}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) (fail_nth: 1) 13m58.240009077s ago: executing program 1 (id=1430): r0 = fsopen(&(0x7f00000003c0)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) 13m58.023842009s ago: executing program 1 (id=1434): r0 = syz_open_dev$media(&(0x7f00000006c0), 0x2, 0x40b02) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000300)={0x2, @sdr={0x31384142, 0xffff0001}}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, 0x0) syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000000)={0x14, r9, 0x1, 0x70bd27, 0xfff}, 0x14}, 0x1, 0x0, 0x0, 0x20000081}, 0x8000000) sendmsg$TIPC_NL_NET_SET(r7, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r9, 0x20, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x71c}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x101}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000004}, 0x80) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r10, 0x7c80, 0x0) 13m54.278287705s ago: executing program 1 (id=1439): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x800400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x8000400) r2 = memfd_create(&(0x7f0000000000)='+\x00', 0x6) cachestat(r2, &(0x7f00000005c0), 0x0, 0x0) connect$vsock_stream(r1, &(0x7f0000000180), 0x10) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000000)=0x8, 0x4) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000440)={'veth0\x00', &(0x7f0000000480)=@ethtool_per_queue_op={0x4b, 0xf, [0x1ff, 0x4, 0x9, 0xfff, 0x1eaa, 0x0, 0x7fffffff, 0x74, 0x7, 0x9, 0x10, 0x200, 0x1, 0x7f, 0xc56, 0x5, 0x1ff, 0x9, 0x4d9, 0x9, 0x3e, 0x3, 0xe4, 0x0, 0xff, 0x8, 0x1000c9, 0x6, 0x4, 0x7, 0xc37e, 0x33, 0xffffffff, 0x6, 0x5, 0x6, 0x65000000, 0x4, 0x3, 0xb, 0x4b, 0xdcc, 0x5, 0x93a5, 0x1, 0x3, 0x2, 0x82c5, 0x7, 0x79, 0x0, 0x4, 0x1, 0x1, 0x8, 0x6, 0x6, 0xe51, 0x1ff, 0x1, 0x418f, 0x4, 0x2, 0x1, 0x32, 0x10, 0x6, 0x9, 0xf85, 0x9b, 0x8001, 0x9, 0x1ff, 0x3, 0x8, 0x0, 0x3, 0x7fc, 0x3ea313f6, 0x9, 0x10001, 0xd3, 0x7, 0x95, 0xb, 0x6, 0xc7, 0x0, 0x3, 0x81, 0x9734, 0x8, 0x2, 0x4, 0x500000, 0x5, 0xc, 0x1, 0x200, 0x1000, 0x0, 0x0, 0x4, 0xa1, 0x7, 0x477, 0x32ea2113, 0x3, 0x3, 0xbe, 0x7, 0x0, 0x256a, 0x9, 0xead3, 0x9, 0xe03, 0x0, 0x0, 0xfff, 0x80, 0xc, 0x1, 0x8, 0x8, 0x5, 0x2, 0x5]}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x7c}}, 0x4000) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x2c, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x18, 0x18, 0x0, 0x1, [@generic="0bac0f0005ac0f00f18dc67b72d01038d2403935"]}]}, 0x2c}], 0x1}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 13m39.144370845s ago: executing program 33 (id=1439): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x800400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x8000400) r2 = memfd_create(&(0x7f0000000000)='+\x00', 0x6) cachestat(r2, &(0x7f00000005c0), 0x0, 0x0) connect$vsock_stream(r1, &(0x7f0000000180), 0x10) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000000)=0x8, 0x4) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000440)={'veth0\x00', &(0x7f0000000480)=@ethtool_per_queue_op={0x4b, 0xf, [0x1ff, 0x4, 0x9, 0xfff, 0x1eaa, 0x0, 0x7fffffff, 0x74, 0x7, 0x9, 0x10, 0x200, 0x1, 0x7f, 0xc56, 0x5, 0x1ff, 0x9, 0x4d9, 0x9, 0x3e, 0x3, 0xe4, 0x0, 0xff, 0x8, 0x1000c9, 0x6, 0x4, 0x7, 0xc37e, 0x33, 0xffffffff, 0x6, 0x5, 0x6, 0x65000000, 0x4, 0x3, 0xb, 0x4b, 0xdcc, 0x5, 0x93a5, 0x1, 0x3, 0x2, 0x82c5, 0x7, 0x79, 0x0, 0x4, 0x1, 0x1, 0x8, 0x6, 0x6, 0xe51, 0x1ff, 0x1, 0x418f, 0x4, 0x2, 0x1, 0x32, 0x10, 0x6, 0x9, 0xf85, 0x9b, 0x8001, 0x9, 0x1ff, 0x3, 0x8, 0x0, 0x3, 0x7fc, 0x3ea313f6, 0x9, 0x10001, 0xd3, 0x7, 0x95, 0xb, 0x6, 0xc7, 0x0, 0x3, 0x81, 0x9734, 0x8, 0x2, 0x4, 0x500000, 0x5, 0xc, 0x1, 0x200, 0x1000, 0x0, 0x0, 0x4, 0xa1, 0x7, 0x477, 0x32ea2113, 0x3, 0x3, 0xbe, 0x7, 0x0, 0x256a, 0x9, 0xead3, 0x9, 0xe03, 0x0, 0x0, 0xfff, 0x80, 0xc, 0x1, 0x8, 0x8, 0x5, 0x2, 0x5]}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x7c}}, 0x4000) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x2c, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x18, 0x18, 0x0, 0x1, [@generic="0bac0f0005ac0f00f18dc67b72d01038d2403935"]}]}, 0x2c}], 0x1}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 12m19.058981967s ago: executing program 6 (id=1749): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() pselect6(0x40, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000040), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) personality(0x60000a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20008040) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001e1000080000000c5ebdfee54fb9e955374d74c1871215cbb5143593227208218368e0b048e6182b466fa8f06", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0xf19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x8, 0x1, 0xfffffffa, @vifc_lcl_ifindex=r11, @local}, 0x10) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r11], 0x20}}, 0x0) 12m17.982094988s ago: executing program 6 (id=1757): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x20002) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x1, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) (fail_nth: 2) 12m16.963959009s ago: executing program 6 (id=1762): syz_usb_connect(0x1, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a86200000904000002ca744d07090503020000ff99090805848f"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r0, &(0x7f0000000100), 0x0) syz_usb_connect(0x1, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a86200000904000002ca744d07090503020000ff99090805848f"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) readv(r0, &(0x7f0000000100), 0x0) (async) 12m14.158243551s ago: executing program 6 (id=1779): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pselect6(0x40, &(0x7f0000000000)={0x6, 0xfffffffffffffffe, 0x8, 0x7, 0xcd1, 0x10001, 0x80000000, 0xfffffffffffffffe}, &(0x7f0000000040)={0x3, 0x0, 0xfffffffffffffff9, 0x5, 0x2, 0x3, 0xa, 0x1}, 0x0, 0x0, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004042, 0x0) r0 = syz_io_uring_setup(0x417a, &(0x7f0000000780)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x4, 0x0, &(0x7f0000000400)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}) io_uring_enter(r0, 0x567, 0x20, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000400)=[{0x5c, 0x0, 0xfd}, {0x6}]}) 12m8.903925148s ago: executing program 6 (id=1797): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtfilter={0x54, 0x2c, 0xd27, 0xfffffffe, 0x25dffbfe, {0x0, 0x0, 0x0, r3, {0xa, 0xb}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x9}}, @TCA_FW_CLASSID={0x8, 0x1, {0x2}}, @TCA_FW_INDEV={0x14, 0x3, 'veth0_vlan\x00'}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008820}, 0x0) 12m8.676227248s ago: executing program 6 (id=1800): socket$qrtr(0x2a, 0x2, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x0, 0x1}, 0x6) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f00000003c0)=0xe8) mount$9p_fd(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), 0x2204000, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r6}}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, ')\\%$[+-5*'}}, {@seclabel}, {@fowner_gt={'fowner>', r7}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}]}}) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000500)={0x0, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000a40)={0xffffffffffffffc8, &(0x7f0000000080)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000180)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000600)={0x40, 0x8}, 0x0, 0x0}) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000fc0)={0x34, &(0x7f0000000d80)=ANY=[@ANYBLOB="201400000001"], 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setstatus(r0, 0x4, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG(r10, 0x4048ae9b, &(0x7f0000000300)={0x40003, 0x0, [0x4e, 0x800, 0x0, 0x0, 0x1, 0x6, 0x7, 0x2000]}) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000240)="642e2ef30fc736b800652e643ef20f2d29660f383bd0673ef2f20f019ce9b756da7fbaf80c66b844dbae8666efbafc0ced66b8010000000f01c1643e0f78ad009066f30fb837260f0981ba004043a6", 0x4f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 11m53.373872648s ago: executing program 34 (id=1800): socket$qrtr(0x2a, 0x2, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) bind$bt_hci(r3, &(0x7f0000000240)={0x1f, 0x0, 0x1}, 0x6) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r4}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast2}}, &(0x7f00000003c0)=0xe8) mount$9p_fd(0x0, &(0x7f00000002c0)='./file1\x00', &(0x7f0000000300), 0x2204000, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r6}}], [{@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@fsname={'fsname', 0x3d, ')\\%$[+-5*'}}, {@seclabel}, {@fowner_gt={'fowner>', r7}}, {@fowner_lt={'fowner<', 0xffffffffffffffff}}]}}) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000500)={0x0, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f0000000a40)={0xffffffffffffffc8, &(0x7f0000000080)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000000)={0x44, &(0x7f0000000180)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000600)={0x40, 0x8}, 0x0, 0x0}) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000fc0)={0x34, &(0x7f0000000d80)=ANY=[@ANYBLOB="201400000001"], 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setstatus(r0, 0x4, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG(r10, 0x4048ae9b, &(0x7f0000000300)={0x40003, 0x0, [0x4e, 0x800, 0x0, 0x0, 0x1, 0x6, 0x7, 0x2000]}) syz_kvm_setup_cpu$x86(r9, r10, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000240)="642e2ef30fc736b800652e643ef20f2d29660f383bd0673ef2f20f019ce9b756da7fbaf80c66b844dbae8666efbafc0ced66b8010000000f01c1643e0f78ad009066f30fb837260f0981ba004043a6", 0x4f}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 7m52.827780118s ago: executing program 5 (id=2635): io_uring_setup(0xdac, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$key(0xf, 0x3, 0x2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$binfmt_misc(r2, &(0x7f0000000400)="d0d2e4eba60b695dc69f6b732401629dd4744862bf0d0ebc26aa05d693b3575e79b2af53fbc88513743ce744e5020f4ed9630114a77b6c8be424cd588b4b02fcffffffffffffff08f2069d17324c7947e38f01cf03f0ba2198360eae3edc22fc050000ed83a3c7a7c600000000001884b04d40170ff9f94d012661389a4c792dc5505978ae7f0c0bfebf3efc596546e7108f5736cd3e36838b6a3beb8bcbf2f0653cfcec70edc01e2dcb18b82ed75fdf229834defbdc56f3a640db50f10207c419754d750253cae2d37ace8b7b0176e9389041ba0ee5f86963353104bda6a414fd23", 0xe2) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c76657273696f6e3d39703230300000752c636163680f69e0d63d47504c002c6d61736b3d4d49595f415050454e442c6d613d4d41595f455845432c0000"]) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r6 = fsopen(&(0x7f00000003c0)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = fsmount(r6, 0x0, 0x0) tkill(0x0, 0xb) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f0000c72300"/60], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r6, @ANYRESDEC=r7, @ANYRESOCT=0x0, @ANYBLOB="8338c1ad4a9fd8f2568c97af7e73fba614984088dd5d2d95d0daee20f8d931fce32503e1fa4c0036e1464c43e0c88a692bedf790594c2384858fbac25b15978800c351e4eec7af2809a2478969db30840a47733a96259e42be913f34ca6f008daea6e3245b44d9129bc0bea0954b6597e952a757779c85ea7b7ba85baa19a8ab02367fd0b89fbfa0a014ecab3bfb774b0c2366", @ANYRESHEX=r5], 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008001) r8 = syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b"], 0x0) syz_usb_disconnect(r8) 7m48.272776057s ago: executing program 5 (id=2645): openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r4, 0x6, 0x15, 0x0, 0x0) r5 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x1, 0x40000331}, &(0x7f00000006c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_SEND={0x1a, 0x20, 0x0, r0, 0x0, &(0x7f00000000c0)="26677e08864c083769237ec829d45d8caae0c6242ab4159c509cf8bb4e54d326b911f2c224c5141806f971c0cd23b2ff2bef3a540def3e9833411f37c0935b2b", 0x40, 0x40000, 0x1}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000140)={0x2, 0xb, &(0x7f0000000500)="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"}) ioctl$SCSI_IOCTL_STOP_UNIT(0xffffffffffffffff, 0x6) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = eventfd(0x0) r11 = eventfd(0x77996d80) ioctl$KVM_IRQFD(r9, 0x4020ae76, &(0x7f0000000300)={r11, 0x5, 0x2, r10}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 7m46.54354179s ago: executing program 5 (id=2648): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() pselect6(0x40, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000040), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) personality(0x60000a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x1, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x20008040) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$tty20(0xc, 0x4, 0x1) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001e1000080000000c5ebdfee54fb9e955374d74c1871215cbb5143593227208218368e0b048e6182b466fa8f06", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0xf19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x8, 0x1, 0xfffffffa, @vifc_lcl_ifindex=r10, @local}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r10], 0x20}}, 0x0) 7m45.38611288s ago: executing program 5 (id=2651): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6(0xa, 0x3, 0x26) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000240), &(0x7f00000002c0)=@v3={0x3000000, [{0x1, 0x9}, {0x2, 0xffffffc0}]}, 0x18, 0x0) lchown(&(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f, 0xa}}, 0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={0xffffffffffffffff, r2, 0x1, 0x0, @val=@netfilter={0x2, 0x0, 0x8000}}, 0x40) socket(0x840000000002, 0x3, 0xfa) 7m44.155140481s ago: executing program 5 (id=2654): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') r0 = socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80080, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000002c0)={0x0, 0x4, 0x0, 0x5, 0x0, "a05c7b5d00008023e9c59cf5ff7700"}) r2 = dup3(0xffffffffffffffff, r1, 0x0) io_setup(0x689, &(0x7f0000000280)=0x0) io_submit(r3, 0x1, &(0x7f0000000b80)=[&(0x7f00000001c0)={0x503, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0xfe, 0x0) lseek(0xffffffffffffffff, 0x289e0cb5, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xc, 0x4, &(0x7f0000000880)=ANY=[@ANYRES8=r6], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24000001, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 7m42.860573364s ago: executing program 5 (id=2656): io_uring_setup(0xdac, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$key(0xf, 0x3, 0x2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$binfmt_misc(r2, &(0x7f0000000400)="d0d2e4eba60b695dc69f6b732401629dd4744862bf0d0ebc26aa05d693b3575e79b2af53fbc88513743ce744e5020f4ed9630114a77b6c8be424cd588b4b02fcffffffffffffff08f2069d17324c7947e38f01cf03f0ba2198360eae3edc22fc050000ed83a3c7a7c600000000001884b04d40170ff9f94d012661389a4c792dc5505978ae7f0c0bfebf3efc596546e7108f5736cd3e36838b6a3beb8bcbf2f0653cfcec70edc01e2dcb18b82ed75fdf229834defbdc56f3a640db50f10207c419754d750253cae2d37ace8b7b0176e9389041ba0ee5f86963353104bda6a414fd23", 0xe2) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c76657273696f6e3d39703230300000752c636163680f69e0d63d47504c002c6d61736b3d4d49595f415050454e442c6d613d4d41595f455845432c0000"]) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r6 = fsopen(&(0x7f00000003c0)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = fsmount(r6, 0x0, 0x0) tkill(0x0, 0xb) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f0000c72300"/60], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r6, @ANYRESDEC=r7, @ANYRESOCT=0x0, @ANYBLOB="8338c1ad4a9fd8f2568c97af7e73fba614984088dd5d2d95d0daee20f8d931fce32503e1fa4c0036e1464c43e0c88a692bedf790594c2384858fbac25b15978800c351e4eec7af2809a2478969db30840a47733a96259e42be913f34ca6f008daea6e3245b44d9129bc0bea0954b6597e952a757779c85ea7b7ba85baa19a8ab02367fd0b89fbfa0a014ecab3bfb774b0c2366", @ANYRESHEX=r5], 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008001) r8 = syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b"], 0x0) syz_usb_disconnect(r8) 7m26.666688285s ago: executing program 35 (id=2656): io_uring_setup(0xdac, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$key(0xf, 0x3, 0x2) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$binfmt_misc(r2, &(0x7f0000000400)="d0d2e4eba60b695dc69f6b732401629dd4744862bf0d0ebc26aa05d693b3575e79b2af53fbc88513743ce744e5020f4ed9630114a77b6c8be424cd588b4b02fcffffffffffffff08f2069d17324c7947e38f01cf03f0ba2198360eae3edc22fc050000ed83a3c7a7c600000000001884b04d40170ff9f94d012661389a4c792dc5505978ae7f0c0bfebf3efc596546e7108f5736cd3e36838b6a3beb8bcbf2f0653cfcec70edc01e2dcb18b82ed75fdf229834defbdc56f3a640db50f10207c419754d750253cae2d37ace8b7b0176e9389041ba0ee5f86963353104bda6a414fd23", 0xe2) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000300), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c76657273696f6e3d39703230300000752c636163680f69e0d63d47504c002c6d61736b3d4d49595f415050454e442c6d613d4d41595f455845432c0000"]) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r6 = fsopen(&(0x7f00000003c0)='erofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = fsmount(r6, 0x0, 0x0) tkill(0x0, 0xb) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f0000c72300"/60], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYRESDEC=r0, @ANYRESDEC=r6, @ANYRESDEC=r7, @ANYRESOCT=0x0, @ANYBLOB="8338c1ad4a9fd8f2568c97af7e73fba614984088dd5d2d95d0daee20f8d931fce32503e1fa4c0036e1464c43e0c88a692bedf790594c2384858fbac25b15978800c351e4eec7af2809a2478969db30840a47733a96259e42be913f34ca6f008daea6e3245b44d9129bc0bea0954b6597e952a757779c85ea7b7ba85baa19a8ab02367fd0b89fbfa0a014ecab3bfb774b0c2366", @ANYRESHEX=r5], 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x4008001) r8 = syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b"], 0x0) syz_usb_disconnect(r8) 2m16.841130568s ago: executing program 4 (id=3637): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = memfd_create(&(0x7f00000003c0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;\xee\xb7.V\xdc\x84w[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@-_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5qo\xe5\x00\xd4\x9eL\xe2{\x13^\xe7\xd7\xdcw^\xd0\xe6J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85h\xb3\xf2\xe2\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x04\x00\x00\x00\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\xe0\xfb\xed`\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socket(0x11, 0x800000003, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f00000003c0)="2f00000014000f3f00000000120f0a0011000000009a67ec53f737bf1739078682ee6e8d06e500000000638c7b9916", 0x2f) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="80", 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_io_uring_setup(0x6c39, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x800}, &(0x7f0000000040), &(0x7f0000ffb000)) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x50000) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x0, 0xf}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xe) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 2m14.58097426s ago: executing program 4 (id=3649): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000096c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000009700)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000098c0)={0x0, 0x0, &(0x7f0000009880)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="071628bd700202dcf37f7e75b3f373843052238ceb1ca4b0751fd7aa1cf95898df", @ANYRES32=r2, @ANYBLOB="0c002b800800010000000000"], 0x28}}, 0x4044000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = getpid() prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, r4) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000100)=@isdn, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/52, 0x34}, {&(0x7f0000000280)=""/156, 0x9c}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x3, &(0x7f0000000380)=""/155, 0x9b}, 0x9}], 0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e22}, 0x6e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="1805000000000000000000000000000018010000646c6c2500000000002020207b1af0ff000000007ba100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020696c2500000000002020207b0af8ff00000000bd000000000000000700000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) 2m12.091730569s ago: executing program 4 (id=3653): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000008009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000000)=0x6) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1adc51, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0), &(0x7f00000002c0)=0xc) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r7 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r7, r6, 0x0, 0x80000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$rxrpc(0x21, 0x2, 0xa) 2m10.80349765s ago: executing program 4 (id=3656): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01080000c582b61bdd04878800080103"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) 2m10.708570401s ago: executing program 4 (id=3657): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$smackfs_load(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="72626c2023f9a28321cb7f5736dba23e3b6f82eb2d1c7d2e262927a2205478"], 0x23) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) poll(&(0x7f0000000100)=[{r4}], 0x1, 0x9d) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x7, 0x1, {0x0, '\x00', 0x0, 0x2, 0x9, 0x9}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x44080) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) sendmsg$unix(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000040), 0x17, 0x20044005}, 0x20000804) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0xd, &(0x7f0000000040)="e1", 0x1) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0xc080661a, &(0x7f0000002280)={@desc={0x1, 0x0, @desc2}}) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') read$FUSE(r5, &(0x7f0000000240)={0x2020, 0x0, 0x0}, 0x2020) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000100)={0x84, @remote, 0x0, 0x0, 'none\x00', 0x4}, 0x2c) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18, 0x0, r7, {0x66c0}}, 0x18) 2m10.56302784s ago: executing program 36 (id=3657): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$smackfs_load(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/smackfs/load-self2\x00', 0x2, 0x0) write$smackfs_load(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="72626c2023f9a28321cb7f5736dba23e3b6f82eb2d1c7d2e262927a2205478"], 0x23) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) poll(&(0x7f0000000100)=[{r4}], 0x1, 0x9d) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x7, 0x1, {0x0, '\x00', 0x0, 0x2, 0x9, 0x9}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x44080) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) sendmsg$unix(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000040), 0x17, 0x20044005}, 0x20000804) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r6, 0x0, 0xd, &(0x7f0000000040)="e1", 0x1) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0x4) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0xc080661a, &(0x7f0000002280)={@desc={0x1, 0x0, @desc2}}) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') read$FUSE(r5, &(0x7f0000000240)={0x2020, 0x0, 0x0}, 0x2020) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000100)={0x84, @remote, 0x0, 0x0, 'none\x00', 0x4}, 0x2c) r9 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r9, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) write$FUSE_BMAP(r5, &(0x7f0000000080)={0x18, 0x0, r7, {0x66c0}}, 0x18) 12.70339373s ago: executing program 3 (id=4016): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r2 = openat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x108) recvmmsg$unix(r2, &(0x7f00000075c0)=[{{&(0x7f0000000240), 0x6e, &(0x7f0000000900)=[{&(0x7f00000005c0)=""/238, 0xee}, {&(0x7f00000001c0)=""/11, 0xb}, {&(0x7f00000004c0)=""/23, 0x17}, {&(0x7f00000006c0)=""/172, 0xac}, {&(0x7f0000000780)=""/152, 0x98}, {&(0x7f00000063c0)=""/24, 0x18}, {&(0x7f0000000840)=""/173, 0xad}], 0x7, &(0x7f0000000540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f0000000980)=@abs, 0x6e, &(0x7f0000002000)=[{&(0x7f0000000a00)=""/75, 0x4b}, {&(0x7f0000000a80)=""/89, 0x59}, {&(0x7f0000000b00)=""/241, 0xf1}, {&(0x7f0000000c00)=""/188, 0xbc}, {&(0x7f0000000cc0)=""/239, 0xef}, {&(0x7f0000000dc0)=""/54, 0x36}, {&(0x7f0000000e00)=""/181, 0xb5}, {&(0x7f0000000ec0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/8, 0x8}, {&(0x7f0000001f00)=""/222, 0xde}], 0xa, &(0x7f00000020c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xf8}}, {{&(0x7f00000021c0)=@abs, 0x6e, &(0x7f00000024c0)=[{&(0x7f0000002240)=""/81, 0x51}, {&(0x7f00000022c0)=""/49, 0x31}, {&(0x7f0000002300)=""/23, 0x17}, {&(0x7f0000003180)=""/4096, 0x1000}, {&(0x7f0000004180)=""/4096, 0x1000}, {&(0x7f0000002340)=""/115, 0x73}, {&(0x7f00000023c0)=""/50, 0x32}, {&(0x7f0000002400)=""/170, 0xaa}], 0x8, &(0x7f0000002540)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x48}}, {{&(0x7f00000025c0), 0x6e, &(0x7f0000002900)=[{&(0x7f0000002640)=""/183, 0xb7}, {&(0x7f0000002700)=""/3, 0x3}, {&(0x7f0000002740)=""/25, 0x19}, {&(0x7f0000002780)=""/239, 0xef}, {&(0x7f0000002880)=""/104, 0x68}], 0x5}}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000002980)=""/174, 0xae}, {&(0x7f0000002a40)=""/179, 0xb3}, {&(0x7f0000002b00)=""/160, 0xa0}], 0x3, &(0x7f0000002c00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000002c40), 0x6e, &(0x7f0000002dc0)=[{&(0x7f0000007800)=""/199, 0xc7}], 0x1}}, {{&(0x7f0000002e00)=@abs, 0x6e, &(0x7f0000003080)=[{&(0x7f0000005180)=""/4096, 0x1000}, {&(0x7f0000002e80)=""/250, 0xfa}, {&(0x7f0000002f80)=""/112, 0x70}, {&(0x7f0000003000)=""/94, 0x5e}], 0x4, &(0x7f0000006180)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8}}, {{&(0x7f00000030c0)=@abs, 0x6e, &(0x7f0000007500)=[{&(0x7f0000006240)=""/16, 0x10}, {&(0x7f0000006280)=""/179, 0xb3}, {&(0x7f0000006340)=""/61, 0x3d}, {0x0}, {&(0x7f00000063c0)}, {&(0x7f0000006400)=""/100, 0x64}, {&(0x7f0000006480)=""/4096, 0x1000}, {&(0x7f0000007480)=""/102, 0x66}], 0x8, &(0x7f0000007580)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}}], 0x8, 0x40000000, &(0x7f00000077c0)) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x23108000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6(0xa, 0x2, 0x3a) syz_emit_ethernet(0x52, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x1c, 0x2c, 0xff, @remote, @local, {[], {{0x600, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"11fbe16c2ea25186"}}}}}}}, 0x0) clock_adjtime(0x3, &(0x7f00000003c0)={0x2, 0xb, 0x80000000, 0x5, 0x200, 0x101, 0x1, 0x7, 0x8, 0x4, 0x4, 0xfffffffffffff801, 0x100000000, 0x3, 0x100000001, 0xffffffffffffffff, 0x1000, 0x6, 0x5, 0x3, 0x7, 0x81, 0x8, 0x809, 0x3, 0x6}) sendto$inet6(r6, &(0x7f0000000080)="800009e92208a1ce", 0xfdef, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) sendto$packet(r7, &(0x7f0000003140)="0b040700e0ff030002004788aa96a13bb10e000000004305400f088d73f696ee60c5cb5ce943a7e2f3fdb4ead4bd41ff", 0x30, 0x10, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x11, 0x6, @broadcast}, 0x14) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000001000030400000000ffdbdd2500000000c932a0e3cf2696f0888fc353fb90eddf15c10f91223e33ff65fd6ea27130cf7a3ccb513ecce84744dd0bb2c40f6383faa88d9449e1c47fe2dc1b4031355d2a141f4eaf128c5b3e24feba64205d0fad64e207e23e6d64f3010900000026a11cd5ccb4c8c1bb1cd8053233d731185ab7", @ANYRES32=0x0, @ANYBLOB="20f0000000000000050021000200000008000a00", @ANYRES32=r10, @ANYBLOB="1400350076657468315f746f5f62617461647600"], 0x44}, 0x1, 0xba01}, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0x0, &(0x7f0000000080)) 12.622615417s ago: executing program 9 (id=4017): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount$9p_virtio(&(0x7f00000003c0), &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x100002, &(0x7f0000000580)={'trans=virtio,', {[{@loose}], [{@permit_directio}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, 'nl80211\x00'}}, {@subj_type={'subj_type', 0x3d, 'pagemap\x00'}}, {@hash}]}}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x410000002) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000040), 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000300)=r1) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYRESHEX, @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r5 = socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r5, 0x891b, &(0x7f00000004c0)={'bond0\x00', {0x2, 0x0, @empty}}) 10.030674493s ago: executing program 9 (id=4021): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount$9p_virtio(&(0x7f00000003c0), &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x100002, &(0x7f0000000580)={'trans=virtio,', {[{@loose}], [{@permit_directio}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, 'nl80211\x00'}}, {@subj_type={'subj_type', 0x3d, 'pagemap\x00'}}, {@hash}]}}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x410000002) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000040), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000300)=r1) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYRESHEX, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r8, 0x891b, &(0x7f00000004c0)={'bond0\x00', {0x2, 0x0, @empty}}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0) r9 = syz_open_procfs$pagemap(r1, &(0x7f0000000340)) ioctl$PAGEMAP_SCAN(r9, 0xc0606610, &(0x7f0000000480)={0x60, 0x3, &(0x7f000007d000/0xd000)=nil, &(0x7f000007f000/0x3000)=nil, 0x9, &(0x7f0000000380), 0x43, 0x4, 0x0, 0x20, 0x9, 0x26}) epoll_create(0x207ffd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x200000000000024b, 0x0, 0x0, 0x6, 0xfffffffffffffe4e, 0x0, 0x0, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x5, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000000)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000154000/0x1000)=nil, 0x0, 0x0, 0x0, 0x2, 0xbb, 0x0, 0xc, 0x4}) 9.985658962s ago: executing program 3 (id=4022): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_emit_ethernet(0x1aa, &(0x7f00000003c0)={@multicast, @random="49513f070507", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\\\a\x00', 0x174, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, [{0x1f, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1902"}, {0x0, 0x1, "000000050000000026000400"}, {0x22, 0x17, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731"}, {0x0, 0x8, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a"}]}}}}}}, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @mcast2, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x50}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 9.441334372s ago: executing program 8 (id=4023): r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) socket(0x11, 0x800000003, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f00000003c0)="2f00000014000f3f00000000120f0a0011000000009a67ec53f737bf1739078682ee6e8d06e500000000638c7b9916", 0x2f) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="80", 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_io_uring_setup(0x6c39, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x800}, &(0x7f0000000040), &(0x7f0000ffb000)) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x50000) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x0, 0xf}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xe) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 9.439946021s ago: executing program 9 (id=4024): epoll_create1(0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x4d, 0x0, &(0x7f0000000080)) epoll_create1(0x0) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x0, &(0x7f0000000040)=0xa8000000) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xb635773f05ebbeec, 0x2010, 0xffffffffffffffff, 0xf88b7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x801, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x0) read$FUSE(r4, &(0x7f00000023c0)={0x2020}, 0x2020) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xc, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, 0x0, 0xc, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x142, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) gettid() syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) 8.557027919s ago: executing program 9 (id=4026): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r0, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) r3 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201010000000008a326210600000000000109022400010000200f090400040103000200092100000001220b0009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00220b00004256f77468e654a5405d04fa1cb554de43bc82ac67d9cb4b64"], 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009"], 0x0) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f, 0x3000}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) ioctl$sock_inet_SIOCSARP(r4, 0x40806685, &(0x7f00000002c0)={{0x2, 0x4e21, @multicast2}, {}, 0x8, {0x2, 0x0, @broadcast}, 'macsec0\x00'}) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x80, &(0x7f0000000680)={[{@lowerdir={'lowerdir', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]}) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f000052a000/0x2000)=nil) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x60}}, 0x28000017) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r5 = msgget(0x1, 0xaa) msgsnd(r5, &(0x7f0000000100)={0x2, "e4fc4916e55ccd789740a70f528670dad41bee55dbd577b1dfdb3a01ea23f899a0518acaf09e0264f35a0cfb35d708f8394bea1b78c980ab790756bc4ee3230c7f93bd841ef0e52c9cb4dd0ff0"}, 0x55, 0x800) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000180)=0xa98) r8 = userfaultfd(0x80001) ioctl$UFFDIO_ZEROPAGE(r8, 0xc020aa04, &(0x7f0000000000)={{&(0x7f000052b000/0x1000)=nil, 0x1000}}) 8.427196977s ago: executing program 8 (id=4027): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11}) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r6, &(0x7f0000000080), 0xffffff1c) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) 8.391370167s ago: executing program 3 (id=4029): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount$9p_virtio(&(0x7f00000003c0), &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x100002, &(0x7f0000000580)={'trans=virtio,', {[{@loose}], [{@permit_directio}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, 'nl80211\x00'}}, {@subj_type={'subj_type', 0x3d, 'pagemap\x00'}}, {@hash}]}}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x410000002) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000040), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000300)=r1) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYRESHEX, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r8, 0x891b, &(0x7f00000004c0)={'bond0\x00', {0x2, 0x0, @empty}}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0) syz_open_procfs$pagemap(r1, &(0x7f0000000340)) epoll_create(0x207ffd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x200000000000024b, 0x0, 0x0, 0x6, 0xfffffffffffffe4e, 0x0, 0x0, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x5, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x2, 0xa, 0x0) 7.239110153s ago: executing program 3 (id=4031): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, '-lR\x9fG\x85e\xc2jAu*x\x8c-\x91\xa4+\xb0\x1a\x82\xaa\xa66t\x95\x9d\xf2\'\xd3\x00aBL'}]}, 0xfffffffffffffdd5) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000000)={'wlan1\x00', @random="00000c37d7ac"}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x400000, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000380)='sched_switch\x00', r3, 0x0, 0xffffffffffffffff}, 0x18) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000300)) setitimer(0x2, &(0x7f0000000280)={{0x77359400}, {0x0, 0x2710}}, 0x0) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x8, 0x0) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0)='jfs\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='westwood\x00', 0x9) syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01004000010203010902940003010000000904000000010100000a24010000030102"], 0x0) 7.140079451s ago: executing program 2 (id=4032): socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x6, &(0x7f0000000280)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xecb}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1f, @void, @value}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000100070000000900020073797a30000000000c000780080012400000100014000300686173683a69702c706f72742c697000050005000a000000050004"], 0x58}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x11, &(0x7f0000000080), 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) rt_sigaction(0x14, &(0x7f0000000140)={&(0x7f0000000380)="2437660f3a0da06900000065dfc465f30fa6c8eb2843d3ca660f62b2080000000f75bed5370b46c4a3b17a08e7", 0x2, 0x0, {[0x6]}}, 0x0, 0x8, &(0x7f0000000500)) preadv(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) 6.03421516s ago: executing program 7 (id=4033): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x10) r4 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x1, 0x4002) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000600)={{0x0, 0x1, 0x7, 0x4, 'syz0\x00', 0x4}, 0x0, 0x1, 0x5, r0, 0x7, 0x0, 'syz1\x00', &(0x7f0000000380)=['workdir', '!%-\x00', 'sched_switch\x00', '\x00', 'sched_switch\x00', '\xf2}$[,-[\x00', 'upperdir'], 0x36}) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61154c000000000061138c0000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b33e0f32f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3cd3cedd01fdc59589ea6bacde1e40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7a7216f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbe00000000000000000000000000fdba1133066c4a21a7149f32"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 6.03275699s ago: executing program 8 (id=4034): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x10) r4 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x1, 0x4002) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000600)={{0x0, 0x1, 0x7, 0x4, 'syz0\x00', 0x4}, 0x0, 0x1, 0x5, r0, 0x7, 0x0, 'syz1\x00', &(0x7f0000000380)=['workdir', '!%-\x00', 'sched_switch\x00', '\x00', 'sched_switch\x00', '\xf2}$[,-[\x00', 'upperdir'], 0x36}) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000500"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 5.99844894s ago: executing program 2 (id=4035): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) sendmsg$kcm(r1, &(0x7f0000001800)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x2, @rand_addr=0x64010102}}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000380)="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", 0x1000}, {&(0x7f00000001c0)="630ec969579d7a6eac42e335cf992fbb54ef827b59287da4bce03f3191e192b09b90d54c55bed3244c5b7717bd2971c3ff33c6de9e2ea6e336", 0x39}, {&(0x7f0000000200)="8b5d725a7e7df5c6fbc10eae56f096c61213cbda11909b54c7a9ab7a9461063c0bbbba565772bec3acf511b1d077ad0459e0592f3ec9eca57f1365631fea33d7aa1bbe0e763ec0140016edaf4869b401204f02076fde234c69c77813eca683b4beace2568c1561e9de1a4ea9a48950771f219df1ee92bc65d773bab0ca7965fd842a5c33", 0x84}, {&(0x7f0000001380)="a3daeb", 0x3}, {&(0x7f00000013c0)="f8de3c09f2c9dbf8adfe60a6888f3d0f64e99cc9f3bd2b0274179fde754f78535862e05213ddd6bb2a650f8b08855ac5541355fbdc02b7021cd7f219424e05f11f2b5ca15f1213b8b6eda3a3f7f84b7da6dd79f98752412df07d0fe069f8242e125cc93592ba720f225be4771913ee1b3a21ee1ebefd48af31af95eccc4edf38cdcb5435ddf3eb415b400ca217", 0x8d}, {&(0x7f0000001480)="7c5c9695a4fd36ff381fa2e562b0c038d0341f5e7911eaac6368c0f0c7c72fcd35b8b2ba3030a8fa00136bcbc8579bd0132f4fec5c66f6af6dbcab347cb96e05361d4f6db1326b96", 0x48}, {&(0x7f0000001500)}, {&(0x7f0000001540)="97e290f325f4e6475c8b8b434a190da1d6b0292075ed50544cf4f791d364876f215c2b96267e09f80246ad6817c0dc11495316a27908e947e341b3d0786c91077f3f5ef8e182419c3536df7d6f92ab9e345d9d", 0x53}, {&(0x7f00000015c0)="27317c67db1ff12f14cf96dbec11e927abbe96ddd4bbfd292100959972e429240c47f6e14784ee82f3a456af8e79ddff0f8f28e242016f23b5db64e9f5d5043d93f9316db030f7755afd3d6be0d5be86c2050c6d92fe91496850be0666b5e819c71756f90ac598a91d8689522bb12c30c45f512582b378cb63076da07801c500f029ac7a82b0be7fc3eb138a454c75dc2cf32fdbc1dfb2", 0x97}], 0x9, &(0x7f0000001740)=ANY=[@ANYBLOB="88000000000000000701000000000000a434b76c422a0f5e9bfc2f62388c43fb325135e9d7dee8f9e9ccfee1af3c9ecf494ef03f2abf714d5d2d7a56467f9315e19d10e6caea8f0c8f0340413c176e4006c1692dad8b5ab30817c3c80af0b7c264003a3fe5a4f426c212b78d6435191f0e2440f7650000000020000000000000000701000000100000e17796e99114bd4cd628181b69b45bd300"/168], 0xa8}, 0x20000840) write$6lowpan_enable(r1, &(0x7f0000000080)='0', 0x1) r2 = syz_io_uring_setup(0x239, &(0x7f00000002c0)={0x0, 0x4533, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f0000000340)=0x0) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x8, 0x0, 0x0, 0x0, 0x23456, 0x0, 0x0, 0x1, {0x0, r5}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x6, @mcast2, 0x3, 0x1}, 0x20) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001840), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000001900)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x20, r8, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x40, 0x2}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r7, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @dev, 0x8}], 0x1c) 5.114815742s ago: executing program 7 (id=4036): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7d2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0xe, 0xb}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xffff, 0x0, 0x22, 0xbe, 0x7fffffff, 0x4de8be1c, 0x3, 0x1ff, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0) 5.030113117s ago: executing program 8 (id=4037): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x8001000000000000, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x8, 0x3, 0x1f0, 0x0, 0x11, 0x148, 0xb8, 0x0, 0x158, 0x2a8, 0x2a8, 0x158, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x2000000, 0x8}}}, {{@ip={@loopback, @loopback, 0xff000000, 0xff, 'hsr0\x00', 'pimreg\x00', {}, {0xff}, 0x4, 0x2, 0xb}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x250) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) openat(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000003c0), 0x10042, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x0, 0x25dfdbf8, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="e9070000000000000000010000001c0002800c00018008000100030000000c0001800800010001000000"], 0x30}}, 0x0) 4.631977117s ago: executing program 7 (id=4038): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) chdir(&(0x7f0000000240)='./file0\x00') r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r1, &(0x7f0000000300)="ca0e808bb35bdabb49f35c25d456591f0c15a08769bcd5107053ea1f85250ac10e50c14ffda0a7a98740f8cb9694c01f2babb95936415d219753d982b3e6ab52070adabe6f61dce71ee97249cf86cdd7b9a6b4b3d24ddebcf8ea9f1ae197c9a9cd65f15210181d736b2d3da7d24857a899b7c335", 0x74) write$qrtrtun(r1, &(0x7f0000000480)="9d8d647553b6583d874f9e06a18dd009a0d07d18950d4dfe49f13a19e24320444a7d6c121741e2eef314dba4f9809e000000544fa0a1622d749faba7978890835497c9b71186ab548704f780dae25bc9", 0x50) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0xc3], 0x0, 0x0, 0x1, 0x1}}, 0x40) 3.744358617s ago: executing program 3 (id=4039): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') r0 = socket$l2tp(0x2, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80080, 0x0) r2 = dup3(0xffffffffffffffff, r1, 0x0) io_setup(0x689, &(0x7f0000000280)=0x0) io_submit(r3, 0x1, &(0x7f0000000b80)=[&(0x7f00000001c0)={0x503, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, 0x0, 0x0) io_uring_setup(0xfe, 0x0) lseek(0xffffffffffffffff, 0x289e0cb5, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xc, 0x4, &(0x7f0000000880)=ANY=[@ANYRES8=r6], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24000001, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) 3.63554691s ago: executing program 8 (id=4040): socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x6, &(0x7f0000000280)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xecb}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1f, @void, @value}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000100070000000900020073797a30000000000c000780080012400000100014000300686173683a69702c706f72742c697000050005000a000000050004"], 0x58}}, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r4, 0x84, 0x11, &(0x7f0000000080), 0x8) write$binfmt_elf64(r3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xffda) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) rt_sigaction(0x14, &(0x7f0000000140)={&(0x7f0000000380)="2437660f3a0da06900000065dfc465f30fa6c8eb2843d3ca660f62b2080000000f75bed5370b46c4a3b17a08e7", 0x2, 0x0, {[0x6]}}, 0x0, 0x8, &(0x7f0000000500)) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') preadv(r6, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) 3.563814537s ago: executing program 2 (id=4041): openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0x7f}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r1, 0x3ba0, &(0x7f0000000240)={0x48}) 3.399315267s ago: executing program 7 (id=4042): r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mount$9p_virtio(&(0x7f00000003c0), &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x100002, &(0x7f0000000580)={'trans=virtio,', {[{@loose}], [{@permit_directio}, {@subj_role}, {@smackfshat={'smackfshat', 0x3d, 'nl80211\x00'}}, {@subj_type={'subj_type', 0x3d, 'pagemap\x00'}}, {@hash}]}}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x410000002) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000040), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000300)=r1) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYRESHEX, @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r8, 0x891b, &(0x7f00000004c0)={'bond0\x00', {0x2, 0x0, @empty}}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000480)={0x60, 0x3, &(0x7f000007d000/0xd000)=nil, &(0x7f000007f000/0x3000)=nil, 0x9, &(0x7f0000000380), 0x43, 0x4, 0x0, 0x20, 0x9, 0x26}) epoll_create(0x207ffd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x200000000000024b, 0x0, 0x0, 0x6, 0xfffffffffffffe4e, 0x0, 0x0, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x5, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket(0x2, 0xa, 0x0) 3.341133159s ago: executing program 2 (id=4043): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000180)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) r1 = creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') write$ppp(r1, &(0x7f00000001c0)="38002febe4a8e1a0726307423d4b724977ac8f", 0x13) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x181) 3.198122493s ago: executing program 9 (id=4044): openat$hwrng(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000014c0)={0x20, 0x1, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc}}]}, 0x20}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={0x0, 0xe0}}, 0x810) r5 = memfd_create(&(0x7f0000000380)='\x15^e\x84', 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r5, 0x0) r6 = userfaultfd(0x1) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_ZEROPAGE(r6, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) 3.197188827s ago: executing program 3 (id=4045): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r1, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11}) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r3, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, 0x0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) read$rfkill(r6, &(0x7f0000000080), 0xffffff1c) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) 1.623833665s ago: executing program 2 (id=4046): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x10) r4 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x1, 0x4002) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000600)={{0x0, 0x1, 0x7, 0x4, 'syz0\x00', 0x4}, 0x0, 0x1, 0x5, r0, 0x7, 0x0, 'syz1\x00', &(0x7f0000000380)=['workdir', '!%-\x00', 'sched_switch\x00', '\x00', 'sched_switch\x00', '\xf2}$[,-[\x00', 'upperdir'], 0x36}) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000500"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.580706549s ago: executing program 7 (id=4047): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x10) r4 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x1, 0x4002) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f0000000600)={{0x0, 0x1, 0x7, 0x4, 'syz0\x00', 0x4}, 0x0, 0x1, 0x5, r0, 0x7, 0x0, 'syz1\x00', &(0x7f0000000380)=['workdir', '!%-\x00', 'sched_switch\x00', '\x00', 'sched_switch\x00', '\xf2}$[,-[\x00', 'upperdir'], 0x36}) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.580067995s ago: executing program 9 (id=4048): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7d2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0xe, 0xb}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xffff, 0x0, 0x22, 0xbe, 0x7fffffff, 0x4de8be1c, 0x3, 0x1ff, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x0) 572.168491ms ago: executing program 8 (id=4049): openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x5) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 9.114468ms ago: executing program 2 (id=4050): socket$inet_smc(0x2b, 0x1, 0x0) pipe(&(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x4, &(0x7f0000000280)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffa}, @cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffff8}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1f, @void, @value}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000000206010100000000000000000000000005000100070000000900020073797a30000000000c000780080012400000100014000300686173683a69702c706f72742c697000050005000a000000050004"], 0x58}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x84, 0x11, &(0x7f0000000080), 0x8) write$binfmt_elf64(r4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xffda) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x8, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) rt_sigaction(0x14, &(0x7f0000000140)={&(0x7f0000000380)="2437660f3a0da06900000065dfc465f30fa6c8eb2843d3ca660f62b2080000000f75bed5370b46c4a3b17a08e7", 0x2, 0x0, {[0x6]}}, 0x0, 0x8, &(0x7f0000000500)) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='stat\x00') preadv(r7, &(0x7f0000000340)=[{&(0x7f0000000180)=""/109, 0x6d}], 0x1, 0x0, 0x0) 0s ago: executing program 7 (id=4051): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) r2 = fanotify_init(0x20, 0x8000) r3 = memfd_create(&(0x7f00000016c0)='-\x88\x8cG\xf3\xbd\xbd\xe2\xd0@\x1e\x004F\x9f\xba\x10?\x14Fi\xa6Ey\xdbQ\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x1e\xbb\x8d\xac\xacva}knh#\xcf8\xdah\x94:\x9cc\x10d\xee\xa7\x8b\x06$\xb8G\xd1c\xe1$\xe8\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xf5\xcc\x82n=\x7f=\xcdJxR\xa5~\xb80a\xa9\xb2\x04K\x98\x93=\xabw\x05\x1d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00_\x99=\x12\xb3\x15\x1b?\xd7\x95\xc4\x85y\xef\xef\xff\xff\xff\xff\xff\xff\xff\xff\xb3\x02\x03\x00\x00\x00\x00\x00\x00\x00\xf6\xed\xc7\x80\xa5Pj\xa4\x06\xc4\x92)4n\xe7\xc1\xd4\xb3\x86jm\x87&\xf0\x12\xfd\x99%Z\xfa[5\xe8)\xab\x8f\"\xb5*@\xa6\xf5\r\xe1\xb2\xf6\xc9.n~_\x95a\\\xaem\xb9`\xec\xed\xe8\xbf[\x8aEzT\xe0\xc4m\x81\xee\xbc)K\xc2{a\x88\xa2\xd8J\xc3/\a\xe8\xfc\xc3\x9f%\x8a+\xd6\xc7\xda\xca\xf1\xd34\xf8\xea\v\xee\xbc\x11\xc6\xafj\x19\x18\xba\x05\xb4W\xaf\xed\xed\xea\xcc\x0e', 0x0) r4 = dup(r3) fanotify_mark(r2, 0x1, 0x3, r4, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f0000000480)='\v', 0x1}], 0x1) r5 = accept4(r0, 0x0, 0x0, 0x0) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0xe, 0xe, 0x0, 0xf, 0xa, 0x0, 0x2, 0x9, 0x2, 0x4, 0x8000000000000000, 0xc, 0x9, 0x7, 0x9, 0x7, 0x3, 0x8, 0xfffffffffffffffa, 0x0, 0x5, 0x8, 0x7, 0x3, 0x7ff}) setsockopt$inet6_IPV6_DSTOPTS(r5, 0x29, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000000000000"], 0x8) kernel console output (not intermixed with test programs): 967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17845 comm="syz.7.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2d385d29 code=0x7ffc0000 [ 1084.612965][ T29] audit: type=1326 audit(1735975917.337:872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17845 comm="syz.7.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2d385d29 code=0x7ffc0000 [ 1084.672822][ T29] audit: type=1326 audit(1735975917.337:873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17845 comm="syz.7.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f3d2d385d29 code=0x7ffc0000 [ 1084.734031][ T29] audit: type=1326 audit(1735975917.337:874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17845 comm="syz.7.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2d385d29 code=0x7ffc0000 [ 1084.756382][ T29] audit: type=1326 audit(1735975917.337:875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17845 comm="syz.7.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2d385d29 code=0x7ffc0000 [ 1084.778780][ T29] audit: type=1326 audit(1735975917.337:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17845 comm="syz.7.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3d2d385d29 code=0x7ffc0000 [ 1084.813185][ T29] audit: type=1326 audit(1735975917.337:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17845 comm="syz.7.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d2d385d29 code=0x7ffc0000 [ 1085.031747][ T5902] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1085.040691][ T5902] hub 9-1:0.2: bad descriptor, ignoring hub [ 1085.046639][ T5902] hub 9-1:0.2: probe with driver hub failed with error -5 [ 1085.079192][ T5902] usb 9-1: USB disconnect, device number 7 [ 1085.574214][T17860] erofs (device loop4): cannot find valid erofs superblock [ 1087.415008][T17880] overlayfs: failed to resolve './file0': -2 [ 1087.455491][T17882] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1087.518488][T17887] Process accounting resumed [ 1090.451862][T17914] 9pnet_fd: Insufficient options for proto=fd [ 1090.467668][T17914] fuse: Unknown parameter 'fscontext' [ 1091.421478][T17921] FAULT_INJECTION: forcing a failure. [ 1091.421478][T17921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1091.445335][T17921] CPU: 1 UID: 0 PID: 17921 Comm: syz.7.3313 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 1091.456164][T17921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1091.466245][T17921] Call Trace: [ 1091.469544][T17921] [ 1091.472491][T17921] dump_stack_lvl+0x241/0x360 [ 1091.477207][T17921] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1091.482441][T17921] ? __pfx__printk+0x10/0x10 [ 1091.487063][T17921] ? snprintf+0xda/0x120 [ 1091.491330][T17921] should_fail_ex+0x3b0/0x4e0 [ 1091.496030][T17921] _copy_to_user+0x31/0xb0 [ 1091.500469][T17921] simple_read_from_buffer+0xca/0x150 [ 1091.505868][T17921] proc_fail_nth_read+0x1e9/0x250 [ 1091.510919][T17921] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1091.516497][T17921] ? rw_verify_area+0x568/0x6f0 [ 1091.521371][T17921] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1091.526942][T17921] vfs_read+0x1fc/0xb70 [ 1091.531121][T17921] ? __pfx___mutex_lock+0x10/0x10 [ 1091.536175][T17921] ? __pfx_vfs_read+0x10/0x10 [ 1091.540885][T17921] ? __fget_files+0x2a/0x410 [ 1091.545515][T17921] ? __fget_files+0x395/0x410 [ 1091.550246][T17921] ? __fget_files+0x2a/0x410 [ 1091.554859][T17921] ksys_read+0x18f/0x2b0 [ 1091.559129][T17921] ? __pfx_ksys_read+0x10/0x10 [ 1091.563917][T17921] ? do_syscall_64+0x100/0x230 [ 1091.568712][T17921] ? do_syscall_64+0xb6/0x230 [ 1091.573427][T17921] do_syscall_64+0xf3/0x230 [ 1091.577959][T17921] ? clear_bhb_loop+0x35/0x90 [ 1091.582654][T17921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1091.588568][T17921] RIP: 0033:0x7f3d2d38473c [ 1091.598026][T17921] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1091.598064][T17921] RSP: 002b:00007f3d2e1f0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1091.598087][T17921] RAX: ffffffffffffffda RBX: 00007f3d2d575fa0 RCX: 00007f3d2d38473c [ 1091.598102][T17921] RDX: 000000000000000f RSI: 00007f3d2e1f00a0 RDI: 0000000000000005 [ 1091.598116][T17921] RBP: 00007f3d2e1f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1091.598130][T17921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1091.598142][T17921] R13: 0000000000000000 R14: 00007f3d2d575fa0 R15: 00007ffcaa40a3a8 [ 1091.598174][T17921] [ 1091.881278][T17937] FAULT_INJECTION: forcing a failure. [ 1091.881278][T17937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1091.895041][T17937] CPU: 1 UID: 0 PID: 17937 Comm: syz.4.3318 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 1091.905837][T17937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1091.915907][T17937] Call Trace: [ 1091.919630][T17937] [ 1091.922584][T17937] dump_stack_lvl+0x241/0x360 [ 1091.927293][T17937] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1091.932513][T17937] ? __pfx__printk+0x10/0x10 [ 1091.937110][T17937] ? __pfx_lock_release+0x10/0x10 [ 1091.942142][T17937] should_fail_ex+0x3b0/0x4e0 [ 1091.946827][T17937] _copy_from_iter+0x1e9/0x1c20 [ 1091.951693][T17937] ? __virt_addr_valid+0x183/0x530 [ 1091.956806][T17937] ? __alloc_skb+0x28f/0x440 [ 1091.961399][T17937] ? __pfx__copy_from_iter+0x10/0x10 [ 1091.966682][T17937] ? __virt_addr_valid+0x183/0x530 [ 1091.971787][T17937] ? __virt_addr_valid+0x183/0x530 [ 1091.976898][T17937] ? __virt_addr_valid+0x45f/0x530 [ 1091.982014][T17937] ? __phys_addr_symbol+0x2f/0x70 [ 1091.987034][T17937] ? __check_object_size+0x47a/0x730 [ 1091.992323][T17937] netlink_sendmsg+0x73d/0xcb0 [ 1091.997088][T17937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1092.002368][T17937] ? get_pid_task+0x23/0x1f0 [ 1092.006962][T17937] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1092.012239][T17937] __sock_sendmsg+0x221/0x270 [ 1092.016915][T17937] sock_write_iter+0x2d7/0x3f0 [ 1092.021678][T17937] ? __pfx_sock_write_iter+0x10/0x10 [ 1092.026973][T17937] ? bpf_lsm_file_permission+0x9/0x10 [ 1092.032349][T17937] ? security_file_permission+0x74/0x280 [ 1092.037983][T17937] vfs_write+0xaeb/0xd30 [ 1092.042226][T17937] ? __pfx_sock_write_iter+0x10/0x10 [ 1092.047508][T17937] ? __pfx_vfs_write+0x10/0x10 [ 1092.052271][T17937] ? __fget_files+0x2a/0x410 [ 1092.056859][T17937] ? __fget_files+0x2a/0x410 [ 1092.061456][T17937] ksys_write+0x18f/0x2b0 [ 1092.065781][T17937] ? __pfx_ksys_write+0x10/0x10 [ 1092.070630][T17937] ? do_syscall_64+0x100/0x230 [ 1092.075400][T17937] ? do_syscall_64+0xb6/0x230 [ 1092.080078][T17937] do_syscall_64+0xf3/0x230 [ 1092.084578][T17937] ? clear_bhb_loop+0x35/0x90 [ 1092.089251][T17937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.095140][T17937] RIP: 0033:0x7f078a185d29 [ 1092.099550][T17937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1092.119149][T17937] RSP: 002b:00007f078afc3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1092.127562][T17937] RAX: ffffffffffffffda RBX: 00007f078a375fa0 RCX: 00007f078a185d29 [ 1092.135532][T17937] RDX: 0000000000000024 RSI: 0000000020000000 RDI: 000000000000000c [ 1092.143498][T17937] RBP: 00007f078afc3090 R08: 0000000000000000 R09: 0000000000000000 [ 1092.151465][T17937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1092.159428][T17937] R13: 0000000000000000 R14: 00007f078a375fa0 R15: 00007ffda17da988 [ 1092.167415][T17937] [ 1094.063674][T17978] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1094.351940][T17989] FAULT_INJECTION: forcing a failure. [ 1094.351940][T17989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1094.413840][T17989] CPU: 1 UID: 0 PID: 17989 Comm: syz.3.3331 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 1094.424657][T17989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1094.434725][T17989] Call Trace: [ 1094.437999][T17989] [ 1094.440922][T17989] dump_stack_lvl+0x241/0x360 [ 1094.445601][T17989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1094.450817][T17989] ? __pfx__printk+0x10/0x10 [ 1094.455403][T17989] ? __pfx_lock_release+0x10/0x10 [ 1094.460469][T17989] should_fail_ex+0x3b0/0x4e0 [ 1094.465147][T17989] _copy_from_user+0x2f/0xc0 [ 1094.469744][T17989] copy_msghdr_from_user+0xae/0x680 [ 1094.474946][T17989] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1094.480755][T17989] ? __fget_files+0x2a/0x410 [ 1094.485361][T17989] ? __fget_files+0x2a/0x410 [ 1094.489967][T17989] __sys_sendmsg+0x209/0x350 [ 1094.494560][T17989] ? __pfx_lock_release+0x10/0x10 [ 1094.499591][T17989] ? __pfx___sys_sendmsg+0x10/0x10 [ 1094.504717][T17989] ? __pfx_vfs_write+0x10/0x10 [ 1094.509501][T17989] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1094.515829][T17989] ? do_syscall_64+0x100/0x230 [ 1094.520595][T17989] ? do_syscall_64+0xb6/0x230 [ 1094.525272][T17989] do_syscall_64+0xf3/0x230 [ 1094.529824][T17989] ? clear_bhb_loop+0x35/0x90 [ 1094.534513][T17989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.540425][T17989] RIP: 0033:0x7f5332f85d29 [ 1094.544848][T17989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1094.564462][T17989] RSP: 002b:00007f5333d55038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1094.572881][T17989] RAX: ffffffffffffffda RBX: 00007f5333175fa0 RCX: 00007f5332f85d29 [ 1094.580853][T17989] RDX: 0000000000044010 RSI: 0000000020000300 RDI: 0000000000000003 [ 1094.588822][T17989] RBP: 00007f5333d55090 R08: 0000000000000000 R09: 0000000000000000 [ 1094.596790][T17989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1094.604756][T17989] R13: 0000000000000000 R14: 00007f5333175fa0 R15: 00007ffe0f37bdc8 [ 1094.612751][T17989] [ 1094.816990][ T5873] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1095.023010][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 1095.071737][ T5873] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1095.090408][ T5873] usb 3-1: config 0 has no interface number 0 [ 1095.096550][ T5873] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1095.125731][ T5873] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1095.137495][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.145722][ T5873] usb 3-1: Product: syz [ 1095.202601][ T5873] usb 3-1: Manufacturer: syz [ 1095.231711][ T5873] usb 3-1: SerialNumber: syz [ 1095.249166][ T5873] usb 3-1: config 0 descriptor?? [ 1095.351998][ T5873] smsc75xx v1.0.0 [ 1096.000847][T18011] FAULT_INJECTION: forcing a failure. [ 1096.000847][T18011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1096.056698][T18011] CPU: 0 UID: 0 PID: 18011 Comm: syz.8.3339 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 1096.067522][T18011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1096.077600][T18011] Call Trace: [ 1096.080914][T18011] [ 1096.083863][T18011] dump_stack_lvl+0x241/0x360 [ 1096.088569][T18011] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1096.093796][T18011] ? __pfx__printk+0x10/0x10 [ 1096.098407][T18011] ? get_sigframe+0x5e2/0x800 [ 1096.103118][T18011] should_fail_ex+0x3b0/0x4e0 [ 1096.107816][T18011] _copy_to_user+0x31/0xb0 [ 1096.112267][T18011] copy_siginfo_to_user+0x24/0xc0 [ 1096.117316][T18011] x64_setup_rt_frame+0x7b7/0xd20 [ 1096.122369][T18011] ? lockdep_hardirqs_on+0x99/0x150 [ 1096.127591][T18011] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1096.132823][T18011] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 1096.138396][T18011] ? __might_fault+0xaa/0x120 [ 1096.143096][T18011] arch_do_signal_or_restart+0x458/0x860 [ 1096.148752][T18011] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1096.154925][T18011] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1096.160935][T18011] ? syscall_exit_to_user_mode+0xa3/0x340 [ 1096.166678][T18011] syscall_exit_to_user_mode+0xce/0x340 [ 1096.172247][T18011] do_syscall_64+0x100/0x230 [ 1096.176862][T18011] ? clear_bhb_loop+0x35/0x90 [ 1096.181559][T18011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1096.187472][T18011] RIP: 0033:0x7fce2db85d29 [ 1096.191905][T18011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1096.211531][T18011] RSP: 002b:00007fce2e9c5038 EFLAGS: 00000246 ORIG_RAX: 00000000000001cb [ 1096.219972][T18011] RAX: fffffffffffffff9 RBX: 00007fce2dd75fa0 RCX: 00007fce2db85d29 [ 1096.227967][T18011] RDX: 0000000020001280 RSI: 0000000000000000 RDI: 0000000000000064 [ 1096.235963][T18011] RBP: 00007fce2e9c5090 R08: 0000000000000000 R09: 0000000000000000 [ 1096.243958][T18011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1096.251949][T18011] R13: 0000000000000000 R14: 00007fce2dd75fa0 R15: 00007ffe6cf85ae8 [ 1096.259952][T18011] [ 1096.307215][ T5872] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 1096.367169][ T5873] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1096.378445][ T5873] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1096.388843][ T5873] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1096.693975][ T5873] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1096.705349][ T5873] usb 3-1: USB disconnect, device number 56 [ 1098.076784][T18042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3348'. [ 1098.235940][T18018] gfs2: not a GFS2 filesystem [ 1098.635707][T18036] No such timeout policy "syz0" [ 1100.381526][T18061] FAULT_INJECTION: forcing a failure. [ 1100.381526][T18061] name failslab, interval 1, probability 0, space 0, times 0 [ 1100.399303][T18061] CPU: 0 UID: 0 PID: 18061 Comm: syz.7.3355 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 1100.410118][T18061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1100.420206][T18061] Call Trace: [ 1100.423504][T18061] [ 1100.426455][T18061] dump_stack_lvl+0x241/0x360 [ 1100.431161][T18061] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1100.436389][T18061] ? __pfx__printk+0x10/0x10 [ 1100.441008][T18061] ? __kmalloc_cache_noprof+0x48/0x390 [ 1100.446490][T18061] ? __pfx___might_resched+0x10/0x10 [ 1100.451811][T18061] should_fail_ex+0x3b0/0x4e0 [ 1100.456517][T18061] should_failslab+0xac/0x100 [ 1100.461222][T18061] __kmalloc_cache_noprof+0x70/0x390 [ 1100.466523][T18061] ? __se_sys_mount+0x15a/0x3c0 [ 1100.471372][T18061] ? memdup_user+0x9f/0xc0 [ 1100.475788][T18061] __se_sys_mount+0x15a/0x3c0 [ 1100.480464][T18061] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1100.486465][T18061] ? __pfx___se_sys_mount+0x10/0x10 [ 1100.491672][T18061] ? do_syscall_64+0x100/0x230 [ 1100.496457][T18061] ? __x64_sys_mount+0x20/0xc0 [ 1100.501245][T18061] do_syscall_64+0xf3/0x230 [ 1100.505755][T18061] ? clear_bhb_loop+0x35/0x90 [ 1100.510433][T18061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1100.516334][T18061] RIP: 0033:0x7f3d2d385d29 [ 1100.520749][T18061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1100.540362][T18061] RSP: 002b:00007f3d2e1f0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1100.548780][T18061] RAX: ffffffffffffffda RBX: 00007f3d2d575fa0 RCX: 00007f3d2d385d29 [ 1100.556764][T18061] RDX: 0000000020000100 RSI: 0000000020000500 RDI: 0000000000000000 [ 1100.564736][T18061] RBP: 00007f3d2e1f0090 R08: 0000000020000340 R09: 0000000000000000 [ 1100.572702][T18061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1100.580674][T18061] R13: 0000000000000000 R14: 00007f3d2d575fa0 R15: 00007ffcaa40a3a8 [ 1100.588657][T18061] [ 1100.591804][ C0] vkms_vblank_simulate: vblank timer overrun [ 1101.064702][T18079] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3356'. [ 1101.297163][T18078] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3357'. [ 1102.196415][T18095] Process accounting resumed [ 1102.485791][T18097] gfs2: not a GFS2 filesystem [ 1102.512318][T18097] No such timeout policy "syz0" [ 1102.669295][T18106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3364'. [ 1104.101175][T18125] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3368'. [ 1104.145452][T18126] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1104.223695][T18127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3370'. [ 1104.453572][T12046] libceph: connect (1)[c::]:6789 error -101 [ 1104.502471][T12046] libceph: mon0 (1)[c::]:6789 connect error [ 1104.611076][T18115] ceph: No mds server is up or the cluster is laggy [ 1104.641652][T12046] libceph: connect (1)[c::]:6789 error -101 [ 1104.847190][T12046] libceph: mon0 (1)[c::]:6789 connect error [ 1105.119417][ T5872] libceph: connect (1)[c::]:6789 error -101 [ 1105.126620][ T5872] libceph: mon0 (1)[c::]:6789 connect error [ 1105.176904][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1105.732836][T12046] libceph: connect (1)[c::]:6789 error -101 [ 1105.811448][T12046] libceph: mon0 (1)[c::]:6789 connect error [ 1105.851767][T18122] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3369'. [ 1107.416258][T18172] overlayfs: failed to resolve './file1': -2 [ 1107.505047][T18174] Process accounting resumed [ 1107.798572][T18179] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3382'. [ 1107.924168][T18182] gfs2: not a GFS2 filesystem [ 1107.935621][T18182] No such timeout policy "syz0" [ 1109.418712][T18211] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3392'. [ 1109.450943][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 1109.451146][ T29] audit: type=1107 audit(1735975942.527:906): pid=18198 uid=0 auid=4294967295 ses=4294967295 subj=_ msg='P' [ 1110.624750][T18224] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3394'. [ 1113.260092][ T5902] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 1113.491631][ T5902] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1113.511581][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1113.537940][ T5902] usb 5-1: config 0 descriptor?? [ 1115.373744][T18255] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3404'. [ 1115.413630][ T5902] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 1115.420840][ T5902] [drm] Initialized udl on minor 2 [ 1115.574951][T18257] 9pnet_fd: Insufficient options for proto=fd [ 1115.669432][ T5902] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9 [ 1115.691397][ T5902] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1115.930107][ T5902] usb 5-1: USB disconnect, device number 61 [ 1115.940160][T17085] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1115.950386][T17085] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1116.366676][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.523632][T18281] overlayfs: failed to resolve './file1': -2 [ 1116.644170][T18286] Process accounting resumed [ 1116.804381][T18289] Mount JFS Failure: -22 [ 1116.809272][T18289] jfs_mount failed w/return code = -22 [ 1118.377186][ T5820] Bluetooth: hci5: command 0x0405 tx timeout [ 1118.501620][T18314] autofs: Unknown parameter 'fd0x0000000000000000' [ 1118.525147][T18287] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1118.687153][T17085] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1118.837012][T17085] usb 3-1: Using ep0 maxpacket: 16 [ 1118.848868][T17085] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1118.867068][T17085] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1118.897887][T17085] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1118.910055][T17085] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1118.927888][T17085] usb 3-1: config 0 descriptor?? [ 1119.631500][T18331] gfs2: not a GFS2 filesystem [ 1119.673744][T18331] No such timeout policy "syz0" [ 1121.175790][T18344] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3434'. [ 1122.782837][T17085] usbhid 3-1:0.0: can't add hid device: -71 [ 1123.059006][T17085] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1123.593693][T17085] usb 3-1: USB disconnect, device number 57 [ 1124.079471][T18368] FAULT_INJECTION: forcing a failure. [ 1124.079471][T18368] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.092407][T18368] CPU: 1 UID: 0 PID: 18368 Comm: syz.3.3441 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 1124.103212][T18368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1124.113297][T18368] Call Trace: [ 1124.116612][T18368] [ 1124.119576][T18368] dump_stack_lvl+0x241/0x360 [ 1124.124293][T18368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1124.129513][T18368] ? __pfx__printk+0x10/0x10 [ 1124.134128][T18368] ? __kmalloc_cache_noprof+0x48/0x390 [ 1124.139604][T18368] ? __pfx___might_resched+0x10/0x10 [ 1124.144914][T18368] should_fail_ex+0x3b0/0x4e0 [ 1124.149610][T18368] should_failslab+0xac/0x100 [ 1124.154307][T18368] __kmalloc_cache_noprof+0x70/0x390 [ 1124.159607][T18368] ? __se_sys_mount+0x15a/0x3c0 [ 1124.164471][T18368] ? memdup_user+0x9f/0xc0 [ 1124.168905][T18368] __se_sys_mount+0x15a/0x3c0 [ 1124.173595][T18368] ? irqentry_exit+0x63/0x90 [ 1124.178201][T18368] ? lockdep_hardirqs_on+0x99/0x150 [ 1124.183427][T18368] ? __pfx___se_sys_mount+0x10/0x10 [ 1124.188650][T18368] ? __x64_sys_mount+0x20/0xc0 [ 1124.193427][T18368] do_syscall_64+0xf3/0x230 [ 1124.197949][T18368] ? clear_bhb_loop+0x35/0x90 [ 1124.202640][T18368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.208553][T18368] RIP: 0033:0x7f5332f85d29 [ 1124.212981][T18368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1124.232603][T18368] RSP: 002b:00007f5333d13038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1124.241053][T18368] RAX: ffffffffffffffda RBX: 00007f5333176160 RCX: 00007f5332f85d29 [ 1124.249056][T18368] RDX: 00000000200007c0 RSI: 0000000020000800 RDI: 0000000000000000 [ 1124.257055][T18368] RBP: 00007f5333d13090 R08: 0000000020000340 R09: 0000000000000000 [ 1124.265079][T18368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1124.273084][T18368] R13: 0000000000000000 R14: 00007f5333176160 R15: 00007ffe0f37bdc8 [ 1124.281094][T18368] [ 1125.468111][ T5873] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1126.452927][ T5873] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1126.567991][T18400] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3450'. [ 1126.611063][ T5873] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1127.459365][ T5873] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1127.469351][ T5873] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1127.494470][ T5873] usb 9-1: SerialNumber: syz [ 1128.234853][ T5873] usb 9-1: 0:2 : does not exist [ 1128.257305][ T5873] usb 9-1: unit 5 not found! [ 1128.477985][ T5873] usb 9-1: USB disconnect, device number 8 [ 1129.409531][T18426] overlayfs: failed to resolve './file1': -2 [ 1129.957019][ T5873] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1130.258770][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.315388][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.357706][ T5873] usb 3-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00 [ 1130.390839][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.414791][ T5873] usb 3-1: config 0 descriptor?? [ 1130.508244][T18440] ip6gretap0: entered promiscuous mode [ 1130.551020][T18440] batadv_slave_0: entered promiscuous mode [ 1131.200878][T18447] FAULT_INJECTION: forcing a failure. [ 1131.200878][T18447] name failslab, interval 1, probability 0, space 0, times 0 [ 1131.255212][T18447] CPU: 0 UID: 0 PID: 18447 Comm: syz.7.3463 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 1131.266044][T18447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1131.276125][T18447] Call Trace: [ 1131.279425][T18447] [ 1131.282380][T18447] dump_stack_lvl+0x241/0x360 [ 1131.287096][T18447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1131.292334][T18447] ? __pfx__printk+0x10/0x10 [ 1131.296969][T18447] ? __kmalloc_noprof+0xb5/0x4c0 [ 1131.301936][T18447] ? __pfx___might_resched+0x10/0x10 [ 1131.307256][T18447] should_fail_ex+0x3b0/0x4e0 [ 1131.311957][T18447] should_failslab+0xac/0x100 [ 1131.316657][T18447] __kmalloc_noprof+0xdd/0x4c0 [ 1131.321435][T18447] ? security_prepare_creds+0x53/0x360 [ 1131.326898][T18447] ? rcu_is_watching+0x15/0xb0 [ 1131.331671][T18447] security_prepare_creds+0x53/0x360 [ 1131.336961][T18447] prepare_creds+0x467/0x640 [ 1131.341564][T18447] __se_sys_capset+0x3e9/0x650 [ 1131.346339][T18447] ? __pfx___se_sys_capset+0x10/0x10 [ 1131.351630][T18447] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1131.357633][T18447] ? arch_syscall_is_vdso_sigreturn+0x125/0x1a0 [ 1131.363893][T18447] ? syscall_user_dispatch+0x4e/0x90 [ 1131.369192][T18447] do_syscall_64+0xf3/0x230 [ 1131.373702][T18447] ? clear_bhb_loop+0x35/0x90 [ 1131.378387][T18447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1131.384294][T18447] RIP: 0033:0x7f3d2d385d29 [ 1131.388709][T18447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1131.408319][T18447] RSP: 002b:00007f3d2e1f0038 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 1131.416741][T18447] RAX: ffffffffffffffda RBX: 00007f3d2d575fa0 RCX: 00007f3d2d385d29 [ 1131.424709][T18447] RDX: 0000000000000000 RSI: 0000000020001080 RDI: 0000000020000080 [ 1131.432680][T18447] RBP: 00007f3d2e1f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1131.440644][T18447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1131.448607][T18447] R13: 0000000000000000 R14: 00007f3d2d575fa0 R15: 00007ffcaa40a3a8 [ 1131.456594][T18447] [ 1131.802096][ T5873] usbhid 3-1:0.0: can't add hid device: -71 [ 1131.809388][ T5873] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1131.818970][ T5873] usb 3-1: USB disconnect, device number 58 [ 1132.757309][T18459] af_packet: tpacket_rcv: packet too big, clamped from 3698 to 2928. macoff=96 [ 1134.518748][T18486] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1134.639498][T18487] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3472'. [ 1135.682464][T18495] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3475'. [ 1136.947329][T18518] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1137.013109][T18519] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3481'. [ 1137.976895][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1138.369768][T18532] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3485'. [ 1138.398975][T18532] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3485'. [ 1138.444107][T18532] macvlan1: entered promiscuous mode [ 1138.509756][T18532] team0: entered promiscuous mode [ 1138.515289][T18532] team_slave_0: entered promiscuous mode [ 1138.650862][T18532] team_slave_1: entered promiscuous mode [ 1138.677783][T18541] FAULT_INJECTION: forcing a failure. [ 1138.677783][T18541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1138.698850][T18541] CPU: 1 UID: 0 PID: 18541 Comm: syz.2.3487 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 1138.709669][T18541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1138.719752][T18541] Call Trace: [ 1138.723141][T18541] [ 1138.726098][T18541] dump_stack_lvl+0x241/0x360 [ 1138.730806][T18541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1138.736031][T18541] ? __pfx__printk+0x10/0x10 [ 1138.740653][T18541] ? snprintf+0xda/0x120 [ 1138.744920][T18541] should_fail_ex+0x3b0/0x4e0 [ 1138.749631][T18541] _copy_to_user+0x31/0xb0 [ 1138.754077][T18541] simple_read_from_buffer+0xca/0x150 [ 1138.754266][T18544] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3488'. [ 1138.759458][T18541] proc_fail_nth_read+0x1e9/0x250 [ 1138.759490][T18541] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1138.759516][T18541] ? rw_verify_area+0x55e/0x6f0 [ 1138.759536][T18541] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1138.759562][T18541] vfs_read+0x1fc/0xb70 [ 1138.759588][T18541] ? __pfx___mutex_lock+0x10/0x10 [ 1138.759613][T18541] ? __pfx_vfs_read+0x10/0x10 [ 1138.759638][T18541] ? __fget_files+0x2a/0x410 [ 1138.807810][T18541] ? __fget_files+0x395/0x410 [ 1138.812502][T18541] ? __fget_files+0x2a/0x410 [ 1138.817097][T18541] ksys_read+0x18f/0x2b0 [ 1138.821341][T18541] ? __pfx_ksys_read+0x10/0x10 [ 1138.826104][T18541] ? do_syscall_64+0x100/0x230 [ 1138.830875][T18541] ? do_syscall_64+0xb6/0x230 [ 1138.835558][T18541] do_syscall_64+0xf3/0x230 [ 1138.840064][T18541] ? clear_bhb_loop+0x35/0x90 [ 1138.844736][T18541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.850629][T18541] RIP: 0033:0x7f69f3f8473c [ 1138.855039][T18541] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1138.874646][T18541] RSP: 002b:00007f69f4ce9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1138.883062][T18541] RAX: ffffffffffffffda RBX: 00007f69f4176080 RCX: 00007f69f3f8473c [ 1138.891029][T18541] RDX: 000000000000000f RSI: 00007f69f4ce90a0 RDI: 0000000000000007 [ 1138.898994][T18541] RBP: 00007f69f4ce9090 R08: 0000000000000000 R09: 0000000000000000 [ 1138.906959][T18541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1138.914921][T18541] R13: 0000000000000000 R14: 00007f69f4176080 R15: 00007ffc4b1cce08 [ 1138.922917][T18541] [ 1141.164913][T18585] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3501'. [ 1142.456603][T18602] Mount JFS Failure: -22 [ 1142.461150][T18602] jfs_mount failed w/return code = -22 [ 1142.740576][ T5873] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1142.978107][ T5873] usb 3-1: Using ep0 maxpacket: 16 [ 1143.050126][ T5873] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.100509][ T5873] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1143.174296][ T5873] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 0.40 [ 1143.211259][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.246975][ T5873] usb 3-1: Product: syz [ 1143.261562][ T5873] usb 3-1: Manufacturer: syz [ 1143.266217][ T5873] usb 3-1: SerialNumber: syz [ 1143.287912][T18604] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1143.504316][ T5873] usb 3-1: 0:76 : does not exist [ 1143.529863][ T5873] usb 3-1: 0:10 : does not exist [ 1143.560283][ T5873] usb 3-1: USB disconnect, device number 59 [ 1144.222417][T18617] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3509'. [ 1146.565368][T18633] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3510'. [ 1146.946921][T18635] overlayfs: failed to resolve './file0': -2 [ 1148.113304][T18638] netlink: zone id is out of range [ 1148.274660][T18554] Set syz1 is full, maxelem 65536 reached [ 1148.442586][T18645] binder: BINDER_SET_CONTEXT_MGR already set [ 1148.455802][T18645] binder: 18643:18645 ioctl 4018620d 20000280 returned -16 [ 1148.630526][ T5873] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1149.265912][T18655] netlink: ct family unspecified [ 1149.271226][T18655] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1149.482156][T18645] binder_alloc: binder_alloc_mmap_handler: 18643 20ffd000-21000000 already mapped failed -16 [ 1150.288470][ T5873] usb 4-1: device not accepting address 57, error -71 [ 1150.456120][T18659] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1150.518083][T18667] : renamed from ipvlan1 [ 1150.518442][T18669] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 1150.846227][T18676] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3523'. [ 1151.570147][T18683] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3527'. [ 1151.791219][T18679] gfs2: not a GFS2 filesystem [ 1151.799507][T18679] No such timeout policy "syz0" [ 1152.480167][T18692] Mount JFS Failure: -22 [ 1152.484478][T18692] jfs_mount failed w/return code = -22 [ 1152.758126][ T5871] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1153.118574][T18698] 9pnet_fd: Insufficient options for proto=fd [ 1153.130758][ T5871] usb 3-1: Using ep0 maxpacket: 16 [ 1153.148778][ T5871] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1153.176953][ T5871] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1153.219804][ T5871] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 0.40 [ 1153.241638][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.272856][ T5871] usb 3-1: Product: syz [ 1153.297023][ T5871] usb 3-1: Manufacturer: syz [ 1153.301685][ T5871] usb 3-1: SerialNumber: syz [ 1153.544273][ T5871] usb 3-1: 0:76 : does not exist [ 1153.566848][ T5871] usb 3-1: 0:10 : does not exist [ 1153.613466][ T5871] usb 3-1: USB disconnect, device number 60 [ 1153.985136][T18715] kernel read not supported for file / œÏüÔ¢W)ëS“§Ç-ë (pid: 18715 comm: syz.3.3534) [ 1154.022539][ T29] audit: type=1800 audit(1735975987.337:907): pid=18715 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.3534" name=20019CCFFCD4A25729EB5393A7C72DEB dev="mqueue" ino=60288 res=0 errno=0 [ 1155.766144][T17085] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 1155.970832][T18737] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3537'. [ 1156.541529][T17085] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1156.566886][T17085] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.599911][T17085] usb 5-1: Product: syz [ 1156.604131][T17085] usb 5-1: Manufacturer: syz [ 1156.655692][T17085] usb 5-1: SerialNumber: syz [ 1156.678715][T18739] overlayfs: missing 'lowerdir' [ 1156.684603][T17085] usb 5-1: config 0 descriptor?? [ 1156.789104][T18745] Process accounting resumed [ 1156.955728][T17085] dvb_usb_dtv5100 5-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 1157.061530][T18749] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3542'. [ 1157.631550][T17085] usb 5-1: USB disconnect, device number 62 [ 1158.312404][T18756] Mount JFS Failure: -22 [ 1158.438854][T18756] jfs_mount failed w/return code = -22 [ 1160.034605][T10335] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1160.088848][T18768] FAULT_INJECTION: forcing a failure. [ 1160.088848][T18768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1160.977131][T18768] CPU: 1 UID: 0 PID: 18768 Comm: syz.7.3548 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 1160.987954][T18768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1160.998027][T18768] Call Trace: [ 1161.001337][T18768] [ 1161.004305][T18768] dump_stack_lvl+0x241/0x360 [ 1161.009019][T18768] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1161.014248][T18768] ? __pfx__printk+0x10/0x10 [ 1161.018890][T18768] should_fail_ex+0x3b0/0x4e0 [ 1161.023597][T18768] _copy_from_user+0x2f/0xc0 [ 1161.028215][T18768] bpf_test_init+0x11f/0x180 [ 1161.032829][T18768] bpf_prog_test_run_skb+0x2bb/0x1820 [ 1161.038229][T18768] ? __pfx_lock_release+0x10/0x10 [ 1161.043289][T18768] ? __pfx___might_resched+0x10/0x10 [ 1161.048616][T18768] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1161.054438][T18768] ? __fget_files+0x2a/0x410 [ 1161.059048][T18768] ? fput+0x21b/0x290 [ 1161.063045][T18768] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1161.068871][T18768] bpf_prog_test_run+0x2e4/0x360 [ 1161.073835][T18768] __sys_bpf+0x48d/0x810 [ 1161.078096][T18768] ? __pfx___sys_bpf+0x10/0x10 [ 1161.082886][T18768] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1161.088881][T18768] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1161.095227][T18768] ? do_syscall_64+0x100/0x230 [ 1161.100015][T18768] __x64_sys_bpf+0x7c/0x90 [ 1161.104451][T18768] do_syscall_64+0xf3/0x230 [ 1161.108977][T18768] ? clear_bhb_loop+0x35/0x90 [ 1161.113668][T18768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1161.119581][T18768] RIP: 0033:0x7f3d2d385d29 [ 1161.124007][T18768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1161.143629][T18768] RSP: 002b:00007f3d2e1f0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1161.152066][T18768] RAX: ffffffffffffffda RBX: 00007f3d2d575fa0 RCX: 00007f3d2d385d29 [ 1161.160053][T18768] RDX: 0000000000000050 RSI: 00000000200000c0 RDI: 000000000000000a [ 1161.168040][T18768] RBP: 00007f3d2e1f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1161.176021][T18768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1161.184002][T18768] R13: 0000000000000000 R14: 00007f3d2d575fa0 R15: 00007ffcaa40a3a8 [ 1161.192002][T18768] [ 1161.478803][T10335] usb 4-1: Using ep0 maxpacket: 16 [ 1161.661769][T10335] usb 4-1: device descriptor read/all, error -71 [ 1162.058335][T18795] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3555'. [ 1162.727520][T18798] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3556'. [ 1163.209358][T18818] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3557'. [ 1164.007709][T18820] veth1_macvtap: left promiscuous mode [ 1164.013923][T18820] macsec0: entered promiscuous mode [ 1164.627048][T18832] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3564'. [ 1164.636260][T18832] netlink: 'syz.3.3564': attribute type 1 has an invalid length. [ 1164.662317][T18832] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3564'. [ 1164.664330][T18830] Mount JFS Failure: -22 [ 1164.710711][T18830] jfs_mount failed w/return code = -22 [ 1165.046944][ T29] audit: type=1326 audit(1735975998.347:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18834 comm="syz.2.3566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f3f85d29 code=0x7ffc0000 [ 1165.068820][ T29] audit: type=1326 audit(1735975998.347:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18834 comm="syz.2.3566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f3f85d29 code=0x7ffc0000 [ 1165.107143][ T29] audit: type=1326 audit(1735975998.367:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18834 comm="syz.2.3566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f69f3f87c47 code=0x7ffc0000 [ 1165.132703][ T29] audit: type=1326 audit(1735975998.367:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18834 comm="syz.2.3566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f69f3f87bbc code=0x7ffc0000 [ 1165.236920][ T5873] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1165.282620][ T29] audit: type=1326 audit(1735975998.367:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18834 comm="syz.2.3566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f69f3f87af4 code=0x7ffc0000 [ 1165.304628][ T29] audit: type=1326 audit(1735975998.367:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18834 comm="syz.2.3566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f69f3f87af4 code=0x7ffc0000 [ 1165.326411][ T29] audit: type=1326 audit(1735975998.367:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18834 comm="syz.2.3566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f69f3f8498a code=0x7ffc0000 [ 1165.348833][ T29] audit: type=1326 audit(1735975998.407:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18834 comm="syz.2.3566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f3f85d29 code=0x7ffc0000 [ 1165.370678][ T29] audit: type=1326 audit(1735975998.407:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18834 comm="syz.2.3566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f3f85d29 code=0x7ffc0000 [ 1165.392594][ T29] audit: type=1326 audit(1735975998.477:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18834 comm="syz.2.3566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f69f3f85d29 code=0x7ffc0000 [ 1165.462624][T18841] netlink: 268 bytes leftover after parsing attributes in process `syz.2.3566'. [ 1166.148418][ T5873] usb 9-1: Using ep0 maxpacket: 16 [ 1166.177820][ T5873] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.207565][ T5873] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1166.225437][ T5873] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 0.40 [ 1166.234872][ T5873] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1166.256959][ T5873] usb 9-1: Product: syz [ 1166.261181][ T5873] usb 9-1: Manufacturer: syz [ 1166.297296][ T5873] usb 9-1: SerialNumber: syz [ 1166.319005][T18848] FAULT_INJECTION: forcing a failure. [ 1166.319005][T18848] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1166.356928][T18848] CPU: 0 UID: 0 PID: 18848 Comm: syz.3.3569 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 1166.367753][T18848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1166.377844][T18848] Call Trace: [ 1166.381147][T18848] [ 1166.384101][T18848] dump_stack_lvl+0x241/0x360 [ 1166.388810][T18848] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1166.394048][T18848] ? __pfx__printk+0x10/0x10 [ 1166.398674][T18848] should_fail_ex+0x3b0/0x4e0 [ 1166.403375][T18848] _copy_to_user+0x31/0xb0 [ 1166.407824][T18848] sctp_getsockopt_probe_interval+0x491/0x6a0 [ 1166.413930][T18848] ? __pfx_sctp_getsockopt_probe_interval+0x10/0x10 [ 1166.420572][T18848] ? sctp_getsockopt+0x13a/0xbb0 [ 1166.425537][T18848] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1166.431298][T18848] sctp_getsockopt+0x7b3/0xbb0 [ 1166.436088][T18848] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1166.442013][T18848] do_sock_getsockopt+0x3c4/0x7e0 [ 1166.447072][T18848] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1166.452651][T18848] ? __fget_files+0x2a/0x410 [ 1166.457274][T18848] ? __fget_files+0x395/0x410 [ 1166.461970][T18848] ? __fget_files+0x2a/0x410 [ 1166.466589][T18848] __x64_sys_getsockopt+0x2a1/0x370 [ 1166.471819][T18848] ? __pfx___x64_sys_getsockopt+0x10/0x10 [ 1166.477552][T18848] ? do_syscall_64+0x100/0x230 [ 1166.482331][T18848] ? do_syscall_64+0xb6/0x230 [ 1166.487011][T18848] do_syscall_64+0xf3/0x230 [ 1166.491522][T18848] ? clear_bhb_loop+0x35/0x90 [ 1166.496200][T18848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.502107][T18848] RIP: 0033:0x7f5332f85d29 [ 1166.506524][T18848] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1166.526136][T18848] RSP: 002b:00007f5333d55038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1166.534550][T18848] RAX: ffffffffffffffda RBX: 00007f5333175fa0 RCX: 00007f5332f85d29 [ 1166.542530][T18848] RDX: 0000000000000085 RSI: 0000000000000084 RDI: 0000000000000004 [ 1166.550495][T18848] RBP: 00007f5333d55090 R08: 0000000020000200 R09: 0000000000000000 [ 1166.558459][T18848] R10: 0000000020000480 R11: 0000000000000246 R12: 0000000000000001 [ 1166.566431][T18848] R13: 0000000000000000 R14: 00007f5333175fa0 R15: 00007ffe0f37bdc8 [ 1166.574414][T18848] [ 1166.583284][ T5873] usb 9-1: 0:76 : does not exist [ 1166.588628][ T5873] usb 9-1: 0:10 : does not exist [ 1166.601189][ T5873] usb 9-1: USB disconnect, device number 9 [ 1167.215111][T18859] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3572'. [ 1167.240966][ T5873] usb 4-1: new low-speed USB device number 61 using dummy_hcd [ 1167.437199][ T5873] usb 4-1: device descriptor read/64, error -71 [ 1167.855119][ T5873] usb 4-1: new low-speed USB device number 62 using dummy_hcd [ 1167.929640][T18866] netlink: 'syz.4.3576': attribute type 1 has an invalid length. [ 1167.944549][T18866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3576'. [ 1168.147725][ T5873] usb 4-1: device descriptor read/64, error -71 [ 1168.936544][ T5873] usb usb4-port1: attempt power cycle [ 1169.457140][ T5873] usb 4-1: new low-speed USB device number 63 using dummy_hcd [ 1169.507119][ T5873] usb 4-1: device descriptor read/8, error -71 [ 1169.747542][ T5873] usb 4-1: new low-speed USB device number 64 using dummy_hcd [ 1169.880176][ T5873] usb 4-1: device descriptor read/8, error -71 [ 1170.047461][ T5873] usb usb4-port1: unable to enumerate USB device [ 1170.178969][T18906] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3587'. [ 1175.776515][T18966] gfs2: not a GFS2 filesystem [ 1175.787925][T18966] No such timeout policy "syz0" [ 1176.092001][T18968] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3603'. [ 1176.654473][T18994] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1177.538815][T19001] FAULT_INJECTION: forcing a failure. [ 1177.538815][T19001] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1177.555062][T19001] CPU: 0 UID: 0 PID: 19001 Comm: syz.4.3610 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 1177.565869][T19001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1177.575940][T19001] Call Trace: [ 1177.579233][T19001] [ 1177.582177][T19001] dump_stack_lvl+0x241/0x360 [ 1177.586880][T19001] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1177.592094][T19001] ? __pfx__printk+0x10/0x10 [ 1177.596701][T19001] ? __pfx_lock_release+0x10/0x10 [ 1177.601738][T19001] ? rcu_is_watching+0x15/0xb0 [ 1177.606520][T19001] ? trace_contention_end+0x3c/0x120 [ 1177.611842][T19001] should_fail_ex+0x3b0/0x4e0 [ 1177.616536][T19001] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1177.622100][T19001] _copy_from_user+0x2f/0xc0 [ 1177.626707][T19001] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1177.632272][T19001] vlan_ioctl_handler+0xa5/0x9d0 [ 1177.637229][T19001] ? __pfx___mutex_lock+0x10/0x10 [ 1177.642272][T19001] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1177.647846][T19001] ? __asan_memset+0x23/0x50 [ 1177.652454][T19001] ? smack_file_ioctl+0x29e/0x3a0 [ 1177.657506][T19001] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 1177.663077][T19001] sock_ioctl+0x680/0x8e0 [ 1177.667434][T19001] ? __pfx_sock_ioctl+0x10/0x10 [ 1177.672302][T19001] ? __fget_files+0x2a/0x410 [ 1177.676914][T19001] ? __fget_files+0x2a/0x410 [ 1177.681524][T19001] ? __pfx_sock_ioctl+0x10/0x10 [ 1177.686396][T19001] __se_sys_ioctl+0xf5/0x170 [ 1177.691010][T19001] do_syscall_64+0xf3/0x230 [ 1177.695548][T19001] ? clear_bhb_loop+0x35/0x90 [ 1177.700244][T19001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1177.706159][T19001] RIP: 0033:0x7f078a185d29 [ 1177.710594][T19001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1177.730224][T19001] RSP: 002b:00007f078afc3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1177.738679][T19001] RAX: ffffffffffffffda RBX: 00007f078a375fa0 RCX: 00007f078a185d29 [ 1177.746680][T19001] RDX: 0000000000000000 RSI: 0000000000008982 RDI: 0000000000000003 [ 1177.754668][T19001] RBP: 00007f078afc3090 R08: 0000000000000000 R09: 0000000000000000 [ 1177.762649][T19001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1177.764991][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.770626][T19001] R13: 0000000000000000 R14: 00007f078a375fa0 R15: 00007ffda17da988 [ 1177.770683][T19001] [ 1177.873923][T18970] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3603'. [ 1177.955118][T18970] nbd: device at index 64 is going down [ 1178.122765][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 1178.122785][ T29] audit: type=1804 audit(1735976011.417:952): pid=19011 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.3613" name="/newroot/323/file0/file0" dev="ramfs" ino=63026 res=1 errno=0 [ 1178.372731][T19007] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3612'. [ 1178.392196][T19007] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3612'. [ 1179.726105][T19029] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1179.747723][T19029] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1179.864435][T19029] Process accounting resumed [ 1179.958675][T19023] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3619'. [ 1181.321703][T19042] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1181.387090][T19044] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3621'. [ 1182.182574][T19048] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1182.795094][ T5872] IPVS: starting estimator thread 0... [ 1182.886933][T19050] IPVS: using max 25 ests per chain, 60000 per kthread [ 1183.047225][T19062] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3627'. [ 1183.188653][T19065] qrtr: Invalid version 255 [ 1183.194003][T19065] syzkaller0: entered allmulticast mode [ 1183.885225][T19076] FAULT_INJECTION: forcing a failure. [ 1183.885225][T19076] name failslab, interval 1, probability 0, space 0, times 0 [ 1183.929455][T19076] CPU: 1 UID: 0 PID: 19076 Comm: syz.3.3630 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 1183.940238][T19076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1183.950287][T19076] Call Trace: [ 1183.953590][T19076] [ 1183.956514][T19076] dump_stack_lvl+0x241/0x360 [ 1183.961206][T19076] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1183.966395][T19076] ? __pfx__printk+0x10/0x10 [ 1183.970974][T19076] ? __kmalloc_noprof+0xb5/0x4c0 [ 1183.976004][T19076] ? __pfx___might_resched+0x10/0x10 [ 1183.981306][T19076] should_fail_ex+0x3b0/0x4e0 [ 1183.985984][T19076] should_failslab+0xac/0x100 [ 1183.990657][T19076] __kmalloc_noprof+0xdd/0x4c0 [ 1183.995412][T19076] ? iovec_from_user+0x87/0x240 [ 1184.000277][T19076] iovec_from_user+0x87/0x240 [ 1184.004952][T19076] __import_iovec+0x152/0x870 [ 1184.009637][T19076] import_iovec+0xeb/0x120 [ 1184.014047][T19076] copy_msghdr_from_user+0x52f/0x680 [ 1184.019329][T19076] ? read_tsc+0x9/0x20 [ 1184.023394][T19076] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1184.029192][T19076] ? __fget_files+0x2a/0x410 [ 1184.033770][T19076] ? __fget_files+0x2a/0x410 [ 1184.038350][T19076] do_recvmmsg+0x3bd/0xab0 [ 1184.042760][T19076] ? __pfx_do_recvmmsg+0x10/0x10 [ 1184.047702][T19076] ? __pfx___might_resched+0x10/0x10 [ 1184.052981][T19076] ? __might_fault+0xaa/0x120 [ 1184.057648][T19076] ? __pfx_lock_release+0x10/0x10 [ 1184.062698][T19076] ? vfs_write+0x730/0xd30 [ 1184.067183][T19076] ? get_timespec64+0x19c/0x280 [ 1184.072027][T19076] __x64_sys_recvmmsg+0x1b8/0x250 [ 1184.077061][T19076] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1184.082599][T19076] ? do_syscall_64+0x100/0x230 [ 1184.087372][T19076] ? do_syscall_64+0xb6/0x230 [ 1184.092042][T19076] do_syscall_64+0xf3/0x230 [ 1184.096534][T19076] ? clear_bhb_loop+0x35/0x90 [ 1184.101216][T19076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.107117][T19076] RIP: 0033:0x7f5332f85d29 [ 1184.111519][T19076] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1184.131115][T19076] RSP: 002b:00007f5333d55038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1184.139518][T19076] RAX: ffffffffffffffda RBX: 00007f5333175fa0 RCX: 00007f5332f85d29 [ 1184.147477][T19076] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 1184.155437][T19076] RBP: 00007f5333d55090 R08: 0000000020003700 R09: 0000000000000000 [ 1184.163393][T19076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1184.171352][T19076] R13: 0000000000000000 R14: 00007f5333175fa0 R15: 00007ffe0f37bdc8 [ 1184.179324][T19076] [ 1184.191023][T19078] Mount JFS Failure: -22 [ 1184.195280][T19078] jfs_mount failed w/return code = -22 [ 1184.487173][T19088] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1184.557064][ T5872] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1184.797441][ T5872] usb 3-1: Using ep0 maxpacket: 16 [ 1185.421671][ T5872] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.490646][ T5872] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1185.502462][ T5872] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 0.40 [ 1185.511947][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.520849][ T5872] usb 3-1: Product: syz [ 1185.525051][ T5872] usb 3-1: Manufacturer: syz [ 1185.530183][ T5872] usb 3-1: SerialNumber: syz [ 1185.605828][T19098] loop7: detected capacity change from 0 to 16384 [ 1185.664601][T19103] overlayfs: failed to resolve './file1': -2 [ 1185.805060][ T5872] usb 3-1: 0:76 : does not exist [ 1185.810248][ T5872] usb 3-1: 0:10 : does not exist [ 1185.822896][ T5872] usb 3-1: USB disconnect, device number 61 [ 1185.968340][T19102] netlink: 'syz.3.3638': attribute type 1 has an invalid length. [ 1185.978569][T19102] netlink: 'syz.3.3638': attribute type 3 has an invalid length. [ 1185.987576][T19102] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3638'. [ 1186.568220][T19104] loop7: detected capacity change from 16384 to 0 [ 1187.897065][T10335] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1188.017032][T19137] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3646'. [ 1190.641745][ T29] audit: type=1804 audit(1735976023.957:953): pid=19156 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.7.3655" name="/newroot/331/file0" dev="fuse" ino=1 res=1 errno=0 [ 1191.585640][T10335] usb 9-1: no configurations [ 1191.590535][T10335] usb 9-1: can't read configurations, error -22 [ 1191.626928][ T5902] usb 4-1: new full-speed USB device number 65 using dummy_hcd [ 1191.675818][ T6192] bridge_slave_0: left allmulticast mode [ 1191.681957][ T6192] bridge_slave_0: left promiscuous mode [ 1191.695565][ T6192] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.836374][ T6192] ip6gretap0 (unregistering): left promiscuous mode [ 1191.858202][T10335] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1191.878403][ T5902] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1191.895913][ T5902] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1191.929623][ T5902] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1191.939675][ T5902] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.949791][ T5902] usb 4-1: Product: syz [ 1191.953988][ T5902] usb 4-1: Manufacturer: syz [ 1191.973171][ T5902] usb 4-1: SerialNumber: syz [ 1192.028207][T10335] usb 9-1: Using ep0 maxpacket: 16 [ 1192.035019][T10335] usb 9-1: no configurations [ 1192.040038][T10335] usb 9-1: can't read configurations, error -22 [ 1192.047016][T10335] usb usb9-port1: attempt power cycle [ 1192.154062][ T5820] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1192.200938][ T5820] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1192.214282][ T5820] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1192.228526][ T5820] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1192.250913][ T5820] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1192.258722][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1192.406985][T10335] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1192.437630][T10335] usb 9-1: Using ep0 maxpacket: 16 [ 1192.452546][T10335] usb 9-1: no configurations [ 1192.457511][T10335] usb 9-1: can't read configurations, error -22 [ 1192.532837][ T6192] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1192.555903][ T6192] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1192.572954][ T6192] bond0 (unregistering): Released all slaves [ 1192.587055][T10335] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1192.621926][T10335] usb 9-1: Using ep0 maxpacket: 16 [ 1192.656074][T10335] usb 9-1: no configurations [ 1192.667200][T10335] usb 9-1: can't read configurations, error -22 [ 1192.682332][T10335] usb usb9-port1: unable to enumerate USB device [ 1192.895548][T19167] chnl_net:caif_netlink_parms(): no params data found [ 1192.950508][T19184] binder: 19183:19184 ioctl c0306201 20000480 returned -22 [ 1192.970275][ T6192] macvlan1: left promiscuous mode [ 1192.976471][ T6192] team0: left promiscuous mode [ 1192.981517][ T6192] team_slave_0: left promiscuous mode [ 1192.989623][ T6192] team_slave_1: left promiscuous mode [ 1193.002326][ T6192] batadv_slave_0: left promiscuous mode [ 1193.014237][ T6192] hsr_slave_0: left promiscuous mode [ 1193.020960][ T6192] hsr_slave_1: left promiscuous mode [ 1193.030325][ T6192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1193.037860][ T6192] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1193.045788][ T6192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1193.053763][ T6192] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1193.078420][ T6192] veth1_macvtap: left promiscuous mode [ 1193.084071][ T6192] veth0_macvtap: left promiscuous mode [ 1193.089781][ T6192] veth1_vlan: left promiscuous mode [ 1193.095816][ T6192] veth0_vlan: left promiscuous mode [ 1193.114827][ T5902] usb 4-1: cannot find UAC_HEADER [ 1193.136648][ T5902] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1193.147726][ T5902] usb 4-1: USB disconnect, device number 65 [ 1193.360099][T19189] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1193.425528][T19191] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3663'. [ 1194.299015][ T5820] Bluetooth: hci2: command tx timeout [ 1194.376870][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1195.845470][ T6192] team0 (unregistering): Port device team_slave_1 removed [ 1195.989339][ T6192] team0 (unregistering): Port device team_slave_0 removed [ 1196.377010][ T5820] Bluetooth: hci2: command tx timeout [ 1196.978894][T19167] bridge0: port 1(bridge_slave_0) entered blocking state [ 1197.006257][T19167] bridge0: port 1(bridge_slave_0) entered disabled state [ 1197.019424][T19167] bridge_slave_0: entered allmulticast mode [ 1197.027198][T19167] bridge_slave_0: entered promiscuous mode [ 1197.034994][T19167] bridge0: port 2(bridge_slave_1) entered blocking state [ 1197.042233][T19167] bridge0: port 2(bridge_slave_1) entered disabled state [ 1197.049439][T19167] bridge_slave_1: entered allmulticast mode [ 1197.056061][T19167] bridge_slave_1: entered promiscuous mode [ 1197.156956][T19167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1197.179683][T19167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1197.275523][T19167] team0: Port device team_slave_0 added [ 1197.294553][T19167] team0: Port device team_slave_1 added [ 1197.382520][T19167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1197.405699][T19167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1197.470392][T19167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1197.496539][T19167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1197.504481][T19167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1197.701542][T19167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1198.457033][ T5820] Bluetooth: hci2: command tx timeout [ 1198.468282][T19167] hsr_slave_0: entered promiscuous mode [ 1198.504910][T19167] hsr_slave_1: entered promiscuous mode [ 1198.609367][T19231] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3673'. [ 1200.882102][ T5820] Bluetooth: hci2: command tx timeout [ 1201.506634][T19244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1202.211198][T19167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1202.295775][T19167] 8021q: adding VLAN 0 to HW filter on device team0 [ 1202.444773][T19266] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3680'. [ 1202.482051][T19167] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1202.492606][T19167] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1202.537919][T19269] binder: 19268:19269 unknown command 0 [ 1202.543751][T19269] binder: 19268:19269 ioctl c0306201 200092c0 returned -22 [ 1202.594816][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.602071][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1202.636594][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1202.643836][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1203.220147][T19277] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3684'. [ 1204.196706][T19167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1205.471129][T19302] No such timeout policy "syz0" [ 1205.551823][T19305] overlayfs: missing 'workdir' [ 1205.617814][ T5873] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1205.654804][T19167] veth0_vlan: entered promiscuous mode [ 1205.670058][T19167] veth1_vlan: entered promiscuous mode [ 1205.698862][T19311] Process accounting resumed [ 1205.723675][T19167] veth0_macvtap: entered promiscuous mode [ 1205.753604][T19167] veth1_macvtap: entered promiscuous mode [ 1205.776636][T19167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1205.792965][T19167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1205.797355][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 1205.803286][T19167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1205.828917][T19167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1205.845341][T19167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1205.856520][T19167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1205.867975][ T5873] usb 3-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1205.868169][T19167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1205.876677][ T5873] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1205.876702][ T5873] usb 3-1: config 0 has no interface number 0 [ 1205.888023][T19167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1205.947008][ T5873] usb 3-1: config 0 interface 68 has no altsetting 0 [ 1205.954996][ T5873] usb 3-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1205.960375][T19167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1205.997289][ T5873] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1205.999176][T19167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.006361][ T5873] usb 3-1: config 0 has no interface number 0 [ 1206.006396][ T5873] usb 3-1: config 0 interface 68 has no altsetting 0 [ 1206.028019][ T5873] usb 3-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1206.033847][T19167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1206.040427][ T5873] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1206.067036][T19167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.088500][T19167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1206.118924][T19167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1206.142226][ T5873] usb 3-1: config 0 has no interface number 0 [ 1206.161146][ T5873] usb 3-1: config 0 interface 68 has no altsetting 0 [ 1206.168310][T19167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.186371][T19167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1206.188451][ T5873] usb 3-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1206.218654][T19167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.228882][T19167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1206.239867][ T5873] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1206.247272][T19167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.249240][ T5873] usb 3-1: config 0 has no interface number 0 [ 1206.266923][T19167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1206.273586][ T5873] usb 3-1: config 0 interface 68 has no altsetting 0 [ 1206.287336][T19167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.288602][ T5873] usb 3-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1206.299139][T19167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1206.313763][ T5873] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1206.318518][T19167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.332314][ T5873] usb 3-1: config 0 has no interface number 0 [ 1206.335895][T19167] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1206.342013][ T5873] usb 3-1: config 0 interface 68 has no altsetting 0 [ 1206.358967][T19167] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1206.367062][ T5873] usb 3-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1206.392124][T19167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1206.392973][ T5873] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1206.549202][ T5873] usb 3-1: config 0 has no interface number 0 [ 1206.563804][ T5873] usb 3-1: config 0 interface 68 has no altsetting 0 [ 1206.596266][ T5873] usb 3-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1206.607884][ T5873] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1206.618579][ T5873] usb 3-1: config 0 has no interface number 0 [ 1206.625799][ T5873] usb 3-1: config 0 interface 68 has no altsetting 0 [ 1206.646090][ T5873] usb 3-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1206.656237][ T5873] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1206.665517][ T5873] usb 3-1: config 0 has no interface number 0 [ 1206.671802][ T5873] usb 3-1: config 0 interface 68 has no altsetting 0 [ 1206.692008][ T5873] usb 3-1: New USB device found, idVendor=0731, idProduct=0901, bcdDevice=a8.06 [ 1206.785252][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.794456][ T5873] usb 3-1: Product: syz [ 1206.799663][ T5873] usb 3-1: Manufacturer: syz [ 1206.804899][ T5873] usb 3-1: SerialNumber: syz [ 1206.864841][ T990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1206.876619][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1206.878707][ T5873] usb 3-1: config 0 descriptor?? [ 1206.885228][ T990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1206.907023][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1207.198348][ T5873] usb 3-1: USB disconnect, device number 62 [ 1207.478712][ T5902] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1207.835474][T19333] program syz.9.3658 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1207.846983][T19333] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1207.879913][T19334] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3696'. [ 1208.557251][ T5902] usb 4-1: Using ep0 maxpacket: 8 [ 1208.565936][ T5902] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1208.577107][ T5902] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1209.550692][ T5902] usb 4-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 1209.559949][ T5902] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.583874][ T5902] usb 4-1: can't set config #4, error -71 [ 1210.733272][ T29] audit: type=1804 audit(1735976043.917:954): pid=19341 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.3697" name="/newroot/340/file0/file0" dev="ramfs" ino=64044 res=1 errno=0 [ 1210.810926][ T5902] usb 4-1: USB disconnect, device number 66 [ 1211.954845][T17085] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1212.238700][T17085] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1212.250620][T17085] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1212.262857][T19356] Cannot find map_set index 0 as target [ 1212.272660][T17085] usb 9-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 1212.285227][T17085] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.375706][T17085] usb 9-1: config 0 descriptor?? [ 1212.513581][T19362] No such timeout policy "syz0" [ 1213.021237][T19367] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3705'. [ 1213.254407][T19375] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3707'. [ 1213.297290][T19378] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3708'. [ 1213.306400][T19375] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3707'. [ 1213.333242][T19375] macvlan1: entered promiscuous mode [ 1213.348220][T19378] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3708'. [ 1213.378388][T19375] team0: entered promiscuous mode [ 1213.387998][T19375] team_slave_0: entered promiscuous mode [ 1213.614140][T19375] team_slave_1: entered promiscuous mode [ 1213.633645][T19375] geneve0: entered promiscuous mode [ 1213.647902][T19375] hsr1: Slave B (team0) is not up; please bring it up to get a fully working HSR network [ 1213.672574][T19378] macvlan1: entered promiscuous mode [ 1213.683253][T19378] team0: entered promiscuous mode [ 1213.697027][T19378] team_slave_0: entered promiscuous mode [ 1213.704325][T19378] team_slave_1: entered promiscuous mode [ 1214.671770][T19378] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1214.679735][T19378] Cannot create hsr debugfs directory [ 1215.124452][T17085] hid-led 0003:0FC5:B080.0015: probe with driver hid-led failed with error -71 [ 1215.138451][T17085] usb 9-1: USB disconnect, device number 14 [ 1215.808373][T19395] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3710'. [ 1218.786858][ T29] audit: type=1800 audit(1735976052.087:955): pid=19427 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.9.3718" name="bus" dev="overlay" ino=55 res=0 errno=0 [ 1218.843558][T19428] No such timeout policy "syz0" [ 1221.601491][T19456] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3725'. [ 1222.903197][T19451] usb usb1: usbfs: process 19451 (syz.7.3726) did not claim interface 0 before use [ 1223.122226][T19464] Mount JFS Failure: -22 [ 1223.126529][T19464] jfs_mount failed w/return code = -22 [ 1223.258545][T19471] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3731'. [ 1223.842476][ T5873] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1224.016914][ T5873] usb 10-1: Using ep0 maxpacket: 16 [ 1224.046988][ T5873] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1224.057902][ T5873] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1224.094859][T19477] input: syz0 as /devices/virtual/input/input23 [ 1224.120724][ T5873] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 0.40 [ 1224.136178][ T5873] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1224.152114][ T5873] usb 10-1: Product: syz [ 1224.159795][ T5873] usb 10-1: Manufacturer: syz [ 1224.174372][ T5873] usb 10-1: SerialNumber: syz [ 1224.486786][ C1] hrtimer: interrupt took 51268 ns [ 1225.248762][ T5873] usb 10-1: 0:76 : does not exist [ 1225.253853][ T5873] usb 10-1: 0:10 : does not exist [ 1225.314706][ T5873] usb 10-1: USB disconnect, device number 2 [ 1226.425685][T19500] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3740'. [ 1229.172895][T19529] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1229.204107][T19529] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 1232.022016][T19574] netlink: 48 bytes leftover after parsing attributes in process `syz.9.3763'. [ 1232.202354][T19574] loop6: detected capacity change from 0 to 64 [ 1232.316393][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0 [ 1232.351443][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1232.360936][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1232.386136][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1232.395345][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1232.404787][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1232.413979][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1232.445782][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1232.455024][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1232.484066][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1232.493296][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1232.506902][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1232.516117][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1232.542575][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1232.551813][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1232.560769][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1232.569975][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1232.578924][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1232.588112][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1232.599270][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1234.540120][T19616] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3775'. [ 1234.940108][T12046] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1235.545375][T19617] kvm: user requested TSC rate below hardware speed [ 1236.587744][T12046] usb 3-1: Using ep0 maxpacket: 32 [ 1236.615208][T12046] usb 3-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1236.624426][ T5873] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1236.632837][T12046] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1236.653167][T12046] usb 3-1: config 0 has no interface number 0 [ 1236.659471][T12046] usb 3-1: config 0 interface 68 has no altsetting 0 [ 1236.733096][T12046] usb 3-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1236.746943][T12046] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1236.766291][T12046] usb 3-1: config 0 has no interface number 0 [ 1236.778416][T12046] usb 3-1: config 0 interface 68 has no altsetting 0 [ 1236.962687][T12046] usb 3-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1236.971708][T12046] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1236.985128][T12046] usb 3-1: config 0 has no interface number 0 [ 1237.016952][T12046] usb 3-1: config 0 interface 68 has no altsetting 0 [ 1237.059175][ T5873] usb 9-1: device descriptor read/64, error -71 [ 1237.083361][T12046] usb 3-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1237.095486][T12046] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1237.124891][T12046] usb 3-1: config 0 has no interface number 0 [ 1237.137047][T12046] usb 3-1: config 0 interface 68 has no altsetting 0 [ 1237.155115][T12046] usb 3-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1237.444437][T12046] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1237.454009][T12046] usb 3-1: config 0 has no interface number 0 [ 1237.475524][T12046] usb 3-1: config 0 interface 68 has no altsetting 0 [ 1237.661627][T19635] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3781'. [ 1237.681347][T19635] loop6: detected capacity change from 0 to 64 [ 1237.690980][ C1] blk_print_req_error: 60 callbacks suppressed [ 1237.691013][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0 [ 1237.713097][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1237.722319][ C1] buffer_io_error: 59 callbacks suppressed [ 1237.722336][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1237.736275][T12046] usb 3-1: unable to read config index 5 descriptor/start: -71 [ 1237.744600][T12046] usb 3-1: can't read configurations, error -71 [ 1237.751641][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1237.760950][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1237.769385][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1237.778573][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1237.786940][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1237.796089][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1237.804161][ T5873] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1237.814364][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1237.823542][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1237.839602][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1237.848772][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1237.858427][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1237.867595][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1237.876660][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1237.885837][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1237.893995][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1237.903185][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1237.911920][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1238.057931][ T5873] usb 9-1: device descriptor read/64, error -71 [ 1238.178393][ T5873] usb usb9-port1: attempt power cycle [ 1238.537187][ T5873] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1238.579032][ T5873] usb 9-1: device descriptor read/8, error -71 [ 1238.940236][T19650] Process accounting resumed [ 1239.524755][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.648685][T19658] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3788'. [ 1240.693367][T19665] IPVS: set_ctl: invalid protocol: 41 127.0.0.1:20002 [ 1241.078398][T19674] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3792'. [ 1241.959852][T19680] loop6: detected capacity change from 0 to 64 [ 1242.277501][T19677] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3795'. [ 1243.469311][T17085] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1243.751348][T17085] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1243.771734][T17085] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1243.836996][T17085] usb 9-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 1243.846093][T17085] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.903196][T17085] usb 9-1: config 0 descriptor?? [ 1244.083045][T19709] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3802'. [ 1244.947938][T17085] usbhid 9-1:0.0: can't add hid device: -71 [ 1244.955601][T17085] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1245.107273][T17085] usb 9-1: USB disconnect, device number 19 [ 1245.501744][T19722] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3805'. [ 1246.613173][T19739] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3807'. [ 1247.352165][T19734] netlink: 120 bytes leftover after parsing attributes in process `syz.2.3811'. [ 1248.159253][ T29] audit: type=1326 audit(1735976081.477:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19757 comm="syz.2.3819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f3f85d29 code=0x7ffc0000 [ 1248.422704][ T29] audit: type=1326 audit(1735976081.477:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19757 comm="syz.2.3819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f3f85d29 code=0x7ffc0000 [ 1248.444663][ T29] audit: type=1326 audit(1735976081.497:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19757 comm="syz.2.3819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f69f3f85d29 code=0x7ffc0000 [ 1248.703199][ T29] audit: type=1326 audit(1735976081.497:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19757 comm="syz.2.3819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f3f85d29 code=0x7ffc0000 [ 1248.725420][ T29] audit: type=1326 audit(1735976081.497:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19757 comm="syz.2.3819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f3f85d29 code=0x7ffc0000 [ 1248.747959][ T29] audit: type=1326 audit(1735976081.497:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19757 comm="syz.2.3819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f69f3f85d29 code=0x7ffc0000 [ 1248.770224][ T29] audit: type=1326 audit(1735976081.507:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19757 comm="syz.2.3819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f3f85d29 code=0x7ffc0000 [ 1248.792553][ T29] audit: type=1326 audit(1735976081.507:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19757 comm="syz.2.3819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f3f85d29 code=0x7ffc0000 [ 1248.815046][ T29] audit: type=1326 audit(1735976081.507:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19757 comm="syz.2.3819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f69f3f85d29 code=0x7ffc0000 [ 1248.837587][ T29] audit: type=1326 audit(1735976081.507:965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19757 comm="syz.2.3819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69f3f85d29 code=0x7ffc0000 [ 1249.285759][T19769] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3820'. [ 1251.108498][T19795] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3826'. [ 1252.150241][T19799] program syz.9.3828 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1252.162306][T19799] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1252.652890][T19809] ALSA: mixer_oss: invalid OSS volume '' [ 1253.092871][T19819] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3833'. [ 1254.747119][ T5873] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1255.594614][ T5873] usb 3-1: Using ep0 maxpacket: 8 [ 1255.601628][ T5873] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1255.614240][ T5873] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1255.623636][ T5873] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.636159][ T5873] usb 3-1: config 0 descriptor?? [ 1256.093250][T19847] netlink: 36 bytes leftover after parsing attributes in process `syz.9.3840'. [ 1257.822012][T19851] program syz.7.3843 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1257.831504][T19851] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1257.867239][ T5873] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1258.406599][T19855] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3845'. [ 1258.769274][ T5873] usb 3-1: USB disconnect, device number 65 [ 1258.895827][T19871] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3846'. [ 1258.994598][T19870] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 1259.830240][T19885] FAULT_INJECTION: forcing a failure. [ 1259.830240][T19885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1259.891482][T19885] CPU: 1 UID: 0 PID: 19885 Comm: syz.3.3851 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 1259.902293][T19885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1259.912361][T19885] Call Trace: [ 1259.915637][T19885] [ 1259.918559][T19885] dump_stack_lvl+0x241/0x360 [ 1259.923229][T19885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1259.928430][T19885] ? __pfx__printk+0x10/0x10 [ 1259.933048][T19885] ? __pfx_lock_release+0x10/0x10 [ 1259.938104][T19885] should_fail_ex+0x3b0/0x4e0 [ 1259.942796][T19885] _copy_from_user+0x2f/0xc0 [ 1259.947404][T19885] copy_msghdr_from_user+0xae/0x680 [ 1259.952641][T19885] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1259.958467][T19885] ? __fget_files+0x2a/0x410 [ 1259.963059][T19885] ? __fget_files+0x2a/0x410 [ 1259.967652][T19885] __sys_sendmsg+0x209/0x350 [ 1259.972240][T19885] ? __pfx_lock_release+0x10/0x10 [ 1259.977263][T19885] ? __pfx___sys_sendmsg+0x10/0x10 [ 1259.982376][T19885] ? __pfx_vfs_write+0x10/0x10 [ 1259.987153][T19885] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1259.993477][T19885] ? do_syscall_64+0x100/0x230 [ 1259.998241][T19885] ? do_syscall_64+0xb6/0x230 [ 1260.002919][T19885] do_syscall_64+0xf3/0x230 [ 1260.007418][T19885] ? clear_bhb_loop+0x35/0x90 [ 1260.012090][T19885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1260.017983][T19885] RIP: 0033:0x7f5332f85d29 [ 1260.022391][T19885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1260.041988][T19885] RSP: 002b:00007f5333d55038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1260.050398][T19885] RAX: ffffffffffffffda RBX: 00007f5333175fa0 RCX: 00007f5332f85d29 [ 1260.058363][T19885] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1260.066329][T19885] RBP: 00007f5333d55090 R08: 0000000000000000 R09: 0000000000000000 [ 1260.074297][T19885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1260.082264][T19885] R13: 0000000000000000 R14: 00007f5333175fa0 R15: 00007ffe0f37bdc8 [ 1260.090241][T19885] [ 1261.472461][T19901] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3855'. [ 1262.192797][T19905] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3857'. [ 1263.629823][T19920] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3860'. [ 1264.548836][T19924] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3862'. [ 1264.646279][T19924] loop6: detected capacity change from 0 to 64 [ 1264.655991][ C1] blk_print_req_error: 130 callbacks suppressed [ 1264.656012][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0 [ 1264.990030][T19934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3866'. [ 1265.389538][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1265.398801][ C1] buffer_io_error: 128 callbacks suppressed [ 1265.398818][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1265.415027][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1265.424251][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1265.432737][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1265.441969][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1265.468712][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1265.477987][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1265.499174][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1265.508414][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1265.523738][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1265.532964][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1265.579572][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1265.588830][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1265.607540][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1265.616727][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1265.627881][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1265.637098][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1265.645622][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1266.304495][T19957] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3873'. [ 1267.125984][T19949] gfs2: not a GFS2 filesystem [ 1267.148686][T19949] No such timeout policy "syz0" [ 1267.316229][T19964] netlink: 'syz.9.3874': attribute type 1 has an invalid length. [ 1267.336852][T19964] netlink: 112 bytes leftover after parsing attributes in process `syz.9.3874'. [ 1267.358093][T19964] netlink: 'syz.9.3874': attribute type 1 has an invalid length. [ 1267.366303][T19964] netlink: 112 bytes leftover after parsing attributes in process `syz.9.3874'. [ 1268.062814][T19973] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3878'. [ 1268.073679][T19973] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3878'. [ 1268.446883][T17085] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1268.606990][T17085] usb 10-1: Using ep0 maxpacket: 8 [ 1268.621512][T17085] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1268.640825][T17085] usb 10-1: config 4 interface 0 has no altsetting 0 [ 1268.659529][T17085] usb 10-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1269.409247][T17085] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.417856][T17085] usb 10-1: Product: syz [ 1269.422151][T17085] usb 10-1: Manufacturer: syz [ 1269.427055][T17085] usb 10-1: SerialNumber: syz [ 1269.625277][T19994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3883'. [ 1269.827530][T19995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1269.838528][T19995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1270.586243][T20005] gfs2: not a GFS2 filesystem [ 1270.593090][T20005] No such timeout policy "syz0" [ 1270.757135][ T5830] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1270.926938][ T5830] usb 4-1: Using ep0 maxpacket: 32 [ 1270.940963][ T5830] usb 4-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1270.959820][ T5830] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1270.984606][ T5830] usb 4-1: config 0 has no interface number 0 [ 1271.001850][ T5830] usb 4-1: config 0 interface 68 has no altsetting 0 [ 1271.025637][ T5830] usb 4-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1271.041337][ T5830] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1271.064533][ T5830] usb 4-1: config 0 has no interface number 0 [ 1271.090228][ T5830] usb 4-1: config 0 interface 68 has no altsetting 0 [ 1271.102127][ T5830] usb 4-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1271.113924][ T5830] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1271.137072][ T5873] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1271.213123][ T5830] usb 4-1: config 0 has no interface number 0 [ 1271.219443][ T5830] usb 4-1: config 0 interface 68 has no altsetting 0 [ 1271.229714][ T5830] usb 4-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1271.239337][ T5830] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1271.249973][ T5830] usb 4-1: config 0 has no interface number 0 [ 1271.256129][ T5830] usb 4-1: config 0 interface 68 has no altsetting 0 [ 1271.264572][ T5830] usb 4-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1271.273779][ T5830] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1271.287028][ T5830] usb 4-1: config 0 has no interface number 0 [ 1271.293173][ T5830] usb 4-1: config 0 interface 68 has no altsetting 0 [ 1271.294984][ T5873] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.330782][ T5830] usb 4-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1271.365070][ T5873] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1271.366108][ T5830] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1271.419604][ T5873] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.437071][ T5830] usb 4-1: config 0 has no interface number 0 [ 1271.442694][T20021] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3893'. [ 1271.464864][T20021] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3893'. [ 1271.471266][T17085] usb 10-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1271.506111][ T5830] usb 4-1: config 0 interface 68 has no altsetting 0 [ 1271.537603][ T5873] usb 9-1: config 0 descriptor?? [ 1271.537897][T17085] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1271.565438][ T5830] usb 4-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1271.568555][ T5873] pwc: Askey VC010 type 2 USB webcam detected. [ 1271.584766][ T5830] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1271.614595][ T5830] usb 4-1: config 0 has no interface number 0 [ 1271.625109][T17085] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1271.639350][ T5830] usb 4-1: config 0 interface 68 has no altsetting 0 [ 1271.660494][T17085] usb 10-1: media controller created [ 1271.681946][ T5830] usb 4-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1271.701036][ T5830] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1271.726255][T17085] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1271.763218][ T5830] usb 4-1: config 0 has no interface number 0 [ 1271.796427][T20010] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3889'. [ 1271.969476][ T5830] usb 4-1: config 0 interface 68 has no altsetting 0 [ 1271.999188][T17085] zl10353_read_register: readreg error (reg=127, ret==0) [ 1272.017708][ T5830] usb 4-1: New USB device found, idVendor=0731, idProduct=0901, bcdDevice=a8.06 [ 1272.027163][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.035181][ T5830] usb 4-1: Product: syz [ 1272.057301][ T5873] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1272.065395][ T5873] pwc: recv_control_msg error -32 req 02 val 2700 [ 1272.075770][ T5873] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1272.100756][ T5873] pwc: recv_control_msg error -32 req 04 val 1000 [ 1272.130579][T20028] program syz.9.3894 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1272.151363][ T5873] pwc: recv_control_msg error -32 req 04 val 1300 [ 1272.199040][ T5873] pwc: recv_control_msg error -32 req 04 val 1400 [ 1272.219454][T20028] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1272.230237][ T5873] pwc: recv_control_msg error -32 req 02 val 2000 [ 1272.261238][ T5830] usb 4-1: Manufacturer: syz [ 1272.265898][ T5830] usb 4-1: SerialNumber: syz [ 1272.413012][ T5830] usb 4-1: config 0 descriptor?? [ 1272.429408][T17085] usb 10-1: USB disconnect, device number 3 [ 1272.516992][ T5873] pwc: recv_control_msg error -32 req 02 val 2100 [ 1272.540626][ T5873] pwc: recv_control_msg error -32 req 04 val 1500 [ 1272.548256][ T5873] pwc: recv_control_msg error -32 req 02 val 2500 [ 1272.564000][ T5873] pwc: recv_control_msg error -32 req 02 val 2400 [ 1272.572689][ T5873] pwc: recv_control_msg error -71 req 02 val 2600 [ 1272.583577][ T5873] pwc: recv_control_msg error -71 req 02 val 2900 [ 1272.657537][ T5873] pwc: recv_control_msg error -71 req 02 val 2800 [ 1272.676979][ T5873] pwc: recv_control_msg error -71 req 04 val 1100 [ 1272.707139][ T5873] pwc: recv_control_msg error -71 req 04 val 1200 [ 1272.714037][ T5873] videodev: could not get a free minor [ 1272.731272][ T5873] pwc: Failed to register as video device (-23). [ 1272.738473][ T5873] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -23 [ 1272.745524][ T5830] usb 4-1: USB disconnect, device number 67 [ 1272.759118][ T5873] usb 9-1: USB disconnect, device number 20 [ 1273.367792][T20042] FAULT_INJECTION: forcing a failure. [ 1273.367792][T20042] name failslab, interval 1, probability 0, space 0, times 0 [ 1273.380897][T20042] CPU: 0 UID: 0 PID: 20042 Comm: syz.9.3897 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 1273.391689][T20042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1273.401757][T20042] Call Trace: [ 1273.405048][T20042] [ 1273.408014][T20042] dump_stack_lvl+0x241/0x360 [ 1273.412729][T20042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1273.417962][T20042] ? __pfx__printk+0x10/0x10 [ 1273.422577][T20042] ? kmem_cache_alloc_lru_noprof+0x4d/0x390 [ 1273.428488][T20042] ? __pfx___might_resched+0x10/0x10 [ 1273.433799][T20042] should_fail_ex+0x3b0/0x4e0 [ 1273.438506][T20042] should_failslab+0xac/0x100 [ 1273.443211][T20042] ? hugetlbfs_alloc_inode+0xf5/0x140 [ 1273.448601][T20042] kmem_cache_alloc_lru_noprof+0x75/0x390 [ 1273.454357][T20042] hugetlbfs_alloc_inode+0xf5/0x140 [ 1273.459572][T20042] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 1273.465396][T20042] alloc_inode+0x65/0x1a0 [ 1273.469740][T20042] new_inode+0x22/0x1d0 [ 1273.473907][T20042] ? resv_map_alloc+0x1c4/0x2c0 [ 1273.478778][T20042] hugetlbfs_get_inode+0x74/0x690 [ 1273.483829][T20042] hugetlb_file_setup+0x204/0x5c0 [ 1273.488875][T20042] ksys_mmap_pgoff+0x20d/0x720 [ 1273.493657][T20042] do_syscall_64+0xf3/0x230 [ 1273.498175][T20042] ? clear_bhb_loop+0x35/0x90 [ 1273.502865][T20042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.508776][T20042] RIP: 0033:0x7f8138785d29 [ 1273.513207][T20042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1273.532848][T20042] RSP: 002b:00007f813952d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1273.541291][T20042] RAX: ffffffffffffffda RBX: 00007f8138976160 RCX: 00007f8138785d29 [ 1273.549280][T20042] RDX: 0000000004000002 RSI: 0000000000c00000 RDI: 0000000020400000 [ 1273.557262][T20042] RBP: 00007f813952d090 R08: ffffffffffffffff R09: 0000000000000000 [ 1273.565241][T20042] R10: 0000000000050032 R11: 0000000000000246 R12: 0000000000000001 [ 1273.573222][T20042] R13: 0000000000000000 R14: 00007f8138976160 R15: 00007fff45788f08 [ 1273.581223][T20042] [ 1273.944823][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 1273.944842][ T29] audit: type=1804 audit(1735976107.257:976): pid=20047 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.9.3900" name="/newroot/47/file0/file0" dev="ramfs" ino=66334 res=1 errno=0 [ 1276.466890][ T5902] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1276.482307][T20082] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1276.657066][ T5902] usb 10-1: Using ep0 maxpacket: 32 [ 1277.456977][ T5902] usb 10-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1277.465808][ T5902] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1277.475556][ T5902] usb 10-1: config 0 has no interface number 0 [ 1277.482260][ T5902] usb 10-1: config 0 interface 68 has no altsetting 0 [ 1277.520052][ T5902] usb 10-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1277.546996][ T5902] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1277.556171][ T5902] usb 10-1: config 0 has no interface number 0 [ 1277.562609][ T5902] usb 10-1: config 0 interface 68 has no altsetting 0 [ 1277.573287][ T5902] usb 10-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1277.585624][ T5902] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1277.595264][ T5902] usb 10-1: config 0 has no interface number 0 [ 1277.667346][ T5902] usb 10-1: config 0 interface 68 has no altsetting 0 [ 1277.929882][ T5902] usb 10-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1277.939860][ T5902] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1277.947209][T12046] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1277.950181][ T5902] usb 10-1: config 0 has no interface number 0 [ 1277.963557][T20102] gfs2: not a GFS2 filesystem [ 1277.968905][ T5902] usb 10-1: config 0 interface 68 has no altsetting 0 [ 1277.980923][T20102] No such timeout policy "syz0" [ 1277.988461][ T5902] usb 10-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1277.997905][ T5902] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1278.429224][ T5902] usb 10-1: config 0 has no interface number 0 [ 1278.435828][ T5902] usb 10-1: config 0 interface 68 has no altsetting 0 [ 1278.753903][T12046] usb 3-1: Using ep0 maxpacket: 32 [ 1279.846046][ T5902] usb 10-1: unable to read config index 5 descriptor/start: -71 [ 1279.846354][T20104] xt_CT: No such helper "snmp_trap" [ 1279.853938][ T5902] usb 10-1: can't read configurations, error -71 [ 1279.960328][T12046] usb 3-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1279.969358][T12046] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1279.978907][T12046] usb 3-1: config 0 has no interface number 0 [ 1279.985017][T12046] usb 3-1: config 0 interface 68 has no altsetting 0 [ 1280.051698][T12046] usb 3-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1280.060714][T12046] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1280.070226][T12046] usb 3-1: config 0 has no interface number 0 [ 1280.076461][T12046] usb 3-1: config 0 interface 68 has no altsetting 0 [ 1280.366137][T12046] usb 3-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1280.377218][T12046] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1280.386300][T12046] usb 3-1: config 0 has no interface number 0 [ 1280.399610][T12046] usb 3-1: config 0 interface 68 has no altsetting 0 [ 1281.342487][T20120] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3919'. [ 1281.355560][T12046] usb 3-1: unable to read config index 3 descriptor/all [ 1281.363399][T12046] usb 3-1: can't read configurations, error -71 [ 1282.813978][T20141] Mount JFS Failure: -22 [ 1282.818454][T20141] jfs_mount failed w/return code = -22 [ 1283.122360][T20148] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1283.135910][T12046] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1283.328186][T12046] usb 4-1: Using ep0 maxpacket: 16 [ 1283.337485][T12046] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1283.348580][T12046] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1283.374126][T12046] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 0.40 [ 1283.383412][T12046] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.391581][T12046] usb 4-1: Product: syz [ 1283.395861][T12046] usb 4-1: Manufacturer: syz [ 1283.400670][T12046] usb 4-1: SerialNumber: syz [ 1283.626713][T12046] usb 4-1: 0:76 : does not exist [ 1283.632074][T12046] usb 4-1: 0:10 : does not exist [ 1283.650884][T12046] usb 4-1: USB disconnect, device number 68 [ 1283.893571][T20154] binder: 20153:20154 ioctl c0306201 200001c0 returned -14 [ 1283.957342][T20149] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3928'. [ 1284.310948][T20162] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3931'. [ 1284.691137][T20166] netlink: 'syz.7.3932': attribute type 12 has an invalid length. [ 1284.937112][T10335] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1286.163969][T20169] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3934'. [ 1286.606891][T10335] usb 4-1: Using ep0 maxpacket: 32 [ 1286.614850][T10335] usb 4-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1286.623738][T10335] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1286.632983][T10335] usb 4-1: config 0 has no interface number 0 [ 1286.646289][T10335] usb 4-1: config 0 interface 68 has no altsetting 0 [ 1286.655171][T10335] usb 4-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1286.664981][T20184] ALSA: mixer_oss: invalid OSS volume '' [ 1286.665868][T10335] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1286.680192][T10335] usb 4-1: config 0 has no interface number 0 [ 1286.686309][T10335] usb 4-1: config 0 interface 68 has no altsetting 0 [ 1286.695850][T10335] usb 4-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1286.708549][T10335] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1286.718234][T10335] usb 4-1: config 0 has no interface number 0 [ 1286.724460][T10335] usb 4-1: config 0 interface 68 has no altsetting 0 [ 1286.732993][T10335] usb 4-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1286.763043][T10335] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1287.312618][T10335] usb 4-1: config 0 has no interface number 0 [ 1287.349175][T10335] usb 4-1: config 0 interface 68 has no altsetting 0 [ 1287.371269][T10335] usb 4-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1287.399355][T10335] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1287.556813][T10335] usb 4-1: config 0 has no interface number 0 [ 1287.563546][T10335] usb 4-1: config 0 interface 68 has no altsetting 0 [ 1288.105374][T10335] usb 4-1: unable to read config index 5 descriptor/all [ 1288.112778][T10335] usb 4-1: can't read configurations, error -71 [ 1288.306143][T20203] program syz.7.3946 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1288.316548][T20203] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1288.716225][T20213] 9pnet_fd: Insufficient options for proto=fd [ 1289.549503][T20219] gfs2: not a GFS2 filesystem [ 1289.845536][T20231] ALSA: mixer_oss: invalid OSS volume '' [ 1291.605197][T10335] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1291.936839][T10335] usb 9-1: Using ep0 maxpacket: 32 [ 1291.953292][T10335] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1291.961574][T10335] usb 9-1: config 0 has no interface number 0 [ 1291.967942][T10335] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1291.979070][T10335] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1291.988906][T10335] usb 9-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 1291.998189][T10335] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.966298][T10335] usb 9-1: config 0 descriptor?? [ 1293.798926][T20264] gfs2: not a GFS2 filesystem [ 1294.121354][T20272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3965'. [ 1294.126526][T10335] uclogic 0003:28BD:0094.0016: pen parameters not found [ 1294.155053][T10335] uclogic 0003:28BD:0094.0016: interface is invalid, ignoring [ 1294.196106][T10335] usb 9-1: USB disconnect, device number 21 [ 1294.500140][T20274] netlink: 'syz.9.3967': attribute type 12 has an invalid length. [ 1294.612721][T20281] syz.3.3964: attempt to access beyond end of device [ 1294.612721][T20281] loop7: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1294.626673][T20281] FAT-fs (loop7): unable to read boot sector [ 1294.674360][T20281] xt_nfacct: accounting object `syz1' does not exists [ 1295.558122][T20290] Mount JFS Failure: -22 [ 1295.562421][T20290] jfs_mount failed w/return code = -22 [ 1296.543486][T20295] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3974'. [ 1296.626938][T10335] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1296.837804][ T5873] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1297.526931][T10335] usb 3-1: Using ep0 maxpacket: 16 [ 1297.541204][T10335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1297.596998][ T5873] usb 10-1: Using ep0 maxpacket: 16 [ 1297.606447][ T5873] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1297.633897][T10335] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1297.665546][T10335] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1297.686859][ T5873] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1297.729904][T10335] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1297.843225][T20304] gfs2: not a GFS2 filesystem [ 1297.850128][ T5873] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 0.40 [ 1297.859453][ T5873] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.867719][ T5873] usb 10-1: Product: syz [ 1297.872086][ T5873] usb 10-1: Manufacturer: syz [ 1297.925627][ T5873] usb 10-1: SerialNumber: syz [ 1298.053613][T10335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.288196][ T5873] usb 10-1: 0:76 : does not exist [ 1298.293940][ T5873] usb 10-1: 0:10 : does not exist [ 1298.474100][T10335] usb 3-1: config 0 descriptor?? [ 1298.481522][ T5873] usb 10-1: USB disconnect, device number 6 [ 1298.538079][T10335] usb 3-1: can't set config #0, error -71 [ 1298.547970][T10335] usb 3-1: USB disconnect, device number 68 [ 1299.749431][T20318] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3979'. [ 1299.902721][T20337] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3979'. [ 1299.942138][T20318] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3979'. [ 1300.464033][T20346] overlayfs: failed to resolve './file0': -2 [ 1300.495502][T20330] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 1300.504223][T20330] PKCS7: Only support pkcs7_signedData type [ 1300.649968][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.537713][T20359] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3988'. [ 1302.646290][T20370] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 1302.926848][T10335] usb 9-1: new full-speed USB device number 22 using dummy_hcd [ 1303.163305][T10335] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1303.214701][T10335] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.223261][T10335] usb 9-1: Product: syz [ 1303.228709][T10335] usb 9-1: Manufacturer: syz [ 1303.233549][T10335] usb 9-1: SerialNumber: syz [ 1303.291631][T10335] usb 9-1: config 0 descriptor?? [ 1303.473780][T20387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1303.508744][T20387] bridge0: port 1(bridge_slave_0) entered blocking state [ 1303.516514][T20387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1303.539819][T10335] dvb_usb_dtv5100 9-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 1303.555979][T20387] bridge0: entered promiscuous mode [ 1303.562705][T10335] usb 9-1: USB disconnect, device number 22 [ 1303.569492][T20387] team0: Port device bridge0 added [ 1303.791693][T20394] overlayfs: failed to resolve './file0': -2 [ 1303.986963][T10335] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1304.137131][T10335] usb 9-1: Using ep0 maxpacket: 16 [ 1304.149842][T10335] usb 9-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1304.170921][T10335] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.186813][T10335] usb 9-1: Product: syz [ 1304.191333][T10335] usb 9-1: Manufacturer: syz [ 1304.196129][T10335] usb 9-1: SerialNumber: syz [ 1304.203822][T10335] usb 9-1: config 0 descriptor?? [ 1304.903396][T20403] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4000'. [ 1305.179722][T10335] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1305.341859][T10335] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1305.354398][T10335] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1305.363686][T10335] usb 9-1: media controller created [ 1305.382919][T10335] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1305.498057][T10335] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1305.544349][T10335] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1305.573726][T20409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4001'. [ 1306.060273][T12046] usb 9-1: USB disconnect, device number 23 [ 1306.141749][T12046] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1306.293220][T20416] ALSA: mixer_oss: invalid OSS volume '' [ 1307.391490][T10335] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1307.717438][T10335] usb 10-1: Using ep0 maxpacket: 32 [ 1307.737763][T10335] usb 10-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1307.752283][T10335] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1307.780468][T10335] usb 10-1: config 0 has no interface number 0 [ 1307.795447][T10335] usb 10-1: config 0 interface 68 has no altsetting 0 [ 1307.804367][T10335] usb 10-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1307.813604][T10335] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1307.834898][T10335] usb 10-1: config 0 has no interface number 0 [ 1307.843195][T10335] usb 10-1: config 0 interface 68 has no altsetting 0 [ 1307.855973][T10335] usb 10-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1307.872510][T10335] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1307.883918][T10335] usb 10-1: config 0 has no interface number 0 [ 1307.900693][T10335] usb 10-1: config 0 interface 68 has no altsetting 0 [ 1307.914626][T10335] usb 10-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1307.928550][T10335] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1307.938007][T10335] usb 10-1: config 0 has no interface number 0 [ 1307.944321][T10335] usb 10-1: config 0 interface 68 has no altsetting 0 [ 1307.962264][T10335] usb 10-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1307.975221][T10335] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1307.985826][T20438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1307.994653][T10335] usb 10-1: config 0 has no interface number 0 [ 1307.994689][T10335] usb 10-1: config 0 interface 68 has no altsetting 0 [ 1308.018849][T20438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1308.066955][T10335] usb 10-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1308.075790][T10335] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1308.100573][T10335] usb 10-1: config 0 has no interface number 0 [ 1308.107077][T10335] usb 10-1: config 0 interface 68 has no altsetting 0 [ 1308.153612][T10335] usb 10-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1308.168093][T10335] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1308.197092][T10335] usb 10-1: config 0 has no interface number 0 [ 1308.218321][T10335] usb 10-1: config 0 interface 68 has no altsetting 0 [ 1308.273182][T10335] usb 10-1: config 0 has too many interfaces: 190, using maximum allowed: 32 [ 1308.273594][ T5871] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1308.307086][T10335] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 190 [ 1308.355855][T10335] usb 10-1: config 0 has no interface number 0 [ 1308.372225][T10335] usb 10-1: config 0 interface 68 has no altsetting 0 [ 1308.415327][T10335] usb 10-1: New USB device found, idVendor=0731, idProduct=0901, bcdDevice=a8.06 [ 1308.430216][T10335] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1308.457121][T10335] usb 10-1: Product: syz [ 1308.466242][T10335] usb 10-1: Manufacturer: syz [ 1308.483891][T10335] usb 10-1: SerialNumber: syz [ 1308.498312][ T5871] usb 3-1: Using ep0 maxpacket: 16 [ 1308.537410][T10335] usb 10-1: config 0 descriptor?? [ 1308.832714][ T5871] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1309.016005][ T5871] usb 3-1: config 14 has an invalid interface number: 3 but max is 1 [ 1309.027971][ T5871] usb 3-1: config 14 has an invalid interface number: 240 but max is 1 [ 1309.036631][ T5871] usb 3-1: config 14 has no interface number 0 [ 1309.043047][ T5871] usb 3-1: config 14 has no interface number 1 [ 1309.043463][T10335] usb 10-1: USB disconnect, device number 7 [ 1309.055643][ T5871] usb 3-1: config 14 interface 3 has no altsetting 0 [ 1309.146174][ T5871] usb 3-1: config 14 interface 240 has no altsetting 0 [ 1309.228084][ T5871] usb 3-1: New USB device found, idVendor=05c6, idProduct=9222, bcdDevice=3c.9b [ 1309.369846][ T5871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.438831][ T5871] usb 3-1: Product: syz [ 1309.487970][ T5871] usb 3-1: Manufacturer: syz [ 1309.518050][ T5871] usb 3-1: SerialNumber: syz [ 1310.739186][T20462] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4016'. [ 1311.961505][ T5871] usb 3-1: unknown number of interfaces: 2 [ 1311.970437][ T5871] usb 3-1: USB disconnect, device number 69 [ 1312.464318][T20472] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4021'. [ 1313.479046][T20489] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4025'. [ 1313.752099][T20489] loop6: detected capacity change from 0 to 64 [ 1313.810845][ C0] blk_print_req_error: 60 callbacks suppressed [ 1313.810866][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0 [ 1313.829651][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1313.838866][ C1] buffer_io_error: 59 callbacks suppressed [ 1313.838881][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1313.856680][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1313.865925][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1313.875739][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1313.884953][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1313.893091][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1313.902302][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1313.910431][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1313.919637][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1313.948521][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1313.957763][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1313.965845][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1313.975085][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1313.993552][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1314.002771][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 1314.017038][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1314.026251][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1314.038885][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 1314.313066][T20500] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4029'. [ 1314.724971][ T5873] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 1315.070553][T20501] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4027'. [ 1315.217614][T20505] Mount JFS Failure: -22 [ 1315.221901][T20505] jfs_mount failed w/return code = -22 [ 1315.238528][ T5873] usb 10-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1315.255556][ T5873] usb 10-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1315.300316][ T5873] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1315.428413][ T5873] usb 10-1: New USB device found, idVendor=26a3, idProduct=0621, bcdDevice= 0.00 [ 1315.475462][ T5871] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1316.031861][ T5873] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1316.296139][ T5873] usb 10-1: config 0 descriptor?? [ 1316.373475][ T5871] usb 4-1: Using ep0 maxpacket: 16 [ 1316.385521][ T5871] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1316.931294][ T5871] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1316.953408][ T5871] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 0.40 [ 1316.970880][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.986311][ T5871] usb 4-1: Product: syz [ 1316.993545][ T5871] usb 4-1: Manufacturer: syz [ 1317.039562][ T5871] usb 4-1: SerialNumber: syz [ 1317.252700][ T5871] usb 4-1: 0:76 : does not exist [ 1317.266978][ T5871] usb 4-1: 0:10 : does not exist [ 1317.296458][ T5871] usb 4-1: USB disconnect, device number 71 [ 1317.469349][T20492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1317.486677][T20492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1317.570163][T20492] overlayfs: failed to resolve './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa': -36 [ 1318.612753][T20532] program syz.9.4026 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1319.056831][ T5873] usbhid 10-1:0.0: can't add hid device: -71 [ 1319.063070][ T5873] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1319.083498][ T5873] usb 10-1: USB disconnect, device number 8 [ 1320.882900][T20557] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4045'. [ 1343.827246][ T24] sched: DL replenish lagged too much [ 1427.766700][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1427.773704][ C1] rcu: 0-...!: (1 GPs behind) idle=ed74/1/0x4000000000000000 softirq=78598/78607 fqs=1 [ 1427.785359][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P20577/1:b..l [ 1427.793381][ C1] rcu: (detected by 1, t=10502 jiffies, g=74649, q=366 ncpus=2) [ 1427.801121][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1427.801156][ C0] NMI backtrace for cpu 0 [ 1427.801170][ C0] CPU: 0 UID: 0 PID: 20582 Comm: syz.7.4051 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 1427.801188][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1427.801199][ C0] RIP: 0010:__lock_acquire+0x6bc/0x2100 [ 1427.801224][ C0] Code: 04 ee 48 89 44 24 38 40 84 ed 4c 8b 6c 24 40 0f 84 7e 04 00 00 0f b6 1b 41 0f b6 04 16 84 c0 0f 85 64 12 00 00 41 f6 47 01 80 <0f> 85 63 04 00 00 4c 89 64 24 48 84 db 40 0f b6 c5 0f b6 cb 0f 44 [ 1427.801238][ C0] RSP: 0018:ffffc90000007930 EFLAGS: 00000046 [ 1427.801252][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff817aba87 [ 1427.801264][ C0] RDX: dffffc0000000000 RSI: ffff8880434e46e0 RDI: ffffffff94271880 [ 1427.801276][ C0] RBP: 0000000000000002 R08: ffffffff94271887 R09: 1ffffffff284e310 [ 1427.801288][ C0] R10: dffffc0000000000 R11: fffffbfff284e311 R12: ffff8880434e46c4 [ 1427.801300][ C0] R13: ffff8880434e3c00 R14: 1ffff1100869c8ea R15: ffff8880434e4750 [ 1427.801313][ C0] FS: 00005555906f3500(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1427.801327][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1427.801339][ C0] CR2: 000000110c335d32 CR3: 0000000044146000 CR4: 00000000003526f0 [ 1427.801354][ C0] Call Trace: [ 1427.801362][ C0] [ 1427.801372][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1427.801393][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1427.801410][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1427.801435][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1427.801454][ C0] ? nmi_handle+0x14f/0x5a0 [ 1427.801471][ C0] ? nmi_handle+0x2a/0x5a0 [ 1427.801487][ C0] ? __lock_acquire+0x6bc/0x2100 [ 1427.801503][ C0] ? default_do_nmi+0x63/0x160 [ 1427.801520][ C0] ? exc_nmi+0x123/0x1f0 [ 1427.801536][ C0] ? end_repeat_nmi+0xf/0x53 [ 1427.801553][ C0] ? __lock_acquire+0x5b7/0x2100 [ 1427.801571][ C0] ? __lock_acquire+0x6bc/0x2100 [ 1427.801587][ C0] ? __lock_acquire+0x6bc/0x2100 [ 1427.801604][ C0] ? __lock_acquire+0x6bc/0x2100 [ 1427.801620][ C0] [ 1427.801626][ C0] [ 1427.801639][ C0] lock_acquire+0x1ed/0x550 [ 1427.801655][ C0] ? debug_object_deactivate+0x158/0x390 [ 1427.801679][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1427.801698][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1427.801720][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1427.801740][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 1427.801757][ C0] ? debug_object_deactivate+0x158/0x390 [ 1427.801777][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 1427.801799][ C0] debug_object_deactivate+0x158/0x390 [ 1427.801821][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 1427.801842][ C0] ? timerqueue_add+0x260/0x290 [ 1427.801859][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 1427.801879][ C0] debug_deactivate+0x1b/0x220 [ 1427.801898][ C0] __hrtimer_run_queues+0x305/0xd30 [ 1427.801924][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1427.801948][ C0] ? sched_clock+0x4a/0x70 [ 1427.801968][ C0] ? read_tsc+0x9/0x20 [ 1427.801985][ C0] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 1427.802004][ C0] hrtimer_interrupt+0x403/0xa40 [ 1427.802032][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 1427.802050][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1427.802070][ C0] [ 1427.802075][ C0] [ 1427.802081][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1427.802102][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 1427.802120][ C0] Code: 90 f3 0f 1e fa 53 48 89 fb 48 83 c7 18 48 8b 74 24 08 e8 8a 38 b7 f5 48 89 df e8 c2 7f b8 f5 e8 ad 90 e3 f5 fb bf 01 00 00 00 e2 e4 a9 f5 65 8b 05 13 37 40 74 85 c0 74 06 5b c3 cc cc cc cc [ 1427.802133][ C0] RSP: 0018:ffffc9000e197970 EFLAGS: 00000282 [ 1427.802147][ C0] RAX: e912cf148a662d00 RBX: ffff88801aca0000 RCX: ffffffff9a378903 [ 1427.802159][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0a98e0 RDI: 0000000000000001 [ 1427.802171][ C0] RBP: ffffc9000e197b50 R08: ffffffff901856b7 R09: 1ffffffff2030ad6 [ 1427.802183][ C0] R10: dffffc0000000000 R11: fffffbfff2030ad7 R12: dffffc0000000000 [ 1427.802195][ C0] R13: ffff88801ac95c00 R14: 0000000000000002 R15: ffff88801ac95c1c [ 1427.802214][ C0] __flush_work+0x6c0/0xc60 [ 1427.802231][ C0] ? __flush_work+0xe9/0xc60 [ 1427.802248][ C0] ? __pfx___flush_work+0x10/0x10 [ 1427.802265][ C0] ? __pfx_wq_barrier_func+0x10/0x10 [ 1427.802291][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1427.802307][ C0] ? __queue_work+0x199/0xf50 [ 1427.802323][ C0] ? flush_delayed_work+0x148/0x1c0 [ 1427.802340][ C0] flush_delayed_work+0x169/0x1c0 [ 1427.802355][ C0] ? __pfx_flush_delayed_work+0x10/0x10 [ 1427.802375][ C0] fsnotify_destroy_group+0x214/0x340 [ 1427.802395][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 1427.802413][ C0] ? __pfx_fsnotify_destroy_group+0x10/0x10 [ 1427.802438][ C0] fanotify_release+0x4ca/0x4f0 [ 1427.802455][ C0] ? evm_file_release+0x10c/0x1e0 [ 1427.802472][ C0] ? __pfx_fanotify_release+0x10/0x10 [ 1427.802489][ C0] __fput+0x23c/0xa50 [ 1427.802510][ C0] task_work_run+0x24f/0x310 [ 1427.802527][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1427.802546][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1427.802565][ C0] ? syscall_exit_to_user_mode+0xa3/0x340 [ 1427.802586][ C0] syscall_exit_to_user_mode+0x13f/0x340 [ 1427.802607][ C0] do_syscall_64+0x100/0x230 [ 1427.802626][ C0] ? clear_bhb_loop+0x35/0x90 [ 1427.802642][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.802661][ C0] RIP: 0033:0x7f3d2d385d29 [ 1427.802677][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1427.802689][ C0] RSP: 002b:00007ffcaa40a508 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1427.802705][ C0] RAX: 0000000000000000 RBX: 0000000000142ecb RCX: 00007f3d2d385d29 [ 1427.802716][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1427.802727][ C0] RBP: 00007f3d2d577ba0 R08: 0000000000000001 R09: 00007ffcaa40a7ff [ 1427.802738][ C0] R10: 00007f3d2d200000 R11: 0000000000000246 R12: 0000000000142f10 [ 1427.802749][ C0] R13: 00007f3d2d575fa0 R14: 0000000000000032 R15: ffffffffffffffff [ 1427.802766][ C0] [ 1427.803149][ C1] task:syz.8.4049 state:R running task stack:22416 pid:20577 tgid:20577 ppid:15504 flags:0x00004002 [ 1428.412508][ C1] Call Trace: [ 1428.415797][ C1] [ 1428.418744][ C1] __schedule+0x17fb/0x4be0 [ 1428.423296][ C1] ? __pfx___schedule+0x10/0x10 [ 1428.428171][ C1] ? __page_table_check_ptes_set+0x30f/0x410 [ 1428.434180][ C1] ? preempt_schedule+0xe1/0xf0 [ 1428.439045][ C1] preempt_schedule_common+0x84/0xd0 [ 1428.444348][ C1] preempt_schedule+0xe1/0xf0 [ 1428.449041][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 1428.454440][ C1] preempt_schedule_thunk+0x1a/0x30 [ 1428.459657][ C1] _raw_spin_unlock+0x3e/0x50 [ 1428.464346][ C1] vm_insert_page+0x4ec/0x710 [ 1428.469053][ C1] ? __pfx_vm_insert_page+0x10/0x10 [ 1428.474279][ C1] ? vm_insert_page+0x5d3/0x710 [ 1428.479149][ C1] kcov_mmap+0xd7/0x140 [ 1428.483321][ C1] __mmap_region+0x224e/0x2d30 [ 1428.488133][ C1] ? __pfx___mmap_region+0x10/0x10 [ 1428.493303][ C1] ? mark_lock+0x9a/0x360 [ 1428.497664][ C1] ? irqentry_exit+0x63/0x90 [ 1428.502285][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1428.507519][ C1] mmap_region+0x226/0x2c0 [ 1428.511955][ C1] do_mmap+0x8f0/0x1000 [ 1428.516140][ C1] ? __pfx_do_mmap+0x10/0x10 [ 1428.520743][ C1] ? __pfx_down_write_killable+0x10/0x10 [ 1428.526387][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 1428.532469][ C1] vm_mmap_pgoff+0x1dd/0x3d0 [ 1428.537086][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1428.542215][ C1] ? __rcu_read_unlock+0xa1/0x110 [ 1428.547249][ C1] ? __fget_files+0x2a/0x410 [ 1428.551853][ C1] ? __fget_files+0x395/0x410 [ 1428.556539][ C1] ? __fget_files+0x2a/0x410 [ 1428.561145][ C1] ksys_mmap_pgoff+0x4eb/0x720 [ 1428.565920][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 1428.570699][ C1] do_syscall_64+0xf3/0x230 [ 1428.575216][ C1] ? clear_bhb_loop+0x35/0x90 [ 1428.579903][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1428.585810][ C1] RIP: 0033:0x7fce2db85d63 [ 1428.590232][ C1] RSP: 002b:00007ffe6cf85bb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1428.598681][ C1] RAX: ffffffffffffffda RBX: 00007fce2dd762d8 RCX: 00007fce2db85d63 [ 1428.606677][ C1] RDX: 0000000000000003 RSI: 0000000000400000 RDI: 00007fce2b5f6000 [ 1428.614660][ C1] RBP: 00007fce2dd76240 R08: 00000000000000db R09: 0000000000000000 [ 1428.622650][ C1] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000003 [ 1428.630629][ C1] R13: 00007fce2dd76240 R14: 0000000000000003 R15: 0000000000001514 [ 1428.638627][ C1] [ 1428.641654][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g74649 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1428.652856][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1428.662829][ C1] rcu: RCU grace-period kthread stack dump: [ 1428.668720][ C1] task:rcu_preempt state:R running task stack:26264 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1428.680477][ C1] Call Trace: [ 1428.683760][ C1] [ 1428.686700][ C1] __schedule+0x17fb/0x4be0 [ 1428.691247][ C1] ? __pfx___schedule+0x10/0x10 [ 1428.696108][ C1] ? __pfx_lock_release+0x10/0x10 [ 1428.701157][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1428.707492][ C1] ? schedule+0x90/0x320 [ 1428.711743][ C1] schedule+0x14b/0x320 [ 1428.715912][ C1] schedule_timeout+0x15a/0x290 [ 1428.720794][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1428.726196][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1428.731514][ C1] ? prepare_to_swait_event+0x330/0x350 [ 1428.737080][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 1428.741955][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1428.747180][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 1428.753084][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1428.758383][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1428.764311][ C1] ? finish_swait+0xd4/0x1e0 [ 1428.768932][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 1428.773546][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1428.778774][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1428.784722][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1428.789762][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1428.794972][ C1] kthread+0x2f0/0x390 [ 1428.799055][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1428.804266][ C1] ? __pfx_kthread+0x10/0x10 [ 1428.808869][ C1] ret_from_fork+0x4b/0x80 [ 1428.813293][ C1] ? __pfx_kthread+0x10/0x10 [ 1428.817893][ C1] ret_from_fork_asm+0x1a/0x30 [ 1428.822683][ C1] [ 1428.825707][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1428.832032][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 1428.842360][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1428.852417][ C1] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 1428.857710][ C1] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 80 d4 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 05 a0 a7 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 1428.877321][ C1] RSP: 0018:ffffc900001a7d08 EFLAGS: 00000246 [ 1428.883401][ C1] RAX: ffff88801d2f8000 RBX: ffff8881436e9064 RCX: 0000000000d8b0d9 [ 1428.891377][ C1] RDX: 0000000000000001 RSI: ffff8881436e9000 RDI: ffff8881436e9064 [ 1428.899357][ C1] RBP: 000000000003a878 R08: ffff8880b8737cdb R09: 1ffff110170e6f9b [ 1428.907332][ C1] R10: dffffc0000000000 R11: ffffffff8bc10c90 R12: ffff88801e72b000 [ 1428.915311][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff8f10f3e0 [ 1428.923286][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1428.932221][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1428.938810][ C1] CR2: 000000110c2a1b15 CR3: 0000000035812000 CR4: 00000000003526f0 [ 1428.946796][ C1] Call Trace: [ 1428.950085][ C1] [ 1428.952936][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 1428.959280][ C1] ? print_other_cpu_stall+0x1481/0x15c0 [ 1428.964938][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 1428.970753][ C1] ? timekeeping_advance+0x5e8/0x770 [ 1428.976055][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 1428.982309][ C1] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 1428.987700][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1428.993351][ C1] ? update_process_times+0x242/0x2f0 [ 1428.998731][ C1] ? tick_nohz_handler+0x37c/0x500 [ 1429.003858][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1429.009326][ C1] ? __hrtimer_run_queues+0x551/0xd30 [ 1429.014723][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1429.020452][ C1] ? read_tsc+0x9/0x20 [ 1429.024533][ C1] ? ktime_get_update_offsets_now+0x393/0x3b0 [ 1429.030611][ C1] ? hrtimer_interrupt+0x403/0xa40 [ 1429.035755][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 1429.041921][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1429.047737][ C1] [ 1429.050674][ C1] [ 1429.053609][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1429.059782][ C1] ? __pfx_acpi_idle_enter+0x10/0x10 [ 1429.065083][ C1] ? acpi_safe_halt+0x21/0x30 [ 1429.069779][ C1] acpi_idle_enter+0xe4/0x140 [ 1429.074473][ C1] cpuidle_enter_state+0x109/0x470 [ 1429.079597][ C1] ? __pfx_menu_select+0x10/0x10 [ 1429.084556][ C1] cpuidle_enter+0x5d/0xa0 [ 1429.088983][ C1] do_idle+0x372/0x5c0 [ 1429.093071][ C1] ? __pfx_do_idle+0x10/0x10 [ 1429.097685][ C1] ? do_idle+0xa/0x5c0 [ 1429.101773][ C1] cpu_startup_entry+0x42/0x60 [ 1429.106553][ C1] start_secondary+0x102/0x110 [ 1429.111328][ C1] common_startup_64+0x13e/0x147 [ 1429.116291][ C1]