last executing test programs: 1m46.106829182s ago: executing program 4 (id=163): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000000c0)=0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x11, 0x95d}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0xe, 0x0, 0x20000002}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r3 = socket$kcm(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r4, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010027bd7000fedbdf250300000008000100000002"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, r11, 0x400, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000) 1m42.987211247s ago: executing program 4 (id=170): socket(0x8000000010, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$VT_GETMODE(0xffffffffffffffff, 0x5601, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x80041285, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0xc0884123, &(0x7f0000000080)) r3 = socket$packet(0x11, 0x2, 0x300) accept(r3, 0x0, &(0x7f0000000040)) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000140)="a6bea8a120e5f8320c30e45088a8", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @local}, 0x14) 1m41.929152014s ago: executing program 4 (id=174): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x4}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000009102"]) (fail_nth: 2) 1m38.895165851s ago: executing program 4 (id=178): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0xce, 0x32, 0x15, 0x8, 0x93a, 0x2627, 0x5d43, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x6, 0x1, 0x0, 0x0, [{{0x9, 0x4, 0x78, 0x3, 0x1, 0x96, 0xd9, 0x1, 0x0, [], [{{0x9, 0x5, 0x1, 0x0, 0x200, 0x8, 0xa7, 0x2}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000002000)={0x2c, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="000304000000040300015f00"], 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1c8, 0x12) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0], &(0x7f0000000900), 0x0, 0x1, 0x0, 0x0, r2}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r7 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r7, 0x40044160, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) getpid() syz_usb_control_io$hid(r0, 0x0, 0x0) 1m32.344829984s ago: executing program 4 (id=194): sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x5707b563827c8365, 0x0, 0x0, {{}, {@void, @val={0x8, 0x12a}, @void}}}, 0x1c}}, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x2, 0x0) write$FUSE_NOTIFY_STORE(r0, 0x0, 0x28) 1m32.26586191s ago: executing program 4 (id=195): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) semget$private(0x0, 0x1, 0xeb7c5878cd4452d6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r1, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 1m16.491034076s ago: executing program 32 (id=195): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) semget$private(0x0, 0x1, 0xeb7c5878cd4452d6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28) sendto$inet6(r1, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 27.998978521s ago: executing program 0 (id=316): r0 = syz_clone3(&(0x7f0000000380)={0x4000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000100), {0xb}, &(0x7f0000000140)=""/243, 0xf3, &(0x7f0000000240)=""/232, &(0x7f0000000340)=[0xffffffffffffffff], 0x1}, 0x58) prctl$PR_SCHED_CORE(0x3e, 0x2, r0, 0x2, &(0x7f0000000400)) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x1, 0x49, 0x0, &(0x7f0000000300)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) writev(r2, &(0x7f00000007c0)=[{&(0x7f0000000440)="0af83580ef4f1d91341b7a85407600f7a7a41deedb6fa6dd56bfe9902b5c1ddf6b63f0072eedf1c8cbf1af08317271a6420c9daa69f498b092f2ffbee9dcae03f9496ae15bee233b43828847dca4fb7bf55b62b0f007c5c7d07af182679a41b689df6c5f2091a15bd005b5b1da15b4c55285c9ad64b4b7a496334127b6f07ae9cf058daf08da382ba4d7b6142968", 0x8e}, {&(0x7f0000000500)="819af950f6d8e4dc2f40020eba97d1944b3d6d1dc05d8d00d77c8fb6fa07fb9f1db00309efb60b55ee6e91", 0x2b}, {&(0x7f0000000540)="72c63cfa41913b00f994f4ff6f083a9c4203f545f3c315279c9a4852a020172d876b1a09117de19b6756c691ac01e8038e2f4a88fe972839c8e3843115fa4bb08de933000fac905bcfb111fe1e0381f3872b515ac0ac29cca6269329ea18159ea35d12cea48d0d3645737a6c84418bcc3682aae154a0772e4c96ddb0c48b5a2de77d08da0c23427b794fc7edcea2ed34ce3f5bd29e78b551dece3fb7151a987b53239946168afcc0716e90148c258018fcba27ea91dc8b85", 0xb8}, {&(0x7f0000000600)="4d042de3d75a6abb1e7ae5af24af14030e506cb9d8bc8ee1b10de836c04e0700000000000000a8d0de13a35ffada865299aa2cf07e73c882d48bb05a4341c605b2c80f3505204b131c0c396f28cde63dd04dde0c879111d6542c995c5e39fe350f1a2abfe2952eff3412ddd7bd6ef01a2183395638638e0f19bacb97f43384cafb91cf5fe0f1e8725326c830f0f7fd188fd8071e679046398687914dedac97825c87de", 0xa3}, {&(0x7f0000000740)="e7ce76bbc283c718aff3e9160c5339de9d5ac2dcaf41680ff3badde1768a7f0b1e2ce81f8ebae194b15c1cd92cd3f2ef8a0b4cc1d65a8acccde4890e85127c3fc775dcc1ee964785f949c4f88b1b8f22f84188228630d917305721", 0x5b}], 0x5) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8099, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id?', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00']) read$FUSE(r2, &(0x7f0000004180)={0x2020}, 0x2020) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a00) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_aout(r6, &(0x7f0000001640)=ANY=[], 0x1a3) write$P9_RSTATu(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="650000007d010000004b000300ef48000000010000000300000000000000000000020900000006000000d4000000000000007e0faedd67655bec0f1595980c006367726f75702e737461740000000100000b002f6465"], 0x65) write$binfmt_misc(r6, &(0x7f0000000000), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x6]}}) 27.191635133s ago: executing program 0 (id=321): socket$kcm(0x2, 0x200000000000001, 0x106) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfb84e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x11, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {}, {}, {0xe}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x4, 0x0]}}]}]}, 0x54}}, 0x0) 23.829374229s ago: executing program 0 (id=329): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7ff, 0x3}}, './file0\x00'}) ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000000040)={{r0}, "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"}) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000001040), &(0x7f0000001080)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000010c0)={0x0, 0x1000, 0x128, 0xfffffffd, 0xfffffffc, 0x5c91}, &(0x7f0000001100)=0x14) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000001140)={r1}, &(0x7f0000001180)=0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000001280)=@get={0x1, &(0x7f00000011c0)=""/184, 0xfffffffffffffffc}) r3 = inotify_add_watch(r0, &(0x7f00000012c0)='./file0\x00', 0x400) inotify_rm_watch(r0, r3) rt_sigsuspend(&(0x7f0000001300)={[0x4]}, 0x8) r4 = getpgrp(0x0) ptrace$ARCH_MAP_VDSO_X32(0x1e, r4, 0xfffffffffffffbff, 0x2001) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000013c0)={0x9, &(0x7f0000001340)=[{0x19, 0x5, 0xc0, 0x12}, {0x5, 0x2, 0xe, 0x5}, {0x284, 0xd, 0x2, 0x9}, {0x95fe, 0x66, 0x4, 0x8}, {0x5, 0x0, 0x6, 0x3}, {0x7f, 0x81, 0x10, 0x5}, {0xb77, 0x7f, 0x2, 0x5}, {0x5, 0x6, 0x3f, 0x6}, {0x80, 0x9, 0x8, 0x1}]}) rt_sigtimedwait(&(0x7f0000001400)={[0xfe86]}, &(0x7f0000001440), &(0x7f00000014c0), 0x8) clock_gettime(0x0, &(0x7f00000015c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000001500)={[0x100000001]}, &(0x7f0000001540), &(0x7f0000001600)={r5, r6+10000000}, 0x8) ioctl$TIOCMBIC(r0, 0x5417, &(0x7f0000001640)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001dc0)={'ip6tnl0\x00', &(0x7f0000001d40)={'syztnl2\x00', 0x0, 0x29, 0xfe, 0x8, 0x2, 0x30, @empty, @private0, 0xf126c6e32dbb959d, 0x8000, 0x4eb7, 0x5}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000003300)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000003500)=[{{&(0x7f0000001680)={0xa, 0x4e23, 0x8, @remote, 0xf}, 0x1c, &(0x7f0000001c80)=[{&(0x7f00000016c0)="4710bf1076ae4db0a000835af8349c22d15dfbd7c7acbcb5110a7a059971e70be69b", 0x22}, {&(0x7f0000001700)="e40e74cc4561d5e4900ef406f1c73eea852d0233d10d74a80929e1bf6edba33ab51bc86b3e50918d073cdcc4ff7a378fcf0617df512d79bbb2d45a52a50c601dc069745a40fdd124d5aed41bc38f7976035dc68e446663e0b055850fdba845081665536b64c25a0a4be03742a042c40e36adc46d8ae6aa385f", 0x79}, {&(0x7f0000001780)="5f9d22cb7689fac07792485b866dbb23e50b898eefb2296d0166f861a8405db60988ea7b731fa1d8f29fe127f1d2f4c314f51fdcc673b6e8", 0x38}, {&(0x7f00000017c0)="1214c828a4e5a90b89640145cdb9ba97b140a071b5b7bf75f497e2c74e9961f1160fba54b0faabd066a5fd3ce43d00de6d65e22b5d6adc3a3a57bf0f9b55fc95ce4e50070b9bf10d58982553246c1e629063d481e28ff9887b9f4e44f6638674b1ed1fea3162e95ece24c70436e15929c8ce6bddbfbf4e02fda4d7e1bd14d639152ce3f0da15d3c05e2f87c46a58ef4bed9bc79bd6b0138fd6082f6497b1894b2fe19c18f0cabec51ca45373591f648e3de37c6f588a0feef56a1e1d6c8ac7b6dd", 0xc1}, {&(0x7f00000018c0)="e51aa32ea4c2b3740742a2b6520db0780bb174367a87db1fb90896e853b8530abf0288a0a578e1d4a1f84e643aa3356348a37cb45604fd306ea326a2ca49d7d791f687bc64293c3cc9fc0d5330e54043d67b94b10757ad05473e97ee65eff2719c4f6387db2d539f7127913d460fabed19705a2740a0579b7d176700837e455909c8ac239bdd6207cfc8e2014d64bc501bc012126dbbe1f271651cab484894b677c854c3e7a3563f6b6f58d0619c387096166021068d790181cd7decf40af0b3ed7fd0c4b04a5477e1406f", 0xcb}, {&(0x7f00000019c0)="4fb54ed5ec9a6d1ae499cfe55e89bcd4a7ad3648838c73e47cfcaaf8866ddc3ed5a209b708a94b4aa6864466940c9767c43cde342d4aa31033895bbc1b55bd1a2002ca5f5132fdabd992c634bb5e692768021d171291f7e4fb365fb7d9babe028d6fcd4e7bffa4023e6f19085c2e159028443ef1e984cbbc58699431fe30eeaa811a77d3bb96f311eea9c6afa645b3d82878a3749e5f2790516e7dda86f275d2ab1656a7d9f2778e57c1a1d720f2e5876c", 0xb1}, {&(0x7f0000001a80)="5bd69a6041308d1df88ff15573096dfee788e90f944a2ab789f515158c6136c4cc9c776e01afac2cfcceece8b9496d373d485bca6ba4d8cc616edf1cf0e96b41e7c7c704ca5d3e81abeb51d6354e1dc9b90b1b705af0cdded63d1ebfb95a503fe24533936e0905ee47eeec90558a3c30d1ff2cc229735f306c385bfc280705f216d7ce124edd689e905cdb034484fc2d372aef7bf1f09e32f63081a10afa189e1f", 0xa1}, {&(0x7f0000001b40)="7044ebb680a9fa30c23fb330a6e99a264892e7e903099c5a1a7d398c1498a3f776988f7d969a1291ff81cf4edfdeefe9d9c4f35ce7db742c7666341a015f58a686f5eb6966f9536350332a17aa18e703b00b7714c3daabc9dd6b18df487e6b5863f8baef3c5a961beab5057356b1da9891b0d4b3c0c2d9c92c0400f5bb4bb1254c5d47370b", 0x85}, {&(0x7f0000001c00)="5963dcca75d3f3247449ed441b62bede5a5599d1bf1976af69dccc690aa87e8b0a0959c56928681e9f4874a6812e6997303f17c9ed55e87e7729b9b0df23a1da0fd41b635250001485df6e22998f378046cd5290f4", 0x55}], 0x9, &(0x7f0000001e00)=[@rthdr_2292={{0x68, 0x29, 0x39, {0x2b, 0xa, 0x0, 0xf, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @ipv4={'\x00', '\xff\xff', @empty}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xffff}}, @dontfrag={{0x14, 0x29, 0x3e, 0xfffff542}}, @pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}, r7}}}, @dstopts_2292={{0x50, 0x29, 0x4, {0xff, 0x6, '\x00', [@pad1, @hao={0xc9, 0x10, @remote}, @pad1, @calipso={0x7, 0x18, {0x2, 0x4, 0x8, 0x9, [0x2, 0x5]}}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x6}}], 0x128}}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000001f40)="4593f223733690346af4b1fd72c436a7cd700ab4ec5cef2febee01abb49b0388aa4f2d656d357384dca19e3dff52d6657cc8a1e143a5f5392e3b4598e7ffc9be01c4310b6bf18578f1c9b4058fd94f820e27d9614526e0eac57dd801052cdb212ea45251", 0x64}, {&(0x7f0000001fc0)="5b9d1bd4fcbdd80d57cf34c0b1074a1f249b2ba798b2496c203850242e71392bccd32b1a2a5936e9dcf78b8323f7a7b2db707902174b1804723027e6598f806530465bca0bed2787ffe1131166773f3346008f47dfe535af847b762502aa51c200e3fa189ef12644c8457621f9c55a6bdcf7b67137ce2d82e3f74156f996b031e3ea402f7786cde80a47f7f582c9ad58dbe4c118beda1be456e395bb7c73e7cf21e336f914829311a014500a07e64ee25a11d50d9045f12f8e0ac62afaf147f20b19a0f3750166769c1a5a23e025300e3cb1e1a193f94a04fcb1da10", 0xdc}, {&(0x7f00000020c0)="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", 0x1000}, {&(0x7f00000030c0)="659bbaba0a1f6fc9f80db766a78076eb0e3a42b6d5c90b083282017a382281e49cb475d5ff76ec923487c6c76c966de71852403cd44428c7cc78d75874ced93571f992d71e27b722dc3b8b910043cfe25934dace570883c76d3758ba4ae9bb1331ac85194c1da1bbdaa52345a2cee234ba3cef66db5ce57af76c5b8b458c47b49cca6c4be092c7f9996166071e2f885f625c8813439c7d09b488119aef7d768bf7c1ee50ed6b6249cdf1232c8687e36a37c0a5cd080be6f4cfd4080554e27b8461872844289250dc414b06218fb9bf79c250d9ae72", 0xd5}, {&(0x7f00000031c0)}, {&(0x7f0000003200)="0248f2d58b812f5a978da70100ca8ea3f315cfe1b238c854abfc80818fa4ddf2ddf0e2c295ca98689c3d11484e6e056fe78274b1be8ef183c4855f2669ba4baa1a68f4e0a15356a12d7a3652b2bd1deeb1b5aa0d605df3e1962dd5841e82dc916740a96349bd68f9aa4feaf5ca412f88d198ab066a6b105d6c2f0d5bed6e", 0x7e}], 0x6, &(0x7f0000003340)=[@dstopts_2292={{0x48, 0x29, 0x4, {0x1, 0x5, '\x00', [@ra={0x5, 0x2, 0x2}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2e}}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', r8}}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffe01}}, @dstopts={{0xd0, 0x29, 0x37, {0x5c, 0x16, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @generic={0x0, 0xa9, "db296442a81b5085e3beb7fb7b18146964343c91256d79d4381b76d5097959366210db5a2f510c96c345ffe9beec41b9d84295d2b949a747099a6032551a5258be5cd32b4f3ae06b4149fbceecdbc2bf2469b2e8a70ceb6e4aa04a605f91e8abb39a302ca9216493af93e5a78e21a54f10a4d024f6755b5892331825d39c5eeee656b8f71519f5348f74db32b197562afb0045f7ad79b55820991864ceaa8fa833c0fd9322cba4c10a"}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x1, 0x1, '\x00', [@pad1, @padn={0x1, 0x2, [0x0, 0x0]}, @pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x9}}], 0x198}}], 0x2, 0xc800) syz_open_dev$MSR(&(0x7f0000003580), 0x8000000000000001, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000039c0)={0xffffffffffffffff, 0xe0, &(0x7f00000038c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000003700)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000003740)=[0x0], &(0x7f0000003780)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xe6, &(0x7f00000037c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000003800), &(0x7f0000003840), 0x8, 0x6b, 0x8, 0x8, &(0x7f0000003880)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000003a80)={0x2, 0x2, &(0x7f00000035c0)=@raw=[@map_idx_val={0x18, 0x11, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa}], &(0x7f0000003600)='GPL\x00', 0x48a194f2, 0x70, &(0x7f0000003640)=""/112, 0x41100, 0x42, '\x00', r8, @fallback=0x1e, r0, 0x8, &(0x7f00000036c0)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, r9, r0, 0x7, 0x0, &(0x7f0000003a00)=[{0x5, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x6}, {0x2, 0x4, 0xd, 0x6}, {0x5, 0x5, 0xf, 0x6}, {0x1, 0x4, 0xf, 0xc}, {0x1, 0x2, 0x9, 0x1}, {0x5, 0x2, 0x5, 0xb}], 0x10, 0x8961, @void, @value}, 0x94) r10 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000003b40), 0x2000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r10, 0x84, 0x65, &(0x7f0000003b80)=[@in6={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00', 0x800}, @in6={0xa, 0x4e20, 0x3e8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6f9}, @in={0x2, 0x4e21, @rand_addr=0xfffffffe}, @in6={0xa, 0x4e21, 0x7f, @empty, 0xc}], 0x64) r11 = creat(&(0x7f0000003c00)='./file0\x00', 0x0) listen(r10, 0x1) prctl$PR_CAP_AMBIENT(0x2f, 0x6de749e4678ca273, 0x1e) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000003c40)={r1, 0x9, 0x9, 0x3, 0x5, 0x1000}, &(0x7f0000003c80)=0x14) setsockopt$inet6_int(r11, 0x29, 0x29, &(0x7f0000003cc0)=0x101, 0x4) 22.299503697s ago: executing program 0 (id=335): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=@newtaction={0x48, 0x32, 0xa01, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x300}}, {0xc}}}]}]}, 0x48}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8100, &(0x7f0000000000)={0x0, 0x0, 0x20000}, 0x20) 22.002939871s ago: executing program 0 (id=336): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendto$inet6(r1, 0x0, 0x0, 0x20000045, 0x0, 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000000180), 0x141000, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x7e, 0x0) open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="1500f7ff64ffff0010000008003950323030302e75d6645ee6635ed0e2d3a009401ca5a8b1c952f96089ed40d1dc769be8b1460096f7e0c87a0e31cb38f7851194716f94c91acae6b64899d2cb591cb0b921b1b57029fe90b53e22d95f163897a20c7e881046c05b06628e53ffa71b35df122709bfb7881ed43c1e42847885bf2f700ef78586b89626d175606bf8effa1ce0d07c9478aa306c6b00"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x15}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="24000000180000092bbd7000ffdbdf251c8000ffff0400090004000008000400", @ANYRES32=0x0, @ANYBLOB="e9a68213bc380828186f2b72d44191e8d939dc00d273adbc54d14b4344fdd0257c434c68ea1800"/54], 0x24}}, 0x40080) 18.79903554s ago: executing program 0 (id=345): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f0000000300), 0x20000000}, 0x20) recvmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/219, 0xdb}], 0x1}, 0x102) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000100)}, 0x36) write$binfmt_script(r2, &(0x7f00000009c0), 0x75) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[], 0x1a0}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000043000900fffffffffddbdf25010000000c0003802c4e"], 0x20}}, 0x44850) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r5, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x20040010}, 0x44) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004000) 18.650558033s ago: executing program 33 (id=345): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f0000000300), 0x20000000}, 0x20) recvmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)=""/219, 0xdb}], 0x1}, 0x102) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000100)}, 0x36) write$binfmt_script(r2, &(0x7f00000009c0), 0x75) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[], 0x1a0}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000043000900fffffffffddbdf25010000000c0003802c4e"], 0x20}}, 0x44850) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r5, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={0xffffffffffffffff}, 0x1, 0x0, 0x0, 0x20040010}, 0x44) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) sendmsg$NL80211_CMD_NEW_KEY(r7, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x76}}}}, [@NL80211_ATTR_KEY_TYPE={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004000) 14.844339113s ago: executing program 6 (id=346): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r3, &(0x7f00000007c0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="94e7fa13d4daa500"/27, 0x1b}, {&(0x7f0000000480)="e4f1212587baf9b43dab9182b51f8de5f12ff7e152787943ba1cf7bea3791d08f3157d4b15547cb9fcc8ae8efb95b6fbadfe9fdcaa67d86af13dca11e48b1516e428b11bb876195c8dac737c8bc1f2b961827783aaabe70101cef8f5dad46f151fd45929a4bc076d875c10a453f6c962be7a4efb7a455e7ed8ab20ba700c2d866a15d894f6331cdf2fc41172c41990cc34e4118133f85d66be686f57bc0ea369423b77b0db6105100081ff95cd29f9de2d", 0xb1}, {&(0x7f0000000540)="1216e0a8d774ba7b4281545427162c24e9b8c9eb8c4971cfb834542a85d6bdcb08e60f82b83073f5b9a9ec858cd11b98737df5724ebc3ae325621a769a825303ebd054649cafe7736fd0fbbde070a4142f2b019268e9a0ee23650afdc96e7add506ee87299e036da4aaeeb2ce5cc3aab34c361c75047ae9bf3c244821b4a32ff125de1", 0x83}], 0x3}}, {{&(0x7f0000000600)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @cipso={0x86, 0x10, 0x3, [{0x6, 0x3, "a6"}, {0x7, 0x7, "32b97f1f66"}]}, @timestamp_prespec={0x44, 0x1c, 0xdd, 0x3, 0x0, [{@empty, 0x101}, {@remote, 0x4}, {@loopback, 0x6}]}, @timestamp_prespec={0x44, 0x14, 0x32, 0x3, 0x5, [{@local, 0x2}, {@multicast1, 0x1000}]}, @rr={0x7, 0xf, 0xaf, [@multicast2, @dev={0xac, 0x14, 0x14, 0xe}, @broadcast]}, @timestamp_prespec={0x44, 0x24, 0x58, 0x3, 0xf, [{@loopback, 0xfffff800}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x4}, {@empty, 0xfffffff7}]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfcb9}}], 0xc0}}], 0x2, 0x4000800) 13.092289581s ago: executing program 6 (id=346): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r3, &(0x7f00000007c0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="94e7fa13d4daa500"/27, 0x1b}, {&(0x7f0000000480)="e4f1212587baf9b43dab9182b51f8de5f12ff7e152787943ba1cf7bea3791d08f3157d4b15547cb9fcc8ae8efb95b6fbadfe9fdcaa67d86af13dca11e48b1516e428b11bb876195c8dac737c8bc1f2b961827783aaabe70101cef8f5dad46f151fd45929a4bc076d875c10a453f6c962be7a4efb7a455e7ed8ab20ba700c2d866a15d894f6331cdf2fc41172c41990cc34e4118133f85d66be686f57bc0ea369423b77b0db6105100081ff95cd29f9de2d", 0xb1}, {&(0x7f0000000540)="1216e0a8d774ba7b4281545427162c24e9b8c9eb8c4971cfb834542a85d6bdcb08e60f82b83073f5b9a9ec858cd11b98737df5724ebc3ae325621a769a825303ebd054649cafe7736fd0fbbde070a4142f2b019268e9a0ee23650afdc96e7add506ee87299e036da4aaeeb2ce5cc3aab34c361c75047ae9bf3c244821b4a32ff125de1", 0x83}], 0x3}}, {{&(0x7f0000000600)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @cipso={0x86, 0x10, 0x3, [{0x6, 0x3, "a6"}, {0x7, 0x7, "32b97f1f66"}]}, @timestamp_prespec={0x44, 0x1c, 0xdd, 0x3, 0x0, [{@empty, 0x101}, {@remote, 0x4}, {@loopback, 0x6}]}, @timestamp_prespec={0x44, 0x14, 0x32, 0x3, 0x5, [{@local, 0x2}, {@multicast1, 0x1000}]}, @rr={0x7, 0xf, 0xaf, [@multicast2, @dev={0xac, 0x14, 0x14, 0xe}, @broadcast]}, @timestamp_prespec={0x44, 0x24, 0x58, 0x3, 0xf, [{@loopback, 0xfffff800}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x4}, {@empty, 0xfffffff7}]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfcb9}}], 0xc0}}], 0x2, 0x4000800) 9.724247938s ago: executing program 6 (id=346): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r3, &(0x7f00000007c0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="94e7fa13d4daa500"/27, 0x1b}, {&(0x7f0000000480)="e4f1212587baf9b43dab9182b51f8de5f12ff7e152787943ba1cf7bea3791d08f3157d4b15547cb9fcc8ae8efb95b6fbadfe9fdcaa67d86af13dca11e48b1516e428b11bb876195c8dac737c8bc1f2b961827783aaabe70101cef8f5dad46f151fd45929a4bc076d875c10a453f6c962be7a4efb7a455e7ed8ab20ba700c2d866a15d894f6331cdf2fc41172c41990cc34e4118133f85d66be686f57bc0ea369423b77b0db6105100081ff95cd29f9de2d", 0xb1}, {&(0x7f0000000540)="1216e0a8d774ba7b4281545427162c24e9b8c9eb8c4971cfb834542a85d6bdcb08e60f82b83073f5b9a9ec858cd11b98737df5724ebc3ae325621a769a825303ebd054649cafe7736fd0fbbde070a4142f2b019268e9a0ee23650afdc96e7add506ee87299e036da4aaeeb2ce5cc3aab34c361c75047ae9bf3c244821b4a32ff125de1", 0x83}], 0x3}}, {{&(0x7f0000000600)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @cipso={0x86, 0x10, 0x3, [{0x6, 0x3, "a6"}, {0x7, 0x7, "32b97f1f66"}]}, @timestamp_prespec={0x44, 0x1c, 0xdd, 0x3, 0x0, [{@empty, 0x101}, {@remote, 0x4}, {@loopback, 0x6}]}, @timestamp_prespec={0x44, 0x14, 0x32, 0x3, 0x5, [{@local, 0x2}, {@multicast1, 0x1000}]}, @rr={0x7, 0xf, 0xaf, [@multicast2, @dev={0xac, 0x14, 0x14, 0xe}, @broadcast]}, @timestamp_prespec={0x44, 0x24, 0x58, 0x3, 0xf, [{@loopback, 0xfffff800}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x4}, {@empty, 0xfffffff7}]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfcb9}}], 0xc0}}], 0x2, 0x4000800) 7.603228112s ago: executing program 3 (id=374): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='i2c_result\x00', r0}, 0x10) r1 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x1) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000000)={0x0, 0x4, 0x5, &(0x7f0000000100)={0x0, "fd5a44512b7e1b0020ed2abb4301002700"}}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) r3 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_TSC(0x19, &(0x7f0000000040)) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x34, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x851}, 0x0) 7.518009194s ago: executing program 2 (id=375): io_setup(0x6, &(0x7f00000000c0)) openat$hwrng(0xffffffffffffff9c, 0x0, 0x11b003, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000240)={0xa1, 0x0, 0x0, 0x3}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x410000002) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0xd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0xeb2c}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x401}, {}, {0x80, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x0, 0x7ff}, {0x0, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xffffffff}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {0x0, 0x101, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x1}, {}, {}, {}, {0x2000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x0, 0x80000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x20000000, 0x13}], [{}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x2}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x20004000) r5 = openat$audio(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 7.339409825s ago: executing program 5 (id=377): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f00000000c0)=0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x0, 0x8, 0x11, 0x95d}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x39, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0xe, 0x0, 0x20000002}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) r3 = socket$kcm(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r4 = syz_clone(0x800c000, &(0x7f0000001480), 0x0, 0x0, 0x0, 0x0) kcmp(r4, 0x0, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000000440)={{}, {0x1, 0x2}, [{0x2, 0x6}], {}, [], {0x10, 0x4}, {0x20, 0x3}}, 0x2c, 0x2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nbd(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r9, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010027bd7000fedbdf250300000008000100000002"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r9, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, r11, 0x400, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000000) 6.776167957s ago: executing program 6 (id=346): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r3, &(0x7f00000007c0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="94e7fa13d4daa500"/27, 0x1b}, {&(0x7f0000000480)="e4f1212587baf9b43dab9182b51f8de5f12ff7e152787943ba1cf7bea3791d08f3157d4b15547cb9fcc8ae8efb95b6fbadfe9fdcaa67d86af13dca11e48b1516e428b11bb876195c8dac737c8bc1f2b961827783aaabe70101cef8f5dad46f151fd45929a4bc076d875c10a453f6c962be7a4efb7a455e7ed8ab20ba700c2d866a15d894f6331cdf2fc41172c41990cc34e4118133f85d66be686f57bc0ea369423b77b0db6105100081ff95cd29f9de2d", 0xb1}, {&(0x7f0000000540)="1216e0a8d774ba7b4281545427162c24e9b8c9eb8c4971cfb834542a85d6bdcb08e60f82b83073f5b9a9ec858cd11b98737df5724ebc3ae325621a769a825303ebd054649cafe7736fd0fbbde070a4142f2b019268e9a0ee23650afdc96e7add506ee87299e036da4aaeeb2ce5cc3aab34c361c75047ae9bf3c244821b4a32ff125de1", 0x83}], 0x3}}, {{&(0x7f0000000600)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @cipso={0x86, 0x10, 0x3, [{0x6, 0x3, "a6"}, {0x7, 0x7, "32b97f1f66"}]}, @timestamp_prespec={0x44, 0x1c, 0xdd, 0x3, 0x0, [{@empty, 0x101}, {@remote, 0x4}, {@loopback, 0x6}]}, @timestamp_prespec={0x44, 0x14, 0x32, 0x3, 0x5, [{@local, 0x2}, {@multicast1, 0x1000}]}, @rr={0x7, 0xf, 0xaf, [@multicast2, @dev={0xac, 0x14, 0x14, 0xe}, @broadcast]}, @timestamp_prespec={0x44, 0x24, 0x58, 0x3, 0xf, [{@loopback, 0xfffff800}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x4}, {@empty, 0xfffffff7}]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfcb9}}], 0xc0}}], 0x2, 0x4000800) 5.808402515s ago: executing program 1 (id=379): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff14000200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x120) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0) r8 = inotify_init1(0x0) inotify_add_watch(r8, &(0x7f00000000c0)='./file0\x00', 0x60004ce) syz_pidfd_open(0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x24, r6, 0x5, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r9 = epoll_create1(0x0) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f00000000c0)={0x30000018}) keyctl$chown(0x4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x2, 0x0, @loopback}, 0x1c) 5.80754301s ago: executing program 2 (id=380): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904ff81000000ff02000200020000", 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5.788737409s ago: executing program 3 (id=381): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r2, &(0x7f0000001600)=""/4091, 0xffb, 0x100fffd) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f00000023c0)=[{{0x0, 0x0, 0x0}, 0xbd7b}], 0x1, 0x40000000, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r5}, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002c00010bfaffffff0000010006"], 0x14}], 0x1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x6], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x7) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x20, 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000b791204000000000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect$hid(0xf63067478e218e8, 0x36, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="0f450000c86773312e68ebb1470b0f2663abdc28fe15ca63b4a0337aaa8a54c459753a479a353f293d0fa58c2cde24e5ed3046589dc9ca1a8b3cc76c0d3c83f5cd47371b8cdc4f6b8a635e651a5818005d50e5f8b8f67014d96293c34eecaecfcf8b0e24dd8e32", @ANYRES16=r8, @ANYBLOB="010000000000000000000100000000000000014100000018001700000000000000006574683a7465616d30000000"], 0x34}}, 0x0) 5.787445491s ago: executing program 5 (id=382): r0 = socket$pppoe(0x18, 0x1, 0x0) syz_io_uring_setup(0x5176, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000040), &(0x7f0000000000)) r1 = syz_io_uring_setup(0x4237, &(0x7f0000000100), &(0x7f0000000200), &(0x7f00000001c0)) r2 = io_uring_setup(0x34d, &(0x7f0000000300)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_clone(0x2280e080, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x1b, 0x20000000, r3) sendmmsg$sock(r0, &(0x7f0000001dc0), 0x213, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x5ec}}, 0x0) 5.502654192s ago: executing program 2 (id=383): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @const={0x0, 0x0, 0x0, 0x9, 0x1}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x8c, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASTER={0x30, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}}}]}]}, 0x8c}}, 0x0) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000380)='./cgroup/cgroup.procs\x00') sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="110d29bd7000ffdbdf251b0000000c0006000100000001"], 0x50}, 0x1, 0x0, 0x0, 0x20000014}, 0x4) 5.253446567s ago: executing program 6 (id=346): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r3, &(0x7f00000007c0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="94e7fa13d4daa500"/27, 0x1b}, {&(0x7f0000000480)="e4f1212587baf9b43dab9182b51f8de5f12ff7e152787943ba1cf7bea3791d08f3157d4b15547cb9fcc8ae8efb95b6fbadfe9fdcaa67d86af13dca11e48b1516e428b11bb876195c8dac737c8bc1f2b961827783aaabe70101cef8f5dad46f151fd45929a4bc076d875c10a453f6c962be7a4efb7a455e7ed8ab20ba700c2d866a15d894f6331cdf2fc41172c41990cc34e4118133f85d66be686f57bc0ea369423b77b0db6105100081ff95cd29f9de2d", 0xb1}, {&(0x7f0000000540)="1216e0a8d774ba7b4281545427162c24e9b8c9eb8c4971cfb834542a85d6bdcb08e60f82b83073f5b9a9ec858cd11b98737df5724ebc3ae325621a769a825303ebd054649cafe7736fd0fbbde070a4142f2b019268e9a0ee23650afdc96e7add506ee87299e036da4aaeeb2ce5cc3aab34c361c75047ae9bf3c244821b4a32ff125de1", 0x83}], 0x3}}, {{&(0x7f0000000600)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @cipso={0x86, 0x10, 0x3, [{0x6, 0x3, "a6"}, {0x7, 0x7, "32b97f1f66"}]}, @timestamp_prespec={0x44, 0x1c, 0xdd, 0x3, 0x0, [{@empty, 0x101}, {@remote, 0x4}, {@loopback, 0x6}]}, @timestamp_prespec={0x44, 0x14, 0x32, 0x3, 0x5, [{@local, 0x2}, {@multicast1, 0x1000}]}, @rr={0x7, 0xf, 0xaf, [@multicast2, @dev={0xac, 0x14, 0x14, 0xe}, @broadcast]}, @timestamp_prespec={0x44, 0x24, 0x58, 0x3, 0xf, [{@loopback, 0xfffff800}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x4}, {@empty, 0xfffffff7}]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfcb9}}], 0xc0}}], 0x2, 0x4000800) 5.215634239s ago: executing program 1 (id=384): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x18}}], 0x1, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "df3f0400000000000000000000000609000040"}) r3 = syz_open_pts(r2, 0x88380) r4 = dup3(r3, r2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CHECK_EXTENSION_VM(r4, 0xae03, 0x2) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) write$P9_RLCREATE(r4, &(0x7f0000000080)={0x18, 0xf, 0x2, {{0x0, 0x3, 0x6}, 0x7fffffff}}, 0x18) r6 = dup3(r1, r0, 0x0) connect$unix(r6, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e) 5.179765685s ago: executing program 5 (id=385): mbind(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000000)=0x6, 0x21, 0x0) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x2) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x202, 0x4, 0x1}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = socket(0x2a, 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha512-ssse3\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$inet6(r6, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000002b40)="75310d23cecfd7e0e894ef275b568c2dc44634e3df9d25380fe56556aafa32a644524563bdef7bffbe87f77381f145790fa59150e587b21e79d92fddf8053285559a138db0623a3c3c1ef9efebec789b6d96ab7e2454527cb26aebe03501bfd3ccc4403ed32f7e967dacf4a96b544de2ae72452df5075c760e1fccf821a93d0ed5dadf5e6a2aeed67da884c5b58f59c85e88f1", 0x93}, {&(0x7f0000002c00)="60d145716c2c2cc9fe084172fd940c629ed1d74c0bba922d7505e0e0578cd4f1d427afaf81cdf721eaa7c542fac376233226f511481af4ed62f002916a6c77d3338d326f5929b4bab19c03558db159381f6507f01178d581c54ecc59f5aa4c4fb96842213f29209109860c102bc0aa7e306f306044006b007427e1bf81e67e8c943cf179c7561dac5d6aeaaf1249a628cf1793a9be0e0907e96322f83336b33f8248cc9c6ca57fd8dbd2a95eabed2c0a365d5226d0bc7b3094a1926770", 0xbd}, {&(0x7f0000002cc0)="ced0cd46cb0407e0f4067da0b7d4dca46884175c30ed8ede1f7fb9ec520e88e52f2568e243b019c468791b1b47db0b72", 0x30}, {&(0x7f0000002d00)="17", 0x1}], 0x4}}], 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r4, &(0x7f0000001100)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001080)={0x14, 0x7, 0x1, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, ["", ""]}, 0x14}}, 0x4040) getsockname$packet(r4, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x1) write$binfmt_script(r1, &(0x7f0000002800)={'#! ', './file0'}, 0xb) sendmsg(r0, &(0x7f00000008c0)={&(0x7f0000000140)=@x25, 0x80, &(0x7f0000000680)=[{&(0x7f00000001c0)="d52f6a39e60d847683f9f9e0865361c645fe59f6f9a5ac0434e6af723996a4a281d38a2049bf819ff9f88775fede34492e0c38de61aa3f6ed3245738c30a515d8f50633cfa03cc57b3d7350bd86d852c361994e8f5c78eace83ab3140a7f6055c383ad07290f527f8ee6e717202b92f824939b9c74d9d57eea9a270b1a6cde485484d048e1064ef3c4a79aca68ec1bfddc2c19c4cd539d702a", 0x99}, {&(0x7f0000000280)="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", 0xfb}, {&(0x7f0000000380)="9f19c3c0135555a7db135889733312b47d2a17f17bcc2b9729c76cb26fda41c8e29230b5fc99e9364203730f019d9996d7088724667b922df18f040099baf5effc0e62b64186e10f2f048ea216f16e0388b2a57be9459c744941a82f343d6338f28312b9c441e9b262ad6e6e363e0dedbc551c9339a87c7bfe44b8e04dab1d389fc816b51a234542164f2f724e027f656be8d333404fab294883afd610ff881b253e5337bfac39d4cc2ce057731f7309a9fefdf7bfbc8f7e69e9a9b9db2fd293e3bef6c3175d8e591e16ed8a4ca288ec3cd37a0b0c3b", 0xd6}, {&(0x7f0000000480)="e68b325cd15d399d8c3fbd8ceaf1a59f9fd8f2438cc26d9ed63b60e1ce9c4808bee310c40d0bc44eaa4eb3335a9aed2edf8ee73bd598d1e1778648ed496fe990d1dae7365b6ec6c988aa77463f4fd99e53d6be32fdc028df03bec3ae202c84d2b6dc498eeb37c0", 0x67}, {&(0x7f0000000500)="656dbbff6375d29652f45d618fb965fa7eb31db3fad4fc582b13400581feb74a5aa5a4aea61eab242be251222315409084db783f4eb85450861af5bd8eae084052373f228c2b0bf43dfff3992df4ad856fcb5c30c0d999d2a87390ecfdfcd7774d364dfab480632116b643d6c9", 0x6d}, {&(0x7f0000000580)="a13efb8e3ef443ac816d47b501f26a095f94327eb99ff30392b4970314ea4d9377a722d16b098201bfc5a8a0f7e5f888de2f4e9c88c9a83bc475c272d865d4658d23a55bed4896b7dd06fcf8c3dd2ea95ecb5c28bbad01d628d612223ec9cd34b5ad762d30e5f88cbd7d9b06ba5bd01628775ebf86c26fe271129561bea5f20ff76889182698860b9c5e52be4b89bea30d172ffb021e0402c83faff7aee4ed90b6b813903401a97c250ed409c58e0d2c86cb5f26f583ac16a9c626d03bd86e8b5e9305231905b646f68c1dc5af81512c645123b38b9597362da7cec96c141c300b8df7f4e2963c56", 0xe8}], 0x6, &(0x7f0000000700)=[{0xa8, 0x1, 0x7, "74afa2536093d2c244f5299256531a7bc84c0089d25df4774c6ad457d87c087cfb49603fbb16c330003723eaad3f4fb658680ab9add8dd452a397d05c5a9a137d7f25535001554ca3f68a75eee2ed6b7ad07fc728421fb46a591b4bc01431964974693ae9cc28b772dc6d76339fa2ebb9f6cf7994033a07c5ddfbbbe0150fe196cb97297c9b9ec7722425b498448bbf8234faea0"}, {0x108, 0x107, 0x1, "4c85c46fc16c7d2def065348a1b4d2243bc050c853b6fb9a49e5dcc37c78f18eac6215782fc5135743f2555fe814bc27ceecbe0b568eef0676a9d92b444a9191c64cf9097509a5ad4a4a81382e75f23d5b742d870c9c9a63cd2de2e6b283ffeb59849bfb37d516e4a9a73f5c1d934f299f64932cfafcf8054179e0f01a5475a7763e9109dd85644b9d4230a1ba5a71ce39962b0489b377fb38505c0b2b60e9a0d97daa06ee7a850a099d1ec30b257956969f34af69a36c4e0f084ba28abe153104a0a67d15177d490cb9ac8e33f2b790820da843c801f552c47ee137266c95b7b4ceafa3feac3143478bcaf05663e0d3bb089c6e"}], 0x1b0}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x13, r1, 0x0) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 4.10707706s ago: executing program 1 (id=386): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001180)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) preadv2(r3, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/21, 0x15}, {&(0x7f0000000040)=""/74, 0x4a}, {&(0x7f0000001780)=""/4090, 0xffa}, {&(0x7f0000003580)=""/4092, 0xffc}], 0x4, 0x0, 0x400000, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r5, 0x4004556a, 0x2) ioctl$UI_DEV_CREATE(r5, 0x5501) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) read(r5, &(0x7f0000000280)=""/44, 0x2c) ioctl$KDMKTONE(r6, 0x4b30, 0x8000000000000001) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x50009405, &(0x7f0000000180)) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="01000000000000000000030000005800018044000400200001000a00000000000000fe8000000000000000000000000000aaf8000000200002000a00000000000000ff010000000000000000000000000001000000000d0001007564703a73797a3000000000"], 0x6c}}, 0x0) 4.106192814s ago: executing program 2 (id=387): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x4000, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x58}}, 0x0) 4.102564021s ago: executing program 3 (id=388): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x18}}], 0x1, 0x0) r2 = dup3(r1, r0, 0x0) connect$unix(r2, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e) (fail_nth: 1) 4.069438688s ago: executing program 5 (id=389): r0 = socket$rxrpc(0x21, 0x2, 0xa) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f0000000080)=""/123, 0x7b, 0x0, &(0x7f0000000440)=""/230, 0xe6}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6, 0x4010, r0, 0xfbcfa000) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0xfffffd00, &(0x7f0000000000)='}\x00') r4 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0xa, 0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x0, 0x22, &(0x7f0000000c80)={0x5, 0xf, 0x22, 0x3, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x9, 0x8, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x30, 0x9, 0xfc, 0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x44, 0x0, 0xf, 0x6, 0x5}]}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, 0x0) sendto$packet(r2, &(0x7f0000000140)="648e6e0d802c64a9447807fda33015d275dacf2cbc7b321d083ecb5f80b955a92bd5eaf6f415f5f4", 0x28, 0x8000, &(0x7f0000000000)={0x11, 0x10, 0x0, 0x1, 0x5, 0x6, @local}, 0x14) sendmsg$IPSET_CMD_TEST(r1, 0x0, 0x4000002) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e23, @loopback}}, 0x24) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r8, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}}, 0x0) (fail_nth: 11) connect$rxrpc(r6, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}}, 0x24) 3.63563639s ago: executing program 3 (id=390): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000002c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) io_setup(0xfffffff8, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000bc0)={0x0, @in6={{0xa, 0x4e23, 0x80000001, @private0, 0xa}}, [0x3, 0x5, 0x8, 0xc42, 0xffff, 0x3, 0x7, 0xf, 0x7, 0x3, 0xf, 0x101, 0x9, 0x104, 0x6]}, &(0x7f0000000cc0)=0x100) 3.511852985s ago: executing program 6 (id=346): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r3, &(0x7f00000007c0)=[{{&(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000100)="94e7fa13d4daa500"/27, 0x1b}, {&(0x7f0000000480)="e4f1212587baf9b43dab9182b51f8de5f12ff7e152787943ba1cf7bea3791d08f3157d4b15547cb9fcc8ae8efb95b6fbadfe9fdcaa67d86af13dca11e48b1516e428b11bb876195c8dac737c8bc1f2b961827783aaabe70101cef8f5dad46f151fd45929a4bc076d875c10a453f6c962be7a4efb7a455e7ed8ab20ba700c2d866a15d894f6331cdf2fc41172c41990cc34e4118133f85d66be686f57bc0ea369423b77b0db6105100081ff95cd29f9de2d", 0xb1}, {&(0x7f0000000540)="1216e0a8d774ba7b4281545427162c24e9b8c9eb8c4971cfb834542a85d6bdcb08e60f82b83073f5b9a9ec858cd11b98737df5724ebc3ae325621a769a825303ebd054649cafe7736fd0fbbde070a4142f2b019268e9a0ee23650afdc96e7add506ee87299e036da4aaeeb2ce5cc3aab34c361c75047ae9bf3c244821b4a32ff125de1", 0x83}], 0x3}}, {{&(0x7f0000000600)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_retopts={{0x8c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @cipso={0x86, 0x10, 0x3, [{0x6, 0x3, "a6"}, {0x7, 0x7, "32b97f1f66"}]}, @timestamp_prespec={0x44, 0x1c, 0xdd, 0x3, 0x0, [{@empty, 0x101}, {@remote, 0x4}, {@loopback, 0x6}]}, @timestamp_prespec={0x44, 0x14, 0x32, 0x3, 0x5, [{@local, 0x2}, {@multicast1, 0x1000}]}, @rr={0x7, 0xf, 0xaf, [@multicast2, @dev={0xac, 0x14, 0x14, 0xe}, @broadcast]}, @timestamp_prespec={0x44, 0x24, 0x58, 0x3, 0xf, [{@loopback, 0xfffff800}, {@loopback, 0x5}, {@dev={0xac, 0x14, 0x14, 0x2a}, 0x4}, {@empty, 0xfffffff7}]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfcb9}}], 0xc0}}], 0x2, 0x4000800) 3.507613309s ago: executing program 1 (id=391): io_setup(0x6, &(0x7f00000000c0)) openat$hwrng(0xffffffffffffff9c, 0x0, 0x11b003, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000240)={0xa1, 0x0, 0x0, 0x3}, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) memfd_create(0x0, 0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x410000002) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0xd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0xeb2c}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffff8}, {}, {}, {}, {}, {0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {0x0, 0x401}, {}, {0x80, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x0, 0x0, 0x7ff}, {0x0, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0xffffffff}, {}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {0x0, 0x101, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x4, 0x1}, {}, {}, {}, {0x2000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x0, 0x80000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x20000000, 0x13}], [{}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x2}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x20004000) r5 = openat$audio(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f00000000c0)={0x0, 0x747, 0x3, 0x4, 0xfb, 0x8, 0x101}, 0xc) connect$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) 1.977588061s ago: executing program 1 (id=392): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x59c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) r3 = dup3(r2, r0, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x0, 0x800000}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000580)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000800)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x54, 0x0, &(0x7f00000006c0)="1ea05acf52cfdcf89b45cdc2b2161c1dd172fa0e5ba87101548b3bbcf9a21b37d5899ee1e5467417e954451c9995b412e5b38f84d5bc86db272c1858e5cbbe1b7172307016346be40669d6641a8601d2c1c91af1"}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000780)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0xfffffffffffffffc, 0x0}) 1.977061863s ago: executing program 2 (id=393): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000ed000000b7"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x3}}) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x143082, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r7, 0xc0045009, &(0x7f0000000080)=0x1) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f00000000c0)=0xfffffff8) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.97627474s ago: executing program 3 (id=394): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x4000000) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000000c0), 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) accept(r4, 0x0, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000040)={@hyper, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f00000000c0)={{@hyper, 0xcf}, 0x1, 0x2, 0x9a4}) 1.975830296s ago: executing program 5 (id=395): keyctl$read(0xb, 0x0, 0x0, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002bc0), 0x0, 0x4}, 0x4) setsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000140), 0x4) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "225545799f108d735cd2f002f09bb8bee3e078d27d9f11e1694473d0e5e427bf6a1e6e3f16e7d9de65b5005b65f36c29a75b65fa4f188bbb713d9b2f761b3e91", 0x25}, 0x48, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r5 = socket$unix(0x1, 0x5, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x5, 0x0) close(r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r6}}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000100)=0x9c) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r8, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010101}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008000000", @ANYRESOCT=r8], 0x40}, 0x20000000) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000300)='keyring\x00', &(0x7f0000000340)) keyctl$KEYCTL_WATCH_KEY(0x20, r3, r4, 0xffffffffffffffff) r9 = add_key(&(0x7f0000000380)='dns_resolver\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000480)="dd1e6737712ee6c10d0f2013e8affbe6445b10180b9add4c2c369199d8fdf3df03e6e8484f18fd227a5f84c71de8c8b4eb84a21116df24f199b9", 0x3a, r2) r10 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000200)={0x18, 0x14, 0x301, 0x0, 0x0, {0x1e}, [@generic="c1"]}, 0x18}}, 0x0) keyctl$describe(0x6, r9, &(0x7f00000004c0)=""/104, 0x68) keyctl$get_persistent(0x16, 0x0, r3) 647.96345ms ago: executing program 2 (id=396): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) r0 = syz_open_dev$cec(&(0x7f0000000940), 0x0, 0x400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000000000000100000046e1230f0200000080000000b1000000c4010000000000000000000000000000f500000000000080f000000007000000030000003b0400000600000007000000da0000000000000000000000d4bc"]) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x17, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0xfffffffffffffffc) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x8, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@cipso={0x86, 0xb, 0x3, [{0x1, 0x5, '\x00\x00\x00'}]}]}}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @broadcast, @multicast1}}}}}}, 0x0) r7 = fcntl$dupfd(r6, 0x0, r4) ioctl$UFFDIO_CONTINUE(r7, 0xc018aa06, &(0x7f0000000100)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 242.480787ms ago: executing program 5 (id=397): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) mkdirat(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000004340)={0x6, 0xd, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000ed000000b70400000000000085"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x3}}) r7 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x143082, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r7, 0xc0045009, &(0x7f0000000080)=0x1) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f00000000c0)=0xfffffff8) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x15) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 171.667646ms ago: executing program 1 (id=398): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) ioperm(0x0, 0x6, 0x13cc) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x7fc00000) socket$netlink(0x10, 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4140aecd, &(0x7f00000003c0)) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)={0x14, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x18}]}, 0x14}], 0x1}, 0x0) 0s ago: executing program 3 (id=399): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x10, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x3c}}, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r4) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r6, 0x200, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4008050}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl0\x00', 0x0}) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1}, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SG_SCSI_RESET(0xffffffffffffffff, 0x2284, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x20002, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={r8, 0x0, 0x0}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 3.077631][ T5822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.097868][ T5822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.173945][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.183868][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.194619][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.217497][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.253554][ T5832] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.275535][ T5832] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.285766][ T5832] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.309907][ T5832] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.331320][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.353607][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.401972][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.424973][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.439422][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.446736][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.485656][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.492833][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.509982][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.517089][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.526190][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.533424][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.598750][ T5825] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.611044][ T5825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.671904][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.731402][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.752299][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.804095][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.811306][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.849849][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.859890][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.867130][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.895780][ T2950] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.902976][ T2950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.928233][ T2950] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.935364][ T2950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.987564][ T5821] Bluetooth: hci0: command tx timeout [ 84.050448][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.064642][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.080410][ T5821] Bluetooth: hci1: command tx timeout [ 84.103477][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.130419][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.141607][ T2950] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.149051][ T2950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.159388][ T5821] Bluetooth: hci2: command tx timeout [ 84.215969][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.223279][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.244136][ T5821] Bluetooth: hci3: command tx timeout [ 84.296707][ T5825] veth0_vlan: entered promiscuous mode [ 84.308610][ T5821] Bluetooth: hci4: command tx timeout [ 84.364044][ T5818] veth0_vlan: entered promiscuous mode [ 84.419860][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.446105][ T5825] veth1_vlan: entered promiscuous mode [ 84.461825][ T5818] veth1_vlan: entered promiscuous mode [ 84.511161][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.572402][ T5818] veth0_macvtap: entered promiscuous mode [ 84.606296][ T5818] veth1_macvtap: entered promiscuous mode [ 84.640427][ T5825] veth0_macvtap: entered promiscuous mode [ 84.659501][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.671262][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.686335][ T5818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.695585][ T5818] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.705255][ T5818] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.725466][ T5818] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.749832][ T5825] veth1_macvtap: entered promiscuous mode [ 84.770530][ T5822] veth0_vlan: entered promiscuous mode [ 84.792096][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.821135][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.832585][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.844763][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.875439][ T5825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.889558][ T5825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.902480][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.924938][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.935358][ T5822] veth1_vlan: entered promiscuous mode [ 84.965490][ T5825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.977386][ T5825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.986228][ T5825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.996119][ T5825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.046771][ T5830] veth0_vlan: entered promiscuous mode [ 85.074832][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.113328][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.127481][ T5830] veth1_vlan: entered promiscuous mode [ 85.163280][ T5822] veth0_macvtap: entered promiscuous mode [ 85.189502][ T5822] veth1_macvtap: entered promiscuous mode [ 85.240859][ T5830] veth0_macvtap: entered promiscuous mode [ 85.271051][ T2950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.293511][ T2950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.295378][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.314072][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.327350][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.338694][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.350368][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.363638][ T5830] veth1_macvtap: entered promiscuous mode [ 85.394116][ T2950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.395437][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.424790][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.435627][ T2950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.440289][ T5822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.453889][ T5822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.465588][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.480416][ T5818] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.482811][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.509341][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.521065][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.531904][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.542151][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.552718][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.563935][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.602015][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.621716][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.632940][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.653117][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.663130][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.682524][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.694077][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.716302][ T4157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.722087][ T5822] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.733136][ T4157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.744136][ T5822] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.753610][ T5822] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.762642][ T5822] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.802306][ T5832] veth0_vlan: entered promiscuous mode [ 85.850546][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.867000][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.877434][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.887997][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.916274][ T5832] veth1_vlan: entered promiscuous mode [ 85.983522][ T5874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.995930][ T5901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 86.011842][ T25] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 86.020464][ T5874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.028642][ T5901] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 86.065470][ T5901] dummy0: entered promiscuous mode [ 86.077821][ T5821] Bluetooth: hci0: command tx timeout [ 86.112586][ T4157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.147894][ T5821] Bluetooth: hci1: command tx timeout [ 86.149954][ T5832] veth0_macvtap: entered promiscuous mode [ 86.165387][ T4157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.184570][ T25] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 86.207381][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 86.208534][ T5832] veth1_macvtap: entered promiscuous mode [ 86.228138][ T5821] Bluetooth: hci2: command tx timeout [ 86.239514][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.250848][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 86.265011][ T25] usb 2-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 86.274748][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.288783][ T25] usb 2-1: config 0 descriptor?? [ 86.315471][ T5821] Bluetooth: hci3: command tx timeout [ 86.357109][ T4157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.379425][ T4157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.387911][ T5821] Bluetooth: hci4: command tx timeout [ 86.410978][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.462324][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.526129][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.551961][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.571197][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.582211][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.592540][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.606333][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.617365][ T29] audit: type=1326 audit(1734419597.215:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5905 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9646985d19 code=0x7ffc0000 [ 86.624763][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.667527][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 86.675961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 86.688213][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 86.696597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 86.705644][ T0] NOHZ tick-stop error: local softirq work is pending, handler #340!!! [ 86.716682][ T29] audit: type=1326 audit(1734419597.215:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5905 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f9646985d19 code=0x7ffc0000 [ 86.739234][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.757278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 86.766178][ T29] audit: type=1326 audit(1734419597.215:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5905 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9646985d19 code=0x7ffc0000 [ 86.772572][ T25] uclogic 0003:28BD:0055.0001: interface is invalid, ignoring [ 86.807335][ T29] audit: type=1326 audit(1734419597.215:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5905 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9646985d19 code=0x7ffc0000 [ 86.810985][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.838163][ T29] audit: type=1326 audit(1734419597.215:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5905 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9646985d19 code=0x7ffc0000 [ 86.871933][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 86.905609][ T29] audit: type=1326 audit(1734419597.215:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5905 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9646985d19 code=0x7ffc0000 [ 86.919801][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.940156][ T29] audit: type=1326 audit(1734419597.275:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5905 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9646985d19 code=0x7ffc0000 [ 86.960414][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.973353][ T29] audit: type=1326 audit(1734419597.275:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5905 comm="syz.3.4" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9646985d19 code=0x7ffc0000 [ 86.996290][ T5912] FAULT_INJECTION: forcing a failure. [ 86.996290][ T5912] name failslab, interval 1, probability 0, space 0, times 1 [ 87.015008][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.020688][ T5912] CPU: 0 UID: 0 PID: 5912 Comm: syz.2.8 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 87.025612][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.035861][ T5912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 87.035888][ T5912] Call Trace: [ 87.035900][ T5912] [ 87.035912][ T5912] dump_stack_lvl+0x241/0x360 [ 87.045857][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.055765][ T5912] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.059168][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.061995][ T5912] ? __pfx__printk+0x10/0x10 [ 87.078279][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.082271][ T5912] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 87.093514][ T5913] Zero length message leads to an empty skb [ 87.096655][ T5912] ? __pfx___might_resched+0x10/0x10 [ 87.096705][ T5912] should_fail_ex+0x3b0/0x4e0 [ 87.125909][ T5912] should_failslab+0xac/0x100 [ 87.130699][ T5912] kmem_cache_alloc_node_noprof+0x77/0x380 [ 87.136544][ T5912] ? __alloc_skb+0x1c3/0x440 [ 87.141189][ T5912] __alloc_skb+0x1c3/0x440 [ 87.145661][ T5912] ? __pfx___alloc_skb+0x10/0x10 [ 87.150655][ T5912] ? netlink_autobind+0xd6/0x2f0 [ 87.155643][ T5912] ? netlink_autobind+0x2b0/0x2f0 [ 87.160719][ T5912] netlink_sendmsg+0x638/0xcb0 [ 87.165542][ T5912] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.170892][ T5912] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.176214][ T5912] __sock_sendmsg+0x221/0x270 [ 87.180942][ T5912] ____sys_sendmsg+0x52a/0x7e0 [ 87.185847][ T5912] ? __pfx_____sys_sendmsg+0x10/0x10 [ 87.191176][ T5912] ? __fget_files+0x2a/0x410 [ 87.195804][ T5912] ? __fget_files+0x2a/0x410 [ 87.200439][ T5912] __sys_sendmsg+0x269/0x350 [ 87.205076][ T5912] ? __pfx_lock_release+0x10/0x10 [ 87.210142][ T5912] ? __pfx___sys_sendmsg+0x10/0x10 [ 87.215369][ T5912] ? __pfx_vfs_write+0x10/0x10 [ 87.220222][ T5912] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 87.226595][ T5912] ? do_syscall_64+0x100/0x230 [ 87.231425][ T5912] ? do_syscall_64+0xb6/0x230 [ 87.236158][ T5912] do_syscall_64+0xf3/0x230 [ 87.240710][ T5912] ? clear_bhb_loop+0x35/0x90 [ 87.245419][ T5912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.251377][ T5912] RIP: 0033:0x7f53ef185d19 [ 87.255835][ T5912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.275480][ T5912] RSP: 002b:00007f53eff4d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.283936][ T5912] RAX: ffffffffffffffda RBX: 00007f53ef375fa0 RCX: 00007f53ef185d19 [ 87.291944][ T5912] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 000000000000000f [ 87.299950][ T5912] RBP: 00007f53eff4d090 R08: 0000000000000000 R09: 0000000000000000 [ 87.308041][ T5912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.316044][ T5912] R13: 0000000000000000 R14: 00007f53ef375fa0 R15: 00007ffde8b3aef8 [ 87.324075][ T5912] [ 87.457006][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 87.484991][ T5832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.503463][ T5921] usb 2-1: USB disconnect, device number 2 [ 87.510522][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 87.533726][ T5832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.542644][ T5832] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.593093][ T5832] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.664760][ T5924] syz.2.10 uses obsolete (PF_INET,SOCK_PACKET) [ 87.677422][ T5925] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.735637][ T2950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.774653][ T2950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.243356][ T5821] Bluetooth: hci0: command tx timeout [ 88.244314][ T54] Bluetooth: hci1: command tx timeout [ 88.299777][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.309471][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.317553][ T54] Bluetooth: hci2: command tx timeout [ 88.356401][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.378828][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.399305][ T54] Bluetooth: hci3: command tx timeout [ 88.453701][ T5940] netlink: 'syz.3.12': attribute type 17 has an invalid length. [ 88.468391][ T54] Bluetooth: hci4: command tx timeout [ 88.837411][ T8] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 88.860163][ T5945] FAULT_INJECTION: forcing a failure. [ 88.860163][ T5945] name failslab, interval 1, probability 0, space 0, times 0 [ 88.874047][ T5945] CPU: 0 UID: 0 PID: 5945 Comm: syz.4.5 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 88.884529][ T5945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 88.894716][ T5945] Call Trace: [ 88.898141][ T5945] [ 88.901106][ T5945] dump_stack_lvl+0x241/0x360 [ 88.905836][ T5945] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.911085][ T5945] ? __pfx__printk+0x10/0x10 [ 88.915895][ T5945] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 88.922035][ T5945] ? __pfx___might_resched+0x10/0x10 [ 88.927377][ T5945] should_fail_ex+0x3b0/0x4e0 [ 88.932444][ T5945] should_failslab+0xac/0x100 [ 88.937151][ T5945] kmem_cache_alloc_node_noprof+0x77/0x380 [ 88.943011][ T5945] ? __alloc_skb+0x1c3/0x440 [ 88.947615][ T5945] __alloc_skb+0x1c3/0x440 [ 88.952050][ T5945] ? __pfx___alloc_skb+0x10/0x10 [ 88.957002][ T5945] ? netlink_autobind+0xd6/0x2f0 [ 88.961959][ T5945] ? netlink_autobind+0x2b0/0x2f0 [ 88.966998][ T5945] netlink_sendmsg+0x638/0xcb0 [ 88.971783][ T5945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.977088][ T5945] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.982396][ T5945] __sock_sendmsg+0x221/0x270 [ 88.987272][ T5945] ____sys_sendmsg+0x52a/0x7e0 [ 88.992055][ T5945] ? __pfx_____sys_sendmsg+0x10/0x10 [ 88.997352][ T5945] ? __fget_files+0x2a/0x410 [ 89.001959][ T5945] ? __fget_files+0x2a/0x410 [ 89.006563][ T5945] __sys_sendmsg+0x269/0x350 [ 89.011166][ T5945] ? __pfx_lock_release+0x10/0x10 [ 89.016205][ T5945] ? __pfx___sys_sendmsg+0x10/0x10 [ 89.021359][ T5945] ? __pfx_vfs_write+0x10/0x10 [ 89.026162][ T5945] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 89.032568][ T5945] ? do_syscall_64+0x100/0x230 [ 89.037390][ T5945] ? do_syscall_64+0xb6/0x230 [ 89.042088][ T5945] do_syscall_64+0xf3/0x230 [ 89.046610][ T5945] ? clear_bhb_loop+0x35/0x90 [ 89.051302][ T5945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.057224][ T5945] RIP: 0033:0x7f497af85d19 [ 89.061665][ T5945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.081282][ T5945] RSP: 002b:00007f497bd6c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.089714][ T5945] RAX: ffffffffffffffda RBX: 00007f497b175fa0 RCX: 00007f497af85d19 [ 89.097698][ T5945] RDX: 0000000000000000 RSI: 0000000020000480 RDI: 0000000000000003 [ 89.105678][ T5945] RBP: 00007f497bd6c090 R08: 0000000000000000 R09: 0000000000000000 [ 89.113657][ T5945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.121640][ T5945] R13: 0000000000000000 R14: 00007f497b175fa0 R15: 00007ffde315f168 [ 89.129637][ T5945] [ 89.334417][ T8] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 89.348830][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 89.380474][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.410889][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 89.487814][ T8] usb 3-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 89.553649][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.662313][ T8] usb 3-1: config 0 descriptor?? [ 89.951854][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 89.979127][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 90.067654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 90.413056][ T5960] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17'. [ 90.422662][ T5960] netlink: 272 bytes leftover after parsing attributes in process `syz.1.17'. [ 90.432138][ T5960] netlink: 72 bytes leftover after parsing attributes in process `syz.1.17'. [ 92.471242][ T972] cfg80211: failed to load regulatory.db [ 92.598811][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 92.605277][ T8] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 92.807936][ T8] usb 3-1: USB disconnect, device number 2 [ 94.028284][ T5980] netdevsim netdevsim1: Direct firmware load for , failed with error -2 [ 94.047027][ T5980] netdevsim netdevsim1: Falling back to sysfs fallback for: , [ 94.532293][ T5987] netlink: 44 bytes leftover after parsing attributes in process `syz.3.23'. [ 94.562113][ T5988] usb usb1: usbfs: process 5988 (syz.4.24) did not claim interface 3 before use [ 94.857373][ T5891] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.309844][ T5891] usb 4-1: config 0 has an invalid descriptor of length 211, skipping remainder of the config [ 95.345127][ T5891] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 95.487098][ T6003] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.756873][ T5891] usb 4-1: New USB device found, idVendor=05ac, idProduct=a1e2, bcdDevice=ab.fa [ 95.766233][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.780747][ T5891] usb 4-1: Product: syz [ 95.785673][ T5891] usb 4-1: Manufacturer: syz [ 95.790531][ T5891] usb 4-1: SerialNumber: syz [ 95.918935][ T5891] usb 4-1: config 0 descriptor?? [ 96.069680][ T6010] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 96.087123][ T6010] batman_adv: batadv0: Adding interface: gretap1 [ 96.093639][ T6010] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.119324][ T6010] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 96.638786][ T5891] usb 4-1: USB disconnect, device number 2 [ 96.676446][ T6012] warning: `syz.4.32' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 98.982179][ T6043] usb usb1: usbfs: process 6043 (syz.0.39) did not claim interface 3 before use [ 99.324086][ T6047] FAULT_INJECTION: forcing a failure. [ 99.324086][ T6047] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 99.388271][ T6047] CPU: 0 UID: 0 PID: 6047 Comm: syz.4.40 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 99.398853][ T6047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 99.408954][ T6047] Call Trace: [ 99.412282][ T6047] [ 99.415253][ T6047] dump_stack_lvl+0x241/0x360 [ 99.419994][ T6047] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.425241][ T6047] ? __pfx__printk+0x10/0x10 [ 99.429882][ T6047] ? snprintf+0xda/0x120 [ 99.434176][ T6047] should_fail_ex+0x3b0/0x4e0 [ 99.438899][ T6047] _copy_to_user+0x31/0xb0 [ 99.443386][ T6047] simple_read_from_buffer+0xca/0x150 [ 99.448903][ T6047] proc_fail_nth_read+0x1e9/0x250 [ 99.453998][ T6047] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.459606][ T6047] ? rw_verify_area+0x55e/0x6f0 [ 99.464474][ T6047] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.470042][ T6047] vfs_read+0x1fc/0xb70 [ 99.474294][ T6047] ? __asan_memset+0x23/0x50 [ 99.478902][ T6047] ? __pfx_vfs_read+0x10/0x10 [ 99.483593][ T6047] ? __sys_bpf+0x1e7/0x810 [ 99.488023][ T6047] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 99.494021][ T6047] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 99.500458][ T6047] ksys_read+0x18f/0x2b0 [ 99.504732][ T6047] ? __pfx_ksys_read+0x10/0x10 [ 99.509529][ T6047] do_syscall_64+0xf3/0x230 [ 99.514058][ T6047] ? clear_bhb_loop+0x35/0x90 [ 99.518843][ T6047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.524754][ T6047] RIP: 0033:0x7f497af8472c [ 99.529181][ T6047] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 99.548808][ T6047] RSP: 002b:00007f497bd6c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.557243][ T6047] RAX: ffffffffffffffda RBX: 00007f497b175fa0 RCX: 00007f497af8472c [ 99.565232][ T6047] RDX: 000000000000000f RSI: 00007f497bd6c0a0 RDI: 0000000000000009 [ 99.573213][ T6047] RBP: 00007f497bd6c090 R08: 0000000000000000 R09: 0000000000000000 [ 99.581218][ T6047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.589196][ T6047] R13: 0000000000000000 R14: 00007f497b175fa0 R15: 00007ffde315f168 [ 99.597226][ T6047] [ 100.016560][ T6055] lo speed is unknown, defaulting to 1000 [ 100.055039][ T6055] lo speed is unknown, defaulting to 1000 [ 100.137884][ T6055] lo speed is unknown, defaulting to 1000 [ 101.316597][ T6068] FAULT_INJECTION: forcing a failure. [ 101.316597][ T6068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 101.392875][ T6068] CPU: 1 UID: 0 PID: 6068 Comm: syz.4.46 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 101.403724][ T6068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 101.413831][ T6068] Call Trace: [ 101.417207][ T6068] [ 101.420262][ T6068] dump_stack_lvl+0x241/0x360 [ 101.425170][ T6068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.430436][ T6068] ? __pfx__printk+0x10/0x10 [ 101.435098][ T6068] ? snprintf+0xda/0x120 [ 101.439399][ T6068] should_fail_ex+0x3b0/0x4e0 [ 101.444129][ T6068] _copy_to_user+0x31/0xb0 [ 101.448612][ T6068] simple_read_from_buffer+0xca/0x150 [ 101.454047][ T6068] proc_fail_nth_read+0x1e9/0x250 [ 101.459138][ T6068] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.464755][ T6068] ? rw_verify_area+0x55e/0x6f0 [ 101.469657][ T6068] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 101.475261][ T6068] vfs_read+0x1fc/0xb70 [ 101.479480][ T6068] ? __pfx_inet6_bind_sk+0x10/0x10 [ 101.484658][ T6068] ? __pfx_vfs_read+0x10/0x10 [ 101.489440][ T6068] ? __sys_bind+0x20a/0x290 [ 101.493993][ T6068] ? __pfx___sys_bind+0x10/0x10 [ 101.498904][ T6068] ksys_read+0x18f/0x2b0 [ 101.503207][ T6068] ? __pfx_ksys_read+0x10/0x10 [ 101.508064][ T6068] ? do_syscall_64+0x100/0x230 [ 101.512897][ T6068] ? do_syscall_64+0xb6/0x230 [ 101.517637][ T6068] do_syscall_64+0xf3/0x230 [ 101.522200][ T6068] ? clear_bhb_loop+0x35/0x90 [ 101.526940][ T6068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.532899][ T6068] RIP: 0033:0x7f497af8472c [ 101.537535][ T6068] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 101.557368][ T6068] RSP: 002b:00007f497bd6c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 101.565842][ T6068] RAX: ffffffffffffffda RBX: 00007f497b175fa0 RCX: 00007f497af8472c [ 101.573868][ T6068] RDX: 000000000000000f RSI: 00007f497bd6c0a0 RDI: 0000000000000004 [ 101.581889][ T6068] RBP: 00007f497bd6c090 R08: 0000000000000000 R09: 0000000000000000 [ 101.590078][ T6068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.598108][ T6068] R13: 0000000000000000 R14: 00007f497b175fa0 R15: 00007ffde315f168 [ 101.606161][ T6068] [ 101.609457][ C1] vkms_vblank_simulate: vblank timer overrun [ 102.340201][ T6076] netlink: 4 bytes leftover after parsing attributes in process `syz.3.47'. [ 102.633722][ T6055] infiniband syz0: set active [ 102.648241][ T6055] infiniband syz0: added lo [ 102.654782][ T6055] syz0: rxe_create_cq: returned err = -12 [ 102.675633][ T6055] infiniband syz0: Couldn't create ib_mad CQ [ 102.685850][ T6055] infiniband syz0: Couldn't open port 1 [ 103.038078][ T3076] lo speed is unknown, defaulting to 1000 [ 103.042206][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.0.49'. [ 103.520874][ T6055] RDS/IB: syz0: added [ 103.525491][ T6055] smc: adding ib device syz0 with port count 1 [ 103.610300][ T6093] mmap: syz.0.53 (6093) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 103.622072][ T6055] smc: ib device syz0 port 1 has pnetid [ 103.682407][ T8] lo speed is unknown, defaulting to 1000 [ 103.732454][ T6055] lo speed is unknown, defaulting to 1000 [ 103.827406][ T972] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 103.948255][ T5869] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 103.993087][ T6055] lo speed is unknown, defaulting to 1000 [ 104.326067][ T5869] usb 2-1: config 2 has an invalid interface number: 186 but max is 0 [ 104.338622][ T5869] usb 2-1: config 2 has no interface number 0 [ 105.184087][ T5869] usb 2-1: config 2 interface 186 has no altsetting 0 [ 105.199422][ T5869] usb 2-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=8c.8f [ 105.208802][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.217460][ T5869] usb 2-1: Product: syz [ 105.221731][ T5869] usb 2-1: Manufacturer: syz [ 105.226379][ T5869] usb 2-1: SerialNumber: syz [ 105.265169][ T972] usb 5-1: config 2 has an invalid interface number: 186 but max is 0 [ 105.284979][ T972] usb 5-1: config 2 has no interface number 0 [ 105.296780][ T972] usb 5-1: config 2 interface 186 has no altsetting 0 [ 105.328554][ T6055] lo speed is unknown, defaulting to 1000 [ 105.570341][ T6055] lo speed is unknown, defaulting to 1000 [ 105.622408][ T972] usb 5-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=8c.8f [ 105.632311][ T972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.660069][ T972] usb 5-1: Product: syz [ 105.685344][ T972] usb 5-1: Manufacturer: syz [ 105.698716][ T972] usb 5-1: SerialNumber: syz [ 106.021312][ T6055] lo speed is unknown, defaulting to 1000 [ 106.342501][ T6113] rdma_rxe: rxe_newlink: failed to add lo [ 107.318586][ T46] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.362258][ T5869] catc 2-1:2.186: Can't set altsetting 1. [ 107.437314][ T5869] catc 2-1:2.186: probe with driver catc failed with error -5 [ 107.480395][ T5869] usb 2-1: USB disconnect, device number 3 [ 107.598772][ T46] usb 3-1: Using ep0 maxpacket: 16 [ 107.612816][ T46] usb 3-1: config 0 has an invalid interface number: 111 but max is 0 [ 107.625048][ T46] usb 3-1: config 0 has no interface number 0 [ 107.637021][ T46] usb 3-1: config 0 interface 111 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 107.694737][ T46] usb 3-1: New USB device found, idVendor=0a12, idProduct=5d10, bcdDevice=fc.66 [ 107.707624][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.725459][ T46] usb 3-1: Product: syz [ 107.747242][ T46] usb 3-1: Manufacturer: syz [ 107.752017][ T46] usb 3-1: SerialNumber: syz [ 107.771960][ T46] usb 3-1: config 0 descriptor?? [ 107.917748][ T46] ushc 3-1:0.111: probe with driver ushc failed with error -110 [ 107.936977][ T6130] netlink: 28 bytes leftover after parsing attributes in process `syz.0.62'. [ 107.973629][ T6130] netlink: 28 bytes leftover after parsing attributes in process `syz.0.62'. [ 108.011018][ T6130] veth0: entered promiscuous mode [ 108.047530][ T6130] dummy0: entered promiscuous mode [ 108.303977][ T46] usb 3-1: USB disconnect, device number 3 [ 110.258965][ T972] catc 5-1:2.186: Can't set altsetting 1. [ 110.275098][ T972] catc 5-1:2.186: probe with driver catc failed with error -5 [ 110.419640][ T972] usb 5-1: USB disconnect, device number 2 [ 111.500134][ T6160] FAULT_INJECTION: forcing a failure. [ 111.500134][ T6160] name failslab, interval 1, probability 0, space 0, times 0 [ 111.513049][ T6160] CPU: 1 UID: 0 PID: 6160 Comm: syz.0.69 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 111.523607][ T6160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 111.533722][ T6160] Call Trace: [ 111.537041][ T6160] [ 111.540051][ T6160] dump_stack_lvl+0x241/0x360 [ 111.544790][ T6160] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.550042][ T6160] ? __pfx__printk+0x10/0x10 [ 111.554683][ T6160] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 111.558377][ T6161] syz0: rxe_newlink: already configured on lo [ 111.560696][ T6160] ? __pfx___might_resched+0x10/0x10 [ 111.572091][ T6160] should_fail_ex+0x3b0/0x4e0 [ 111.576815][ T6160] should_failslab+0xac/0x100 [ 111.581549][ T6160] kmem_cache_alloc_node_noprof+0x77/0x380 [ 111.587411][ T6160] ? __alloc_skb+0x1c3/0x440 [ 111.592053][ T6160] __alloc_skb+0x1c3/0x440 [ 111.596532][ T6160] ? __pfx___alloc_skb+0x10/0x10 [ 111.601515][ T6160] ? netlink_autobind+0xd6/0x2f0 [ 111.606585][ T6160] ? netlink_autobind+0x2b0/0x2f0 [ 111.611750][ T6160] netlink_sendmsg+0x638/0xcb0 [ 111.616576][ T6160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.621925][ T6160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 111.627257][ T6160] __sock_sendmsg+0x221/0x270 [ 111.631997][ T6160] ____sys_sendmsg+0x52a/0x7e0 [ 111.636819][ T6160] ? __pfx_____sys_sendmsg+0x10/0x10 [ 111.642164][ T6160] ? __fget_files+0x2a/0x410 [ 111.647059][ T6160] ? __fget_files+0x2a/0x410 [ 111.651701][ T6160] __sys_sendmsg+0x269/0x350 [ 111.656331][ T6160] ? __pfx_lock_release+0x10/0x10 [ 111.661375][ T6160] ? __pfx___sys_sendmsg+0x10/0x10 [ 111.666511][ T6160] ? __pfx_vfs_write+0x10/0x10 [ 111.671311][ T6160] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 111.677744][ T6160] ? do_syscall_64+0x100/0x230 [ 111.682536][ T6160] ? do_syscall_64+0xb6/0x230 [ 111.687245][ T6160] do_syscall_64+0xf3/0x230 [ 111.691789][ T6160] ? clear_bhb_loop+0x35/0x90 [ 111.696478][ T6160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.702406][ T6160] RIP: 0033:0x7f7acf585d19 [ 111.706835][ T6160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.726470][ T6160] RSP: 002b:00007f7ad0378038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 111.734928][ T6160] RAX: ffffffffffffffda RBX: 00007f7acf775fa0 RCX: 00007f7acf585d19 [ 111.742916][ T6160] RDX: 0000000000000000 RSI: 0000000020000700 RDI: 0000000000000003 [ 111.750900][ T6160] RBP: 00007f7ad0378090 R08: 0000000000000000 R09: 0000000000000000 [ 111.758884][ T6160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.766867][ T6160] R13: 0000000000000000 R14: 00007f7acf775fa0 R15: 00007ffeea1f5158 [ 111.774864][ T6160] [ 111.777977][ C1] vkms_vblank_simulate: vblank timer overrun [ 112.061035][ T6170] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 112.167403][ T972] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 113.099004][ T972] usb 1-1: config 2 has an invalid interface number: 186 but max is 0 [ 113.107879][ T972] usb 1-1: config 2 has no interface number 0 [ 113.115213][ T972] usb 1-1: config 2 interface 186 has no altsetting 0 [ 113.129773][ T972] usb 1-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=8c.8f [ 113.139434][ T972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.157274][ T972] usb 1-1: Product: syz [ 113.173274][ T972] usb 1-1: Manufacturer: syz [ 113.339172][ T972] usb 1-1: SerialNumber: syz [ 113.577368][ T46] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 114.584021][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 115.309058][ T46] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 115.322600][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.330763][ T46] usb 2-1: Product: syz [ 115.334967][ T46] usb 2-1: Manufacturer: syz [ 115.340157][ T46] usb 2-1: SerialNumber: syz [ 115.357405][ T46] usb 2-1: config 0 descriptor?? [ 115.365374][ T46] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 115.615468][ T6203] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 115.640218][ T6202] FAULT_INJECTION: forcing a failure. [ 115.640218][ T6202] name failslab, interval 1, probability 0, space 0, times 0 [ 115.653067][ T6202] CPU: 1 UID: 0 PID: 6202 Comm: syz.4.80 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 115.663708][ T6202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 115.673806][ T6202] Call Trace: [ 115.677123][ T6202] [ 115.680104][ T6202] dump_stack_lvl+0x241/0x360 [ 115.684845][ T6202] ? __pfx_dump_stack_lvl+0x10/0x10 [ 115.690103][ T6202] ? __pfx__printk+0x10/0x10 [ 115.694752][ T6202] ? fs_reclaim_acquire+0x93/0x130 [ 115.699923][ T6202] ? __pfx___might_resched+0x10/0x10 [ 115.705277][ T6202] should_fail_ex+0x3b0/0x4e0 [ 115.710010][ T6202] should_failslab+0xac/0x100 [ 115.714911][ T6202] __kmalloc_noprof+0xdd/0x4c0 [ 115.714951][ T6202] ? tomoyo_encode+0x26f/0x540 [ 115.724907][ T6202] tomoyo_encode+0x26f/0x540 [ 115.729596][ T6202] tomoyo_realpath_from_path+0x59e/0x5e0 [ 115.735273][ T6202] tomoyo_path_number_perm+0x236/0x860 [ 115.740962][ T6202] ? __lock_acquire+0x1397/0x2100 [ 115.746109][ T6202] ? tomoyo_path_number_perm+0x206/0x860 [ 115.751767][ T6202] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 115.757826][ T6202] ? __fget_files+0x2a/0x410 [ 115.762448][ T6202] ? __fget_files+0x2a/0x410 [ 115.767070][ T6202] security_file_ioctl+0xc6/0x2a0 [ 115.772129][ T6202] __se_sys_ioctl+0x46/0x170 [ 115.776744][ T6202] do_syscall_64+0xf3/0x230 [ 115.781279][ T6202] ? clear_bhb_loop+0x35/0x90 [ 115.786001][ T6202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.791919][ T6202] RIP: 0033:0x7f497af85d19 [ 115.796346][ T6202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.816067][ T6202] RSP: 002b:00007f497bd6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.824505][ T6202] RAX: ffffffffffffffda RBX: 00007f497b175fa0 RCX: 00007f497af85d19 [ 115.832544][ T6202] RDX: 0001000000000000 RSI: 0000000040046f41 RDI: 0000000000000003 [ 115.840585][ T6202] RBP: 00007f497bd6c090 R08: 0000000000000000 R09: 0000000000000000 [ 115.848581][ T6202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.856570][ T6202] R13: 0000000000000000 R14: 00007f497b175fa0 R15: 00007ffde315f168 [ 115.864688][ T6202] [ 115.867775][ C1] vkms_vblank_simulate: vblank timer overrun [ 115.881541][ T6202] ERROR: Out of memory at tomoyo_realpath_from_path. [ 116.517584][ T46] gspca_vc032x: reg_w err -71 [ 116.522476][ T46] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 116.694664][ T46] usb 2-1: USB disconnect, device number 4 [ 116.806801][ T972] catc 1-1:2.186: Can't set altsetting 1. [ 116.814228][ T972] catc 1-1:2.186: probe with driver catc failed with error -5 [ 116.844926][ T972] usb 1-1: USB disconnect, device number 2 [ 117.178333][ T6221] rdma_rxe: rxe_newlink: failed to add lo [ 117.708016][ T5921] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 117.870526][ T5921] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 117.892872][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 117.947273][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.981833][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 118.219113][ T5921] usb 4-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 118.280217][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.293102][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 118.308976][ T5921] usb 4-1: config 0 descriptor?? [ 118.354781][ T6237] nbd: couldn't find a device at index 131072 [ 118.537429][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 118.547156][ T8] usb 1-1: config 6 has an invalid interface number: 120 but max is 0 [ 118.566893][ T8] usb 1-1: config 6 has no interface number 0 [ 118.598569][ T8] usb 1-1: config 6 interface 120 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 118.673332][ T8] usb 1-1: config 6 interface 120 has no altsetting 0 [ 118.686184][ T8] usb 1-1: New USB device found, idVendor=093a, idProduct=2627, bcdDevice=5d.43 [ 118.705139][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.731700][ T5921] uclogic 0003:28BD:0055.0002: interface is invalid, ignoring [ 118.740836][ T8] usb 1-1: Product: syz [ 118.745060][ T8] usb 1-1: Manufacturer: syz [ 118.777059][ T8] usb 1-1: SerialNumber: syz [ 118.787315][ T5869] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 118.937459][ T5869] usb 5-1: Using ep0 maxpacket: 8 [ 118.946379][ T5869] usb 5-1: config 6 has an invalid interface number: 120 but max is 0 [ 118.954864][ T5869] usb 5-1: config 6 has no interface number 0 [ 118.962697][ T5869] usb 5-1: config 6 interface 120 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 119.012764][ T8] gspca_main: gspca_pac7302-2.14.0 probing 093a:2627 [ 119.021130][ T5869] usb 5-1: config 6 interface 120 has no altsetting 0 [ 119.040947][ T5869] usb 5-1: New USB device found, idVendor=093a, idProduct=2627, bcdDevice=5d.43 [ 119.057656][ T5869] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.070332][ T5869] usb 5-1: Product: syz [ 119.074563][ T5869] usb 5-1: Manufacturer: syz [ 119.079524][ T5869] usb 5-1: SerialNumber: syz [ 119.119524][ T5921] usb 4-1: USB disconnect, device number 3 [ 119.328222][ T5869] gspca_main: gspca_pac7302-2.14.0 probing 093a:2627 [ 120.182400][ T8] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 120.404409][ T5869] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 120.411517][ T5869] gspca_pac7302 5-1:6.120: probe with driver gspca_pac7302 failed with error -110 [ 120.556360][ T6248] block device autoloading is deprecated and will be removed. [ 121.182606][ T8] gspca_pac7302 1-1:6.120: probe with driver gspca_pac7302 failed with error -110 [ 123.028836][ T3076] usb 1-1: USB disconnect, device number 3 [ 123.308218][ T5865] usb 5-1: USB disconnect, device number 3 [ 123.437413][ T5869] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 123.598929][ T5869] usb 4-1: config 2 has an invalid interface number: 186 but max is 0 [ 123.608188][ T5869] usb 4-1: config 2 has no interface number 0 [ 123.619232][ T5869] usb 4-1: config 2 interface 186 has no altsetting 0 [ 123.699619][ T5869] usb 4-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=8c.8f [ 123.719637][ T5869] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.753015][ T5869] usb 4-1: Product: syz [ 123.774634][ T5869] usb 4-1: Manufacturer: syz [ 123.803696][ T5869] usb 4-1: SerialNumber: syz [ 123.850635][ T6277] rdma_rxe: rxe_newlink: failed to add lo [ 124.033774][ T6280] syz.4.102[6280] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.033983][ T6280] syz.4.102[6280] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.046273][ T6280] syz.4.102[6280] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.767310][ T5891] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 126.897308][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 126.910770][ T5891] usb 5-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=f3.7f [ 126.920305][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.940778][ T5891] usb 5-1: Product: syz [ 126.969370][ T5891] usb 5-1: Manufacturer: syz [ 126.974073][ T5891] usb 5-1: SerialNumber: syz [ 127.045033][ T5891] usb 5-1: config 0 descriptor?? [ 127.113309][ T5869] catc 4-1:2.186: Can't set altsetting 1. [ 127.139870][ T5869] catc 4-1:2.186: probe with driver catc failed with error -5 [ 127.399397][ T5869] usb 4-1: USB disconnect, device number 4 [ 128.039008][ T5891] usb 5-1: can't set config #0, error -71 [ 128.111378][ T5891] usb 5-1: USB disconnect, device number 4 [ 129.617320][ T5921] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 129.992414][ T5921] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 130.306384][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 130.321320][ T5921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.356931][ T5921] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 130.479276][ T5921] usb 4-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 130.533250][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.010558][ T5921] usb 4-1: config 0 descriptor?? [ 131.293232][ T6337] rdma_rxe: rxe_newlink: failed to add lo [ 131.510285][ T5921] uclogic 0003:28BD:0055.0003: interface is invalid, ignoring [ 131.985989][ T5869] usb 4-1: USB disconnect, device number 5 [ 132.827588][ T8] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 132.966676][ T6354] FAULT_INJECTION: forcing a failure. [ 132.966676][ T6354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.007559][ T8] usb 5-1: config 2 has an invalid interface number: 186 but max is 0 [ 133.024967][ T8] usb 5-1: config 2 has no interface number 0 [ 133.065223][ T8] usb 5-1: config 2 interface 186 has no altsetting 0 [ 133.067597][ T6354] CPU: 1 UID: 0 PID: 6354 Comm: syz.3.125 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 133.082732][ T6354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 133.092813][ T6354] Call Trace: [ 133.096105][ T6354] [ 133.099063][ T6354] dump_stack_lvl+0x241/0x360 [ 133.103784][ T6354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.109005][ T6354] ? __pfx__printk+0x10/0x10 [ 133.113614][ T6354] ? __pfx_lock_release+0x10/0x10 [ 133.118669][ T6354] ? rcu_is_watching+0x15/0xb0 [ 133.123477][ T6354] should_fail_ex+0x3b0/0x4e0 [ 133.128179][ T6354] _copy_from_iter+0x1e9/0x1c20 [ 133.133058][ T6354] ? alloc_pages_mpol_noprof+0x417/0x680 [ 133.138726][ T6354] ? __pfx__copy_from_iter+0x10/0x10 [ 133.144034][ T6354] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 133.150038][ T6354] ? alloc_pages_noprof+0xef/0x170 [ 133.155156][ T6354] ? page_copy_sane+0x46/0x260 [ 133.159940][ T6354] copy_page_from_iter+0x7a/0x100 [ 133.165072][ T6354] tun_get_user+0x203c/0x4890 [ 133.169783][ T6354] ? tun_get_user+0x86e/0x4890 [ 133.174567][ T6354] ? __lock_acquire+0x1397/0x2100 [ 133.179609][ T6354] ? __pfx_tun_get_user+0x10/0x10 [ 133.184662][ T6354] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 133.190142][ T6354] ? tun_get+0x1e/0x2f0 [ 133.194317][ T6354] ? __pfx_lock_release+0x10/0x10 [ 133.199460][ T6354] ? tun_get+0x1e/0x2f0 [ 133.203657][ T6354] ? tun_get+0x27d/0x2f0 [ 133.207953][ T6354] tun_chr_write_iter+0x10d/0x1f0 [ 133.213144][ T6354] vfs_write+0xaeb/0xd30 [ 133.217477][ T6354] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 133.223115][ T6354] ? __pfx_vfs_write+0x10/0x10 [ 133.227923][ T6354] ? __fget_files+0x2a/0x410 [ 133.232540][ T6354] ? __fget_files+0x2a/0x410 [ 133.237241][ T6354] ksys_write+0x18f/0x2b0 [ 133.241865][ T6354] ? __pfx_ksys_write+0x10/0x10 [ 133.246731][ T6354] ? do_syscall_64+0x100/0x230 [ 133.251520][ T6354] ? do_syscall_64+0xb6/0x230 [ 133.256238][ T6354] do_syscall_64+0xf3/0x230 [ 133.260765][ T6354] ? clear_bhb_loop+0x35/0x90 [ 133.265468][ T6354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.271410][ T6354] RIP: 0033:0x7f96469847cf [ 133.275843][ T6354] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 133.295467][ T6354] RSP: 002b:00007f964770c000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 133.303948][ T6354] RAX: ffffffffffffffda RBX: 00007f9646b75fa0 RCX: 00007f96469847cf [ 133.311936][ T6354] RDX: 000000000000002a RSI: 0000000020000640 RDI: 00000000000000c8 [ 133.320005][ T6354] RBP: 00007f964770c090 R08: 0000000000000000 R09: 0000000000000000 [ 133.327991][ T6354] R10: 000000000000002a R11: 0000000000000293 R12: 0000000000000001 [ 133.336064][ T6354] R13: 0000000000000000 R14: 00007f9646b75fa0 R15: 00007ffcd28ae878 [ 133.344064][ T6354] [ 133.347254][ C1] vkms_vblank_simulate: vblank timer overrun [ 134.007972][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.022264][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.067658][ T8] usb 5-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=8c.8f [ 134.076807][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.085873][ T8] usb 5-1: Product: syz [ 134.090438][ T8] usb 5-1: Manufacturer: syz [ 134.095086][ T8] usb 5-1: SerialNumber: syz [ 134.566732][ T5921] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 134.649472][ T5921] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.167457][ T5865] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 135.357632][ T5865] usb 4-1: Using ep0 maxpacket: 8 [ 135.392600][ T5865] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 135.406867][ T5921] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.414463][ T5921] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.422007][ T5921] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.424617][ T5865] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 135.429801][ T5921] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.448609][ T5921] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.457105][ T5921] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.465273][ T5921] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.473027][ T5921] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.480568][ T5921] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.489323][ T5921] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.491682][ T5865] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 135.496775][ T5921] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.514126][ T5921] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.521809][ T5921] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.526226][ T5865] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 135.529373][ T5921] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.529406][ T5921] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.529435][ T5921] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.545564][ T5865] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.547371][ T5921] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.547405][ T5921] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.547434][ T5921] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.547462][ T5921] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.556967][ T5865] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 135.563003][ T5921] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.575889][ T5865] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.583111][ T5921] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.583145][ T5921] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.644989][ T5921] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.653300][ T5921] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.663228][ T5921] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.682812][ T5921] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.697222][ T5921] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.737218][ T5921] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.751296][ T5921] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 136.070880][ T5921] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 136.515384][ T5865] usb 4-1: usb_control_msg returned -32 [ 136.526194][ T5865] usbtmc 4-1:16.0: can't read capabilities [ 137.320494][ T8] catc 5-1:2.186: Can't set altsetting 1. [ 137.343375][ T8] catc 5-1:2.186: probe with driver catc failed with error -5 [ 137.473029][ T8] usb 5-1: USB disconnect, device number 5 [ 138.677766][ T6393] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 138.797780][ T5867] usb 4-1: USB disconnect, device number 6 [ 143.162333][ T8] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 143.673690][ T8] usb 5-1: config 2 has an invalid interface number: 186 but max is 0 [ 143.682304][ T8] usb 5-1: config 2 has no interface number 0 [ 143.696062][ T8] usb 5-1: config 2 interface 186 has no altsetting 0 [ 143.713746][ T6442] FAULT_INJECTION: forcing a failure. [ 143.713746][ T6442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.716212][ T8] usb 5-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=8c.8f [ 143.739977][ T6442] CPU: 1 UID: 0 PID: 6442 Comm: syz.1.148 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 143.749042][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.750616][ T6442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 143.761152][ T8] usb 5-1: Product: syz [ 143.768920][ T6442] Call Trace: [ 143.768938][ T6442] [ 143.768949][ T6442] dump_stack_lvl+0x241/0x360 [ 143.768987][ T6442] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.769017][ T6442] ? __pfx__printk+0x10/0x10 [ 143.774293][ T8] usb 5-1: Manufacturer: syz [ 143.776477][ T6442] ? preempt_schedule+0xe1/0xf0 [ 143.776514][ T6442] ? __pfx_lock_release+0x10/0x10 [ 143.776541][ T6442] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 143.776571][ T6442] should_fail_ex+0x3b0/0x4e0 [ 143.788408][ T8] usb 5-1: SerialNumber: syz [ 143.789434][ T6442] _copy_from_user+0x2f/0xc0 [ 143.828637][ T6442] copy_bpf_fprog_from_user+0x167/0x450 [ 143.834235][ T6442] ? __pfx_copy_bpf_fprog_from_user+0x10/0x10 [ 143.840364][ T6442] sk_setsockopt+0x14d4/0x33b0 [ 143.845187][ T6442] ? __pfx_sk_setsockopt+0x10/0x10 [ 143.850375][ T6442] ? __pfx_lock_acquire+0x10/0x10 [ 143.855439][ T6442] ? __fget_files+0x2a/0x410 [ 143.860072][ T6442] do_sock_setsockopt+0x2fb/0x720 [ 143.865212][ T6442] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 143.870783][ T6442] ? __fget_files+0x395/0x410 [ 143.875479][ T6442] ? __fget_files+0x2a/0x410 [ 143.880092][ T6442] __x64_sys_setsockopt+0x1ee/0x280 [ 143.885320][ T6442] do_syscall_64+0xf3/0x230 [ 143.889852][ T6442] ? clear_bhb_loop+0x35/0x90 [ 143.894553][ T6442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.900479][ T6442] RIP: 0033:0x7fc99cb85d19 [ 143.904941][ T6442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.924572][ T6442] RSP: 002b:00007fc99a9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 143.933010][ T6442] RAX: ffffffffffffffda RBX: 00007fc99cd75fa0 RCX: 00007fc99cb85d19 [ 143.941001][ T6442] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003 [ 143.949007][ T6442] RBP: 00007fc99a9f6090 R08: 0000000000000010 R09: 0000000000000000 [ 143.957023][ T6442] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.965005][ T6442] R13: 0000000000000000 R14: 00007fc99cd75fa0 R15: 00007ffd0c9b52f8 [ 143.973109][ T6442] [ 144.026732][ T6445] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 145.912780][ T6461] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.154'. [ 145.930001][ T8] catc 5-1:2.186: Can't set altsetting 1. [ 145.943796][ T8] catc 5-1:2.186: probe with driver catc failed with error -5 [ 145.955001][ T6461] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.154'. [ 145.989525][ T6461] netlink: 69 bytes leftover after parsing attributes in process `syz.1.154'. [ 146.023823][ T8] usb 5-1: USB disconnect, device number 6 [ 146.362077][ T6461] input: syz0 as /devices/virtual/input/input5 [ 147.897820][ T5867] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 148.154464][ T5867] usb 3-1: device descriptor read/64, error -71 [ 148.436898][ T6481] FAULT_INJECTION: forcing a failure. [ 148.436898][ T6481] name failslab, interval 1, probability 0, space 0, times 0 [ 148.457393][ T6481] CPU: 0 UID: 0 PID: 6481 Comm: syz.0.162 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 148.468073][ T6481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 148.478248][ T6481] Call Trace: [ 148.481540][ T6481] [ 148.484492][ T6481] dump_stack_lvl+0x241/0x360 [ 148.489199][ T6481] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.494702][ T6481] ? __pfx__printk+0x10/0x10 [ 148.499316][ T6481] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 148.505305][ T6481] ? __pfx___might_resched+0x10/0x10 [ 148.510880][ T6481] should_fail_ex+0x3b0/0x4e0 [ 148.515597][ T6481] should_failslab+0xac/0x100 [ 148.520301][ T6481] kmem_cache_alloc_node_noprof+0x77/0x380 [ 148.526118][ T6481] ? __alloc_skb+0x1c3/0x440 [ 148.530726][ T6481] __alloc_skb+0x1c3/0x440 [ 148.535447][ T6481] ? __pfx___alloc_skb+0x10/0x10 [ 148.540410][ T6481] ? netlink_autobind+0xd6/0x2f0 [ 148.545362][ T6481] ? netlink_autobind+0x2b0/0x2f0 [ 148.550414][ T6481] netlink_sendmsg+0x638/0xcb0 [ 148.555205][ T6481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.560522][ T6481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.565822][ T6481] __sock_sendmsg+0x221/0x270 [ 148.570527][ T6481] ____sys_sendmsg+0x52a/0x7e0 [ 148.575336][ T6481] ? __pfx_____sys_sendmsg+0x10/0x10 [ 148.580639][ T6481] ? __fget_files+0x2a/0x410 [ 148.585242][ T6481] ? __fget_files+0x2a/0x410 [ 148.589852][ T6481] __sys_sendmsg+0x269/0x350 [ 148.594459][ T6481] ? __pfx_lock_release+0x10/0x10 [ 148.599516][ T6481] ? __pfx___sys_sendmsg+0x10/0x10 [ 148.604654][ T6481] ? __pfx_vfs_write+0x10/0x10 [ 148.609454][ T6481] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 148.615816][ T6481] ? do_syscall_64+0x100/0x230 [ 148.620693][ T6481] ? do_syscall_64+0xb6/0x230 [ 148.625397][ T6481] do_syscall_64+0xf3/0x230 [ 148.630011][ T6481] ? clear_bhb_loop+0x35/0x90 [ 148.634700][ T6481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.640613][ T6481] RIP: 0033:0x7f7acf585d19 [ 148.645041][ T6481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.664764][ T6481] RSP: 002b:00007f7ad0378038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.673296][ T6481] RAX: ffffffffffffffda RBX: 00007f7acf775fa0 RCX: 00007f7acf585d19 [ 148.681332][ T6481] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 148.689422][ T6481] RBP: 00007f7ad0378090 R08: 0000000000000000 R09: 0000000000000000 [ 148.697453][ T6481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.705453][ T6481] R13: 0000000000000000 R14: 00007f7acf775fa0 R15: 00007ffeea1f5158 [ 148.713465][ T6481] [ 148.716551][ C0] vkms_vblank_simulate: vblank timer overrun [ 148.865101][ T5867] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 149.007462][ T5867] usb 3-1: device descriptor read/64, error -71 [ 149.289243][ T6493] nbd: couldn't find a device at index 131072 [ 150.577061][ T5867] usb usb3-port1: attempt power cycle [ 151.030472][ T5867] usb usb3-port1: Cannot enable. Maybe the USB cable is bad? [ 151.226487][ T6500] FAULT_INJECTION: forcing a failure. [ 151.226487][ T6500] name failslab, interval 1, probability 0, space 0, times 0 [ 151.477671][ T6500] CPU: 1 UID: 0 PID: 6500 Comm: syz.1.167 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 151.488361][ T6500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 151.498467][ T6500] Call Trace: [ 151.501777][ T6500] [ 151.504739][ T6500] dump_stack_lvl+0x241/0x360 [ 151.509478][ T6500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.514806][ T6500] ? __pfx__printk+0x10/0x10 [ 151.519453][ T6500] ? __kmalloc_noprof+0xb5/0x4c0 [ 151.524448][ T6500] ? __pfx___might_resched+0x10/0x10 [ 151.529793][ T6500] should_fail_ex+0x3b0/0x4e0 [ 151.534522][ T6500] should_failslab+0xac/0x100 [ 151.539254][ T6500] __kmalloc_noprof+0xdd/0x4c0 [ 151.544090][ T6500] ? sock_kmalloc+0xd7/0x160 [ 151.548731][ T6500] sock_kmalloc+0xd7/0x160 [ 151.553197][ T6500] ____sys_sendmsg+0x216/0x7e0 [ 151.558015][ T6500] ? __pfx_____sys_sendmsg+0x10/0x10 [ 151.563343][ T6500] ? __fget_files+0x2a/0x410 [ 151.567983][ T6500] ? __fget_files+0x2a/0x410 [ 151.572872][ T6500] __sys_sendmmsg+0x36a/0x720 [ 151.577586][ T6500] ? __pfx___sys_sendmmsg+0x10/0x10 [ 151.582807][ T6500] ? __pfx_lock_release+0x10/0x10 [ 151.587847][ T6500] ? kstrtouint_from_user+0x128/0x190 [ 151.593341][ T6500] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 151.599258][ T6500] ? ksys_write+0x22a/0x2b0 [ 151.603789][ T6500] ? __pfx_lock_release+0x10/0x10 [ 151.608930][ T6500] ? vfs_write+0x730/0xd30 [ 151.613387][ T6500] ? __mutex_unlock_slowpath+0x21e/0x790 [ 151.619076][ T6500] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 151.625073][ T6500] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 151.631420][ T6500] ? do_syscall_64+0x100/0x230 [ 151.636215][ T6500] __x64_sys_sendmmsg+0xa0/0xb0 [ 151.641181][ T6500] do_syscall_64+0xf3/0x230 [ 151.645704][ T6500] ? clear_bhb_loop+0x35/0x90 [ 151.650393][ T6500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.656312][ T6500] RIP: 0033:0x7fc99cb85d19 [ 151.660736][ T6500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.680531][ T6500] RSP: 002b:00007fc99a9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 151.688967][ T6500] RAX: ffffffffffffffda RBX: 00007fc99cd75fa0 RCX: 00007fc99cb85d19 [ 151.696954][ T6500] RDX: 0000000000000001 RSI: 00000000200032c0 RDI: 0000000000000003 [ 151.704960][ T6500] RBP: 00007fc99a9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 151.712975][ T6500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 151.721131][ T6500] R13: 0000000000000000 R14: 00007fc99cd75fa0 R15: 00007ffd0c9b52f8 [ 151.729220][ T6500] [ 152.724565][ T6513] FAULT_INJECTION: forcing a failure. [ 152.724565][ T6513] name failslab, interval 1, probability 0, space 0, times 0 [ 152.737601][ T6513] CPU: 0 UID: 0 PID: 6513 Comm: syz.4.174 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 152.748250][ T6513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 152.758444][ T6513] Call Trace: [ 152.761756][ T6513] [ 152.764718][ T6513] dump_stack_lvl+0x241/0x360 [ 152.769454][ T6513] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.774710][ T6513] ? __pfx__printk+0x10/0x10 [ 152.779359][ T6513] ? fs_reclaim_acquire+0x93/0x130 [ 152.784527][ T6513] ? __pfx___might_resched+0x10/0x10 [ 152.789919][ T6513] ? dynamic_dname+0x141/0x1b0 [ 152.794743][ T6513] should_fail_ex+0x3b0/0x4e0 [ 152.799513][ T6513] should_failslab+0xac/0x100 [ 152.804261][ T6513] __kmalloc_noprof+0xdd/0x4c0 [ 152.809087][ T6513] ? tomoyo_encode+0x26f/0x540 [ 152.813916][ T6513] tomoyo_encode+0x26f/0x540 [ 152.818644][ T6513] ? __pfx_anon_inodefs_dname+0x10/0x10 [ 152.824216][ T6513] tomoyo_realpath_from_path+0x59e/0x5e0 [ 152.829884][ T6513] tomoyo_path_number_perm+0x236/0x860 [ 152.835360][ T6513] ? __lock_acquire+0x1397/0x2100 [ 152.840523][ T6513] ? tomoyo_path_number_perm+0x206/0x860 [ 152.846169][ T6513] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 152.852210][ T6513] ? __fget_files+0x2a/0x410 [ 152.856854][ T6513] ? __fget_files+0x2a/0x410 [ 152.861466][ T6513] security_file_ioctl+0xc6/0x2a0 [ 152.866515][ T6513] __se_sys_ioctl+0x46/0x170 [ 152.871129][ T6513] do_syscall_64+0xf3/0x230 [ 152.875852][ T6513] ? clear_bhb_loop+0x35/0x90 [ 152.880626][ T6513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.886539][ T6513] RIP: 0033:0x7f497af85d19 [ 152.890984][ T6513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.910625][ T6513] RSP: 002b:00007f497bd6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 152.919058][ T6513] RAX: ffffffffffffffda RBX: 00007f497b175fa0 RCX: 00007f497af85d19 [ 152.927139][ T6513] RDX: 0000000020000080 RSI: 000000004008ae89 RDI: 0000000000000005 [ 152.935135][ T6513] RBP: 00007f497bd6c090 R08: 0000000000000000 R09: 0000000000000000 [ 152.943121][ T6513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 152.951107][ T6513] R13: 0000000000000000 R14: 00007f497b175fa0 R15: 00007ffde315f168 [ 152.959130][ T6513] [ 153.847456][ T6513] ERROR: Out of memory at tomoyo_realpath_from_path. [ 153.969548][ T6524] netlink: 'syz.3.175': attribute type 17 has an invalid length. [ 154.705680][ T6527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 156.387274][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 156.718367][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 156.920914][ T8] usb 5-1: config 6 has an invalid interface number: 120 but max is 0 [ 156.938328][ T8] usb 5-1: config 6 has no interface number 0 [ 156.996364][ T8] usb 5-1: config 6 interface 120 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 157.193107][ T8] usb 5-1: config 6 interface 120 has no altsetting 0 [ 157.270584][ T8] usb 5-1: New USB device found, idVendor=093a, idProduct=2627, bcdDevice=5d.43 [ 157.462033][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.526887][ T8] usb 5-1: Product: syz [ 157.542304][ T8] usb 5-1: Manufacturer: syz [ 157.576101][ T8] usb 5-1: SerialNumber: syz [ 158.025207][ T8] gspca_main: gspca_pac7302-2.14.0 probing 093a:2627 [ 160.449838][ T8] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 160.460432][ T8] gspca_pac7302 5-1:6.120: probe with driver gspca_pac7302 failed with error -110 [ 161.975528][ T5869] usb 5-1: USB disconnect, device number 7 [ 162.464217][ T6597] syz0: rxe_newlink: already configured on lo [ 167.044523][ T6621] netlink: 20 bytes leftover after parsing attributes in process `syz.3.201'. [ 167.128291][ T6622] capability: warning: `syz.3.201' uses 32-bit capabilities (legacy support in use) [ 167.592199][ T6616] delete_channel: no stack [ 167.600308][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 167.939115][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 167.973168][ T8] usb 2-1: config 6 has an invalid interface number: 120 but max is 0 [ 168.004188][ T8] usb 2-1: config 6 has no interface number 0 [ 168.017265][ T8] usb 2-1: config 6 interface 120 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 168.030895][ T8] usb 2-1: config 6 interface 120 has no altsetting 0 [ 168.048015][ T8] usb 2-1: New USB device found, idVendor=093a, idProduct=2627, bcdDevice=5d.43 [ 168.057420][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.066511][ T8] usb 2-1: Product: syz [ 168.071200][ T8] usb 2-1: Manufacturer: syz [ 168.077936][ T8] usb 2-1: SerialNumber: syz [ 169.299021][ T5891] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 169.892298][ T5891] usb 3-1: Using ep0 maxpacket: 8 [ 169.909503][ T5891] usb 3-1: config 6 has an invalid interface number: 120 but max is 0 [ 169.976724][ T5891] usb 3-1: config 6 has no interface number 0 [ 170.018213][ T6638] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 170.551782][ T5891] usb 3-1: config 6 interface 120 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 170.564611][ T5891] usb 3-1: config 6 interface 120 has no altsetting 0 [ 170.598441][ T5891] usb 3-1: New USB device found, idVendor=093a, idProduct=2627, bcdDevice=5d.43 [ 170.612144][ T5891] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.624568][ T5891] usb 3-1: Product: syz [ 170.639465][ T5891] usb 3-1: Manufacturer: syz [ 170.658025][ T5891] usb 3-1: SerialNumber: syz [ 170.908027][ T5891] gspca_main: gspca_pac7302-2.14.0 probing 093a:2627 [ 170.965407][ T8] gspca_main: gspca_pac7302-2.14.0 probing 093a:2627 [ 171.050555][ T8] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 171.072567][ T8] gspca_pac7302 2-1:6.120: probe with driver gspca_pac7302 failed with error -71 [ 171.101685][ T8] usb 2-1: USB disconnect, device number 5 [ 171.446190][ T5891] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 171.458505][ T5891] gspca_pac7302 3-1:6.120: probe with driver gspca_pac7302 failed with error -110 [ 172.174632][ T5853] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 172.182152][ T5853] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 172.189729][ T5853] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 172.197317][ T5853] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 172.204846][ T5853] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 172.212677][ T5853] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 172.412137][ T5853] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 172.419979][ T5853] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 172.428088][ T5853] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 172.435723][ T5853] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 172.443533][ T5853] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 172.451168][ T5853] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 172.458942][ T5853] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 172.466591][ T5853] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 172.474281][ T5853] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 172.481964][ T5853] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 172.489717][ T5853] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 172.497494][ T5853] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 172.505464][ T5853] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 172.513643][ T5853] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 172.521772][ T5853] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 172.529477][ T5853] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 172.537223][ T5853] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 172.544893][ T5853] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 172.552596][ T5853] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 172.560242][ T5853] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 172.567890][ T5853] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 172.575496][ T5853] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 172.583309][ T5853] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 172.590982][ T5853] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 172.598836][ T5853] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 172.606457][ T5853] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 172.697933][ T5853] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 172.993846][ T6646] input: syz0 as /devices/virtual/input/input6 [ 173.218820][ T8] usb 3-1: USB disconnect, device number 9 [ 175.343068][ T6668] evm: overlay not supported [ 179.257294][ T5853] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 179.436605][ T5853] usb 2-1: not running at top speed; connect to a high speed hub [ 179.463814][ T5853] usb 2-1: config 5 has an invalid interface number: 254 but max is 2 [ 179.551017][ T5853] usb 2-1: config 5 has an invalid interface number: 236 but max is 2 [ 179.953341][ T5853] usb 2-1: config 5 has an invalid interface number: 250 but max is 2 [ 179.969282][ T5853] usb 2-1: config 5 has no interface number 0 [ 180.534929][ T5853] usb 2-1: config 5 has no interface number 1 [ 180.541325][ T5853] usb 2-1: config 5 has no interface number 2 [ 180.547629][ T5853] usb 2-1: config 5 interface 254 altsetting 4 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 180.558793][ T5853] usb 2-1: config 5 interface 254 altsetting 4 endpoint 0x8 has an invalid bInterval 122, changing to 4 [ 180.570176][ T5853] usb 2-1: config 5 interface 254 altsetting 4 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 180.581170][ T5853] usb 2-1: config 5 interface 254 altsetting 4 has a duplicate endpoint with address 0x4, skipping [ 180.591977][ T5853] usb 2-1: config 5 interface 254 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 180.603415][ T5853] usb 2-1: config 5 interface 254 altsetting 4 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 180.614732][ T5853] usb 2-1: config 5 interface 254 altsetting 4 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 180.626212][ T5853] usb 2-1: config 5 interface 254 altsetting 4 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 180.637525][ T5853] usb 2-1: config 5 interface 254 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 180.648479][ T5853] usb 2-1: config 5 interface 254 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 180.659234][ T5853] usb 2-1: config 5 interface 254 altsetting 4 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 180.670261][ T5853] usb 2-1: config 5 interface 254 altsetting 4 has an endpoint descriptor with address 0x67, changing to 0x7 [ 180.682240][ T5853] usb 2-1: config 5 interface 254 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 180.693168][ T5853] usb 2-1: config 5 interface 254 altsetting 4 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 180.707457][ T5853] usb 2-1: config 5 interface 236 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 180.718796][ T5853] usb 2-1: config 5 interface 236 altsetting 7 endpoint 0x2 has invalid maxpacket 528, setting to 64 [ 180.729964][ T5853] usb 2-1: config 5 interface 236 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 180.740837][ T5853] usb 2-1: config 5 interface 236 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 180.752479][ T5853] usb 2-1: config 5 interface 236 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 180.763731][ T5853] usb 2-1: config 5 interface 236 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 180.774670][ T5853] usb 2-1: config 5 interface 236 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 180.785833][ T5853] usb 2-1: config 5 interface 236 altsetting 7 endpoint 0xE has invalid maxpacket 1024, setting to 1023 [ 180.797987][ T5853] usb 2-1: config 5 interface 250 altsetting 15 has a duplicate endpoint with address 0x4, skipping [ 180.815338][ T5853] usb 2-1: config 5 interface 250 altsetting 15 has a duplicate endpoint with address 0x8, skipping [ 180.827293][ T5853] usb 2-1: config 5 interface 250 altsetting 15 has a duplicate endpoint with address 0xF, skipping [ 180.838200][ T5853] usb 2-1: config 5 interface 250 altsetting 15 has a duplicate endpoint with address 0x2, skipping [ 180.850118][ T5853] usb 2-1: config 5 interface 250 altsetting 15 has a duplicate endpoint with address 0x6, skipping [ 180.861812][ T5853] usb 2-1: config 5 interface 250 altsetting 15 has a duplicate endpoint with address 0x2, skipping [ 180.874375][ T5853] usb 2-1: config 5 interface 250 altsetting 15 has a duplicate endpoint with address 0x2, skipping [ 180.885989][ T5853] usb 2-1: config 5 interface 250 altsetting 15 has a duplicate endpoint with address 0x83, skipping [ 180.897329][ T5853] usb 2-1: config 5 interface 250 altsetting 15 has a duplicate endpoint with address 0x82, skipping [ 180.909534][ T5853] usb 2-1: config 5 interface 250 altsetting 15 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 180.922172][ T5853] usb 2-1: config 5 interface 250 altsetting 15 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 180.933762][ T5853] usb 2-1: config 5 interface 250 altsetting 15 has a duplicate endpoint with address 0xB, skipping [ 180.944853][ T5853] usb 2-1: config 5 interface 250 altsetting 15 has a duplicate endpoint with address 0x9, skipping [ 180.957744][ T5853] usb 2-1: config 5 interface 250 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 180.969597][ T5853] usb 2-1: config 5 interface 250 altsetting 15 has a duplicate endpoint with address 0xC, skipping [ 180.980910][ T5853] usb 2-1: config 5 interface 250 altsetting 15 has a duplicate endpoint with address 0xB, skipping [ 180.992021][ T5853] usb 2-1: config 5 interface 250 altsetting 15 has a duplicate endpoint with address 0xC, skipping [ 181.002976][ T5853] usb 2-1: config 5 interface 250 altsetting 15 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 181.017503][ T5853] usb 2-1: config 5 interface 254 has no altsetting 0 [ 181.024454][ T5853] usb 2-1: config 5 interface 236 has no altsetting 0 [ 181.031452][ T5853] usb 2-1: config 5 interface 250 has no altsetting 0 [ 181.170986][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 181.185589][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 181.217826][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 181.251343][ T5853] usb 2-1: string descriptor 0 read error: -71 [ 181.258157][ T5853] usb 2-1: New USB device found, idVendor=045e, idProduct=0454, bcdDevice=75.6b [ 181.267537][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 181.275329][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 181.283483][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 181.292976][ T5853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.343401][ T5853] usb 2-1: can't set config #5, error -71 [ 181.355617][ T5853] usb 2-1: USB disconnect, device number 6 [ 181.456358][ T6710] lo speed is unknown, defaulting to 1000 [ 181.842607][ T6719] IPv6: Can't replace route, no match found [ 182.646256][ T6710] chnl_net:caif_netlink_parms(): no params data found [ 182.805301][ T6735] ======================================================= [ 182.805301][ T6735] WARNING: The mand mount option has been deprecated and [ 182.805301][ T6735] and is ignored by this kernel. Remove the mand [ 182.805301][ T6735] option from the mount to silence this warning. [ 182.805301][ T6735] ======================================================= [ 182.840687][ C0] vkms_vblank_simulate: vblank timer overrun [ 182.862334][ T5853] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 183.011269][ T6710] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.018730][ T6710] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.026202][ T6710] bridge_slave_0: entered allmulticast mode [ 183.035744][ T5853] usb 4-1: New USB device found, idVendor=8086, idProduct=0630, bcdDevice=83.b4 [ 183.045466][ T5853] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.054187][ T5853] usb 4-1: Product: syz [ 183.058847][ T5853] usb 4-1: Manufacturer: syz [ 183.064027][ T5853] usb 4-1: SerialNumber: syz [ 183.085578][ T6710] bridge_slave_0: entered promiscuous mode [ 183.086821][ T5853] usb 4-1: config 0 descriptor?? [ 183.093670][ T6710] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.107521][ T6710] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.114939][ T6710] bridge_slave_1: entered allmulticast mode [ 183.139232][ T6710] bridge_slave_1: entered promiscuous mode [ 183.260417][ T6710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.301671][ T6710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.324192][ T5853] gspca_main: spca500-2.14.0 probing 8086:0630 [ 183.407411][ T5821] Bluetooth: hci5: command tx timeout [ 183.489766][ T6710] team0: Port device team_slave_0 added [ 183.498791][ T6710] team0: Port device team_slave_1 added [ 183.539865][ T5853] usb 4-1: USB disconnect, device number 7 [ 183.621139][ T6710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.628723][ T6710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.654618][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.694571][ T6710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.772424][ T6710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.781386][ T6710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.807544][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.815959][ T6710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.932676][ T6710] hsr_slave_0: entered promiscuous mode [ 183.945205][ T6710] hsr_slave_1: entered promiscuous mode [ 183.954607][ T6710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.966877][ T6710] Cannot create hsr debugfs directory [ 185.432627][ T5821] Bluetooth: hci5: command tx timeout [ 186.261853][ T6710] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 186.611731][ T6772] FAULT_INJECTION: forcing a failure. [ 186.611731][ T6772] name failslab, interval 1, probability 0, space 0, times 0 [ 186.633306][ T6772] CPU: 0 UID: 0 PID: 6772 Comm: syz.0.244 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 186.643979][ T6772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 186.654433][ T6772] Call Trace: [ 186.657755][ T6772] [ 186.660755][ T6772] dump_stack_lvl+0x241/0x360 [ 186.665720][ T6772] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.670976][ T6772] ? __pfx__printk+0x10/0x10 [ 186.675977][ T6772] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 186.682295][ T6772] ? __pfx___might_resched+0x10/0x10 [ 186.687835][ T6772] should_fail_ex+0x3b0/0x4e0 [ 186.692825][ T6772] should_failslab+0xac/0x100 [ 186.697605][ T6772] kmem_cache_alloc_node_noprof+0x77/0x380 [ 186.703599][ T6772] ? __alloc_skb+0x1c3/0x440 [ 186.708275][ T6772] __alloc_skb+0x1c3/0x440 [ 186.712955][ T6772] ? __pfx___alloc_skb+0x10/0x10 [ 186.718586][ T6772] ? netlink_autobind+0xd6/0x2f0 [ 186.723845][ T6772] ? netlink_autobind+0x2b0/0x2f0 [ 186.729044][ T6772] netlink_sendmsg+0x638/0xcb0 [ 186.735005][ T6772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.740712][ T6772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 186.746059][ T6772] __sock_sendmsg+0x221/0x270 [ 186.751160][ T6772] ____sys_sendmsg+0x52a/0x7e0 [ 186.755983][ T6772] ? __pfx_____sys_sendmsg+0x10/0x10 [ 186.762277][ T6772] ? __fget_files+0x2a/0x410 [ 186.767090][ T6772] ? __fget_files+0x2a/0x410 [ 186.772179][ T6772] __sys_sendmsg+0x269/0x350 [ 186.776925][ T6772] ? __pfx_lock_release+0x10/0x10 [ 186.782026][ T6772] ? __pfx___sys_sendmsg+0x10/0x10 [ 186.787214][ T6772] ? __pfx_vfs_write+0x10/0x10 [ 186.792081][ T6772] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 186.798474][ T6772] ? do_syscall_64+0x100/0x230 [ 186.803437][ T6772] ? do_syscall_64+0xb6/0x230 [ 186.808179][ T6772] do_syscall_64+0xf3/0x230 [ 186.812827][ T6772] ? clear_bhb_loop+0x35/0x90 [ 186.817573][ T6772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.823701][ T6772] RIP: 0033:0x7f7acf585d19 [ 186.828171][ T6772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.848265][ T6772] RSP: 002b:00007f7ad0378038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.856956][ T6772] RAX: ffffffffffffffda RBX: 00007f7acf775fa0 RCX: 00007f7acf585d19 [ 186.865148][ T6772] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000003 [ 186.873361][ T6772] RBP: 00007f7ad0378090 R08: 0000000000000000 R09: 0000000000000000 [ 186.881969][ T6772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.890051][ T6772] R13: 0000000000000000 R14: 00007f7acf775fa0 R15: 00007ffeea1f5158 [ 186.898044][ T6772] [ 186.901251][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.241624][ T4157] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.813882][ T5821] Bluetooth: hci5: command tx timeout [ 187.877883][ T6710] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 187.958098][ T6710] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 188.854055][ T6710] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 188.924255][ T4157] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.080120][ T4157] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.149491][ T6710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.167060][ T6710] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.206670][ T6710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 189.217364][ T6710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 189.259637][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.266887][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.321492][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.329052][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.575805][ T4157] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.827486][ T5821] Bluetooth: hci5: command tx timeout [ 190.469357][ T6808] syz.1.252[6808] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.469463][ T6808] syz.1.252[6808] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.524397][ T6710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.580537][ T6808] syz.1.252[6808] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.656813][ T4157] bridge_slave_1: left allmulticast mode [ 190.703690][ T4157] bridge_slave_1: left promiscuous mode [ 190.735143][ T4157] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.836607][ T4157] bridge_slave_0: left allmulticast mode [ 190.867574][ T4157] bridge_slave_0: left promiscuous mode [ 190.897539][ T4157] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.074119][ T6827] rdma_rxe: rxe_newlink: failed to add lo [ 191.397344][ T5891] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 191.489334][ T6833] nbd: couldn't find a device at index 131072 [ 191.551043][ T5891] usb 2-1: Using ep0 maxpacket: 16 [ 191.615803][ T5891] usb 2-1: New USB device found, idVendor=0456, idProduct=f000, bcdDevice=f3.7f [ 191.625825][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.652337][ T5891] usb 2-1: Product: syz [ 191.708428][ T5891] usb 2-1: Manufacturer: syz [ 191.713138][ T5891] usb 2-1: SerialNumber: syz [ 191.731862][ T5891] usb 2-1: config 0 descriptor?? [ 191.742152][ T5891] ftdi_sio 2-1:0.0: Ignoring interface reserved for JTAG [ 193.757484][ T5891] usb 2-1: USB disconnect, device number 7 [ 194.554109][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.613348][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.582473][ T4157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.615538][ T4157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.654561][ T4157] bond0 (unregistering): Released all slaves [ 197.757578][ T6877] lo speed is unknown, defaulting to 1000 [ 197.817059][ T6710] veth0_vlan: entered promiscuous mode [ 197.867096][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.268'. [ 197.884440][ T6710] veth1_vlan: entered promiscuous mode [ 198.098168][ T6710] veth0_macvtap: entered promiscuous mode [ 198.134179][ T6710] veth1_macvtap: entered promiscuous mode [ 198.229491][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.280096][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.311468][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.346872][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.367508][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.393740][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.432462][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.456419][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.487334][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.557585][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.572075][ T6710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.598609][ T6894] rdma_rxe: rxe_newlink: failed to add lo [ 198.896197][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.837211][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.877343][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.940817][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.074178][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.105902][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.336626][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.418596][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.461257][ T6710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.660938][ T6710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.676882][ T6710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.763057][ T4157] hsr_slave_0: left promiscuous mode [ 200.769937][ T4157] hsr_slave_1: left promiscuous mode [ 200.787593][ T4157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.796694][ T4157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.813417][ T4157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.825313][ T4157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.906520][ T4157] veth1_macvtap: left promiscuous mode [ 200.915407][ T4157] veth0_macvtap: left promiscuous mode [ 200.925022][ T4157] veth1_vlan: left promiscuous mode [ 200.944502][ T4157] veth0_vlan: left promiscuous mode [ 201.056198][ T6916] syz.3.270 (6916): drop_caches: 2 [ 202.329466][ T5869] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 202.393838][ T4157] team0 (unregistering): Port device team_slave_1 removed [ 202.445564][ T4157] team0 (unregistering): Port device team_slave_0 removed [ 202.520648][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 202.531987][ T5869] usb 1-1: config 6 has an invalid interface number: 120 but max is 0 [ 202.547249][ T5869] usb 1-1: config 6 has no interface number 0 [ 202.561812][ T5869] usb 1-1: config 6 interface 120 altsetting 3 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 202.573281][ T5869] usb 1-1: config 6 interface 120 has no altsetting 0 [ 202.583595][ T5869] usb 1-1: New USB device found, idVendor=093a, idProduct=2627, bcdDevice=5d.43 [ 202.595302][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.603464][ T5869] usb 1-1: Product: syz [ 202.607915][ T5869] usb 1-1: Manufacturer: syz [ 202.612571][ T5869] usb 1-1: SerialNumber: syz [ 203.120727][ T6710] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.129855][ T6710] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.139994][ T6710] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.149068][ T6710] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.370838][ T6942] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 205.388467][ T5869] gspca_main: gspca_pac7302-2.14.0 probing 093a:2627 [ 205.486663][ T5869] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 205.547680][ T5869] gspca_pac7302 1-1:6.120: probe with driver gspca_pac7302 failed with error -71 [ 205.932855][ T5869] usb 1-1: USB disconnect, device number 4 [ 206.881341][ T6967] loop5: detected capacity change from 0 to 7 [ 206.891557][ T6967] Buffer I/O error on dev loop5, logical block 0, async page read [ 206.900719][ T6967] Buffer I/O error on dev loop5, logical block 0, async page read [ 206.908879][ T6967] Buffer I/O error on dev loop5, logical block 0, async page read [ 206.916839][ T6967] Buffer I/O error on dev loop5, logical block 0, async page read [ 206.926047][ T6967] Buffer I/O error on dev loop5, logical block 0, async page read [ 206.934565][ T6967] Buffer I/O error on dev loop5, logical block 0, async page read [ 206.942622][ T6967] Buffer I/O error on dev loop5, logical block 0, async page read [ 206.952571][ T6967] ldm_validate_partition_table(): Disk read failed. [ 206.959586][ T6967] Buffer I/O error on dev loop5, logical block 0, async page read [ 206.967749][ T6967] Buffer I/O error on dev loop5, logical block 0, async page read [ 206.975820][ T6967] Buffer I/O error on dev loop5, logical block 0, async page read [ 206.984294][ T6967] Dev loop5: unable to read RDB block 0 [ 206.990418][ T6967] loop5: unable to read partition table [ 206.996398][ T6967] loop5: partition table beyond EOD, truncated [ 207.002749][ T6967] loop_reread_partitions: partition scan of loop5 (被xڬdƤݡ [ 207.002749][ T6967] ) failed (rc=-5) [ 207.017593][ T6950] Bluetooth: hci2: command 0x0406 tx timeout [ 207.018823][ T5826] Bluetooth: hci0: command 0x0406 tx timeout [ 207.024389][ T6950] Bluetooth: hci3: command 0x0406 tx timeout [ 207.024441][ T6950] Bluetooth: hci1: command 0x0406 tx timeout [ 207.205661][ T5891] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 207.261703][ T5975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.306674][ T5975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.314604][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.323712][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.371395][ T5891] usb 2-1: config 2 has an invalid interface number: 186 but max is 0 [ 207.381055][ T5891] usb 2-1: config 2 has no interface number 0 [ 207.401570][ T5891] usb 2-1: config 2 interface 186 has no altsetting 0 [ 207.421642][ T5891] usb 2-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=8c.8f [ 207.446316][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.506008][ T5891] usb 2-1: Product: syz [ 207.510436][ T5891] usb 2-1: Manufacturer: syz [ 207.515084][ T5891] usb 2-1: SerialNumber: syz [ 207.599052][ T8] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 209.719382][ T5891] catc 2-1:2.186: Can't set altsetting 1. [ 209.725341][ T5891] catc 2-1:2.186: probe with driver catc failed with error -5 [ 209.745009][ T8] usb 4-1: config 0 has an invalid descriptor of length 84, skipping remainder of the config [ 209.756048][ T5891] usb 2-1: USB disconnect, device number 8 [ 209.763915][ T8] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 209.817760][ T6992] futex_wake_op: syz.5.282 tries to shift op by -1; fix this program [ 209.853834][ T6992] futex_wake_op: syz.5.282 tries to shift op by -1; fix this program [ 209.930067][ T6992] futex_wake_op: syz.5.282 tries to shift op by -1; fix this program [ 209.990349][ T6992] futex_wake_op: syz.5.282 tries to shift op by -1; fix this program [ 210.068716][ T6992] futex_wake_op: syz.5.282 tries to shift op by -1; fix this program [ 210.127455][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 210.138688][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 210.148875][ T6992] futex_wake_op: syz.5.282 tries to shift op by -1; fix this program [ 210.150299][ T8] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 210.170144][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 43354, setting to 64 [ 210.181553][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 210.349535][ T6992] futex_wake_op: syz.5.282 tries to shift op by -1; fix this program [ 210.537347][ T6992] futex_wake_op: syz.5.282 tries to shift op by -1; fix this program [ 210.545640][ T6992] futex_wake_op: syz.5.282 tries to shift op by -1; fix this program [ 210.576312][ T6992] futex_wake_op: syz.5.282 tries to shift op by -1; fix this program [ 211.332687][ T8] usb 4-1: string descriptor 0 read error: -71 [ 211.339128][ T8] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 211.348813][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=8 [ 211.365818][ T8] usb 4-1: config 0 descriptor?? [ 211.373332][ T8] usb 4-1: can't set config #0, error -71 [ 211.397334][ T8] usb 4-1: USB disconnect, device number 8 [ 212.037970][ T5891] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 212.297261][ T3076] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 212.447285][ T5891] usb 2-1: Using ep0 maxpacket: 16 [ 212.452119][ T3076] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 212.455196][ T5891] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.480310][ T5891] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.495765][ T5891] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 212.509189][ T5891] usb 2-1: config 0 interface 0 has no altsetting 0 [ 212.516130][ T5891] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 212.525644][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.220635][ T3076] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 213.278441][ T3076] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 213.287681][ T3076] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.295782][ T3076] usb 6-1: Product: syz [ 213.300121][ T3076] usb 6-1: Manufacturer: syz [ 213.306979][ T3076] usb 6-1: SerialNumber: syz [ 213.336640][ T5891] usb 2-1: config 0 descriptor?? [ 213.349794][ T3076] cdc_ncm 6-1:1.0: skipping garbage [ 213.379358][ T5891] usb 2-1: can't set config #0, error -71 [ 213.608371][ T5891] usb 2-1: USB disconnect, device number 9 [ 214.258075][ T7039] binder: 7032:7039 ioctl c0306216 20000300 returned -22 [ 216.184697][ T7011] process 'syz.5.288' launched './file1' with NULL argv: empty string added [ 216.478717][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 217.377468][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 217.509390][ T3076] cdc_ncm 6-1:1.0: bind() failure [ 217.533681][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 217.570103][ T8] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 217.586968][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.630055][ T3076] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71 [ 217.645696][ T8] usb 4-1: Product: syz [ 217.652472][ T3076] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71 [ 217.692104][ T8] usb 4-1: Manufacturer: syz [ 217.743724][ T8] usb 4-1: SerialNumber: syz [ 217.747505][ T3076] usbtest 6-1:1.1: probe with driver usbtest failed with error -71 [ 217.823300][ T8] usb 4-1: config 0 descriptor?? [ 218.004007][ T3076] usb 6-1: USB disconnect, device number 2 [ 218.048705][ T8] hub 4-1:0.0: bad descriptor, ignoring hub [ 218.064216][ T8] hub 4-1:0.0: probe with driver hub failed with error -5 [ 218.769242][ T8] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7 [ 219.211517][ T8] input: failed to attach handler mousedev to device input7, error: -5 [ 219.400398][ T29] audit: type=1326 audit(1734419729.995:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7105 comm="syz.1.305" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc99cb85d19 code=0x0 [ 219.433281][ T8] usb 4-1: USB disconnect, device number 9 [ 219.557459][ T3076] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 219.729765][ T3076] usb 1-1: config 2 has an invalid interface number: 186 but max is 0 [ 219.748856][ T7114] x_tables: duplicate underflow at hook 1 [ 219.759487][ T3076] usb 1-1: config 2 has no interface number 0 [ 219.796823][ T3076] usb 1-1: config 2 interface 186 has no altsetting 0 [ 219.808323][ T3076] usb 1-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=8c.8f [ 219.818013][ T3076] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.837748][ T3076] usb 1-1: Product: syz [ 219.851178][ T3076] usb 1-1: Manufacturer: syz [ 219.868527][ T3076] usb 1-1: SerialNumber: syz [ 222.178008][ T972] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 222.353322][ T972] usb 2-1: Using ep0 maxpacket: 8 [ 222.394142][ T972] usb 2-1: config 6 has an invalid interface number: 120 but max is 0 [ 222.423162][ T972] usb 2-1: config 6 has no interface number 0 [ 222.453780][ T972] usb 2-1: config 6 interface 120 has no altsetting 0 [ 222.490312][ T972] usb 2-1: New USB device found, idVendor=093a, idProduct=2627, bcdDevice=5d.43 [ 222.501409][ T972] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.543215][ T972] usb 2-1: Product: syz [ 222.582292][ T972] usb 2-1: Manufacturer: syz [ 222.600455][ T972] usb 2-1: SerialNumber: syz [ 222.696852][ T7141] rdma_rxe: rxe_newlink: failed to add lo [ 222.767424][ T5867] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 222.840191][ T972] gspca_main: gspca_pac7302-2.14.0 probing 093a:2627 [ 222.974237][ T5867] usb 6-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 223.009920][ T5867] usb 6-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 223.327793][ T5867] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 223.336950][ T5867] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.216662][ T5867] usb 6-1: string descriptor 0 read error: -71 [ 224.231786][ T5867] aiptek 6-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 224.284959][ T5867] usb 6-1: USB disconnect, device number 3 [ 224.577585][ T972] gspca_pac7302: reg_w() failed i: 78 v: 00 error -110 [ 224.584611][ T972] gspca_pac7302 2-1:6.120: probe with driver gspca_pac7302 failed with error -110 [ 225.213237][ T972] usb 2-1: USB disconnect, device number 10 [ 226.149753][ T3076] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.0-1, 00:00:00:00:00:00. [ 226.260080][ T7165] team0: Device vlan0 is up. Set it down before adding it as a team port [ 226.422538][ T5891] usb 1-1: USB disconnect, device number 5 [ 226.834737][ T7172] fuse: Unknown parameter 'group_id?00000000000000000000' [ 226.857318][ T7172] loop9: detected capacity change from 0 to 7 [ 226.870145][ T7172] Dev loop9: unable to read RDB block 7 [ 226.876112][ T7172] loop9: unable to read partition table [ 226.885721][ T7172] loop9: partition table beyond EOD, truncated [ 226.892775][ T5869] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 226.929643][ T7172] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 226.929643][ T7172] ) failed (rc=-5) [ 227.073439][ T5869] usb 3-1: Using ep0 maxpacket: 8 [ 227.116471][ T5869] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 227.148487][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.173074][ T5869] usb 3-1: Product: syz [ 227.183199][ T5869] usb 3-1: Manufacturer: syz [ 227.197247][ T5869] usb 3-1: SerialNumber: syz [ 227.222480][ T5869] usb 3-1: config 0 descriptor?? [ 227.463122][ T5869] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 228.588607][ T7200] 9pnet_fd: Insufficient options for proto=fd [ 228.787458][ T54] Bluetooth: hci5: command tx timeout [ 228.878318][ T7205] netlink: 'syz.0.321': attribute type 17 has an invalid length. [ 228.900023][ T7200] netlink: 'syz.3.323': attribute type 21 has an invalid length. [ 228.908896][ T7200] netlink: 156 bytes leftover after parsing attributes in process `syz.3.323'. [ 229.295091][ T7210] netlink: 'syz.3.323': attribute type 21 has an invalid length. [ 229.359026][ T7210] netlink: 156 bytes leftover after parsing attributes in process `syz.3.323'. [ 229.382264][ T5869] gspca_sonixj: reg_w1 err -110 [ 229.843754][ T5869] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 230.459511][ T8] usb 3-1: USB disconnect, device number 10 [ 230.727517][ T5891] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 231.817288][ T8] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 231.854081][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.332'. [ 231.864455][ T7240] lo speed is unknown, defaulting to 1000 [ 231.922425][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.332'. [ 231.989181][ T8] usb 3-1: config 2 has an invalid interface number: 186 but max is 0 [ 231.997884][ T8] usb 3-1: config 2 has no interface number 0 [ 232.004385][ T8] usb 3-1: config 2 interface 186 has no altsetting 0 [ 232.085073][ T8] usb 3-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=8c.8f [ 232.135867][ T7252] tc_dump_action: action bad kind [ 232.330963][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.339863][ T8] usb 3-1: Product: syz [ 232.344099][ T8] usb 3-1: Manufacturer: syz [ 232.349005][ T8] usb 3-1: SerialNumber: syz [ 233.595601][ T7261] netlink: 'syz.3.334': attribute type 1 has an invalid length. [ 233.681008][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.338'. [ 235.698417][ T7295] netlink: 52 bytes leftover after parsing attributes in process `syz.5.344'. [ 235.752185][ T7295] netlink: 84 bytes leftover after parsing attributes in process `syz.5.344'. [ 235.786915][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.025700][ T8] catc 3-1:2.186: Can't set altsetting 1. [ 236.037330][ T8] catc 3-1:2.186: probe with driver catc failed with error -5 [ 236.084072][ T8] usb 3-1: USB disconnect, device number 11 [ 236.278611][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.347'. [ 236.323030][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.720658][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.744929][ T7316] nbd: couldn't find a device at index 131072 [ 236.859892][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.392887][ T12] bridge_slave_1: left allmulticast mode [ 237.455345][ T12] bridge_slave_1: left promiscuous mode [ 237.481827][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.536100][ T12] bridge_slave_0: left allmulticast mode [ 237.581532][ T12] bridge_slave_0: left promiscuous mode [ 237.621601][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.423246][ T12] batman_adv: batadv0: Removing interface: gretap1 [ 240.926274][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.941886][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.960682][ T12] bond0 (unregistering): Released all slaves [ 242.461922][ T7385] FAULT_INJECTION: forcing a failure. [ 242.461922][ T7385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.651377][ T7385] CPU: 1 UID: 0 PID: 7385 Comm: syz.2.362 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 242.662160][ T7385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 242.672446][ T7385] Call Trace: [ 242.675777][ T7385] [ 242.678754][ T7385] dump_stack_lvl+0x241/0x360 [ 242.683525][ T7385] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.688812][ T7385] ? __pfx__printk+0x10/0x10 [ 242.693439][ T7385] ? snprintf+0xda/0x120 [ 242.697712][ T7385] should_fail_ex+0x3b0/0x4e0 [ 242.702408][ T7385] _copy_to_user+0x31/0xb0 [ 242.706851][ T7385] simple_read_from_buffer+0xca/0x150 [ 242.712269][ T7385] proc_fail_nth_read+0x1e9/0x250 [ 242.717523][ T7385] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 242.723190][ T7385] ? rw_verify_area+0x55e/0x6f0 [ 242.728233][ T7385] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 242.734538][ T7385] vfs_read+0x1fc/0xb70 [ 242.738834][ T7385] ? __pfx___mutex_lock+0x10/0x10 [ 242.743895][ T7385] ? __pfx_vfs_read+0x10/0x10 [ 242.748714][ T7385] ? __fget_files+0x2a/0x410 [ 242.753335][ T7385] ? __fget_files+0x395/0x410 [ 242.758301][ T7385] ? __fget_files+0x2a/0x410 [ 242.762918][ T7385] ksys_read+0x18f/0x2b0 [ 242.767383][ T7385] ? __pfx_ksys_read+0x10/0x10 [ 242.772711][ T7385] ? do_syscall_64+0x100/0x230 [ 242.777509][ T7385] ? do_syscall_64+0xb6/0x230 [ 242.782307][ T7385] do_syscall_64+0xf3/0x230 [ 242.787121][ T7385] ? clear_bhb_loop+0x35/0x90 [ 242.791920][ T7385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.797928][ T7385] RIP: 0033:0x7f53ef18472c [ 242.802451][ T7385] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 242.822178][ T7385] RSP: 002b:00007f53eff2c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 242.830654][ T7385] RAX: ffffffffffffffda RBX: 00007f53ef376080 RCX: 00007f53ef18472c [ 242.838735][ T7385] RDX: 000000000000000f RSI: 00007f53eff2c0a0 RDI: 0000000000000004 [ 242.846730][ T7385] RBP: 00007f53eff2c090 R08: 0000000000000000 R09: 0000000000000000 [ 242.854738][ T7385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.862728][ T7385] R13: 0000000000000001 R14: 00007f53ef376080 R15: 00007ffde8b3aef8 [ 242.870928][ T7385] [ 243.205486][ T7393] nbd: couldn't find a device at index 131072 [ 244.207943][ T12] veth0: left promiscuous mode [ 244.401752][ T12] dummy0: left promiscuous mode [ 244.468092][ T12] hsr_slave_0: left promiscuous mode [ 244.507890][ T12] hsr_slave_1: left promiscuous mode [ 244.581934][ T7415] syz0: rxe_newlink: already configured on lo [ 244.599738][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.611038][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.668036][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.716702][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.731587][ T7420] rdma_rxe: rxe_newlink: failed to add lo [ 244.886889][ T12] veth1_macvtap: left promiscuous mode [ 244.947247][ T12] veth0_macvtap: left promiscuous mode [ 244.953073][ T12] veth1_vlan: left promiscuous mode [ 245.033448][ T12] veth0_vlan: left promiscuous mode [ 245.719568][ T7437] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.369'. [ 245.744405][ T7437] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.369'. [ 245.772934][ T7437] netlink: 69 bytes leftover after parsing attributes in process `syz.1.369'. [ 247.031363][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.1.376'. [ 247.687839][ T12] team0 (unregistering): Port device team_slave_1 removed [ 247.854755][ T12] team0 (unregistering): Port device team_slave_0 removed [ 248.967031][ T7488] netlink: 48 bytes leftover after parsing attributes in process `syz.2.383'. [ 250.324243][ T7542] FAULT_INJECTION: forcing a failure. [ 250.324243][ T7542] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.357359][ T7542] CPU: 0 UID: 0 PID: 7542 Comm: syz.3.388 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 250.368035][ T7542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 250.378142][ T7542] Call Trace: [ 250.381026][ T7543] bond_slave_0: entered promiscuous mode [ 250.381496][ T7542] [ 250.381513][ T7542] dump_stack_lvl+0x241/0x360 [ 250.387714][ T7543] bond_slave_1: entered promiscuous mode [ 250.390450][ T7542] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.406460][ T7542] ? __pfx__printk+0x10/0x10 [ 250.411231][ T7542] ? vfs_write+0x730/0xd30 [ 250.414354][ T7543] vlan2: entered promiscuous mode [ 250.415707][ T7542] should_fail_ex+0x3b0/0x4e0 [ 250.425509][ T7542] _copy_from_user+0x2f/0xc0 [ 250.430158][ T7542] move_addr_to_kernel+0x82/0x150 [ 250.435212][ T7542] __sys_connect+0xb6/0x2d0 [ 250.439739][ T7542] ? __fget_files+0x2a/0x410 [ 250.444368][ T7542] ? __pfx___sys_connect+0x10/0x10 [ 250.449505][ T7542] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 250.455851][ T7542] ? do_syscall_64+0x100/0x230 [ 250.460817][ T7542] __x64_sys_connect+0x7a/0x90 [ 250.465598][ T7542] do_syscall_64+0xf3/0x230 [ 250.470144][ T7542] ? clear_bhb_loop+0x35/0x90 [ 250.474848][ T7542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.480858][ T7542] RIP: 0033:0x7f9646985d19 [ 250.485285][ T7542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.504926][ T7542] RSP: 002b:00007f964770c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 250.513361][ T7542] RAX: ffffffffffffffda RBX: 00007f9646b75fa0 RCX: 00007f9646985d19 [ 250.521374][ T7542] RDX: 000000000000006e RSI: 0000000020000700 RDI: 0000000000000003 [ 250.529360][ T7542] RBP: 00007f964770c090 R08: 0000000000000000 R09: 0000000000000000 [ 250.537432][ T7542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.545444][ T7542] R13: 0000000000000000 R14: 00007f9646b75fa0 R15: 00007ffcd28ae878 [ 250.553459][ T7542] [ 250.590393][ T7545] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.386'. [ 250.612512][ T7545] netlink: 4560 bytes leftover after parsing attributes in process `syz.1.386'. [ 250.623008][ T7543] bond0: entered promiscuous mode [ 250.647278][ T7545] netlink: 69 bytes leftover after parsing attributes in process `syz.1.386'. [ 250.759015][ T7543] bond0: left promiscuous mode [ 250.764539][ T7543] bond_slave_0: left promiscuous mode [ 250.770215][ T7543] bond_slave_1: left promiscuous mode [ 250.928508][ T7553] FAULT_INJECTION: forcing a failure. [ 250.928508][ T7553] name failslab, interval 1, probability 0, space 0, times 0 [ 250.941653][ T7553] CPU: 1 UID: 0 PID: 7553 Comm: syz.5.389 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 250.952279][ T7553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 250.962472][ T7553] Call Trace: [ 250.965765][ T7553] [ 250.968731][ T7553] dump_stack_lvl+0x241/0x360 [ 250.973577][ T7553] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.978833][ T7553] ? __pfx__printk+0x10/0x10 [ 250.983459][ T7553] should_fail_ex+0x3b0/0x4e0 [ 250.988251][ T7553] should_failslab+0xac/0x100 [ 250.992970][ T7553] ? skb_clone+0x20c/0x390 [ 250.997444][ T7553] kmem_cache_alloc_noprof+0x70/0x380 [ 251.002897][ T7553] skb_clone+0x20c/0x390 [ 251.007263][ T7553] ? dev_queue_xmit_nit+0x3fe/0xca0 [ 251.012613][ T7553] dev_queue_xmit_nit+0x249/0xca0 [ 251.017869][ T7553] ? dev_queue_xmit_nit+0x2b/0xca0 [ 251.023108][ T7553] ? validate_xmit_skb+0x9b8/0xff0 [ 251.028369][ T7553] dev_hard_start_xmit+0x15f/0x7d0 [ 251.033513][ T7553] ? __pfx_validate_xmit_skb+0x10/0x10 [ 251.039110][ T7553] __dev_queue_xmit+0x1b73/0x3f50 [ 251.044261][ T7553] ? netlink_unicast+0x39d/0x990 [ 251.049241][ T7553] ? __sys_sendmsg+0x269/0x350 [ 251.054040][ T7553] ? __dev_queue_xmit+0x2f4/0x3f50 [ 251.059220][ T7553] ? __pfx___dev_queue_xmit+0x10/0x10 [ 251.064722][ T7553] ? __copy_skb_header+0x437/0x5b0 [ 251.069961][ T7553] ? __asan_memcpy+0x40/0x70 [ 251.074608][ T7553] ? __copy_skb_header+0x437/0x5b0 [ 251.079820][ T7553] ? __skb_clone+0x454/0x6c0 [ 251.084456][ T7553] ? skb_clone+0x240/0x390 [ 251.088896][ T7553] __netlink_deliver_tap+0x56b/0x7f0 [ 251.094212][ T7553] ? netlink_deliver_tap+0x2e/0x1b0 [ 251.099424][ T7553] netlink_deliver_tap+0x19d/0x1b0 [ 251.104569][ T7553] netlink_sendskb+0x68/0x140 [ 251.109446][ T7553] netlink_unicast+0x39d/0x990 [ 251.114255][ T7553] ? __pfx_netlink_unicast+0x10/0x10 [ 251.119578][ T7553] netlink_rcv_skb+0x262/0x430 [ 251.124442][ T7553] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 251.129920][ T7553] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 251.135232][ T7553] ? netlink_deliver_tap+0x2e/0x1b0 [ 251.140453][ T7553] netlink_unicast+0x7f6/0x990 [ 251.145240][ T7553] ? __pfx_netlink_unicast+0x10/0x10 [ 251.150582][ T7553] ? __virt_addr_valid+0x45f/0x530 [ 251.155718][ T7553] ? __phys_addr_symbol+0x2f/0x70 [ 251.160761][ T7553] ? __check_object_size+0x47a/0x730 [ 251.166109][ T7553] netlink_sendmsg+0x8e4/0xcb0 [ 251.170918][ T7553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.176249][ T7553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.181552][ T7553] __sock_sendmsg+0x221/0x270 [ 251.186273][ T7553] ____sys_sendmsg+0x52a/0x7e0 [ 251.191069][ T7553] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.196371][ T7553] ? __fget_files+0x2a/0x410 [ 251.200975][ T7553] ? __fget_files+0x2a/0x410 [ 251.205593][ T7553] __sys_sendmsg+0x269/0x350 [ 251.210351][ T7553] ? __pfx_lock_release+0x10/0x10 [ 251.215692][ T7553] ? __pfx___sys_sendmsg+0x10/0x10 [ 251.220945][ T7553] ? __pfx_vfs_write+0x10/0x10 [ 251.225752][ T7553] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 251.232107][ T7553] ? do_syscall_64+0x100/0x230 [ 251.236903][ T7553] ? do_syscall_64+0xb6/0x230 [ 251.241601][ T7553] do_syscall_64+0xf3/0x230 [ 251.246212][ T7553] ? clear_bhb_loop+0x35/0x90 [ 251.250904][ T7553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.256869][ T7553] RIP: 0033:0x7f5638585d19 [ 251.261352][ T7553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.280990][ T7553] RSP: 002b:00007f563936b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.289457][ T7553] RAX: ffffffffffffffda RBX: 00007f5638775fa0 RCX: 00007f5638585d19 [ 251.297554][ T7553] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 000000000000000a [ 251.305557][ T7553] RBP: 00007f563936b090 R08: 0000000000000000 R09: 0000000000000000 [ 251.313575][ T7553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 251.321583][ T7553] R13: 0000000000000000 R14: 00007f5638775fa0 R15: 00007fff3f7dd6b8 [ 251.329590][ T7553] [ 253.905377][ T7614] 9pnet_fd: Insufficient options for proto=fd [ 254.464827][ T29] audit: type=1400 audit(1734419765.025:11): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7619 comm="syz.2.396" saddr=172.30.0.3 daddr=172.20.20.170 netif=wpan0 [ 255.012467][ T7625] ------------[ cut here ]------------ [ 255.019186][ T7625] WARNING: CPU: 0 PID: 7625 at mm/page_table_check.c:209 __page_table_check_ptes_set+0x3bf/0x410 [ 255.029818][ T7625] Modules linked in: [ 255.033863][ T7625] CPU: 0 UID: 0 PID: 7625 Comm: syz.2.396 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 255.044722][ T7625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 255.055911][ T7625] RIP: 0010:__page_table_check_ptes_set+0x3bf/0x410 [ 255.062690][ T7625] Code: 00 6c 49 39 c4 74 1d 48 b8 00 00 00 00 00 00 00 68 49 39 c4 75 1c e8 c0 8c 90 ff eb 0c e8 b9 8c 90 ff eb 05 e8 b2 8c 90 ff 90 <0f> 0b 90 e9 98 fd ff ff e8 a4 8c 90 ff e9 8e fd ff ff e8 0a b2 b1 [ 255.080441][ T7636] netlink: 4 bytes leftover after parsing attributes in process `syz.3.399'. [ 255.085235][ T7625] RSP: 0018:ffffc90003a9f040 EFLAGS: 00010287 [ 255.098185][ T7625] RAX: ffffffff820ee6e0 RBX: d7ffe7fff50ad206 RCX: 0000000000080000 [ 255.106665][ T7625] RDX: ffffc90012cda000 RSI: 000000000001a726 RDI: 000000000001a727 [ 255.115102][ T7625] RBP: ffffc90003a9f0f0 R08: 0000000000000007 R09: ffffffff820ee6ae [ 255.123257][ T7625] R10: 0000000000000003 R11: ffff88807e363c00 R12: 6800000000000000 [ 255.131587][ T7625] R13: 0000000000000000 R14: 1ffff92000753e0c R15: 0000000000000001 [ 255.139672][ T7625] FS: 00007f53efeea6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 255.148716][ T7625] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 255.156398][ T7625] CR2: 00005555578b5808 CR3: 0000000079368000 CR4: 00000000003526f0 [ 255.164507][ T7625] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 255.172603][ T7625] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 255.180760][ T7625] Call Trace: [ 255.184112][ T7625] [ 255.187317][ T7625] ? __warn+0x165/0x4d0 [ 255.191593][ T7625] ? __page_table_check_ptes_set+0x3bf/0x410 [ 255.197797][ T7625] ? report_bug+0x2b3/0x500 [ 255.202362][ T7625] ? __page_table_check_ptes_set+0x3bf/0x410 [ 255.208690][ T7625] ? handle_bug+0x60/0x90 [ 255.213242][ T7625] ? exc_invalid_op+0x1a/0x50 [ 255.218293][ T7625] ? asm_exc_invalid_op+0x1a/0x20 [ 255.223395][ T7625] ? __page_table_check_ptes_set+0x37e/0x410 [ 255.229474][ T7625] ? __page_table_check_ptes_set+0x3b0/0x410 [ 255.235605][ T7625] ? __page_table_check_ptes_set+0x3bf/0x410 [ 255.241693][ T7625] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 255.248139][ T7625] ? __folio_rmap_sanity_checks+0x1b9/0x590 [ 255.254958][ T7625] ? folio_try_share_anon_rmap_pte+0x624/0x12b0 [ 255.261485][ T7625] try_to_migrate_one+0x275f/0x3ee0 [ 255.266849][ T7625] ? __lock_acquire+0x1397/0x2100 [ 255.272072][ T7625] ? try_to_migrate_one+0x8c4/0x3ee0 [ 255.277699][ T7625] ? __pfx_try_to_migrate_one+0x10/0x10 [ 255.283424][ T7625] ? __pfx___might_resched+0x10/0x10 [ 255.289009][ T7625] ? folio_lock_anon_vma_read+0x59/0x650 [ 255.294705][ T7625] ? anon_vma_interval_tree_iter_next+0x335/0x370 [ 255.301266][ T7625] ? __pfx_try_to_migrate_one+0x10/0x10 [ 255.306973][ T7625] ? __pfx_invalid_migration_vma+0x10/0x10 [ 255.312892][ T7625] rmap_walk_anon+0x4be/0x720 [ 255.317797][ T7625] try_to_migrate+0x3de/0x4b0 [ 255.322621][ T7625] ? __pfx_try_to_migrate+0x10/0x10 [ 255.327960][ T7625] ? __pfx_try_to_migrate_one+0x10/0x10 [ 255.333741][ T7625] ? __pfx_folio_not_mapped+0x10/0x10 [ 255.339312][ T7625] ? __pfx_folio_lock_anon_vma_read+0x10/0x10 [ 255.345657][ T7625] ? __pfx_invalid_migration_vma+0x10/0x10 [ 255.351862][ T7625] ? folio_mapped+0xe2/0x210 [ 255.357405][ T7625] migrate_pages_batch+0x1065/0x2a90 [ 255.362749][ T7625] ? do_raw_spin_unlock+0x13c/0x8b0 [ 255.368109][ T7625] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 255.374857][ T7625] ? __pfx_migrate_pages_batch+0x10/0x10 [ 255.380754][ T7625] ? mt_find+0x2a9/0x920 [ 255.385081][ T7625] ? mt_find+0x6c8/0x920 [ 255.389506][ T7625] migrate_pages+0x1d57/0x3380 [ 255.394426][ T7625] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 255.401131][ T7625] ? __pfx_migrate_pages+0x10/0x10 [ 255.406474][ T7625] ? __se_sys_mbind+0x13ff/0x18d0 [ 255.411704][ T7625] ? mas_next_slot+0xdc6/0xea0 [ 255.416827][ T7625] ? __pfx_up_write+0x10/0x10 [ 255.421611][ T7625] __se_sys_mbind+0x145b/0x18d0 [ 255.426542][ T7625] ? __pfx___se_sys_mbind+0x10/0x10 [ 255.431886][ T7625] ? do_futex+0x33b/0x560 [ 255.436285][ T7625] ? __pfx_do_futex+0x10/0x10 [ 255.441187][ T7625] ? __fget_files+0x2a/0x410 [ 255.445859][ T7625] ? do_syscall_64+0x100/0x230 [ 255.450828][ T7625] ? __x64_sys_mbind+0x21/0xf0 [ 255.455674][ T7625] do_syscall_64+0xf3/0x230 [ 255.461207][ T7625] ? clear_bhb_loop+0x35/0x90 [ 255.466039][ T7625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.472139][ T7625] RIP: 0033:0x7f53ef185d19 [ 255.477299][ T7625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.497330][ T7625] RSP: 002b:00007f53efeea038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 255.505814][ T7625] RAX: ffffffffffffffda RBX: 00007f53ef376240 RCX: 00007f53ef185d19 [ 255.513903][ T7625] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000000020001000 [ 255.521989][ T7625] RBP: 00007f53ef201a20 R08: 0000000000000000 R09: 0000000000000002 [ 255.530079][ T7625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.538133][ T7625] R13: 0000000000000000 R14: 00007f53ef376240 R15: 00007ffde8b3aef8 [ 255.546171][ T7625] [ 255.549303][ T7625] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 255.556631][ T7625] CPU: 0 UID: 0 PID: 7625 Comm: syz.2.396 Not tainted 6.13.0-rc3-syzkaller-00017-gf44d154d6e3d #0 [ 255.567624][ T7625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 255.577717][ T7625] Call Trace: [ 255.581031][ T7625] [ 255.584085][ T7625] dump_stack_lvl+0x241/0x360 [ 255.589284][ T7625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.594712][ T7625] ? __pfx__printk+0x10/0x10 [ 255.599366][ T7625] ? _printk+0xd5/0x120 [ 255.603604][ T7625] ? __init_begin+0x41000/0x41000 [ 255.608699][ T7625] ? vscnprintf+0x5d/0x90 [ 255.613085][ T7625] panic+0x349/0x880 [ 255.617036][ T7625] ? __warn+0x174/0x4d0 [ 255.621251][ T7625] ? __pfx_panic+0x10/0x10 [ 255.625827][ T7625] __warn+0x344/0x4d0 [ 255.629863][ T7625] ? __page_table_check_ptes_set+0x3bf/0x410 [ 255.635991][ T7625] report_bug+0x2b3/0x500 [ 255.640382][ T7625] ? __page_table_check_ptes_set+0x3bf/0x410 [ 255.646541][ T7625] handle_bug+0x60/0x90 [ 255.650764][ T7625] exc_invalid_op+0x1a/0x50 [ 255.655323][ T7625] asm_exc_invalid_op+0x1a/0x20 [ 255.660327][ T7625] RIP: 0010:__page_table_check_ptes_set+0x3bf/0x410 [ 255.667241][ T7625] Code: 00 6c 49 39 c4 74 1d 48 b8 00 00 00 00 00 00 00 68 49 39 c4 75 1c e8 c0 8c 90 ff eb 0c e8 b9 8c 90 ff eb 05 e8 b2 8c 90 ff 90 <0f> 0b 90 e9 98 fd ff ff e8 a4 8c 90 ff e9 8e fd ff ff e8 0a b2 b1 [ 255.688031][ T7625] RSP: 0018:ffffc90003a9f040 EFLAGS: 00010287 [ 255.694145][ T7625] RAX: ffffffff820ee6e0 RBX: d7ffe7fff50ad206 RCX: 0000000000080000 [ 255.702442][ T7625] RDX: ffffc90012cda000 RSI: 000000000001a726 RDI: 000000000001a727 [ 255.710673][ T7625] RBP: ffffc90003a9f0f0 R08: 0000000000000007 R09: ffffffff820ee6ae [ 255.719067][ T7625] R10: 0000000000000003 R11: ffff88807e363c00 R12: 6800000000000000 [ 255.727267][ T7625] R13: 0000000000000000 R14: 1ffff92000753e0c R15: 0000000000000001 [ 255.735394][ T7625] ? __page_table_check_ptes_set+0x37e/0x410 [ 255.741714][ T7625] ? __page_table_check_ptes_set+0x3b0/0x410 [ 255.748175][ T7625] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 255.754696][ T7625] ? __folio_rmap_sanity_checks+0x1b9/0x590 [ 255.760658][ T7625] ? folio_try_share_anon_rmap_pte+0x624/0x12b0 [ 255.767064][ T7625] try_to_migrate_one+0x275f/0x3ee0 [ 255.772416][ T7625] ? __lock_acquire+0x1397/0x2100 [ 255.777480][ T7625] ? try_to_migrate_one+0x8c4/0x3ee0 [ 255.782829][ T7625] ? __pfx_try_to_migrate_one+0x10/0x10 [ 255.788429][ T7625] ? __pfx___might_resched+0x10/0x10 [ 255.793756][ T7625] ? folio_lock_anon_vma_read+0x59/0x650 [ 255.799465][ T7625] ? anon_vma_interval_tree_iter_next+0x335/0x370 [ 255.805923][ T7625] ? __pfx_try_to_migrate_one+0x10/0x10 [ 255.811499][ T7625] ? __pfx_invalid_migration_vma+0x10/0x10 [ 255.817505][ T7625] rmap_walk_anon+0x4be/0x720 [ 255.822224][ T7625] try_to_migrate+0x3de/0x4b0 [ 255.827017][ T7625] ? __pfx_try_to_migrate+0x10/0x10 [ 255.832242][ T7625] ? __pfx_try_to_migrate_one+0x10/0x10 [ 255.837906][ T7625] ? __pfx_folio_not_mapped+0x10/0x10 [ 255.843500][ T7625] ? __pfx_folio_lock_anon_vma_read+0x10/0x10 [ 255.849675][ T7625] ? __pfx_invalid_migration_vma+0x10/0x10 [ 255.855606][ T7625] ? folio_mapped+0xe2/0x210 [ 255.860214][ T7625] migrate_pages_batch+0x1065/0x2a90 [ 255.865522][ T7625] ? do_raw_spin_unlock+0x13c/0x8b0 [ 255.870768][ T7625] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 255.877562][ T7625] ? __pfx_migrate_pages_batch+0x10/0x10 [ 255.883487][ T7625] ? mt_find+0x2a9/0x920 [ 255.887758][ T7625] ? mt_find+0x6c8/0x920 [ 255.892134][ T7625] migrate_pages+0x1d57/0x3380 [ 255.896931][ T7625] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 255.903542][ T7625] ? __pfx_migrate_pages+0x10/0x10 [ 255.908667][ T7625] ? __se_sys_mbind+0x13ff/0x18d0 [ 255.913725][ T7625] ? mas_next_slot+0xdc6/0xea0 [ 255.918612][ T7625] ? __pfx_up_write+0x10/0x10 [ 255.923406][ T7625] __se_sys_mbind+0x145b/0x18d0 [ 255.928324][ T7625] ? __pfx___se_sys_mbind+0x10/0x10 [ 255.933632][ T7625] ? do_futex+0x33b/0x560 [ 255.938078][ T7625] ? __pfx_do_futex+0x10/0x10 [ 255.942806][ T7625] ? __fget_files+0x2a/0x410 [ 255.947522][ T7625] ? do_syscall_64+0x100/0x230 [ 255.952503][ T7625] ? __x64_sys_mbind+0x21/0xf0 [ 255.957295][ T7625] do_syscall_64+0xf3/0x230 [ 255.961826][ T7625] ? clear_bhb_loop+0x35/0x90 [ 255.966519][ T7625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.972525][ T7625] RIP: 0033:0x7f53ef185d19 [ 255.976953][ T7625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.996579][ T7625] RSP: 002b:00007f53efeea038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 256.005024][ T7625] RAX: ffffffffffffffda RBX: 00007f53ef376240 RCX: 00007f53ef185d19 [ 256.013042][ T7625] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000000020001000 [ 256.021044][ T7625] RBP: 00007f53ef201a20 R08: 0000000000000000 R09: 0000000000000002 [ 256.029045][ T7625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.037048][ T7625] R13: 0000000000000000 R14: 00007f53ef376240 R15: 00007ffde8b3aef8 [ 256.045054][ T7625] [ 256.048495][ T7625] Kernel Offset: disabled [ 256.053376][ T7625] Rebooting in 86400 seconds..